Trojan.DownLoader12.28901

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#10.146.18':445
'22#.#10.54.97':445
'22#.#10.231.42':445
'22#.#10.69.203':445
'22#.#10.21.121':445
'22#.#10.139.21':445
'22#.#10.168.65':445
'22#.#10.170.11':445
'22#.#10.42.221':445
'22#.#10.154.150':139
'22#.#10.5.177':139
'22#.#10.187.52':139
'22#.#10.149.62':139
'22#.#10.33.172':445
'22#.#10.56.17':445
'22#.#10.98.124':445
'22#.#10.172.59':445
'22#.#10.155.51':445
'22#.#10.48.128':445
'22#.#10.187.52':445
'22#.#10.133.186':445
'22#.#10.46.133':445
'22#.#10.5.177':445
'22#.#10.155.213':139
'22#.#10.149.62':445
'22#.#10.154.150':445
'22#.#10.186.96':445
'22#.#10.97.90':445
'22#.#10.127.254':445
'22#.#10.162.192':445
'22#.#10.21.111':445
'22#.#10.21.18':445
'22#.#10.96.220':445
'22#.#10.28.128':445
'22#.#10.142.146':445
'22#.#10.33.172':139
'22#.#10.56.17':139
'22#.#10.98.124':139
'22#.#10.172.59':139
'22#.#10.69.203':139
'22#.#10.146.18':139
'22#.#10.42.221':139
'22#.#10.231.42':139
'22#.#10.90.206':445
'22#.#10.53.137':445
'22#.#10.103.82':445
'22#.#10.27.18':445
'22#.#10.23.150':445
'22#.#10.37.132':445
'22#.#10.164.22':445
'22#.#10.144.102':445
'22#.#10.120.144':445
'22#.#10.54.97':139
'22#.#10.21.18':139
'22#.#10.96.220':139
'22#.#10.28.128':139
'22#.#10.142.146':139
'22#.#10.46.133':139
'22#.#10.48.128':139
'22#.#10.186.96':139
'22#.#10.133.186':139
'22#.#10.127.254':139
'22#.#10.21.121':139
'22#.#10.139.21':139
'22#.#10.168.65':139
'22#.#10.170.11':139
'22#.#10.21.111':139
'22#.#10.97.90':139
'22#.#10.155.51':139
'22#.#10.162.192':139
'22#.#10.36.102':139
'22#.#10.148.132':139
'22#.#10.78.249':139
'22#.#10.187.249':139
'22#.#10.141.235':139
'22#.#10.237.137':139
'22#.#10.100.254':139
'22#.#10.28.180':139
'22#.#10.5.12':139
'22#.#10.127.22':139
'22#.#10.254.118':445
'22#.#10.82.81':445
'22#.#10.194.115':445
'22#.#10.118.132':445
'22#.#10.234.162':139
'22#.#10.83.75':139
'22#.#10.121.134':445
'22#.#10.163.66':139
'22#.#10.117.156':139
'22#.#10.245.194':139
'22#.#10.44.207':139
'22#.#10.170.10':139
'22#.#10.94.27':139
'22#.#10.198.94':139
'22#.#10.249.198':139
'22#.#10.106.184':139
'22#.#10.104.81':139
'22#.#10.10.140':139
'22#.#10.190.85':139
'22#.#10.106.55':139
'22#.#10.217.130':139
'22#.#10.120.70':139
'22#.#10.49.242':139
'22#.#10.38.27':139
'22#.#10.174.110':139
'22#.#10.153.187':139
'22#.#10.179.196':139
'22#.#10.124.44':139
'22#.#10.249.150':139
'22#.#10.114.89':139
'22#.#10.118.132':139
'22#.#10.254.118':139
'22#.#10.182.14':139
'22#.#10.194.115':139
'22#.#10.151.87':139
'22#.#10.49.30':139
'22#.#10.221.18':139
'22#.#10.220.50':139
'22#.#10.123.158':139
'22#.#10.61.23':139
'22#.#10.50.30':139
'22#.#10.51.211':139
'22#.#10.62.35':139
'22#.#10.82.81':139
'22#.#10.151.87':445
'22#.#10.249.150':445
'22#.#10.61.23':445
'22#.#10.50.30':445
'22#.#10.124.44':445
'22#.#10.182.14':445
'22#.#10.114.89':445
'22#.#10.179.196':445
'22#.#10.62.35':445
'22#.#10.36.102':445
'22#.#10.220.50':445
'22#.#10.121.134':139
'22#.#10.155.213':445
'22#.#10.221.18':445
'22#.#10.51.211':445
'22#.#10.123.158':445
'22#.#10.49.30':445
'22#.#10.17.239':445
'22#.#10.10.29':139
'22#.#10.5.76':139
'22#.#10.112.148':139
'22#.#10.216.144':139
'22#.#10.35.110':139
'22#.#10.187.85':445
'22#.#10.64.39':139
'22#.#10.180.27':139
'22#.#10.188.5':139
'22#.#10.52.144':139
'22#.#10.199.5':139
'22#.#10.236.69':139
'22#.#10.143.236':139
'22#.#10.161.77':139
'22#.#10.5.192':139
'22#.#10.208.46':139
'22#.#10.123.207':139
'22#.#10.46.99':445
'22#.#10.175.91':445
'22#.#10.1.85':445
'22#.#10.18.91':445
'22#.#10.218.254':445
'22#.#10.138.124':445
'22#.#10.60.80':445
'22#.#10.244.90':445
'22#.#10.7.73':445
'22#.#10.12.210':445
'22#.#10.191.166':445
'22#.#10.166.187':445
'22#.#10.81.93':445
'22#.#10.101.88':445
'22#.#10.213.127':445
'22#.#10.125.95':445
'22#.#10.96.119':445
'22#.#10.38.158':445
'22#.#10.18.91':139
'22#.#10.218.254':139
'22#.#10.125.95':139
'22#.#10.12.210':139
'22#.#10.244.90':139
'22#.#10.7.73':139
'22#.#10.175.91':139
'22#.#10.1.85':139
'22#.#10.213.127':139
'22#.#10.46.99':139
'22#.#10.101.88':139
'22#.#10.191.166':139
'22#.#10.187.85':139
'22#.#10.96.119':139
'22#.#10.38.158':139
'22#.#10.166.187':139
'22#.#10.81.93':139
'22#.#10.138.124':139
'22#.#10.47.119':139
'22#.#10.255.218':139
'22#.#10.205.65':139
'22#.#10.20.220':139
'22#.#10.165.46':139
'22#.#10.244.107':139
'22#.#10.75.159':139
'22#.#10.2.191':139
'22#.#10.206.243':139
'22#.#10.40.177':139
'22#.#10.245.13':139
'22#.#10.60.80':139
'22#.#10.52.84':139
'22#.#10.192.178':139
'22#.#10.66.222':139
'22#.#10.45.12':139
'22#.#10.196.18':139
'22#.#10.52.84':445
'22#.#10.225.112':139
'22#.#10.20.162':139
'22#.#10.31.237':139
'22#.#10.83.206':139
'22#.#10.27.18':139
'22#.#10.23.150':139
'22#.#10.238.167':139
'22#.#10.17.239':139
'22#.#10.94.132':139
'22#.#10.5.192':9988
'22#.#10.28.63':139
'22#.#10.20.220':9988
'22#.#10.244.107':9988
'22#.#10.131.241':139
'22#.#10.178.131':139
'22#.#10.211.162':139
'22#.#10.78.110':139
'22#.#10.53.137':139
'22#.#10.94.132':445
'22#.#10.31.237':445
'22#.#10.131.241':445
'22#.#10.178.131':445
'22#.#10.20.162':445
'22#.#10.238.167':445
'22#.#10.83.206':445
'22#.#10.225.112':445
'22#.#10.78.110':445
'22#.#10.120.144':139
'22#.#10.37.132':139
'22#.#10.103.82':139
'22#.#10.144.102':139
'22#.#10.28.63':445
'22#.#10.211.162':445
'22#.#10.164.22':139
'22#.#10.90.206':139
'22#.#10.75.159':445
'22#.#10.2.191':445
'22#.#10.47.119':445
'22#.#10.255.218':445
'22#.#10.236.69':445
'22#.#10.143.236':445
'22#.#10.165.46':445
'22#.#10.244.107':445
'22#.#10.20.220':445
'22#.#10.45.12':445
'22#.#10.196.18':445
'22#.#10.40.177':445
'22#.#10.245.13':445
'22#.#10.206.243':445
'22#.#10.205.65':445
'22#.#10.192.178':445
'22#.#10.66.222':445
'22#.#10.52.144':445
'22#.#10.180.27':445
'22#.#10.35.110':445
'22#.#10.5.76':445
'22#.#10.64.39':445
'22#.#10.96.119':9988
'22#.#10.45.12':9988
'22#.#10.38.158':9988
'22#.#10.81.93':9988
'22#.#10.10.29':445
'22#.#10.123.207':445
'22#.#10.161.77':445
'22#.#10.199.5':445
'22#.#10.208.46':445
'22#.#10.112.148':445
'22#.#10.216.144':445
'22#.#10.5.192':445
'22#.#10.188.5':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней