Trojan.DownLoader12.28889

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##0.227.212':139
'62.##0.16.180':139
'62.##0.82.191':139
'62.##0.33.76':139
'62.##0.68.179':139
'62.##0.162.39':139
'62.##0.18.155':139
'62.##0.54.223':139
'62.##0.35.197':139
'62.##0.51.254':139
'62.##0.114.22':139
'62.##0.93.124':139
'62.##0.149.93':139
'62.##0.251.89':139
'62.##0.243.84':139
'62.##0.175.27':139
'62.##0.31.129':139
'62.##0.189.82':139
'62.##0.129.81':139
'62.##0.30.26':139
'62.##0.112.41':139
'62.##0.144.214':139
'62.##0.189.82':445
'62.##0.114.22':445
'62.##0.31.129':445
'62.##0.112.41':445
'62.##0.129.81':445
'62.##0.227.212':445
'62.##0.16.180':445
'62.##0.82.191':445
'62.##0.33.76':445
'62.##0.68.179':445
'62.##0.30.26':445
'62.##0.132.115':139
'62.##0.26.29':139
'62.##0.140.160':139
'62.##0.120.145':139
'62.##0.67.120':139
'62.##0.93.124':445
'62.##0.149.93':445
'62.##0.251.89':445
'62.##0.243.84':445
'62.##0.175.27':445
'62.##0.145.2':139
'62.##0.191.59':139
'62.##0.36.64':139
'62.##0.191.5':139
'62.##0.229.190':139
'62.##0.54.204':445
'62.##0.147.247':445
'62.##0.10.197':139
'62.##0.43.74':139
'62.##0.85.212':139
'62.#90.5.6':139
'62.##0.210.235':139
'62.##0.39.133':139
'62.##0.103.146':139
'62.##0.64.77':139
'62.##0.11.164':139
'62.#90.54.9':139
'62.#90.7.20':139
'62.##0.207.191':139
'62.##0.75.160':139
'62.##0.82.115':139
'62.##0.59.193':445
'62.##0.229.190':445
'62.##0.36.64':445
'62.##0.191.5':445
'62.#90.7.20':445
'62.#90.5.6':445
'62.##0.85.212':445
'62.##0.10.197':445
'62.##0.43.74':445
'62.##0.145.2':445
'62.##0.191.59':445
'62.#90.54.9':445
'62.##0.11.164':445
'62.##0.103.146':445
'62.##0.64.77':445
'62.##0.133.206':445
'62.##0.18.50':445
'62.##0.82.115':445
'62.##0.207.191':445
'62.##0.75.160':445
'62.##0.210.235':445
'62.##0.39.133':445
'62.##0.206.49':445
'62.##0.144.205':445
'62.##0.50.102':445
'62.##0.146.129':445
'62.##0.154.176':445
'62.##0.144.215':139
'62.##0.85.165':139
'62.##0.174.33':139
'62.##0.165.223':139
'62.##0.33.75':139
'62.##0.150.113':445
'62.##0.195.56':445
'62.##0.49.124':445
'62.##0.108.237':445
'62.##0.73.28':445
'62.##0.91.72':445
'62.##0.246.162':445
'62.##0.155.237':445
'62.##0.7.210':445
'62.##0.52.20':445
'62.##0.200.148':445
'62.##0.137.129':139
'62.##0.138.138':139
'62.##0.106.6':139
'62.##0.91.30':139
'62.##0.58.120':139
'62.##0.235.192':139
'62.##0.95.67':139
'62.##0.136.80':139
'62.##0.235.215':139
'62.##0.44.56':139
'62.#90.78.0':139
'62.##0.177.82':139
'62.##0.157.164':139
'62.##0.27.106':139
'62.##0.180.128':139
'62.##0.132.118':139
'62.##0.177.10':139
'62.##0.247.151':139
'62.##0.83.125':139
'62.##0.40.200':139
'62.##0.193.139':139
'62.##0.200.182':139
'62.##0.200.152':139
'62.##0.112.84':139
'62.##0.117.244':139
'62.##0.107.152':139
'62.##0.117.123':139
'62.##0.73.28':139
'62.##0.91.72':139
'62.##0.28.47':139
'62.##0.186.152':139
'62.##0.131.155':139
'62.##0.26.29':445
'62.##0.162.39':445
'62.##0.18.155':445
'62.##0.54.223':445
'62.##0.35.197':445
'62.##0.51.254':445
'62.##0.140.160':445
'62.##0.132.115':445
'62.##0.67.120':445
'62.##0.144.214':445
'62.##0.120.145':445
'62.##0.108.237':139
'62.##0.117.123':445
'62.##0.117.244':445
'62.##0.107.152':445
'62.##0.206.49':139
'62.##0.144.205':139
'62.##0.131.155':445
'62.##0.28.47':445
'62.##0.186.152':445
'62.##0.200.152':445
'62.##0.112.84':445
'62.##0.50.102':139
'62.##0.200.148':139
'62.##0.7.210':139
'62.##0.52.20':139
'62.##0.195.56':139
'62.##0.49.124':139
'62.##0.146.129':139
'62.##0.154.176':139
'62.##0.150.113':139
'62.##0.246.162':139
'62.##0.155.237':139
'62.##0.18.50':139
'62.##0.19.202':445
'62.##0.169.185':445
'62.##0.132.135':445
'62.##0.231.139':445
'62.##0.140.130':445
'62.##0.154.58':445
'62.##0.80.144':445
'62.##0.95.209':445
'62.##0.137.132':445
'62.##0.209.119':445
'62.##0.119.98':445
'62.##0.80.22':139
'62.##0.156.80':139
'62.##0.22.13':139
'62.##0.81.98':139
'62.##0.14.151':139
'62.##0.27.239':445
'62.##0.140.7':445
'62.##0.13.238':139
'62.##0.204.69':139
'62.##0.45.86':139
'62.##0.95.61':445
'62.##0.192.151':445
'62.##0.3.133':445
'62.##0.210.202':445
'62.##0.61.253':445
'62.##0.36.226':445
'62.##0.16.169':445
'62.##0.61.143':445
'62.##0.167.1':445
'62.#90.9.3':445
'62.##0.99.251':445
'62.##0.157.136':445
'62.##0.75.93':445
'62.##0.76.240':445
'62.##0.156.166':445
'62.##0.154.197':445
'62.##0.148.40':445
'62.##0.137.99':445
'62.##0.193.82':445
'62.##0.17.159':445
'62.##0.232.121':445
'62.##0.158.232':445
'62.##0.154.197':139
'62.##0.148.40':139
'62.##0.95.61':139
'62.##0.154.58':139
'62.##0.80.144':139
'62.##0.232.121':139
'62.##0.158.232':139
'62.##0.76.240':139
'62.##0.75.93':139
'62.##0.156.166':139
'62.##0.95.209':139
'62.##0.140.7':139
'62.##0.132.135':139
'62.##0.27.239':139
'62.##0.119.98':139
'62.##0.231.139':139
'62.##0.137.132':139
'62.##0.209.119':139
'62.##0.169.185':139
'62.##0.140.130':139
'62.##0.19.202':139
'62.##0.17.159':139
'62.##0.20.72':139
'62.##0.64.139':139
'62.##0.63.211':139
'62.##0.16.169':139
'62.##0.61.143':139
'62.##0.104.108':139
'62.#90.0.96':139
'62.##0.28.102':139
'62.##0.70.237':139
'62.##0.228.61':139
'62.##0.167.1':139
'62.##0.61.253':139
'62.##0.36.226':139
'62.##0.157.136':139
'62.##0.193.82':139
'62.##0.137.99':139
'62.#90.9.3':139
'62.##0.99.251':139
'62.##0.3.133':139
'62.##0.210.202':139
'62.##0.192.151':139
'62.##0.164.73':445
'62.##0.41.174':445
'62.##0.73.77':445
'62.##0.29.254':139
'62.##0.154.93':445
'62.##0.199.70':445
'62.##0.238.198':445
'62.#90.71.4':445
'62.##0.202.197':445
'62.##0.205.26':445
'62.##0.36.194':139
'62.##0.25.63':139
'62.##0.112.37':139
'62.##0.154.73':139
'62.##0.193.45':139
'62.##0.72.50':139
'62.##0.37.28':139
'62.##0.116.181':139
'62.##0.154.244':139
'62.##0.129.227':139
'62.##0.149.206':139
'62.##0.36.249':445
'62.##0.116.181':445
'62.##0.36.194':445
'62.##0.37.28':445
'62.##0.149.206':445
'62.##0.154.244':445
'62.##0.59.193':139
'62.##0.133.206':139
'62.##0.147.247':139
'62.##0.29.254':445
'62.##0.54.204':139
'62.##0.129.227':445
'62.##0.50.150':445
'62.##0.66.197':445
'62.##0.160.104':445
'62.##0.205.56':445
'62.##0.36.148':445
'62.##0.25.63':445
'62.##0.112.37':445
'62.##0.154.73':445
'62.##0.193.45':445
'62.##0.72.50':445
'62.##0.45.86':445
'62.##0.13.238':445
'62.##0.204.69':445
'62.##0.80.22':445
'62.##0.156.80':445
'62.##0.76.240':9988
'62.##0.232.121':9988
'62.##0.156.166':9988
'62.##0.27.239':9988
'62.##0.209.119':9988
'62.##0.22.13':445
'62.##0.70.237':445
'62.##0.228.61':445
'62.##0.64.139':445
'62.##0.63.211':445
'62.##0.20.72':445
'62.##0.81.98':445
'62.##0.14.151':445
'62.#90.0.96':445
'62.##0.28.102':445
'62.##0.104.108':445
'62.##0.193.82':9988
'62.##0.238.198':139
'62.##0.36.249':139
'62.##0.199.70':139
'62.##0.205.26':139
'62.#90.71.4':139
'62.##0.50.150':139
'62.##0.66.197':139
'62.##0.160.104':139
'62.##0.205.56':139
'62.##0.36.148':139
'62.##0.202.197':139
'62.##0.167.1':9988
'62.##0.61.143':9988
'62.##0.3.133':9988
'62.##0.61.253':9988
'62.##0.36.226':9988
'62.##0.164.73':139
'62.##0.41.174':139
'62.##0.73.77':139
'62.##0.20.72':9988
'62.##0.154.93':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней