Trojan.DownLoader12.29045

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#45.224.150':445
'21#.#45.149.162':445
'21#.#45.27.216':445
'21#.#45.95.191':445
'21#.#45.162.116':139
'21#.#45.139.47':445
'21#.#45.198.29':139
'21#.#45.139.47':139
'21#.#45.162.116':445
'21#.#45.65.215':445
'21#.#45.205.117':445
'21#.#45.158.7':445
'21#.#45.15.25':445
'21#.#45.65.121':445
'21#.#45.182.174':445
'21#.#45.34.63':445
'21#.#45.99.17':445
'21#.#45.136.81':445
'21#.#45.208.161':445
'21#.#45.78.37':139
'21#.#45.254.242':139
'21#.#45.39.14':139
'21#.#45.119.29':139
'21#.#45.242.222':139
'21#.#45.24.149':139
'21#.#45.122.24':139
'21#.#45.98.14':139
'21#.#45.194.12':139
'21#.#45.70.226':139
'21#.#45.44.137':139
'21#.#45.125.8':139
'21#.#45.186.69':139
'21#.#45.22.24':139
'21#.#45.60.18':139
'21#.#45.171.66':139
'21#.#45.87.227':139
'21#.#45.94.210':139
'21#.#45.44.191':139
'21#.#45.23.135':139
'21#.#45.223.205':445
'21#.#45.69.117':445
'21#.#45.38.154':445
'21#.#45.104.157':445
'21#.#45.117.71':445
'21#.#45.80.68':445
'21#.#45.183.91':445
'21#.#45.205.47':445
'21#.#45.198.155':445
'21#.#45.89.140':445
'21#.#45.198.175':445
'21#.#45.95.191':139
'21#.#45.224.150':139
'21#.#45.65.215':139
'21#.#45.27.216':139
'21#.#45.149.162':139
'21#.#45.34.166':445
'21#.#45.119.115':445
'21#.#45.57.182':445
'21#.#45.2.20':445
'21#.#45.32.213':445
'21#.#45.75.0':445
'21#.#45.72.97':445
'21#.#45.188.17':445
'21#.#45.83.218':445
'21#.#45.56.96':445
'21#.#45.148.121':445
'21#.#45.205.176':445
'21#.#45.201.55':445
'21#.#45.48.201':445
'21#.#45.17.90':445
'21#.#45.199.20':445
'21#.#45.110.130':445
'21#.#45.81.114':445
'21#.#45.240.77':445
'21#.#45.16.110':445
'21#.#45.51.142':445
'21#.#45.90.164':445
'21#.#45.27.140':445
'21#.#45.174.229':445
'21#.#45.94.142':445
'21#.#45.154.117':445
'21#.#45.238.50':445
'21#.#45.143.237':445
'21#.#45.198.225':445
'21#.#45.39.83':445
'21#.#45.115.66':445
'21#.#45.31.158':445
'21#.#45.66.172':445
'21#.#45.51.98':445
'21#.#45.254.242':445
'21#.#45.39.14':445
'21#.#45.119.29':445
'21#.#45.242.222':445
'21#.#45.24.149':445
'21#.#45.122.24':445
'21#.#45.98.14':445
'21#.#45.194.12':445
'21#.#45.70.226':445
'21#.#45.224.0':445
'21#.#45.219.237':445
'21#.#45.175.15':445
'21#.#45.105.137':445
'21#.#45.237.205':445
'21#.#45.205.24':445
'21#.#45.93.145':139
'21#.#45.116.2':139
'21#.#45.92.11':445
'21#.#45.19.218':445
'21#.#45.127.98':445
'21#.#45.173.123':445
'21#.#45.229.170':445
'21#.#45.86.102':445
'21#.#45.164.78':445
'21#.#45.55.16':445
'21#.#45.163.249':445
'21#.#45.41.109':445
'21#.#45.82.211':445
'21#.#45.73.24':445
'21#.#45.44.137':445
'21#.#45.164.78':139
'21#.#45.173.123':139
'21#.#45.224.0':139
'21#.#45.86.102':139
'21#.#45.229.170':139
'21#.#45.73.24':139
'21#.#45.163.249':139
'21#.#45.55.16':139
'21#.#45.82.211':139
'21#.#45.115.66':139
'21#.#45.143.237':139
'21#.#45.94.142':139
'21#.#45.51.98':139
'21#.#45.238.50':139
'21#.#45.154.117':139
'21#.#45.66.172':139
'21#.#45.39.83':139
'21#.#45.198.225':139
'21#.#45.31.158':139
'21#.#45.41.109':139
'21#.#45.125.8':445
'21#.#45.186.69':445
'21#.#45.22.24':445
'21#.#45.60.18':445
'21#.#45.171.66':445
'21#.#45.87.227':445
'21#.#45.94.210':445
'21#.#45.44.191':445
'21#.#45.23.135':445
'21#.#45.78.37':445
'21#.#45.237.205':139
'21#.#45.219.237':139
'21#.#45.127.98':139
'21#.#45.105.137':139
'21#.#45.175.15':139
'21#.#45.19.218':139
'21#.#45.198.29':445
'21#.#45.205.24':139
'21#.#45.92.11':139
'21#.#45.99.17':139
'21#.#45.229.238':445
'21#.#45.25.92':445
'21#.#45.31.107':139
'21#.#45.204.197':445
'21#.#45.72.190':445
'21#.#45.112.53':445
'21#.#45.136.164':445
'21#.#45.67.179':445
'21#.#45.19.239':445
'21#.#45.208.119':139
'21#.#45.186.52':139
'21#.#45.178.222':139
'21#.#45.115.105':139
'21#.#45.111.170':139
'21#.#45.45.121':139
'21#.#45.6.179':139
'21#.#45.49.31':139
'21#.#45.238.179':139
'21#.#45.71.130':139
'21#.#45.144.95':445
'21#.#45.73.89':445
'21#.#45.182.70':445
'21#.#45.21.53':445
'21#.#45.166.11':445
'21#.#45.189.165':445
'21#.#45.34.208':445
'21#.#45.73.67':445
'21#.#45.161.197':445
'21#.#45.40.126':445
'21#.#45.41.106':445
'21#.#45.120.167':445
'21#.#45.68.121':445
'21#.#45.113.96':445
'21#.#45.174.194':445
'21#.#45.71.61':445
'21#.#45.46.100':445
'21#.#45.204.52':445
'21#.#45.11.142':445
'21#.#45.106.140':445
'21#.#45.222.22':139
'21#.#45.68.121':139
'21#.#45.71.61':139
'21#.#45.174.194':139
'21#.#45.120.167':139
'21#.#45.11.142':139
'21#.#45.204.52':139
'21#.#45.41.106':139
'21#.#45.106.140':139
'21#.#45.46.100':139
'21#.#45.113.96':139
'21#.#45.112.53':139
'21#.#45.25.92':139
'21#.#45.72.190':139
'21#.#45.204.197':139
'21#.#45.67.179':139
'21#.#45.136.164':139
'21#.#45.144.95':139
'21#.#45.229.238':139
'21#.#45.19.239':139
'21#.#45.21.53':139
'21#.#45.25.247':139
'21#.#45.156.148':139
'21#.#45.11.116':139
'21#.#45.234.122':139
'21#.#45.20.251':139
'21#.#45.229.215':139
'21#.#45.192.186':139
'21#.#45.125.218':139
'21#.#45.43.146':139
'21#.#45.84.245':139
'21#.#45.182.70':139
'21#.#45.189.165':139
'21#.#45.166.11':139
'21#.#45.73.89':139
'21#.#45.161.197':139
'21#.#45.73.67':139
'21#.#45.242.82':139
'21#.#45.40.126':139
'21#.#45.34.208':139
'21#.#45.240.77':139
'21#.#45.199.20':139
'21#.#45.32.213':139
'21#.#45.81.114':139
'21#.#45.110.130':139
'21#.#45.174.229':139
'21#.#45.51.142':139
'21#.#45.16.110':139
'21#.#45.27.140':139
'21#.#45.205.47':139
'21#.#45.117.71':139
'21#.#45.69.117':139
'21#.#45.198.175':139
'21#.#45.104.157':139
'21#.#45.38.154':139
'21#.#45.89.140':139
'21#.#45.183.91':139
'21#.#45.80.68':139
'21#.#45.198.155':139
'21#.#45.90.164':139
'21#.#45.65.121':139
'21#.#45.205.117':139
'21#.#45.223.205':139
'21#.#45.15.25':139
'21#.#45.158.7':139
'21#.#45.208.161':139
'21#.#45.34.63':139
'21#.#45.182.174':139
'21#.#45.136.81':139
'21#.#45.205.176':139
'21#.#45.83.218':139
'21#.#45.75.0':139
'21#.#45.17.90':139
'21#.#45.188.17':139
'21#.#45.72.97':139
'21#.#45.48.201':139
'21#.#45.148.121':139
'21#.#45.56.96':139
'21#.#45.201.55':139
'21#.#45.119.115':139
'21#.#45.115.105':445
'21#.#45.111.170':445
'21#.#45.192.186':445
'21#.#45.222.22':445
'21#.#45.186.52':445
'21#.#45.238.179':445
'21#.#45.71.130':445
'21#.#45.178.222':445
'21#.#45.45.121':445
'21#.#45.229.215':445
'21#.#45.11.116':445
'21#.#45.234.122':445
'21#.#45.84.245':445
'21#.#45.242.82':445
'21#.#45.25.247':445
'21#.#45.125.218':445
'21#.#45.43.146':445
'21#.#45.156.148':445
'21#.#45.20.251':445
'21#.#45.6.179':445
'21#.#45.11.116':9988
'21#.#45.156.148':9988
'21#.#45.161.197':9988
'21#.#45.73.67':9988
'21#.#45.20.251':9988
'21#.#45.2.20':139
'21#.#45.34.166':139
'21#.#45.229.215':9988
'21#.#45.57.182':139
'21#.#45.182.70':9988
'21#.#45.31.107':445
'21#.#45.204.52':9988
'21#.#45.49.31':445
'21#.#45.208.119':445
'21#.#45.106.140':9988
'21#.#45.68.121':9988
'21#.#45.73.89':9988
'21#.#45.72.190':9988
'21#.#45.71.61':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней