Trojan.DownLoader12.29102

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#6.207.129':139
'20#.#6.63.118':139
'20#.#6.138.58':139
'20#.#6.49.207':139
'20#.#6.47.219':139
'20#.#6.130.35':139
'20#.#6.94.31':445
'20#.#6.85.20':445
'20#.#6.42.240':445
'20#.#6.25.10':139
'20#.66.9.33':139
'20#.#6.15.75':445
'20#.#6.111.34':139
'20#.#6.182.52':445
'20#.#6.135.250':445
'20#.#6.15.75':139
'20#.#6.17.34':445
'20#.#6.97.165':445
'20#.#6.52.97':445
'20#.#6.211.42':139
'20#.#6.249.222':139
'20#.#6.94.204':139
'20#.#6.94.31':139
'20#.#6.85.20':139
'20#.#6.42.240':139
'20#.#6.85.136':139
'20#.#6.154.152':139
'20#.#6.119.133':139
'20#.#6.255.31':139
'20#.#6.219.19':139
'20#.#6.61.23':139
'20#.#6.134.100':139
'20#.#6.23.208':139
'20#.#6.26.104':139
'20#.#6.40.145':139
'20#.#6.150.232':139
'20#.#6.25.227':139
'20#.#6.187.239':139
'20#.#6.111.34':445
'20#.#6.49.207':445
'20#.#6.47.219':445
'20#.#6.211.42':445
'20#.#6.249.222':445
'20#.#6.94.204':445
'20#.#6.138.58':445
'20#.#6.25.10':445
'20#.66.9.33':445
'20#.#6.130.35':445
'20#.#6.207.129':445
'20#.#6.63.118':445
'20#.#6.97.165':139
'20#.#6.52.97':139
'20#.#6.182.52':139
'20#.#6.98.145':139
'20#.#6.26.235':139
'20#.#6.17.34':139
'20#.#6.141.80':445
'20#.#6.151.141':445
'20#.#6.166.244':445
'20#.#6.135.250':139
'20#.#6.146.117':445
'20#.#6.173.159':445
'20#.#6.115.156':139
'20#.#6.244.57':139
'20#.#6.67.253':139
'20#.#6.151.7':139
'20#.#6.220.137':139
'20#.#6.36.145':139
'20#.#6.58.43':139
'20#.#6.26.223':139
'20#.66.4.62':139
'20#.#6.4.164':139
'20#.#6.87.204':139
'20#.#6.121.88':139
'20#.#6.223.120':139
'20#.#6.87.204':445
'20#.#6.121.88':445
'20#.#6.223.120':445
'20#.#6.244.57':445
'20#.#6.67.253':445
'20#.#6.151.7':445
'20#.#6.115.156':445
'20#.#6.98.145':445
'20#.#6.26.235':445
'20#.#6.26.223':445
'20#.66.4.62':445
'20#.#6.4.164':445
'20#.#6.58.43':445
'20#.#6.209.221':445
'20#.#6.16.210':445
'20#.#6.100.184':445
'20#.#6.116.48':445
'20#.#6.10.146':445
'20#.#6.236.206':445
'20#.#6.66.226':445
'20#.#6.220.137':445
'20#.#6.36.145':445
'20#.#6.228.134':445
'20#.#6.228.179':445
'20#.#6.84.59':445
'20#.#6.34.218':139
'20#.#6.29.35':139
'20#.#6.235.148':139
'20#.#6.22.59':139
'20#.#6.9.232':139
'20#.#6.46.247':139
'20#.#6.46.211':139
'20#.#6.208.37':445
'20#.#6.21.127':445
'20#.#6.63.24':139
'20#.#6.34.244':139
'20#.#6.106.82':139
'20#.#6.105.253':139
'20#.#6.88.162':445
'20#.#6.186.141':445
'20#.#6.26.146':445
'20#.66.7.31':445
'20#.#6.56.156':445
'20#.#6.109.159':445
'20#.#6.152.216':139
'20#.#6.209.116':139
'20#.#6.42.210':139
'20#.#6.38.54':445
'20#.#6.208.37':139
'20#.#6.21.127':139
'20#.#6.239.45':139
'20#.#6.1.239':139
'20#.#6.187.223':139
'20#.#6.46.211':445
'20#.#6.1.190':139
'20#.#6.106.196':139
'20#.#6.29.52':139
'20#.#6.51.29':139
'20#.#6.241.50':139
'20#.#6.104.79':139
'20#.#6.32.231':139
'20#.#6.163.165':139
'20#.#6.106.82':445
'20#.#6.105.253':445
'20#.#6.22.59':445
'20#.#6.9.232':445
'20#.#6.152.216':445
'20#.#6.209.116':445
'20#.#6.42.210':445
'20#.#6.235.148':445
'20#.#6.63.24':445
'20#.#6.34.244':445
'20#.#6.46.247':445
'20#.#6.34.218':445
'20#.#6.29.35':445
'20#.#6.56.156':139
'20#.#6.109.159':139
'20#.#6.88.162':139
'20#.66.77.5':139
'20#.#6.98.28':139
'20#.66.7.31':139
'20#.#6.187.239':445
'20#.#6.255.31':445
'20#.#6.219.19':445
'20#.#6.186.141':139
'20#.#6.26.146':139
'20#.#6.38.54':139
'20#.#6.188.32':139
'20#.#6.177.182':139
'20#.66.66.2':139
'20#.#6.32.197':139
'20#.#6.172.71':139
'20#.#6.159.163':139
'20#.#6.200.159':139
'20#.#6.249.185':139
'20#.#6.177.155':139
'20#.#6.15.17':139
'20#.#6.39.147':139
'20#.#6.77.45':139
'20#.#6.100.228':139
'20#.#6.39.147':445
'20#.#6.77.45':445
'20#.#6.100.228':445
'20#.#6.177.182':445
'20#.66.66.2':445
'20#.#6.32.197':445
'20#.#6.188.32':445
'20#.66.77.5':445
'20#.#6.98.28':445
'20#.#6.249.185':445
'20#.#6.177.155':445
'20#.#6.15.17':445
'20#.#6.200.159':445
'20#.#6.119.133':445
'20#.#6.40.145':445
'20#.#6.150.232':445
'20#.#6.61.23':445
'20#.#6.85.136':445
'20#.#6.154.152':445
'20#.#6.26.104':445
'20#.#6.172.71':445
'20#.#6.159.163':445
'20#.#6.25.227':445
'20#.#6.134.100':445
'20#.#6.23.208':445
'20#.#6.77.77':445
'20#.#6.145.52':445
'20#.#6.161.206':445
'20#.#6.175.138':445
'20#.#6.158.71':445
'20#.#6.253.83':445
'20#.#6.57.14':445
'20#.#6.110.57':445
'20#.#6.124.124':445
'20#.#6.114.148':445
'20#.#6.217.142':445
'20#.#6.59.110':445
'20#.#6.54.26':445
'20#.#6.165.41':445
'20#.#6.31.40':445
'20#.#6.72.133':445
'20#.#6.47.240':139
'20#.#6.157.178':445
'20#.#6.245.97':445
'20#.#6.68.151':445
'20#.#6.105.3':445
'20#.#6.136.128':445
'20#.#6.208.1':445
'20#.#6.139.105':445
'20#.#6.73.29':445
'20#.#6.196.192':445
'20#.#6.190.79':445
'20#.#6.101.157':445
'20#.#6.207.193':445
'20#.66.41.6':445
'20#.#6.53.169':445
'20#.#6.102.150':445
'20#.#6.40.188':445
'20#.#6.236.121':445
'20#.#6.104.96':445
'20#.66.82.1':445
'20#.66.5.34':445
'20#.#6.27.65':445
'20#.#6.72.84':445
'20#.#6.113.106':445
'20#.#6.9.216':445
'20#.#6.11.243':445
'20#.#6.69.59':445
'20#.#6.20.234':445
'20#.#6.253.45':445
'20#.#6.134.218':445
'20#.#6.85.71':445
'20#.#6.39.208':445
'20#.#6.230.52':445
'20#.#6.45.230':445
'20#.#6.145.52':139
'20#.#6.161.206':139
'20#.#6.114.148':139
'20#.#6.158.71':139
'20#.#6.253.83':139
'20#.#6.77.77':139
'20#.#6.110.57':139
'20#.#6.124.124':139
'20#.#6.11.243':139
'20#.#6.217.142':139
'20#.#6.59.110':139
'20#.#6.57.14':139
'20#.#6.175.138':139
'20#.#6.73.29':139
'20#.#6.245.97':139
'20#.#6.139.105':139
'20#.#6.31.40':139
'20#.#6.157.178':139
'20#.#6.165.41':139
'20#.#6.105.3':139
'20#.#6.136.128':139
'20#.#6.54.26':139
'20#.#6.208.1':139
'20#.#6.72.133':139
'20#.#6.68.151':139
'20#.#6.190.79':139
'20#.#6.101.157':139
'20#.#6.104.96':139
'20#.66.41.6':139
'20#.#6.53.169':139
'20#.#6.196.192':139
'20#.#6.40.188':139
'20#.#6.236.121':139
'20#.#6.110.236':139
'20#.66.82.1':139
'20#.66.5.34':139
'20#.#6.102.150':139
'20#.#6.207.193':139
'20#.#6.113.106':139
'20#.#6.9.216':139
'20#.#6.39.208':139
'20#.#6.69.59':139
'20#.#6.20.234':139
'20#.#6.72.84':139
'20#.#6.134.218':139
'20#.#6.85.71':139
'20#.#6.27.65':139
'20#.#6.230.52':139
'20#.#6.45.230':139
'20#.#6.253.45':139
'20#.#6.115.223':139
'20#.#6.118.191':139
'20#.#6.36.108':139
'20#.#6.36.208':139
'20#.#6.79.253':139
'20#.#6.218.205':139
'20#.#6.89.54':445
'20#.#6.44.51':445
'20#.#6.151.68':445
'20#.#6.27.250':445
'20#.#6.94.12':445
'20#.#6.26.166':445
'20#.#6.74.208':139
'20#.#6.27.250':139
'20#.#6.94.12':139
'20#.#6.26.166':139
'20#.#6.75.168':445
'20#.#6.113.21':445
'20#.66.17.2':445
'20#.#6.113.77':139
'20#.#6.129.119':139
'20#.#6.208.73':139
'20#.#6.89.54':139
'20#.#6.44.51':139
'20#.#6.151.68':139
'20#.#6.10.146':139
'20#.#6.236.206':139
'20#.#6.209.221':139
'20#.#6.151.141':139
'20#.#6.166.244':139
'20#.#6.116.48':139
'20#.#6.228.179':139
'20#.#6.84.59':139
'20#.#6.66.226':139
'20#.#6.16.210':139
'20#.#6.100.184':139
'20#.#6.228.134':139
'20#.#6.141.80':139
'20#.#6.74.208':445
'20#.#6.36.208':445
'20#.#6.79.253':445
'20#.#6.113.77':445
'20#.#6.129.119':445
'20#.#6.208.73':445
'20#.#6.36.108':445
'20#.#6.146.117':139
'20#.#6.173.159':139
'20#.#6.218.205':445
'20#.#6.115.223':445
'20#.#6.118.191':445
'20#.#6.101.157':9988
'20#.#6.104.96':9988
'20#.66.82.1':9988
'20#.#6.207.193':9988
'20#.#6.196.192':9988
'20#.#6.190.79':9988
'20#.#6.176.74':139
'20#.#6.38.216':139
'20#.#6.39.250':139
'20#.#6.14.178':139
'20#.#6.46.142':139
'20#.#6.134.31':139
'20#.#6.134.218':9988
'20#.#6.175.138':9988
'20#.#6.161.206':9988
'20#.#6.114.148':9988
'20#.#6.110.236':445
'20#.#6.47.240':445
'20#.#6.105.3':9988
'20#.#6.69.59':9988
'20#.#6.20.234':9988
'20#.#6.72.84':9988
'20#.#6.217.142':9988
'20#.#6.59.110':9988
'20#.#6.11.243':9988
'20#.#6.39.250':445
'20#.#6.242.237':445
'20#.#6.236.11':445
'20#.#6.134.31':445
'20#.#6.176.74':445
'20#.#6.38.216':445
'20#.#6.215.3':445
'20#.#6.160.246':445
'20#.#6.195.6':445
'20#.#6.50.244':445
'20#.#6.96.247':445
'20#.#6.121.198':445
'20#.#6.46.142':445
'20#.#6.96.247':139
'20#.#6.121.198':139
'20#.#6.215.3':139
'20#.#6.242.237':139
'20#.#6.236.11':139
'20#.#6.50.244':139
'20#.#6.113.21':139
'20#.66.17.2':139
'20#.#6.14.178':445
'20#.#6.160.246':139
'20#.#6.195.6':139
'20#.#6.75.168':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней