Trojan.DownLoader12.29007

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##.47.235':445
'63.##.139.184':445
'63.##.103.150':445
'63.##.70.189':445
'63.##.43.100':445
'63.##.57.182':445
'63.##.48.107':445
'63.##.165.105':445
'63.#0.57.69':445
'63.#0.20.68':445
'63.##.240.180':445
'63.##.147.226':445
'63.##.49.209':445
'63.##.154.49':445
'63.##.244.171':445
'63.##.232.85':445
'63.##.224.201':445
'63.##.185.32':445
'63.##.21.118':445
'63.##.81.100':445
'63.##.143.57':445
'63.##.46.118':445
'63.##.36.220':445
'63.##.151.123':445
'63.##.17.181':445
'63.##.152.79':445
'63.##.167.43':445
'63.##.93.119':445
'63.##.185.13':445
'63.##.190.224':445
'63.#0.185.9':445
'63.#0.61.86':445
'63.##.42.245':445
'63.##.130.224':445
'63.##.116.69':445
'63.##.203.118':445
'63.##.232.201':445
'63.##.163.248':445
'63.##.244.165':139
'63.#0.61.86':139
'63.##.42.245':139
'63.##.57.182':139
'63.##.48.107':139
'63.##.190.224':139
'63.##.232.201':139
'63.##.163.248':139
'63.#0.185.9':139
'63.##.130.224':139
'63.#0.57.69':139
'63.#0.20.68':139
'63.##.103.150':139
'63.##.232.85':139
'63.##.224.201':139
'63.##.70.189':139
'63.##.43.100':139
'63.##.165.105':139
'63.##.47.235':139
'63.##.139.184':139
'63.#0.108.8':139
'63.#0.2.160':139
'63.##.17.181':139
'63.##.152.79':139
'63.#0.73.90':139
'63.#0.54.39':139
'63.#0.48.75':139
'63.##.10.100':139
'63.#0.99.85':139
'63.##.93.119':139
'63.##.185.13':139
'63.##.46.118':139
'63.##.116.69':139
'63.##.203.118':139
'63.##.36.220':139
'63.##.151.123':139
'63.##.167.43':139
'63.##.81.100':139
'63.##.143.57':139
'63.#0.108.8':445
'63.##.106.26':139
'63.##.225.17':139
'63.##.190.147':139
'63.##.144.73':139
'63.##.28.225':139
'63.##.183.194':139
'63.##.155.91':139
'63.#0.56.29':139
'63.##.213.182':139
'63.##.131.84':139
'63.##.233.216':139
'63.##.97.233':139
'63.##.11.191':139
'63.##.43.207':139
'63.##.86.138':139
'63.##.190.175':139
'63.##.90.148':139
'63.##.93.166':139
'63.#0.176.0':139
'63.#0.38.19':445
'63.#0.2.134':445
'63.##.73.118':445
'63.##.235.21':445
'63.##.211.224':445
'63.#0.7.16':445
'63.##.231.123':445
'63.##.96.211':445
'63.##.185.204':445
'63.##.157.144':445
'63.#0.58.83':139
'63.##.217.57':139
'63.##.92.155':139
'63.##.130.212':139
'63.##.146.75':139
'63.##.189.199':445
'63.##.194.193':445
'63.#0.92.95':445
'63.##.139.44':445
'63.##.231.131':139
'63.##.141.244':445
'63.##.207.118':445
'63.##.182.64':139
'63.##.94.182':139
'63.##.64.150':445
'63.#0.92.95':139
'63.##.139.44':139
'63.##.182.64':445
'63.##.94.182':445
'63.##.64.150':139
'63.##.10.100':445
'63.#0.99.85':445
'63.#0.2.160':445
'63.#0.73.90':445
'63.#0.54.39':445
'63.##.141.244':139
'63.##.207.118':139
'63.#0.48.75':445
'63.##.244.165':445
'63.##.234.222':139
'63.##.79.234':139
'63.#0.7.16':139
'63.##.231.123':139
'63.##.185.79':139
'63.##.120.87':139
'63.##.168.220':139
'63.##.144.203':139
'63.#0.97.21':139
'63.##.185.204':139
'63.##.157.144':139
'63.##.73.118':139
'63.##.189.199':139
'63.##.194.193':139
'63.##.235.21':139
'63.##.211.224':139
'63.##.96.211':139
'63.#0.38.19':139
'63.#0.2.134':139
'63.##.224.56':445
'63.##.57.204':445
'63.##.209.132':139
'63.#0.25.21':139
'63.##.178.57':445
'63.##.243.181':445
'63.##.173.107':445
'63.##.129.248':445
'63.##.126.16':445
'63.##.133.74':139
'63.##.185.12':139
'63.##.122.182':139
'63.#0.3.179':139
'63.#0.128.3':139
'63.##.80.214':139
'63.#0.31.85':139
'63.##.179.25':139
'63.#0.81.81':139
'63.#0.76.76':139
'63.##.65.254':445
'63.#0.43.66':445
'63.##.224.75':445
'63.##.253.224':445
'63.##.97.111':445
'63.#0.0.186':445
'63.##.215.158':445
'63.##.44.172':445
'63.##.142.135':445
'63.#0.16.42':445
'63.#0.70.95':445
'63.#0.36.83':445
'63.#0.19.38':445
'63.##.38.167':445
'63.##.145.154':445
'63.##.113.241':445
'63.##.205.39':445
'63.#0.148.8':445
'63.##.200.230':445
'63.#0.16.68':139
'63.#0.148.8':139
'63.##.200.230':139
'63.#0.36.83':139
'63.##.145.154':139
'63.##.113.241':139
'63.##.224.75':139
'63.##.253.224':139
'63.##.205.39':139
'63.#0.16.42':139
'63.#0.70.95':139
'63.##.178.57':139
'63.##.129.248':139
'63.##.224.56':139
'63.##.57.204':139
'63.##.126.16':139
'63.#0.19.38':139
'63.##.38.167':139
'63.##.243.181':139
'63.##.173.107':139
'63.##.207.186':139
'63.##.130.248':139
'63.##.144.189':139
'63.##.182.238':139
'63.##.85.131':139
'63.##.221.24':139
'63.##.59.144':139
'63.##.151.85':139
'63.##.33.102':139
'63.#0.8.87':139
'63.##.97.111':139
'63.##.44.172':139
'63.##.65.254':139
'63.#0.43.66':139
'63.##.142.135':139
'63.##.206.249':139
'63.##.228.243':139
'63.#0.0.186':139
'63.##.215.158':139
'63.##.206.249':445
'63.#0.78.16':445
'63.##.214.37':445
'63.##.125.206':139
'63.##.207.125':139
'63.##.132.86':445
'63.##.173.182':139
'63.##.177.231':139
'63.##.125.206':445
'63.##.207.125':445
'63.##.132.86':139
'63.##.200.230':9988
'63.##.85.131':9988
'63.#0.70.95':9988
'63.#0.16.42':9988
'63.#0.0.186':9988
'63.#0.78.16':139
'63.##.214.37':139
'63.##.130.248':9988
'63.##.253.224':9988
'63.##.49.209':139
'63.##.154.49':139
'63.##.24.140':445
'63.##.209.23':445
'63.##.240.180':139
'63.##.185.32':139
'63.##.21.118':139
'63.##.147.226':139
'63.##.244.171':139
'63.##.128.252':445
'63.##.135.178':139
'63.##.162.112':139
'63.##.173.182':445
'63.##.177.231':445
'63.##.128.252':139
'63.##.135.178':445
'63.##.162.112':445
'63.##.24.140':139
'63.##.209.23':139
'63.##.97.111':9988
'63.#0.3.179':445
'63.#0.128.3':445
'63.##.59.144':445
'63.#0.16.68':445
'63.##.185.12':445
'63.#0.81.81':445
'63.#0.76.76':445
'63.##.122.182':445
'63.##.80.214':445
'63.##.221.24':445
'63.##.144.189':445
'63.##.182.238':445
'63.##.228.243':445
'63.#0.8.87':445
'63.##.207.186':445
'63.##.151.85':445
'63.##.33.102':445
'63.##.130.248':445
'63.##.85.131':445
'63.#0.19.38':9988
'63.##.113.241':9988
'63.##.243.181':9988
'63.##.173.107':9988
'63.##.205.39':9988
'63.##.215.158':9988
'63.##.65.254':9988
'63.#0.148.8':9988
'63.#0.36.83':9988
'63.##.126.16':9988
'63.##.133.74':445
'63.##.209.132':445
'63.#0.31.85':445
'63.##.179.25':445
'63.#0.25.21':445
'63.##.178.57':9988
'63.##.129.248':9988
'63.##.224.56':9988
'63.##.57.204':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней