Trojan.DownLoader12.29123

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#2.100.129':445
'21#.#2.39.110':445
'21#.#2.190.43':445
'21#.#2.151.124':445
'21#.#2.49.99':445
'21#.#2.79.171':445
'21#.#2.10.150':445
'21#.#2.17.251':445
'21#.#2.129.12':445
'21#.#2.248.12':445
'21#.#2.138.218':445
'21#.#2.61.152':445
'21#.#2.11.61':445
'21#.#2.173.249':445
'21#.#2.34.182':445
'21#.#2.214.213':445
'21#.#2.33.115':445
'21#.#2.38.81':445
'21#.#2.183.39':445
'21#.#2.116.81':445
'21#.#2.159.120':445
'21#.#2.9.114':139
'21#.#2.36.164':139
'21#.#2.30.216':139
'21#.#2.159.81':139
'21#.#2.169.159':139
'21#.#2.131.193':139
'21#.#2.254.28':139
'21#.#2.178.74':139
'21#.#2.94.85':139
'21#.#2.74.201':139
'21#.#2.16.135':139
'21#.#2.210.240':139
'21#.#2.250.78':445
'21#.#2.250.78':139
'21#.#2.49.155':445
'21#.#2.225.236':445
'21#.#2.89.174':139
'21#.#2.13.247':139
'21#.#2.74.245':139
'21#.#2.210.240':445
'21#.#2.73.218':139
'21#.#2.138.34':445
'21#.#2.10.150':139
'21#.#2.49.155':139
'21#.#2.79.171':139
'21#.#2.248.12':139
'21#.#2.17.251':139
'21#.#2.175.228':445
'21#.#2.226.21':445
'21#.12.9.95':445
'21#.#2.225.236':139
'21#.#2.47.75':445
'21#.#2.129.12':139
'21#.#2.38.81':139
'21#.#2.138.218':139
'21#.#2.33.115':139
'21#.#2.159.120':139
'21#.#2.183.39':139
'21#.#2.100.129':139
'21#.#2.39.110':139
'21#.#2.190.43':139
'21#.#2.151.124':139
'21#.#2.49.99':139
'21#.#2.29.189':445
'21#.#2.114.141':445
'21#.#2.36.14':445
'21#.#2.10.90':445
'21#.#2.61.48':445
'21#.#2.43.143':445
'21#.#2.130.147':445
'21#.#2.165.155':445
'21#.#2.151.194':445
'21#.#2.248.213':445
'21#.#2.233.237':445
'21#.#2.43.156':445
'21#.#2.140.140':445
'21#.#2.156.111':445
'21#.#2.115.115':445
'21#.#2.111.115':445
'21#.12.1.12':445
'21#.#2.68.154':445
'21#.#2.230.39':445
'21#.#2.72.194':445
'21#.#2.39.178':445
'21#.#2.65.75':445
'21#.#2.34.242':445
'21#.#2.176.253':445
'21#.#2.199.36':445
'21#.#2.253.198':445
'21#.#2.186.128':445
'21#.#2.233.107':445
'21#.#2.142.214':445
'21#.12.4.5':445
'21#.#2.181.119':445
'21#.#2.119.176':445
'21#.#2.178.74':445
'21#.#2.131.193':445
'21#.#2.74.201':445
'21#.#2.36.164':445
'21#.#2.94.85':445
'21#.#2.209.147':445
'21#.#2.117.92':445
'21#.#2.147.204':445
'21#.#2.254.28':445
'21#.#2.22.107':445
'21#.#2.128.45':445
'21#.#2.27.233':445
'21#.#2.215.180':445
'21#.#2.9.200':445
'21#.#2.229.106':445
'21#.#2.187.106':139
'21#.#2.97.187':139
'21#.#2.106.154':445
'21#.#2.14.140':445
'21#.#2.118.161':445
'21#.#2.137.79':445
'21#.#2.224.130':445
'21#.#2.159.96':445
'21#.#2.202.135':445
'21#.#2.140.14':445
'21#.#2.246.196':445
'21#.#2.93.61':445
'21#.#2.218.23':445
'21#.#2.21.227':445
'21#.#2.71.105':445
'21#.#2.8.214':445
'21#.#2.9.114':445
'21#.#2.233.107':139
'21#.#2.140.14':139
'21#.#2.186.128':139
'21#.#2.181.119':139
'21#.#2.142.214':139
'21#.#2.159.96':139
'21#.#2.71.105':139
'21#.#2.224.130':139
'21#.#2.246.196':139
'21#.#2.202.135':139
'21#.12.4.5':139
'21#.#2.117.92':139
'21#.#2.119.176':139
'21#.#2.209.147':139
'21#.#2.22.107':139
'21#.#2.147.204':139
'21#.#2.65.75':139
'21#.#2.34.242':139
'21#.#2.176.253':139
'21#.#2.199.36':139
'21#.#2.253.198':139
'21#.#2.74.245':445
'21#.#2.89.174':445
'21#.#2.73.218':445
'21#.#2.118.161':139
'21#.#2.106.154':139
'21#.#2.169.159':445
'21#.#2.30.216':445
'21#.#2.159.81':445
'21#.#2.13.247':445
'21#.#2.16.135':445
'21#.#2.14.140':139
'21#.#2.218.23':139
'21#.#2.137.79':139
'21#.#2.93.61':139
'21#.#2.8.214':139
'21#.#2.21.227':139
'21#.#2.128.45':139
'21#.#2.27.233':139
'21#.#2.215.180':139
'21#.#2.9.200':139
'21#.#2.229.106':139
'21#.#2.64.173':445
'21#.#2.69.206':445
'21#.#2.22.86':445
'21#.#2.233.69':445
'21#.#2.85.233':445
'21#.#2.143.52':445
'21#.#2.51.214':445
'21#.#2.58.98':445
'21#.#2.51.36':445
'21#.12.42.6':445
'21#.#2.31.164':445
'21#.#2.143.103':139
'21#.#2.234.154':139
'21#.#2.70.38':139
'21#.#2.56.164':139
'21#.#2.236.247':139
'21#.#2.13.196':445
'21#.#2.98.250':445
'21#.#2.131.5':139
'21#.#2.125.234':139
'21#.#2.160.126':139
'21#.#2.162.228':445
'21#.#2.177.213':445
'21#.#2.96.57':445
'21#.#2.65.197':445
'21#.12.58.3':445
'21#.#2.5.116':445
'21#.#2.109.27':445
'21#.#2.199.124':445
'21#.#2.243.167':445
'21#.#2.231.13':445
'21#.#2.194.168':445
'21#.#2.206.206':445
'21#.#2.19.172':445
'21#.#2.247.73':445
'21#.#2.134.27':445
'21#.#2.42.199':445
'21#.#2.244.108':445
'21#.#2.161.249':445
'21#.#2.111.215':445
'21#.#2.41.159':445
'21#.#2.185.224':445
'21#.#2.140.206':139
'21#.#2.42.199':139
'21#.#2.247.73':139
'21#.#2.134.27':139
'21#.#2.143.52':139
'21#.#2.51.214':139
'21#.#2.185.224':139
'21#.#2.111.215':139
'21#.#2.41.159':139
'21#.#2.206.206':139
'21#.#2.19.172':139
'21#.#2.58.98':139
'21#.#2.233.69':139
'21#.#2.85.233':139
'21#.#2.31.164':139
'21#.#2.98.250':139
'21#.#2.13.196':139
'21#.#2.51.36':139
'21#.12.42.6':139
'21#.#2.69.206':139
'21#.#2.22.86':139
'21#.#2.64.173':139
'21#.#2.170.193':139
'21#.#2.43.41':139
'21#.#2.185.50':139
'21#.#2.5.116':139
'21#.#2.109.27':139
'21#.#2.198.123':139
'21#.#2.3.226':139
'21#.#2.222.20':139
'21#.#2.196.73':139
'21#.#2.20.196':139
'21#.#2.199.124':139
'21#.#2.65.197':139
'21#.12.58.3':139
'21#.#2.194.168':139
'21#.#2.244.108':139
'21#.#2.161.249':139
'21#.#2.243.167':139
'21#.#2.231.13':139
'21#.#2.177.213':139
'21#.#2.96.57':139
'21#.#2.162.228':139
'21#.#2.115.115':139
'21#.#2.111.115':139
'21#.#2.226.21':139
'21#.12.9.95':139
'21#.#2.175.228':139
'21#.#2.72.194':139
'21#.#2.39.178':139
'21#.#2.140.140':139
'21#.#2.156.111':139
'21#.#2.43.156':139
'21#.#2.47.75':139
'21#.#2.127.131':445
'21#.#2.53.130':445
'21#.#2.26.143':445
'21#.#2.33.201':139
'21#.#2.194.202':445
'21#.#2.56.43':445
'21#.#2.173.157':445
'21#.#2.173.157':139
'21#.#2.33.201':445
'21#.#2.56.43':139
'21#.#2.138.34':139
'21#.#2.34.182':139
'21#.#2.130.147':139
'21#.#2.165.155':139
'21#.#2.43.143':139
'21#.#2.11.61':139
'21#.#2.116.81':139
'21#.#2.61.152':139
'21#.#2.214.213':139
'21#.#2.173.249':139
'21#.#2.248.213':139
'21#.#2.233.237':139
'21#.#2.10.90':139
'21#.#2.68.154':139
'21#.#2.230.39':139
'21#.12.1.12':139
'21#.#2.114.141':139
'21#.#2.151.194':139
'21#.#2.29.189':139
'21#.#2.61.48':139
'21#.#2.36.14':139
'21#.#2.53.130':139
'21#.#2.125.234':445
'21#.#2.160.126':445
'21#.#2.234.154':445
'21#.#2.70.38':445
'21#.#2.143.103':445
'21#.#2.111.215':9988
'21#.#2.98.250':9988
'21#.#2.19.172':9988
'21#.#2.131.5':445
'21#.#2.162.228':9988
'21#.#2.236.247':445
'21#.#2.196.73':445
'21#.#2.20.196':445
'21#.#2.43.41':445
'21#.#2.185.50':445
'21#.#2.170.193':445
'21#.#2.140.206':445
'21#.#2.56.164':445
'21#.#2.3.226':445
'21#.#2.222.20':445
'21#.#2.198.123':445
'21#.#2.51.214':9988
'21#.#2.42.199':9988
'21#.#2.43.41':9988
'21#.12.58.3':9988
'21#.#2.233.69':9988
'21#.#2.26.143':139
'21#.#2.127.131':139
'21#.#2.194.202':139
'21#.#2.31.164':9988
'21#.#2.41.159':9988
'21#.#2.134.27':9988
'21#.#2.206.206':9988
'21#.#2.143.52':9988
'21#.#2.64.173':9988
'21#.#2.96.57':9988
'21#.#2.5.116':9988
'21#.#2.243.167':9988
'21#.#2.69.206':9988
'21#.#2.22.86':9988
'21#.#2.13.196':9988
'21#.12.42.6':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней