Trojan.DownLoader12.29148

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##.78.226':139
'69.#2.52.18':139
'69.##.194.103':139
'69.##.240.220':139
'69.##.106.246':139
'69.##.148.53':139
'69.##.149.103':139
'69.##.82.219':139
'69.##.85.243':139
'69.#2.11.75':139
'69.##.247.115':139
'69.#2.4.182':139
'69.##.26.137':139
'69.##.65.176':139
'69.##.214.80':139
'69.##.249.78':139
'69.#2.87.98':139
'69.#2.26.88':139
'69.##.213.60':139
'69.##.68.231':139
'69.##.152.19':139
'69.#2.71.45':139
'69.##.213.60':445
'69.#2.87.98':445
'69.##.152.19':445
'69.##.26.137':445
'69.##.68.231':445
'69.##.106.246':445
'69.##.194.103':445
'69.##.240.220':445
'69.#2.26.88':445
'69.##.247.115':445
'69.#2.4.182':445
'69.##.151.158':139
'69.##.145.86':139
'69.#2.23.57':139
'69.##.113.44':139
'69.##.68.198':139
'69.##.249.78':445
'69.##.65.176':445
'69.##.214.80':445
'69.##.108.76':139
'69.##.142.136':445
'69.##.45.185':139
'69.#2.136.2':139
'69.##.210.112':139
'69.##.175.103':139
'69.##.86.175':139
'69.##.79.143':139
'69.#2.52.88':445
'69.##.106.160':139
'69.##.192.59':139
'69.##.100.200':139
'69.#2.10.97':139
'69.##.218.122':139
'69.##.167.90':139
'69.##.196.145':139
'69.##.136.177':139
'69.##.121.99':139
'69.##.210.164':139
'69.##.251.201':139
'69.##.164.124':139
'69.##.11.227':139
'69.##.157.53':139
'69.#2.4.137':445
'69.##.45.185':445
'69.#2.136.2':445
'69.##.210.112':445
'69.##.175.103':445
'69.##.86.175':445
'69.##.79.143':445
'69.##.142.136':139
'69.##.106.160':445
'69.##.192.59':445
'69.##.100.200':445
'69.#2.10.97':445
'69.##.218.122':445
'69.##.167.90':445
'69.##.196.145':445
'69.##.136.177':445
'69.##.121.99':445
'69.##.210.164':445
'69.##.251.201':445
'69.##.164.124':445
'69.##.11.227':445
'69.##.157.53':445
'69.##.78.226':445
'69.#2.31.3':139
'69.##.195.120':139
'69.##.200.42':445
'69.#2.23.27':445
'69.##.137.136':445
'69.##.67.201':139
'69.##.22.189':139
'69.#2.18.2':139
'69.##.136.187':139
'69.##.242.159':139
'69.#2.36.96':445
'69.##.111.102':445
'69.##.128.183':445
'69.##.136.128':445
'69.##.103.165':445
'69.#2.80.1':445
'69.##.146.163':445
'69.##.192.24':445
'69.##.163.95':445
'69.##.249.45':445
'69.#2.7.224':445
'69.##.107.37':139
'69.##.173.25':139
'69.##.165.61':139
'69.##.44.191':139
'69.##.185.157':139
'69.#2.2.107':139
'69.##.254.153':139
'69.##.119.160':139
'69.#2.76.60':139
'69.##.67.160':139
'69.#2.81.65':139
'69.##.137.55':139
'69.#2.16.2':139
'69.##.127.228':139
'69.##.54.155':139
'69.##.90.211':139
'69.##.205.31':139
'69.##.110.214':139
'69.#2.28.90':139
'69.##.200.76':139
'69.##.117.190':139
'69.#2.170.2':139
'69.##.147.133':139
'69.##.36.171':139
'69.##.117.152':139
'69.##.145.86':445
'69.##.108.76':445
'69.##.233.148':139
'69.##.216.219':139
'69.##.148.249':139
'69.##.114.160':139
'69.##.207.236':139
'69.##.151.158':445
'69.##.82.219':445
'69.##.148.53':445
'69.#2.11.75':445
'69.#2.52.18':445
'69.##.85.243':445
'69.#2.71.45':445
'69.#2.23.57':445
'69.##.113.44':445
'69.##.149.103':445
'69.##.68.198':445
'69.##.103.165':139
'69.##.147.133':445
'69.##.36.171':445
'69.##.117.152':445
'69.##.137.136':139
'69.##.200.42':139
'69.##.233.148':445
'69.##.216.219':445
'69.##.148.249':445
'69.##.114.160':445
'69.##.207.236':445
'69.#2.23.27':139
'69.##.128.183':139
'69.##.249.45':139
'69.##.111.102':139
'69.#2.80.1':139
'69.##.136.128':139
'69.#2.36.96':139
'69.##.192.24':139
'69.##.146.163':139
'69.#2.7.224':139
'69.##.163.95':139
'69.##.167.156':445
'69.##.21.134':445
'69.##.162.228':445
'69.##.156.110':445
'69.#2.78.2':445
'69.#2.177.0':445
'69.##.172.241':445
'69.##.83.119':445
'69.#2.144.0':445
'69.##.41.238':445
'69.##.100.201':445
'69.#2.54.7':139
'69.##.226.53':139
'69.##.194.73':139
'69.##.234.101':139
'69.##.45.183':139
'69.##.20.182':445
'69.##.130.219':445
'69.##.231.162':139
'69.#2.30.91':139
'69.##.101.98':139
'69.##.88.107':445
'69.##.142.212':445
'69.#2.0.37':445
'69.#2.72.84':445
'69.##.151.175':445
'69.##.240.196':445
'69.##.231.121':445
'69.#2.56.83':445
'69.#2.87.58':445
'69.#2.115.0':445
'69.##.66.224':445
'69.##.217.128':445
'69.#2.132.6':445
'69.##.163.254':445
'69.##.52.190':445
'69.#2.4.153':445
'69.#2.34.5':445
'69.##.14.208':445
'69.##.124.174':445
'69.##.65.243':445
'69.#2.3.29':445
'69.##.237.88':445
'69.#2.4.153':139
'69.#2.34.5':139
'69.##.88.107':139
'69.#2.177.0':139
'69.##.172.241':139
'69.#2.3.29':139
'69.##.237.88':139
'69.##.163.254':139
'69.##.52.190':139
'69.#2.132.6':139
'69.##.83.119':139
'69.##.130.219':139
'69.##.100.201':139
'69.##.20.182':139
'69.##.162.228':139
'69.#2.78.2':139
'69.#2.144.0':139
'69.##.41.238':139
'69.##.21.134':139
'69.##.156.110':139
'69.##.167.156':139
'69.##.65.243':139
'69.##.138.219':139
'69.##.170.53':139
'69.##.154.147':139
'69.##.231.121':139
'69.#2.56.83':139
'69.##.168.11':139
'69.##.101.181':139
'69.##.15.204':139
'69.#2.46.88':139
'69.##.250.146':139
'69.#2.87.58':139
'69.##.151.175':139
'69.##.240.196':139
'69.##.217.128':139
'69.##.14.208':139
'69.##.124.174':139
'69.#2.115.0':139
'69.##.66.224':139
'69.#2.0.37':139
'69.#2.72.84':139
'69.##.142.212':139
'69.##.154.147':445
'69.##.69.212':445
'69.#2.12.55':445
'69.##.209.28':445
'69.##.142.168':139
'69.#2.80.85':445
'69.#2.0.131':445
'69.##.233.217':445
'69.##.105.222':445
'69.##.62.245':445
'69.##.238.62':445
'69.##.111.155':139
'69.##.83.127':139
'69.##.28.102':139
'69.##.242.127':139
'69.#2.37.52':139
'69.##.225.230':139
'69.##.54.135':139
'69.##.180.96':139
'69.##.60.219':139
'69.##.249.140':139
'69.##.219.249':139
'69.##.93.175':445
'69.##.60.219':445
'69.##.180.96':445
'69.##.249.140':445
'69.##.28.102':445
'69.##.219.249':445
'69.#2.52.88':139
'69.#2.4.137':139
'69.##.142.168':445
'69.##.54.135':445
'69.##.111.155':445
'69.##.83.127':445
'69.#2.0.0':445
'69.##.24.242':445
'69.##.26.159':445
'69.##.206.93':445
'69.##.158.206':445
'69.##.225.230':445
'69.##.242.127':445
'69.#2.37.52':445
'69.#2.224.0':445
'69.##.113.106':445
'69.##.231.162':445
'69.#2.177.0':9988
'69.##.101.98':445
'69.##.226.53':445
'69.#2.30.91':445
'69.##.52.190':9988
'69.#2.132.6':9988
'69.#2.34.5':9988
'69.##.172.241':9988
'69.##.88.107':9988
'69.#2.54.7':445
'69.##.250.146':445
'69.##.15.204':445
'69.#2.46.88':445
'69.##.138.219':445
'69.##.170.53':445
'69.##.45.183':445
'69.##.194.73':445
'69.##.234.101':445
'69.##.168.11':445
'69.##.101.181':445
'69.##.237.88':9988
'69.##.206.93':139
'69.##.158.206':139
'69.##.93.175':139
'69.##.105.222':139
'69.#2.0.131':139
'69.#2.224.0':139
'69.##.113.106':139
'69.##.24.242':139
'69.##.26.159':139
'69.#2.0.0':139
'69.##.233.217':139
'69.##.154.147':9988
'69.#2.80.85':139
'69.##.138.219':9988
'69.##.163.254':9988
'69.##.240.196':9988
'69.##.62.245':139
'69.##.238.62':139
'69.#2.12.55':139
'69.##.209.28':139
'69.##.69.212':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней