Trojan.DownLoader12.29044

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#8.32.142':139
'20#.#8.13.152':139
'20#.#8.130.58':139
'20#.#8.107.34':139
'20#.#8.201.214':139
'20#.#8.185.6':139
'20#.#8.88.178':139
'20#.#8.73.22':445
'20#.#8.241.3':445
'20#.#8.143.241':445
'20#.#8.33.75':139
'20#.#8.23.142':445
'20#.#8.166.89':445
'20#.#8.159.180':139
'20#.#8.166.89':139
'20#.#8.73.22':139
'20#.#8.241.3':139
'20#.#8.22.219':445
'20#.#8.216.137':445
'20#.#8.23.142':139
'20#.#8.143.241':139
'20#.#8.66.115':139
'20#.#8.230.254':139
'20#.#8.193.211':139
'20#.#8.134.84':139
'20#.#8.110.20':139
'20#.#8.176.43':139
'20#.#8.96.106':139
'20#.#8.74.56':139
'20#.#8.141.22':139
'20#.#8.33.75':445
'20#.#8.254.42':139
'20#.#8.113.194':139
'20#.#8.5.189':139
'20#.18.4.17':139
'20#.#8.26.127':139
'20#.#8.236.219':139
'20#.#8.30.100':139
'20#.#8.99.178':139
'20#.#8.138.47':139
'20#.#8.88.178':445
'20#.#8.66.115':445
'20#.#8.230.254':445
'20#.#8.193.211':445
'20#.#8.134.84':445
'20#.#8.110.20':445
'20#.#8.176.43':445
'20#.#8.159.180':445
'20#.#8.32.142':445
'20#.#8.13.152':445
'20#.#8.130.58':445
'20#.#8.107.34':445
'20#.#8.201.214':445
'20#.#8.185.6':445
'20#.#8.31.222':139
'20#.#8.8.130':139
'20#.#8.146.51':139
'20#.#8.249.74':139
'20#.#8.124.249':139
'20#.#8.153.120':139
'20#.#8.237.145':139
'20#.#8.216.137':139
'20#.#8.111.101':445
'20#.#8.237.24':445
'20#.#8.170.170':139
'20#.#8.117.22':139
'20#.#8.22.219':139
'20#.#8.250.35':139
'20#.#8.161.35':139
'20#.#8.92.161':139
'20#.#8.122.195':139
'20#.#8.211.51':139
'20#.#8.110.0':139
'20#.#8.164.169':139
'20#.#8.26.247':139
'20#.#8.153.224':139
'20#.18.8.57':139
'20#.#8.204.61':139
'20#.#8.105.82':139
'20#.#8.27.32':139
'20#.#8.158.150':139
'20#.#8.250.35':445
'20#.#8.249.74':445
'20#.#8.124.249':445
'20#.#8.153.224':445
'20#.18.8.57':445
'20#.#8.204.61':445
'20#.#8.153.120':445
'20#.#8.237.145':445
'20#.#8.170.170':445
'20#.#8.117.22':445
'20#.#8.31.222':445
'20#.#8.8.130':445
'20#.#8.146.51':445
'20#.#8.158.150':445
'20#.#8.47.144':445
'20#.#8.211.51':445
'20#.#8.110.0':445
'20#.#8.180.237':445
'20#.#8.135.146':445
'20#.#8.212.96':445
'20#.#8.164.169':445
'20#.#8.26.247':445
'20#.#8.105.82':445
'20#.#8.27.32':445
'20#.#8.161.35':445
'20#.#8.92.161':445
'20#.#8.122.195':445
'20#.#8.140.25':445
'20#.#8.225.35':445
'20#.#8.235.63':445
'20#.#8.58.148':139
'20#.#8.53.50':139
'20#.#8.201.42':445
'20#.#8.16.93':445
'20#.#8.206.128':445
'20#.#8.130.184':445
'20#.#8.229.100':445
'20#.#8.166.91':445
'20#.#8.186.43':445
'20#.#8.91.159':445
'20#.18.74.7':139
'20#.#8.91.159':139
'20#.#8.206.128':139
'20#.#8.130.184':139
'20#.#8.16.93':139
'20#.#8.166.91':139
'20#.#8.186.43':139
'20#.#8.229.100':139
'20#.#8.94.41':139
'20#.#8.220.84':139
'20#.#8.242.219':139
'20#.#8.59.218':139
'20#.#8.79.78':139
'20#.#8.238.244':139
'20#.#8.83.242':139
'20#.18.6.77':139
'20#.18.39.6':139
'20#.#8.169.44':139
'20#.18.28.3':139
'20#.#8.241.188':139
'20#.#8.125.131':139
'20#.#8.167.79':139
'20#.#8.78.83':139
'20#.#8.41.134':139
'20#.#8.88.195':139
'20#.#8.158.155':139
'20#.#8.21.152':139
'20#.#8.209.142':139
'20#.#8.94.41':445
'20#.#8.220.84':445
'20#.#8.242.219':445
'20#.#8.59.218':445
'20#.#8.79.78':445
'20#.#8.238.244':445
'20#.18.74.7':445
'20#.#8.70.127':139
'20#.#8.36.143':139
'20#.#8.150.36':139
'20#.#8.58.148':445
'20#.#8.53.50':445
'20#.#8.100.246':139
'20#.#8.41.52':139
'20#.#8.42.35':139
'20#.#8.254.42':445
'20#.#8.82.247':139
'20#.#8.100.29':139
'20#.#8.121.196':139
'20#.#8.113.194':445
'20#.#8.5.189':445
'20#.#8.30.100':445
'20#.#8.99.178':445
'20#.#8.96.106':445
'20#.#8.74.56':445
'20#.#8.141.22':445
'20#.#8.141.177':139
'20#.#8.55.55':139
'20#.#8.241.54':139
'20#.#8.250.240':139
'20#.#8.26.120':139
'20#.#8.8.123':139
'20#.#8.55.47':139
'20#.#8.4.240':139
'20#.#8.226.253':139
'20#.#8.61.144':139
'20#.#8.121.9':139
'20#.#8.162.183':139
'20#.#8.167.230':139
'20#.#8.55.110':139
'20#.#8.141.177':445
'20#.#8.82.247':445
'20#.#8.100.29':445
'20#.#8.226.253':445
'20#.#8.61.144':445
'20#.#8.121.9':445
'20#.#8.121.196':445
'20#.#8.140.25':139
'20#.#8.225.35':139
'20#.#8.235.63':139
'20#.#8.41.52':445
'20#.#8.42.35':445
'20#.#8.201.42':139
'20#.#8.55.110':445
'20#.#8.236.219':445
'20#.#8.26.120':445
'20#.#8.8.123':445
'20#.#8.138.47':445
'20#.18.4.17':445
'20#.#8.26.127':445
'20#.#8.55.47':445
'20#.#8.4.240':445
'20#.#8.162.183':445
'20#.#8.167.230':445
'20#.#8.55.55':445
'20#.#8.241.54':445
'20#.#8.250.240':445
'20#.#8.47.144':139
'20#.#8.207.165':445
'20#.#8.97.234':445
'20#.#8.119.2':445
'20#.#8.176.102':445
'20#.#8.112.247':445
'20#.#8.255.242':445
'20#.#8.17.229':445
'20#.#8.174.46':445
'20#.#8.57.174':445
'20#.#8.117.58':445
'20#.#8.255.131':445
'20#.#8.144.211':445
'20#.#8.93.134':445
'20#.#8.101.64':445
'20#.#8.35.136':445
'20#.#8.103.119':445
'20#.#8.135.213':445
'20#.#8.138.202':445
'20#.#8.222.34':445
'20#.#8.10.114':445
'20#.#8.178.168':445
'20#.18.6.42':445
'20#.#8.116.17':445
'20#.18.97.5':445
'20#.#8.128.142':445
'20#.#8.228.13':445
'20#.#8.32.69':445
'20#.#8.34.192':445
'20#.#8.180.37':445
'20#.#8.99.225':445
'20#.#8.34.168':445
'20#.#8.63.77':445
'20#.#8.44.37':445
'20#.#8.211.157':445
'20#.#8.228.13':9988
'20#.18.97.5':9988
'20#.#8.97.234':9988
'20#.#8.198.189':9988
'20#.#8.28.90':9988
'20#.#8.32.69':9988
'20#.#8.32.124':445
'20#.#8.208.91':445
'20#.#8.121.127':445
'20#.#8.65.81':445
'20#.#8.65.188':445
'20#.#8.30.133':445
'20#.#8.79.182':445
'20#.#8.33.116':445
'20#.#8.202.127':445
'20#.#8.193.201':445
'20#.#8.170.193':445
'20#.#8.77.78':445
'20#.#8.153.2':445
'20#.#8.173.45':445
'20#.#8.176.102':139
'20#.#8.112.247':139
'20#.#8.255.242':139
'20#.#8.116.17':139
'20#.18.97.5':139
'20#.#8.101.64':139
'20#.#8.207.165':139
'20#.#8.255.131':139
'20#.#8.144.211':139
'20#.#8.93.134':139
'20#.#8.97.234':139
'20#.#8.119.2':139
'20#.#8.17.229':139
'20#.18.6.42':139
'20#.#8.138.202':139
'20#.#8.103.24':139
'20#.#8.28.90':139
'20#.#8.35.136':139
'20#.#8.103.119':139
'20#.#8.222.34':139
'20#.#8.198.189':139
'20#.#8.128.142':139
'20#.#8.228.13':139
'20#.#8.32.69':139
'20#.#8.10.114':139
'20#.#8.135.213':139
'20#.#8.178.168':139
'20#.#8.34.168':139
'20#.#8.63.77':139
'20#.#8.44.37':139
'20#.#8.193.201':139
'20#.#8.170.193':139
'20#.#8.32.124':139
'20#.#8.34.192':139
'20#.#8.28.90':445
'20#.#8.198.189':445
'20#.#8.103.24':445
'20#.#8.180.37':139
'20#.#8.99.225':139
'20#.#8.211.157':139
'20#.#8.202.127':139
'20#.#8.65.188':139
'20#.#8.30.133':139
'20#.#8.79.182':139
'20#.#8.174.46':139
'20#.#8.57.174':139
'20#.#8.117.58':139
'20#.#8.208.91':139
'20#.#8.77.78':139
'20#.#8.153.2':139
'20#.#8.173.45':139
'20#.#8.121.127':139
'20#.#8.65.81':139
'20#.#8.33.116':139
'20#.#8.124.8':139
'20#.#8.119.111':139
'20#.#8.100.35':139
'20#.#8.107.205':139
'20#.#8.202.54':139
'20#.#8.170.1':139
'20#.#8.154.92':139
'20#.#8.161.10':139
'20#.#8.99.113':139
'20#.#8.80.218':139
'20#.#8.124.89':139
'20#.#8.151.53':139
'20#.#8.151.164':139
'20#.#8.19.229':139
'20#.#8.152.158':445
'20#.#8.139.152':445
'20#.#8.8.139':445
'20#.#8.96.137':445
'20#.#8.128.100':445
'20#.#8.81.182':445
'20#.#8.188.10':445
'20#.#8.236.91':139
'20#.#8.48.176':139
'20#.#8.121.78':139
'20#.#8.198.129':445
'20#.#8.230.165':445
'20#.#8.46.11':139
'20#.#8.161.10':445
'20#.#8.99.113':445
'20#.#8.80.218':445
'20#.#8.124.89':445
'20#.#8.151.53':445
'20#.#8.151.164':445
'20#.#8.51.68':445
'20#.#8.180.237':139
'20#.#8.135.146':139
'20#.#8.212.96':139
'20#.#8.169.170':445
'20#.#8.111.101':139
'20#.#8.237.24':139
'20#.#8.154.92':445
'20#.#8.236.91':445
'20#.#8.48.176':445
'20#.#8.121.78':445
'20#.#8.51.68':139
'20#.#8.169.170':139
'20#.#8.46.11':445
'20#.#8.19.229':445
'20#.#8.124.8':445
'20#.#8.119.111':445
'20#.#8.100.35':445
'20#.#8.107.205':445
'20#.#8.202.54':445
'20#.#8.170.1':445
'20#.#8.97.198':139
'20#.#8.102.164':139
'20#.#8.113.231':139
'20#.#8.197.191':139
'20#.#8.133.197':139
'20#.#8.88.27':139
'20#.#8.158.124':139
'20#.#8.253.125':139
'20#.#8.96.137':139
'20#.#8.128.100':139
'20#.#8.108.56':139
'20#.#8.96.108':139
'20#.#8.154.55':139
'20#.#8.191.80':139
'20#.#8.30.133':9988
'20#.#8.121.127':9988
'20#.#8.211.144':139
'20#.#8.119.2':9988
'20#.#8.255.131':9988
'20#.#8.174.46':9988
'20#.#8.175.165':139
'20#.#8.51.103':139
'20#.#8.87.51':139
'20#.#8.36.216':139
'20#.#8.100.172':139
'20#.#8.215.100':139
'20#.#8.0.104':139
'20#.#8.133.197':445
'20#.#8.88.27':445
'20#.#8.97.198':445
'20#.#8.36.216':445
'20#.#8.191.80':445
'20#.#8.197.191':445
'20#.#8.102.164':445
'20#.#8.96.108':445
'20#.#8.154.55':445
'20#.#8.253.125':445
'20#.#8.113.231':445
'20#.#8.158.124':445
'20#.#8.108.56':445
'20#.#8.87.51':445
'20#.#8.8.139':139
'20#.#8.188.10':139
'20#.#8.198.129':139
'20#.#8.81.182':139
'20#.#8.152.158':139
'20#.#8.139.152':139
'20#.#8.230.165':139
'20#.#8.215.100':445
'20#.#8.0.104':445
'20#.#8.51.103':445
'20#.#8.211.144':445
'20#.#8.175.165':445
'20#.#8.100.172':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней