Trojan.DownLoader12.29130

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#11.61.144':445
'20#.#11.52.168':445
'20#.#11.36.30':445
'20#.#11.163.56':445
'20#.#11.202.209':445
'20#.#11.36.123':445
'20#.#11.66.185':445
'20#.#11.55.221':445
'20#.#11.40.198':445
'20#.#11.144.12':445
'20#.#11.191.176':445
'20#.#11.100.192':445
'20#.#11.175.127':445
'20#.#11.0.145':445
'20#.#11.49.148':445
'20#.#11.32.128':445
'20#.#11.161.117':139
'20#.#11.81.79':445
'20#.#11.140.2':445
'20#.#11.123.46':445
'20#.#11.56.27':445
'20#.#11.49.245':445
'20#.#11.62.125':445
'20#.#11.192.193':445
'20#.#11.20.34':445
'20#.#11.126.130':445
'20#.#11.144.250':445
'20#.#11.138.36':445
'20#.#11.25.77':445
'20#.#11.138.1':445
'20#.#11.76.131':445
'20#.#11.199.144':445
'20#.#11.240.31':445
'20#.#11.47.77':445
'20#.#11.78.41':445
'20#.#11.17.201':445
'20#.#11.170.228':445
'20#.#11.112.123':445
'20#.#11.49.45':445
'20#.#11.197.212':445
'20#.#11.120.94':445
'20#.#11.149.200':445
'20#.#11.46.217':445
'20#.#11.133.46':445
'20#.#11.224.132':445
'20#.#11.174.187':445
'20#.#11.22.38':445
'20#.#11.45.22':445
'20#.#11.150.149':445
'20#.#11.57.90':445
'20#.#11.99.115':445
'20#.#11.78.41':139
'20#.#11.36.123':139
'20#.#11.61.144':139
'20#.#11.52.168':139
'20#.#11.175.127':139
'20#.#11.163.56':139
'20#.#11.202.209':139
'20#.#11.100.192':139
'20#.#11.66.185':139
'20#.#11.55.221':139
'20#.#11.36.30':139
'20#.#11.144.12':139
'20#.#11.191.176':139
'20#.#11.49.245':139
'20#.#11.140.2':139
'20#.#11.0.145':139
'20#.#11.49.148':139
'20#.#11.59.28':445
'20#.#11.115.58':445
'20#.#11.81.79':139
'20#.#11.20.34':139
'20#.#11.123.46':139
'20#.#11.56.27':139
'20#.#11.32.128':139
'20#.#11.62.125':139
'20#.#11.192.193':139
'20#.#11.40.198':139
'20#.#11.199.144':139
'20#.#11.144.250':139
'20#.#11.138.36':139
'20#.#11.49.45':139
'20#.#11.138.1':139
'20#.#11.76.131':139
'20#.#11.112.123':139
'20#.#11.240.31':139
'20#.#11.47.77':139
'20#.#11.25.77':139
'20#.#11.17.201':139
'20#.#11.170.228':139
'20#.#11.45.22':139
'20#.#11.224.132':139
'20#.#11.197.212':139
'20#.#11.120.94':139
'20#.#11.126.130':139
'20#.#11.46.217':139
'20#.#11.133.46':139
'20#.#11.99.115':139
'20#.#11.174.187':139
'20#.#11.22.38':139
'20#.#11.149.200':139
'20#.#11.150.149':139
'20#.#11.57.90':139
'20#.#11.11.153':445
'20#.#11.193.195':445
'20#.#11.188.51':445
'20#.#11.119.183':445
'20#.#11.68.119':445
'20#.#11.234.67':445
'20#.#11.131.240':445
'20#.#11.14.244':445
'20#.#11.9.208':445
'20#.#11.74.81':445
'20#.#11.117.76':445
'20#.#11.22.119':445
'20#.#11.183.102':445
'20#.#11.52.78':445
'20#.#11.76.59':445
'20#.#11.8.141':445
'20#.#11.109.8':445
'20#.#11.139.185':445
'20#.#11.140.139':445
'20#.#11.165.143':445
'20#.#11.76.47':445
'20#.#11.8.66':445
'20#.#11.137.8':445
'20#.#11.12.137':445
'20#.#11.113.12':445
'20#.#11.50.159':445
'20#.#11.207.19':445
'20#.#11.146.206':445
'20#.#11.89.146':445
'20#.#11.104.163':445
'20#.#11.29.30':445
'20#.#11.17.77':445
'20#.#11.174.125':445
'20#.#11.141.56':445
'20#.#11.26.181':445
'20#.#11.189.54':445
'20#.#11.202.98':445
'20#.#11.234.46':445
'20#.#11.68.32':445
'20#.#11.2.32':445
'20#.#11.130.163':445
'20#.#11.166.247':445
'20#.#11.213.128':445
'20#.#11.15.52':445
'20#.#11.26.163':445
'20#.#11.144.46':445
'20#.#11.48.208':445
'20#.#11.32.48':445
'20#.#11.171.83':445
'20#.#11.121.117':445
'20#.#11.93.184':445
'20#.#11.26.181':139
'20#.#11.234.67':139
'20#.#11.11.153':139
'20#.#11.193.195':139
'20#.#11.183.102':139
'20#.#11.119.183':139
'20#.#11.68.119':139
'20#.#11.22.119':139
'20#.#11.131.240':139
'20#.#11.14.244':139
'20#.#11.188.51':139
'20#.#11.74.81':139
'20#.#11.117.76':139
'20#.#11.8.66':139
'20#.#11.140.139':139
'20#.#11.52.78':139
'20#.#11.76.59':139
'20#.#11.161.117':445
'20#.#11.109.8':139
'20#.#11.139.185':139
'20#.#11.113.12':139
'20#.#11.165.143':139
'20#.#11.76.47':139
'20#.#11.8.141':139
'20#.#11.137.8':139
'20#.#11.12.137':139
'20#.#11.9.208':139
'20#.#11.17.77':139
'20#.#11.207.19':139
'20#.#11.146.206':139
'20#.#11.68.32':139
'20#.#11.104.163':139
'20#.#11.29.30':139
'20#.#11.234.46':139
'20#.#11.174.125':139
'20#.#11.141.56':139
'20#.#11.89.146':139
'20#.#11.189.54':139
'20#.#11.202.98':139
'20#.#11.32.48':139
'20#.#11.26.163':139
'20#.#11.2.32':139
'20#.#11.130.163':139
'20#.#11.50.159':139
'20#.#11.213.128':139
'20#.#11.15.52':139
'20#.#11.93.184':139
'20#.#11.144.46':139
'20#.#11.48.208':139
'20#.#11.166.247':139
'20#.#11.171.83':139
'20#.#11.121.117':139
'20#.#11.92.61':445
'20#.#11.145.44':445
'20#.#11.43.123':445
'20#.#11.215.87':445
'20#.#11.205.186':445
'20#.#11.177.4':445
'20#.#11.39.248':445
'20#.#11.68.192':445
'20#.#11.255.220':445
'20#.#11.6.40':445
'20#.#11.31.215':445
'20#.#11.228.15':445
'20#.#11.41.162':445
'20#.#11.68.37':445
'20#.#11.118.184':445
'20#.#11.255.221':445
'20#.#11.141.76':445
'20#.#11.86.124':445
'20#.#11.129.12':445
'20#.#11.118.117':445
'20#.#11.119.236':445
'20#.#11.172.120':445
'20#.#11.252.171':445
'20#.#11.10.67':445
'20#.#11.38.208':445
'20#.#11.148.68':445
'20#.#11.107.201':445
'20#.#11.236.213':445
'20#.#11.131.211':445
'20#.#11.55.251':445
'20#.#11.26.80':445
'20#.#11.196.179':445
'20#.#11.60.162':445
'20#.#11.240.36':445
'20#.#11.118.85':445
'20#.#11.215.87':9988
'20#.#11.185.232':445
'20#.#11.157.186':445
'20#.#11.123.22':445
'20#.#11.77.238':445
'20#.#11.114.254':445
'20#.#11.60.28':445
'20#.#11.230.59':445
'20#.#11.47.92':445
'20#.#11.5.167':445
'20#.#11.36.164':445
'20#.#11.106.14':445
'20#.#11.110.105':445
'20#.#11.133.110':445
'20#.#11.142.11':445
'20#.#11.122.239':445
'20#.#11.140.19':445
'20#.#11.107.95':445
'20#.#11.39.248':139
'20#.#11.145.44':139
'20#.#11.43.123':139
'20#.#11.68.37':139
'20#.#11.205.186':139
'20#.#11.177.4':139
'20#.#11.41.162':139
'20#.#11.68.192':139
'20#.#11.255.220':139
'20#.#11.215.87':139
'20#.#11.31.215':139
'20#.#11.228.15':139
'20#.#11.252.171':139
'20#.#11.86.124':139
'20#.#11.107.95':139
'20#.#11.118.117':139
'20#.#11.118.184':139
'20#.#11.129.12':139
'20#.#11.255.221':139
'20#.#11.148.68':139
'20#.#11.119.236':139
'20#.#11.172.120':139
'20#.#11.141.76':139
'20#.#11.10.67':139
'20#.#11.38.208':139
'20#.#11.6.40':139
'20#.#11.60.162':139
'20#.#11.236.213':139
'20#.#11.131.211':139
'20#.#11.77.238':139
'20#.#11.196.179':139
'20#.#11.26.80':139
'20#.#11.123.22':139
'20#.#11.240.36':139
'20#.#11.118.85':139
'20#.#11.55.251':139
'20#.#11.185.232':139
'20#.#11.157.186':139
'20#.#11.133.110':139
'20#.#11.36.164':139
'20#.#11.114.254':139
'20#.#11.60.28':139
'20#.#11.107.201':139
'20#.#11.5.167':139
'20#.#11.47.92':139
'20#.#11.140.19':139
'20#.#11.106.14':139
'20#.#11.110.105':139
'20#.#11.230.59':139
'20#.#11.142.11':139
'20#.#11.122.239':139
'20#.#11.228.76':445
'20#.#11.212.27':445
'20#.#11.93.146':445
'20#.#11.97.254':445
'20#.#11.176.160':445
'20#.#11.135.247':445
'20#.#11.150.177':445
'20#.#11.24.124':445
'20#.#11.196.0':445
'20#.#11.191.164':445
'20#.#11.207.191':445
'20#.#11.31.114':445
'20#.#11.143.100':445
'20#.#11.43.200':445
'20#.#11.76.22':445
'20#.#11.0.175':445
'20#.#11.92.61':139
'20#.#11.59.28':139
'20#.#11.115.58':139
'20#.#11.55.135':445
'20#.#11.186.213':445
'20#.#11.100.136':445
'20#.#11.7.70':445
'20#.#11.16.47':445
'20#.#11.10.254':445
'20#.#11.156.33':445
'20#.#11.178.172':445
'20#.#11.204.178':445
'20#.#11.113.27':445
'20#.#11.204.227':445
'20#.#11.106.174':445
'20#.#11.23.173':445
'20#.#11.187.129':445
'20#.#11.68.173':445
'20#.#11.81.139':445
'20#.#11.229.106':445
'20#.#11.58.231':445
'20#.#11.128.242':445
'20#.#11.99.170':445
'20#.#11.23.245':445
'20#.#11.57.24':445
'20#.#11.81.183':445
'20#.#11.65.110':445
'20#.#11.54.142':445
'20#.#11.155.8':445
'20#.#11.74.231':445
'20#.#11.85.244':445
'20#.#11.99.168':445
'20#.#11.201.110':445
'20#.#11.30.171':445
'20#.#11.58.30':445
'20#.#11.81.139':139
'20#.#11.135.247':139
'20#.#11.228.76':139
'20#.#11.212.27':139
'20#.#11.143.100':139
'20#.#11.97.254':139
'20#.#11.176.160':139
'20#.#11.31.114':139
'20#.#11.150.177':139
'20#.#11.24.124':139
'20#.#11.93.146':139
'20#.#11.191.164':139
'20#.#11.207.191':139
'20#.#11.100.136':139
'20#.#11.26.80':9988
'20#.#11.43.200':139
'20#.#11.76.22':139
'20#.#11.205.186':9988
'20#.#11.6.40':9988
'20#.#11.142.11':9988
'20#.#11.10.254':139
'20#.#11.55.135':139
'20#.#11.186.213':139
'20#.#11.0.175':139
'20#.#11.7.70':139
'20#.#11.16.47':139
'20#.#11.196.0':139
'20#.#11.23.173':139
'20#.#11.178.172':139
'20#.#11.204.178':139
'20#.#11.99.170':139
'20#.#11.204.227':139
'20#.#11.106.174':139
'20#.#11.128.242':139
'20#.#11.187.129':139
'20#.#11.68.173':139
'20#.#11.113.27':139
'20#.#11.229.106':139
'20#.#11.58.231':139
'20#.#11.99.168':139
'20#.#11.155.8':139
'20#.#11.23.245':139
'20#.#11.57.24':139
'20#.#11.156.33':139
'20#.#11.65.110':139
'20#.#11.54.142':139
'20#.#11.58.30':139
'20#.#11.74.231':139
'20#.#11.85.244':139
'20#.#11.81.183':139
'20#.#11.201.110':139
'20#.#11.30.171':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней