Trojan.DownLoader12.29091

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##4.198.216':139
'60.##4.23.199':139
'60.##4.102.23':139
'60.##4.177.5':139
'60.##4.90.179':139
'60.##4.243.173':139
'60.##4.176.41':139
'60.##4.254.34':139
'60.##4.214.254':139
'60.##4.213.170':139
'60.##4.186.11':139
'60.##4.153.220':139
'60.##4.84.32':139
'60.##4.46.170':445
'60.##4.18.31':445
'60.##4.24.114':139
'60.##4.25.246':445
'60.##4.116.72':445
'60.##4.12.94':445
'60.##4.103.138':139
'60.##4.200.77':139
'60.##4.29.195':139
'60.##4.48.233':139
'60.##4.253.211':139
'60.##4.244.252':139
'60.##4.169.214':139
'60.##4.198.216':445
'60.##4.23.199':445
'60.##4.102.23':445
'60.##4.177.5':445
'60.##4.90.179':445
'60.##4.243.173':445
'60.##4.176.41':445
'60.##4.254.34':445
'60.##4.214.254':445
'60.##4.213.170':445
'60.##4.186.11':445
'60.##4.153.220':445
'60.##4.84.32':445
'60.##4.248.185':139
'60.##4.202.153':139
'60.##4.24.114':445
'60.##4.104.207':139
'60.##4.44.179':139
'60.##4.202.146':139
'60.##4.103.138':445
'60.##4.200.77':445
'60.##4.29.195':445
'60.##4.48.233':445
'60.##4.253.211':445
'60.##4.244.252':445
'60.##4.81.238':445
'60.##4.238.150':139
'60.##4.9.179':139
'60.##4.150.40':139
'60.##4.47.212':139
'60.##4.41.226':139
'60.##4.221.205':139
'60.##4.103.124':139
'60.##4.170.92':139
'60.#04.88.7':139
'60.##4.58.81':139
'60.##4.162.160':139
'60.##4.124.65':139
'60.##4.198.180':139
'60.##4.194.136':445
'60.##4.127.194':445
'60.##4.52.127':445
'60.##4.79.249':445
'60.##4.249.57':445
'60.##4.150.81':445
'60.##4.189.168':139
'60.##4.186.205':139
'60.##4.180.208':139
'60.#04.4.64':445
'60.##4.229.94':139
'60.##4.47.248':139
'60.##4.181.15':139
'60.##4.9.179':445
'60.##4.150.40':445
'60.##4.58.81':445
'60.##4.41.226':445
'60.##4.221.205':445
'60.##4.238.150':445
'60.##4.170.92':445
'60.#04.88.7':445
'60.##4.181.15':445
'60.##4.162.160':445
'60.##4.124.65':445
'60.##4.103.124':445
'60.##4.47.212':445
'60.##4.12.94':139
'60.##4.46.170':139
'60.##4.18.31':139
'60.##4.81.238':139
'60.##4.25.246':139
'60.##4.116.72':139
'60.##4.186.205':445
'60.##4.180.208':445
'60.##4.198.180':445
'60.##4.229.94':445
'60.##4.47.248':445
'60.##4.189.168':445
'60.##4.147.229':139
'60.##4.236.164':139
'60.##4.121.216':139
'60.##4.115.68':139
'60.##4.29.77':139
'60.##4.241.221':139
'60.##4.185.3':139
'60.##4.54.151':139
'60.##4.41.72':139
'60.##4.230.150':139
'60.##4.168.31':139
'60.#04.54.6':139
'60.##4.113.63':139
'60.##4.137.65':445
'60.##4.71.44':139
'60.##4.99.33':139
'60.##4.128.76':445
'60.##4.97.39':445
'60.##4.17.71':445
'60.##4.205.164':139
'60.##4.61.207':139
'60.##4.248.232':139
'60.##4.113.163':139
'60.##4.12.35':139
'60.##4.11.85':139
'60.##4.150.1':139
'60.##4.147.229':445
'60.##4.236.164':445
'60.##4.121.216':445
'60.##4.115.68':445
'60.##4.29.77':445
'60.##4.241.221':445
'60.##4.185.3':445
'60.##4.54.151':445
'60.##4.41.72':445
'60.##4.230.150':445
'60.##4.168.31':445
'60.#04.54.6':445
'60.##4.113.63':445
'60.##4.84.86':139
'60.##4.71.44':445
'60.##4.99.33':445
'60.##4.19.117':139
'60.##4.223.206':139
'60.##4.195.121':139
'60.##4.205.164':445
'60.##4.61.207':445
'60.##4.248.232':445
'60.##4.113.163':445
'60.##4.12.35':445
'60.##4.11.85':445
'60.##4.63.130':445
'60.##4.59.225':139
'60.##4.188.21':139
'60.##4.251.13':139
'60.##4.207.134':139
'60.##4.38.190':139
'60.##4.248.76':139
'60.#04.62.5':139
'60.#04.8.83':139
'60.##4.215.244':139
'60.##4.36.149':139
'60.##4.174.116':139
'60.##4.75.174':139
'60.##4.91.39':139
'60.##4.202.146':445
'60.##4.248.185':445
'60.##4.202.153':445
'60.##4.169.214':445
'60.##4.104.207':445
'60.##4.44.179':445
'60.##4.107.185':139
'60.##4.106.204':139
'60.##4.176.106':139
'60.##4.45.37':139
'60.##4.25.202':139
'60.##4.89.233':139
'60.##4.247.230':139
'60.##4.188.21':445
'60.##4.251.13':445
'60.##4.36.149':445
'60.##4.38.190':445
'60.##4.248.76':445
'60.##4.59.225':445
'60.#04.8.83':445
'60.##4.215.244':445
'60.##4.247.230':445
'60.##4.174.116':445
'60.##4.75.174':445
'60.#04.62.5':445
'60.##4.207.134':445
'60.##4.17.71':139
'60.##4.137.65':139
'60.##4.45.37':445
'60.##4.63.130':139
'60.##4.128.76':139
'60.##4.97.39':139
'60.##4.106.204':445
'60.##4.176.106':445
'60.##4.91.39':445
'60.##4.25.202':445
'60.##4.89.233':445
'60.##4.107.185':445
'60.##4.158.90':445
'60.##4.215.199':445
'60.##4.49.44':445
'60.##4.148.95':445
'60.##4.27.138':445
'60.##4.96.109':445
'60.##4.3.177':445
'60.##4.67.124':445
'60.##4.203.127':445
'60.##4.180.41':445
'60.##4.73.148':445
'60.##4.174.216':445
'60.##4.131.49':445
'60.##4.197.253':445
'60.##4.142.5':445
'60.##4.216.42':445
'60.##4.192.139':445
'60.##4.14.49':445
'60.##4.175.67':445
'60.##4.43.107':445
'60.##4.140.169':445
'60.##4.17.252':445
'60.##4.106.18':445
'60.##4.57.29':445
'60.##4.5.198':445
'60.##4.216.173':445
'60.##4.42.212':445
'60.##4.147.0':445
'60.##4.80.147':445
'60.##4.78.81':445
'60.##4.252.131':445
'60.#04.21.6':445
'60.##4.60.196':445
'60.##4.11.126':445
'60.##4.154.192':445
'60.##4.216.42':9988
'60.#04.8.78':445
'60.##4.130.162':445
'60.##4.68.34':445
'60.##4.215.60':445
'60.##4.37.96':445
'60.##4.150.53':445
'60.##4.79.227':445
'60.##4.224.69':445
'60.##4.31.75':445
'60.##4.175.230':445
'60.##4.148.213':445
'60.##4.140.244':445
'60.##4.173.108':445
'60.##4.75.159':445
'60.##4.169.92':445
'60.##4.132.111':445
'60.##4.107.85':445
'60.##4.3.177':139
'60.##4.215.199':139
'60.##4.49.44':139
'60.##4.197.253':139
'60.##4.27.138':139
'60.##4.96.109':139
'60.##4.131.49':139
'60.##4.67.124':139
'60.##4.203.127':139
'60.##4.148.95':139
'60.##4.73.148':139
'60.##4.174.216':139
'60.##4.106.18':139
'60.##4.43.107':139
'60.##4.142.5':139
'60.##4.216.42':139
'60.##4.175.67':139
'60.##4.14.49':139
'60.##4.107.85':139
'60.##4.216.173':139
'60.##4.140.169':139
'60.##4.17.252':139
'60.##4.192.139':139
'60.##4.57.29':139
'60.##4.5.198':139
'60.##4.180.41':139
'60.##4.60.196':139
'60.##4.147.0':139
'60.##4.80.147':139
'60.##4.215.60':139
'60.##4.252.131':139
'60.#04.21.6':139
'60.##4.68.34':139
'60.##4.11.126':139
'60.##4.154.192':139
'60.##4.78.81':139
'60.#04.8.78':139
'60.##4.130.162':139
'60.##4.173.108':139
'60.##4.175.230':139
'60.##4.37.96':139
'60.##4.150.53':139
'60.##4.42.212':139
'60.##4.224.69':139
'60.##4.31.75':139
'60.##4.132.111':139
'60.##4.148.213':139
'60.##4.140.244':139
'60.##4.79.227':139
'60.##4.75.159':139
'60.##4.169.92':139
'60.##4.162.185':139
'60.##4.41.68':139
'60.##4.1.186':139
'60.##4.107.234':139
'60.##4.193.133':139
'60.##4.17.174':139
'60.##4.209.148':139
'60.##4.33.70':139
'60.##4.242.4':139
'60.##4.140.41':139
'60.##4.154.56':139
'60.##4.156.93':139
'60.##4.3.248':139
'60.##4.91.22':445
'60.##4.117.134':445
'60.##4.25.63':445
'60.##4.182.0':445
'60.##4.113.54':445
'60.##4.80.22':445
'60.##4.67.201':139
'60.#04.72.2':139
'60.##4.34.122':139
'60.##4.85.199':445
'60.##4.10.108':139
'60.##4.107.63':139
'60.##4.79.249':139
'60.##4.162.185':445
'60.##4.41.68':445
'60.##4.1.186':445
'60.##4.107.234':445
'60.##4.193.133':445
'60.##4.17.174':445
'60.##4.209.148':445
'60.##4.33.70':445
'60.##4.242.4':445
'60.##4.140.41':445
'60.##4.154.56':445
'60.##4.156.93':445
'60.##4.34.122':445
'60.##4.194.136':139
'60.##4.127.194':139
'60.##4.52.127':139
'60.##4.158.90':139
'60.##4.249.57':139
'60.##4.150.81':139
'60.##4.107.63':445
'60.#04.72.2':445
'60.##4.3.248':445
'60.#04.4.64':139
'60.##4.10.108':445
'60.##4.67.201':445
'60.##4.114.72':445
'60.#04.2.62':139
'60.#04.24.2':139
'60.##4.170.23':139
'60.##4.22.57':139
'60.##4.73.14':139
'60.##4.91.211':139
'60.##4.138.101':139
'60.##4.165.23':139
'60.##4.110.62':139
'60.##4.152.33':139
'60.##4.238.73':139
'60.##4.10.230':139
'60.##4.140.244':9988
'60.##4.17.252':9988
'60.##4.27.138':9988
'60.##4.3.177':9988
'60.##4.175.67':9988
'60.##4.142.5':9988
'60.##4.216.173':9988
'60.##4.67.124':9988
'60.##4.150.53':9988
'60.##4.169.92':9988
'60.##4.49.44':9988
'60.##4.148.95':9988
'60.##4.174.216':9988
'60.##4.184.4':139
'60.##4.152.33':445
'60.##4.10.230':445
'60.##4.238.73':445
'60.#04.2.62':445
'60.#04.24.2':445
'60.##4.170.23':445
'60.##4.184.4':445
'60.##4.22.32':445
'60.##4.134.90':445
'60.##4.138.101':445
'60.##4.165.23':445
'60.##4.110.62':445
'60.##4.73.14':445
'60.##4.182.0':139
'60.##4.113.54':139
'60.##4.80.22':139
'60.##4.134.90':139
'60.##4.114.72':139
'60.##4.22.32':139
'60.##4.85.199':139
'60.##4.22.57':445
'60.##4.91.211':445
'60.##4.91.22':139
'60.##4.25.63':139
'60.##4.117.134':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней