Trojan.DownLoader12.29137

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#08.41.132':139
'13#.#08.205.185':139
'13#.#08.21.49':139
'13#.#08.42.174':445
'13#.#08.141.230':445
'13#.#08.131.241':139
'13#.#08.37.81':139
'13#.#08.18.37':139
'13#.#08.16.203':139
'13#.#08.163.201':139
'13#.#08.87.163':139
'13#.#08.189.49':139
'13#.#08.40.36':445
'13#.#08.123.105':445
'13#.#08.165.143':445
'13#.#08.70.144':445
'13#.#08.218.230':445
'13#.#08.196.246':445
'13#.#08.98.251':445
'13#.#08.224.125':445
'13#.#08.211.171':445
'13#.#08.10.57':445
'13#.#08.219.96':445
'13#.#08.36.178':445
'13#.#08.111.110':139
'13#.#08.234.23':139
'13#.#08.120.67':139
'13#.#08.6.56':139
'13#.#08.189.208':139
'13#.#08.3.23':139
'13#.#08.41.132':445
'13#.#08.205.185':445
'13#.#08.21.49':445
'13#.#08.149.0':139
'13#.#08.81.139':139
'13#.#08.131.241':445
'13#.#08.28.100':139
'13#.#08.25.122':139
'13#.#08.49.102':139
'13#.#08.221.100':139
'13#.#08.70.208':139
'13#.#08.135.70':139
'13#.#08.101.98':139
'13#.#08.169.166':139
'13#.#08.183.169':139
'13#.#08.250.116':139
'13#.#08.28.202':139
'13#.#08.59.80':139
'13#.#08.48.211':445
'13#.#08.38.18':445
'13#.#08.34.41':445
'13#.#08.84.151':445
'13#.#08.115.163':445
'13#.#08.96.241':445
'13#.#08.10.112':445
'13#.#08.89.235':139
'13#.#08.185.199':139
'13#.#08.31.150':139
'13#.#08.36.30':445
'13#.#08.37.88':445
'13#.#08.34.112':445
'13#.#08.230.47':445
'13#.#08.188.215':445
'13#.#08.93.197':445
'13#.#08.74.97':445
'13#.#08.227.73':445
'13#.#08.187.227':445
'13#.#08.147.109':445
'13#.#08.15.107':445
'13#.#08.26.23':445
'13#.#08.151.47':445
'13#.#08.118.158':445
'13#.#08.171.151':445
'13#.#08.211.171':139
'13#.#08.42.174':139
'13#.#08.141.230':139
'13#.#08.36.178':139
'13#.#08.98.251':139
'13#.#08.224.125':139
'13#.#08.237.137':445
'13#.#08.108.117':445
'13#.#08.60.37':445
'13#.#08.89.235':445
'13#.#08.185.199':445
'13#.#08.31.150':445
'13#.#08.48.211':139
'13#.#08.70.144':139
'13#.#08.218.230':139
'13#.#08.237.137':139
'13#.#08.108.117':139
'13#.#08.60.37':139
'13#.#08.165.143':139
'13#.#08.10.57':139
'13#.#08.219.96':139
'13#.#08.196.246':139
'13#.#08.40.36':139
'13#.#08.123.105':139
'13#.#08.163.201':445
'13#.#08.52.17':445
'13#.#08.1.52':445
'13#.#08.59.4':445
'13#.#08.139.104':445
'13#.#08.16.244':445
'13#.#08.206.62':445
'13#.#08.9.144':139
'13#.#08.68.136':139
'13#.#08.45.2':139
'13#.#08.68.106':139
'13#.#08.21.207':139
'13#.#08.175.98':139
'13#.#08.202.125':445
'13#.#08.234.245':445
'13#.#08.206.234':445
'13#.#08.132.135':445
'13#.#08.66.20':445
'13#.#08.45.141':445
'13#.#08.151.161':445
'13#.#08.89.26':445
'13#.#08.157.91':445
'13#.#08.116.206':445
'13#.#08.64.208':445
'13#.#08.71.33':445
'13#.#08.61.73':139
'13#.#08.60.196':139
'13#.#08.99.15':139
'13#.#08.16.98':139
'13#.#08.79.6':139
'13#.#08.237.27':139
'13#.#08.42.136':139
'13#.#08.238.249':139
'13#.#08.43.98':139
'13#.#08.16.130':139
'13#.#08.238.123':139
'13#.#08.73.165':139
'13#.#08.225.58':139
'13#.#08.219.4':139
'13#.#08.208.218':139
'13#.#08.129.149':139
'13#.#08.225.129':139
'13#.#08.85.154':139
'13#.#08.60.40':139
'13#.#08.177.10':139
'13#.#08.77.14':139
'13#.#08.74.226':139
'13#.#08.214.162':139
'13#.#08.105.214':139
'13#.#08.192.103':445
'13#.#08.169.166':445
'13#.#08.183.169':445
'13#.#08.6.56':445
'13#.#08.28.202':445
'13#.#08.59.80':445
'13#.#08.101.98':445
'13#.#08.234.23':445
'13#.#08.120.67':445
'13#.#08.149.0':445
'13#.#08.189.208':445
'13#.#08.3.23':445
'13#.#08.111.110':445
'13#.#08.18.37':445
'13#.#08.16.203':445
'13#.#08.221.100':445
'13#.#08.87.163':445
'13#.#08.189.49':445
'13#.#08.37.81':445
'13#.#08.25.122':445
'13#.#08.49.102':445
'13#.#08.250.116':445
'13#.#08.70.208':445
'13#.#08.135.70':445
'13#.#08.28.100':445
'13#.#08.157.91':139
'13#.#08.139.104':139
'13#.#08.16.244':139
'13#.#08.71.33':139
'13#.#08.151.161':139
'13#.#08.89.26':139
'13#.#08.59.4':139
'13#.#08.46.91':445
'13#.#08.1.48':445
'13#.#08.206.62':139
'13#.#08.52.17':139
'13#.#08.1.52':139
'13#.#08.192.103':139
'13#.#08.132.135':139
'13#.#08.66.20':139
'13#.#08.81.139':445
'13#.#08.46.91':139
'13#.#08.1.48':139
'13#.#08.206.234':139
'13#.#08.116.206':139
'13#.#08.64.208':139
'13#.#08.45.141':139
'13#.#08.202.125':139
'13#.#08.234.245':139
'13#.#08.251.82':445
'13#.#08.83.69':445
'13#.#08.145.151':445
'13#.#08.242.199':445
'13#.#08.64.119':445
'13#.#08.142.74':445
'13#.#08.72.231':445
'13#.#08.103.223':445
'13#.#08.73.23':445
'13#.#08.37.149':445
'13#.#08.207.119':445
'13#.#08.231.96':445
'13#.#08.197.242':445
'13#.#08.86.218':445
'13#.#08.19.86':445
'13#.#08.67.207':139
'13#.#08.34.227':139
'13#.#08.129.76':445
'13#.#08.116.25':445
'13#.#08.76.237':445
'13#.#08.94.71':445
'13#.#08.27.186':445
'13#.#08.217.225':445
'13#.#08.236.250':445
'13#.#08.1.91':445
'13#.#08.63.221':445
'13#.#08.119.248':445
'13#.#08.17.243':445
'13#.#08.12.67':445
'13#.#08.86.210':445
'13#.#08.202.37':445
'13#.#08.198.14':445
'13#.#08.248.197':445
'13#.#08.8.124':445
'13#.#08.22.5':445
'13#.#08.115.151':445
'13#.108.6.9':445
'13#.#08.197.231':445
'13#.#08.123.19':445
'13#.#08.75.202':445
'13#.#08.243.75':445
'13#.#08.160.39':445
'13#.#08.55.210':445
'13#.#08.252.55':445
'13#.#08.195.52':445
'13#.#08.193.186':445
'13#.#08.163.84':445
'13#.#08.210.136':445
'13#.#08.159.165':139
'13#.#08.145.151':139
'13#.#08.37.149':139
'13#.#08.207.119':139
'13#.#08.142.74':139
'13#.#08.83.69':139
'13#.#08.251.82':139
'13#.#08.73.23':139
'13#.#08.75.202':139
'13#.#08.243.75':139
'13#.#08.231.96':139
'13#.#08.72.231':139
'13#.#08.103.223':139
'13#.#08.197.242':139
'13#.#08.19.86':139
'13#.#08.217.225':139
'13#.#08.86.218':139
'13#.#08.129.76':139
'13#.#08.27.186':139
'13#.#08.94.71':139
'13#.#08.242.199':139
'13#.#08.64.119':139
'13#.#08.116.25':139
'13#.#08.236.250':139
'13#.#08.76.237':139
'13#.#08.119.248':139
'13#.#08.8.124':139
'13#.#08.22.5':139
'13#.#08.86.210':139
'13#.#08.1.91':139
'13#.#08.63.221':139
'13#.#08.248.197':139
'13#.#08.83.248':139
'13#.#08.96.111':139
'13#.#08.115.151':139
'13#.#08.202.37':139
'13#.#08.198.14':139
'13#.#08.123.19':139
'13#.#08.193.186':139
'13#.#08.163.84':139
'13#.#08.160.39':139
'13#.108.6.9':139
'13#.#08.197.231':139
'13#.#08.195.52':139
'13#.#08.17.243':139
'13#.#08.12.67':139
'13#.#08.210.136':139
'13#.#08.55.210':139
'13#.#08.252.55':139
'13#.#08.83.248':445
'13#.#08.80.63':139
'13#.#08.80.80':139
'13#.#08.27.27':139
'13#.#08.78.112':139
'13#.#08.213.76':139
'13#.#08.63.66':139
'13#.#08.230.47':139
'13#.#08.188.215':139
'13#.#08.93.197':139
'13#.#08.74.97':139
'13#.#08.227.73':139
'13#.#08.187.227':139
'13#.#08.205.212':445
'13#.#08.88.46':445
'13#.#08.5.20':445
'13#.#08.74.22':445
'13#.#08.157.249':445
'13#.#08.57.47':445
'13#.#08.110.137':139
'13#.#08.55.218':139
'13#.#08.80.230':139
'13#.#08.42.96':445
'13#.#08.224.20':445
'13#.#08.137.103':445
'13#.#08.110.137':445
'13#.#08.55.218':445
'13#.#08.80.230':445
'13#.#08.36.30':139
'13#.#08.37.88':139
'13#.#08.34.112':139
'13#.#08.80.63':445
'13#.#08.80.80':445
'13#.#08.27.27':445
'13#.#08.78.112':445
'13#.#08.213.76':445
'13#.#08.63.66':445
'13#.#08.147.109':139
'13#.#08.15.107':139
'13#.#08.26.23':139
'13#.#08.151.47':139
'13#.#08.118.158':139
'13#.#08.171.151':139
'13#.#08.38.18':139
'13#.#08.34.41':139
'13#.#08.84.151':139
'13#.#08.115.163':139
'13#.#08.96.241':139
'13#.#08.10.112':139
'13#.#08.103.210':445
'13#.108.6.9':9988
'13#.#08.123.19':9988
'13#.#08.193.186':9988
'13#.#08.75.202':9988
'13#.#08.243.75':9988
'13#.#08.197.231':9988
'13#.#08.254.93':139
'13#.#08.47.232':139
'13#.#08.39.160':139
'13#.#08.163.84':9988
'13#.#08.252.55':9988
'13#.#08.140.206':139
'13#.#08.34.227':445
'13#.#08.129.76':9988
'13#.#08.86.218':9988
'13#.#08.96.111':445
'13#.#08.159.165':445
'13#.#08.67.207':445
'13#.#08.37.149':9988
'13#.#08.72.231':9988
'13#.#08.103.223':9988
'13#.#08.197.242':9988
'13#.#08.83.69':9988
'13#.#08.145.151':9988
'13#.#08.140.206':445
'13#.#08.254.93':445
'13#.#08.47.232':445
'13#.#08.42.96':139
'13#.#08.224.20':139
'13#.#08.137.103':139
'13#.#08.0.87':445
'13#.#08.67.0':445
'13#.#08.173.66':445
'13#.#08.39.160':445
'13#.#08.32.66':445
'13#.#08.111.118':445
'13#.#08.67.0':139
'13#.#08.173.66':139
'13#.#08.103.210':139
'13#.#08.32.66':139
'13#.#08.111.118':139
'13#.#08.0.87':139
'13#.#08.205.212':139
'13#.#08.88.46':139
'13#.#08.5.20':139
'13#.#08.74.22':139
'13#.#08.157.249':139
'13#.#08.57.47':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней