Trojan.DownLoader12.29143

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#44.197.117':139
'20#.#44.150.2':139
'20#.#44.111.77':139
'20#.#44.214.214':139
'20#.#44.167.16':139
'20#.#44.86.193':139
'20#.#44.17.115':139
'20#.#44.211.6':139
'20#.#44.14.83':139
'20#.#44.186.169':139
'20#.#44.180.192':139
'20#.#44.101.175':139
'20#.#44.228.101':139
'20#.#44.68.249':139
'20#.#44.94.57':445
'20#.#44.51.173':445
'20#.#44.62.93':139
'20#.#44.105.92':139
'20#.#44.88.33':139
'20#.#44.116.228':139
'20#.#44.237.171':139
'20#.#44.27.145':139
'20#.#44.214.214':445
'20#.#44.167.16':445
'20#.#44.180.192':445
'20#.#44.62.93':445
'20#.#44.105.92':445
'20#.#44.14.83':445
'20#.#44.186.169':445
'20#.#44.150.2':445
'20#.#44.111.77':445
'20#.#44.197.117':445
'20#.#44.88.33':445
'20#.#44.191.44':139
'20#.#44.163.191':139
'20#.#44.44.141':139
'20#.#44.185.63':139
'20#.#44.52.168':139
'20#.#44.116.228':445
'20#.#44.237.171':445
'20#.#44.228.101':445
'20#.#44.68.249':445
'20#.#44.101.175':445
'20#.#44.149.194':139
'20#.#44.98.177':139
'20#.#44.194.209':139
'20#.#44.114.159':139
'20#.#44.96.44':139
'20#.#44.50.77':445
'20#.#44.241.175':445
'20#.#44.51.173':139
'20#.#44.5.85':139
'20#.#44.94.57':139
'20#.#44.159.91':139
'20#.#44.235.98':139
'20#.#44.69.37':139
'20#.#44.133.244':139
'20#.#44.190.248':139
'20#.#44.255.180':139
'20#.#44.22.82':139
'20#.#44.91.162':139
'20#.#44.15.180':139
'20#.#44.128.100':139
'20#.#44.144.224':139
'20#.#44.165.15':445
'20#.#44.159.91':445
'20#.#44.114.159':445
'20#.#44.91.162':445
'20#.#44.15.180':445
'20#.#44.22.82':445
'20#.#44.98.177':445
'20#.#44.5.85':445
'20#.#44.149.194':445
'20#.#44.96.44':445
'20#.#44.194.209':445
'20#.#44.144.224':445
'20#.#44.248.27':445
'20#.#44.190.248':445
'20#.#44.28.126':445
'20#.#44.121.94':445
'20#.#44.126.121':445
'20#.#44.69.37':445
'20#.#44.128.100':445
'20#.#44.235.98':445
'20#.#44.255.180':445
'20#.#44.133.244':445
'20#.#44.190.8':445
'20#.#44.137.125':445
'20#.#44.134.214':445
'20#.#44.64.15':445
'20#.#44.179.24':445
'20#.#44.60.109':139
'20#.#44.246.60':139
'20#.#44.108.235':139
'20#.#44.241.27':445
'20#.#44.11.1':445
'20#.#44.190.164':445
'20#.#44.135.233':445
'20#.#44.125.172':445
'20#.#44.178.181':445
'20#.#44.211.190':445
'20#.#44.51.212':445
'20#.#44.101.86':445
'20#.#44.189.133':445
'20#.#44.213.141':445
'20#.#44.3.126':445
'20#.#44.11.0':445
'20#.#44.97.91':139
'20#.#44.174.61':139
'20#.#44.27.174':139
'20#.#44.18.124':139
'20#.#44.165.109':139
'20#.#44.48.136':139
'20#.#44.200.44':139
'20#.#44.112.5':139
'20#.#44.229.123':139
'20#.#44.148.116':139
'20#.#44.65.237':139
'20#.#44.78.67':139
'20#.#44.68.27':139
'20#.#44.28.145':139
'20#.#44.26.207':139
'20#.#44.66.205':139
'20#.#44.223.54':139
'20#.#44.185.16':139
'20#.#44.157.138':139
'20#.#44.16.202':139
'20#.#44.26.56':139
'20#.#44.30.72':139
'20#.#44.30.238':139
'20#.#44.38.31':139
'20#.#44.41.236':139
'20#.#44.24.171':139
'20#.#44.156.99':139
'20#.#44.178.181':139
'20#.#44.135.233':139
'20#.#44.51.212':139
'20#.#44.83.15':139
'20#.#44.211.190':139
'20#.#44.91.16':139
'20#.#44.27.145':445
'20#.#44.185.63':445
'20#.#44.17.115':445
'20#.#44.211.6':445
'20#.#44.86.193':445
'20#.#44.163.191':445
'20#.#44.19.157':139
'20#.#44.191.44':445
'20#.#44.52.168':445
'20#.#44.44.141':445
'20#.#44.125.172':139
'20#.#44.91.16':445
'20#.#44.24.171':445
'20#.#44.19.157':445
'20#.#44.241.27':139
'20#.#44.11.1':139
'20#.#44.38.31':445
'20#.#44.83.15':445
'20#.#44.30.238':445
'20#.#44.41.236':445
'20#.#44.156.99':445
'20#.#44.137.125':139
'20#.#44.101.86':139
'20#.#44.189.133':139
'20#.#44.213.141':139
'20#.#44.3.126':139
'20#.#44.11.0':139
'20#.#44.134.214':139
'20#.#44.190.8':139
'20#.#44.179.24':139
'20#.#44.190.164':139
'20#.#44.64.15':139
'20#.#44.176.10':445
'20#.#44.35.176':445
'20#.#44.23.125':445
'20#.#44.109.74':445
'20#.#44.10.109':445
'20#.#44.249.131':445
'20#.#44.123.249':445
'20#.#44.56.167':445
'20#.#44.236.35':445
'20#.#44.12.31':445
'20#.#44.189.235':445
'20#.#44.5.147':139
'20#.#44.60.5':139
'20#.#44.146.220':139
'20#.#44.199.87':139
'20#.#44.92.223':139
'20#.#44.172.213':445
'20#.#44.178.182':445
'20#.#44.88.91':139
'20#.#44.3.186':139
'20#.#44.210.108':139
'20#.#44.248.123':445
'20#.#44.0.241':445
'20#.#44.51.78':445
'20#.#44.21.146':445
'20#.#44.123.132':445
'20#.#44.145.152':445
'20#.#44.179.88':445
'20#.#44.156.205':445
'20#.#44.177.254':445
'20#.#44.210.96':445
'20#.#44.246.126':445
'20#.#44.55.62':445
'20#.#44.210.204':445
'20#.#44.1.74':445
'20#.#44.204.42':445
'20#.#44.126.219':445
'20#.#44.42.115':445
'20#.#44.138.180':445
'20#.#44.146.50':445
'20#.#44.13.86':445
'20#.#44.84.215':445
'20#.#44.86.84':445
'20#.#44.126.219':139
'20#.#44.42.115':139
'20#.#44.248.123':139
'20#.#44.249.131':139
'20#.#44.123.249':139
'20#.#44.84.215':139
'20#.#44.86.84':139
'20#.#44.1.74':139
'20#.#44.204.42':139
'20#.#44.210.204':139
'20#.#44.56.167':139
'20#.#44.189.235':139
'20#.#44.23.125':139
'20#.#44.109.74':139
'20#.#44.172.213':139
'20#.#44.178.182':139
'20#.#44.236.35':139
'20#.#44.12.31':139
'20#.#44.35.176':139
'20#.#44.10.109':139
'20#.#44.176.10':139
'20#.#44.13.86':139
'20#.#44.183.124':139
'20#.#44.167.183':139
'20#.#44.124.152':139
'20#.#44.179.88':139
'20#.#44.156.205':139
'20#.#44.142.15':139
'20#.#44.87.134':139
'20#.#44.5.246':139
'20#.#44.3.221':139
'20#.#44.17.194':139
'20#.#44.177.254':139
'20#.#44.123.132':139
'20#.#44.145.152':139
'20#.#44.55.62':139
'20#.#44.138.180':139
'20#.#44.146.50':139
'20#.#44.210.96':139
'20#.#44.246.126':139
'20#.#44.51.78':139
'20#.#44.21.146':139
'20#.#44.0.241':139
'20#.#44.173.182':445
'20#.#44.26.157':445
'20#.#44.183.126':445
'20#.#44.9.157':445
'20#.#44.82.227':445
'20#.#44.105.110':445
'20#.#44.14.109':445
'20#.#44.193.143':445
'20#.#44.30.46':445
'20#.#44.234.139':445
'20#.#44.148.39':139
'20#.#44.121.95':139
'20#.#44.77.236':139
'20#.#44.25.94':139
'20#.#44.234.5':139
'20#.#44.101.216':139
'20#.#44.12.100':139
'20#.#44.15.188':139
'20#.#44.35.206':139
'20#.#44.189.241':139
'20#.#44.114.190':139
'20#.#44.1.86':445
'20#.#44.50.77':139
'20#.#44.241.175':139
'20#.#44.148.39':445
'20#.#44.12.100':445
'20#.#44.15.188':445
'20#.#44.28.126':139
'20#.#44.248.27':139
'20#.#44.126.121':139
'20#.#44.165.15':139
'20#.#44.121.94':139
'20#.#44.35.206':445
'20#.#44.234.5':445
'20#.#44.101.216':445
'20#.#44.80.196':445
'20#.#44.15.19':445
'20#.#44.196.102':445
'20#.#44.189.241':445
'20#.#44.114.190':445
'20#.#44.77.236':445
'20#.#44.25.94':445
'20#.#44.121.95':445
'20#.#44.210.108':445
'20#.#44.88.91':445
'20#.#44.3.186':445
'20#.#44.5.147':445
'20#.#44.60.5':445
'20#.#44.236.35':9988
'20#.#44.12.31':9988
'20#.#44.35.176':9988
'20#.#44.23.125':9988
'20#.#44.178.182':9988
'20#.#44.146.220':445
'20#.#44.3.221':445
'20#.#44.17.194':445
'20#.#44.167.183':445
'20#.#44.124.152':445
'20#.#44.183.124':445
'20#.#44.199.87':445
'20#.#44.92.223':445
'20#.#44.87.134':445
'20#.#44.5.246':445
'20#.#44.142.15':445
'20#.#44.56.167':9988
'20#.#44.193.143':139
'20#.#44.105.110':139
'20#.#44.234.139':139
'20#.#44.26.157':139
'20#.#44.30.46':139
'20#.#44.196.102':139
'20#.#44.80.196':139
'20#.#44.15.19':139
'20#.#44.14.109':139
'20#.#44.1.86':139
'20#.#44.173.182':139
'20#.#44.1.74':9988
'20#.#44.84.215':9988
'20#.#44.204.42':9988
'20#.#44.249.131':9988
'20#.#44.42.115':9988
'20#.#44.82.227':139
'20#.#44.183.126':139
'20#.#44.9.157':139
'20#.#44.13.86':9988
'20#.#44.167.183':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней