Trojan.DownLoader12.29111

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##.131.143':139
'63.#9.71.26':139
'63.##.40.204':139
'63.##.99.239':139
'63.#9.5.221':139
'63.##.77.162':139
'63.##.225.63':139
'63.##.162.48':139
'63.#9.56.39':139
'63.##.176.46':139
'63.#9.62.10':139
'63.##.220.145':139
'63.##.132.51':139
'63.##.225.132':139
'63.##.224.252':139
'63.##.206.225':139
'63.##.125.41':139
'63.##.209.250':139
'63.#9.95.28':139
'63.##.203.88':139
'63.#9.34.13':139
'63.#9.34.13':445
'63.#9.95.28':445
'63.##.203.88':445
'63.##.220.145':445
'63.##.132.51':445
'63.##.99.239':445
'63.#9.5.221':445
'63.#9.62.10':445
'63.##.125.41':445
'63.##.209.250':445
'63.##.225.132':445
'63.##.80.221':445
'63.##.98.237':445
'63.#9.81.15':139
'63.##.111.100':139
'63.##.15.176':139
'63.##.224.252':445
'63.##.206.225':445
'63.##.118.168':445
'63.#9.8.160':445
'63.#9.198.8':445
'63.#9.76.87':139
'63.##.245.145':445
'63.##.218.202':139
'63.#9.84.57':139
'63.##.21.141':139
'63.##.125.251':445
'63.##.98.239':445
'63.#9.60.26':445
'63.#9.79.36':445
'63.##.180.96':445
'63.##.115.210':139
'63.##.99.184':139
'63.#9.112.9':139
'63.##.17.230':139
'63.##.41.139':139
'63.#9.43.14':139
'63.##.119.145':139
'63.#9.94.22':139
'63.#9.50.99':139
'63.##.246.23':139
'63.##.213.60':139
'63.##.218.202':445
'63.#9.76.87':445
'63.##.21.141':445
'63.##.115.210':445
'63.#9.84.57':445
'63.#9.198.8':139
'63.##.118.168':139
'63.#9.8.160':139
'63.##.80.221':139
'63.##.98.237':139
'63.#9.94.22':445
'63.##.17.230':445
'63.##.99.184':445
'63.#9.43.14':445
'63.#9.87.21':445
'63.##.41.139':445
'63.#9.50.99':445
'63.##.119.145':445
'63.##.213.60':445
'63.#9.112.9':445
'63.##.246.23':445
'63.##.118.66':139
'63.##.151.142':139
'63.##.25.174':139
'63.##.10.253':445
'63.##.152.231':445
'63.##.143.166':139
'63.##.113.138':139
'63.##.119.28':139
'63.##.157.60':139
'63.#9.98.0':139
'63.##.19.191':445
'63.#9.36.75':445
'63.##.95.215':445
'63.##.134.117':445
'63.#9.76.56':445
'63.##.154.193':445
'63.##.145.226':445
'63.##.18.146':445
'63.##.226.148':445
'63.##.184.63':445
'63.#9.39.61':445
'63.##.64.168':139
'63.##.111.204':139
'63.##.237.161':139
'63.##.174.18':139
'63.##.11.160':139
'63.##.178.91':139
'63.##.67.215':139
'63.##.162.140':139
'63.##.159.200':139
'63.#9.97.61':139
'63.#9.19.2':139
'63.##.187.126':139
'63.##.157.244':139
'63.#9.75.12':139
'63.##.109.113':139
'63.##.12.110':139
'63.##.21.235':139
'63.#9.2.21':139
'63.##.40.194':139
'63.#9.13.43':139
'63.##.226.227':139
'63.##.108.123':139
'63.#9.75.25':139
'63.##.123.69':139
'63.##.16.157':139
'63.#9.69.29':139
'63.#9.57.10':139
'63.#9.76.56':139
'63.#9.9.195':139
'63.##.124.216':139
'63.##.143.130':139
'63.#9.81.15':445
'63.#9.56.39':445
'63.##.176.46':445
'63.#9.71.26':445
'63.##.40.204':445
'63.##.131.143':445
'63.##.111.100':445
'63.##.15.176':445
'63.##.225.63':445
'63.##.162.48':445
'63.##.77.162':445
'63.##.123.69':445
'63.##.108.123':445
'63.#9.69.29':445
'63.##.152.231':139
'63.##.16.157':445
'63.#9.9.195':445
'63.#9.57.10':445
'63.##.143.130':445
'63.#9.75.25':445
'63.##.124.216':445
'63.##.10.253':139
'63.##.95.215':139
'63.##.184.63':139
'63.#9.36.75':139
'63.##.154.193':139
'63.##.134.117':139
'63.##.18.146':139
'63.##.19.191':139
'63.##.145.226':139
'63.#9.39.61':139
'63.##.226.148':139
'63.#9.87.21':139
'63.##.72.119':445
'63.#9.58.12':445
'63.##.119.68':445
'63.#9.4.184':445
'63.##.104.181':445
'63.##.10.198':445
'63.##.181.144':445
'63.##.255.157':445
'63.##.100.199':445
'63.#9.84.41':445
'63.#9.5.140':445
'63.##.115.201':139
'63.##.109.126':139
'63.##.201.64':139
'63.##.72.137':139
'63.##.217.58':139
'63.##.115.42':139
'63.#9.1.44':445
'63.#9.46.20':139
'63.#9.210.9':139
'63.##.229.50':139
'63.##.171.64':445
'63.##.111.171':445
'63.#9.65.34':445
'63.##.249.174':445
'63.#9.29.24':445
'63.##.198.233':445
'63.##.64.120':445
'63.##.115.39':445
'63.#9.47.55':445
'63.#9.52.30':445
'63.#9.14.96':445
'63.##.52.245':445
'63.#9.70.93':445
'63.##.234.27':445
'63.#9.4.40':445
'63.##.27.178':445
'63.##.20.200':445
'63.##.136.166':445
'63.#9.18.29':445
'63.##.166.46':445
'63.##.51.121':445
'63.##.234.27':139
'63.##.52.245':139
'63.##.27.178':139
'63.##.181.144':139
'63.#9.4.40':139
'63.#9.18.29':139
'63.##.20.200':139
'63.##.51.121':139
'63.#9.70.93':139
'63.##.166.46':139
'63.##.10.198':139
'63.##.104.181':139
'63.##.119.68':139
'63.#9.1.44':139
'63.#9.4.184':139
'63.#9.5.140':139
'63.#9.84.41':139
'63.##.255.157':139
'63.##.100.199':139
'63.##.72.119':139
'63.#9.58.12':139
'63.##.186.134':139
'63.##.140.11':139
'63.##.56.243':139
'63.##.64.120':139
'63.##.213.75':139
'63.##.129.11':139
'63.##.137.47':139
'63.##.181.13':139
'63.##.111.170':139
'63.##.123.254':139
'63.##.198.233':139
'63.#9.29.24':139
'63.#9.65.34':139
'63.##.249.174':139
'63.##.136.166':139
'63.#9.14.96':139
'63.#9.52.30':139
'63.##.115.39':139
'63.#9.47.55':139
'63.##.171.64':139
'63.##.111.171':139
'63.##.62.154':445
'63.##.57.107':445
'63.##.18.135':445
'63.##.168.70':139
'63.#9.6.177':139
'63.##.103.230':445
'63.#9.7.104':445
'63.##.142.131':445
'63.##.142.232':445
'63.##.45.214':445
'63.##.104.214':139
'63.##.101.73':139
'63.##.140.15':139
'63.##.118.63':139
'63.##.22.188':139
'63.#9.20.71':139
'63.#9.74.21':139
'63.#9.3.156':139
'63.##.17.223':139
'63.##.18.120':139
'63.#9.26.16':139
'63.#9.6.177':445
'63.##.245.145':139
'63.##.168.70':445
'63.#9.3.156':445
'63.##.104.214':445
'63.##.125.251':139
'63.##.98.239':139
'63.#9.60.26':139
'63.#9.79.36':139
'63.##.180.96':139
'63.#9.74.21':445
'63.#9.20.71':445
'63.##.118.63':445
'63.##.22.188':445
'63.#9.131.7':445
'63.##.201.22':445
'63.#9.26.16':445
'63.##.17.223':445
'63.##.18.120':445
'63.##.101.73':445
'63.##.140.15':445
'63.#9.210.9':445
'63.##.229.50':445
'63.##.109.126':445
'63.##.201.64':445
'63.##.115.201':445
'63.#9.5.140':9988
'63.#9.58.12':9988
'63.#9.1.44':9988
'63.#9.46.20':445
'63.##.115.42':445
'63.##.217.58':445
'63.##.140.11':445
'63.##.111.170':445
'63.##.186.134':445
'63.##.213.75':445
'63.##.56.243':445
'63.##.137.47':445
'63.##.72.137':445
'63.##.129.11':445
'63.##.123.254':445
'63.##.181.13':445
'63.##.142.232':139
'63.##.45.214':139
'63.##.57.107':139
'63.##.18.135':139
'63.##.62.154':139
'63.#9.131.7':139
'63.##.201.22':139
'63.#9.7.104':139
'63.##.142.131':139
'63.##.103.230':139
'63.##.115.42':9988
'63.##.181.144':9988
'63.##.51.121':9988
'63.##.10.198':9988
'63.##.100.199':9988
'63.#9.84.41':9988
'63.##.213.75':9988
'63.##.56.243':9988
'63.#9.14.96':9988
'63.#9.18.29':9988
'63.##.20.200':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней