Trojan.DownLoader12.29080

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#19.163.157':139
'20#.#19.2.180':139
'20#.#19.87.243':139
'20#.#19.166.251':139
'20#.#19.194.185':139
'20#.#19.46.149':139
'20#.#19.218.119':139
'20#.#19.29.67':139
'20#.#19.153.2':139
'20#.#19.66.153':139
'20#.#19.194.78':139
'20#.#19.41.241':445
'20#.#19.230.228':445
'20#.#19.163.163':445
'20#.#19.123.145':445
'20#.#19.26.5':445
'20#.#19.163.74':139
'20#.#19.98.156':139
'20#.#19.21.216':139
'20#.#19.41.231':445
'20#.#19.32.42':139
'20#.#19.153.2':445
'20#.#19.66.153':445
'20#.#19.2.180':445
'20#.#19.87.243':445
'20#.#19.163.157':445
'20#.#19.92.37':445
'20#.#19.51.92':445
'20#.#19.218.119':445
'20#.#19.29.67':445
'20#.#19.46.149':445
'20#.#19.194.185':445
'20#.#19.203.99':139
'20#.#19.32.42':445
'20#.#19.125.190':139
'20#.#19.92.37':139
'20#.#19.51.92':139
'20#.#19.194.78':445
'20#.#19.166.251':445
'20#.#19.98.156':445
'20#.#19.21.216':445
'20#.#19.163.74':445
'20#.#19.84.77':445
'20#.#19.41.241':139
'20#.#19.230.228':139
'20#.#19.163.163':139
'20#.#19.123.145':139
'20#.#19.26.5':139
'20#.#19.176.22':445
'20#.#19.113.153':445
'20#.#19.23.120':445
'20#.#19.41.231':139
'20#.#19.210.140':445
'20#.#19.84.77':139
'20#.#19.189.4':139
'20#.#19.183.235':139
'20#.#19.39.188':139
'20#.#19.6.40':139
'20#.#19.101.17':139
'20#.#19.136.94':139
'20#.#19.50.211':139
'20#.#19.143.92':139
'20#.#19.128.248':139
'20#.#19.7.34':139
'20#.#19.189.4':445
'20#.#19.183.235':445
'20#.#19.39.188':445
'20#.#19.6.40':445
'20#.#19.101.17':445
'20#.#19.136.94':445
'20#.#19.50.211':445
'20#.#19.143.92':445
'20#.#19.128.248':445
'20#.#19.7.34':445
'20#.#19.177.17':445
'20#.#19.93.23':445
'20#.#19.142.214':445
'20#.#19.189.88':445
'20#.#19.109.180':445
'20#.#19.82.218':445
'20#.#19.79.153':445
'20#.#19.69.119':445
'20#.#19.247.80':445
'20#.#19.107.146':445
'20#.#19.22.108':445
'20#.#19.188.188':445
'20#.#19.224.140':445
'20#.#19.104.122':445
'20#.#19.66.35':445
'20#.#19.107.30':445
'20#.#19.65.98':445
'20#.#19.46.89':445
'20#.#19.164.185':445
'20#.#19.103.118':445
'20#.#19.186.103':445
'20#.#19.214.105':445
'20#.#19.87.123':445
'20#.#19.44.23':445
'20#.#19.189.196':445
'20#.#19.245.32':445
'20#.#19.68.51':445
'20#.#19.114.167':445
'20#.#19.105.119':445
'20#.#19.27.138':445
'20#.#19.209.125':445
'20#.#19.125.239':445
'20#.#19.33.24':139
'20#.#19.37.52':139
'20#.#19.153.5':139
'20#.#19.183.80':139
'20#.#19.19.154':139
'20#.#19.190.74':139
'20#.#19.204.189':139
'20#.#19.74.187':139
'20#.#19.223.213':139
'20#.#19.103.87':139
'20#.#19.145.101':139
'20#.#19.28.218':139
'20#.#19.184.122':139
'20#.#19.18.58':139
'20#.#19.168.2':445
'20#.219.6.8':445
'20#.#19.50.236':139
'20#.#19.218.134':139
'20#.#19.127.106':139
'20#.#19.89.184':139
'20#.#19.52.235':139
'20#.#19.33.172':445
'20#.#19.87.123':139
'20#.#19.44.23':139
'20#.#19.189.196':139
'20#.#19.245.32':139
'20#.#19.68.51':139
'20#.#19.114.167':139
'20#.#19.105.119':139
'20#.#19.27.138':139
'20#.#19.209.125':139
'20#.#19.125.239':139
'20#.#19.33.172':139
'20#.#19.13.161':139
'20#.#19.40.172':139
'20#.#19.33.38':139
'20#.#19.125.190':445
'20#.#19.203.99':445
'20#.#19.14.218':139
'20#.#19.172.29':139
'20#.#19.80.230':139
'20#.#19.245.242':139
'20#.#19.132.142':139
'20#.#19.13.161':445
'20#.#19.40.172':445
'20#.#19.33.38':445
'20#.#19.168.2':139
'20#.219.6.8':139
'20#.#19.14.218':445
'20#.#19.172.29':445
'20#.#19.80.230':445
'20#.#19.245.242':445
'20#.#19.132.142':445
'20#.#19.46.89':139
'20#.#19.104.122':139
'20#.#19.188.188':139
'20#.#19.107.30':139
'20#.#19.214.105':139
'20#.#19.66.35':139
'20#.#19.164.185':139
'20#.#19.65.98':139
'20#.#19.186.103':139
'20#.#19.224.140':139
'20#.#19.103.118':139
'20#.#19.177.17':139
'20#.#19.39.191':445
'20#.#19.19.23':445
'20#.#19.60.228':445
'20#.#19.195.131':445
'20#.#19.31.252':445
'20#.#19.56.239':445
'20#.#19.147.0':445
'20#.#19.235.112':445
'20#.#19.76.123':445
'20#.#19.113.122':445
'20#.#19.79.157':445
'20#.#19.162.6':139
'20#.#19.22.66':139
'20#.#19.21.254':139
'20#.#19.28.138':139
'20#.#19.77.36':139
'20#.#19.28.47':445
'20#.#19.162.58':445
'20#.#19.34.192':139
'20#.#19.185.217':139
'20#.#19.192.36':139
'20#.#19.224.64':445
'20#.#19.131.125':445
'20#.#19.54.99':445
'20#.#19.0.105':445
'20#.#19.229.253':445
'20#.#19.126.63':445
'20#.#19.141.254':445
'20#.#19.98.54':445
'20#.#19.42.122':445
'20#.#19.186.146':445
'20#.#19.26.161':445
'20#.#19.166.157':445
'20#.#19.9.71':445
'20#.#19.233.166':445
'20#.#19.95.230':445
'20#.#19.158.91':445
'20#.#19.60.195':445
'20#.#19.50.59':445
'20#.#19.5.118':445
'20#.#19.225.78':445
'20#.#19.118.91':445
'20#.#19.147.43':139
'20#.#19.158.91':139
'20#.#19.166.157':139
'20#.#19.95.230':139
'20#.#19.56.239':139
'20#.#19.147.0':139
'20#.#19.118.91':139
'20#.#19.5.118':139
'20#.#19.225.78':139
'20#.#19.233.166':139
'20#.#19.9.71':139
'20#.#19.235.112':139
'20#.#19.31.252':139
'20#.#19.28.47':139
'20#.#19.162.58':139
'20#.#19.195.131':139
'20#.#19.79.157':139
'20#.#19.76.123':139
'20#.#19.113.122':139
'20#.#19.19.23':139
'20#.#19.60.228':139
'20#.#19.39.191':139
'20#.#19.17.114':139
'20#.#19.232.16':139
'20#.#19.222.241':139
'20#.#19.126.63':139
'20#.#19.141.254':139
'20#.#19.75.230':139
'20#.#19.130.75':139
'20#.#19.7.86':139
'20#.#19.63.163':139
'20#.#19.48.117':139
'20#.#19.98.54':139
'20#.#19.0.105':139
'20#.#19.229.253':139
'20#.#19.26.161':139
'20#.#19.60.195':139
'20#.#19.50.59':139
'20#.#19.42.122':139
'20#.#19.186.146':139
'20#.#19.131.125':139
'20#.#19.224.64':139
'20#.#19.54.99':139
'20#.#19.126.209':445
'20#.#19.36.146':445
'20#.#19.41.131':445
'20#.#19.196.9':445
'20#.#19.70.155':445
'20#.#19.153.104':445
'20#.#19.216.129':445
'20#.#19.164.238':445
'20#.#19.103.249':445
'20#.#19.141.0':445
'20#.#19.131.194':445
'20#.#19.222.247':139
'20#.#19.50.42':139
'20#.#19.87.0':139
'20#.#19.153.104':139
'20#.#19.216.129':139
'20#.#19.233.252':139
'20#.#19.52.34':445
'20#.#19.252.201':139
'20#.#19.182.123':139
'20#.#19.202.181':139
'20#.#19.93.23':139
'20#.#19.142.214':139
'20#.#19.189.88':139
'20#.#19.109.180':139
'20#.#19.82.218':139
'20#.#19.79.153':139
'20#.#19.69.119':139
'20#.#19.247.80':139
'20#.#19.107.146':139
'20#.#19.22.108':139
'20#.#19.113.153':139
'20#.#19.182.123':445
'20#.#19.202.181':445
'20#.#19.50.42':445
'20#.#19.87.0':445
'20#.#19.222.247':445
'20#.#19.23.120':139
'20#.#19.176.22':139
'20#.#19.210.140':139
'20#.#19.252.201':445
'20#.#19.233.252':445
'20#.#19.164.238':139
'20#.#19.185.217':445
'20#.#19.192.36':445
'20#.#19.22.66':445
'20#.#19.21.254':445
'20#.#19.162.6':445
'20#.#19.76.123':9988
'20#.#19.113.122':9988
'20#.#19.28.47':9988
'20#.#19.34.192':445
'20#.#19.31.252':9988
'20#.#19.77.36':445
'20#.#19.63.163':445
'20#.#19.48.117':445
'20#.#19.232.16':445
'20#.#19.222.241':445
'20#.#19.17.114':445
'20#.#19.147.43':445
'20#.#19.28.138':445
'20#.#19.130.75':445
'20#.#19.7.86':445
'20#.#19.75.230':445
'20#.#19.196.9':139
'20#.#19.70.155':139
'20#.#19.131.194':139
'20#.#19.42.122':9988
'20#.#19.52.34':139
'20#.#19.103.249':139
'20#.#19.141.0':139
'20#.#19.36.146':139
'20#.#19.41.131':139
'20#.#19.126.209':139
'20#.#19.229.253':9988
'20#.#19.95.230':9988
'20#.#19.158.91':9988
'20#.#19.147.0':9988
'20#.#19.235.112':9988
'20#.#19.56.239':9988
'20#.#19.118.91':9988
'20#.#19.0.105':9988
'20#.#19.5.118':9988
'20#.#19.166.157':9988
'20#.#19.9.71':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней