Trojan.DownLoader12.29117

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#7.199.123':139
'19#.47.38.7':139
'19#.#7.146.98':139
'19#.#7.126.243':139
'19#.#7.98.47':139
'19#.#7.176.65':139
'19#.47.2.4':139
'19#.#7.65.174':139
'19#.#7.101.75':139
'19#.#7.39.253':139
'19#.#7.134.64':139
'19#.#7.122.12':139
'19#.#7.84.93':139
'19#.#7.14.100':139
'19#.#7.41.159':139
'19#.#7.27.96':139
'19#.#7.11.92':139
'19#.#7.222.168':139
'19#.#7.142.39':139
'19#.#7.6.202':139
'19#.#7.10.142':139
'19#.#7.22.230':445
'19#.#7.49.100':445
'19#.#7.191.214':445
'19#.#7.216.151':445
'19#.#7.242.200':445
'19#.#7.122.12':445
'19#.#7.84.93':445
'19#.#7.14.100':445
'19#.#7.41.159':445
'19#.#7.27.96':445
'19#.#7.187.138':445
'19#.#7.92.165':139
'19#.#7.240.22':445
'19#.#7.83.191':139
'19#.#7.11.163':139
'19#.#7.46.36':139
'19#.#7.39.187':445
'19#.#7.158.221':445
'19#.#7.60.54':445
'19#.#7.13.112':445
'19#.#7.80.179':445
'19#.#7.132.125':139
'19#.#7.154.31':139
'19#.#7.56.24':139
'19#.#7.153.134':139
'19#.#7.47.91':139
'19#.#7.173.213':445
'19#.#7.236.167':445
'19#.#7.121.32':445
'19#.47.97.6':445
'19#.#7.124.89':445
'19#.#7.226.57':139
'19#.#7.124.89':139
'19#.#7.121.32':139
'19#.47.97.6':139
'19#.#7.53.201':445
'19#.#7.3.238':445
'19#.#7.59.174':139
'19#.#7.159.197':139
'19#.#7.30.35':139
'19#.#7.173.213':139
'19#.#7.236.167':139
'19#.#7.158.221':139
'19#.#7.187.138':139
'19#.#7.39.187':139
'19#.#7.80.179':139
'19#.#7.60.54':139
'19#.#7.22.230':139
'19#.#7.49.100':139
'19#.#7.191.214':139
'19#.#7.216.151':139
'19#.#7.242.200':139
'19#.#7.13.112':139
'19#.#7.226.57':445
'19#.#7.153.134':445
'19#.#7.159.197':445
'19#.#7.30.35':445
'19#.#7.59.174':445
'19#.#7.154.31':445
'19#.#7.240.22':139
'19#.#7.132.125':445
'19#.#7.47.91':445
'19#.#7.56.24':445
'19#.#7.6.202':445
'19#.#7.31.116':139
'19#.#7.209.167':139
'19#.#7.139.231':139
'19#.#7.82.213':139
'19#.47.9.76':139
'19#.#7.96.37':139
'19#.#7.162.154':139
'19#.#7.195.33':139
'19#.#7.138.23':139
'19#.#7.43.62':139
'19#.#7.78.206':139
'19#.#7.154.23':445
'19#.#7.56.44':445
'19#.#7.176.218':445
'19#.#7.94.77':445
'19#.#7.244.210':445
'19#.#7.213.19':139
'19#.#7.209.14':139
'19#.#7.158.234':139
'19#.#7.180.175':139
'19#.#7.92.82':139
'19#.#7.116.229':139
'19#.#7.109.127':139
'19#.#7.44.14':139
'19#.#7.246.138':139
'19#.#7.42.142':139
'19#.#7.22.129':139
'19#.#7.60.94':139
'19#.#7.138.46':139
'19#.#7.29.157':139
'19#.#7.4.245':139
'19#.#7.167.190':139
'19#.#7.155.150':139
'19#.#7.95.32':139
'19#.#7.13.92':139
'19#.#7.98.16':139
'19#.#7.70.140':139
'19#.#7.183.251':139
'19#.#7.85.184':139
'19#.47.91.3':139
'19#.#7.50.168':139
'19#.#7.29.200':139
'19#.47.2.4':445
'19#.#7.11.163':445
'19#.#7.176.65':445
'19#.#7.39.253':445
'19#.#7.65.174':445
'19#.#7.171.121':139
'19#.#7.121.5':139
'19#.#7.92.165':445
'19#.#7.46.36':445
'19#.#7.83.191':445
'19#.#7.101.75':445
'19#.#7.222.168':445
'19#.#7.134.64':445
'19#.#7.11.92':445
'19#.#7.10.142':445
'19#.#7.142.39':445
'19#.#7.199.123':445
'19#.47.38.7':445
'19#.#7.146.98':445
'19#.#7.126.243':445
'19#.#7.98.47':445
'19#.#7.146.205':445
'19#.#7.69.108':445
'19#.#7.121.5':445
'19#.#7.56.44':139
'19#.#7.171.121':445
'19#.#7.152.94':445
'19#.#7.160.146':445
'19#.#7.23.62':445
'19#.#7.196.14':445
'19#.#7.14.69':445
'19#.#7.176.218':139
'19#.#7.14.69':139
'19#.#7.23.62':139
'19#.#7.69.108':139
'19#.#7.146.205':139
'19#.#7.196.14':139
'19#.#7.160.146':139
'19#.#7.154.23':139
'19#.#7.152.94':139
'19#.#7.244.210':139
'19#.#7.94.77':139
'19#.#7.237.170':445
'19#.47.56.8':445
'19#.#7.143.228':445
'19#.#7.48.115':445
'19#.#7.104.199':445
'19#.#7.29.62':445
'19#.#7.63.149':445
'19#.#7.173.137':445
'19#.#7.208.206':445
'19#.#7.58.89':445
'19#.#7.208.65':445
'19#.#7.16.125':139
'19#.#7.118.181':139
'19#.#7.26.42':139
'19#.#7.2.232':139
'19#.#7.110.2':139
'19#.#7.166.181':139
'19#.#7.159.75':445
'19#.#7.1.242':139
'19#.#7.76.102':139
'19#.#7.117.191':139
'19#.#7.151.62':445
'19#.#7.107.151':445
'19#.#7.62.137':445
'19#.#7.106.42':445
'19#.#7.33.226':445
'19#.#7.89.28':445
'19#.#7.179.88':445
'19#.#7.15.249':445
'19#.#7.201.209':445
'19#.#7.140.198':445
'19#.#7.10.16':445
'19#.#7.205.153':445
'19#.#7.167.205':445
'19#.#7.154.40':445
'19#.#7.154.230':445
'19#.#7.165.252':445
'19#.#7.255.29':445
'19#.#7.128.76':445
'19#.#7.118.226':445
'19#.#7.118.43':445
'19#.#7.90.238':445
'19#.#7.154.40':139
'19#.#7.205.153':139
'19#.#7.165.252':139
'19#.#7.63.149':139
'19#.#7.154.230':139
'19#.#7.118.226':139
'19#.#7.255.29':139
'19#.#7.90.238':139
'19#.#7.167.205':139
'19#.#7.118.43':139
'19#.#7.29.62':139
'19#.#7.104.199':139
'19#.#7.143.228':139
'19#.#7.48.115':139
'19#.#7.159.75':139
'19#.#7.208.65':139
'19#.#7.58.89':139
'19#.#7.173.137':139
'19#.#7.208.206':139
'19#.#7.237.170':139
'19#.47.56.8':139
'19#.#7.113.33':139
'19#.#7.44.191':139
'19#.#7.19.208':139
'19#.#7.179.88':139
'19#.#7.135.150':139
'19#.#7.250.26':139
'19#.#7.231.249':139
'19#.#7.176.78':139
'19#.#7.86.166':139
'19#.#7.146.163':139
'19#.#7.89.28':139
'19#.#7.33.226':139
'19#.#7.62.137':139
'19#.#7.106.42':139
'19#.#7.128.76':139
'19#.#7.10.16':139
'19#.#7.140.198':139
'19#.#7.15.249':139
'19#.#7.201.209':139
'19#.#7.151.62':139
'19#.#7.107.151':139
'19#.#7.135.150':445
'19#.#7.3.238':139
'19#.#7.104.75':445
'19#.#7.53.201':139
'19#.#7.215.125':139
'19#.#7.254.183':139
'19#.#7.118.116':445
'19#.#7.178.213':445
'19#.#7.138.75':445
'19#.#7.43.121':445
'19#.#7.25.29':445
'19#.#7.221.239':139
'19#.#7.170.85':139
'19#.#7.76.178':139
'19#.#7.22.56':139
'19#.#7.178.240':139
'19#.#7.92.42':139
'19#.47.62.5':139
'19#.#7.245.22':139
'19#.47.5.76':139
'19#.#7.122.81':139
'19#.#7.187.199':139
'19#.#7.187.199':445
'19#.47.5.76':445
'19#.#7.122.81':445
'19#.#7.170.85':445
'19#.#7.76.178':445
'19#.#7.215.125':445
'19#.#7.254.183':445
'19#.#7.221.239':445
'19#.47.62.5':445
'19#.#7.245.22':445
'19#.#7.22.56':445
'19#.#7.18.196':445
'19#.#7.178.228':445
'19#.#7.59.247':445
'19#.#7.99.178':445
'19#.#7.236.254':445
'19#.#7.178.240':445
'19#.#7.92.42':445
'19#.#7.107.130':445
'19#.#7.43.226':445
'19#.#7.45.143':445
'19#.#7.117.191':445
'19#.#7.1.242':445
'19#.#7.76.102':445
'19#.#7.16.125':445
'19#.#7.118.181':445
'19#.#7.237.170':9988
'19#.#7.165.252':9988
'19#.#7.143.228':9988
'19#.#7.166.181':445
'19#.#7.48.115':9988
'19#.#7.26.42':445
'19#.#7.86.166':445
'19#.#7.146.163':445
'19#.#7.44.191':445
'19#.#7.19.208':445
'19#.#7.113.33':445
'19#.#7.2.232':445
'19#.#7.110.2':445
'19#.#7.231.249':445
'19#.#7.176.78':445
'19#.#7.250.26':445
'19#.#7.236.254':139
'19#.#7.59.247':139
'19#.#7.99.178':139
'19#.#7.118.116':139
'19#.#7.178.213':139
'19#.#7.45.143':139
'19#.#7.107.130':139
'19#.#7.43.226':139
'19#.#7.18.196':139
'19#.#7.178.228':139
'19#.#7.138.75':139
'19#.#7.179.88':9988
'19#.#7.44.191':9988
'19#.#7.106.42':9988
'19#.#7.118.226':9988
'19#.#7.255.29':9988
'19#.#7.43.121':139
'19#.#7.25.29':139
'19#.#7.104.75':139
'19#.#7.2.232':9988
'19#.#7.26.42':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней