Trojan.Packed.30126

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#30.119.98':445
'21#.#30.162.118':445
'21#.#30.71.207':445
'21#.#30.164.144':445
'21#.#30.51.222':445
'21#.#30.197.208':445
'21#.#30.140.104':445
'21#.#30.69.216':445
'21#.#30.8.151':445
'21#.#30.204.20':445
'21#.#30.210.194':445
'21#.#30.58.215':445
'21#.#30.105.242':445
'21#.#30.86.230':445
'21#.#30.139.249':445
'21#.#30.230.228':445
'21#.#30.32.242':445
'21#.#30.155.32':445
'21#.#30.229.155':445
'21#.#30.105.204':445
'21#.#30.187.123':445
'21#.#30.86.27':445
'21#.#30.196.211':445
'21#.#30.4.130':445
'21#.#30.181.84':445
'21#.#30.94.184':445
'21#.#30.188.39':445
'21#.#30.15.242':139
'21#.#30.205.29':139
'21#.#30.14.216':445
'21#.#30.147.203':445
'21#.#30.106.54':445
'21#.#30.91.230':139
'21#.#30.193.75':139
'21#.#30.29.215':139
'21#.#30.135.125':139
'21#.#30.54.205':139
'21#.#30.100.51':139
'21#.#30.7.112':445
'21#.#30.8.84':445
'21#.#30.215.225':445
'21#.#30.150.215':445
'21#.#30.47.227':445
'21#.#30.141.47':445
'21#.#30.200.17':445
'21#.#30.101.21':445
'21#.#30.245.188':445
'21#.#30.66.183':445
'21#.#30.146.192':445
'21#.#30.130.55':445
'21#.#30.223.249':445
'21#.#30.181.84':139
'21#.#30.105.204':139
'21#.#30.187.123':139
'21#.#30.230.228':139
'21#.#30.196.211':139
'21#.#30.4.130':139
'21#.#30.51.222':139
'21#.#30.197.208':139
'21#.#30.119.98':139
'21#.#30.86.27':139
'21#.#30.105.242':139
'21#.#30.164.144':139
'21#.#30.139.249':139
'21#.#30.15.26':445
'21#.#30.117.74':445
'21#.#30.240.83':445
'21#.#30.114.243':445
'21#.#30.2.197':445
'21#.#30.168.134':445
'21#.#30.155.32':139
'21#.#30.229.155':139
'21#.#30.86.230':139
'21#.#30.44.217':445
'21#.#30.242.14':445
'21#.#30.32.242':139
'21#.#30.162.118':139
'21#.#30.223.249':139
'21#.#30.101.21':139
'21#.#30.245.188':139
'21#.#30.150.215':139
'21#.#30.146.192':139
'21#.#30.130.55':139
'21#.#30.147.203':139
'21#.#30.106.54':139
'21#.#30.188.39':139
'21#.#30.66.183':139
'21#.#30.7.112':139
'21#.#30.14.216':139
'21#.#30.215.225':139
'21#.#30.58.215':139
'21#.#30.140.104':139
'21#.#30.69.216':139
'21#.#30.71.207':139
'21#.#30.204.20':139
'21#.#30.210.194':139
'21#.#30.141.47':139
'21#.#30.200.17':139
'21#.#30.8.84':139
'21#.#30.8.151':139
'21#.#30.94.184':139
'21#.#30.47.227':139
'21#.#30.108.91':445
'21#.#30.171.158':445
'21#.#30.104.178':445
'21#.#30.185.160':445
'21#.#30.27.169':445
'21#.#30.113.147':445
'21#.#30.188.147':445
'21#.#30.233.188':445
'21#.#30.58.19':445
'21#.#30.88.111':445
'21#.#30.178.126':445
'21#.#30.175.96':445
'21#.#30.117.55':445
'21#.#30.7.181':445
'21#.#30.149.17':445
'21#.#30.19.77':445
'21#.#30.110.30':445
'21#.#30.129.110':445
'21#.#30.255.129':445
'21#.#30.82.254':445
'21#.#30.242.132':445
'21#.#30.55.242':445
'21#.#30.95.190':445
'21#.#30.139.118':445
'21#.#30.57.244':445
'21#.#30.69.123':445
'21#.#30.23.36':445
'21#.#30.164.195':139
'21#.#30.45.227':139
'21#.#30.89.76':445
'21#.#30.250.88':445
'21#.#30.156.25':445
'21#.#30.13.58':139
'21#.#30.128.251':139
'21#.#30.31.110':139
'21#.#30.83.46':139
'21#.#30.17.252':139
'21#.#30.242.64':139
'21#.#30.50.139':445
'21#.#30.129.114':445
'21#.#30.59.232':445
'21#.#30.153.121':445
'21#.#30.29.95':445
'21#.#30.147.237':445
'21#.#30.64.148':445
'21#.#30.237.27':445
'21#.#30.14.94':445
'21#.#30.109.244':445
'21#.#30.111.83':445
'21#.#30.135.25':445
'21#.#30.77.209':445
'21#.#30.57.244':139
'21#.#30.82.254':139
'21#.#30.242.132':139
'21#.#30.19.77':139
'21#.#30.95.190':139
'21#.#30.139.118':139
'21#.#30.27.169':139
'21#.#30.113.147':139
'21#.#30.108.91':139
'21#.#30.55.242':139
'21#.#30.117.55':139
'21#.#30.185.160':139
'21#.#30.149.17':139
'21#.#30.54.205':445
'21#.#30.100.51':445
'21#.#30.91.230':445
'21#.#30.15.242':445
'21#.#30.205.29':445
'21#.#30.135.125':445
'21#.#30.129.110':139
'21#.#30.255.129':139
'21#.#30.7.181':139
'21#.#30.193.75':445
'21#.#30.29.215':445
'21#.#30.110.30':139
'21#.#30.171.158':139
'21#.#30.77.209':139
'21#.#30.237.27':139
'21#.#30.14.94':139
'21#.#30.153.121':139
'21#.#30.111.83':139
'21#.#30.135.25':139
'21#.#30.250.88':139
'21#.#30.156.25':139
'21#.#30.23.36':139
'21#.#30.109.244':139
'21#.#30.50.139':139
'21#.#30.89.76':139
'21#.#30.59.232':139
'21#.#30.175.96':139
'21#.#30.188.147':139
'21#.#30.233.188':139
'21#.#30.104.178':139
'21#.#30.88.111':139
'21#.#30.178.126':139
'21#.#30.147.237':139
'21#.#30.64.148':139
'21#.#30.129.114':139
'21#.#30.58.19':139
'21#.#30.69.123':139
'21#.#30.29.95':139
'21#.#30.223.105':445
'21#.#30.11.207':445
'21#.#30.144.197':445
'21#.#30.177.3':445
'21#.#30.246.212':445
'21#.#30.32.60':445
'21#.#30.210.10':445
'21#.#30.105.206':445
'21#.#30.190.132':445
'21#.#30.140.100':445
'21#.#30.152.181':445
'21#.#30.135.64':445
'21#.#30.216.240':445
'21#.#30.130.129':445
'21#.#30.147.170':445
'21#.#30.25.135':445
'21#.#30.58.12':445
'21#.#30.203.71':445
'21#.#30.144.205':445
'21#.#30.68.254':445
'21#.#30.207.133':445
'21#.#30.0.76':445
'21#.#30.38.178':445
'21#.#30.28.127':445
'21#.#30.127.18':445
'21#.#30.164.212':445
'21#.#30.164.229':445
'21#.#30.146.166':445
'21#.#30.113.25':445
'21#.#30.62.205':445
'21#.#30.10.120':445
'21#.#30.67.157':445
'21#.#30.105.217':445
'21#.#30.6.158':445
'21#.#30.91.223':445
'21#.#30.143.108':445
'21#.#30.117.9':445
'21#.#30.87.62':445
'21#.#30.195.153':445
'21#.#30.102.57':445
'21#.#30.166.102':445
'21#.#30.52.133':445
'21#.#30.117.102':445
'21#.#30.42.81':445
'21#.#30.244.242':445
'21#.#30.39.23':445
'21#.#30.237.38':445
'21#.#30.59.89':445
'21#.#30.233.165':445
'21#.#30.128.74':445
'21#.#30.23.106':445
'21#.#30.223.105':139
'21#.#30.11.207':139
'21#.#30.140.100':139
'21#.#30.177.3':139
'21#.#30.246.212':139
'21#.#30.32.60':139
'21#.#30.210.10':139
'21#.#30.105.206':139
'21#.#30.190.132':139
'21#.#30.144.197':139
'21#.#30.152.181':139
'21#.#30.135.64':139
'21#.#30.216.240':139
'21#.#30.147.170':139
'21#.#30.203.71':139
'21#.#30.144.205':139
'21#.#30.58.12':139
'21#.#30.25.135':139
'21#.#30.130.129':139
'21#.#30.68.254':139
'21#.#30.207.133':139
'21#.#30.0.76':139
'21#.#30.38.178':139
'21#.#30.28.127':139
'21#.#30.127.18':139
'21#.#30.164.212':139
'21#.#30.164.229':139
'21#.#30.146.166':139
'21#.#30.113.25':139
'21#.#30.62.205':139
'21#.#30.10.120':139
'21#.#30.67.157':139
'21#.#30.105.217':139
'21#.#30.6.158':139
'21#.#30.91.223':139
'21#.#30.143.108':139
'21#.#30.117.9':139
'21#.#30.87.62':139
'21#.#30.195.153':139
'21#.#30.102.57':139
'21#.#30.166.102':139
'21#.#30.52.133':139
'21#.#30.244.242':139
'21#.#30.42.81':139
'21#.#30.117.102':139
'21#.#30.39.23':139
'21#.#30.237.38':139
'21#.#30.59.89':139
'21#.#30.233.165':139
'21#.#30.128.74':139
'21#.#30.23.106':139
'21#.#30.104.161':445
'21#.#30.42.131':445
'21#.#30.66.141':445
'21#.#30.2.221':445
'21#.#30.47.141':445
'21#.#30.80.34':445
'21#.#30.46.53':445
'21#.#30.210.201':445
'21#.#30.110.14':445
'21#.#30.47.35':445
'21#.#30.187.234':445
'21#.#30.247.114':445
'21#.#30.2.60':445
'21#.#30.1.239':445
'21#.#30.27.125':445
'21#.#30.117.223':445
'21#.#30.180.70':445
'21#.#30.20.194':445
'21#.#30.167.4':445
'21#.#30.242.131':445
'21#.#30.134.242':445
'21#.#30.222.164':445
'21#.#30.191.232':445
'21#.#30.47.241':445
'21#.#30.152.65':445
'21#.#30.183.138':445
'21#.#30.63.175':445
'21#.#30.114.243':139
'21#.#30.2.197':139
'21#.#30.167.196':445
'21#.#30.204.167':445
'21#.#30.174.204':445
'21#.#30.240.83':139
'21#.#30.44.217':139
'21#.#30.242.14':139
'21#.#30.168.134':139
'21#.#30.15.26':139
'21#.#30.117.74':139
'21#.#30.147.206':445
'21#.#30.109.39':445
'21#.#30.167.246':445
'21#.#30.1.73':445
'21#.#30.151.132':445
'21#.#30.120.150':445
'21#.#30.216.202':445
'21#.#30.137.152':445
'21#.#30.77.219':445
'21#.#30.18.155':445
'21#.#30.228.1':445
'21#.#30.3.11':445
'21#.#30.43.96':445
'21#.#30.152.65':139
'21#.#30.242.131':139
'21#.#30.134.242':139
'21#.#30.117.223':139
'21#.#30.191.232':139
'21#.#30.47.241':139
'21#.#30.47.141':139
'21#.#30.80.34':139
'21#.#30.104.161':139
'21#.#30.222.164':139
'21#.#30.2.60':139
'21#.#30.2.221':139
'21#.#30.27.125':139
'21#.#30.190.132':9988
'21#.#30.195.153':9988
'21#.#30.113.25':9988
'21#.#30.203.71':9988
'21#.#30.216.240':9988
'21#.#30.223.105':9988
'21#.#30.20.194':139
'21#.#30.167.4':139
'21#.#30.1.239':139
'21#.#30.87.62':9988
'21#.#30.91.223':9988
'21#.#30.180.70':139
'21#.#30.42.131':139
'21#.#30.43.96':139
'21#.#30.137.152':139
'21#.#30.77.219':139
'21#.#30.1.73':139
'21#.#30.228.1':139
'21#.#30.3.11':139
'21#.#30.204.167':139
'21#.#30.174.204':139
'21#.#30.63.175':139
'21#.#30.18.155':139
'21#.#30.147.206':139
'21#.#30.167.196':139
'21#.#30.167.246':139
'21#.#30.247.114':139
'21#.#30.46.53':139
'21#.#30.210.201':139
'21#.#30.66.141':139
'21#.#30.47.35':139
'21#.#30.187.234':139
'21#.#30.120.150':139
'21#.#30.216.202':139
'21#.#30.109.39':139
'21#.#30.110.14':139
'21#.#30.183.138':139
'21#.#30.151.132':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней