Trojan.DownLoader12.29059

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#85.225.57':139
'21#.#85.140.89':139
'21#.#85.170.244':139
'21#.#85.119.230':139
'21#.#85.181.121':139
'21#.#85.160.115':139
'21#.#85.33.70':139
'21#.#85.105.101':139
'21#.#85.7.229':139
'21#.#85.177.70':139
'21#.#85.100.141':139
'21#.#85.182.224':139
'21#.#85.80.193':139
'21#.#85.1.244':139
'21#.#85.141.0':139
'21#.#85.25.34':139
'21#.#85.236.23':445
'21#.#85.72.165':445
'21#.#85.162.16':445
'21#.#85.226.123':139
'21#.#85.158.226':139
'21#.#85.46.143':139
'21#.#85.39.196':139
'21#.#85.119.103':139
'21#.#85.80.220':139
'21#.#85.80.220':445
'21#.#85.158.226':445
'21#.#85.226.123':445
'21#.#85.25.34':445
'21#.#85.39.196':445
'21#.#85.119.103':445
'21#.#85.181.121':445
'21#.#85.160.115':445
'21#.#85.225.57':445
'21#.#85.80.193':445
'21#.#85.119.230':445
'21#.#85.46.143':445
'21#.#85.1.244':445
'21#.#85.208.81':139
'21#.#85.44.33':139
'21#.#85.115.47':139
'21#.#85.204.215':139
'21#.#85.130.180':139
'21#.#85.83.201':139
'21#.#85.16.74':139
'21#.#85.45.11':139
'21#.#85.141.0':445
'21#.#85.46.244':139
'21#.#85.65.69':139
'21#.#85.74.89':139
'21#.#85.223.137':445
'21#.#85.108.175':445
'21#.#85.11.192':445
'21#.#85.18.55':139
'21#.#85.33.148':445
'21#.#85.140.235':445
'21#.#85.176.241':445
'21#.#85.28.206':139
'21#.#85.134.211':139
'21#.#85.12.169':139
'21#.#85.131.18':139
'21#.#85.25.204':139
'21#.#85.65.160':139
'21#.#85.4.57':445
'21#.#85.161.209':445
'21#.#85.121.214':445
'21#.#85.170.46':445
'21#.#85.28.194':445
'21#.#85.182.218':445
'21#.#85.99.202':445
'21#.#85.14.26':445
'21#.#85.3.107':445
'21#.#85.84.237':445
'21#.#85.69.99':445
'21#.#85.198.167':445
'21#.#85.136.26':445
'21#.#85.94.107':445
'21#.#85.80.56':445
'21#.#85.47.52':445
'21#.#85.25.204':445
'21#.#85.65.160':445
'21#.#85.28.206':445
'21#.#85.116.111':445
'21#.#85.128.113':445
'21#.#85.54.196':445
'21#.#85.134.211':445
'21#.#85.12.169':445
'21#.#85.56.5':445
'21#.#85.131.18':445
'21#.#85.80.56':139
'21#.#85.72.165':139
'21#.#85.236.23':139
'21#.#85.47.52':139
'21#.#85.94.107':139
'21#.#85.56.5':139
'21#.#85.116.111':139
'21#.#85.128.113':139
'21#.#85.18.55':445
'21#.#85.54.196':139
'21#.#85.162.16':139
'21#.#85.223.137':139
'21#.#85.140.89':445
'21#.#85.221.109':139
'21#.#85.232.90':139
'21#.#85.24.72':139
'21#.#85.218.122':139
'21#.#85.53.83':139
'21#.#85.178.99':139
'21#.#85.15.121':139
'21#.#85.64.10':139
'21#.#85.73.156':139
'21#.#85.153.168':139
'21#.#85.36.212':139
'21#.#85.91.55':139
'21#.#85.13.24':139
'21#.#85.140.121':139
'21#.#85.180.233':139
'21#.#85.41.159':139
'21#.#85.53.148':445
'21#.#85.19.161':445
'21#.#85.102.97':445
'21#.#85.27.158':139
'21#.#85.191.69':139
'21#.#85.224.38':139
'21#.#85.147.41':139
'21#.#85.176.146':139
'21#.#85.191.169':139
'21#.#85.191.169':445
'21#.#85.147.41':445
'21#.#85.224.38':445
'21#.#85.41.159':445
'21#.#85.27.158':445
'21#.#85.176.146':445
'21#.#85.53.83':445
'21#.#85.178.99':445
'21#.#85.221.109':445
'21#.#85.191.69':445
'21#.#85.13.24':445
'21#.#85.218.122':445
'21#.#85.180.233':445
'21#.#85.42.94':139
'21#.#85.28.42':139
'21#.#85.37.28':139
'21#.#85.144.6':139
'21#.#85.148.239':139
'21#.#85.173.184':139
'21#.#85.248.126':139
'21#.#85.189.3':139
'21#.#85.140.121':445
'21#.#85.192.33':139
'21#.#85.126.237':139
'21#.#85.126.126':139
'21#.#85.136.236':445
'21#.#85.16.74':445
'21#.#85.45.11':445
'21#.#85.115.3':139
'21#.#85.46.244':445
'21#.#85.65.69':445
'21#.#85.74.89':445
'21#.#85.19.247':139
'21#.#85.24.234':139
'21#.#85.2.227':139
'21#.#85.159.184':139
'21#.#85.67.100':139
'21#.#85.67.168':139
'21#.#85.115.47':445
'21#.#85.182.224':445
'21#.#85.33.70':445
'21#.#85.105.101':445
'21#.#85.170.244':445
'21#.#85.177.70':445
'21#.#85.100.141':445
'21#.#85.83.201':445
'21#.#85.208.81':445
'21#.#85.44.33':445
'21#.#85.7.229':445
'21#.#85.204.215':445
'21#.#85.130.180':445
'21#.#85.24.234':445
'21#.#85.2.227':445
'21#.#85.163.246':445
'21#.#85.67.100':445
'21#.#85.67.168':445
'21#.#85.19.247':445
'21#.#85.79.241':445
'21#.#85.133.79':445
'21#.#85.87.181':445
'21#.#85.159.193':445
'21#.#85.101.36':445
'21#.#85.2.87':445
'21#.#85.159.184':445
'21#.#85.101.36':139
'21#.#85.2.87':139
'21#.#85.133.79':139
'21#.#85.163.246':139
'21#.#85.159.193':139
'21#.#85.79.241':139
'21#.#85.19.161':139
'21#.#85.102.97':139
'21#.#85.115.3':445
'21#.#85.136.236':139
'21#.#85.87.181':139
'21#.#85.53.148':139
'21#.#85.123.240':445
'21#.#85.144.27':445
'21#.#85.193.121':445
'21#.#85.47.76':445
'21#.#85.62.221':445
'21#.#85.101.205':445
'21#.#85.94.77':445
'21#.#85.34.249':445
'21#.#85.217.110':445
'21#.#85.95.235':445
'21#.#85.18.33':445
'21#.#85.69.208':445
'21#.#85.43.77':445
'21#.#85.14.40':445
'21#.#85.97.250':445
'21#.#85.129.249':445
'21#.#85.162.236':445
'21#.#85.219.96':445
'21#.#85.97.120':445
'21#.#85.55.134':445
'21#.#85.93.170':445
'21#.#85.48.153':445
'21#.#85.69.174':445
'21#.#85.248.68':445
'21#.#85.57.19':445
'21#.#85.46.113':445
'21#.#85.162.57':445
'21#.#85.154.28':445
'21#.#85.83.232':445
'21#.#85.51.149':445
'21#.#85.113.75':445
'21#.#85.157.175':445
'21#.#85.144.157':445
'21#.#85.223.143':445
'21#.#85.162.235':445
'21#.#85.141.114':445
'21#.#85.175.112':445
'21#.#85.212.80':445
'21#.#85.15.169':445
'21#.#85.117.16':445
'21#.#85.148.60':445
'21#.#85.20.9':445
'21#.#85.145.65':445
'21#.#85.136.222':445
'21#.#85.114.168':445
'21#.#85.234.8':445
'21#.#85.103.193':445
'21#.#85.86.249':445
'21#.#85.234.187':445
'21#.#85.94.1':445
'21#.#85.53.224':139
'21#.#85.123.240':139
'21#.#85.144.27':139
'21#.#85.193.121':139
'21#.#85.47.76':139
'21#.#85.62.221':139
'21#.#85.101.205':139
'21#.#85.94.77':139
'21#.#85.34.249':139
'21#.#85.217.110':139
'21#.#85.95.235':139
'21#.#85.18.33':139
'21#.#85.69.208':139
'21#.#85.43.77':139
'21#.#85.14.40':139
'21#.#85.97.250':139
'21#.#85.129.249':139
'21#.#85.162.236':139
'21#.#85.97.120':139
'21#.#85.219.96':139
'21#.#85.55.134':139
'21#.#85.93.170':139
'21#.#85.48.153':139
'21#.#85.69.174':139
'21#.#85.248.68':139
'21#.#85.57.19':139
'21#.#85.46.113':139
'21#.#85.162.57':139
'21#.#85.154.28':139
'21#.#85.83.232':139
'21#.#85.51.149':139
'21#.#85.113.75':139
'21#.#85.157.175':139
'21#.#85.144.157':139
'21#.#85.223.143':139
'21#.#85.162.235':139
'21#.#85.141.114':139
'21#.#85.175.112':139
'21#.#85.212.80':139
'21#.#85.15.169':139
'21#.#85.117.16':139
'21#.#85.148.60':139
'21#.#85.20.9':139
'21#.#85.145.65':139
'21#.#85.136.222':139
'21#.#85.114.168':139
'21#.#85.234.8':139
'21#.#85.103.193':139
'21#.#85.86.249':139
'21#.#85.234.187':139
'21#.#85.94.1':139
'21#.#85.53.224':445
'21#.#85.144.75':139
'21#.#85.182.218':139
'21#.#85.99.202':139
'21#.#85.255.146':139
'21#.#85.28.194':139
'21#.#85.30.123':139
'21#.#85.3.107':139
'21#.#85.136.26':139
'21#.#85.84.237':139
'21#.#85.170.46':139
'21#.#85.121.214':139
'21#.#85.161.209':139
'21#.#85.147.189':139
'21#.#85.173.200':139
'21#.#85.45.21':139
'21#.#85.33.141':139
'21#.#85.135.156':139
'21#.#85.232.47':139
'21#.#85.209.124':139
'21#.#85.248.194':139
'21#.#85.91.33':139
'21#.#85.171.141':139
'21#.#85.87.189':139
'21#.#85.21.27':139
'21#.#85.229.141':139
'21#.#85.33.141':445
'21#.#85.229.141':445
'21#.#85.248.194':445
'21#.#85.45.21':445
'21#.#85.87.189':445
'21#.#85.21.27':445
'21#.#85.255.146':445
'21#.#85.144.75':445
'21#.#85.30.123':445
'21#.#85.91.33':445
'21#.#85.171.141':445
'21#.#85.147.189':445
'21#.#85.173.200':445
'21#.#85.108.175':139
'21#.#85.11.192':139
'21#.#85.4.57':139
'21#.#85.198.167':139
'21#.#85.69.99':139
'21#.#85.14.26':139
'21#.#85.135.156':445
'21#.#85.232.47':445
'21#.#85.209.124':445
'21#.#85.140.235':139
'21#.#85.33.148':139
'21#.#85.176.241':139
'21#.#85.64.29':445
'21#.#85.148.60':9988
'21#.#85.35.65':139
'21#.#85.130.50':139
'21#.#85.144.27':9988
'21#.#85.18.33':9988
'21#.#85.15.169':9988
'21#.#85.6.66':139
'21#.#85.239.6':139
'21#.#85.2.174':139
'21#.#85.171.83':139
'21#.#85.96.116':139
'21#.#85.51.138':139
'21#.#85.101.205':9988
'21#.#85.69.174':9988
'21#.#85.248.68':9988
'21#.#85.57.19':9988
'21#.#85.14.40':9988
'21#.#85.97.120':9988
'21#.#85.129.249':9988
'21#.#85.43.77':9988
'21#.#85.47.76':9988
'21#.#85.62.221':9988
'21#.#85.55.134':9988
'21#.#85.93.170':9988
'21#.#85.48.153':9988
'21#.#85.2.174':445
'21#.#85.215.49':445
'21#.#85.204.245':445
'21#.#85.51.138':445
'21#.#85.6.66':445
'21#.#85.239.6':445
'21#.#85.118.86':445
'21#.#85.47.28':445
'21#.#85.150.182':445
'21#.#85.31.188':445
'21#.#85.49.197':445
'21#.#85.180.246':445
'21#.#85.96.116':445
'21#.#85.49.197':139
'21#.#85.180.246':139
'21#.#85.118.86':139
'21#.#85.215.49':139
'21#.#85.204.245':139
'21#.#85.31.188':139
'21#.#85.35.65':445
'21#.#85.130.50':445
'21#.#85.171.83':445
'21#.#85.47.28':139
'21#.#85.150.182':139
'21#.#85.64.29':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней