Trojan.DownLoader12.29136

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#6.217.170':139
'22#.#6.67.160':139
'22#.#6.54.37':139
'22#.#6.32.70':139
'22#.#6.37.65':139
'22#.#6.39.56':139
'22#.#6.114.98':139
'22#.#6.58.191':139
'22#.#6.103.26':139
'22#.#6.191.102':139
'22#.#6.21.155':139
'22#.#6.64.165':139
'22#.#6.129.64':139
'22#.#6.164.152':139
'22#.#6.216.18':139
'22#.#6.172.22':139
'22#.#6.125.223':139
'22#.#6.68.189':139
'22#.#6.154.155':139
'22#.#6.47.129':139
'22#.#6.194.173':139
'22#.#6.35.114':139
'22#.#6.68.189':445
'22#.#6.21.155':445
'22#.#6.125.223':445
'22#.#6.194.173':445
'22#.#6.154.155':445
'22#.#6.217.170':445
'22#.#6.67.160':445
'22#.#6.54.37':445
'22#.#6.32.70':445
'22#.#6.37.65':445
'22#.#6.47.129':445
'22#.#6.95.120':139
'22#.#6.96.185':139
'22#.#6.120.56':139
'22#.#6.64.172':139
'22#.#6.133.124':139
'22#.#6.64.165':445
'22#.#6.129.64':445
'22#.#6.164.152':445
'22#.#6.216.18':445
'22#.#6.172.22':445
'22#.#6.3.241':139
'22#.#6.130.175':139
'22#.#6.205.199':139
'22#.#6.107.4':139
'22#.#6.139.108':139
'22#.#6.10.247':445
'22#.#6.49.87':445
'22#.#6.122.14':139
'22#.#6.90.152':139
'22#.#6.73.28':139
'22#.#6.124.64':139
'22#.#6.22.70':139
'22#.#6.72.139':139
'22#.#6.25.95':139
'22#.#6.84.153':139
'22#.#6.24.34':139
'22#.#6.35.87':139
'22#.#6.56.35':139
'22#.#6.93.210':139
'22#.#6.40.88':139
'22#.#6.75.48':139
'22#.#6.210.48':445
'22#.#6.139.108':445
'22#.#6.205.199':445
'22#.#6.107.4':445
'22#.#6.56.35':445
'22#.#6.124.64':445
'22#.#6.73.28':445
'22#.#6.122.14':445
'22#.#6.90.152':445
'22#.#6.3.241':445
'22#.#6.130.175':445
'22#.#6.35.87':445
'22#.#6.24.34':445
'22#.#6.25.95':445
'22#.#6.84.153':445
'22#.#6.207.210':445
'22#.#6.200.199':445
'22#.#6.75.48':445
'22#.#6.93.210':445
'22#.#6.40.88':445
'22#.#6.22.70':445
'22#.#6.72.139':445
'22#.#6.26.236':445
'22#.#6.144.65':445
'22#.#6.185.106':445
'22#.#6.180.73':445
'22#.#6.65.17':445
'22#.#6.51.53':139
'22#.#6.225.28':139
'22#.#6.52.213':139
'22#.#6.227.143':139
'22#.#6.29.163':139
'22#.#6.16.235':445
'22#.#6.116.205':445
'22#.#6.217.53':445
'22#.#6.135.131':445
'22#.#6.27.163':445
'22#.#6.236.27':445
'22#.#6.169.91':445
'22#.#6.225.193':445
'22#.#6.74.186':445
'22#.#6.46.182':445
'22#.#6.240.124':445
'22#.#6.199.133':139
'22#.#6.24.138':139
'22#.#6.70.79':139
'22#.#6.19.37':139
'22#.#6.15.235':139
'22#.#6.52.111':139
'22#.#6.70.166':139
'22#.#6.6.249':139
'22#.#6.96.142':139
'22#.#6.35.40':139
'22#.#6.203.242':139
'22#.#6.179.71':139
'22#.#6.156.42':139
'22#.#6.254.155':139
'22#.#6.238.72':139
'22#.#6.143.241':139
'22#.#6.49.199':139
'22#.#6.6.232':139
'22#.#6.109.139':139
'22#.#6.30.26':139
'22#.26.30.8':139
'22#.#6.208.148':139
'22#.#6.212.213':139
'22#.#6.93.108':139
'22#.#6.126.238':139
'22#.#6.141.188':139
'22#.#6.7.254':139
'22#.#6.27.163':139
'22#.#6.236.27':139
'22#.#6.162.228':139
'22#.#6.151.122':139
'22#.#6.130.165':139
'22#.#6.96.185':445
'22#.#6.39.56':445
'22#.#6.114.98':445
'22#.#6.58.191':445
'22#.#6.103.26':445
'22#.#6.191.102':445
'22#.#6.120.56':445
'22#.#6.95.120':445
'22#.#6.133.124':445
'22#.#6.35.114':445
'22#.#6.64.172':445
'22#.#6.135.131':139
'22#.#6.7.254':445
'22#.#6.126.238':445
'22#.#6.141.188':445
'22#.#6.26.236':139
'22#.#6.144.65':139
'22#.#6.130.165':445
'22#.#6.162.228':445
'22#.#6.151.122':445
'22#.#6.212.213':445
'22#.#6.93.108':445
'22#.#6.185.106':139
'22#.#6.240.124':139
'22#.#6.74.186':139
'22#.#6.46.182':139
'22#.#6.116.205':139
'22#.#6.217.53':139
'22#.#6.180.73':139
'22#.#6.65.17':139
'22#.#6.16.235':139
'22#.#6.169.91':139
'22#.#6.225.193':139
'22#.#6.200.199':139
'22#.#6.15.134':445
'22#.#6.118.7':445
'22#.#6.19.116':445
'22#.#6.28.104':445
'22#.#6.79.115':445
'22#.#6.52.221':445
'22#.#6.18.114':445
'22#.#6.94.186':445
'22#.#6.157.171':445
'22#.26.8.58':445
'22#.#6.177.78':445
'22#.#6.57.165':139
'22#.#6.67.57':139
'22#.#6.52.29':139
'22#.#6.35.247':139
'22#.#6.49.177':139
'22#.#6.23.66':445
'22#.#6.9.210':445
'22#.#6.115.85':139
'22#.#6.223.132':139
'22#.#6.85.156':139
'22#.26.48.2':445
'22#.#6.161.65':445
'22#.#6.42.223':445
'22#.#6.17.191':445
'22#.#6.127.106':445
'22#.#6.59.232':445
'22#.#6.44.85':445
'22#.#6.134.252':445
'22#.#6.123.81':445
'22#.#6.16.82':445
'22#.#6.159.172':445
'22#.#6.54.59':445
'22#.#6.145.201':445
'22#.#6.109.83':445
'22#.#6.49.188':445
'22#.#6.221.22':445
'22#.#6.50.207':445
'22#.26.9.56':445
'22#.#6.117.190':445
'22#.#6.15.226':445
'22#.#6.66.119':445
'22#.#6.212.36':445
'22#.#6.221.22':139
'22#.#6.50.207':139
'22#.26.48.2':139
'22#.#6.52.221':139
'22#.#6.18.114':139
'22#.#6.66.119':139
'22#.#6.212.36':139
'22#.#6.109.83':139
'22#.#6.49.188':139
'22#.#6.145.201':139
'22#.#6.94.186':139
'22#.#6.28.104':139
'22#.#6.79.115':139
'22#.#6.177.78':139
'22#.#6.23.66':139
'22#.#6.9.210':139
'22#.#6.157.171':139
'22#.26.8.58':139
'22#.#6.118.7':139
'22#.#6.19.116':139
'22#.#6.15.134':139
'22#.#6.15.226':139
'22#.#6.150.130':139
'22#.#6.198.75':139
'22#.#6.102.130':139
'22#.#6.44.85':139
'22#.#6.134.252':139
'22#.#6.210.130':139
'22#.#6.246.246':139
'22#.#6.150.197':139
'22#.#6.170.208':139
'22#.#6.226.236':139
'22#.#6.123.81':139
'22#.#6.127.106':139
'22#.#6.59.232':139
'22#.#6.54.59':139
'22#.26.9.56':139
'22#.#6.117.190':139
'22#.#6.16.82':139
'22#.#6.159.172':139
'22#.#6.42.223':139
'22#.#6.17.191':139
'22#.#6.161.65':139
'22#.#6.11.125':445
'22#.#6.141.62':445
'22#.#6.191.20':445
'22#.#6.53.20':139
'22#.#6.232.222':445
'22#.#6.164.191':445
'22#.#6.100.27':445
'22#.#6.97.169':445
'22#.#6.59.247':445
'22#.#6.169.81':445
'22#.#6.143.150':139
'22#.#6.202.78':139
'22#.#6.249.11':139
'22#.#6.29.61':139
'22#.#6.161.161':139
'22#.#6.157.31':139
'22#.#6.97.154':139
'22#.#6.54.78':139
'22#.#6.85.80':139
'22#.#6.177.246':139
'22#.#6.80.178':139
'22#.#6.7.159':445
'22#.#6.54.78':445
'22#.#6.143.150':445
'22#.#6.97.154':445
'22#.#6.80.178':445
'22#.#6.85.80':445
'22#.#6.210.48':139
'22#.#6.207.210':139
'22#.#6.49.87':139
'22#.#6.53.20':445
'22#.#6.10.247':139
'22#.#6.177.246':445
'22#.#6.15.135':445
'22#.#6.172.33':445
'22#.#6.15.120':445
'22#.#6.153.222':445
'22#.#6.91.200':445
'22#.#6.202.78':445
'22#.#6.249.11':445
'22#.#6.29.61':445
'22#.#6.161.161':445
'22#.#6.157.31':445
'22#.#6.85.156':445
'22#.#6.115.85':445
'22#.#6.223.132':445
'22#.#6.57.165':445
'22#.#6.67.57':445
'22#.#6.28.104':9988
'22#.#6.15.134':9988
'22#.#6.9.210':9988
'22#.#6.23.66':9988
'22#.#6.177.78':9988
'22#.#6.52.29':445
'22#.#6.170.208':445
'22#.#6.226.236':445
'22#.#6.198.75':445
'22#.#6.102.130':445
'22#.#6.150.130':445
'22#.#6.35.247':445
'22#.#6.49.177':445
'22#.#6.246.246':445
'22#.#6.150.197':445
'22#.#6.210.130':445
'22#.#6.52.221':9988
'22#.#6.100.27':139
'22#.#6.7.159':139
'22#.#6.164.191':139
'22#.#6.169.81':139
'22#.#6.97.169':139
'22#.#6.15.135':139
'22#.#6.172.33':139
'22#.#6.15.120':139
'22#.#6.153.222':139
'22#.#6.91.200':139
'22#.#6.59.247':139
'22#.26.9.56':9988
'22#.#6.117.190':9988
'22#.#6.109.83':9988
'22#.#6.18.114':9988
'22#.#6.49.188':9988
'22#.#6.11.125':139
'22#.#6.141.62':139
'22#.#6.191.20':139
'22#.#6.161.65':9988
'22#.#6.232.222':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней