Trojan.DownLoader12.29034

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.#.143.56':139
'80.#.161.142':139
'80.#.122.161':139
'80.#.27.205':139
'80.#.59.184':139
'80.#.56.233':139
'80.#.153.156':139
'80.#.17.204':139
'80.#.4.6':139
'80.#.177.122':139
'80.#.6.244':139
'80.#.137.13':139
'80.#.60.183':139
'80.#.79.229':139
'80.#.206.65':139
'80.#.99.54':139
'80.#.110.176':139
'80.#.43.111':139
'80.#.238.200':139
'80.#.41.198':139
'80.#.176.219':139
'80.#.22.176':139
'80.#.149.9':139
'80.#.127.148':139
'80.#.106.227':139
'80.#.9.175':139
'80.#.23.91':139
'80.#.83.68':139
'80.#.39.133':139
'80.#.161.121':139
'80.#.107.127':445
'80.#.99.54':445
'80.#.110.176':445
'80.#.43.177':445
'80.#.150.244':445
'80.#.183.17':445
'80.#.149.29':139
'80.#.29.110':139
'80.#.24.180':139
'80.#.1.103':139
'80.#.79.235':139
'80.#.56.228':139
'80.#.127.224':139
'80.#.106.96':139
'80.#.67.226':139
'80.#.228.204':139
'80.#.20.101':139
'80.#.223.131':139
'80.#.234.66':445
'80.#.6.93':445
'80.#.103.130':445
'80.#.35.30':445
'80.#.68.119':445
'80.#.51.126':445
'80.#.181.166':445
'80.#.215.209':445
'80.#.58.223':445
'80.#.45.21':445
'80.#.147.0':445
'80.#.166.32':445
'80.#.3.62':445
'80.#.126.144':445
'80.#.50.81':445
'80.#.135.85':445
'80.#.6.90':445
'80.#.248.101':445
'80.#.169.71':445
'80.#.13.194':445
'80.#.29.252':445
'80.#.217.93':445
'80.#.2.126':445
'80.#.65.2':445
'80.#.154.183':445
'80.#.38.154':445
'80.#.64.84':445
'80.#.64.84':139
'80.#.77.87':139
'80.#.110.220':139
'80.#.43.177':139
'80.#.183.17':139
'80.#.107.127':139
'80.#.77.87':445
'80.#.110.220':445
'80.#.150.244':139
'80.#.126.214':445
'80.#.11.84':445
'80.#.76.201':445
'80.#.128.215':445
'80.#.216.58':445
'80.#.181.229':445
'80.#.167.46':445
'80.#.154.183':139
'80.#.38.154':139
'80.#.48.68':445
'80.#.217.244':445
'80.#.123.170':445
'80.#.38.17':139
'80.#.60.59':139
'80.#.74.33':139
'80.#.53.80':139
'80.#.235.135':139
'80.#.197.195':139
'80.#.121.226':139
'80.#.205.41':139
'80.#.130.101':139
'80.#.43.46':139
'80.#.105.158':139
'80.#.226.70':139
'80.#.55.63':139
'80.#.87.94':139
'80.#.59.8':139
'80.#.54.114':445
'80.#.78.223':445
'80.#.94.119':139
'80.#.173.191':139
'80.#.167.189':139
'80.#.30.70':139
'80.#.172.206':139
'80.#.12.5':139
'80.#.182.163':139
'80.#.59.23':139
'80.#.63.59':139
'80.#.51.157':139
'80.#.65.248':139
'80.#.245.65':139
'80.#.23.246':139
'80.#.168.203':139
'80.#.245.23':139
'80.#.119.246':139
'80.#.44.221':139
'80.#.83.34':139
'80.#.131.98':139
'80.#.186.54':139
'80.#.146.111':139
'80.#.185.93':139
'80.#.73.4':139
'80.#.36.24':139
'80.#.207.177':139
'80.#.155.29':139
'80.#.20.171':139
'80.#.62.197':139
'80.#.225.188':139
'80.#.59.192':139
'80.#.30.30':139
'80.#.122.161':445
'80.#.177.122':445
'80.#.6.244':445
'80.#.56.233':445
'80.#.143.56':445
'80.#.161.142':445
'80.#.4.6':445
'80.#.1.103':445
'80.#.79.235':445
'80.#.137.13':445
'80.#.153.156':445
'80.#.17.204':445
'80.#.206.65':445
'80.#.22.176':445
'80.#.149.9':445
'80.#.43.111':445
'80.#.60.183':445
'80.#.79.229':445
'80.#.176.219':445
'80.#.27.205':445
'80.#.59.184':445
'80.#.127.148':445
'80.#.238.200':445
'80.#.41.198':445
'80.#.23.91':445
'80.#.123.70':139
'80.#.39.145':139
'80.#.161.121':445
'80.#.106.227':445
'80.#.9.175':445
'80.#.123.70':445
'80.#.39.145':445
'80.#.100.88':445
'80.#.100.88':139
'80.#.54.114':139
'80.#.78.223':139
'80.#.24.180':445
'80.#.228.204':445
'80.#.20.101':445
'80.#.56.228':445
'80.#.149.29':445
'80.#.29.110':445
'80.#.67.226':445
'80.#.83.68':445
'80.#.39.133':445
'80.#.223.131':445
'80.#.127.224':445
'80.#.106.96':445
'80.#.85.129':445
'80.#.217.123':445
'80.#.49.147':445
'80.#.244.162':445
'80.#.13.180':445
'80.#.25.132':445
'80.#.48.25':445
'80.#.247.195':445
'80.#.26.104':445
'80.#.63.16':445
'80.#.36.223':445
'80.#.170.40':445
'80.#.169.52':445
'80.#.130.178':445
'80.#.112.183':445
'80.#.61.211':445
'80.#.182.123':139
'80.#.167.240':139
'80.#.239.125':139
'80.#.11.237':445
'80.#.68.235':445
'80.#.143.233':445
'80.#.209.100':445
'80.#.159.1':445
'80.#.98.158':445
'80.#.168.167':445
'80.#.62.207':445
'80.#.86.239':445
'80.#.87.64':445
'80.#.120.69':445
'80.#.116.50':445
'80.#.118.225':445
'80.#.154.1':445
'80.#.191.198':445
'80.#.250.176':445
'80.#.105.250':445
'80.#.24.226':445
'80.#.232.10':445
'80.#.84.153':445
'80.#.82.141':445
'80.#.110.20':445
'80.#.237.218':445
'80.#.10.96':445
'80.#.101.155':445
'80.#.16.186':445
'80.#.63.252':445
'80.#.132.231':445
'80.#.129.205':445
'80.#.156.3':445
'80.#.36.223':139
'80.#.170.40':139
'80.#.169.52':139
'80.#.217.123':139
'80.#.49.147':139
'80.#.244.162':139
'80.#.110.20':139
'80.#.237.218':139
'80.#.10.96':139
'80.#.247.195':139
'80.#.26.104':139
'80.#.63.16':139
'80.#.209.100':139
'80.#.159.1':139
'80.#.98.158':139
'80.#.130.178':139
'80.#.61.211':139
'80.#.112.183':139
'80.#.13.180':139
'80.#.25.132':139
'80.#.48.25':139
'80.#.11.237':139
'80.#.68.235':139
'80.#.143.233':139
'80.#.250.176':139
'80.#.105.250':139
'80.#.24.226':139
'80.#.168.167':139
'80.#.62.207':139
'80.#.86.239':139
'80.#.131.43':139
'80.#.20.238':139
'80.#.7.106':139
'80.#.118.225':139
'80.#.154.1':139
'80.#.191.198':139
'80.#.132.231':139
'80.#.129.205':139
'80.#.156.3':139
'80.#.232.10':139
'80.#.84.153':139
'80.#.82.141':139
'80.#.87.64':139
'80.#.120.69':139
'80.#.116.50':139
'80.#.101.155':139
'80.#.16.186':139
'80.#.63.252':139
'80.#.35.30':139
'80.#.51.126':139
'80.#.147.0':139
'80.#.169.71':139
'80.#.13.194':139
'80.#.29.252':139
'80.#.234.66':139
'80.#.6.93':139
'80.#.166.32':139
'80.#.68.119':139
'80.#.45.21':139
'80.#.103.130':139
'80.#.135.85':139
'80.#.6.90':139
'80.#.248.101':139
'80.#.41.173':139
'80.#.129.72':139
'80.#.85.129':139
'80.#.126.144':139
'80.#.2.126':139
'80.#.65.2':139
'80.#.3.62':139
'80.#.217.93':139
'80.#.50.81':139
'80.#.4.156':445
'80.#.178.20':445
'80.#.244.161':445
'80.#.167.46':139
'80.#.98.24':445
'80.#.74.98':445
'80.#.217.178':445
'80.#.41.173':445
'80.#.129.72':445
'80.#.3.245':445
'80.#.249.168':445
'80.#.24.246':445
'80.#.216.58':139
'80.#.128.215':139
'80.#.181.229':139
'80.#.181.166':139
'80.#.215.209':139
'80.#.58.223':139
'80.#.48.68':139
'80.#.123.170':139
'80.#.217.244':139
'80.#.126.214':139
'80.#.11.84':139
'80.#.76.201':139
'80.#.48.25':9988
'80.#.169.52':9988
'80.#.247.195':9988
'80.#.143.233':9988
'80.#.13.180':9988
'80.#.25.132':9988
'80.#.232.10':9988
'80.#.82.141':9988
'80.#.132.231':9988
'80.#.26.104':9988
'80.#.63.16':9988
'80.#.110.20':9988
'80.#.182.123':445
'80.#.167.240':445
'80.#.239.125':445
'80.#.131.43':445
'80.#.20.238':445
'80.#.7.106':445
'80.#.61.211':9988
'80.#.98.158':9988
'80.#.11.237':9988
'80.#.130.178':9988
'80.#.159.1':9988
'80.#.209.100':9988
'80.#.98.24':139
'80.#.74.98':139
'80.#.4.156':139
'80.#.239.112':445
'80.#.217.239':445
'80.#.24.218':445
'80.#.249.168':139
'80.#.24.246':139
'80.#.217.178':139
'80.#.178.20':139
'80.#.244.161':139
'80.#.3.245':139
'80.#.118.225':9988
'80.#.20.238':9988
'80.#.247.235':139
'80.#.63.252':9988
'80.#.87.64':9988
'80.#.24.226':9988
'80.#.24.218':139
'80.#.247.235':445
'80.#.112.219':445
'80.#.112.219':139
'80.#.239.112':139
'80.#.217.239':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней