Trojan.DownLoader12.29147

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#36.30.89':445
'21#.#36.65.221':445
'21#.#36.56.150':445
'21#.#36.101.132':445
'21#.#36.207.79':445
'21#.#36.187.242':445
'21#.#36.157.224':445
'21#.#36.3.208':445
'21#.#36.88.4':445
'21#.#36.22.93':445
'21#.#36.114.13':445
'21#.#36.71.62':445
'21#.#36.35.145':445
'21#.#36.194.47':445
'21#.#36.69.42':445
'21#.#36.69.131':445
'21#.#36.60.165':445
'21#.#36.96.131':445
'21#.#36.65.175':445
'21#.#36.79.189':445
'21#.#36.63.250':445
'21#.#36.89.71':445
'21#.#36.214.63':445
'21#.#36.130.184':445
'21#.#36.77.188':445
'21#.#36.20.58':445
'21#.#36.146.226':445
'21#.#36.188.86':445
'21#.#36.172.200':445
'21#.#36.94.195':445
'21#.#36.148.182':445
'21#.#36.36.155':445
'21#.#36.59.137':445
'21#.#36.3.95':445
'21#.#36.96.61':445
'21#.#36.237.26':445
'21#.#36.124.202':445
'21#.#36.110.6':445
'21#.#36.82.202':445
'21#.#36.124.202':139
'21#.#36.110.6':139
'21#.#36.148.182':139
'21#.#36.3.95':139
'21#.#36.96.61':139
'21#.#36.89.71':139
'21#.#36.214.63':139
'21#.#36.237.26':139
'21#.#36.172.200':139
'21#.#36.94.195':139
'21#.#36.207.79':139
'21#.#36.3.208':139
'21#.#36.30.89':139
'21#.#36.65.221':139
'21#.#36.88.4':139
'21#.#36.36.155':139
'21#.#36.59.137':139
'21#.#36.187.242':139
'21#.#36.157.224':139
'21#.#36.65.246':139
'21#.#36.252.78':139
'21#.#36.90.163':139
'21#.#36.157.203':139
'21#.#36.4.66':139
'21#.#36.40.11':139
'21#.#36.226.17':445
'21#.#36.90.66':139
'21#.#36.48.142':139
'21#.#36.32.80':139
'21#.#36.130.184':139
'21#.#36.146.226':139
'21#.#36.79.189':139
'21#.#36.63.250':139
'21#.#36.188.86':139
'21#.#36.77.47':139
'21#.#36.233.241':139
'21#.#36.77.188':139
'21#.#36.20.58':139
'21#.#36.103.33':139
'21#.#36.68.103':139
'21#.#36.169.7':139
'21#.#36.33.97':139
'21#.#36.97.136':139
'21#.#36.86.189':139
'21#.#36.160.86':139
'21#.#36.206.227':139
'21#.#36.99.170':139
'21#.#36.2.142':139
'21#.#36.196.203':139
'21#.#36.222.234':139
'21#.#36.31.176':139
'21#.#36.204.31':139
'21#.#36.95.236':139
'21#.#36.161.126':139
'21#.#36.183.161':139
'21#.#36.45.45':139
'21#.#36.126.155':139
'21#.#36.128.60':445
'21#.#36.1.75':445
'21#.#36.245.79':445
'21#.#36.80.57':445
'21#.#36.219.140':445
'21#.#36.158.175':445
'21#.#36.69.130':445
'21#.#36.221.111':445
'21#.#36.117.74':445
'21#.#36.185.232':445
'21#.#36.229.218':139
'21#.#36.128.160':139
'21#.#36.124.248':139
'21#.#36.133.128':139
'21#.#36.76.0':445
'21#.#36.234.0':445
'21#.#36.25.139':445
'21#.#36.24.43':445
'21#.#36.137.244':445
'21#.#36.131.16':139
'21#.#36.24.43':139
'21#.#36.137.244':139
'21#.#36.40.11':445
'21#.#36.76.0':139
'21#.#36.234.0':139
'21#.#36.245.79':139
'21#.#36.80.57':139
'21#.#36.25.139':139
'21#.#36.185.232':139
'21#.#36.48.142':445
'21#.#36.32.80':445
'21#.#36.90.163':445
'21#.#36.77.47':445
'21#.#36.233.241':445
'21#.#36.157.203':445
'21#.#36.4.66':445
'21#.#36.90.66':445
'21#.#36.65.246':445
'21#.#36.252.78':445
'21#.#36.247.64':139
'21#.#36.191.250':139
'21#.#36.174.214':139
'21#.#36.1.50':139
'21#.#36.237.172':139
'21#.#36.18.125':139
'21#.#36.146.77':139
'21#.#36.70.66':139
'21#.#36.36.14':139
'21#.#36.1.51':139
'21#.#36.219.140':139
'21#.#36.221.111':139
'21#.#36.128.60':139
'21#.#36.1.75':139
'21#.#36.117.74':139
'21#.#36.92.149':139
'21#.#36.43.64':139
'21#.#36.158.175':139
'21#.#36.69.130':139
'21#.#36.101.132':139
'21#.#36.195.215':445
'21#.#36.4.27':445
'21#.#36.170.199':139
'21#.#36.64.23':139
'21#.#36.121.3':445
'21#.#36.154.17':445
'21#.#36.244.174':445
'21#.#36.230.236':445
'21#.#36.161.170':445
'21#.#36.9.238':139
'21#.#36.30.12':139
'21#.#36.187.186':139
'21#.#36.100.56':139
'21#.#36.55.249':139
'21#.#36.147.44':139
'21#.#36.0.84':139
'21#.#36.173.185':139
'21#.#36.214.146':139
'21#.#36.59.136':139
'21#.#36.154.77':445
'21#.#36.240.218':445
'21#.#36.138.56':445
'21#.#36.38.91':445
'21#.#36.245.166':445
'21#.#36.30.79':445
'21#.#36.237.139':445
'21#.#36.58.33':445
'21#.#36.124.172':445
'21#.#36.160.65':445
'21#.#36.132.74':445
'21#.#36.252.131':445
'21#.#36.5.123':445
'21#.#36.70.104':445
'21#.#36.163.30':445
'21#.#36.99.46':445
'21#.#36.98.123':445
'21#.#36.158.225':445
'21#.#36.208.41':445
'21#.#36.29.5':139
'21#.#36.158.225':139
'21#.#36.208.41':139
'21#.#36.252.131':139
'21#.#36.163.30':139
'21#.#36.99.46':139
'21#.#36.138.56':139
'21#.#36.38.91':139
'21#.#36.98.123':139
'21#.#36.160.65':139
'21#.#36.132.74':139
'21#.#36.121.3':139
'21#.#36.230.236':139
'21#.#36.4.27':139
'21#.#36.195.215':139
'21#.#36.161.170':139
'21#.#36.5.123':139
'21#.#36.70.104':139
'21#.#36.154.17':139
'21#.#36.244.174':139
'21#.#36.179.41':139
'21#.#36.15.245':139
'21#.#36.184.126':139
'21#.#36.41.212':139
'21#.#36.186.110':139
'21#.#36.161.118':139
'21#.#36.154.138':139
'21#.#36.80.56':139
'21#.#36.56.183':139
'21#.#36.114.26':139
'21#.#36.245.166':139
'21#.#36.58.33':139
'21#.#36.154.77':139
'21#.#36.240.218':139
'21#.#36.124.172':139
'21#.#36.61.232':139
'21#.#36.52.110':139
'21#.#36.30.79':139
'21#.#36.237.139':139
'21#.#36.237.249':139
'21#.#36.98.238':139
'21#.#36.249.20':139
'21#.#36.250.60':139
'21#.#36.127.98':139
'21#.#36.180.82':445
'21#.#36.163.166':445
'21#.#36.232.34':139
'21#.#36.16.89':445
'21#.#36.163.166':139
'21#.#36.154.138':9988
'21#.#36.114.26':9988
'21#.#36.38.91':9988
'21#.#36.58.33':9988
'21#.#36.56.183':9988
'21#.#36.16.89':139
'21#.#36.180.82':139
'21#.#36.29.5':9988
'21#.#36.41.212':9988
'21#.#36.69.42':139
'21#.#36.96.131':139
'21#.#36.114.13':139
'21#.#36.71.62':139
'21#.#36.65.175':139
'21#.#36.22.93':139
'21#.#36.56.150':139
'21#.#36.69.131':139
'21#.#36.60.165':139
'21#.#36.194.47':139
'21#.#36.237.249':445
'21#.#36.98.238':445
'21#.#36.249.20':445
'21#.#36.250.60':445
'21#.#36.127.98':445
'21#.#36.82.202':139
'21#.#36.35.145':139
'21#.#36.232.34':445
'21#.#36.226.17':139
'21#.#36.160.65':9988
'21#.#36.29.5':445
'21#.#36.100.56':445
'21#.#36.161.118':445
'21#.#36.154.138':445
'21#.#36.55.249':445
'21#.#36.147.44':445
'21#.#36.214.146':445
'21#.#36.30.12':445
'21#.#36.187.186':445
'21#.#36.56.183':445
'21#.#36.114.26':445
'21#.#36.184.126':445
'21#.#36.61.232':445
'21#.#36.52.110':445
'21#.#36.41.212':445
'21#.#36.186.110':445
'21#.#36.80.56':445
'21#.#36.179.41':445
'21#.#36.15.245':445
'21#.#36.132.74':9988
'21#.#36.252.131':9988
'21#.#36.5.123':9988
'21#.#36.70.104':9988
'21#.#36.163.30':9988
'21#.#36.99.46':9988
'21#.#36.98.123':9988
'21#.#36.158.225':9988
'21#.#36.208.41':9988
'21#.#36.244.174':9988
'21#.#36.173.185':445
'21#.#36.9.238':445
'21#.#36.59.136':445
'21#.#36.0.84':445
'21#.#36.170.199':445
'21#.#36.4.27':9988
'21#.#36.154.17':9988
'21#.#36.64.23':445
'21#.#36.230.236':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней