Trojan.DownLoader12.29095

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#43.180.233':139
'21#.#43.145.200':445
'21#.#43.226.106':139
'21#.#43.233.226':139
'21#.#43.5.31':445
'21#.#43.32.112':445
'21#.#43.34.98':445
'21#.#43.65.5':445
'21#.#43.76.65':445
'21#.#43.154.34':139
'21#.#43.221.184':139
'21#.#43.79.189':139
'21#.#43.225.20':139
'21#.#43.94.242':139
'21#.#43.217.105':139
'21#.#43.44.145':139
'21#.#43.96.93':139
'21#.#43.123.246':139
'21#.#43.11.153':139
'21#.#43.10.55':445
'21#.#43.119.61':445
'21#.#43.92.105':445
'21#.#43.121.218':445
'21#.#43.149.222':445
'21#.#43.20.138':445
'21#.#43.132.19':445
'21#.#43.136.230':445
'21#.#43.76.228':445
'21#.#43.70.134':445
'21#.#43.47.80':445
'21#.#43.136.123':445
'21#.#43.71.106':445
'21#.#43.159.79':445
'21#.#43.45.44':445
'21#.#43.104.195':445
'21#.#43.89.105':445
'21#.#43.145.31':445
'21#.#43.195.144':445
'21#.#43.181.34':139
'21#.#43.145.31':139
'21#.#43.195.144':139
'21#.#43.136.123':139
'21#.#43.45.44':139
'21#.#43.104.195':139
'21#.#43.92.105':139
'21#.#43.121.218':139
'21#.#43.89.105':139
'21#.#43.70.134':139
'21#.#43.47.80':139
'21#.#43.5.31':139
'21#.#43.65.5':139
'21#.#43.30.14':445
'21#.#43.145.200':139
'21#.#43.76.65':139
'21#.#43.71.106':139
'21#.#43.159.79':139
'21#.#43.32.112':139
'21#.#43.34.98':139
'21#.#43.40.115':139
'21#.#43.131.190':139
'21#.#43.2.171':139
'21#.#43.115.35':139
'21#.#43.112.150':139
'21#.#43.5.22':139
'21#.#43.180.136':139
'21#.#43.4.39':139
'21#.#43.157.138':139
'21#.#43.143.49':139
'21#.#43.149.222':139
'21#.#43.136.230':139
'21#.#43.10.55':139
'21#.#43.119.61':139
'21#.#43.76.228':139
'21#.#43.154.197':139
'21#.#43.145.8':139
'21#.#43.20.138':139
'21#.#43.132.19':139
'21#.#43.250.109':139
'21#.#43.29.73':139
'21#.#43.108.44':139
'21#.#43.175.70':139
'21#.#43.169.54':139
'21#.#43.132.136':139
'21#.#43.196.238':139
'21#.#43.24.16':139
'21#.#43.224.200':139
'21#.#43.16.149':139
'21#.#43.163.212':139
'21#.#43.211.98':139
'21#.#43.232.243':139
'21#.#43.37.235':139
'21#.#43.123.153':139
'21#.#43.180.230':139
'21#.#43.15.71':139
'21#.#43.207.252':139
'21#.#43.183.9':139
'21#.#43.39.193':139
'21#.#43.228.156':139
'21#.#43.52.223':139
'21#.#43.84.233':139
'21#.#43.220.228':139
'21#.#43.63.201':139
'21#.#43.82.73':139
'21#.#43.15.224':139
'21#.#43.137.119':139
'21#.#43.89.222':139
'21#.#43.142.203':139
'21#.#43.22.172':139
'21#.#43.225.60':139
'21#.#43.253.53':139
'21#.#43.18.165':139
'21#.#43.132.224':139
'21#.#43.125.3':139
'21#.#43.37.138':139
'21#.#43.133.94':139
'21#.#43.1.204':139
'21#.#43.181.34':445
'21#.#43.225.20':445
'21#.#43.5.22':445
'21#.#43.180.136':445
'21#.#43.94.242':445
'21#.#43.217.105':445
'21#.#43.123.246':445
'21#.#43.221.184':445
'21#.#43.79.189':445
'21#.#43.157.138':445
'21#.#43.143.49':445
'21#.#43.2.171':445
'21#.#43.154.197':445
'21#.#43.145.8':445
'21#.#43.115.35':445
'21#.#43.112.150':445
'21#.#43.4.39':445
'21#.#43.40.115':445
'21#.#43.131.190':445
'21#.#43.1.133':139
'21#.#43.129.40':139
'21#.#43.179.190':139
'21#.#43.199.28':139
'21#.#43.238.145':139
'21#.#43.155.172':139
'21#.#43.204.203':139
'21#.#43.54.151':139
'21#.#43.233.125':139
'21#.#43.9.88':139
'21#.#43.44.145':445
'21#.#43.154.34':445
'21#.#43.11.153':445
'21#.#43.96.93':445
'21#.#43.180.233':445
'21#.#43.168.18':139
'21#.#43.241.140':139
'21#.#43.226.106':445
'21#.#43.233.226':445
'21#.#43.226.51':445
'21#.#43.45.90':445
'21#.#43.227.64':445
'21#.#43.102.225':139
'21#.#43.123.184':139
'21#.#43.149.157':445
'21#.#43.20.209':445
'21#.#43.180.195':445
'21#.#43.145.9':445
'21#.#43.139.164':445
'21#.#43.73.43':139
'21#.#43.133.39':139
'21#.#43.117.105':139
'21#.#43.55.189':139
'21#.#43.12.217':139
'21#.#43.143.85':139
'21#.#43.213.12':139
'21#.#43.41.174':139
'21#.#43.84.16':139
'21#.#43.10.192':139
'21#.#43.188.239':445
'21#.#43.144.188':445
'21#.#43.195.245':445
'21#.#43.166.81':445
'21#.#43.35.23':445
'21#.243.1.3':445
'21#.#43.44.234':445
'21#.#43.41.132':445
'21#.#43.95.231':445
'21#.#43.123.61':445
'21#.#43.167.117':445
'21#.243.6.7':445
'21#.#43.170.45':445
'21#.#43.103.212':445
'21#.#43.183.116':445
'21#.#43.202.103':445
'21#.#43.200.38':445
'21#.#43.116.61':445
'21#.#43.73.115':445
'21#.#43.123.173':139
'21#.#43.116.61':139
'21#.#43.73.115':139
'21#.243.6.7':139
'21#.#43.183.116':139
'21#.#43.202.103':139
'21#.#43.195.245':139
'21#.#43.166.81':139
'21#.#43.200.38':139
'21#.#43.123.61':139
'21#.#43.167.117':139
'21#.#43.45.90':139
'21#.#43.170.45':139
'21#.#43.20.209':139
'21#.#43.139.164':139
'21#.#43.145.9':139
'21#.#43.180.195':139
'21#.#43.103.212':139
'21#.#43.149.157':139
'21#.#43.227.64':139
'21#.#43.116.64':139
'21#.#43.158.153':139
'21#.#43.217.40':139
'21#.#43.106.173':139
'21#.#43.28.158':139
'21#.#43.183.156':139
'21#.#43.63.184':139
'21#.#43.190.203':139
'21#.#43.148.247':139
'21#.#43.66.177':139
'21#.#43.35.23':139
'21#.#43.41.132':139
'21#.#43.188.239':139
'21#.#43.144.188':139
'21#.#43.95.231':139
'21#.#43.99.13':139
'21#.#43.176.153':139
'21#.243.1.3':139
'21#.#43.44.234':139
'21#.#43.97.120':139
'21#.#43.44.38':139
'21#.#43.99.43':139
'21#.#43.45.119':139
'21#.#43.30.55':139
'21#.#43.4.194':139
'21#.#43.51.151':139
'21#.#43.75.120':139
'21#.#43.82.222':139
'21#.#43.120.140':139
'21#.#43.181.152':139
'21#.#43.42.181':139
'21#.#43.10.192':9988
'21#.#43.123.184':9988
'21#.#43.9.43':139
'21#.#43.185.61':139
'21#.#43.218.25':139
'21#.#43.118.211':139
'21#.#43.85.145':139
'21#.#43.97.120':445
'21#.#43.44.38':445
'21#.#43.99.43':445
'21#.#43.45.119':445
'21#.#43.30.55':445
'21#.#43.4.194':445
'21#.#43.51.151':445
'21#.#43.75.120':445
'21#.#43.82.222':445
'21#.#43.120.140':445
'21#.#43.181.152':445
'21#.#43.42.181':445
'21#.#43.226.51':139
'21#.#43.30.14':139
'21#.#43.9.43':445
'21#.#43.185.61':445
'21#.#43.218.25':445
'21#.#43.118.211':445
'21#.#43.85.145':445
'21#.#43.84.16':9988
'21#.#43.123.173':445
'21#.#43.55.189':445
'21#.#43.183.156':445
'21#.#43.63.184':445
'21#.#43.12.217':445
'21#.#43.143.85':445
'21#.#43.84.16':445
'21#.#43.133.39':445
'21#.#43.117.105':445
'21#.#43.148.247':445
'21#.#43.66.177':445
'21#.#43.217.40':445
'21#.#43.99.13':445
'21#.#43.176.153':445
'21#.#43.106.173':445
'21#.#43.28.158':445
'21#.#43.190.203':445
'21#.#43.116.64':445
'21#.#43.158.153':445
'21#.#43.217.40':9988
'21#.#43.158.153':9988
'21#.#43.144.188':9988
'21#.#43.66.177':9988
'21#.#43.190.203':9988
'21#.#43.123.173':9988
'21#.#43.117.105':9988
'21#.#43.183.156':9988
'21#.#43.63.184':9988
'21#.#43.188.239':9988
'21#.#43.41.174':445
'21#.#43.73.43':445
'21#.#43.10.192':445
'21#.#43.213.12':445
'21#.#43.102.225':445
'21#.#43.123.61':9988
'21#.#43.166.81':9988
'21#.#43.123.184':445
'21#.#43.227.64':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней