Trojan.DownLoader12.29075

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##5.18.178':139
'69.##5.145.224':139
'69.##5.177.173':139
'69.##5.133.174':139
'69.##5.227.226':139
'69.##5.45.38':139
'69.#15.62.5':139
'69.##5.176.110':139
'69.##5.92.32':139
'69.##5.190.98':139
'69.##5.71.159':139
'69.##5.186.159':139
'69.##5.216.130':139
'69.#15.43.1':139
'69.##5.171.152':139
'69.##5.85.136':139
'69.##5.31.22':139
'69.##5.124.206':139
'69.##5.187.85':139
'69.##5.14.252':139
'69.##5.164.87':139
'69.##5.164.87':445
'69.##5.187.85':445
'69.##5.14.252':445
'69.##5.186.159':445
'69.##5.216.130':445
'69.##5.133.174':445
'69.##5.227.226':445
'69.##5.71.159':445
'69.##5.31.22':445
'69.##5.124.206':445
'69.#15.43.1':445
'69.##5.196.49':445
'69.##5.131.173':445
'69.##5.108.59':139
'69.##5.40.84':139
'69.##5.59.40':139
'69.##5.171.152':445
'69.##5.85.136':445
'69.##5.155.40':445
'69.##5.35.142':445
'69.##5.231.12':445
'69.##5.106.172':139
'69.##5.160.217':445
'69.##5.168.104':139
'69.##5.91.50':139
'69.##5.191.135':139
'69.##5.172.88':445
'69.##5.111.7':445
'69.##5.88.89':445
'69.##5.251.0':445
'69.##5.90.10':445
'69.##5.193.196':139
'69.##5.254.221':139
'69.##5.132.140':139
'69.##5.88.154':139
'69.##5.30.145':139
'69.##5.139.29':139
'69.##5.71.186':139
'69.##5.93.117':139
'69.##5.148.188':139
'69.##5.56.179':139
'69.##5.79.209':139
'69.##5.168.104':445
'69.##5.106.172':445
'69.##5.191.135':445
'69.##5.193.196':445
'69.##5.91.50':445
'69.##5.231.12':139
'69.##5.155.40':139
'69.##5.35.142':139
'69.##5.196.49':139
'69.##5.131.173':139
'69.##5.93.117':445
'69.##5.88.154':445
'69.##5.254.221':445
'69.##5.139.29':445
'69.##5.144.96':445
'69.##5.30.145':445
'69.##5.148.188':445
'69.##5.71.186':445
'69.##5.79.209':445
'69.##5.132.140':445
'69.##5.56.179':445
'69.##5.35.170':139
'69.##5.46.163':139
'69.##5.47.108':139
'69.##5.84.215':445
'69.#15.58.0':445
'69.##5.15.231':139
'69.##5.242.119':139
'69.##5.160.86':139
'69.#15.7.47':139
'69.##5.112.44':139
'69.##5.105.110':445
'69.##5.109.250':445
'69.##5.166.81':445
'69.##5.3.214':445
'69.##5.210.86':445
'69.##5.155.251':445
'69.##5.161.238':445
'69.#15.3.88':445
'69.##5.122.225':445
'69.##5.58.245':445
'69.##5.111.205':445
'69.##5.202.135':139
'69.##5.168.253':139
'69.##5.214.202':139
'69.##5.64.94':139
'69.##5.202.218':139
'69.##5.16.245':139
'69.##5.169.9':139
'69.##5.108.110':139
'69.##5.22.247':139
'69.##5.110.22':139
'69.##5.26.68':139
'69.##5.89.219':139
'69.##5.74.247':139
'69.#15.28.1':139
'69.##5.242.147':139
'69.##5.133.20':139
'69.##5.25.210':139
'69.##5.128.218':139
'69.##5.150.212':139
'69.##5.188.130':139
'69.##5.212.187':139
'69.#15.55.2':139
'69.##5.12.108':139
'69.##5.11.72':139
'69.##5.31.108':139
'69.##5.151.243':139
'69.##5.234.22':139
'69.##5.210.86':139
'69.##5.158.72':139
'69.##5.186.41':139
'69.##5.184.227':139
'69.##5.108.59':445
'69.##5.92.32':445
'69.##5.190.98':445
'69.##5.145.224':445
'69.##5.18.178':445
'69.##5.177.173':445
'69.##5.40.84':445
'69.##5.59.40':445
'69.#15.62.5':445
'69.##5.45.38':445
'69.##5.176.110':445
'69.##5.11.72':445
'69.#15.55.2':445
'69.##5.151.243':445
'69.#15.58.0':139
'69.##5.31.108':445
'69.##5.158.72':445
'69.##5.234.22':445
'69.##5.184.227':445
'69.##5.12.108':445
'69.##5.186.41':445
'69.##5.84.215':139
'69.##5.166.81':139
'69.##5.58.245':139
'69.##5.109.250':139
'69.##5.155.251':139
'69.##5.3.214':139
'69.#15.3.88':139
'69.##5.105.110':139
'69.##5.161.238':139
'69.##5.111.205':139
'69.##5.122.225':139
'69.##5.144.96':139
'69.##5.201.168':445
'69.##5.217.211':445
'69.##5.125.45':445
'69.##5.20.116':445
'69.##5.168.35':445
'69.##5.76.114':445
'69.##5.91.76':445
'69.##5.252.161':445
'69.##5.68.187':445
'69.##5.12.232':445
'69.##5.140.168':445
'69.##5.105.136':139
'69.##5.74.105':139
'69.##5.126.112':139
'69.##5.86.101':139
'69.##5.63.68':139
'69.##5.73.15':139
'69.##5.47.57':445
'69.##5.131.23':139
'69.##5.252.232':139
'69.##5.37.32':139
'69.##5.11.45':445
'69.##5.243.210':445
'69.##5.198.30':445
'69.##5.229.229':445
'69.##5.78.197':445
'69.##5.204.93':445
'69.##5.85.204':445
'69.##5.93.134':445
'69.##5.24.166':445
'69.##5.64.124':445
'69.##5.191.160':445
'69.##5.69.234':445
'69.##5.249.71':445
'69.##5.83.243':445
'69.#15.8.69':445
'69.##5.196.198':445
'69.##5.219.113':445
'69.##5.33.221':445
'69.##5.42.71':445
'69.##5.40.54':445
'69.##5.154.40':445
'69.##5.83.243':139
'69.##5.69.234':139
'69.##5.196.198':139
'69.##5.91.76':139
'69.#15.8.69':139
'69.##5.42.71':139
'69.##5.219.113':139
'69.##5.154.40':139
'69.##5.249.71':139
'69.##5.40.54':139
'69.##5.76.114':139
'69.##5.168.35':139
'69.##5.125.45':139
'69.##5.47.57':139
'69.##5.140.168':139
'69.##5.20.116':139
'69.##5.12.232':139
'69.##5.252.161':139
'69.##5.68.187':139
'69.##5.201.168':139
'69.##5.217.211':139
'69.##5.19.230':139
'69.##5.225.36':139
'69.##5.233.88':139
'69.##5.85.204':139
'69.##5.145.49':139
'69.##5.38.122':139
'69.##5.101.38':139
'69.##5.109.42':139
'69.##5.76.243':139
'69.##5.79.170':139
'69.##5.204.93':139
'69.##5.78.197':139
'69.##5.198.30':139
'69.##5.229.229':139
'69.##5.33.221':139
'69.##5.191.160':139
'69.##5.64.124':139
'69.##5.93.134':139
'69.##5.24.166':139
'69.##5.11.45':139
'69.##5.243.210':139
'69.##5.136.97':445
'69.#15.0.39':445
'69.##5.165.72':445
'69.##5.134.217':139
'69.##5.89.175':139
'69.##5.188.121':445
'69.##5.100.99':445
'69.##5.28.92':445
'69.##5.120.140':445
'69.##5.81.121':445
'69.##5.79.68':139
'69.##5.191.13':139
'69.##5.74.110':139
'69.##5.13.30':139
'69.##5.184.75':139
'69.##5.111.193':139
'69.##5.75.82':139
'69.##5.231.74':139
'69.##5.82.116':139
'69.##5.86.86':139
'69.##5.146.69':139
'69.##5.89.175':445
'69.##5.160.217':139
'69.##5.134.217':445
'69.##5.231.74':445
'69.##5.79.68':445
'69.##5.172.88':139
'69.##5.111.7':139
'69.##5.88.89':139
'69.##5.251.0':139
'69.##5.90.10':139
'69.##5.75.82':445
'69.##5.111.193':445
'69.##5.13.30':445
'69.##5.184.75':445
'69.##5.72.191':445
'69.##5.170.41':445
'69.##5.146.69':445
'69.##5.82.116':445
'69.##5.86.86':445
'69.##5.191.13':445
'69.##5.74.110':445
'69.##5.252.232':445
'69.##5.37.32':445
'69.##5.74.105':445
'69.##5.126.112':445
'69.##5.105.136':445
'69.##5.125.45':9988
'69.##5.47.57':9988
'69.##5.140.168':9988
'69.##5.131.23':445
'69.##5.73.15':445
'69.##5.63.68':445
'69.##5.225.36':445
'69.##5.76.243':445
'69.##5.19.230':445
'69.##5.145.49':445
'69.##5.233.88':445
'69.##5.101.38':445
'69.##5.86.101':445
'69.##5.38.122':445
'69.##5.79.170':445
'69.##5.109.42':445
'69.##5.120.140':139
'69.##5.81.121':139
'69.#15.0.39':139
'69.##5.165.72':139
'69.##5.136.97':139
'69.##5.72.191':139
'69.##5.170.41':139
'69.##5.100.99':139
'69.##5.28.92':139
'69.##5.188.121':139
'69.##5.79.170':9988
'69.##5.196.198':9988
'69.##5.83.243':9988
'69.#15.8.69':9988
'69.##5.217.211':9988
'69.##5.201.168':9988
'69.##5.243.210':9988
'69.##5.24.166':9988
'69.##5.198.30':9988
'69.##5.40.54':9988
'69.##5.78.197':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней