Trojan.DownLoader12.29107

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#5.23.35':139
'21#.#5.99.141':139
'21#.35.25.3':139
'21#.#5.253.14':139
'21#.#5.119.76':139
'21#.#5.32.205':139
'21#.#5.29.56':139
'21#.#5.24.193':139
'21#.#5.128.189':139
'21#.#5.38.129':139
'21#.#5.251.118':139
'21#.#5.150.188':445
'21#.#5.84.10':445
'21#.#5.139.69':445
'21#.#5.57.167':445
'21#.#5.70.58':445
'21#.#5.52.216':139
'21#.#5.17.73':139
'21#.#5.83.45':139
'21#.#5.19.84':445
'21#.#5.69.14':139
'21#.#5.128.189':445
'21#.#5.38.129':445
'21#.#5.99.141':445
'21#.35.25.3':445
'21#.#5.23.35':445
'21#.#5.54.114':445
'21#.#5.236.63':445
'21#.#5.29.56':445
'21#.#5.24.193':445
'21#.#5.32.205':445
'21#.#5.119.76':445
'21#.#5.108.186':139
'21#.#5.69.14':445
'21#.#5.27.89':139
'21#.#5.54.114':139
'21#.#5.236.63':139
'21#.#5.251.118':445
'21#.#5.253.14':445
'21#.#5.17.73':445
'21#.#5.83.45':445
'21#.#5.52.216':445
'21#.#5.33.47':445
'21#.#5.150.188':139
'21#.#5.84.10':139
'21#.#5.139.69':139
'21#.#5.57.167':139
'21#.#5.70.58':139
'21#.#5.162.222':445
'21#.#5.1.162':445
'21#.#5.228.109':445
'21#.#5.19.84':139
'21#.#5.137.197':445
'21#.#5.33.47':139
'21#.#5.28.224':139
'21#.#5.14.199':139
'21#.#5.3.127':139
'21#.#5.64.18':139
'21#.#5.243.104':139
'21#.#5.188.49':139
'21#.35.9.41':139
'21#.#5.61.91':139
'21#.#5.131.1':139
'21#.#5.211.115':139
'21#.#5.28.224':445
'21#.#5.14.199':445
'21#.#5.3.127':445
'21#.#5.64.18':445
'21#.#5.243.104':445
'21#.#5.188.49':445
'21#.35.9.41':445
'21#.#5.61.91':445
'21#.#5.131.1':445
'21#.#5.211.115':445
'21#.#5.48.172':445
'21#.#5.12.199':445
'21#.#5.78.13':445
'21#.#5.198.117':445
'21#.#5.227.52':445
'21#.#5.19.104':445
'21#.#5.139.202':445
'21#.#5.46.211':445
'21#.#5.43.151':445
'21#.#5.243.77':445
'21#.#5.25.180':445
'21#.#5.135.4':445
'21#.#5.241.94':445
'21#.#5.75.210':445
'21#.#5.229.243':445
'21#.#5.33.41':445
'21#.#5.22.104':445
'21#.#5.176.22':445
'21#.#5.137.109':445
'21#.#5.232.116':445
'21#.#5.89.248':445
'21#.#5.244.133':445
'21#.#5.201.139':445
'21#.#5.52.176':445
'21#.#5.140.128':445
'21#.#5.71.65':445
'21#.#5.128.71':445
'21#.#5.208.222':445
'21#.#5.75.124':445
'21#.#5.216.4':445
'21#.#5.57.187':445
'21#.35.9.58':445
'21#.#5.49.198':139
'21#.#5.97.71':139
'21#.#5.47.26':139
'21#.#5.69.219':139
'21#.#5.39.159':139
'21#.#5.183.207':139
'21#.#5.182.82':139
'21#.#5.8.164':139
'21#.#5.6.242':139
'21#.#5.25.51':139
'21#.#5.212.53':139
'21#.#5.154.145':139
'21#.#5.86.90':139
'21#.#5.77.12':139
'21#.#5.76.232':445
'21#.#5.12.161':445
'21#.#5.171.76':139
'21#.#5.50.76':139
'21#.#5.131.179':139
'21#.#5.249.43':139
'21#.#5.101.220':139
'21#.#5.203.127':445
'21#.#5.201.139':139
'21#.#5.52.176':139
'21#.#5.140.128':139
'21#.#5.71.65':139
'21#.#5.128.71':139
'21#.#5.208.222':139
'21#.#5.75.124':139
'21#.#5.216.4':139
'21#.#5.57.187':139
'21#.35.9.58':139
'21#.#5.203.127':139
'21#.#5.99.69':139
'21#.#5.211.36':139
'21#.#5.158.128':139
'21#.#5.27.89':445
'21#.#5.108.186':445
'21#.#5.132.167':139
'21#.#5.132.73':139
'21#.#5.187.213':139
'21#.#5.131.211':139
'21#.#5.102.116':139
'21#.#5.99.69':445
'21#.#5.211.36':445
'21#.#5.158.128':445
'21#.#5.76.232':139
'21#.#5.12.161':139
'21#.#5.132.167':445
'21#.#5.132.73':445
'21#.#5.187.213':445
'21#.#5.131.211':445
'21#.#5.102.116':445
'21#.#5.176.22':139
'21#.#5.75.210':139
'21#.#5.135.4':139
'21#.#5.33.41':139
'21#.#5.244.133':139
'21#.#5.229.243':139
'21#.#5.137.109':139
'21#.#5.22.104':139
'21#.#5.89.248':139
'21#.#5.241.94':139
'21#.#5.232.116':139
'21#.#5.48.172':139
'21#.#5.43.117':445
'21#.#5.20.47':445
'21#.#5.134.103':445
'21#.#5.115.111':445
'21#.#5.96.80':445
'21#.#5.36.175':445
'21#.#5.99.188':445
'21#.#5.24.243':445
'21#.#5.30.27':445
'21#.#5.107.100':445
'21#.#5.51.229':445
'21#.#5.26.118':139
'21#.#5.247.75':139
'21#.#5.185.0':139
'21#.#5.142.225':139
'21#.#5.118.111':139
'21#.#5.219.172':445
'21#.#5.20.170':445
'21#.#5.245.68':139
'21#.#5.159.94':139
'21#.#5.29.17':139
'21#.#5.4.129':445
'21#.#5.169.4':445
'21#.#5.49.138':445
'21#.#5.215.96':445
'21#.#5.142.254':445
'21#.35.41.9':445
'21#.#5.96.33':445
'21#.#5.216.15':445
'21#.#5.205.10':445
'21#.#5.43.46':445
'21#.#5.130.164':445
'21#.#5.70.10':445
'21#.#5.147.227':445
'21#.#5.74.100':445
'21#.#5.155.60':445
'21#.35.6.15':445
'21#.#5.73.130':445
'21#.#5.220.197':445
'21#.#5.130.174':445
'21#.#5.76.111':445
'21#.#5.163.209':445
'21#.#5.56.191':139
'21#.35.6.15':139
'21#.#5.74.100':139
'21#.#5.155.60':139
'21#.#5.36.175':139
'21#.#5.99.188':139
'21#.#5.163.209':139
'21#.#5.130.174':139
'21#.#5.76.111':139
'21#.#5.70.10':139
'21#.#5.147.227':139
'21#.#5.24.243':139
'21#.#5.219.172':139
'21#.#5.96.80':139
'21#.#5.115.111':139
'21#.#5.20.170':139
'21#.#5.51.229':139
'21#.#5.30.27':139
'21#.#5.107.100':139
'21#.#5.20.47':139
'21#.#5.134.103':139
'21#.#5.43.117':139
'21#.#5.158.253':139
'21#.#5.161.171':139
'21#.35.2.85':139
'21#.35.41.9':139
'21#.#5.96.33':139
'21#.#5.240.142':139
'21#.#5.91.47':139
'21#.#5.17.113':139
'21#.#5.15.161':139
'21#.#5.44.15':139
'21#.#5.43.46':139
'21#.#5.215.96':139
'21#.#5.142.254':139
'21#.#5.130.164':139
'21#.#5.73.130':139
'21#.#5.220.197':139
'21#.#5.205.10':139
'21#.#5.216.15':139
'21#.#5.169.4':139
'21#.#5.49.138':139
'21#.#5.4.129':139
'21#.#5.247.28':445
'21#.35.4.8':445
'21#.#5.21.117':445
'21#.#5.25.227':445
'21#.#5.102.29':445
'21#.#5.53.107':445
'21#.#5.208.123':445
'21#.#5.137.210':445
'21#.#5.212.42':445
'21#.#5.139.212':445
'21#.#5.70.149':445
'21#.#5.250.102':139
'21#.35.6.19':139
'21#.35.1.35':139
'21#.#5.53.107':139
'21#.#5.208.123':139
'21#.35.41.2':139
'21#.#5.103.76':445
'21#.#5.8.114':139
'21#.#5.50.128':139
'21#.#5.241.100':139
'21#.#5.12.199':139
'21#.#5.78.13':139
'21#.#5.198.117':139
'21#.#5.227.52':139
'21#.#5.19.104':139
'21#.#5.139.202':139
'21#.#5.46.211':139
'21#.#5.43.151':139
'21#.#5.243.77':139
'21#.#5.25.180':139
'21#.#5.1.162':139
'21#.#5.50.128':445
'21#.#5.241.100':445
'21#.35.6.19':445
'21#.35.1.35':445
'21#.#5.250.102':445
'21#.#5.228.109':139
'21#.#5.162.222':139
'21#.#5.137.197':139
'21#.#5.8.114':445
'21#.35.41.2':445
'21#.#5.137.210':139
'21#.#5.159.94':445
'21#.#5.29.17':445
'21#.#5.247.75':445
'21#.#5.185.0':445
'21#.#5.26.118':445
'21#.#5.43.117':9988
'21#.#5.24.243':9988
'21#.#5.115.111':9988
'21#.#5.245.68':445
'21#.#5.219.172':9988
'21#.#5.118.111':445
'21#.#5.15.161':445
'21#.#5.44.15':445
'21#.#5.161.171':445
'21#.35.2.85':445
'21#.#5.158.253':445
'21#.#5.56.191':445
'21#.#5.142.225':445
'21#.#5.91.47':445
'21#.#5.17.113':445
'21#.#5.240.142':445
'21#.#5.25.227':139
'21#.#5.102.29':139
'21#.#5.70.149':139
'21#.#5.96.33':9988
'21#.#5.103.76':139
'21#.#5.212.42':139
'21#.#5.139.212':139
'21#.35.4.8':139
'21#.#5.21.117':139
'21#.#5.247.28':139
'21#.#5.43.46':9988
'21#.#5.130.174':9988
'21#.#5.76.111':9988
'21#.#5.147.227':9988
'21#.#5.99.188':9988
'21#.#5.155.60':9988
'21#.#5.142.254':9988
'21#.#5.169.4':9988
'21#.#5.215.96':9988
'21#.#5.73.130':9988
'21#.#5.4.129':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней