Trojan.DownLoader12.29030

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##.211.210':445
'58.##.130.223':445
'58.##.51.191':445
'58.##.104.191':445
'58.##.218.173':445
'58.#0.9.236':445
'58.#0.89.74':139
'58.##.178.85':445
'58.##.100.164':445
'58.##.85.167':445
'58.##.65.129':445
'58.#0.67.90':445
'58.##.195.171':445
'58.##.69.222':445
'58.##.126.158':445
'58.#0.5.2':445
'58.##.18.117':445
'58.##.220.206':445
'58.##.15.136':445
'58.##.159.195':445
'58.##.48.159':445
'58.#0.32.95':139
'58.##.145.145':139
'58.##.168.141':139
'58.##.183.67':445
'58.#0.18.87':445
'58.#0.244.7':445
'58.##.245.190':139
'58.##.141.190':139
'58.##.190.210':139
'58.##.53.181':139
'58.#0.22.7':139
'58.##.129.149':445
'58.#0.18.87':139
'58.#0.244.7':139
'58.##.129.149':139
'58.##.69.105':139
'58.##.236.69':139
'58.##.69.105':445
'58.##.236.69':445
'58.#0.32.95':445
'58.##.183.67':139
'58.#0.89.74':445
'58.##.170.111':445
'58.##.51.191':139
'58.##.211.210':139
'58.##.218.173':139
'58.##.65.129':139
'58.##.104.191':139
'58.##.178.85':139
'58.#0.9.236':139
'58.##.85.167':139
'58.##.130.223':139
'58.##.100.164':139
'58.##.220.206':139
'58.##.69.222':139
'58.#0.67.90':139
'58.#0.5.2':139
'58.##.170.111':139
'58.##.126.158':139
'58.##.15.136':139
'58.##.18.117':139
'58.##.48.159':139
'58.##.195.171':139
'58.##.159.195':139
'58.##.166.52':445
'58.##.142.157':445
'58.##.13.247':445
'58.##.157.249':445
'58.##.15.210':445
'58.#0.51.23':445
'58.#0.6.3':445
'58.#0.7.132':445
'58.##.240.60':445
'58.##.34.128':445
'58.##.67.159':445
'58.#0.29.53':445
'58.##.150.47':445
'58.##.155.168':445
'58.#0.66.18':445
'58.##.223.154':445
'58.##.144.223':445
'58.#0.8.25':445
'58.##.207.33':445
'58.##.178.237':445
'58.##.155.110':445
'58.##.134.156':445
'58.##.34.251':445
'58.#0.2.49':445
'58.##.214.19':445
'58.##.22.127':445
'58.#0.20.22':445
'58.##.192.168':445
'58.##.199.251':445
'58.##.246.172':445
'58.##.241.200':445
'58.##.42.159':445
'58.##.45.172':445
'58.#0.76.64':445
'58.#0.33.86':445
'58.##.40.129':445
'58.##.55.143':445
'58.##.134.180':445
'58.##.104.190':445
'58.##.31.177':445
'58.##.190.181':445
'58.##.165.27':445
'58.#0.53.62':445
'58.##.223.105':445
'58.##.188.26':139
'58.#0.26.43':139
'58.##.239.11':139
'58.##.161.245':445
'58.##.136.202':445
'58.##.18.169':139
'58.##.14.248':139
'58.##.170.201':139
'58.##.207.96':139
'58.##.88.250':139
'58.##.11.169':445
'58.##.56.139':445
'58.#0.16.16':445
'58.#0.44.32':445
'58.##.35.228':445
'58.##.196.90':445
'58.##.231.25':445
'58.##.169.57':445
'58.#0.61.23':445
'58.##.72.210':445
'58.#0.90.20':445
'58.##.75.182':445
'58.##.214.19':139
'58.##.34.251':139
'58.#0.20.22':139
'58.##.45.172':139
'58.##.22.127':139
'58.##.246.172':139
'58.##.192.168':139
'58.##.42.159':139
'58.#0.2.49':139
'58.##.241.200':139
'58.##.31.177':139
'58.##.40.129':139
'58.#0.76.64':139
'58.##.134.180':139
'58.##.75.182':139
'58.##.55.143':139
'58.##.190.181':139
'58.##.104.190':139
'58.#0.53.62':139
'58.#0.33.86':139
'58.##.165.27':139
'58.##.199.251':139
'58.##.145.145':445
'58.##.168.141':445
'58.##.136.202':139
'58.##.11.169':139
'58.##.161.245':139
'58.##.245.190':445
'58.##.141.190':445
'58.##.190.210':445
'58.##.53.181':445
'58.#0.22.7':445
'58.##.169.57':139
'58.#0.44.32':139
'58.##.56.139':139
'58.##.196.90':139
'58.##.223.105':139
'58.##.35.228':139
'58.#0.61.23':139
'58.##.231.25':139
'58.#0.90.20':139
'58.#0.16.16':139
'58.##.72.210':139
'58.#0.7.132':139
'58.##.20.155':445
'58.##.135.18':445
'58.##.119.131':445
'58.##.136.171':445
'58.##.64.165':445
'58.##.50.253':445
'58.##.49.103':445
'58.##.117.144':445
'58.#0.50.89':445
'58.##.194.30':445
'58.##.137.56':445
'58.#0.252.8':139
'58.#0.91.92':139
'58.##.194.187':139
'58.#0.20.65':139
'58.##.128.254':139
'58.##.31.197':445
'58.#0.82.95':445
'58.##.255.108':445
'58.##.63.199':139
'58.##.184.27':139
'58.##.244.48':445
'58.##.238.86':445
'58.##.47.245':445
'58.##.88.130':445
'58.##.87.196':445
'58.##.61.192':445
'58.##.104.174':445
'58.##.12.145':445
'58.##.17.237':445
'58.##.26.109':445
'58.#0.86.46':445
'58.#0.122.9':445
'58.##.71.191':445
'58.##.133.122':445
'58.##.52.125':445
'58.##.255.155':445
'58.##.248.153':445
'58.#0.8.158':445
'58.##.234.176':445
'58.##.221.74':445
'58.##.104.110':445
'58.##.68.188':445
'58.##.57.102':139
'58.##.244.48':139
'58.##.255.155':139
'58.##.49.103':139
'58.##.117.144':139
'58.##.50.253':139
'58.##.133.122':139
'58.##.104.110':139
'58.##.52.125':139
'58.##.248.153':139
'58.##.71.191':139
'58.##.194.30':139
'58.##.255.108':139
'58.#0.82.95':139
'58.##.136.171':139
'58.##.137.56':139
'58.##.31.197':139
'58.##.135.18':139
'58.#0.50.89':139
'58.##.20.155':139
'58.##.64.165':139
'58.##.119.131':139
'58.##.68.188':139
'58.##.137.125':139
'58.##.228.15':139
'58.##.12.145':139
'58.##.17.237':139
'58.##.104.174':139
'58.##.105.86':139
'58.##.167.33':139
'58.##.237.222':139
'58.##.80.237':139
'58.##.35.112':139
'58.#0.86.46':139
'58.#0.122.9':139
'58.##.87.196':139
'58.#0.8.158':139
'58.##.221.74':139
'58.##.234.176':139
'58.##.47.245':139
'58.##.26.109':139
'58.##.238.86':139
'58.##.61.192':139
'58.##.88.130':139
'58.##.231.214':445
'58.##.73.141':445
'58.##.162.57':139
'58.#0.5.139':139
'58.#0.57.72':139
'58.#0.5.139':445
'58.#0.57.72':445
'58.##.142.52':445
'58.##.151.45':445
'58.#0.53.48':445
'58.##.142.52':139
'58.#0.38.48':445
'58.#0.52.64':445
'58.##.83.248':445
'58.##.103.22':445
'58.##.131.220':445
'58.##.151.45':139
'58.#0.53.48':139
'58.##.73.141':139
'58.##.147.116':445
'58.##.231.214':139
'58.##.162.57':445
'58.##.157.249':139
'58.##.142.157':139
'58.#0.51.23':139
'58.#0.29.53':139
'58.##.15.210':139
'58.##.240.60':139
'58.#0.6.3':139
'58.##.67.159':139
'58.##.13.247':139
'58.##.34.128':139
'58.##.207.33':139
'58.#0.66.18':139
'58.##.150.47':139
'58.##.144.223':139
'58.##.166.52':139
'58.##.223.154':139
'58.##.178.237':139
'58.#0.8.25':139
'58.##.134.156':139
'58.##.155.168':139
'58.##.155.110':139
'58.##.226.134':445
'58.##.184.27':445
'58.#0.82.95':9988
'58.##.63.199':445
'58.#0.252.8':445
'58.#0.91.92':445
'58.##.133.122':9988
'58.#0.8.158':9988
'58.##.50.253':9988
'58.##.136.171':9988
'58.##.244.48':9988
'58.##.194.187':445
'58.##.35.112':445
'58.##.237.222':445
'58.##.80.237':445
'58.##.137.125':445
'58.##.228.15':445
'58.##.128.254':445
'58.#0.20.65':445
'58.##.57.102':445
'58.##.105.86':445
'58.##.167.33':445
'58.##.64.165':9988
'58.##.131.220':139
'58.##.83.248':139
'58.##.103.22':139
'58.##.21.111':139
'58.##.226.134':139
'58.##.189.180':445
'58.##.21.111':445
'58.##.147.116':139
'58.#0.38.48':139
'58.#0.52.64':139
'58.##.189.180':139
'58.##.194.30':9988
'58.##.221.74':9988
'58.##.255.155':9988
'58.##.68.188':9988
'58.##.87.196':9988
'58.##.119.131':9988
'58.##.49.103':9988
'58.##.104.110':9988
'58.#0.50.89':9988
'58.##.20.155':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней