Trojan.DownLoader12.29013

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#9.22.223':139
'21#.#9.23.131':139
'21#.#9.233.231':139
'21#.#9.11.58':139
'21#.#9.235.218':139
'21#.#9.99.225':139
'21#.#9.51.129':139
'21#.#9.210.65':139
'21#.#9.78.144':139
'21#.#9.160.203':139
'21#.#9.1.174':139
'21#.#9.153.216':139
'21#.#9.208.153':139
'21#.#9.216.133':139
'21#.#9.180.25':139
'21#.#9.197.140':139
'21#.#9.104.225':139
'21#.#9.50.27':139
'21#.#9.121.217':139
'21#.#9.78.209':139
'21#.#9.167.78':139
'21#.#9.167.78':445
'21#.#9.121.217':445
'21#.#9.78.209':445
'21#.#9.153.216':445
'21#.#9.208.153':445
'21#.#9.11.58':445
'21#.#9.235.218':445
'21#.#9.1.174':445
'21#.#9.104.225':445
'21#.#9.50.27':445
'21#.#9.216.133':445
'21#.29.43.8':139
'21#.#9.132.234':139
'21#.#9.50.154':139
'21#.#9.75.201':139
'21#.#9.104.75':139
'21#.#9.180.25':445
'21#.#9.197.140':445
'21#.#9.213.118':445
'21#.#9.92.220':445
'21#.#9.180.137':445
'21#.#9.213.118':139
'21#.#9.141.184':139
'21#.#9.45.237':139
'21#.#9.33.135':139
'21#.#9.74.79':139
'21#.#9.217.76':139
'21#.#9.64.136':445
'21#.#9.253.37':445
'21#.#9.72.113':445
'21#.#9.119.140':139
'21#.#9.128.202':139
'21#.#9.183.13':139
'21#.#9.46.82':139
'21#.#9.99.171':139
'21#.#9.161.63':139
'21#.#9.98.112':139
'21#.#9.212.205':139
'21#.#9.167.60':139
'21#.#9.3.180':139
'21#.#9.24.153':139
'21#.#9.130.99':139
'21#.#9.103.236':139
'21#.#9.33.135':445
'21#.#9.141.184':445
'21#.#9.217.76':445
'21#.#9.183.13':445
'21#.#9.74.79':445
'21#.#9.92.220':139
'21#.#9.180.137':139
'21#.#9.128.202':445
'21#.#9.45.237':445
'21#.#9.119.140':445
'21#.#9.3.180':445
'21#.#9.161.63':445
'21#.#9.46.82':445
'21#.#9.212.205':445
'21#.#9.33.160':445
'21#.#9.98.112':445
'21#.#9.24.153':445
'21#.#9.167.60':445
'21#.#9.103.236':445
'21#.#9.99.171':445
'21#.#9.130.99':445
'21#.#9.233.231':445
'21#.#9.105.223':139
'21#.#9.203.72':139
'21#.#9.20.69':139
'21#.#9.117.198':445
'21#.#9.207.147':445
'21#.#9.241.83':139
'21#.#9.245.241':139
'21#.#9.84.158':139
'21#.#9.51.140':139
'21#.#9.118.58':139
'21#.#9.198.113':445
'21#.#9.205.121':445
'21#.#9.70.232':445
'21#.#9.122.97':445
'21#.#9.32.123':445
'21#.#9.98.49':445
'21#.#9.17.82':445
'21#.#9.113.2':445
'21#.#9.218.54':445
'21#.#9.45.109':445
'21#.#9.120.45':445
'21#.#9.8.104':139
'21#.#9.64.30':139
'21#.#9.94.223':139
'21#.#9.135.96':139
'21#.#9.226.40':139
'21#.#9.255.59':139
'21#.#9.58.203':139
'21#.#9.84.94':139
'21#.#9.185.103':139
'21#.#9.93.185':139
'21#.#9.112.28':139
'21#.#9.45.232':139
'21#.#9.14.84':139
'21#.#9.38.43':139
'21#.#9.224.122':139
'21#.#9.68.190':139
'21#.#9.192.57':139
'21#.#9.179.8':139
'21#.#9.57.180':139
'21#.#9.25.59':139
'21#.#9.147.92':139
'21#.#9.11.150':445
'21#.#9.192.166':139
'21#.#9.64.57':139
'21#.#9.97.68':139
'21#.#9.132.234':445
'21#.#9.238.120':139
'21#.#9.224.211':139
'21#.#9.11.150':139
'21#.#9.245.201':139
'21#.#9.124.126':139
'21#.#9.2.226':139
'21#.29.43.8':445
'21#.#9.160.203':445
'21#.#9.210.65':445
'21#.#9.78.144':445
'21#.#9.22.223':445
'21#.#9.23.131':445
'21#.#9.104.75':445
'21#.#9.50.154':445
'21#.#9.75.201':445
'21#.#9.99.225':445
'21#.#9.51.129':445
'21#.#9.97.68':445
'21#.#9.192.166':445
'21#.#9.238.120':445
'21#.#9.117.198':139
'21#.#9.207.147':139
'21#.#9.245.201':445
'21#.#9.224.211':445
'21#.#9.2.226':445
'21#.#9.64.57':445
'21#.#9.124.126':445
'21#.#9.198.113':139
'21#.#9.205.121':139
'21#.#9.70.232':139
'21#.#9.122.97':139
'21#.#9.32.123':139
'21#.#9.98.49':139
'21#.#9.17.82':139
'21#.#9.113.2':139
'21#.#9.218.54':139
'21#.#9.45.109':139
'21#.#9.120.45':139
'21#.#9.33.160':139
'21#.#9.42.249':445
'21#.#9.135.247':445
'21#.#9.233.189':445
'21#.#9.254.12':445
'21#.#9.12.168':445
'21#.#9.125.177':445
'21#.#9.208.106':445
'21#.#9.254.154':445
'21#.#9.80.152':445
'21#.#9.223.229':445
'21#.#9.215.100':445
'21#.#9.92.120':139
'21#.#9.33.230':139
'21#.#9.119.158':139
'21#.#9.161.86':139
'21#.#9.158.161':139
'21#.#9.255.132':445
'21#.#9.140.74':445
'21#.#9.147.152':139
'21#.#9.89.69':139
'21#.#9.69.159':139
'21#.#9.118.174':445
'21#.#9.8.134':445
'21#.#9.13.117':445
'21#.#9.187.118':445
'21#.#9.116.74':445
'21#.#9.253.70':445
'21#.#9.56.70':445
'21#.#9.71.77':445
'21#.#9.84.117':445
'21#.#9.77.84':445
'21#.#9.208.66':445
'21#.#9.185.178':445
'21#.#9.189.190':445
'21#.#9.50.117':445
'21#.#9.49.243':445
'21#.#9.70.217':445
'21#.#9.69.231':445
'21#.#9.54.160':445
'21#.#9.234.147':445
'21#.#9.29.119':445
'21#.#9.147.170':445
'21#.#9.56.155':139
'21#.#9.70.217':139
'21#.#9.50.117':139
'21#.#9.49.243':139
'21#.#9.125.177':139
'21#.#9.208.106':139
'21#.#9.234.147':139
'21#.#9.147.170':139
'21#.#9.29.119':139
'21#.#9.185.178':139
'21#.#9.189.190':139
'21#.#9.254.154':139
'21#.#9.215.100':139
'21#.#9.255.132':139
'21#.#9.140.74':139
'21#.#9.254.12':139
'21#.#9.12.168':139
'21#.#9.80.152':139
'21#.#9.223.229':139
'21#.#9.135.247':139
'21#.#9.233.189':139
'21#.#9.42.249':139
'21#.#9.44.53':139
'21#.#9.14.155':139
'21#.#9.189.131':139
'21#.#9.253.70':139
'21#.#9.56.70':139
'21#.#9.30.69':139
'21#.#9.163.129':139
'21#.#9.137.237':139
'21#.#9.201.184':139
'21#.#9.175.252':139
'21#.#9.71.77':139
'21#.#9.187.118':139
'21#.#9.116.74':139
'21#.#9.208.66':139
'21#.#9.69.231':139
'21#.#9.54.160':139
'21#.#9.84.117':139
'21#.#9.77.84':139
'21#.#9.8.134':139
'21#.#9.13.117':139
'21#.#9.118.174':139
'21#.#9.189.131':445
'21#.#9.106.146':445
'21#.#9.202.200':445
'21#.#9.175.137':445
'21#.#9.102.220':139
'21#.#9.196.6':445
'21#.#9.207.222':445
'21#.#9.239.207':445
'21#.29.1.35':445
'21#.#9.115.29':445
'21#.#9.228.201':445
'21#.#9.238.80':139
'21#.#9.130.198':139
'21#.#9.73.131':139
'21#.#9.198.166':139
'21#.#9.230.101':139
'21#.#9.80.111':139
'21#.#9.207.141':139
'21#.#9.63.39':139
'21#.#9.134.213':139
'21#.#9.12.185':139
'21#.#9.185.23':139
'21#.#9.207.141':445
'21#.#9.63.39':445
'21#.#9.134.213':445
'21#.#9.12.185':445
'21#.#9.185.23':445
'21#.#9.64.136':139
'21#.#9.253.37':139
'21#.#9.72.113':139
'21#.#9.238.80':445
'21#.#9.102.220':445
'21#.#9.73.131':445
'21#.#9.46.129':445
'21#.#9.100.225':445
'21#.#9.90.58':445
'21#.#9.250.239':445
'21#.#9.57.251':445
'21#.#9.198.166':445
'21#.#9.130.198':445
'21#.#9.80.111':445
'21#.#9.102.32':445
'21#.#9.230.101':445
'21#.#9.102.32':139
'21#.#9.69.159':445
'21#.#9.147.152':445
'21#.#9.89.69':445
'21#.#9.92.120':445
'21#.#9.33.230':445
'21#.#9.70.217':9988
'21#.#9.50.117':9988
'21#.#9.125.177':9988
'21#.#9.233.189':9988
'21#.#9.223.229':9988
'21#.#9.119.158':445
'21#.#9.175.252':445
'21#.#9.137.237':445
'21#.#9.201.184':445
'21#.#9.44.53':445
'21#.#9.14.155':445
'21#.#9.161.86':445
'21#.#9.158.161':445
'21#.#9.56.155':445
'21#.#9.30.69':445
'21#.#9.163.129':445
'21#.#9.207.222':139
'21#.#9.239.207':139
'21#.29.1.35':139
'21#.#9.115.29':139
'21#.#9.228.201':139
'21#.#9.46.129':139
'21#.#9.100.225':139
'21#.#9.90.58':139
'21#.#9.250.239':139
'21#.#9.57.251':139
'21#.#9.202.200':139
'21#.#9.84.117':9988
'21#.#9.77.84':9988
'21#.#9.8.134':9988
'21#.#9.189.190':9988
'21#.#9.69.231':9988
'21#.#9.175.137':139
'21#.#9.106.146':139
'21#.#9.196.6':139
'21#.#9.44.53':9988
'21#.#9.201.184':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней