Trojan.DownLoader12.28992

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14#.#18.126.220':139
'14#.#18.214.179':139
'14#.#18.11.83':139
'14#.#18.1.44':139
'14#.#18.53.39':139
'14#.#18.204.193':139
'14#.#18.170.18':139
'14#.#18.219.150':139
'14#.#18.193.205':139
'14#.#18.0.194':139
'14#.#18.67.20':139
'14#.#18.90.233':139
'14#.#18.141.91':139
'14#.#18.104.123':139
'14#.#18.204.104':139
'14#.#18.3.38':139
'14#.#18.208.57':139
'14#.#18.69.98':139
'14#.#18.49.127':139
'14#.#18.10.136':139
'14#.#18.1.217':139
'14#.#18.67.20':445
'14#.#18.90.233':445
'14#.#18.141.91':445
'14#.#18.104.123':445
'14#.#18.204.104':445
'14#.#18.3.38':445
'14#.#18.208.57':445
'14#.#18.69.98':445
'14#.#18.49.127':445
'14#.#18.10.136':445
'14#.#18.141.79':445
'14#.#18.204.192':445
'14#.#18.17.140':445
'14#.#18.134.116':139
'14#.#18.55.121':445
'14#.#18.123.225':445
'14#.#18.54.218':445
'14#.#18.73.208':445
'14#.#18.96.131':445
'14#.#18.127.137':445
'14#.#18.54.218':139
'14#.#18.21.71':445
'14#.#18.149.83':445
'14#.#18.22.20':139
'14#.#18.236.91':139
'14#.#18.83.108':139
'14#.#18.171.49':445
'14#.#18.233.211':445
'14#.#18.50.31':445
'14#.#18.209.146':445
'14#.#18.30.210':445
'14#.#18.55.205':139
'14#.#18.50.78':139
'14#.#18.219.205':139
'14#.#18.0.238':139
'14#.#18.50.51':139
'14#.#18.80.147':139
'14#.#18.39.203':139
'14#.#18.1.21':139
'14#.#18.8.212':139
'14#.#18.234.160':139
'14#.#18.0.238':445
'14#.#18.17.140':139
'14#.#18.141.79':139
'14#.#18.55.121':139
'14#.#18.83.108':445
'14#.#18.22.20':445
'14#.#18.73.208':139
'14#.#18.123.225':139
'14#.#18.127.137':139
'14#.#18.204.192':139
'14#.#18.96.131':139
'14#.#18.50.78':445
'14#.#18.8.212':445
'14#.#18.55.205':445
'14#.#18.50.51':445
'14#.#18.219.205':445
'14#.#18.39.203':445
'14#.#18.236.91':445
'14#.#18.80.147':445
'14#.#18.234.160':445
'14#.#18.1.21':445
'14#.#18.157.64':139
'14#.#18.154.70':139
'14#.#18.217.161':139
'14#.#18.156.179':139
'14#.#18.251.70':139
'14#.#18.66.248':139
'14#.#18.125.37':139
'14#.#18.230.32':139
'14#.#18.37.78':139
'14#.#18.171.159':139
'14#.#18.70.97':445
'14#.#18.117.168':445
'14#.#18.89.111':445
'14#.#18.165.81':445
'14#.#18.69.41':445
'14#.#18.24.33':445
'14#.#18.87.18':445
'14#.#18.183.166':445
'14#.#18.193.229':445
'14#.#18.187.35':445
'14#.#18.121.217':139
'14#.#18.57.20':139
'14#.#18.163.208':139
'14#.#18.180.163':139
'14#.#18.46.163':139
'14#.#18.164.46':139
'14#.#18.231.22':139
'14#.#18.18.203':139
'14#.#18.96.161':139
'14#.#18.152.182':139
'14#.#18.160.177':139
'14#.#18.83.169':139
'14#.#18.230.19':139
'14#.#18.47.249':139
'14#.#18.205.233':139
'14#.#18.231.4':139
'14#.#18.28.30':139
'14#.#18.110.231':139
'14#.#18.218.132':139
'14#.#18.196.231':139
'14#.#18.54.163':139
'14#.#18.22.229':445
'14#.#18.45.38':139
'14#.#18.84.16':139
'14#.#18.74.89':139
'14#.#18.1.217':445
'14#.#18.134.116':445
'14#.#18.37.194':139
'14#.#18.79.175':139
'14#.#18.71.70':139
'14#.#18.13.245':139
'14#.#18.228.224':139
'14#.#18.126.220':445
'14#.#18.214.179':445
'14#.#18.11.83':445
'14#.#18.1.44':445
'14#.#18.53.39':445
'14#.#18.204.193':445
'14#.#18.170.18':445
'14#.#18.219.150':445
'14#.#18.193.205':445
'14#.#18.0.194':445
'14#.#18.55.178':139
'14#.#18.84.16':445
'14#.#18.13.245':445
'14#.#18.45.38':445
'14#.#18.87.18':139
'14#.#18.74.89':445
'14#.#18.79.175':445
'14#.#18.55.178':445
'14#.#18.37.194':445
'14#.#18.228.224':445
'14#.#18.71.70':445
'14#.#18.89.111':139
'14#.#18.70.97':139
'14#.#18.69.41':139
'14#.#18.22.229':139
'14#.#18.165.81':139
'14#.#18.183.166':139
'14#.#18.24.33':139
'14#.#18.187.35':139
'14#.#18.117.168':139
'14#.#18.193.229':139
'14#.#18.185.209':445
'14#.#18.86.176':445
'14#.#18.182.111':445
'14#.#18.181.56':445
'14#.#18.71.181':445
'14#.#18.113.156':445
'14#.#18.56.159':445
'14#.#18.106.7':445
'14#.#18.32.136':445
'14#.#18.112.188':445
'14#.#18.176.147':139
'14#.#18.12.145':139
'14#.#18.243.176':139
'14#.#18.52.7':139
'14#.#18.196.103':139
'14#.#18.44.86':139
'14#.#18.54.73':445
'14#.#18.197.29':139
'14#.#18.230.109':139
'14#.#18.9.58':139
'14#.#18.116.153':445
'14#.#18.91.93':445
'14#.#18.54.169':445
'14#.#18.163.119':445
'14#.#18.167.42':445
'14#.#18.119.43':445
'14#.#18.6.54':445
'14#.#18.26.202':445
'14#.#18.69.45':445
'14#.#18.34.93':445
'14#.#18.253.55':445
'14#.#18.8.149':445
'14#.#18.117.174':445
'14#.#18.96.20':445
'14#.#18.96.116':445
'14#.#18.8.67':445
'14#.#18.64.215':445
'14#.#18.155.98':445
'14#.#18.141.84':445
'14#.#18.43.196':445
'14#.#18.242.102':445
'14#.#18.85.76':139
'14#.#18.8.67':139
'14#.#18.96.20':139
'14#.#18.96.116':139
'14#.#18.56.159':139
'14#.#18.116.153':139
'14#.#18.242.102':139
'14#.#18.141.84':139
'14#.#18.43.196':139
'14#.#18.8.149':139
'14#.#18.117.174':139
'14#.#18.182.111':139
'14#.#18.185.209':139
'14#.#18.71.181':139
'14#.#18.54.73':139
'14#.#18.181.56':139
'14#.#18.106.7':139
'14#.#18.113.156':139
'14#.#18.112.188':139
'14#.#18.86.176':139
'14#.#18.32.136':139
'14#.#18.64.215':139
'14#.#18.103.35':139
'14#.#18.168.183':139
'14#.#18.98.74':139
'14#.#18.26.202':139
'14#.#18.31.13':139
'14#.#18.177.2':139
'14#.#18.196.140':139
'14#.#18.2.163':139
'14#.#18.37.147':139
'14#.#18.95.84':139
'14#.#18.163.119':139
'14#.#18.91.93':139
'14#.#18.119.43':139
'14#.#18.155.98':139
'14#.#18.167.42':139
'14#.#18.69.45':139
'14#.#18.6.54':139
'14#.#18.253.55':139
'14#.#18.54.169':139
'14#.#18.34.93':139
'14#.218.4.8':445
'14#.#18.83.165':445
'14#.#18.218.11':139
'14#.#18.252.147':139
'14#.#18.208.251':139
'14#.#18.76.89':445
'14#.#18.57.113':445
'14#.#18.180.223':445
'14#.#18.28.93':445
'14#.#18.87.89':445
'14#.#18.14.215':139
'14#.#18.156.14':139
'14#.#18.214.128':139
'14#.#18.93.170':139
'14#.#18.172.1':139
'14#.#18.102.168':139
'14#.#18.114.31':139
'14#.#18.167.244':139
'14#.#18.192.156':139
'14#.#18.90.142':139
'14#.#18.164.44':445
'14#.#18.21.71':139
'14#.#18.149.83':139
'14#.#18.218.11':445
'14#.#18.252.147':445
'14#.#18.208.251':445
'14#.#18.171.49':139
'14#.#18.233.211':139
'14#.#18.50.31':139
'14#.#18.209.146':139
'14#.#18.30.210':139
'14#.#18.14.215':445
'14#.#18.156.14':445
'14#.#18.214.128':445
'14#.#18.93.170':445
'14#.#18.172.1':445
'14#.#18.102.168':445
'14#.#18.114.31':445
'14#.#18.167.244':445
'14#.#18.192.156':445
'14#.#18.90.142':445
'14#.#18.164.44':139
'14#.#18.176.147':445
'14#.#18.12.145':445
'14#.#18.243.176':445
'14#.#18.52.7':445
'14#.#18.196.103':445
'14#.#18.44.86':445
'14#.#18.182.111':9988
'14#.#18.197.29':445
'14#.#18.230.109':445
'14#.#18.9.58':445
'14#.#18.168.183':445
'14#.#18.37.147':445
'14#.#18.103.35':445
'14#.#18.31.13':445
'14#.#18.98.74':445
'14#.#18.196.140':445
'14#.#18.85.76':445
'14#.#18.177.2':445
'14#.#18.95.84':445
'14#.#18.2.163':445
'14#.#18.181.56':9988
'14#.218.4.8':139
'14#.#18.83.165':139
'14#.#18.2.163':9988
'14#.#18.103.35':9988
'14#.#18.168.183':9988
'14#.#18.76.89':139
'14#.#18.57.113':139
'14#.#18.180.223':139
'14#.#18.28.93':139
'14#.#18.87.89':139
'14#.#18.113.156':9988
'14#.#18.56.159':9988
'14#.#18.106.7':9988
'14#.#18.112.188':9988
'14#.#18.86.176':9988
'14#.#18.253.55':9988
'14#.#18.6.54':9988
'14#.#18.119.43':9988
'14#.#18.141.84':9988
'14#.#18.167.42':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней