Trojan.DownLoader12.29000

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'89.##1.122.21':139
'89.##1.39.193':139
'89.##1.146.112':139
'89.##1.205.212':139
'89.##1.162.222':139
'89.##1.40.46':139
'89.##1.248.242':139
'89.#41.6.79':139
'89.##1.44.237':139
'89.##1.68.29':139
'89.##1.117.9':139
'89.##1.167.52':139
'89.##1.173.219':139
'89.##1.38.116':139
'89.##1.50.114':139
'89.##1.210.246':139
'89.##1.47.63':139
'89.##1.65.216':139
'89.#41.1.54':139
'89.##1.18.104':139
'89.##1.210.236':139
'89.##1.31.235':139
'89.##1.182.86':139
'89.##1.166.90':445
'89.##1.119.166':445
'89.##1.90.154':445
'89.##1.110.166':139
'89.##1.12.228':139
'89.##1.47.120':445
'89.##1.2.166':445
'89.##1.207.2':445
'89.##1.37.32':445
'89.##1.67.58':445
'89.##1.200.210':445
'89.##1.28.215':139
'89.##1.229.2':139
'89.##1.100.119':139
'89.##1.6.247':139
'89.##1.46.110':139
'89.##1.104.200':139
'89.##1.35.77':139
'89.##1.182.159':139
'89.##1.175.48':139
'89.##1.125.102':139
'89.##1.41.30':139
'89.##1.162.40':139
'89.##1.131.180':139
'89.##1.11.122':445
'89.##1.180.127':445
'89.##1.3.111':445
'89.##1.145.91':445
'89.##1.213.196':445
'89.##1.163.145':445
'89.##1.53.120':445
'89.##1.130.13':445
'89.##1.35.226':445
'89.##1.170.107':445
'89.##1.111.150':445
'89.##1.181.183':445
'89.##1.255.212':445
'89.##1.118.199':445
'89.#41.64.4':445
'89.##1.167.63':445
'89.##1.80.231':445
'89.##1.14.119':445
'89.##1.153.34':445
'89.##1.183.211':445
'89.##1.175.236':445
'89.##1.37.15':445
'89.##1.125.193':445
'89.##1.200.210':139
'89.##1.37.32':139
'89.##1.67.58':139
'89.##1.119.166':139
'89.##1.47.120':139
'89.##1.2.166':139
'89.##1.56.58':139
'89.##1.47.163':139
'89.##1.104.239':139
'89.##1.207.2':139
'89.##1.205.50':139
'89.##1.166.90':139
'89.##1.9.209':445
'89.##1.131.13':445
'89.##1.160.67':445
'89.##1.90.54':445
'89.##1.174.166':445
'89.##1.170.137':445
'89.##1.154.146':445
'89.##1.90.154':139
'89.##1.192.178':445
'89.##1.106.175':445
'89.##1.45.114':445
'89.##1.165.22':139
'89.##1.82.208':139
'89.##1.107.146':139
'89.##1.32.156':139
'89.##1.129.32':139
'89.##1.156.6':139
'89.##1.182.99':139
'89.##1.32.159':139
'89.#41.0.6':139
'89.##1.28.177':139
'89.##1.35.150':139
'89.##1.156.185':139
'89.#41.63.4':139
'89.##1.58.199':139
'89.##1.245.24':139
'89.##1.86.87':139
'89.##1.24.166':139
'89.#41.5.55':139
'89.##1.143.50':139
'89.##1.104.179':139
'89.##1.208.248':139
'89.##1.13.221':139
'89.##1.229.81':139
'89.##1.192.250':139
'89.##1.60.59':139
'89.##1.69.175':139
'89.##1.134.133':139
'89.##1.42.135':139
'89.##1.200.73':139
'89.##1.160.206':139
'89.##1.98.186':139
'89.##1.24.209':139
'89.##1.133.95':139
'89.##1.7.146':139
'89.#41.28.5':139
'89.##1.28.245':139
'89.##1.28.48':139
'89.##1.140.72':139
'89.#41.9.41':139
'89.#41.13.4':139
'89.##1.83.148':139
'89.##1.239.85':139
'89.##1.116.167':139
'89.##1.37.80':139
'89.##1.46.221':139
'89.##1.107.12':139
'89.##1.122.165':139
'89.##1.18.104':445
'89.##1.167.52':445
'89.#41.1.54':445
'89.##1.182.86':445
'89.##1.210.236':445
'89.##1.205.212':445
'89.##1.39.193':445
'89.##1.40.46':445
'89.##1.122.21':445
'89.##1.162.222':445
'89.##1.146.112':445
'89.##1.31.235':445
'89.##1.47.163':445
'89.##1.131.180':445
'89.##1.56.58':445
'89.##1.205.50':445
'89.##1.104.239':445
'89.##1.210.246':445
'89.##1.38.116':445
'89.##1.65.216':445
'89.##1.173.219':445
'89.##1.47.63':445
'89.##1.50.114':445
'89.##1.175.48':445
'89.##1.28.215':445
'89.##1.182.159':445
'89.##1.162.40':445
'89.##1.125.102':445
'89.##1.110.166':445
'89.##1.79.20':139
'89.##1.167.22':139
'89.##1.120.85':139
'89.##1.12.228':445
'89.##1.67.111':139
'89.##1.41.30':445
'89.##1.248.242':445
'89.#41.6.79':445
'89.##1.44.237':445
'89.##1.68.29':445
'89.##1.117.9':445
'89.##1.46.110':445
'89.##1.100.119':445
'89.##1.35.77':445
'89.##1.229.2':445
'89.##1.104.200':445
'89.##1.6.247':445
'89.##1.228.87':445
'89.##1.44.140':445
'89.##1.41.196':445
'89.##1.139.210':445
'89.##1.8.174':445
'89.##1.211.8':445
'89.##1.216.150':445
'89.##1.206.114':445
'89.##1.2.207':445
'89.##1.19.118':445
'89.##1.155.225':445
'89.##1.57.94':445
'89.##1.174.23':445
'89.##1.153.65':139
'89.##1.176.246':445
'89.##1.23.136':139
'89.##1.17.106':139
'89.##1.84.48':139
'89.##1.110.99':445
'89.##1.161.212':445
'89.##1.83.192':445
'89.##1.110.107':445
'89.##1.131.176':445
'89.##1.58.132':445
'89.##1.183.187':445
'89.##1.7.200':445
'89.##1.135.51':445
'89.##1.195.112':445
'89.##1.119.195':445
'89.##1.190.27':445
'89.##1.141.238':445
'89.##1.38.253':445
'89.##1.182.240':445
'89.##1.193.87':445
'89.##1.198.220':445
'89.##1.113.46':445
'89.##1.21.116':445
'89.##1.39.165':445
'89.##1.17.240':445
'89.##1.232.2':445
'89.##1.35.151':445
'89.##1.0.177':445
'89.##1.84.113':445
'89.##1.116.231':445
'89.##1.113.208':445
'89.#41.67.1':445
'89.##1.208.66':445
'89.##1.41.27':139
'89.##1.57.94':139
'89.##1.19.118':139
'89.##1.155.225':139
'89.##1.41.196':139
'89.##1.216.150':139
'89.##1.206.114':139
'89.##1.17.240':139
'89.##1.21.116':139
'89.##1.35.151':139
'89.##1.2.207':139
'89.##1.232.2':139
'89.##1.44.140':139
'89.##1.58.132':139
'89.##1.110.107':139
'89.##1.131.176':139
'89.##1.110.99':139
'89.##1.176.246':139
'89.##1.161.212':139
'89.##1.211.8':139
'89.##1.139.210':139
'89.##1.8.174':139
'89.##1.83.192':139
'89.##1.174.23':139
'89.##1.198.220':139
'89.##1.182.240':139
'89.##1.193.87':139
'89.##1.7.200':139
'89.##1.190.27':139
'89.##1.141.238':139
'89.##1.115.113':139
'89.##1.49.223':139
'89.##1.79.248':139
'89.##1.38.253':139
'89.##1.249.38':139
'89.##1.183.187':139
'89.##1.208.66':139
'89.##1.113.208':139
'89.#41.67.1':139
'89.##1.39.165':139
'89.##1.0.177':139
'89.##1.84.113':139
'89.##1.119.195':139
'89.##1.135.51':139
'89.##1.195.112':139
'89.##1.116.231':139
'89.##1.113.46':139
'89.##1.111.150':139
'89.##1.35.226':139
'89.##1.170.107':139
'89.##1.180.127':139
'89.##1.163.145':139
'89.##1.53.120':139
'89.##1.160.67':139
'89.##1.9.209':139
'89.##1.174.166':139
'89.##1.130.13':139
'89.##1.90.54':139
'89.##1.11.122':139
'89.##1.125.193':139
'89.##1.175.236':139
'89.##1.37.15':139
'89.##1.118.199':139
'89.##1.14.119':139
'89.##1.153.34':139
'89.##1.213.196':139
'89.##1.3.111':139
'89.##1.145.91':139
'89.##1.183.211':139
'89.##1.181.183':139
'89.##1.99.249':445
'89.##1.82.222':445
'89.##1.249.178':445
'89.##1.195.24':445
'89.##1.178.252':445
'89.##1.128.89':445
'89.##1.100.105':445
'89.##1.8.254':445
'89.##1.96.109':445
'89.##1.150.188':445
'89.##1.6.232':445
'89.##1.19.18':445
'89.##1.45.114':139
'89.##1.192.178':139
'89.##1.106.175':139
'89.##1.131.13':139
'89.##1.170.137':139
'89.##1.154.146':139
'89.##1.187.88':445
'89.##1.18.49':445
'89.##1.31.109':445
'89.##1.46.145':445
'89.##1.247.196':445
'89.##1.255.212':139
'89.##1.19.118':9988
'89.##1.206.114':9988
'89.##1.83.192':9988
'89.##1.174.23':9988
'89.##1.8.174':9988
'89.##1.2.207':9988
'89.##1.113.46':9988
'89.##1.195.112':9988
'89.##1.0.177':9988
'89.#41.67.1':9988
'89.##1.21.116':9988
'89.##1.110.107':9988
'89.##1.49.223':445
'89.##1.41.27':445
'89.##1.115.113':445
'89.##1.249.38':445
'89.##1.79.248':445
'89.##1.17.106':445
'89.##1.58.132':9988
'89.##1.161.212':9988
'89.##1.153.65':445
'89.##1.84.48':445
'89.##1.23.136':445
'89.##1.6.232':139
'89.##1.96.109':139
'89.##1.150.188':139
'89.##1.82.222':139
'89.##1.128.89':139
'89.##1.100.105':139
'89.##1.80.231':139
'89.#41.64.4':139
'89.##1.167.63':139
'89.##1.8.254':139
'89.##1.228.87':139
'89.##1.99.249':139
'89.##1.247.196':139
'89.##1.31.109':139
'89.##1.46.145':139
'89.##1.208.66':9988
'89.##1.182.240':9988
'89.##1.187.88':139
'89.##1.178.252':139
'89.##1.249.178':139
'89.##1.195.24':139
'89.##1.18.49':139
'89.##1.19.18':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней