Trojan.DownLoader12.28985

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#22.35.131':445
'21#.#22.147.188':445
'21#.#22.218.189':445
'21#.#22.1.229':445
'21#.#22.76.10':445
'21#.#22.111.104':445
'21#.#22.27.117':445
'21#.#22.118.100':445
'21#.#22.254.31':445
'21#.#22.100.208':445
'21#.#22.165.250':445
'21#.#22.168.184':445
'21#.#22.117.70':445
'21#.#22.180.29':445
'21#.#22.100.210':445
'21#.#22.84.11':445
'21#.#22.67.198':445
'21#.#22.99.19':445
'21#.#22.94.192':445
'21#.#22.90.171':445
'21#.#22.121.109':445
'21#.#22.69.97':445
'21#.#22.153.206':139
'21#.#22.10.2':139
'21#.#22.69.206':139
'21#.#22.107.227':445
'21#.#22.206.107':445
'21#.#22.192.45':139
'21#.#22.56.192':139
'21#.#22.46.144':139
'21#.#22.40.86':139
'21#.#22.106.2':139
'21#.#22.227.115':445
'21#.#22.115.223':139
'21#.#22.227.115':139
'21#.#22.223.27':139
'21#.#22.95.69':445
'21#.#22.5.13':139
'21#.#22.223.27':445
'21#.#22.115.223':445
'21#.#22.5.13':445
'21#.#22.107.227':139
'21#.#22.206.107':139
'21#.#22.22.76':445
'21#.#22.147.188':139
'21#.#22.254.31':139
'21#.#22.35.131':139
'21#.#22.76.10':139
'21#.#22.218.189':139
'21#.#22.27.117':139
'21#.#22.69.97':139
'21#.#22.111.104':139
'21#.#22.100.208':139
'21#.#22.118.100':139
'21#.#22.1.229':139
'21#.#22.117.70':139
'21#.#22.90.171':139
'21#.#22.168.184':139
'21#.#22.84.11':139
'21#.#22.180.29':139
'21#.#22.99.19':139
'21#.#22.165.250':139
'21#.#22.67.198':139
'21#.#22.121.109':139
'21#.#22.94.192':139
'21#.#22.95.69':139
'21#.#22.145.67':445
'21#.#22.33.160':445
'21#.#22.172.87':445
'21#.#22.74.21':445
'21#.#22.36.199':445
'21#.#22.202.126':445
'21#.#22.19.230':445
'21#.#22.149.87':445
'21#.#22.124.127':445
'21#.#22.87.124':445
'21#.#22.7.230':445
'21#.#22.32.14':445
'21#.#22.140.214':445
'21#.#22.5.17':445
'21#.#22.19.128':445
'21#.#22.201.197':445
'21#.#22.124.140':445
'21#.#22.72.121':445
'21#.222.5.6':445
'21#.#22.149.142':445
'21#.#22.115.212':445
'21#.#22.221.56':139
'21#.#22.220.189':445
'21#.#22.86.81':445
'21#.#22.199.240':445
'21#.#22.145.28':445
'21#.#22.255.172':445
'21#.#22.196.43':445
'21#.#22.179.195':445
'21#.#22.28.155':445
'21#.#22.182.60':445
'21#.#22.159.55':445
'21#.#22.134.88':445
'21#.#22.29.70':445
'21#.#22.137.28':445
'21#.#22.7.76':445
'21#.#22.221.56':445
'21#.#22.210.148':445
'21#.#22.8.45':445
'21#.#22.111.121':445
'21#.#22.37.15':445
'21#.#22.192.136':445
'21#.#22.197.192':445
'21#.#22.27.105':445
'21#.#22.63.143':445
'21#.#22.52.64':139
'21#.#22.143.63':445
'21#.#22.69.22':445
'21#.#22.225.95':445
'21#.#22.145.131':139
'21#.#22.104.11':139
'21#.#22.5.53':139
'21#.#22.107.51':139
'21#.#22.100.101':139
'21#.#22.208.250':445
'21#.#22.95.230':445
'21#.#22.96.96':445
'21#.#22.135.74':445
'21#.#22.170.174':445
'21#.#22.11.93':445
'21#.#22.251.21':445
'21#.#22.96.173':445
'21#.#22.63.136':445
'21#.#22.250.76':445
'21#.#22.14.115':445
'21#.#22.56.192':445
'21#.#22.86.81':139
'21#.#22.182.60':139
'21#.#22.220.189':139
'21#.#22.255.172':139
'21#.#22.199.240':139
'21#.#22.179.195':139
'21#.#22.27.105':139
'21#.#22.196.43':139
'21#.#22.159.55':139
'21#.#22.28.155':139
'21#.#22.145.28':139
'21#.#22.137.28':139
'21#.#22.192.136':139
'21#.#22.29.70':139
'21#.#22.210.148':139
'21#.#22.7.76':139
'21#.#22.111.121':139
'21#.#22.134.88':139
'21#.#22.8.45':139
'21#.#22.197.192':139
'21#.#22.37.15':139
'21#.#22.170.174':139
'21#.#22.69.206':445
'21#.#22.153.206':445
'21#.#22.63.143':139
'21#.#22.225.95':139
'21#.#22.143.63':139
'21#.#22.46.144':445
'21#.#22.192.45':445
'21#.#22.106.2':445
'21#.#22.10.2':445
'21#.#22.40.86':445
'21#.#22.69.22':139
'21#.#22.96.96':139
'21#.#22.250.76':139
'21#.#22.95.230':139
'21#.#22.11.93':139
'21#.#22.135.74':139
'21#.#22.96.173':139
'21#.#22.208.250':139
'21#.#22.251.21':139
'21#.#22.14.115':139
'21#.#22.63.136':139
'21#.#22.100.210':139
'21#.#22.193.139':445
'21#.#22.223.100':445
'21#.#22.4.31':445
'21#.#22.244.92':445
'21#.#22.30.244':445
'21#.#22.22.58':445
'21#.#22.3.22':445
'21#.#22.0.203':445
'21#.#22.59.168':445
'21#.#22.20.133':445
'21#.#22.93.163':445
'21#.#22.142.144':139
'21#.#22.125.25':139
'21#.#22.184.110':139
'21#.#22.65.132':139
'21#.#22.147.65':139
'21#.#22.42.48':445
'21#.#22.163.79':445
'21#.#22.75.128':445
'21#.#22.218.202':139
'21#.#22.138.59':139
'21#.#22.89.34':445
'21#.#22.70.246':445
'21#.#22.147.120':445
'21#.#22.132.163':445
'21#.#22.95.223':445
'21#.#22.45.66':445
'21#.#22.253.70':445
'21#.#22.253.112':445
'21#.#22.131.8':445
'21#.#22.210.119':445
'21#.#22.4.172':445
'21#.#22.127.140':445
'21#.#22.26.72':445
'21#.#22.32.173':445
'21#.#22.55.228':445
'21#.#22.113.110':445
'21#.#22.73.127':445
'21#.#22.74.33':445
'21#.#22.203.209':445
'21#.#22.39.98':445
'21#.#22.41.32':445
'21#.#22.189.116':445
'21#.#22.132.128':139
'21#.#22.89.34':139
'21#.#22.113.110':139
'21#.#22.3.22':139
'21#.#22.0.203':139
'21#.#22.22.58':139
'21#.#22.32.173':139
'21#.#22.41.32':139
'21#.#22.26.72':139
'21#.#22.73.127':139
'21#.#22.55.228':139
'21#.#22.20.133':139
'21#.#22.93.163':139
'21#.#22.244.92':139
'21#.#22.163.79':139
'21#.#22.42.48':139
'21#.#22.75.128':139
'21#.#22.223.100':139
'21#.#22.59.168':139
'21#.#22.193.139':139
'21#.#22.30.244':139
'21#.#22.4.31':139
'21#.#22.189.116':139
'21#.#22.248.83':139
'21#.#22.49.222':139
'21#.#22.253.112':139
'21#.#22.131.8':139
'21#.#22.253.70':139
'21#.#22.241.5':139
'21#.#22.146.128':139
'21#.#22.44.194':139
'21#.#22.52.95':139
'21#.#22.218.39':139
'21#.#22.4.172':139
'21#.#22.127.140':139
'21#.#22.95.223':139
'21#.#22.203.209':139
'21#.#22.39.98':139
'21#.#22.74.33':139
'21#.#22.147.120':139
'21#.#22.210.119':139
'21#.#22.70.246':139
'21#.#22.45.66':139
'21#.#22.132.163':139
'21#.#22.248.83':445
'21#.#22.249.112':139
'21#.#22.128.25':445
'21#.#22.29.37':139
'21#.#22.72.187':139
'21#.#22.68.204':139
'21#.#22.29.37':445
'21#.#22.249.112':445
'21#.#22.68.204':445
'21#.#22.124.68':445
'21#.#22.72.187':445
'21#.#22.124.68':139
'21#.#22.64.80':445
'21#.#22.184.63':445
'21#.#22.69.6':445
'21#.#22.179.76':445
'21#.#22.70.177':445
'21#.#22.26.23':445
'21#.#22.128.25':139
'21#.#22.119.184':445
'21#.#22.175.65':445
'21#.#22.134.171':445
'21#.#22.19.128':139
'21#.#22.33.160':139
'21#.#22.124.127':139
'21#.#22.145.67':139
'21#.#22.36.199':139
'21#.#22.172.87':139
'21#.#22.19.230':139
'21#.#22.22.76':139
'21#.#22.202.126':139
'21#.#22.87.124':139
'21#.#22.149.87':139
'21#.#22.74.21':139
'21#.#22.140.214':139
'21#.#22.149.142':139
'21#.#22.32.14':139
'21#.#22.201.197':139
'21#.#22.5.17':139
'21#.#22.72.121':139
'21#.#22.7.230':139
'21#.#22.124.140':139
'21#.#22.115.212':139
'21#.222.5.6':139
'21#.#22.112.125':445
'21#.#22.189.116':9988
'21#.#22.193.139':9988
'21#.#22.138.59':445
'21#.#22.125.25':445
'21#.#22.218.202':445
'21#.#22.32.173':9988
'21#.#22.20.133':9988
'21#.#22.42.48':9988
'21#.#22.93.163':9988
'21#.#22.223.100':9988
'21#.#22.142.144':445
'21#.#22.44.194':445
'21#.#22.241.5':445
'21#.#22.218.39':445
'21#.#22.49.222':445
'21#.#22.52.95':445
'21#.#22.147.65':445
'21#.#22.184.110':445
'21#.#22.65.132':445
'21#.#22.146.128':445
'21#.#22.132.128':445
'21#.#22.73.127':9988
'21#.#22.64.80':139
'21#.#22.184.63':139
'21#.#22.69.6':139
'21#.#22.179.76':139
'21#.#22.70.177':139
'21#.#22.26.23':139
'21#.#22.235.222':445
'21#.#22.119.184':139
'21#.#22.175.65':139
'21#.#22.134.171':139
'21#.#22.112.125':139
'21#.#22.41.32':9988
'21#.#22.127.140':9988
'21#.#22.75.128':9988
'21#.#22.3.22':9988
'21#.#22.89.34':9988
'21#.#22.163.79':9988
'21#.#22.235.222':139
'21#.#22.26.72':9988
'21#.#22.22.58':9988
'21#.#22.4.31':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней