Trojan.DownLoader12.28963

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#34.19.34':445
'19#.#34.128.202':445
'19#.#34.191.89':445
'19#.#34.57.22':445
'19#.#34.141.212':445
'19#.#34.53.196':445
'19#.#34.60.54':445
'19#.#34.92.237':445
'19#.#34.134.128':445
'19#.#34.121.118':445
'19#.#34.14.91':445
'19#.#34.156.217':445
'19#.#34.106.91':445
'19#.#34.89.234':445
'19#.#34.21.116':445
'19#.#34.81.110':445
'19#.#34.185.8':445
'19#.#34.104.195':445
'19#.#34.161.195':445
'19#.#34.104.53':445
'19#.#34.10.50':445
'19#.#34.155.222':445
'19#.#34.190.133':139
'19#.#34.124.202':139
'19#.#34.66.234':139
'19#.#34.137.66':445
'19#.#34.213.215':445
'19#.#34.172.194':139
'19#.#34.119.172':139
'19#.#34.195.56':139
'19#.#34.254.182':139
'19#.#34.55.254':139
'19#.#34.232.103':445
'19#.#34.190.92':139
'19#.#34.232.103':139
'19#.#34.1.154':139
'19#.#34.15.99':445
'19#.#34.164.71':139
'19#.#34.1.154':445
'19#.#34.190.92':445
'19#.#34.164.71':445
'19#.#34.137.66':139
'19#.#34.213.215':139
'19#.#34.54.182':445
'19#.#34.128.202':139
'19#.#34.134.128':139
'19#.#34.19.34':139
'19#.#34.141.212':139
'19#.#34.191.89':139
'19#.#34.60.54':139
'19#.#34.155.222':139
'19#.#34.53.196':139
'19#.#34.121.118':139
'19#.#34.92.237':139
'19#.#34.57.22':139
'19#.#34.106.91':139
'19#.#34.104.53':139
'19#.#34.156.217':139
'19#.#34.81.110':139
'19#.#34.89.234':139
'19#.#34.104.195':139
'19#.#34.14.91':139
'19#.#34.185.8':139
'19#.#34.10.50':139
'19#.#34.161.195':139
'19#.#34.15.99':139
'19#.#34.141.22':445
'19#.#34.106.141':445
'19#.#34.75.83':445
'19#.#34.112.176':445
'19#.#34.200.227':445
'19#.#34.21.197':445
'19#.#34.145.167':445
'19#.#34.252.180':445
'19#.#34.14.97':445
'19#.#34.252.230':445
'19#.#34.215.111':445
'19#.#34.122.207':445
'19#.#34.181.95':445
'19#.#34.91.38':445
'19#.#34.31.115':445
'19#.#34.38.120':445
'19#.#34.171.103':445
'19#.#34.25.124':445
'19#.#34.40.50':445
'19#.#34.217.95':445
'19#.#34.143.234':445
'19#.#34.32.23':139
'19#.#34.94.171':445
'19#.#34.99.232':445
'19#.#34.0.10':445
'19#.#34.34.161':445
'19#.#34.56.253':445
'19#.#34.49.15':445
'19#.#34.3.182':445
'19#.#34.142.130':445
'19#.#34.48.155':445
'19#.#34.67.168':445
'19#.#34.21.13':445
'19#.#34.170.112':445
'19#.#34.26.170':445
'19#.#34.112.153':445
'19#.#34.32.23':445
'19#.#34.175.249':445
'19#.#34.215.84':445
'19#.#34.147.80':445
'19#.#34.204.82':445
'19#.#34.146.253':445
'19#.#34.208.142':445
'19#.#34.13.4':445
'19#.#34.31.88':445
'19#.#34.91.141':139
'19#.#34.98.105':445
'19#.#34.162.154':445
'19#.#34.89.124':445
'19#.#34.25.161':139
'19#.#34.34.93':139
'19#.#34.178.195':139
'19#.#34.243.72':139
'19#.#34.24.168':139
'19#.#34.84.83':445
'19#.#34.26.174':445
'19#.#34.4.210':445
'19#.#34.4.227':445
'19#.#34.34.149':445
'19#.#34.120.100':445
'19#.#34.60.84':445
'19#.#34.175.145':445
'19#.#34.200.24':445
'19#.#34.17.25':445
'19#.#34.190.48':445
'19#.#34.119.172':445
'19#.#34.99.232':139
'19#.#34.48.155':139
'19#.#34.94.171':139
'19#.#34.56.253':139
'19#.#34.0.10':139
'19#.#34.3.182':139
'19#.#34.13.4':139
'19#.#34.49.15':139
'19#.#34.67.168':139
'19#.#34.142.130':139
'19#.#34.34.161':139
'19#.#34.26.170':139
'19#.#34.146.253':139
'19#.#34.170.112':139
'19#.#34.175.249':139
'19#.#34.112.153':139
'19#.#34.147.80':139
'19#.#34.21.13':139
'19#.#34.215.84':139
'19#.#34.208.142':139
'19#.#34.204.82':139
'19#.#34.34.149':139
'19#.#34.66.234':445
'19#.#34.190.133':445
'19#.#34.31.88':139
'19#.#34.89.124':139
'19#.#34.98.105':139
'19#.#34.195.56':445
'19#.#34.172.194':445
'19#.#34.55.254':445
'19#.#34.124.202':445
'19#.#34.254.182':445
'19#.#34.162.154':139
'19#.#34.4.210':139
'19#.#34.17.25':139
'19#.#34.26.174':139
'19#.#34.120.100':139
'19#.#34.4.227':139
'19#.#34.175.145':139
'19#.#34.84.83':139
'19#.#34.60.84':139
'19#.#34.190.48':139
'19#.#34.200.24':139
'19#.#34.21.116':139
'19#.#34.83.194':445
'19#.#34.162.125':445
'19#.#34.194.130':445
'19#.#34.22.21':445
'19#.#34.204.117':445
'19#.#34.170.154':445
'19#.#34.148.254':445
'19#.#34.153.207':445
'19#.#34.172.151':445
'19#.#34.3.80':445
'19#.#34.111.34':445
'19#.#34.76.5':139
'19#.#34.220.163':139
'19#.#34.247.236':139
'19#.#34.218.78':139
'19#.#34.208.131':139
'19#.#34.155.82':445
'19#.#34.156.162':445
'19#.#34.209.26':445
'19#.#34.58.8':139
'19#.#34.199.0':139
'19#.#34.170.28':445
'19#.#34.143.163':445
'19#.#34.183.35':445
'19#.#34.7.173':445
'19#.#34.119.157':445
'19#.#34.237.104':445
'19#.#34.104.51':445
'19#.#34.209.218':445
'19#.#34.188.183':445
'19#.#34.94.150':445
'19#.#34.58.195':445
'19#.#34.9.100':445
'19#.#34.242.16':445
'19#.#34.239.18':445
'19#.#34.77.254':445
'19#.#34.21.170':445
'19#.#34.139.17':445
'19#.#34.127.69':445
'19#.#34.99.160':445
'19#.#34.60.128':445
'19#.#34.96.148':445
'19#.#34.59.123':445
'19#.#34.13.110':139
'19#.#34.170.28':139
'19#.#34.21.170':139
'19#.#34.148.254':139
'19#.#34.153.207':139
'19#.#34.170.154':139
'19#.#34.239.18':139
'19#.#34.96.148':139
'19#.#34.242.16':139
'19#.#34.139.17':139
'19#.#34.77.254':139
'19#.#34.3.80':139
'19#.#34.111.34':139
'19#.#34.22.21':139
'19#.#34.156.162':139
'19#.#34.209.26':139
'19#.#34.155.82':139
'19#.#34.162.125':139
'19#.#34.172.151':139
'19#.#34.83.194':139
'19#.#34.204.117':139
'19#.#34.194.130':139
'19#.#34.59.123':139
'19#.#34.194.124':139
'19#.#34.22.51':139
'19#.#34.209.218':139
'19#.#34.188.183':139
'19#.#34.104.51':139
'19#.#34.101.156':139
'19#.#34.166.80':139
'19#.#34.51.37':139
'19#.#34.96.177':139
'19#.#34.205.40':139
'19#.#34.58.195':139
'19#.#34.9.100':139
'19#.#34.119.157':139
'19#.#34.99.160':139
'19#.#34.60.128':139
'19#.#34.127.69':139
'19#.#34.183.35':139
'19#.#34.94.150':139
'19#.#34.143.163':139
'19#.#34.237.104':139
'19#.#34.7.173':139
'19#.#34.194.124':445
'19#.#34.139.234':139
'19#.#34.11.153':445
'19#.#34.130.174':139
'19#.#34.64.126':139
'19#.#34.51.57':139
'19#.#34.130.174':445
'19#.#34.139.234':445
'19#.#34.51.57':445
'19#.#34.1.175':445
'19#.#34.64.126':445
'19#.#34.1.175':139
'19#.#34.240.222':445
'19#.#34.176.240':445
'19#.#34.223.177':445
'19#.#34.211.236':445
'19#.#34.87.85':445
'19#.#34.101.128':445
'19#.#34.11.153':139
'19#.#34.36.203':445
'19#.#34.119.143':445
'19#.#34.16.100':445
'19#.#34.31.115':139
'19#.#34.106.141':139
'19#.#34.14.97':139
'19#.#34.141.22':139
'19#.#34.200.227':139
'19#.#34.75.83':139
'19#.#34.145.167':139
'19#.#34.54.182':139
'19#.#34.21.197':139
'19#.#34.252.230':139
'19#.#34.252.180':139
'19#.#34.112.176':139
'19#.#34.181.95':139
'19#.#34.217.95':139
'19#.#34.122.207':139
'19#.#34.38.120':139
'19#.#34.91.38':139
'19#.#34.25.124':139
'19#.#34.215.111':139
'19#.#34.171.103':139
'19#.#34.143.234':139
'19#.#34.40.50':139
'19#.#34.103.29':445
'19#.#34.119.157':9988
'19#.#34.127.69':9988
'19#.#34.199.0':445
'19#.#34.220.163':445
'19#.#34.58.8':445
'19#.#34.162.125':9988
'19#.#34.170.28':9988
'19#.#34.22.21':9988
'19#.#34.237.104':9988
'19#.#34.153.207':9988
'19#.#34.76.5':445
'19#.#34.51.37':445
'19#.#34.101.156':445
'19#.#34.205.40':445
'19#.#34.22.51':445
'19#.#34.96.177':445
'19#.#34.208.131':445
'19#.#34.247.236':445
'19#.#34.218.78':445
'19#.#34.166.80':445
'19#.#34.13.110':445
'19#.#34.155.82':9988
'19#.#34.240.222':139
'19#.#34.176.240':139
'19#.#34.223.177':139
'19#.#34.211.236':139
'19#.#34.87.85':139
'19#.#34.101.128':139
'19#.#34.198.198':445
'19#.#34.36.203':139
'19#.#34.119.143':139
'19#.#34.16.100':139
'19#.#34.103.29':139
'19#.#34.3.80':9988
'19#.#34.148.254':9988
'19#.#34.77.254':9988
'19#.#34.209.26':9988
'19#.#34.139.17':9988
'19#.#34.170.154':9988
'19#.#34.198.198':139
'19#.#34.96.148':9988
'19#.#34.156.162':9988
'19#.#34.111.34':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней