Trojan.DownLoader12.29104

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#0.238.122':139
'21#.#0.61.115':139
'21#.#0.13.160':139
'21#.#0.252.73':139
'21#.#0.12.150':139
'21#.#0.115.88':139
'21#.#0.158.249':139
'21#.#0.156.31':139
'21#.#0.81.62':139
'21#.#0.197.80':139
'21#.#0.74.114':139
'21#.#0.67.164':139
'21#.#0.21.78':139
'21#.#0.164.108':445
'21#.#0.254.217':445
'21#.#0.36.222':445
'21#.#0.202.24':139
'21#.#0.209.103':139
'21#.50.46.7':139
'21#.#0.18.235':139
'21#.#0.160.188':139
'21#.#0.12.150':445
'21#.#0.13.160':445
'21#.#0.252.73':445
'21#.#0.209.103':445
'21#.#0.74.114':445
'21#.#0.197.80':445
'21#.#0.156.31':445
'21#.#0.81.62':445
'21#.#0.238.122':445
'21#.#0.61.115':445
'21#.#0.202.24':445
'21#.#0.59.232':139
'21#.#0.35.194':139
'21#.#0.166.246':139
'21#.#0.52.219':139
'21#.#0.160.52':139
'21#.#0.160.188':445
'21#.50.46.7':445
'21#.#0.18.235':445
'21#.#0.67.164':445
'21#.#0.21.78':445
'21#.#0.81.186':445
'21#.#0.81.186':139
'21#.#0.254.217':139
'21#.#0.7.168':139
'21#.#0.30.45':139
'21#.#0.238.105':139
'21#.#0.116.90':445
'21#.#0.181.81':445
'21#.#0.192.108':445
'21#.#0.36.222':139
'21#.#0.164.108':139
'21#.#0.58.189':139
'21#.#0.158.238':139
'21#.#0.15.98':139
'21#.#0.248.239':139
'21#.#0.124.196':139
'21#.#0.239.124':139
'21#.#0.114.207':139
'21#.#0.67.139':139
'21#.#0.207.197':139
'21#.#0.181.89':139
'21#.#0.197.180':139
'21#.#0.207.197':445
'21#.#0.114.207':445
'21#.#0.197.180':445
'21#.#0.15.98':445
'21#.#0.181.89':445
'21#.#0.238.105':445
'21#.#0.7.168':445
'21#.#0.30.45':445
'21#.#0.67.139':445
'21#.#0.58.189':445
'21#.#0.158.238':445
'21#.#0.117.104':445
'21#.#0.202.139':445
'21#.#0.222.202':445
'21#.#0.31.196':445
'21#.#0.105.237':445
'21#.#0.239.124':445
'21#.#0.248.239':445
'21#.#0.124.196':445
'21#.#0.151.35':445
'21#.#0.216.56':445
'21#.#0.115.88':445
'21#.#0.79.166':445
'21#.#0.20.101':445
'21#.#0.166.224':445
'21#.#0.113.108':445
'21#.#0.42.22':445
'21#.#0.15.39':139
'21#.#0.156.225':139
'21#.#0.222.76':445
'21#.#0.193.114':445
'21#.#0.28.80':445
'21#.50.4.59':445
'21#.#0.211.17':445
'21#.#0.243.204':445
'21#.#0.41.183':445
'21#.#0.74.163':445
'21#.#0.11.125':445
'21#.#0.158.48':445
'21#.#0.191.157':445
'21#.#0.85.153':445
'21#.#0.165.158':445
'21#.#0.96.121':445
'21#.#0.196.77':139
'21#.#0.16.11':139
'21#.#0.0.173':139
'21#.#0.108.148':139
'21#.#0.103.29':139
'21#.#0.163.168':139
'21#.#0.130.187':139
'21#.#0.89.244':139
'21#.#0.47.163':139
'21#.#0.132.27':139
'21#.#0.106.79':139
'21#.#0.128.89':139
'21#.#0.227.116':139
'21#.#0.193.169':139
'21#.#0.4.110':139
'21#.#0.160.197':139
'21#.#0.246.150':139
'21#.#0.200.20':139
'21#.#0.62.88':139
'21#.#0.189.235':139
'21#.#0.38.54':139
'21#.#0.60.210':445
'21#.#0.60.210':139
'21#.#0.74.163':139
'21#.#0.109.104':139
'21#.#0.158.35':139
'21#.#0.122.138':139
'21#.#0.243.204':139
'21#.#0.165.158':139
'21#.#0.211.17':139
'21#.#0.11.125':139
'21#.#0.41.183':139
'21#.#0.223.19':139
'21#.#0.166.246':445
'21#.#0.59.232':445
'21#.#0.160.52':445
'21#.#0.158.249':445
'21#.#0.52.219':445
'21#.#0.104.226':139
'21#.#0.11.195':139
'21#.#0.254.188':139
'21#.#0.35.194':445
'21#.#0.155.250':139
'21#.#0.254.188':445
'21#.#0.104.226':445
'21#.#0.155.250':445
'21#.#0.28.80':139
'21#.#0.222.76':139
'21#.#0.122.138':445
'21#.#0.109.104':445
'21#.#0.158.35':445
'21#.#0.11.195':445
'21#.#0.223.19':445
'21#.#0.193.114':139
'21#.#0.191.157':139
'21#.50.4.59':139
'21#.#0.158.48':139
'21#.#0.96.121':139
'21#.#0.85.153':139
'21#.#0.79.166':139
'21#.#0.20.101':139
'21#.#0.166.224':139
'21#.#0.113.108':139
'21#.#0.42.22':139
'21#.#0.216.56':139
'21#.#0.21.223':445
'21#.#0.138.184':445
'21#.#0.190.60':445
'21#.#0.227.189':445
'21#.#0.133.172':445
'21#.#0.27.223':445
'21#.#0.11.73':445
'21#.#0.202.61':445
'21#.#0.43.157':445
'21#.#0.120.228':445
'21#.#0.104.56':445
'21#.#0.40.161':139
'21#.#0.22.40':139
'21#.#0.175.65':139
'21#.#0.173.236':139
'21#.#0.44.244':139
'21#.#0.111.215':445
'21#.#0.38.212':445
'21#.#0.16.140':139
'21#.#0.171.22':139
'21#.#0.19.94':139
'21#.#0.16.77':445
'21#.#0.14.16':445
'21#.#0.77.27':445
'21#.#0.162.233':445
'21#.#0.26.229':445
'21#.#0.150.163':445
'21#.#0.215.150':445
'21#.#0.152.62':445
'21#.#0.111.23':445
'21#.#0.193.96':445
'21#.#0.63.15':445
'21#.#0.50.77':445
'21#.#0.164.68':445
'21#.#0.92.185':445
'21#.#0.114.179':445
'21#.#0.45.73':445
'21#.#0.70.127':445
'21#.50.16.5':445
'21#.#0.110.221':445
'21#.#0.52.40':445
'21#.#0.220.135':445
'21#.#0.240.47':139
'21#.#0.45.73':139
'21#.#0.92.185':139
'21#.#0.114.179':139
'21#.#0.27.223':139
'21#.#0.11.73':139
'21#.#0.220.135':139
'21#.#0.110.221':139
'21#.#0.52.40':139
'21#.#0.50.77':139
'21#.#0.164.68':139
'21#.#0.202.61':139
'21#.#0.38.212':139
'21#.#0.104.56':139
'21#.#0.227.189':139
'21#.#0.190.60':139
'21#.#0.111.215':139
'21#.#0.43.157':139
'21#.#0.120.228':139
'21#.#0.138.184':139
'21#.#0.21.223':139
'21#.#0.133.172':139
'21#.#0.189.92':139
'21#.#0.22.112':139
'21#.#0.214.247':139
'21#.#0.150.163':139
'21#.#0.215.150':139
'21#.#0.91.161':139
'21#.#0.229.203':139
'21#.#0.161.165':139
'21#.#0.85.66':139
'21#.#0.31.69':139
'21#.#0.152.62':139
'21#.#0.162.233':139
'21#.#0.26.229':139
'21#.#0.63.15':139
'21#.#0.70.127':139
'21#.50.16.5':139
'21#.#0.111.23':139
'21#.#0.193.96':139
'21#.#0.14.16':139
'21#.#0.77.27':139
'21#.#0.16.77':139
'21#.#0.214.247':445
'21#.#0.139.12':445
'21#.#0.121.19':445
'21#.#0.43.54':445
'21#.#0.163.177':445
'21#.#0.195.163':445
'21#.#0.188.200':445
'21#.#0.218.249':445
'21#.#0.98.214':445
'21#.#0.10.63':445
'21#.#0.197.95':445
'21#.#0.208.73':445
'21#.#0.175.46':139
'21#.#0.147.48':139
'21#.#0.151.71':139
'21#.#0.209.238':139
'21#.#0.152.83':139
'21#.#0.50.92':139
'21#.#0.118.5':139
'21#.#0.56.88':139
'21#.#0.149.219':139
'21#.#0.168.188':139
'21#.#0.181.81':139
'21#.#0.31.196':139
'21#.#0.116.90':139
'21#.#0.118.5':445
'21#.#0.192.108':139
'21#.#0.202.139':139
'21#.#0.151.35':139
'21#.#0.117.104':139
'21#.#0.105.237':139
'21#.#0.222.202':139
'21#.#0.50.92':445
'21#.#0.152.83':445
'21#.#0.151.71':445
'21#.#0.209.238':445
'21#.#0.62.221':445
'21#.#0.185.213':445
'21#.#0.168.188':445
'21#.#0.56.88':445
'21#.#0.149.219':445
'21#.#0.175.46':445
'21#.#0.147.48':445
'21#.#0.185.213':139
'21#.#0.19.94':445
'21#.#0.16.140':445
'21#.#0.171.22':445
'21#.#0.40.161':445
'21#.#0.22.40':445
'21#.#0.21.223':9988
'21#.#0.120.228':9988
'21#.#0.38.212':9988
'21#.#0.111.215':9988
'21#.#0.104.56':9988
'21#.#0.175.65':445
'21#.#0.31.69':445
'21#.#0.161.165':445
'21#.#0.85.66':445
'21#.#0.189.92':445
'21#.#0.22.112':445
'21#.#0.173.236':445
'21#.#0.44.244':445
'21#.#0.240.47':445
'21#.#0.91.161':445
'21#.#0.229.203':445
'21#.#0.121.19':139
'21#.#0.10.63':139
'21#.#0.139.12':139
'21#.#0.195.163':139
'21#.#0.43.54':139
'21#.#0.218.249':139
'21#.#0.62.221':139
'21#.#0.188.200':139
'21#.#0.197.95':139
'21#.#0.98.214':139
'21#.#0.163.177':139
'21#.#0.220.135':9988
'21#.#0.63.15':9988
'21#.#0.164.68':9988
'21#.#0.43.157':9988
'21#.#0.92.185':9988
'21#.#0.152.62':9988
'21#.#0.208.73':139
'21#.#0.16.77':9988
'21#.#0.162.233':9988
'21#.#0.77.27':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней