Trojan.DownLoader12.29106

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#9.3.230':445
'20#.#9.32.251':445
'20#.99.4.0':445
'20#.#9.139.185':445
'20#.#9.86.105':445
'20#.#9.140.140':445
'20#.#9.46.156':445
'20#.#9.92.132':445
'20#.#9.93.48':445
'20#.#9.84.29':445
'20#.#9.47.132':139
'20#.#9.193.1':445
'20#.#9.198.44':139
'20#.#9.249.43':139
'20#.#9.67.193':445
'20#.#9.207.35':445
'20#.#9.111.230':445
'20#.#9.194.40':445
'20#.#9.39.23':445
'20#.#9.211.46':445
'20#.#9.215.165':445
'20#.#9.241.56':445
'20#.#9.6.226':445
'20#.#9.87.66':445
'20#.#9.77.64':445
'20#.#9.53.114':445
'20#.#9.97.28':445
'20#.#9.38.236':445
'20#.#9.114.38':445
'20#.#9.185.54':445
'20#.#9.10.196':445
'20#.#9.11.11':445
'20#.#9.139.240':445
'20#.#9.196.24':445
'20#.#9.5.210':445
'20#.#9.107.98':445
'20#.99.7.71':445
'20#.#9.248.184':445
'20#.#9.114.245':445
'20#.#9.5.210':139
'20#.#9.248.184':139
'20#.#9.10.196':139
'20#.#9.11.11':139
'20#.#9.114.245':139
'20#.#9.185.54':139
'20#.#9.6.226':139
'20#.#9.107.98':139
'20#.99.7.71':139
'20#.#9.196.24':139
'20#.#9.86.105':139
'20#.#9.92.132':139
'20#.#9.3.230':139
'20#.#9.32.251':139
'20#.#9.93.48':139
'20#.#9.211.46':139
'20#.#9.139.240':139
'20#.#9.140.140':139
'20#.#9.46.156':139
'20#.#9.87.66':139
'20#.#9.196.47':139
'20#.#9.155.19':139
'20#.#9.33.182':139
'20#.#9.60.220':139
'20#.#9.170.164':139
'20#.#9.48.231':139
'20#.#9.31.78':139
'20#.#9.48.193':139
'20#.#9.230.201':139
'20#.#9.40.198':139
'20#.#9.77.64':139
'20#.#9.38.236':139
'20#.#9.215.165':139
'20#.#9.241.56':139
'20#.#9.114.38':139
'20#.#9.187.235':139
'20#.#9.184.169':139
'20#.#9.53.114':139
'20#.#9.97.28':139
'20#.#9.166.16':139
'20#.#9.18.166':139
'20#.#9.216.179':139
'20#.#9.186.219':139
'20#.#9.12.111':139
'20#.#9.38.251':139
'20#.#9.50.39':139
'20#.#9.233.118':139
'20#.#9.250.164':139
'20#.#9.7.174':139
'20#.#9.108.169':139
'20#.#9.181.5':139
'20#.#9.92.115':139
'20#.#9.60.45':139
'20#.99.8.58':139
'20#.#9.131.68':139
'20#.99.37.8':139
'20#.99.26.8':139
'20#.#9.177.25':139
'20#.#9.46.50':139
'20#.#9.189.239':445
'20#.#9.112.225':445
'20#.#9.218.235':445
'20#.99.8.81':445
'20#.#9.23.64':445
'20#.#9.109.47':445
'20#.#9.25.162':445
'20#.#9.190.21':445
'20#.#9.205.11':445
'20#.#9.236.125':445
'20#.99.1.78':139
'20#.#9.97.14':139
'20#.99.2.46':139
'20#.#9.78.106':139
'20#.#9.43.97':139
'20#.#9.242.233':445
'20#.#9.126.113':445
'20#.#9.179.42':139
'20#.#9.224.80':139
'20#.#9.198.44':445
'20#.#9.249.43':445
'20#.#9.48.231':445
'20#.#9.31.78':445
'20#.#9.47.132':445
'20#.#9.236.125':139
'20#.#9.218.235':139
'20#.#9.242.233':139
'20#.#9.126.113':139
'20#.#9.230.201':445
'20#.#9.40.198':445
'20#.#9.33.182':445
'20#.#9.187.235':445
'20#.#9.184.169':445
'20#.#9.60.220':445
'20#.#9.170.164':445
'20#.#9.48.193':445
'20#.#9.196.47':445
'20#.#9.155.19':445
'20#.99.8.81':139
'20#.#9.121.146':139
'20#.#9.37.121':139
'20#.#9.226.68':139
'20#.#9.146.77':139
'20#.#9.157.37':139
'20#.#9.115.211':139
'20#.#9.155.10':139
'20#.#9.225.158':139
'20#.#9.32.115':139
'20#.#9.77.143':139
'20#.#9.23.64':139
'20#.#9.190.21':139
'20#.#9.189.239':139
'20#.#9.112.225':139
'20#.#9.205.11':139
'20#.#9.115.208':139
'20#.#9.70.134':139
'20#.#9.109.47':139
'20#.#9.25.162':139
'20#.#9.55.223':445
'20#.#9.21.86':445
'20#.#9.16.66':139
'20#.#9.42.155':139
'20#.#9.75.138':445
'20#.99.0.41':445
'20#.#9.134.139':445
'20#.#9.97.147':445
'20#.#9.222.96':445
'20#.#9.25.17':139
'20#.#9.100.33':139
'20#.#9.147.51':139
'20#.#9.91.61':139
'20#.#9.64.103':139
'20#.#9.94.222':139
'20#.#9.124.105':139
'20#.#9.112.47':139
'20#.#9.105.15':139
'20#.#9.77.83':139
'20#.#9.10.83':445
'20#.#9.25.119':445
'20#.#9.152.25':445
'20#.#9.50.59':445
'20#.#9.235.38':445
'20#.99.25.5':445
'20#.#9.56.206':445
'20#.#9.160.56':445
'20#.#9.161.49':445
'20#.#9.38.144':445
'20#.#9.67.189':445
'20#.#9.41.242':445
'20#.#9.98.23':445
'20#.#9.77.112':445
'20#.#9.165.227':445
'20#.#9.62.19':445
'20#.#9.79.233':445
'20#.99.6.61':445
'20#.#9.46.170':445
'20#.#9.176.102':445
'20#.#9.62.19':139
'20#.#9.46.170':139
'20#.#9.41.242':139
'20#.#9.98.23':139
'20#.#9.176.102':139
'20#.#9.67.189':139
'20#.#9.50.59':139
'20#.#9.79.233':139
'20#.99.6.61':139
'20#.#9.165.227':139
'20#.#9.55.223':139
'20#.#9.75.138':139
'20#.#9.97.147':139
'20#.#9.222.96':139
'20#.#9.21.86':139
'20#.#9.10.83':139
'20#.#9.77.112':139
'20#.99.0.41':139
'20#.#9.134.139':139
'20#.#9.235.38':139
'20#.#9.4.114':139
'20#.#9.82.64':139
'20#.#9.148.126':139
'20#.#9.196.234':139
'20#.#9.189.198':139
'20#.#9.29.63':139
'20#.#9.197.55':139
'20#.#9.146.69':139
'20#.#9.197.200':139
'20#.#9.166.51':139
'20#.99.25.5':139
'20#.#9.161.49':139
'20#.#9.25.119':139
'20#.#9.152.25':139
'20#.#9.38.144':139
'20#.#9.44.39':139
'20#.#9.247.188':139
'20#.#9.56.206':139
'20#.#9.160.56':139
'20#.#9.222.81':139
'20#.99.29.6':139
'20#.#9.203.25':139
'20#.#9.82.119':139
'20#.#9.106.176':139
'20#.#9.246.29':445
'20#.#9.155.245':445
'20#.#9.190.106':139
'20#.#9.1.191':139
'20#.#9.47.13':139
'20#.#9.29.63':9988
'20#.#9.197.55':9988
'20#.#9.166.51':9988
'20#.#9.189.198':9988
'20#.#9.246.29':139
'20#.#9.189.76':139
'20#.#9.190.174':139
'20#.#9.155.245':139
'20#.#9.112.155':139
'20#.#9.112.155':445
'20#.#9.194.40':139
'20#.#9.39.23':139
'20#.#9.193.1':139
'20#.#9.67.193':139
'20#.#9.207.35':139
'20#.99.4.0':139
'20#.#9.139.185':139
'20#.#9.111.230':139
'20#.#9.84.29':139
'20#.#9.1.191':445
'20#.#9.47.13':445
'20#.#9.203.25':445
'20#.#9.189.76':445
'20#.#9.190.174':445
'20#.#9.82.119':445
'20#.#9.106.176':445
'20#.#9.190.106':445
'20#.#9.222.81':445
'20#.99.29.6':445
'20#.#9.91.61':445
'20#.#9.64.103':445
'20#.#9.29.63':445
'20#.#9.197.55':445
'20#.#9.100.33':445
'20#.#9.105.15':445
'20#.#9.77.83':445
'20#.#9.147.51':445
'20#.#9.94.222':445
'20#.#9.197.200':445
'20#.#9.166.51':445
'20#.#9.148.126':445
'20#.#9.44.39':445
'20#.#9.247.188':445
'20#.#9.196.234':445
'20#.#9.189.198':445
'20#.#9.146.69':445
'20#.#9.4.114':445
'20#.#9.82.64':445
'20#.#9.124.105':445
'20#.#9.235.38':9988
'20#.#9.25.119':9988
'20#.#9.62.19':9988
'20#.#9.50.59':9988
'20#.99.25.5':9988
'20#.#9.38.144':9988
'20#.#9.44.39':9988
'20#.#9.161.49':9988
'20#.#9.160.56':9988
'20#.#9.98.23':9988
'20#.#9.16.66':445
'20#.#9.42.155':445
'20#.#9.112.47':445
'20#.#9.25.17':445
'20#.#9.77.112':9988
'20#.#9.165.227':9988
'20#.#9.41.242':9988
'20#.#9.97.147':9988
'20#.#9.222.96':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней