Trojan.DownLoader12.29027

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##6.40.185':445
'69.##6.41.133':445
'69.##6.132.120':139
'69.##6.133.166':139
'69.##6.10.10':445
'69.##6.63.99':445
'69.##6.91.63':445
'69.##6.137.9':445
'69.##6.245.63':445
'69.##6.32.135':139
'69.##6.21.109':139
'69.##6.38.253':139
'69.##6.237.48':139
'69.##6.194.179':139
'69.##6.107.112':139
'69.##6.47.118':139
'69.##6.98.177':139
'69.#26.79.3':139
'69.##6.116.91':445
'69.##6.188.72':445
'69.##6.54.102':445
'69.##6.21.241':445
'69.##6.43.204':445
'69.##6.33.55':445
'69.##6.131.154':445
'69.##6.177.31':445
'69.##6.10.25':445
'69.##6.26.234':445
'69.##6.69.115':445
'69.##6.146.184':445
'69.##6.15.12':445
'69.##6.227.68':445
'69.##6.5.146':445
'69.##6.184.211':445
'69.##6.26.116':445
'69.#26.9.6':445
'69.##6.217.27':445
'69.##6.227.31':139
'69.#26.9.6':139
'69.##6.217.27':139
'69.##6.146.184':139
'69.##6.5.146':139
'69.##6.184.211':139
'69.##6.43.204':139
'69.##6.188.72':139
'69.##6.26.116':139
'69.##6.21.241':139
'69.##6.245.63':139
'69.##6.63.99':139
'69.##6.10.10':139
'69.##6.137.9':139
'69.##6.91.63':139
'69.##6.227.68':139
'69.##6.69.115':139
'69.##6.116.91':139
'69.##6.15.12':139
'69.##6.54.102':139
'69.##6.101.233':139
'69.##6.245.101':139
'69.##6.91.13':139
'69.##6.222.74':139
'69.##6.207.91':139
'69.##6.80.230':139
'69.##6.17.81':139
'69.##6.199.20':139
'69.##6.230.198':139
'69.##6.26.234':139
'69.##6.131.154':139
'69.##6.33.55':139
'69.##6.10.25':139
'69.##6.177.31':139
'69.##6.119.69':139
'69.##6.208.71':139
'69.#26.6.15':139
'69.##6.164.158':139
'69.#26.6.15':445
'69.##6.162.142':139
'69.##6.199.162':139
'69.##6.53.59':139
'69.##6.40.18':139
'69.##6.240.199':139
'69.##6.122.37':139
'69.##6.105.64':139
'69.##6.103.240':139
'69.#26.83.7':139
'69.##6.186.13':139
'69.##6.8.250':139
'69.##6.11.31':139
'69.##6.78.37':139
'69.##6.109.141':139
'69.##6.49.120':139
'69.##6.83.52':139
'69.##6.196.109':139
'69.##6.102.63':139
'69.##6.223.116':139
'69.##6.80.187':139
'69.##6.134.223':139
'69.##6.255.161':139
'69.##6.54.227':139
'69.##6.14.137':139
'69.##6.187.118':139
'69.##6.143.187':139
'69.##6.114.109':139
'69.##6.118.114':139
'69.##6.79.31':139
'69.##6.130.168':139
'69.##6.87.223':139
'69.##6.31.88':139
'69.##6.213.7':139
'69.##6.177.15':139
'69.##6.21.54':139
'69.##6.162.31':139
'69.##6.29.250':139
'69.##6.30.195':139
'69.##6.17.81':445
'69.##6.227.31':445
'69.##6.230.198':445
'69.##6.80.230':445
'69.##6.38.253':445
'69.##6.21.109':445
'69.##6.194.179':445
'69.##6.237.48':445
'69.##6.32.135':445
'69.##6.208.71':445
'69.##6.91.13':445
'69.##6.164.158':445
'69.##6.119.69':445
'69.##6.222.74':445
'69.##6.207.91':445
'69.##6.199.20':445
'69.##6.101.233':445
'69.##6.245.101':445
'69.##6.98.177':445
'69.##6.117.86':139
'69.##6.17.230':139
'69.#26.8.22':139
'69.##6.91.44':139
'69.##6.112.27':139
'69.##6.155.8':139
'69.##6.42.54':139
'69.##6.155.22':139
'69.##6.77.116':139
'69.##6.47.118':445
'69.##6.132.120':445
'69.#26.79.3':445
'69.##6.107.112':445
'69.##6.133.166':445
'69.##6.165.74':139
'69.##6.11.36':139
'69.##6.210.83':139
'69.##6.74.16':139
'69.##6.41.133':139
'69.##6.64.239':139
'69.##6.153.64':139
'69.##6.36.68':139
'69.##6.239.69':139
'69.##6.192.223':445
'69.##6.209.73':445
'69.##6.30.90':445
'69.##6.224.29':445
'69.##6.73.224':445
'69.##6.156.91':139
'69.##6.145.130':139
'69.##6.222.72':139
'69.##6.219.222':139
'69.##6.27.37':139
'69.##6.224.150':139
'69.##6.233.192':139
'69.##6.110.59':139
'69.#26.5.11':139
'69.##6.78.230':445
'69.##6.204.118':445
'69.##6.240.140':445
'69.##6.38.229':445
'69.##6.14.18':445
'69.##6.114.28':445
'69.##6.16.137':445
'69.##6.6.139':445
'69.##6.150.217':445
'69.##6.207.1':445
'69.##6.76.72':445
'69.##6.148.197':445
'69.##6.81.23':445
'69.##6.141.254':445
'69.##6.241.213':445
'69.##6.111.51':445
'69.##6.133.80':445
'69.##6.201.241':445
'69.##6.153.224':445
'69.##6.77.98':139
'69.##6.201.241':139
'69.##6.153.224':139
'69.##6.148.197':139
'69.##6.241.213':139
'69.##6.111.51':139
'69.##6.14.18':139
'69.##6.204.118':139
'69.##6.133.80':139
'69.##6.38.229':139
'69.##6.78.230':139
'69.##6.73.224':139
'69.##6.209.73':139
'69.##6.81.23':139
'69.##6.224.29':139
'69.##6.141.254':139
'69.##6.76.72':139
'69.##6.30.90':139
'69.##6.192.223':139
'69.##6.240.140':139
'69.##6.123.207':139
'69.##6.119.12':139
'69.##6.56.211':139
'69.##6.102.6':139
'69.##6.56.34':139
'69.##6.115.232':139
'69.##6.141.251':139
'69.##6.124.129':139
'69.##6.122.137':139
'69.##6.207.1':139
'69.##6.16.137':139
'69.##6.114.28':139
'69.##6.150.217':139
'69.##6.6.139':139
'69.##6.191.234':139
'69.##6.59.76':139
'69.##6.139.41':139
'69.##6.44.250':139
'69.##6.139.41':445
'69.##6.30.138':139
'69.##6.38.175':139
'69.##6.144.81':139
'69.##6.185.181':139
'69.##6.155.38':139
'69.##6.51.95':139
'69.##6.15.130':139
'69.##6.202.154':139
'69.##6.162.202':139
'69.##6.56.211':9988
'69.##6.219.222':9988
'69.##6.124.129':9988
'69.##6.102.6':9988
'69.##6.119.12':9988
'69.##6.94.133':139
'69.##6.216.42':139
'69.##6.56.34':9988
'69.##6.73.232':139
'69.##6.93.133':139
'69.##6.162.202':445
'69.##6.51.95':445
'69.##6.155.38':445
'69.##6.202.154':445
'69.##6.15.130':445
'69.#26.1.35':445
'69.##6.40.185':139
'69.##6.93.133':445
'69.##6.196.206':445
'69.##6.73.232':445
'69.##6.94.133':445
'69.##6.196.206':139
'69.#26.1.35':139
'69.##6.216.42':445
'69.##6.30.138':445
'69.##6.38.175':445
'69.##6.144.81':445
'69.##6.185.181':445
'69.##6.222.72':9988
'69.##6.141.251':445
'69.##6.77.98':445
'69.##6.122.137':445
'69.##6.115.232':445
'69.##6.222.72':445
'69.##6.145.130':445
'69.##6.27.37':445
'69.##6.219.222':445
'69.##6.156.91':445
'69.##6.59.76':445
'69.##6.56.211':445
'69.##6.44.250':445
'69.##6.191.234':445
'69.##6.102.6':445
'69.##6.56.34':445
'69.##6.124.129':445
'69.##6.123.207':445
'69.##6.119.12':445
'69.##6.110.59':445
'69.##6.38.229':9988
'69.##6.133.80':9988
'69.##6.78.230':9988
'69.##6.111.51':9988
'69.##6.14.18':9988
'69.##6.191.234':9988
'69.##6.77.98':9988
'69.##6.44.250':9988
'69.##6.16.137':9988
'69.##6.233.192':445
'69.##6.36.68':445
'69.#26.5.11':445
'69.##6.224.150':445
'69.##6.239.69':445
'69.##6.141.254':9988
'69.##6.209.73':9988
'69.##6.64.239':445
'69.##6.153.64':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней