Trojan.DownLoader12.29122

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'81.##8.72.187':445
'81.##8.86.32':445
'81.##8.174.61':445
'81.##8.124.31':445
'81.#78.27.1':445
'81.#78.17.2':445
'81.##8.44.23':139
'81.##8.34.77':445
'81.##8.155.230':445
'81.##8.9.224':445
'81.##8.162.186':445
'81.##8.99.232':445
'81.##8.248.84':445
'81.##8.38.151':445
'81.##8.239.250':445
'81.##8.4.131':445
'81.##8.50.174':445
'81.##8.130.247':445
'81.##8.180.149':445
'81.##8.247.35':445
'81.##8.155.68':139
'81.##8.117.171':139
'81.##8.153.190':139
'81.##8.197.14':139
'81.##8.56.26':139
'81.##8.46.240':139
'81.##8.71.212':139
'81.##8.27.27':139
'81.##8.208.221':139
'81.##8.99.215':139
'81.##8.6.117':139
'81.##8.155.68':445
'81.##8.7.159':445
'81.##8.44.23':445
'81.##8.7.159':139
'81.##8.145.51':139
'81.##8.144.252':139
'81.##8.184.134':139
'81.##8.115.178':139
'81.##8.145.51':445
'81.##8.179.37':139
'81.##8.107.103':445
'81.#78.17.2':139
'81.##8.4.183':445
'81.##8.34.77':139
'81.##8.155.230':139
'81.##8.9.224':139
'81.##8.165.234':445
'81.##8.54.115':445
'81.##8.248.193':445
'81.##8.32.98':445
'81.##8.74.164':445
'81.##8.4.131':139
'81.##8.50.174':139
'81.##8.130.247':139
'81.##8.180.149':139
'81.##8.247.35':139
'81.##8.72.187':139
'81.##8.86.32':139
'81.##8.174.61':139
'81.##8.124.31':139
'81.#78.27.1':139
'81.##8.2.135':445
'81.##8.0.154':445
'81.##8.195.231':445
'81.##8.251.13':445
'81.##8.5.146':445
'81.##8.78.87':445
'81.##8.144.187':445
'81.##8.69.27':445
'81.##8.112.61':445
'81.##8.127.5':445
'81.##8.212.179':445
'81.##8.141.102':445
'81.##8.96.141':445
'81.##8.177.230':445
'81.##8.44.95':445
'81.##8.32.225':445
'81.##8.167.215':445
'81.##8.146.197':445
'81.##8.156.74':445
'81.##8.121.62':445
'81.##8.39.73':445
'81.##8.152.36':139
'81.##8.30.16':445
'81.##8.90.195':445
'81.##8.97.193':445
'81.##8.161.214':445
'81.##8.176.228':445
'81.##8.144.79':445
'81.##8.77.237':445
'81.##8.174.104':445
'81.##8.238.165':445
'81.##8.70.113':445
'81.##8.27.27':445
'81.##8.152.36':445
'81.##8.71.212':445
'81.##8.6.117':445
'81.##8.208.221':445
'81.##8.72.147':445
'81.##8.50.43':445
'81.##8.30.195':445
'81.#78.98.8':445
'81.##8.194.156':445
'81.##8.106.183':445
'81.##8.145.178':445
'81.##8.96.12':445
'81.##8.156.117':445
'81.##8.7.165':445
'81.##8.147.124':445
'81.##8.152.110':139
'81.##8.2.144':139
'81.##8.42.202':139
'81.#78.1.62':445
'81.##8.72.71':139
'81.##8.100.22':445
'81.##8.107.140':445
'81.##8.179.39':445
'81.##8.38.145':445
'81.##8.53.156':445
'81.##8.71.220':445
'81.##8.120.65':445
'81.##8.220.143':445
'81.##8.183.27':445
'81.##8.144.122':445
'81.##8.99.215':445
'81.##8.144.79':139
'81.##8.77.237':139
'81.##8.174.104':139
'81.##8.238.165':139
'81.##8.70.113':139
'81.##8.179.39':139
'81.##8.100.22':139
'81.##8.53.156':139
'81.##8.106.183':139
'81.##8.38.145':139
'81.##8.72.147':139
'81.##8.50.43':139
'81.##8.30.195':139
'81.#78.98.8':139
'81.##8.194.156':139
'81.##8.30.16':139
'81.##8.90.195':139
'81.##8.97.193':139
'81.##8.161.214':139
'81.##8.176.228':139
'81.##8.107.140':139
'81.##8.144.252':445
'81.##8.184.134':445
'81.##8.115.178':445
'81.#78.1.62':139
'81.##8.179.37':445
'81.##8.117.171':445
'81.##8.153.190':445
'81.##8.197.14':445
'81.##8.56.26':445
'81.##8.46.240':445
'81.##8.71.220':139
'81.##8.120.65':139
'81.##8.220.143':139
'81.##8.183.27':139
'81.##8.144.122':139
'81.##8.145.178':139
'81.##8.96.12':139
'81.##8.156.117':139
'81.##8.7.165':139
'81.##8.147.124':139
'81.##8.99.232':139
'81.##8.235.195':445
'81.##8.190.109':445
'81.##8.56.39':445
'81.##8.76.165':445
'81.##8.140.102':445
'81.##8.178.15':445
'81.##8.139.184':445
'81.##8.75.234':445
'81.##8.161.26':445
'81.##8.221.36':445
'81.##8.64.218':139
'81.##8.79.85':139
'81.##8.58.202':139
'81.##8.35.66':139
'81.##8.167.34':139
'81.##8.35.150':139
'81.##8.241.111':445
'81.##8.37.79':139
'81.##8.177.209':139
'81.#78.41.1':139
'81.##8.192.139':445
'81.##8.7.121':445
'81.##8.39.220':445
'81.##8.124.176':445
'81.##8.47.212':445
'81.##8.57.106':445
'81.##8.147.153':445
'81.##8.121.124':445
'81.##8.63.188':445
'81.##8.12.140':445
'81.##8.37.161':445
'81.##8.101.19':445
'81.##8.159.72':445
'81.##8.160.121':445
'81.##8.4.193':445
'81.##8.186.205':445
'81.##8.227.38':445
'81.##8.212.117':445
'81.##8.83.90':445
'81.##8.86.158':445
'81.##8.28.86':445
'81.##8.110.11':139
'81.##8.186.205':139
'81.##8.160.121':139
'81.##8.4.193':139
'81.##8.139.184':139
'81.##8.192.139':139
'81.##8.28.86':139
'81.##8.83.90':139
'81.##8.86.158':139
'81.##8.101.19':139
'81.##8.159.72':139
'81.##8.56.39':139
'81.##8.235.195':139
'81.##8.140.102':139
'81.##8.241.111':139
'81.##8.76.165':139
'81.##8.75.234':139
'81.##8.178.15':139
'81.##8.221.36':139
'81.##8.190.109':139
'81.##8.161.26':139
'81.##8.227.38':139
'81.##8.158.62':139
'81.##8.133.5':139
'81.##8.62.213':139
'81.##8.121.124':139
'81.##8.240.101':139
'81.##8.61.136':139
'81.##8.100.160':139
'81.##8.68.122':139
'81.##8.219.117':139
'81.##8.86.152':139
'81.##8.124.176':139
'81.##8.7.121':139
'81.##8.57.106':139
'81.##8.212.117':139
'81.##8.47.212':139
'81.##8.63.188':139
'81.##8.147.153':139
'81.##8.37.161':139
'81.##8.39.220':139
'81.##8.12.140':139
'81.##8.240.101':445
'81.##8.165.234':139
'81.##8.54.115':139
'81.##8.248.193':139
'81.##8.32.98':139
'81.##8.74.164':139
'81.##8.177.230':139
'81.##8.141.102':139
'81.##8.32.225':139
'81.##8.2.135':139
'81.##8.44.95':139
'81.##8.110.47':139
'81.##8.10.11':139
'81.##8.209.87':139
'81.##8.252.35':445
'81.##8.181.251':139
'81.##8.10.11':445
'81.##8.4.183':139
'81.##8.110.47':445
'81.##8.181.251':445
'81.##8.209.87':445
'81.##8.96.141':139
'81.##8.144.187':139
'81.##8.69.27':139
'81.##8.112.61':139
'81.##8.127.5':139
'81.##8.212.179':139
'81.##8.248.84':139
'81.##8.162.186':139
'81.##8.239.250':139
'81.##8.107.103':139
'81.##8.38.151':139
'81.##8.167.215':139
'81.##8.146.197':139
'81.##8.156.74':139
'81.##8.121.62':139
'81.##8.39.73':139
'81.##8.0.154':139
'81.##8.195.231':139
'81.##8.251.13':139
'81.##8.5.146':139
'81.##8.78.87':139
'81.##8.252.35':139
'81.##8.79.85':445
'81.##8.177.209':445
'81.##8.64.218':445
'81.##8.167.34':445
'81.##8.58.202':445
'81.##8.76.165':9988
'81.##8.75.234':9988
'81.##8.35.150':445
'81.#78.41.1':445
'81.##8.37.79':445
'81.##8.219.117':445
'81.##8.86.152':445
'81.##8.133.5':445
'81.##8.62.213':445
'81.##8.158.62':445
'81.##8.110.11':445
'81.##8.35.66':445
'81.##8.100.160':445
'81.##8.68.122':445
'81.##8.61.136':445
'81.##8.37.161':9988
'81.##8.190.109':9988
'81.##8.4.193':9988
'81.##8.147.153':9988
'81.##8.227.38':9988
'81.##8.241.111':9988
'81.##8.28.86':9988
'81.##8.235.195':9988
'81.##8.140.102':9988
'81.##8.186.205':9988
'81.##8.161.26':9988
'81.##8.63.188':9988
'81.##8.159.72':9988
'81.##8.101.19':9988
'81.##8.139.184':9988
'81.##8.192.139':9988
'81.##8.121.124':9988
'81.##8.86.158':9988
'81.##8.47.212':9988
'81.##8.12.140':9988
'81.##8.56.39':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней