Trojan.DownLoader12.29094

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##2.180.252':139
'14.##2.47.247':139
'14.##2.63.169':139
'14.##2.174.15':139
'14.##2.244.11':139
'14.##2.253.55':139
'14.##2.34.234':139
'14.##2.108.178':139
'14.##2.152.19':139
'14.##2.56.63':139
'14.##2.200.63':139
'14.##2.143.162':139
'14.##2.190.44':139
'14.##2.9.153':445
'14.##2.208.164':445
'14.##2.189.163':445
'14.#42.4.72':445
'14.##2.121.204':445
'14.##2.103.42':445
'14.##2.250.192':445
'14.##2.57.227':445
'14.##2.46.118':139
'14.##2.67.184':445
'14.##2.49.187':445
'14.##2.167.32':445
'14.##2.113.124':139
'14.##2.218.87':139
'14.##2.126.204':139
'14.##2.164.149':139
'14.##2.162.164':139
'14.##2.124.162':139
'14.##2.34.113':139
'14.##2.46.118':445
'14.##2.190.44':445
'14.##2.246.58':139
'14.##2.193.245':139
'14.##2.62.213':139
'14.##2.149.52':139
'14.##2.84.181':139
'14.##2.255.60':139
'14.##2.177.183':139
'14.##2.111.138':139
'14.##2.31.111':139
'14.##2.94.201':139
'14.##2.222.171':139
'14.##2.10.223':139
'14.##2.52.11':139
'14.##2.102.175':139
'14.##2.174.90':139
'14.##2.171.173':139
'14.##2.110.42':445
'14.##2.101.195':445
'14.##2.176.30':445
'14.##2.102.34':445
'14.##2.221.100':445
'14.##2.0.199':445
'14.##2.11.36':445
'14.##2.47.40':445
'14.##2.101.207':445
'14.##2.172.176':445
'14.##2.227.218':445
'14.##2.5.216':445
'14.##2.90.34':445
'14.##2.122.36':445
'14.#42.99.4':445
'14.##2.34.67':445
'14.##2.213.119':445
'14.##2.141.104':445
'14.##2.246.190':445
'14.##2.230.183':445
'14.##2.79.211':445
'14.##2.146.47':445
'14.##2.158.139':445
'14.##2.71.234':445
'14.##2.115.35':445
'14.##2.189.163':139
'14.##2.67.184':139
'14.##2.49.187':139
'14.##2.103.42':139
'14.##2.9.153':139
'14.##2.208.164':139
'14.##2.71.245':445
'14.##2.133.120':445
'14.##2.87.213':445
'14.##2.167.32':139
'14.##2.250.192':139
'14.##2.57.227':139
'14.##2.121.204':139
'14.##2.133.21':445
'14.##2.137.1':445
'14.##2.138.48':445
'14.##2.89.132':445
'14.##2.50.109':445
'14.##2.132.26':445
'14.##2.133.120':139
'14.##2.87.213':139
'14.#42.4.72':139
'14.##2.43.238':445
'14.##2.194.217':445
'14.##2.71.245':139
'14.##2.221.146':139
'14.##2.131.48':139
'14.##2.162.38':139
'14.##2.90.45':139
'14.##2.229.100':139
'14.##2.146.252':139
'14.##2.69.53':139
'14.##2.120.238':139
'14.##2.153.177':139
'14.##2.206.41':139
'14.##2.234.218':139
'14.##2.97.158':139
'14.##2.2.242':445
'14.##2.155.171':445
'14.##2.179.124':445
'14.#42.68.2':445
'14.##2.156.145':445
'14.##2.241.253':445
'14.##2.27.37':445
'14.##2.115.38':445
'14.##2.81.115':445
'14.##2.86.152':445
'14.##2.184.17':445
'14.##2.13.204':445
'14.##2.191.151':445
'14.##2.19.234':139
'14.##2.13.92':139
'14.##2.11.242':139
'14.##2.99.181':139
'14.##2.203.212':139
'14.##2.37.51':139
'14.##2.141.37':139
'14.##2.33.145':139
'14.#42.25.6':139
'14.##2.95.98':139
'14.##2.62.103':139
'14.##2.101.231':139
'14.##2.180.148':139
'14.##2.106.176':139
'14.##2.33.106':139
'14.##2.179.33':139
'14.##2.122.15':139
'14.##2.99.122':139
'14.##2.0.215':139
'14.##2.27.189':139
'14.##2.198.148':139
'14.##2.230.172':139
'14.##2.127.178':139
'14.##2.14.241':139
'14.##2.2.138':139
'14.##2.255.60':445
'14.##2.177.183':445
'14.##2.102.175':445
'14.##2.84.181':445
'14.##2.94.201':445
'14.##2.31.111':445
'14.##2.10.223':445
'14.##2.164.149':445
'14.##2.149.52':445
'14.##2.222.171':445
'14.##2.171.173':445
'14.##2.174.90':445
'14.##2.111.138':445
'14.##2.180.252':445
'14.##2.47.247':445
'14.##2.63.169':445
'14.##2.174.15':445
'14.##2.244.11':445
'14.##2.253.55':445
'14.##2.34.234':445
'14.##2.108.178':445
'14.##2.152.19':445
'14.##2.56.63':445
'14.##2.200.63':445
'14.##2.143.162':445
'14.#42.68.2':139
'14.##2.184.17':139
'14.##2.13.204':139
'14.##2.155.171':139
'14.##2.27.37':139
'14.##2.179.124':139
'14.##2.86.152':139
'14.##2.2.242':139
'14.##2.153.34':445
'14.##2.191.151':139
'14.##2.115.38':139
'14.##2.81.115':139
'14.##2.241.253':139
'14.##2.113.124':445
'14.##2.218.87':445
'14.##2.126.204':445
'14.##2.162.164':445
'14.##2.52.11':445
'14.##2.124.162':445
'14.##2.62.213':445
'14.##2.153.34':139
'14.##2.156.145':139
'14.##2.246.58':445
'14.##2.193.245':445
'14.##2.34.113':445
'14.##2.175.248':445
'14.##2.60.137':445
'14.##2.195.87':445
'14.##2.238.69':445
'14.##2.191.232':445
'14.##2.21.34':445
'14.##2.137.21':445
'14.##2.14.218':445
'14.##2.99.119':445
'14.##2.9.240':445
'14.##2.3.187':445
'14.##2.154.59':445
'14.#42.89.4':445
'14.##2.71.71':445
'14.##2.255.252':445
'14.##2.114.101':445
'14.##2.110.5':445
'14.##2.24.39':139
'14.##2.161.54':445
'14.##2.5.114':445
'14.##2.248.38':445
'14.##2.14.85':445
'14.##2.71.73':445
'14.##2.155.94':445
'14.##2.118.202':445
'14.##2.77.206':445
'14.##2.151.174':445
'14.#42.8.97':445
'14.##2.45.120':445
'14.##2.202.3':445
'14.##2.105.42':445
'14.##2.91.47':445
'14.##2.238.16':445
'14.##2.208.253':445
'14.#42.55.2':445
'14.##2.10.171':445
'14.##2.183.70':445
'14.##2.27.33':445
'14.##2.128.90':445
'14.#42.8.29':445
'14.##2.39.61':445
'14.##2.254.98':445
'14.##2.11.138':445
'14.##2.110.61':445
'14.##2.53.221':445
'14.##2.223.247':445
'14.##2.25.126':445
'14.##2.134.92':445
'14.##2.242.209':445
'14.##2.68.24':445
'14.##2.47.16':445
'14.##2.195.87':139
'14.##2.3.187':139
'14.##2.238.69':139
'14.##2.21.34':139
'14.##2.137.21':139
'14.##2.60.137':139
'14.##2.99.119':139
'14.##2.9.240':139
'14.##2.11.138':139
'14.##2.154.59':139
'14.#42.89.4':139
'14.##2.14.218':139
'14.##2.191.232':139
'14.##2.5.114':139
'14.##2.161.54':139
'14.##2.255.252':139
'14.##2.114.101':139
'14.##2.110.5':139
'14.##2.118.202':139
'14.##2.14.85':139
'14.##2.71.73':139
'14.##2.71.71':139
'14.##2.155.94':139
'14.##2.77.206':139
'14.##2.248.38':139
'14.##2.45.120':139
'14.##2.10.171':139
'14.##2.183.70':139
'14.##2.105.42':139
'14.##2.91.47':139
'14.##2.151.174':139
'14.##2.208.253':139
'14.#42.55.2':139
'14.##2.54.62':139
'14.#42.8.97':139
'14.##2.27.33':139
'14.##2.238.16':139
'14.##2.202.3':139
'14.##2.39.61':139
'14.##2.254.98':139
'14.##2.242.209':139
'14.##2.110.61':139
'14.##2.53.221':139
'14.#42.8.29':139
'14.##2.25.126':139
'14.##2.134.92':139
'14.##2.128.90':139
'14.##2.68.24':139
'14.##2.47.16':139
'14.##2.223.247':139
'14.##2.246.190':139
'14.##2.122.36':139
'14.#42.99.4':139
'14.##2.175.248':139
'14.##2.213.119':139
'14.##2.141.104':139
'14.##2.115.35':139
'14.##2.230.183':139
'14.##2.79.211':139
'14.##2.34.67':139
'14.##2.158.139':139
'14.##2.71.234':139
'14.##2.20.110':139
'14.##2.206.18':445
'14.##2.9.159':445
'14.##2.95.13':445
'14.#42.42.2':445
'14.##2.4.107':445
'14.##2.198.137':445
'14.##2.42.248':445
'14.##2.120.160':139
'14.##2.109.230':139
'14.##2.209.75':445
'14.##2.186.64':445
'14.##2.238.161':445
'14.##2.132.26':139
'14.##2.133.21':139
'14.##2.137.1':139
'14.##2.101.207':139
'14.##2.89.132':139
'14.##2.50.109':139
'14.##2.120.160':445
'14.##2.109.230':445
'14.##2.20.110':445
'14.##2.138.48':139
'14.##2.43.238':139
'14.##2.194.217':139
'14.##2.47.40':139
'14.##2.221.100':139
'14.##2.0.199':139
'14.##2.110.42':139
'14.##2.146.47':139
'14.##2.90.34':139
'14.##2.102.34':139
'14.##2.227.218':139
'14.##2.5.216':139
'14.##2.11.36':139
'14.##2.101.195':139
'14.##2.176.30':139
'14.##2.172.176':139
'14.##2.47.16':9988
'14.##2.134.92':9988
'14.##2.223.247':9988
'14.##2.254.98':9988
'14.##2.242.209':9988
'14.##2.68.24':9988
'14.##2.82.73':139
'14.##2.0.147':139
'14.##2.101.160':139
'14.##2.91.47':9988
'14.##2.45.120':9988
'14.##2.183.70':9988
'14.##2.39.61':9988
'14.##2.5.114':9988
'14.##2.77.206':9988
'14.##2.137.21':9988
'14.##2.54.62':445
'14.##2.24.39':445
'14.##2.255.252':9988
'14.##2.11.138':9988
'14.##2.110.61':9988
'14.#42.8.29':9988
'14.##2.14.218':9988
'14.#42.89.4':9988
'14.##2.99.119':9988
'14.##2.95.13':139
'14.##2.209.75':139
'14.##2.186.64':139
'14.##2.198.137':139
'14.##2.206.18':139
'14.##2.9.159':139
'14.##2.99.204':445
'14.##2.254.220':445
'14.##2.221.189':445
'14.##2.238.161':139
'14.##2.42.248':139
'14.##2.61.167':445
'14.##2.4.107':139
'14.##2.0.147':445
'14.##2.101.160':445
'14.##2.202.160':445
'14.##2.202.160':139
'14.##2.61.246':139
'14.##2.82.73':445
'14.##2.254.220':139
'14.##2.221.189':139
'14.#42.42.2':139
'14.##2.61.246':445
'14.##2.61.167':139
'14.##2.99.204':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней