Trojan.DownLoader12.29082

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'64.##.237.211':139
'64.##.150.204':139
'64.#6.80.76':139
'64.##.133.210':139
'64.##.147.213':139
'64.##.147.137':139
'64.##.121.65':139
'64.##.129.171':139
'64.##.225.138':139
'64.#6.67.34':139
'64.#6.96.46':139
'64.##.123.139':139
'64.#6.7.42':139
'64.##.139.111':139
'64.#6.10.42':139
'64.##.161.97':139
'64.##.150.151':139
'64.##.94.107':139
'64.##.23.134':139
'64.##.219.147':139
'64.##.126.66':139
'64.##.16.139':139
'64.##.194.59':445
'64.#6.10.42':445
'64.#6.19.59':445
'64.##.152.143':445
'64.##.148.145':445
'64.#6.7.42':445
'64.##.219.147':445
'64.##.123.139':445
'64.##.161.97':445
'64.##.139.111':445
'64.##.91.212':445
'64.#6.11.26':139
'64.##.180.41':139
'64.##.197.50':139
'64.##.102.123':139
'64.##.50.105':139
'64.##.212.196':445
'64.##.119.35':445
'64.#6.3.79':445
'64.#6.129.3':445
'64.#6.79.95':445
'64.#6.92.57':139
'64.##.239.147':139
'64.##.110.131':139
'64.##.120.139':139
'64.##.153.75':139
'64.##.103.180':445
'64.##.67.104':445
'64.#6.52.23':139
'64.##.31.240':139
'64.##.185.231':139
'64.##.249.60':139
'64.##.48.247':445
'64.#6.97.2':445
'64.##.153.29':445
'64.#6.11.17':445
'64.##.48.166':445
'64.#6.135.0':139
'64.#6.89.3':139
'64.##.142.66':139
'64.##.103.180':139
'64.##.67.104':139
'64.##.142.66':445
'64.##.212.196':139
'64.##.119.35':139
'64.#6.3.79':139
'64.#6.129.3':139
'64.#6.79.95':139
'64.#6.19.59':139
'64.##.194.59':139
'64.##.148.145':139
'64.##.91.212':139
'64.##.152.143':139
'64.#6.52.23':445
'64.##.120.139':445
'64.##.153.75':445
'64.##.249.60':445
'64.#6.135.0':445
'64.##.110.131':445
'64.##.31.240':445
'64.##.185.231':445
'64.##.239.147':445
'64.#6.89.3':445
'64.#6.92.57':445
'64.##.81.178':139
'64.##.27.188':139
'64.##.48.189':139
'64.#6.6.243':139
'64.##.140.174':139
'64.##.170.177':139
'64.##.170.121':139
'64.##.14.120':139
'64.#6.52.28':139
'64.##.115.186':139
'64.#6.26.20':139
'64.#6.56.84':445
'64.##.253.73':445
'64.##.176.70':445
'64.#6.98.11':445
'64.##.106.68':445
'64.##.238.130':139
'64.##.187.95':139
'64.##.214.161':139
'64.##.168.32':445
'64.##.16.198':139
'64.##.50.248':139
'64.#6.198.7':139
'64.##.17.239':139
'64.##.106.42':139
'64.#6.5.150':139
'64.##.105.165':139
'64.##.203.166':139
'64.#6.72.63':139
'64.##.205.120':139
'64.##.118.24':139
'64.##.105.191':139
'64.#6.1.26':139
'64.##.23.199':139
'64.##.209.208':139
'64.#6.15.55':139
'64.##.235.14':139
'64.##.216.98':139
'64.##.65.249':139
'64.##.109.19':139
'64.##.242.20':139
'64.##.187.10':139
'64.##.188.105':139
'64.##.121.65':445
'64.##.16.139':445
'64.##.147.137':445
'64.#6.67.34':445
'64.##.129.171':445
'64.#6.11.26':445
'64.##.180.41':445
'64.##.197.50':445
'64.##.102.123':445
'64.##.50.105':445
'64.##.225.138':445
'64.##.94.107':445
'64.#6.96.46':445
'64.##.150.151':445
'64.##.126.66':445
'64.##.23.134':445
'64.##.237.211':445
'64.##.150.204':445
'64.#6.80.76':445
'64.##.133.210':445
'64.##.147.213':445
'64.##.64.245':139
'64.##.232.64':445
'64.#6.2.111':445
'64.##.64.245':445
'64.##.253.73':139
'64.##.168.32':139
'64.##.107.213':445
'64.##.93.210':445
'64.##.95.114':445
'64.#6.18.87':445
'64.##.114.111':445
'64.#6.56.84':139
'64.##.114.111':139
'64.##.95.114':139
'64.#6.18.87':139
'64.##.232.64':139
'64.#6.2.111':139
'64.##.106.68':139
'64.##.176.70':139
'64.#6.98.11':139
'64.##.107.213':139
'64.##.93.210':139
'64.##.14.190':445
'64.##.63.221':445
'64.##.234.94':445
'64.##.178.60':445
'64.##.116.214':445
'64.#6.29.29':445
'64.##.43.148':445
'64.##.234.93':445
'64.#6.73.63':445
'64.##.127.30':445
'64.##.102.182':445
'64.##.97.212':139
'64.##.20.237':139
'64.#6.15.91':139
'64.##.104.69':139
'64.##.74.115':139
'64.##.174.91':445
'64.##.73.102':445
'64.##.24.147':139
'64.##.96.223':139
'64.##.44.229':139
'64.#6.66.74':445
'64.##.245.230':445
'64.##.158.38':445
'64.##.231.169':445
'64.##.170.25':445
'64.##.21.214':445
'64.#6.209.7':445
'64.#6.8.56':445
'64.##.225.236':445
'64.#6.46.15':445
'64.##.66.247':445
'64.#6.83.81':445
'64.##.143.239':445
'64.##.53.144':445
'64.##.56.141':445
'64.##.129.83':445
'64.##.22.129':445
'64.##.24.202':445
'64.#6.63.90':445
'64.##.169.165':445
'64.#6.20.78':445
'64.##.146.198':445
'64.##.129.83':139
'64.##.22.129':139
'64.#6.66.74':139
'64.#6.29.29':139
'64.##.43.148':139
'64.#6.20.78':139
'64.##.146.198':139
'64.##.53.144':139
'64.##.56.141':139
'64.##.143.239':139
'64.##.234.93':139
'64.##.174.91':139
'64.##.116.214':139
'64.##.102.182':139
'64.##.234.94':139
'64.##.73.102':139
'64.#6.73.63':139
'64.##.127.30':139
'64.##.63.221':139
'64.##.178.60':139
'64.##.14.190':139
'64.##.169.165':139
'64.#6.209.7':139
'64.##.84.209':139
'64.#6.8.56':139
'64.##.155.44':139
'64.#6.55.92':139
'64.##.56.181':139
'64.##.141.123':139
'64.##.252.74':139
'64.#6.103.6':139
'64.#6.9.240':139
'64.##.225.236':139
'64.#6.83.81':139
'64.##.170.25':139
'64.##.21.214':139
'64.##.24.202':139
'64.#6.63.90':139
'64.##.66.247':139
'64.##.158.38':139
'64.#6.46.15':139
'64.##.231.169':139
'64.##.245.230':139
'64.#6.97.2':139
'64.##.46.187':445
'64.##.48.247':139
'64.##.48.166':139
'64.##.153.29':139
'64.##.38.227':445
'64.#6.16.59':445
'64.##.235.242':445
'64.#6.4.155':445
'64.#6.243.4':445
'64.#6.11.17':139
'64.##.131.223':139
'64.##.155.108':139
'64.##.127.31':139
'64.##.143.62':139
'64.##.96.221':139
'64.##.168.231':139
'64.##.140.168':139
'64.##.231.120':139
'64.##.101.220':139
'64.#6.40.60':139
'64.#6.47.85':445
'64.##.131.223':445
'64.##.155.108':445
'64.##.127.31':445
'64.##.143.62':445
'64.##.96.221':445
'64.##.168.231':445
'64.##.140.168':445
'64.##.231.120':445
'64.##.101.220':445
'64.#6.40.60':445
'64.##.82.150':445
'64.##.30.174':445
'64.##.113.195':445
'64.#6.49.83':445
'64.#6.2.40':445
'64.##.46.127':445
'64.##.68.164':445
'64.#6.1.121':445
'64.#6.172.5':445
'64.#6.12.27':445
'64.##.163.168':445
'64.##.44.229':445
'64.##.24.147':445
'64.##.97.212':445
'64.##.96.223':445
'64.##.20.237':445
'64.#6.29.29':9988
'64.##.129.83':9988
'64.##.234.93':9988
'64.##.234.94':9988
'64.##.102.182':9988
'64.#6.15.91':445
'64.#6.9.240':445
'64.##.84.209':445
'64.##.104.69':445
'64.##.74.115':445
'64.##.252.74':445
'64.##.155.44':445
'64.#6.55.92':445
'64.##.56.181':445
'64.##.141.123':445
'64.#6.103.6':445
'64.##.56.141':9988
'64.##.113.195':139
'64.#6.12.27':139
'64.##.30.174':139
'64.##.46.127':139
'64.#6.49.83':139
'64.#6.1.121':139
'64.##.82.150':139
'64.##.68.164':139
'64.##.163.168':139
'64.#6.172.5':139
'64.#6.2.40':139
'64.##.46.187':139
'64.#6.4.155':139
'64.##.24.147':9988
'64.##.143.239':9988
'64.##.104.69':9988
'64.#6.16.59':139
'64.#6.47.85':139
'64.##.38.227':139
'64.#6.243.4':139
'64.##.235.242':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней