Trojan.DownLoader12.29033

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##.22.174':139
'24.##.183.41':445
'24.##.150.10':445
'24.##.50.222':139
'24.##.14.209':139
'24.##.133.16':139
'24.##.100.68':445
'24.##.50.222':445
'24.##.14.209':445
'24.##.133.16':445
'24.##.54.153':445
'24.##.162.114':445
'24.#6.99.8':445
'24.#6.99.8':139
'24.##.133.48':445
'24.##.79.223':445
'24.##.21.139':445
'24.##.11.141':445
'24.#6.5.65':445
'24.#6.48.5':445
'24.##.255.194':445
'24.##.100.68':139
'24.##.54.153':139
'24.##.162.114':139
'24.#6.8.155':445
'24.##.183.41':139
'24.##.150.10':139
'24.##.22.174':445
'24.##.74.232':139
'24.#6.65.75':139
'24.##.201.65':139
'24.##.65.212':139
'24.##.153.65':139
'24.#6.58.91':139
'24.##.147.253':139
'24.##.226.27':139
'24.##.28.200':139
'24.#6.5.214':139
'24.##.244.43':139
'24.##.28.231':139
'24.#6.28.11':139
'24.##.201.217':139
'24.##.91.222':139
'24.##.61.126':139
'24.##.248.128':139
'24.##.230.74':139
'24.##.103.210':139
'24.##.13.248':139
'24.#6.0.248':139
'24.##.50.210':139
'24.##.38.198':139
'24.##.124.251':139
'24.##.110.21':139
'24.##.79.159':139
'24.#6.40.60':139
'24.##.133.48':139
'24.##.79.223':139
'24.##.21.139':139
'24.##.11.141':139
'24.#6.5.65':139
'24.#6.48.5':139
'24.##.255.194':139
'24.##.239.10':445
'24.##.168.198':445
'24.##.145.149':445
'24.#6.8.155':139
'24.##.40.198':445
'24.##.200.21':445
'24.##.147.56':139
'24.##.214.247':139
'24.##.138.173':139
'24.##.171.40':139
'24.##.224.54':139
'24.##.96.249':139
'24.#6.109.8':139
'24.#6.29.88':139
'24.#6.29.60':139
'24.#6.71.29':139
'24.##.13.105':139
'24.##.180.230':139
'24.##.156.155':139
'24.##.59.236':139
'24.##.243.100':445
'24.##.138.173':445
'24.##.171.40':445
'24.#6.29.88':445
'24.##.96.249':445
'24.#6.109.8':445
'24.##.214.247':445
'24.##.180.230':445
'24.#6.71.29':445
'24.##.13.105':445
'24.##.147.56':445
'24.##.156.155':445
'24.##.59.236':445
'24.#6.29.60':445
'24.##.224.54':445
'24.##.253.78':445
'24.##.101.197':445
'24.##.216.222':445
'24.#6.9.74':445
'24.#6.2.140':445
'24.#6.52.59':445
'24.##.188.85':445
'24.##.222.158':445
'24.##.50.223':445
'24.##.142.50':445
'24.#6.50.63':445
'24.##.47.222':445
'24.##.159.79':445
'24.#6.98.40':139
'24.##.115.41':445
'24.##.209.114':445
'24.##.123.82':139
'24.##.207.175':445
'24.#6.33.91':445
'24.##.34.245':445
'24.##.167.212':139
'24.##.109.96':139
'24.##.188.97':139
'24.##.92.220':139
'24.#6.16.63':139
'24.##.36.104':139
'24.##.42.117':139
'24.#6.89.62':445
'24.#6.89.62':139
'24.##.207.175':139
'24.#6.33.91':139
'24.##.64.252':139
'24.##.72.224':139
'24.##.62.252':139
'24.##.34.245':139
'24.##.64.252':445
'24.##.72.224':445
'24.##.62.252':445
'24.##.115.41':139
'24.##.209.114':139
'24.##.89.135':445
'24.##.25.226':139
'24.#6.111.5':139
'24.##.241.114':139
'24.#6.55.20':139
'24.##.143.130':139
'24.##.97.212':139
'24.#6.2.124':139
'24.##.191.180':139
'24.##.27.115':139
'24.#6.86.28':139
'24.##.157.61':139
'24.##.17.118':139
'24.##.154.63':139
'24.##.114.160':139
'24.##.233.43':139
'24.##.212.78':139
'24.##.94.231':139
'24.##.160.51':139
'24.##.240.204':139
'24.#6.68.85':139
'24.#6.79.68':139
'24.##.196.160':139
'24.##.196.218':139
'24.##.191.35':139
'24.##.43.211':139
'24.##.150.196':139
'24.##.89.249':139
'24.##.162.142':139
'24.##.61.126':445
'24.##.248.128':445
'24.#6.0.248':445
'24.##.103.210':445
'24.##.13.248':445
'24.##.91.222':445
'24.##.110.21':445
'24.##.38.198':445
'24.##.124.251':445
'24.##.201.217':445
'24.##.79.159':445
'24.#6.40.60':445
'24.##.50.210':445
'24.##.230.74':445
'24.#6.33.60':139
'24.##.133.172':139
'24.##.90.168':139
'24.##.202.238':139
'24.##.102.243':139
'24.##.65.102':139
'24.#6.48.46':139
'24.##.93.228':139
'24.#6.9.211':139
'24.#6.16.6':139
'24.##.218.176':139
'24.#6.95.20':139
'24.##.184.30':139
'24.##.65.212':445
'24.##.133.172':445
'24.##.90.168':445
'24.#6.48.46':445
'24.##.102.243':445
'24.##.65.102':445
'24.#6.33.60':445
'24.##.218.176':445
'24.#6.9.211':445
'24.#6.16.6':445
'24.##.89.135':139
'24.#6.95.20':445
'24.##.184.30':445
'24.##.93.228':445
'24.##.202.238':445
'24.#6.65.75':445
'24.##.201.65':445
'24.##.147.253':445
'24.##.153.65':445
'24.#6.58.91':445
'24.##.74.232':445
'24.##.244.43':445
'24.##.28.200':445
'24.#6.5.214':445
'24.#6.98.40':445
'24.##.28.231':445
'24.#6.28.11':445
'24.##.226.27':445
'24.##.168.83':445
'24.##.50.168':445
'24.##.43.245':445
'24.##.118.77':445
'24.##.35.165':445
'24.##.240.74':445
'24.##.112.59':445
'24.##.224.242':445
'24.##.69.101':445
'24.#6.92.70':445
'24.##.116.190':445
'24.##.146.89':445
'24.##.126.180':445
'24.##.176.125':445
'24.##.111.85':445
'24.##.18.153':445
'24.##.147.34':445
'24.##.67.126':445
'24.##.120.66':445
'24.#6.48.98':445
'24.##.97.155':445
'24.##.234.171':445
'24.##.169.55':445
'24.##.175.129':445
'24.##.187.214':445
'24.##.233.70':445
'24.##.195.210':445
'24.#6.19.99':445
'24.##.146.152':445
'24.#6.189.1':445
'24.##.56.213':9988
'24.##.234.21':445
'24.##.124.188':445
'24.##.61.107':445
'24.#6.48.98':9988
'24.#6.189.1':9988
'24.#6.83.52':139
'24.##.248.83':139
'24.##.67.126':9988
'24.##.118.77':9988
'24.##.61.107':9988
'24.##.34.187':445
'24.##.116.69':445
'24.##.149.78':445
'24.#6.3.43':445
'24.#6.4.119':445
'24.##.249.30':445
'24.##.174.193':445
'24.##.84.185':445
'24.##.169.36':445
'24.##.254.162':445
'24.##.70.254':445
'24.#6.30.96':445
'24.#6.98.16':445
'24.##.48.213':445
'24.##.176.125':139
'24.##.118.77':139
'24.##.35.165':139
'24.##.234.171':139
'24.##.169.55':139
'24.##.175.129':139
'24.##.240.74':139
'24.##.112.59':139
'24.##.116.190':139
'24.##.126.180':139
'24.##.168.83':139
'24.##.50.168':139
'24.##.43.245':139
'24.##.195.210':139
'24.##.120.66':139
'24.##.56.213':139
'24.##.173.57':139
'24.##.67.111':139
'24.##.67.126':139
'24.##.226.82':139
'24.#6.48.98':139
'24.##.97.155':139
'24.##.187.214':139
'24.##.233.70':139
'24.##.111.85':139
'24.##.18.153':139
'24.##.147.34':139
'24.##.146.89':139
'24.##.34.187':139
'24.##.234.21':139
'24.##.124.188':139
'24.##.169.36':139
'24.##.254.162':139
'24.##.70.254':139
'24.##.61.107':139
'24.##.226.82':445
'24.##.173.57':445
'24.##.67.111':445
'24.##.146.152':139
'24.#6.189.1':139
'24.##.56.213':445
'24.#6.98.16':139
'24.#6.19.99':139
'24.#6.4.119':139
'24.##.249.30':139
'24.##.224.242':139
'24.##.69.101':139
'24.#6.92.70':139
'24.##.174.193':139
'24.##.84.185':139
'24.#6.30.96':139
'24.##.48.213':139
'24.##.116.69':139
'24.##.149.78':139
'24.#6.3.43':139
'24.##.124.248':139
'24.##.82.211':139
'24.#6.99.20':139
'24.##.235.149':139
'24.##.185.90':445
'24.##.87.159':445
'24.#6.64.87':139
'24.##.83.222':139
'24.##.206.65':139
'24.##.88.235':139
'24.#6.64.87':445
'24.#6.82.8':139
'24.##.166.254':139
'24.##.123.151':139
'24.##.179.213':445
'24.##.248.142':445
'24.##.231.199':445
'24.##.48.167':445
'24.##.209.137':445
'24.##.29.102':445
'24.##.146.114':445
'24.##.29.227':445
'24.##.103.35':445
'24.##.155.197':445
'24.#6.4.60':445
'24.##.176.101':445
'24.##.219.111':445
'24.#6.0.211':445
'24.##.82.211':445
'24.##.253.78':139
'24.##.101.197':139
'24.##.216.222':139
'24.#6.9.74':139
'24.#6.2.140':139
'24.#6.52.59':139
'24.##.188.85':139
'24.##.222.158':139
'24.##.50.223':139
'24.##.142.50':139
'24.#6.50.63':139
'24.##.47.222':139
'24.##.159.79':139
'24.##.243.100':139
'24.#6.82.8':445
'24.##.166.254':445
'24.##.123.151':445
'24.#6.99.20':445
'24.##.235.149':445
'24.##.83.222':445
'24.##.206.65':445
'24.##.239.10':139
'24.##.168.198':139
'24.##.145.149':139
'24.##.88.235':445
'24.##.40.198':139
'24.##.200.21':139
'24.##.122.249':139
'24.##.209.137':139
'24.##.29.102':139
'24.#6.0.185':139
'24.#6.14.1':139
'24.##.105.111':139
'24.##.146.114':139
'24.##.29.227':139
'24.##.176.101':139
'24.##.219.111':139
'24.##.248.142':139
'24.##.231.199':139
'24.##.48.167':139
'24.##.213.254':139
'24.##.112.224':139
'24.##.88.113':139
'24.#6.4.88':139
'24.##.31.170':139
'24.#6.25.44':139
'24.##.193.145':139
'24.##.12.137':139
'24.##.114.44':139
'24.#6.41.15':139
'24.#6.12.34':139
'24.##.170.222':139
'24.##.66.141':139
'24.##.182.38':139
'24.#6.0.211':139
'24.##.66.141':445
'24.##.182.38':445
'24.##.114.44':445
'24.#6.4.88':445
'24.##.12.137':445
'24.##.170.222':445
'24.#6.41.15':445
'24.#6.14.1':445
'24.##.105.111':445
'24.##.122.249':445
'24.#6.12.34':445
'24.##.213.254':445
'24.#6.0.185':445
'24.##.88.113':445
'24.##.179.213':139
'24.##.185.90':139
'24.##.87.159':139
'24.##.103.35':139
'24.##.155.197':139
'24.#6.4.60':139
'24.#6.83.52':445
'24.#6.25.44':445
'24.##.193.145':445
'24.##.112.224':445
'24.##.248.83':445
'24.##.124.248':445
'24.##.31.170':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней