Trojan.DownLoader12.29162

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#0.131.180':139
'21#.#0.122.206':139
'21#.#0.252.195':139
'21#.#0.178.72':139
'21#.#0.198.148':139
'21#.#0.134.36':139
'21#.#0.103.84':445
'21#.#0.143.201':139
'21#.#0.195.122':139
'21#.#0.201.194':139
'21#.#0.232.144':139
'21#.#0.100.162':139
'21#.#0.23.131':139
'21#.30.4.66':139
'21#.#0.193.199':139
'21#.#0.234.28':139
'21#.#0.15.27':139
'21#.#0.28.236':139
'21#.#0.139.41':139
'21#.#0.236.49':139
'21#.#0.23.131':445
'21#.#0.232.144':445
'21#.#0.193.199':445
'21#.#0.206.204':445
'21#.30.4.66':445
'21#.#0.28.236':445
'21#.#0.234.28':445
'21#.#0.236.49':445
'21#.#0.100.162':445
'21#.#0.139.41':445
'21#.#0.41.93':445
'21#.#0.189.179':445
'21#.#0.36.138':445
'21#.#0.126.242':445
'21#.#0.111.120':445
'21#.#0.22.136':445
'21#.#0.78.23':445
'21#.#0.73.244':445
'21#.#0.117.189':445
'21#.#0.131.92':445
'21#.#0.218.57':445
'21#.#0.212.43':445
'21#.#0.68.224':445
'21#.#0.25.115':445
'21#.#0.104.127':445
'21#.#0.248.57':445
'21#.#0.137.212':445
'21#.#0.238.41':445
'21#.#0.131.211':445
'21#.#0.41.132':445
'21#.#0.88.21':139
'21#.#0.71.12':139
'21#.#0.184.160':139
'21#.#0.209.137':139
'21#.#0.97.209':139
'21#.#0.13.215':445
'21#.#0.17.55':445
'21#.#0.183.177':139
'21#.#0.90.98':139
'21#.#0.61.85':139
'21#.#0.189.179':139
'21#.#0.117.189':139
'21#.#0.41.93':139
'21#.#0.111.120':139
'21#.#0.36.138':139
'21#.#0.78.23':139
'21#.#0.206.204':139
'21#.#0.22.136':139
'21#.#0.131.92':139
'21#.#0.73.244':139
'21#.#0.88.21':445
'21#.#0.71.12':445
'21#.#0.184.160':445
'21#.#0.209.137':445
'21#.#0.97.209':445
'21#.#0.103.84':139
'21#.#0.126.242':139
'21#.#0.183.177':445
'21#.#0.90.98':445
'21#.#0.61.85':445
'21#.#0.15.27':445
'21#.#0.84.196':139
'21#.#0.5.124':139
'21#.#0.196.6':139
'21#.#0.16.195':139
'21#.#0.6.137':139
'21#.#0.116.166':139
'21#.#0.255.186':139
'21#.#0.171.237':139
'21#.#0.222.188':139
'21#.#0.224.160':139
'21#.#0.165.129':445
'21#.#0.194.180':445
'21#.#0.177.230':445
'21#.#0.130.78':445
'21#.#0.99.28':445
'21#.#0.199.33':445
'21#.#0.232.251':139
'21#.#0.60.181':445
'21#.#0.198.29':445
'21#.#0.217.56':445
'21#.#0.35.31':139
'21#.#0.223.235':139
'21#.#0.25.125':139
'21#.#0.173.74':139
'21#.#0.89.254':139
'21#.#0.190.183':139
'21#.#0.105.96':139
'21#.#0.65.242':139
'21#.#0.158.172':139
'21#.#0.15.138':139
'21#.#0.30.14':139
'21#.#0.160.241':139
'21#.#0.14.81':139
'21#.#0.129.230':139
'21#.#0.81.212':139
'21#.#0.82.189':139
'21#.#0.56.141':139
'21#.30.0.80':139
'21#.#0.58.190':139
'21#.#0.136.59':139
'21#.30.93.3':139
'21#.#0.4.247':139
'21#.#0.105.116':139
'21#.#0.85.94':139
'21#.#0.190.81':139
'21#.#0.206.109':139
'21#.#0.99.28':139
'21#.#0.43.20':139
'21#.#0.177.230':139
'21#.#0.146.58':139
'21#.#0.131.180':445
'21#.#0.122.206':445
'21#.#0.252.195':445
'21#.#0.178.72':445
'21#.#0.198.148':445
'21#.#0.134.36':445
'21#.#0.113.215':139
'21#.#0.143.201':445
'21#.#0.195.122':445
'21#.#0.201.194':445
'21#.30.93.3':445
'21#.#0.4.247':445
'21#.#0.105.116':445
'21#.#0.85.94':445
'21#.#0.190.81':445
'21#.#0.43.20':445
'21#.#0.146.58':445
'21#.#0.111.117':445
'21#.#0.78.111':445
'21#.#0.206.109':445
'21#.#0.165.129':139
'21#.#0.194.180':139
'21#.#0.130.78':139
'21#.#0.111.117':139
'21#.#0.78.111':139
'21#.#0.199.33':139
'21#.#0.113.215':445
'21#.#0.60.181':139
'21#.#0.198.29':139
'21#.#0.217.56':139
'21#.#0.137.212':139
'21#.#0.52.106':445
'21#.#0.28.113':445
'21#.#0.36.29':445
'21#.#0.149.77':139
'21#.#0.76.24':445
'21#.#0.151.31':445
'21#.#0.69.182':445
'21#.#0.229.134':445
'21#.#0.209.224':445
'21#.#0.225.35':445
'21#.#0.145.196':139
'21#.#0.126.203':139
'21#.#0.196.206':139
'21#.#0.224.70':139
'21#.#0.27.146':139
'21#.#0.172.78':139
'21#.#0.43.87':139
'21#.#0.79.148':139
'21#.#0.69.64':139
'21#.#0.34.91':139
'21#.#0.102.75':445
'21#.#0.198.76':445
'21#.#0.54.193':445
'21#.#0.131.176':445
'21#.#0.223.168':445
'21#.#0.205.42':445
'21#.#0.154.117':445
'21#.#0.102.23':445
'21#.#0.199.86':445
'21#.#0.28.62':445
'21#.#0.53.113':445
'21#.30.1.54':445
'21#.#0.173.165':445
'21#.#0.158.203':445
'21#.#0.57.32':445
'21#.#0.79.168':445
'21#.#0.126.84':445
'21#.#0.91.173':445
'21#.#0.13.18':445
'21#.#0.17.148':445
'21#.30.1.54':139
'21#.#0.13.18':139
'21#.#0.53.113':139
'21#.#0.57.32':139
'21#.#0.173.165':139
'21#.#0.126.84':139
'21#.#0.131.176':139
'21#.#0.79.168':139
'21#.#0.17.148':139
'21#.#0.91.173':139
'21#.#0.76.24':139
'21#.#0.225.35':139
'21#.#0.36.29':139
'21#.#0.28.113':139
'21#.#0.52.106':139
'21#.#0.69.182':139
'21#.#0.158.203':139
'21#.#0.151.31':139
'21#.#0.229.134':139
'21#.#0.209.224':139
'21#.#0.38.117':139
'21#.#0.40.203':139
'21#.30.35.5':139
'21#.#0.122.241':139
'21#.#0.27.123':139
'21#.#0.101.14':139
'21#.#0.61.101':139
'21#.#0.14.40':139
'21#.#0.14.155':139
'21#.#0.233.194':139
'21#.#0.198.76':139
'21#.#0.199.86':139
'21#.#0.102.75':139
'21#.#0.223.168':139
'21#.#0.54.193':139
'21#.#0.154.117':139
'21#.#0.217.110':139
'21#.#0.205.42':139
'21#.#0.28.62':139
'21#.#0.102.23':139
'21#.#0.217.110':445
'21#.#0.214.149':139
'21#.#0.2.253':445
'21#.#0.6.158':139
'21#.#0.62.178':139
'21#.#0.15.84':139
'21#.#0.62.141':445
'21#.#0.131.121':445
'21#.#0.39.210':445
'21#.30.57.3':445
'21#.#0.210.57':445
'21#.#0.62.141':139
'21#.#0.131.121':139
'21#.#0.39.210':139
'21#.30.57.3':139
'21#.#0.210.57':139
'21#.#0.59.17':139
'21#.#0.207.250':139
'21#.#0.128.115':139
'21#.#0.101.216':139
'21#.#0.100.60':139
'21#.#0.68.224':139
'21#.#0.218.57':139
'21#.#0.104.127':139
'21#.#0.17.55':139
'21#.#0.25.115':139
'21#.#0.238.41':139
'21#.#0.248.57':139
'21#.#0.41.132':139
'21#.#0.212.43':139
'21#.#0.131.211':139
'21#.#0.59.17':445
'21#.#0.207.250':445
'21#.#0.128.115':445
'21#.#0.101.216':445
'21#.#0.100.60':445
'21#.#0.214.149':445
'21#.#0.13.215':139
'21#.#0.6.158':445
'21#.#0.62.178':445
'21#.#0.15.84':445
'21#.#0.145.196':445
'21#.#0.126.203':445
'21#.#0.196.206':445
'21#.#0.224.70':445
'21#.#0.27.146':445
'21#.#0.172.78':445
'21#.#0.43.87':445
'21#.#0.79.148':445
'21#.#0.69.64':445
'21#.#0.34.91':445
'21#.#0.38.117':445
'21#.#0.40.203':445
'21#.30.35.5':445
'21#.#0.122.241':445
'21#.#0.27.123':445
'21#.#0.101.14':445
'21#.#0.61.101':445
'21#.#0.14.40':445
'21#.#0.14.155':445
'21#.#0.233.194':445
'21#.30.35.5':9988
'21#.#0.40.203':9988
'21#.#0.122.241':9988
'21#.#0.154.117':9988
'21#.#0.27.123':9988
'21#.#0.61.101':9988
'21#.#0.2.253':139
'21#.#0.14.40':9988
'21#.#0.14.155':9988
'21#.#0.233.194':9988
'21#.#0.79.168':9988
'21#.#0.131.176':9988
'21#.#0.91.173':9988
'21#.#0.149.77':445
'21#.#0.151.31':9988
'21#.#0.198.76':9988
'21#.#0.205.42':9988
'21#.#0.102.75':9988
'21#.#0.223.168':9988
'21#.#0.54.193':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней