Trojan.DownLoader12.28976

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##.255.162':139
'72.##.112.20':139
'72.##.15.172':139
'72.#4.197.1':139
'72.##.21.219':139
'72.#4.1.181':139
'72.#4.3.156':139
'72.##.219.13':139
'72.##.89.104':139
'72.##.14.108':139
'72.#4.2.11':139
'72.##.82.165':139
'72.##.118.107':139
'72.#4.2.215':139
'72.#4.22.82':139
'72.#4.42.58':139
'72.#4.91.60':139
'72.#4.10.91':139
'72.##.44.202':139
'72.##.237.238':139
'72.#4.29.70':139
'72.##.118.107':445
'72.##.237.238':445
'72.##.82.165':445
'72.#4.42.58':445
'72.#4.2.215':445
'72.#4.10.91':445
'72.#4.2.11':445
'72.#4.91.60':445
'72.#4.29.70':445
'72.##.44.202':445
'72.#4.22.82':445
'72.#4.1.170':139
'72.##.252.73':445
'72.#4.94.85':139
'72.##.231.221':139
'72.##.211.204':139
'72.##.222.161':445
'72.##.144.96':445
'72.##.161.213':445
'72.##.62.246':445
'72.##.138.197':445
'72.##.143.72':139
'72.##.114.149':139
'72.##.123.222':139
'72.##.194.223':139
'72.##.221.204':139
'72.#4.4.31':445
'72.##.134.15':445
'72.#4.17.79':445
'72.#4.22.11':445
'72.##.76.221':445
'72.##.89.211':139
'72.##.104.237':139
'72.##.251.113':139
'72.##.90.146':139
'72.##.134.15':139
'72.#4.1.209':139
'72.##.41.173':139
'72.#4.98.64':139
'72.##.81.138':139
'72.##.203.123':139
'72.#4.29.10':139
'72.##.114.149':445
'72.##.252.73':139
'72.##.143.72':445
'72.##.221.204':445
'72.##.123.222':445
'72.##.222.161':139
'72.##.144.96':139
'72.##.161.213':139
'72.##.62.246':139
'72.##.138.197':139
'72.##.194.223':445
'72.##.251.113':445
'72.##.203.123':445
'72.##.104.237':445
'72.#4.1.209':445
'72.##.90.146':445
'72.#4.98.64':445
'72.##.89.211':445
'72.##.41.173':445
'72.#4.29.10':445
'72.##.81.138':445
'72.#4.197.1':445
'72.#4.9.16':139
'72.#4.14.51':139
'72.#4.96.73':139
'72.#4.8.140':139
'72.##.124.198':139
'72.##.197.248':139
'72.##.133.18':139
'72.##.248.97':139
'72.##.30.106':139
'72.##.123.166':139
'72.##.75.137':445
'72.##.166.218':445
'72.##.114.167':445
'72.##.139.37':445
'72.##.60.229':445
'72.##.254.188':445
'72.##.162.229':445
'72.##.209.126':445
'72.##.81.183':445
'72.##.137.185':445
'72.##.103.249':445
'72.##.201.43':139
'72.#4.69.87':139
'72.##.44.127':139
'72.##.12.165':139
'72.##.127.12':139
'72.#4.180.5':139
'72.#4.90.48':139
'72.#4.81.51':139
'72.#4.11.17':139
'72.#4.33.3':139
'72.##.77.192':139
'72.#4.79.18':139
'72.##.194.151':139
'72.##.243.242':139
'72.#4.45.6':139
'72.##.43.121':139
'72.##.136.116':139
'72.##.141.74':139
'72.##.224.17':139
'72.##.148.237':139
'72.#4.5.102':139
'72.##.102.23':139
'72.##.204.101':139
'72.#4.23.33':139
'72.#4.94.85':445
'72.#4.1.170':445
'72.##.51.142':139
'72.##.108.113':139
'72.##.40.202':139
'72.#4.7.204':139
'72.##.238.128':139
'72.##.211.204':445
'72.##.112.20':445
'72.##.89.104':445
'72.##.255.162':445
'72.##.21.219':445
'72.##.15.172':445
'72.#4.3.156':445
'72.##.231.221':445
'72.#4.1.181':445
'72.##.14.108':445
'72.##.219.13':445
'72.##.204.101':445
'72.#4.7.204':445
'72.##.102.23':445
'72.##.75.137':139
'72.#4.23.33':445
'72.##.108.113':445
'72.##.61.218':445
'72.##.51.142':445
'72.##.238.128':445
'72.##.40.202':445
'72.##.209.126':139
'72.##.139.37':139
'72.##.166.218':139
'72.##.254.188':139
'72.##.61.218':139
'72.##.60.229':139
'72.##.81.183':139
'72.##.162.229':139
'72.##.103.249':139
'72.##.114.167':139
'72.##.137.185':139
'72.##.173.47':445
'72.##.20.173':445
'72.##.173.120':445
'72.##.48.155':445
'72.##.168.92':445
'72.#4.69.6':445
'72.#4.4.177':445
'72.##.223.76':445
'72.##.221.38':445
'72.#4.99.77':445
'72.##.63.180':445
'72.##.168.183':139
'72.##.103.49':139
'72.##.186.226':139
'72.##.165.43':139
'72.##.250.62':139
'72.#4.62.80':139
'72.##.139.38':445
'72.##.201.136':139
'72.##.27.171':139
'72.##.197.243':139
'72.##.91.100':445
'72.##.197.143':445
'72.##.62.106':445
'72.##.16.152':445
'72.##.136.246':445
'72.##.25.197':445
'72.##.105.221':445
'72.##.150.118':445
'72.##.218.160':445
'72.##.224.217':445
'72.##.15.188':445
'72.#4.46.62':445
'72.##.185.146':445
'72.##.45.230':445
'72.#4.61.35':445
'72.##.45.206':445
'72.##.31.165':445
'72.#4.34.93':445
'72.##.224.21':445
'72.#4.76.57':445
'72.##.171.126':445
'72.##.45.230':139
'72.#4.46.62':139
'72.##.45.206':139
'72.#4.4.177':139
'72.#4.61.35':139
'72.##.224.21':139
'72.##.31.165':139
'72.##.171.126':139
'72.##.185.146':139
'72.#4.76.57':139
'72.#4.69.6':139
'72.##.168.92':139
'72.##.173.120':139
'72.##.48.155':139
'72.##.63.180':139
'72.##.139.38':139
'72.#4.99.77':139
'72.##.223.76':139
'72.##.221.38':139
'72.##.173.47':139
'72.##.20.173':139
'72.#4.81.26':139
'72.##.39.210':139
'72.##.26.104':139
'72.##.105.221':139
'72.##.229.92':139
'72.##.248.174':139
'72.##.241.202':139
'72.##.242.12':139
'72.#4.61.69':139
'72.#4.35.44':139
'72.##.25.197':139
'72.##.136.246':139
'72.##.62.106':139
'72.##.16.152':139
'72.#4.34.93':139
'72.##.15.188':139
'72.##.224.217':139
'72.##.150.118':139
'72.##.218.160':139
'72.##.91.100':139
'72.##.197.143':139
'72.##.229.92':445
'72.##.96.251':445
'72.##.206.11':445
'72.#4.11.10':445
'72.##.28.212':139
'72.##.11.237':139
'72.##.122.150':445
'72.##.239.160':445
'72.##.164.67':445
'72.##.127.251':445
'72.##.100.157':445
'72.##.148.40':139
'72.##.77.223':139
'72.##.66.174':139
'72.##.237.252':139
'72.##.113.130':139
'72.#4.36.40':139
'72.##.158.121':139
'72.##.229.24':139
'72.##.20.170':139
'72.##.59.231':139
'72.##.43.179':139
'72.##.148.40':445
'72.##.28.212':445
'72.##.229.24':445
'72.##.20.170':445
'72.##.158.121':445
'72.#4.17.79':139
'72.#4.4.31':139
'72.##.76.221':139
'72.##.11.237':445
'72.#4.22.11':139
'72.##.43.179':445
'72.##.52.118':445
'72.##.113.130':445
'72.##.168.51':445
'72.##.113.240':445
'72.#4.72.70':445
'72.##.66.174':445
'72.##.59.231':445
'72.##.77.223':445
'72.#4.36.40':445
'72.##.237.252':445
'72.##.197.243':445
'72.##.201.136':445
'72.##.27.171':445
'72.##.168.183':445
'72.##.103.49':445
'72.##.139.38':9988
'72.##.168.92':9988
'72.##.48.155':9988
'72.#4.62.80':445
'72.##.63.180':9988
'72.##.186.226':445
'72.#4.61.69':445
'72.#4.35.44':445
'72.##.39.210':445
'72.##.26.104':445
'72.#4.81.26':445
'72.##.165.43':445
'72.##.250.62':445
'72.##.241.202':445
'72.##.242.12':445
'72.##.248.174':445
'72.##.164.67':139
'72.##.122.150':139
'72.##.100.157':139
'72.##.206.11':139
'72.##.127.251':139
'72.##.168.51':139
'72.##.52.118':139
'72.#4.72.70':139
'72.##.239.160':139
'72.##.113.240':139
'72.##.96.251':139
'72.##.185.146':9988
'72.#4.76.57':9988
'72.##.223.76':9988
'72.##.20.173':9988
'72.#4.99.77':9988
'72.##.241.202':9988
'72.#4.11.10':139
'72.#4.81.26':9988
'72.##.171.126':9988
'72.#4.61.69':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней