Trojan.DownLoader12.29131

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'89.##.150.139':139
'89.##.68.125':139
'89.#0.74.75':139
'89.##.138.57':139
'89.##.131.217':139
'89.##.18.109':139
'89.##.183.213':139
'89.##.117.175':139
'89.##.117.66':139
'89.#0.81.21':139
'89.##.149.224':139
'89.##.182.118':139
'89.##.120.61':139
'89.#0.73.22':139
'89.##.87.104':139
'89.##.55.230':139
'89.##.79.163':139
'89.#0.85.77':139
'89.#0.96.90':139
'89.##.28.251':139
'89.#0.73.22':445
'89.##.87.104':445
'89.##.14.230':445
'89.##.142.88':445
'89.##.106.174':445
'89.#0.96.90':445
'89.##.28.251':445
'89.##.182.118':445
'89.##.120.61':445
'89.##.149.224':445
'89.##.143.144':445
'89.##.147.143':445
'89.##.143.236':445
'89.#0.3.14':445
'89.#0.42.27':445
'89.##.123.10':445
'89.##.254.67':445
'89.##.10.240':445
'89.##.33.147':445
'89.##.223.179':445
'89.##.14.230':139
'89.##.120.67':445
'89.##.20.120':445
'89.##.16.216':445
'89.##.161.77':445
'89.##.233.216':445
'89.##.255.106':445
'89.#0.53.0':445
'89.##.44.234':445
'89.#0.9.72':445
'89.#0.41.79':445
'89.##.15.220':139
'89.##.27.203':139
'89.#0.10.92':139
'89.##.255.106':139
'89.#0.53.0':139
'89.##.147.102':139
'89.##.13.147':139
'89.##.230.137':139
'89.##.188.35':139
'89.#0.92.19':139
'89.##.33.147':139
'89.##.223.179':139
'89.##.147.143':139
'89.##.143.236':139
'89.##.143.144':139
'89.##.142.88':139
'89.##.106.174':139
'89.##.254.67':139
'89.##.10.240':139
'89.##.123.10':139
'89.##.188.35':445
'89.#0.92.19':445
'89.##.27.203':445
'89.#0.10.92':445
'89.##.15.220':445
'89.#0.3.14':139
'89.#0.42.27':139
'89.##.13.147':445
'89.##.230.137':445
'89.##.147.102':445
'89.#0.85.77':445
'89.#0.4.176':139
'89.##.10.194':139
'89.##.80.216':139
'89.##.19.149':139
'89.#0.8.115':139
'89.##.144.161':139
'89.#0.57.94':139
'89.##.161.151':139
'89.##.142.173':139
'89.##.151.142':139
'89.##.108.199':445
'89.##.218.108':445
'89.##.199.246':445
'89.##.171.65':445
'89.#0.44.53':445
'89.##.141.132':139
'89.#0.89.63':139
'89.#0.35.94':139
'89.##.17.225':445
'89.#0.40.58':445
'89.#0.4.132':139
'89.##.174.145':139
'89.#0.190.2':139
'89.#0.159.6':139
'89.#0.87.57':139
'89.#0.69.35':139
'89.#0.36.77':139
'89.##.196.209':139
'89.##.130.33':139
'89.##.200.114':139
'89.##.134.45':139
'89.##.212.203':139
'89.#0.2.50':139
'89.##.30.153':139
'89.#0.83.4':139
'89.##.173.43':139
'89.##.200.173':139
'89.##.210.226':139
'89.##.112.154':139
'89.##.90.112':139
'89.##.141.33':445
'89.##.205.100':139
'89.##.236.246':139
'89.#0.64.15':139
'89.##.18.109':445
'89.##.183.213':445
'89.##.40.136':139
'89.##.116.236':139
'89.#0.136.6':139
'89.##.45.139':139
'89.##.201.238':139
'89.##.131.217':445
'89.#0.74.75':445
'89.##.138.57':445
'89.##.55.230':445
'89.##.79.163':445
'89.#0.81.21':445
'89.##.117.175':445
'89.##.117.66':445
'89.##.150.139':445
'89.##.68.125':445
'89.##.45.139':445
'89.##.201.238':445
'89.##.236.246':445
'89.#0.64.15':445
'89.##.205.100':445
'89.##.218.252':445
'89.##.106.30':445
'89.##.116.236':445
'89.#0.136.6':445
'89.##.40.136':445
'89.##.171.65':139
'89.#0.44.53':139
'89.##.141.33':139
'89.##.218.252':139
'89.##.106.30':139
'89.##.17.225':139
'89.#0.40.58':139
'89.##.218.108':139
'89.##.199.246':139
'89.##.108.199':139
'89.##.44.234':139
'89.##.197.144':445
'89.#0.8.251':445
'89.##.133.241':445
'89.##.108.54':445
'89.##.47.133':445
'89.#0.4.26':445
'89.##.111.117':445
'89.##.25.215':445
'89.##.207.53':445
'89.##.214.233':445
'89.##.23.239':139
'89.##.238.221':139
'89.##.239.210':139
'89.##.204.201':139
'89.##.42.163':139
'89.#0.8.185':139
'89.##.188.138':139
'89.##.144.211':139
'89.##.150.254':139
'89.#0.96.45':139
'89.#0.8.204':445
'89.#0.35.48':445
'89.#0.88.36':445
'89.#0.11.29':445
'89.##.183.44':445
'89.##.107.137':445
'89.##.161.72':445
'89.#0.8.210':445
'89.##.216.94':445
'89.##.188.216':445
'89.#0.104.2':445
'89.##.151.25':445
'89.##.93.151':445
'89.##.112.196':445
'89.##.52.112':445
'89.##.38.130':445
'89.##.100.50':445
'89.##.228.217':445
'89.#0.51.72':445
'89.##.12.161':445
'89.##.26.237':139
'89.#0.104.2':139
'89.##.151.25':139
'89.##.93.151':139
'89.##.112.196':139
'89.##.52.112':139
'89.##.38.130':139
'89.##.100.50':139
'89.##.228.217':139
'89.#0.51.72':139
'89.##.12.161':139
'89.##.133.241':139
'89.##.108.54':139
'89.##.197.144':139
'89.##.47.133':139
'89.##.207.53':139
'89.#0.4.26':139
'89.##.111.117':139
'89.##.25.215':139
'89.#0.8.251':139
'89.##.214.233':139
'89.##.123.139':139
'89.#0.18.53':139
'89.##.154.87':139
'89.##.160.160':139
'89.##.27.199':139
'89.#0.28.99':139
'89.##.152.251':139
'89.##.64.135':139
'89.#0.22.83':139
'89.##.171.179':139
'89.#0.8.204':139
'89.#0.35.48':139
'89.#0.88.36':139
'89.#0.11.29':139
'89.##.183.44':139
'89.##.107.137':139
'89.##.161.72':139
'89.#0.8.210':139
'89.##.216.94':139
'89.##.188.216':139
'89.##.160.160':445
'89.##.50.219':139
'89.##.100.112':445
'89.##.71.243':139
'89.##.51.166':139
'89.##.205.51':139
'89.##.29.128':445
'89.##.199.28':445
'89.##.154.16':445
'89.##.72.221':445
'89.##.77.145':445
'89.##.46.150':139
'89.##.226.40':139
'89.##.178.68':139
'89.##.199.28':139
'89.#0.7.172':139
'89.##.96.159':139
'89.##.239.46':139
'89.##.180.121':139
'89.##.252.185':139
'89.##.121.252':139
'89.##.161.77':139
'89.##.233.216':139
'89.##.50.219':445
'89.##.205.51':445
'89.##.71.243':445
'89.#0.9.72':139
'89.#0.41.79':139
'89.##.20.120':139
'89.##.16.216':139
'89.##.120.67':139
'89.##.226.40':445
'89.##.252.185':445
'89.##.46.150':445
'89.#0.7.172':445
'89.##.178.68':445
'89.##.239.46':445
'89.##.51.166':445
'89.##.96.159':445
'89.##.121.252':445
'89.##.180.121':445
'89.##.29.128':139
'89.##.23.239':445
'89.##.238.221':445
'89.##.239.210':445
'89.##.204.201':445
'89.##.42.163':445
'89.#0.8.185':445
'89.##.188.138':445
'89.##.144.211':445
'89.##.150.254':445
'89.#0.96.45':445
'89.#0.18.53':445
'89.#0.22.83':445
'89.##.123.139':445
'89.##.27.199':445
'89.##.154.87':445
'89.##.152.251':445
'89.##.26.237':445
'89.#0.28.99':445
'89.##.171.179':445
'89.##.64.135':445
'89.#0.28.99':9988
'89.#0.18.53':9988
'89.##.160.160':9988
'89.##.64.135':9988
'89.##.216.94':9988
'89.##.77.145':139
'89.##.154.16':139
'89.##.72.221':139
'89.##.188.216':9988
'89.##.100.112':139
'89.##.111.117':9988
'89.##.52.112':9988
'89.##.25.215':9988
'89.##.47.133':9988
'89.##.133.241':9988
'89.#0.88.36':9988
'89.##.27.199':9988
'89.##.151.25':9988
'89.##.93.151':9988
'89.#0.104.2':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней