Trojan.DownLoader12.29119

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##2.50.236':445
'24.##2.171.79':445
'24.##2.85.26':445
'24.##2.60.128':445
'24.##2.68.232':445
'24.##2.22.145':445
'24.##2.13.32':445
'24.##2.23.137':445
'24.##2.137.223':445
'24.##2.207.76':445
'24.##2.131.238':445
'24.##2.170.165':445
'24.##2.95.241':445
'24.##2.137.71':445
'24.##2.151.32':445
'24.##2.80.201':445
'24.##2.178.93':445
'24.##2.198.96':445
'24.##2.155.128':445
'24.##2.97.117':445
'24.##2.6.152':445
'24.##2.135.55':445
'24.##2.90.117':139
'24.##2.40.207':139
'24.##2.10.211':139
'24.##2.75.205':139
'24.##2.227.75':139
'24.##2.171.67':139
'24.##2.48.130':139
'24.##2.174.108':139
'24.##2.78.93':139
'24.##2.112.85':139
'24.##2.93.112':139
'24.#02.79.0':445
'24.##2.146.32':445
'24.##2.96.196':445
'24.##2.161.247':445
'24.##2.50.153':445
'24.##2.112.175':445
'24.##2.181.233':445
'24.##2.214.249':139
'24.##2.234.130':445
'24.##2.234.130':139
'24.##2.181.233':139
'24.##2.137.223':139
'24.##2.13.32':139
'24.##2.131.238':139
'24.##2.22.145':139
'24.##2.207.76':139
'24.##2.23.137':139
'24.#02.79.0':139
'24.##2.146.32':139
'24.##2.96.196':139
'24.##2.161.247':139
'24.##2.50.153':139
'24.##2.97.117':139
'24.##2.198.96':139
'24.##2.135.55':139
'24.##2.178.93':139
'24.##2.6.152':139
'24.##2.155.128':139
'24.##2.50.236':139
'24.##2.171.79':139
'24.##2.85.26':139
'24.##2.60.128':139
'24.##2.68.232':139
'24.##2.73.251':445
'24.##2.188.231':445
'24.##2.170.17':445
'24.##2.197.220':445
'24.##2.243.124':445
'24.##2.194.138':445
'24.##2.8.180':445
'24.##2.145.0':445
'24.##2.32.157':445
'24.##2.21.43':445
'24.##2.35.142':445
'24.##2.80.236':445
'24.##2.145.81':445
'24.##2.194.113':445
'24.##2.112.175':139
'24.##2.218.164':445
'24.##2.216.144':445
'24.##2.34.172':445
'24.##2.220.26':445
'24.##2.240.135':445
'24.##2.10.223':445
'24.##2.227.251':445
'24.##2.20.161':445
'24.##2.101.20':445
'24.##2.18.71':445
'24.##2.216.128':445
'24.##2.32.103':445
'24.##2.28.174':445
'24.##2.4.180':445
'24.##2.197.238':445
'24.##2.14.120':445
'24.##2.189.88':445
'24.##2.174.208':445
'24.##2.48.130':445
'24.##2.174.108':445
'24.##2.78.93':445
'24.##2.112.85':445
'24.##2.93.112':445
'24.##2.228.70':445
'24.##2.28.181':445
'24.##2.76.118':445
'24.##2.59.53':445
'24.##2.45.184':445
'24.##2.26.63':445
'24.##2.181.228':445
'24.#02.9.23':445
'24.##2.113.155':445
'24.##2.41.109':445
'24.##2.151.134':445
'24.##2.24.101':445
'24.##2.132.192':139
'24.##2.153.60':139
'24.#02.94.7':445
'24.##2.132.141':445
'24.##2.132.241':445
'24.##2.54.13':445
'24.##2.88.57':445
'24.##2.16.186':445
'24.##2.78.144':445
'24.##2.57.84':445
'24.##2.33.206':445
'24.##2.149.23':445
'24.##2.12.206':445
'24.##2.141.154':445
'24.##2.34.34':445
'24.##2.44.34':445
'24.##2.14.120':139
'24.##2.4.180':139
'24.##2.174.208':139
'24.##2.28.174':139
'24.##2.189.88':139
'24.##2.197.238':139
'24.##2.54.13':139
'24.##2.88.57':139
'24.##2.16.186':139
'24.##2.78.144':139
'24.##2.57.84':139
'24.##2.59.53':139
'24.##2.28.181':139
'24.##2.26.63':139
'24.##2.228.70':139
'24.##2.45.184':139
'24.##2.76.118':139
'24.##2.20.161':139
'24.##2.101.20':139
'24.##2.18.71':139
'24.##2.216.128':139
'24.##2.32.103':139
'24.#02.94.7':139
'24.##2.214.249':445
'24.##2.132.241':139
'24.##2.24.101':139
'24.##2.132.141':139
'24.##2.75.205':445
'24.##2.40.207':445
'24.##2.171.67':445
'24.##2.90.117':445
'24.##2.227.75':445
'24.##2.10.211':445
'24.##2.141.154':139
'24.##2.149.23':139
'24.##2.44.34':139
'24.##2.33.206':139
'24.##2.34.34':139
'24.##2.12.206':139
'24.##2.181.228':139
'24.#02.9.23':139
'24.##2.113.155':139
'24.##2.41.109':139
'24.##2.151.134':139
'24.##2.162.82':445
'24.##2.23.246':445
'24.##2.77.172':445
'24.##2.160.164':445
'24.##2.108.131':445
'24.##2.27.186':445
'24.#02.77.7':445
'24.##2.20.77':445
'24.##2.17.115':445
'24.##2.97.194':445
'24.##2.146.25':445
'24.##2.14.39':139
'24.##2.101.119':139
'24.##2.61.171':139
'24.##2.83.77':139
'24.##2.94.48':139
'24.##2.197.34':139
'24.##2.8.251':445
'24.##2.239.97':445
'24.##2.172.149':445
'24.##2.48.24':139
'24.##2.106.205':445
'24.##2.31.166':445
'24.##2.175.222':445
'24.##2.162.202':445
'24.##2.27.254':445
'24.##2.131.166':445
'24.##2.196.167':445
'24.##2.6.233':445
'24.##2.32.224':445
'24.##2.52.176':445
'24.##2.197.130':445
'24.##2.196.244':445
'24.##2.161.63':445
'24.##2.41.28':445
'24.##2.103.51':445
'24.##2.26.22':445
'24.##2.213.82':445
'24.##2.51.116':445
'24.##2.132.230':445
'24.##2.254.46':445
'24.##2.17.170':445
'24.##2.149.13':445
'24.##2.185.148':445
'24.##2.20.77':139
'24.##2.26.22':139
'24.#02.77.7':139
'24.##2.146.25':139
'24.##2.17.115':139
'24.##2.213.82':139
'24.##2.51.116':139
'24.##2.149.13':139
'24.##2.41.28':139
'24.##2.103.51':139
'24.##2.161.63':139
'24.##2.172.149':139
'24.##2.8.251':139
'24.##2.239.97':139
'24.##2.108.131':139
'24.##2.77.172':139
'24.##2.106.205':139
'24.##2.27.186':139
'24.##2.97.194':139
'24.##2.23.246':139
'24.##2.160.164':139
'24.##2.162.82':139
'24.##2.32.224':139
'24.##2.191.196':139
'24.##2.6.233':139
'24.##2.196.244':139
'24.##2.52.176':139
'24.##2.77.18':139
'24.##2.195.246':139
'24.##2.37.229':139
'24.##2.221.217':139
'24.##2.169.191':139
'24.##2.217.187':139
'24.##2.254.46':139
'24.##2.27.254':139
'24.##2.132.230':139
'24.##2.185.148':139
'24.##2.17.170':139
'24.##2.131.166':139
'24.##2.196.167':139
'24.##2.197.130':139
'24.##2.175.222':139
'24.##2.162.202':139
'24.##2.31.166':139
'24.##2.95.65':139
'24.##2.41.46':139
'24.##2.65.177':445
'24.##2.106.231':445
'24.##2.151.122':445
'24.##2.95.65':445
'24.##2.80.236':139
'24.##2.145.81':139
'24.##2.194.113':139
'24.##2.41.46':445
'24.##2.218.164':139
'24.##2.130.162':445
'24.##2.79.183':445
'24.##2.162.109':445
'24.##2.65.177':139
'24.##2.233.137':445
'24.##2.208.79':445
'24.##2.150.29':445
'24.##2.118.112':445
'24.##2.55.228':445
'24.##2.104.110':445
'24.##2.127.85':445
'24.##2.32.157':139
'24.##2.8.180':139
'24.##2.35.142':139
'24.##2.194.138':139
'24.##2.21.43':139
'24.##2.145.0':139
'24.##2.170.165':139
'24.##2.95.241':139
'24.##2.137.71':139
'24.##2.151.32':139
'24.##2.80.201':139
'24.##2.240.135':139
'24.##2.34.172':139
'24.##2.227.251':139
'24.##2.216.144':139
'24.##2.10.223':139
'24.##2.220.26':139
'24.##2.73.251':139
'24.##2.188.231':139
'24.##2.170.17':139
'24.##2.197.220':139
'24.##2.243.124':139
'24.##2.149.13':9988
'24.##2.27.254':9988
'24.##2.48.24':445
'24.##2.101.119':445
'24.##2.197.34':445
'24.##2.172.149':9988
'24.##2.27.186':9988
'24.#02.77.7':9988
'24.##2.146.25':9988
'24.##2.106.205':9988
'24.##2.41.28':9988
'24.##2.217.187':445
'24.##2.221.217':445
'24.##2.169.191':445
'24.##2.191.196':445
'24.##2.77.18':445
'24.##2.195.246':445
'24.##2.61.171':445
'24.##2.14.39':445
'24.##2.94.48':445
'24.##2.83.77':445
'24.##2.37.229':445
'24.##2.208.79':139
'24.##2.104.110':139
'24.##2.79.183':139
'24.##2.162.109':139
'24.##2.130.162':139
'24.##2.127.85':139
'24.##2.106.231':139
'24.##2.151.122':139
'24.##2.118.112':139
'24.##2.55.228':139
'24.##2.150.29':139
'24.##2.17.115':9988
'24.##2.20.77':9988
'24.##2.97.194':9988
'24.##2.103.51':9988
'24.##2.51.116':9988
'24.##2.213.82':9988
'24.##2.23.246':9988
'24.##2.233.137':139
'24.##2.185.148':9988
'24.##2.108.131':9988
'24.##2.254.46':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней