Trojan.DownLoader12.28996

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#1.233.190':139
'20#.#1.130.28':139
'20#.#1.143.157':139
'20#.#1.101.62':139
'20#.#1.157.156':139
'20#.#1.135.136':139
'20#.#1.182.53':139
'20#.#1.73.24':139
'20#.#1.161.71':139
'20#.#1.161.147':139
'20#.#1.203.71':139
'20#.#1.189.227':139
'20#.#1.27.102':139
'20#.#1.117.33':139
'20#.#1.103.26':139
'20#.#1.152.114':139
'20#.#1.97.22':139
'20#.#1.206.122':139
'20#.#1.22.218':139
'20#.#1.14.129':139
'20#.#1.223.174':139
'20#.#1.33.145':139
'20#.#1.14.129':445
'20#.#1.223.174':445
'20#.#1.27.102':445
'20#.#1.117.33':445
'20#.#1.189.227':445
'20#.#1.203.71':445
'20#.#1.101.62':445
'20#.#1.206.122':445
'20#.#1.22.218':445
'20#.#1.97.22':445
'20#.#1.152.114':445
'20#.#1.26.49':139
'20#.#1.130.7':139
'20#.#1.119.157':139
'20#.#1.232.81':139
'20#.#1.171.232':139
'20#.#1.26.209':445
'20#.#1.103.26':445
'20#.#1.43.14':445
'20#.#1.119.115':139
'20#.#1.151.228':445
'20#.#1.208.240':139
'20#.#1.149.236':139
'20#.#1.83.161':139
'20#.#1.69.106':139
'20#.#1.105.74':139
'20#.#1.228.54':139
'20#.#1.127.128':445
'20#.41.2.21':139
'20#.#1.44.201':139
'20#.#1.174.209':139
'20#.#1.74.207':139
'20#.#1.199.251':139
'20#.#1.61.139':139
'20#.#1.251.69':139
'20#.#1.127.128':139
'20#.#1.32.200':139
'20#.#1.72.108':139
'20#.#1.207.72':139
'20#.#1.127.184':139
'20#.#1.16.163':139
'20#.#1.6.201':139
'20#.#1.32.200':445
'20#.#1.44.201':445
'20#.#1.174.209':445
'20#.#1.149.236':445
'20#.#1.83.161':445
'20#.#1.208.240':445
'20#.#1.43.14':139
'20#.#1.26.209':139
'20#.#1.151.228':139
'20#.41.2.21':445
'20#.#1.228.54':445
'20#.#1.105.74':445
'20#.#1.16.163':445
'20#.#1.6.201':445
'20#.#1.61.139':445
'20#.#1.251.69':445
'20#.#1.199.251':445
'20#.#1.74.207':445
'20#.#1.69.106':445
'20#.#1.207.72':445
'20#.#1.127.184':445
'20#.#1.72.108':445
'20#.#1.157.156':445
'20#.#1.170.215':139
'20#.#1.60.176':139
'20#.#1.215.172':139
'20#.#1.236.29':445
'20#.#1.237.183':139
'20#.#1.123.158':139
'20#.#1.249.123':139
'20#.#1.158.83':139
'20#.#1.39.151':139
'20#.#1.218.31':139
'20#.#1.111.87':445
'20#.#1.115.70':445
'20#.#1.18.171':445
'20#.#1.18.223':445
'20#.#1.53.15':445
'20#.#1.25.222':445
'20#.#1.170.187':445
'20#.#1.87.45':445
'20#.#1.125.176':445
'20#.#1.119.41':445
'20#.#1.8.144':445
'20#.#1.148.135':139
'20#.#1.52.85':139
'20#.#1.208.51':139
'20#.#1.85.98':139
'20#.#1.213.82':139
'20#.#1.41.167':139
'20#.#1.244.7':139
'20#.#1.91.194':139
'20#.#1.91.104':139
'20#.#1.52.107':139
'20#.#1.133.246':139
'20#.#1.109.100':139
'20#.#1.35.145':139
'20#.41.58.9':139
'20#.#1.56.111':139
'20#.#1.191.12':139
'20#.41.8.23':139
'20#.#1.144.143':139
'20#.#1.7.240':139
'20#.#1.143.190':139
'20#.#1.115.63':139
'20#.#1.58.86':139
'20#.#1.119.115':445
'20#.#1.93.160':139
'20#.#1.26.49':445
'20#.#1.119.157':445
'20#.#1.130.7':445
'20#.#1.251.44':139
'20#.#1.203.234':139
'20#.#1.8.181':139
'20#.#1.80.55':139
'20#.#1.33.84':139
'20#.#1.171.232':445
'20#.#1.161.71':445
'20#.#1.161.147':445
'20#.#1.130.28':445
'20#.#1.143.157':445
'20#.#1.233.190':445
'20#.#1.182.53':445
'20#.#1.232.81':445
'20#.#1.33.145':445
'20#.#1.73.24':445
'20#.#1.135.136':445
'20#.#1.127.65':139
'20#.#1.80.55':445
'20#.#1.33.84':445
'20#.#1.93.160':445
'20#.#1.111.87':139
'20#.#1.236.29':139
'20#.#1.169.28':445
'20#.#1.127.65':445
'20#.#1.203.234':445
'20#.#1.8.181':445
'20#.#1.251.44':445
'20#.#1.87.45':139
'20#.#1.18.223':139
'20#.#1.115.70':139
'20#.#1.53.15':139
'20#.#1.169.28':139
'20#.#1.25.222':139
'20#.#1.125.176':139
'20#.#1.170.187':139
'20#.#1.8.144':139
'20#.#1.18.171':139
'20#.#1.119.41':139
'20#.#1.127.160':445
'20#.#1.96.247':445
'20#.#1.42.16':445
'20#.#1.231.73':445
'20#.#1.7.241':445
'20#.#1.243.193':445
'20#.#1.237.13':445
'20#.#1.15.37':445
'20#.#1.114.72':445
'20#.#1.152.130':445
'20#.#1.187.154':445
'20#.#1.234.28':445
'20#.#1.191.78':139
'20#.#1.196.98':139
'20#.#1.125.137':139
'20#.#1.29.196':139
'20#.#1.88.164':139
'20#.#1.235.202':445
'20#.#1.28.51':445
'20#.#1.192.77':139
'20#.#1.155.195':139
'20#.#1.114.155':139
'20#.#1.155.60':445
'20#.#1.28.97':445
'20#.#1.102.159':445
'20#.#1.44.217':445
'20#.#1.218.82':445
'20#.#1.94.218':445
'20#.#1.173.44':445
'20#.#1.145.33':445
'20#.#1.44.226':445
'20#.#1.52.201':445
'20#.#1.187.244':445
'20#.#1.82.202':445
'20#.#1.252.82':445
'20#.#1.107.195':445
'20#.#1.193.42':445
'20#.#1.8.149':445
'20#.#1.251.8':445
'20#.#1.81.191':445
'20#.#1.53.36':445
'20#.#1.191.15':445
'20#.#1.172.34':445
'20#.#1.196.178':445
'20#.#1.8.149':139
'20#.#1.251.8':139
'20#.#1.155.60':139
'20#.#1.237.13':139
'20#.#1.15.37':139
'20#.#1.172.34':139
'20#.#1.196.178':139
'20#.#1.107.195':139
'20#.#1.193.42':139
'20#.#1.252.82':139
'20#.#1.114.72':139
'20#.#1.7.241':139
'20#.#1.243.193':139
'20#.#1.234.28':139
'20#.#1.28.51':139
'20#.#1.235.202':139
'20#.#1.152.130':139
'20#.#1.187.154':139
'20#.#1.42.16':139
'20#.#1.231.73':139
'20#.#1.96.247':139
'20#.#1.191.15':139
'20#.#1.154.218':139
'20#.#1.9.194':139
'20#.#1.227.250':139
'20#.#1.173.44':139
'20#.#1.145.33':139
'20#.#1.133.203':139
'20#.#1.162.227':139
'20#.#1.153.2':139
'20#.#1.127.161':139
'20#.#1.137.211':139
'20#.#1.44.226':139
'20#.#1.218.82':139
'20#.#1.94.218':139
'20#.#1.82.202':139
'20#.#1.81.191':139
'20#.#1.53.36':139
'20#.#1.52.201':139
'20#.#1.187.244':139
'20#.#1.102.159':139
'20#.#1.44.217':139
'20#.#1.28.97':139
'20#.#1.227.250':445
'20#.#1.14.178':445
'20#.#1.128.131':445
'20#.#1.82.101':445
'20#.#1.30.181':139
'20#.#1.127.160':139
'20#.#1.126.247':445
'20#.#1.158.126':445
'20#.#1.215.152':445
'20#.#1.230.128':445
'20#.41.4.12':445
'20#.#1.15.214':139
'20#.#1.46.231':139
'20#.#1.100.25':139
'20#.#1.182.108':139
'20#.#1.80.46':139
'20#.#1.26.215':139
'20#.#1.108.49':139
'20#.#1.135.157':139
'20#.#1.123.233':139
'20#.#1.147.59':139
'20#.#1.168.147':139
'20#.#1.187.96':445
'20#.#1.147.59':445
'20#.#1.168.147':445
'20#.#1.100.25':445
'20#.#1.182.108':445
'20#.#1.46.231':445
'20#.#1.15.214':445
'20#.#1.30.181':445
'20#.#1.135.157':445
'20#.#1.123.233':445
'20#.#1.108.49':445
'20#.#1.26.215':445
'20#.#1.107.85':445
'20#.#1.53.83':445
'20#.#1.200.66':445
'20#.#1.186.61':445
'20#.#1.83.62':445
'20#.#1.130.186':445
'20#.#1.80.46':445
'20#.#1.26.14':445
'20#.#1.222.196':445
'20#.#1.181.13':445
'20#.#1.192.77':445
'20#.#1.28.51':9988
'20#.#1.114.155':445
'20#.#1.196.98':445
'20#.#1.155.195':445
'20#.#1.8.149':9988
'20#.#1.251.8':9988
'20#.#1.15.37':9988
'20#.#1.243.193':9988
'20#.#1.231.73':9988
'20#.#1.191.78':445
'20#.#1.137.211':445
'20#.#1.153.2':445
'20#.#1.127.161':445
'20#.#1.154.218':445
'20#.#1.9.194':445
'20#.#1.88.164':445
'20#.#1.125.137':445
'20#.#1.29.196':445
'20#.#1.133.203':445
'20#.#1.162.227':445
'20#.#1.172.34':9988
'20#.#1.200.66':139
'20#.#1.107.85':139
'20#.#1.83.62':139
'20#.#1.187.96':139
'20#.#1.186.61':139
'20#.#1.26.14':139
'20#.#1.130.186':139
'20#.#1.181.13':139
'20#.#1.53.83':139
'20#.#1.222.196':139
'20#.#1.158.126':139
'20#.#1.82.101':139
'20#.#1.14.178':139
'20#.#1.44.226':9988
'20#.#1.81.191':9988
'20#.#1.82.202':9988
'20#.#1.215.152':139
'20#.#1.126.247':139
'20#.41.4.12':139
'20#.#1.128.131':139
'20#.#1.230.128':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней