Trojan.DownLoader12.29129

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##.175.192':139
'61.##.168.174':139
'61.##.113.127':139
'61.##.161.197':139
'61.##.244.161':139
'61.##.165.170':139
'61.##.78.165':139
'61.##.127.159':139
'61.##.188.219':139
'61.##.95.204':139
'61.#1.62.58':445
'61.##.105.222':445
'61.##.180.95':445
'61.##.114.142':445
'61.##.51.161':445
'61.##.159.103':445
'61.##.80.106':445
'61.##.65.214':445
'61.#1.0.41':445
'61.##.150.27':445
'61.##.201.78':139
'61.##.34.161':139
'61.##.138.25':139
'61.#1.87.51':139
'61.##.201.78':445
'61.##.114.65':139
'61.##.69.188':139
'61.#1.2.14':139
'61.##.62.171':139
'61.##.101.216':139
'61.##.255.145':139
'61.##.175.192':445
'61.##.168.174':445
'61.##.113.127':445
'61.##.161.197':445
'61.##.244.161':445
'61.##.165.170':445
'61.##.78.165':445
'61.##.127.159':445
'61.##.188.219':445
'61.##.95.204':445
'61.##.192.247':445
'61.##.104.254':445
'61.##.117.110':445
'61.##.80.106':139
'61.##.158.47':445
'61.#1.1.136':445
'61.##.29.239':445
'61.##.135.161':445
'61.##.245.183':445
'61.##.160.245':445
'61.##.180.95':139
'61.#1.62.58':139
'61.##.51.161':139
'61.##.197.151':139
'61.##.114.142':139
'61.##.65.214':139
'61.##.159.103':139
'61.##.150.27':139
'61.##.105.222':139
'61.#1.0.41':139
'61.##.178.115':445
'61.##.226.41':445
'61.##.34.167':445
'61.##.143.246':445
'61.##.110.29':445
'61.##.87.110':445
'61.#1.80.14':445
'61.##.197.151':445
'61.#1.14.67':445
'61.##.236.239':445
'61.##.150.105':445
'61.##.144.78':445
'61.##.161.100':445
'61.##.154.63':445
'61.##.207.114':445
'61.##.100.206':445
'61.##.208.20':445
'61.##.64.120':445
'61.##.225.252':445
'61.#1.18.34':445
'61.##.117.16':445
'61.#1.62.69':445
'61.##.173.190':445
'61.#1.0.17':445
'61.##.171.132':445
'61.##.143.214':445
'61.##.208.116':445
'61.##.116.94':445
'61.#1.64.89':445
'61.##.161.42':445
'61.#1.9.152':445
'61.#1.9.191':445
'61.##.60.225':445
'61.##.152.68':445
'61.#1.9.233':445
'61.##.239.236':445
'61.##.125.117':445
'61.##.70.125':445
'61.##.235.206':445
'61.##.26.131':445
'61.##.186.37':445
'61.#1.62.86':445
'61.#1.197.0':139
'61.##.30.207':139
'61.#1.9.201':139
'61.##.45.199':139
'61.##.47.167':139
'61.#1.5.4':139
'61.##.108.133':139
'61.##.164.180':139
'61.#1.49.31':139
'61.##.155.48':139
'61.##.117.116':445
'61.#1.38.22':445
'61.##.231.129':445
'61.#1.53.92':445
'61.#1.3.251':445
'61.##.81.223':445
'61.##.132.251':139
'61.##.223.176':445
'61.##.235.27':445
'61.##.176.140':445
'61.#1.0.17':139
'61.#1.62.69':139
'61.##.143.214':139
'61.##.70.125':139
'61.##.171.132':139
'61.#1.64.89':139
'61.##.208.116':139
'61.#1.9.152':139
'61.##.173.190':139
'61.##.161.42':139
'61.##.152.68':139
'61.#1.9.191':139
'61.##.239.236':139
'61.##.51.199':139
'61.#1.9.233':139
'61.##.235.206':139
'61.##.125.117':139
'61.##.186.37':139
'61.##.60.225':139
'61.##.26.131':139
'61.##.116.94':139
'61.##.138.25':445
'61.##.101.216':445
'61.##.34.161':445
'61.##.114.65':445
'61.#1.87.51':445
'61.#1.2.14':445
'61.##.51.199':445
'61.##.69.188':445
'61.##.255.145':445
'61.##.62.171':445
'61.##.231.129':139
'61.##.117.116':139
'61.#1.3.251':139
'61.#1.62.86':139
'61.#1.53.92':139
'61.##.223.176':139
'61.##.81.223':139
'61.##.176.140':139
'61.#1.38.22':139
'61.##.235.27':139
'61.#1.95.72':445
'61.##.36.242':445
'61.#1.75.2':445
'61.##.179.249':445
'61.##.142.199':445
'61.##.130.162':445
'61.##.128.130':445
'61.##.95.119':445
'61.##.17.234':445
'61.##.71.110':445
'61.#1.72.36':139
'61.#1.9.100':139
'61.#1.55.9':139
'61.##.89.130':139
'61.#1.70.74':139
'61.##.195.209':139
'61.##.252.83':139
'61.##.178.124':139
'61.##.193.163':139
'61.##.38.203':139
'61.##.231.128':445
'61.##.185.136':445
'61.##.120.136':445
'61.##.169.243':445
'61.##.75.215':445
'61.#1.58.76':445
'61.##.195.84':445
'61.##.104.251':445
'61.#1.5.110':445
'61.##.211.66':445
'61.##.65.249':445
'61.##.194.49':445
'61.##.59.173':445
'61.#1.93.54':445
'61.##.102.232':445
'61.##.14.221':445
'61.##.55.229':445
'61.##.215.99':445
'61.##.146.102':445
'61.#1.8.175':445
'61.##.102.193':445
'61.#1.93.54':139
'61.##.194.49':139
'61.##.14.221':139
'61.##.231.128':139
'61.##.102.232':139
'61.##.146.102':139
'61.##.55.229':139
'61.##.102.193':139
'61.##.59.173':139
'61.#1.8.175':139
'61.##.36.242':139
'61.#1.75.2':139
'61.##.142.199':139
'61.##.179.249':139
'61.#1.95.72':139
'61.##.130.162':139
'61.##.128.130':139
'61.##.95.119':139
'61.##.17.234':139
'61.##.71.110':139
'61.##.215.99':139
'61.##.242.117':139
'61.##.192.248':139
'61.#1.36.19':139
'61.#1.31.82':139
'61.##.103.58':139
'61.##.56.221':139
'61.#1.43.57':139
'61.#1.1.41':139
'61.##.217.141':139
'61.##.151.37':139
'61.##.185.136':139
'61.##.120.136':139
'61.##.169.243':139
'61.##.75.215':139
'61.#1.58.76':139
'61.##.195.84':139
'61.##.104.251':139
'61.#1.5.110':139
'61.##.211.66':139
'61.##.65.249':139
'61.##.117.110':139
'61.##.192.247':139
'61.##.158.47':139
'61.#1.235.4':445
'61.##.43.167':445
'61.##.135.161':139
'61.#1.1.136':139
'61.##.160.245':139
'61.##.104.254':139
'61.##.245.183':139
'61.#1.65.15':139
'61.#1.4.65':139
'61.##.90.223':139
'61.##.192.248':9988
'61.##.151.37':9988
'61.#1.65.15':445
'61.#1.4.65':445
'61.##.90.223':445
'61.#1.235.4':139
'61.##.43.167':139
'61.##.29.239':139
'61.##.143.246':139
'61.##.226.41':139
'61.##.87.110':139
'61.##.64.120':139
'61.##.110.29':139
'61.#1.14.67':139
'61.#1.80.14':139
'61.##.150.105':139
'61.##.34.167':139
'61.##.236.239':139
'61.##.154.63':139
'61.##.144.78':139
'61.##.100.206':139
'61.##.178.115':139
'61.##.207.114':139
'61.##.225.252':139
'61.##.208.20':139
'61.##.117.16':139
'61.##.161.100':139
'61.#1.18.34':139
'61.#1.72.36':445
'61.#1.9.100':445
'61.#1.55.9':445
'61.##.89.130':445
'61.#1.70.74':445
'61.##.195.209':445
'61.##.252.83':445
'61.##.178.124':445
'61.##.193.163':445
'61.##.38.203':445
'61.##.242.117':445
'61.##.192.248':445
'61.#1.36.19':445
'61.#1.31.82':445
'61.##.103.58':445
'61.##.56.221':445
'61.#1.43.57':445
'61.#1.1.41':445
'61.##.217.141':445
'61.##.151.37':445
'61.#1.95.72':9988
'61.##.185.136':9988
'61.##.120.136':9988
'61.#1.58.76':9988
'61.##.146.102':9988
'61.##.75.215':9988
'61.##.195.84':9988
'61.##.104.251':9988
'61.#1.5.110':9988
'61.##.211.66':9988
'61.##.65.249':9988
'61.##.95.119':9988
'61.##.130.162':9988
'61.##.142.199':9988
'61.##.179.249':9988
'61.#1.75.2':9988
'61.#1.8.175':9988
'61.##.102.193':9988
'61.##.59.173':9988
'61.##.128.130':9988
'61.##.194.49':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней