Trojan.DownLoader12.29093

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#97.20.105':445
'21#.#97.4.29':445
'21#.#97.253.166':445
'21#.#97.119.89':445
'21#.#97.167.6':445
'21#.#97.172.60':445
'21#.#97.7.250':445
'21#.#97.60.249':445
'21#.#97.54.87':445
'21#.#97.206.18':445
'21#.#97.88.185':445
'21#.#97.73.129':445
'21#.#97.35.188':445
'21#.#97.14.97':445
'21#.#97.216.99':445
'21#.#97.160.84':445
'21#.#97.109.164':445
'21#.#97.21.240':445
'21#.#97.28.254':445
'21#.#97.220.49':445
'21#.#97.30.64':445
'21#.#97.80.127':445
'21#.#97.74.199':139
'21#.#97.193.60':139
'21#.#97.6.159':139
'21#.#97.66.252':139
'21#.#97.254.66':139
'21#.#97.49.216':139
'21#.#97.144.15':139
'21#.#97.190.146':139
'21#.#97.154.251':139
'21#.#97.6.219':139
'21#.#97.148.16':139
'21#.#97.113.151':445
'21#.#97.36.146':139
'21#.#97.115.143':445
'21#.#97.153.8':445
'21#.#97.100.27':445
'21#.#97.23.205':139
'21#.#97.124.48':139
'21#.#97.162.245':445
'21#.#97.162.245':139
'21#.#97.36.146':445
'21#.#97.7.250':139
'21#.#97.80.127':139
'21#.#97.172.60':139
'21#.#97.206.18':139
'21#.#97.60.249':139
'21#.#97.113.151':139
'21#.#97.23.115':445
'21#.#97.115.143':139
'21#.#97.153.8':139
'21#.#97.100.27':139
'21#.#97.54.87':139
'21#.#97.21.240':139
'21#.#97.88.185':139
'21#.#97.109.164':139
'21#.#97.30.64':139
'21#.#97.28.254':139
'21#.#97.20.105':139
'21#.#97.4.29':139
'21#.#97.253.166':139
'21#.#97.119.89':139
'21#.#97.167.6':139
'21#.#97.129.185':445
'21#.#97.5.245':445
'21#.#97.120.76':445
'21#.#97.89.30':445
'21#.#97.115.8':445
'21#.#97.84.153':445
'21#.#97.27.121':445
'21#.#97.109.26':445
'21#.#97.113.241':445
'21#.#97.224.180':445
'21#.#97.118.144':445
'21#.#97.207.25':445
'21#.#97.40.99':445
'21#.#97.65.7':445
'21#.#97.213.247':445
'21#.#97.102.178':445
'21#.#97.182.102':445
'21#.#97.232.67':445
'21#.#97.61.252':445
'21#.#97.68.120':445
'21#.#97.113.64':445
'21#.#97.120.113':445
'21#.#97.106.219':139
'21#.#97.28.253':445
'21#.#97.248.44':445
'21#.#97.149.22':445
'21#.#97.161.76':445
'21#.#97.251.201':445
'21#.#97.106.33':445
'21#.#97.17.49':445
'21#.#97.179.95':445
'21#.#97.86.210':445
'21#.#97.236.131':445
'21#.#97.124.51':445
'21#.#97.49.216':445
'21#.#97.144.15':445
'21#.#97.190.146':445
'21#.#97.154.251':445
'21#.#97.6.219':445
'21#.#97.117.41':445
'21#.#97.51.88':445
'21#.#97.230.148':445
'21#.#97.106.219':445
'21#.#97.169.132':445
'21#.#97.146.42':445
'21#.#97.13.107':445
'21#.#97.138.165':445
'21#.#97.254.152':445
'21#.#97.173.55':445
'21#.#97.135.107':445
'21#.#97.9.211':139
'21#.#97.7.106':139
'21#.#97.129.99':445
'21#.#97.43.6':445
'21#.#97.189.140':445
'21#.#97.1.51':445
'21#.#97.131.145':445
'21#.#97.191.242':445
'21#.#97.252.229':445
'21#.#97.76.40':445
'21#.#97.229.234':445
'21#.#97.198.108':445
'21#.#97.70.234':445
'21#.#97.158.46':445
'21#.#97.181.191':445
'21#.#97.184.181':445
'21#.#97.17.49':139
'21#.#97.146.42':139
'21#.#97.106.33':139
'21#.#97.236.131':139
'21#.#97.179.95':139
'21#.#97.131.145':139
'21#.#97.191.242':139
'21#.#97.252.229':139
'21#.#97.76.40':139
'21#.#97.229.234':139
'21#.#97.86.210':139
'21#.#97.51.88':139
'21#.#97.124.51':139
'21#.#97.117.41':139
'21#.#97.169.132':139
'21#.#97.230.148':139
'21#.#97.28.253':139
'21#.#97.248.44':139
'21#.#97.149.22':139
'21#.#97.161.76':139
'21#.#97.251.201':139
'21#.#97.181.191':139
'21#.#97.124.48':445
'21#.#97.148.16':445
'21#.#97.23.205':445
'21#.#97.189.140':139
'21#.#97.129.99':139
'21#.#97.74.199':445
'21#.#97.193.60':445
'21#.#97.6.159':445
'21#.#97.66.252':445
'21#.#97.254.66':445
'21#.#97.43.6':139
'21#.#97.70.234':139
'21#.#97.1.51':139
'21#.#97.198.108':139
'21#.#97.184.181':139
'21#.#97.158.46':139
'21#.#97.13.107':139
'21#.#97.138.165':139
'21#.#97.254.152':139
'21#.#97.173.55':139
'21#.#97.135.107':139
'21#.#97.98.227':445
'21#.#97.68.31':445
'21#.#97.11.84':445
'21#.#97.17.200':445
'21#.#97.201.89':445
'21#.#97.44.80':445
'21#.#97.173.44':445
'21#.#97.79.141':445
'21#.#97.25.96':445
'21#.#97.141.199':445
'21#.#97.55.195':445
'21#.#97.67.183':139
'21#.#97.219.67':139
'21#.#97.126.33':139
'21#.#97.48.108':139
'21#.#97.183.25':139
'21#.#97.154.39':445
'21#.#97.157.233':445
'21#.#97.158.212':139
'21#.#97.169.219':139
'21#.#97.254.222':139
'21#.#97.68.173':445
'21#.#97.140.166':445
'21#.#97.191.179':445
'21#.#97.186.45':445
'21#.#97.173.46':445
'21#.#97.22.78':445
'21#.#97.143.91':445
'21#.#97.22.233':445
'21#.#97.160.99':445
'21#.#97.19.16':445
'21#.#97.146.251':445
'21#.#97.49.197':445
'21#.#97.194.45':445
'21#.#97.29.52':445
'21#.#97.45.168':445
'21#.#97.160.17':445
'21#.#97.119.85':445
'21#.#97.219.160':445
'21#.#97.87.219':445
'21#.#97.1.12':445
'21#.#97.37.168':445
'21#.#97.197.153':445
'21#.#97.160.17':139
'21#.#97.119.85':139
'21#.#97.68.173':139
'21#.#97.44.80':139
'21#.#97.173.44':139
'21#.#97.37.168':139
'21#.#97.197.153':139
'21#.#97.29.52':139
'21#.#97.45.168':139
'21#.#97.194.45':139
'21#.#97.79.141':139
'21#.#97.17.200':139
'21#.#97.201.89':139
'21#.#97.55.195':139
'21#.#97.157.233':139
'21#.#97.154.39':139
'21#.#97.25.96':139
'21#.#97.141.199':139
'21#.#97.68.31':139
'21#.#97.11.84':139
'21#.#97.98.227':139
'21#.#97.1.12':139
'21#.#97.26.166':139
'21#.#97.195.221':139
'21#.#97.112.36':139
'21#.#97.143.91':139
'21#.#97.22.233':139
'21#.#97.88.57':139
'21#.#97.13.92':139
'21#.#97.93.85':139
'21#.#97.206.16':139
'21#.#97.157.80':139
'21#.#97.160.99':139
'21#.#97.173.46':139
'21#.#97.22.78':139
'21#.#97.49.197':139
'21#.#97.219.160':139
'21#.#97.87.219':139
'21#.#97.19.16':139
'21#.#97.146.251':139
'21#.#97.191.179':139
'21#.#97.186.45':139
'21#.#97.140.166':139
'21#.#97.112.36':445
'21#.#97.23.115':139
'21#.#97.129.185':139
'21#.#97.48.140':445
'21#.#97.48.140':139
'21#.#97.74.220':445
'21#.#97.40.99':139
'21#.#97.65.7':139
'21#.#97.213.247':139
'21#.#97.102.178':139
'21#.#97.182.102':139
'21#.#97.74.220':139
'21#.#97.10.101':445
'21#.#97.77.43':445
'21#.#97.100.254':445
'21#.#97.244.4':139
'21#.#97.254.158':445
'21#.#97.205.229':445
'21#.#97.244.4':445
'21#.#97.55.188':445
'21#.#97.47.232':445
'21#.#97.75.127':445
'21#.#97.113.64':139
'21#.#97.109.26':139
'21#.#97.216.99':139
'21#.#97.27.121':139
'21#.#97.118.144':139
'21#.#97.113.241':139
'21#.#97.35.188':139
'21#.#97.220.49':139
'21#.#97.73.129':139
'21#.#97.160.84':139
'21#.#97.14.97':139
'21#.#97.224.180':139
'21#.#97.61.252':139
'21#.#97.207.25':139
'21#.#97.232.67':139
'21#.#97.120.113':139
'21#.#97.68.120':139
'21#.#97.5.245':139
'21#.#97.120.76':139
'21#.#97.89.30':139
'21#.#97.115.8':139
'21#.#97.84.153':139
'21#.#97.158.212':445
'21#.#97.157.233':9988
'21#.#97.254.222':445
'21#.#97.219.67':445
'21#.#97.169.219':445
'21#.#97.201.89':9988
'21#.#97.11.84':9988
'21#.#97.17.200':9988
'21#.#97.154.39':9988
'21#.#97.55.195':9988
'21#.#97.67.183':445
'21#.#97.157.80':445
'21#.#97.93.85':445
'21#.#97.206.16':445
'21#.#97.26.166':445
'21#.#97.195.221':445
'21#.#97.183.25':445
'21#.#97.126.33':445
'21#.#97.48.108':445
'21#.#97.88.57':445
'21#.#97.13.92':445
'21#.#97.98.227':9988
'21#.#97.100.254':139
'21#.#97.10.101':139
'21#.#97.254.158':139
'21#.#97.173.44':9988
'21#.#97.49.197':9988
'21#.#97.55.188':139
'21#.#97.205.229':139
'21#.#97.75.127':139
'21#.#97.77.43':139
'21#.#97.47.232':139
'21#.#97.219.160':9988
'21#.#97.37.168':9988
'21#.#97.186.45':9988
'21#.#97.140.166':9988
'21#.#97.68.173':9988
'21#.#97.141.199':9988
'21#.#97.79.141':9988
'21#.#97.45.168':9988
'21#.#97.25.96':9988
'21#.#97.194.45':9988
'21#.#97.29.52':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней