Trojan.DownLoader12.29204

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#0.156.81':445
'21#.50.1.74':445
'21#.50.82.5':445
'21#.#0.71.35':445
'21#.#0.54.31':445
'21#.#0.15.221':445
'21#.#0.189.216':445
'21#.#0.206.38':445
'21#.#0.93.206':445
'21#.#0.93.175':445
'21#.#0.253.46':445
'21#.#0.159.38':445
'21#.#0.20.196':445
'21#.#0.24.69':445
'21#.#0.143.122':445
'21#.#0.132.69':445
'21#.#0.63.10':445
'21#.50.2.80':445
'21#.#0.148.222':445
'21#.#0.176.131':445
'21#.#0.137.126':445
'21#.#0.150.3':445
'21#.#0.176.51':445
'21#.#0.16.238':445
'21#.#0.12.108':139
'21#.#0.13.235':139
'21#.#0.220.126':139
'21#.#0.18.177':139
'21#.#0.83.108':139
'21#.#0.20.136':139
'21#.#0.23.126':139
'21#.#0.12.108':445
'21#.#0.198.112':445
'21#.#0.107.240':445
'21#.#0.139.168':139
'21#.#0.247.119':139
'21#.#0.92.50':139
'21#.#0.27.16':139
'21#.#0.114.47':139
'21#.#0.28.29':139
'21#.#0.198.112':139
'21#.#0.107.240':139
'21#.#0.166.178':139
'21#.#0.109.241':139
'21#.#0.23.18':139
'21#.#0.25.97':139
'21#.#0.162.146':139
'21#.#0.101.67':139
'21#.#0.47.167':139
'21#.#0.221.229':445
'21#.#0.247.218':445
'21#.#0.208.45':139
'21#.#0.241.27':139
'21#.#0.26.152':445
'21#.#0.163.26':445
'21#.#0.59.189':445
'21#.#0.132.69':139
'21#.#0.63.10':139
'21#.50.2.80':139
'21#.#0.40.124':139
'21#.#0.9.172':139
'21#.#0.221.229':139
'21#.#0.86.226':445
'21#.#0.224.115':445
'21#.#0.96.133':445
'21#.#0.196.159':445
'21#.#0.130.196':445
'21#.#0.202.82':445
'21#.#0.122.5':445
'21#.#0.227.225':445
'21#.#0.29.131':445
'21#.#0.60.98':445
'21#.#0.252.174':445
'21#.#0.40.173':445
'21#.#0.20.196':139
'21#.#0.253.46':139
'21#.#0.159.38':139
'21#.#0.189.216':139
'21#.50.1.74':139
'21#.50.82.5':139
'21#.#0.93.175':139
'21#.#0.241.27':445
'21#.#0.40.124':445
'21#.#0.9.172':445
'21#.#0.206.38':139
'21#.#0.93.206':139
'21#.#0.208.45':445
'21#.#0.176.51':139
'21#.#0.16.238':139
'21#.#0.148.222':139
'21#.#0.24.69':139
'21#.#0.143.122':139
'21#.#0.150.3':139
'21#.#0.54.31':139
'21#.#0.15.221':139
'21#.#0.156.81':139
'21#.#0.176.131':139
'21#.#0.137.126':139
'21#.#0.71.35':139
'21#.#0.144.109':445
'21#.#0.57.151':445
'21#.#0.35.57':445
'21#.#0.86.221':445
'21#.#0.52.138':445
'21#.#0.193.170':445
'21#.#0.14.137':445
'21#.#0.112.165':445
'21#.#0.19.128':445
'21#.#0.87.119':445
'21#.#0.19.114':445
'21#.#0.88.184':445
'21#.#0.164.218':445
'21#.#0.40.61':445
'21#.#0.48.137':445
'21#.#0.87.114':445
'21#.#0.170.87':445
'21#.#0.129.120':445
'21#.#0.15.76':445
'21#.#0.202.223':445
'21#.#0.252.240':445
'21#.#0.38.49':445
'21#.#0.67.176':445
'21#.#0.169.29':445
'21#.#0.195.186':445
'21#.#0.178.92':139
'21#.#0.47.57':139
'21#.#0.145.94':139
'21#.#0.25.29':139
'21#.#0.125.245':139
'21#.#0.214.98':139
'21#.#0.140.10':139
'21#.#0.120.177':139
'21#.#0.127.218':139
'21#.#0.27.184':139
'21#.#0.158.145':139
'21#.#0.10.107':139
'21#.50.26.6':139
'21#.#0.64.189':139
'21#.#0.84.12':139
'21#.#0.166.89':445
'21#.#0.63.142':445
'21#.#0.97.219':139
'21#.#0.74.100':139
'21#.#0.219.12':139
'21#.#0.23.72':139
'21#.#0.48.215':139
'21#.#0.56.250':139
'21#.50.9.93':139
'21#.#0.113.220':445
'21#.#0.18.177':445
'21#.#0.139.168':445
'21#.#0.247.119':445
'21#.#0.23.126':445
'21#.#0.13.235':445
'21#.#0.220.126':445
'21#.#0.87.114':139
'21#.#0.170.87':139
'21#.#0.129.120':139
'21#.#0.92.50':445
'21#.#0.86.241':139
'21#.#0.113.220':139
'21#.#0.28.29':445
'21#.#0.162.146':445
'21#.#0.101.67':445
'21#.#0.166.178':445
'21#.#0.27.16':445
'21#.#0.114.47':445
'21#.#0.25.97':445
'21#.#0.83.108':445
'21#.#0.20.136':445
'21#.#0.47.167':445
'21#.#0.109.241':445
'21#.#0.23.18':445
'21#.#0.164.218':139
'21#.#0.19.114':139
'21#.#0.88.184':139
'21#.#0.14.137':139
'21#.#0.57.151':139
'21#.#0.35.57':139
'21#.#0.87.119':139
'21#.#0.166.89':139
'21#.#0.63.142':139
'21#.#0.86.241':445
'21#.#0.112.165':139
'21#.#0.19.128':139
'21#.#0.195.186':139
'21#.#0.67.176':139
'21#.#0.169.29':139
'21#.#0.15.76':139
'21#.#0.40.61':139
'21#.#0.48.137':139
'21#.#0.38.49':139
'21#.#0.52.138':139
'21#.#0.193.170':139
'21#.#0.144.109':139
'21#.#0.202.223':139
'21#.#0.252.240':139
'21#.#0.86.221':139
'21#.#0.200.208':445
'21#.#0.207.8':445
'21#.#0.12.98':445
'21#.#0.25.146':445
'21#.#0.116.227':445
'21#.#0.36.56':445
'21#.#0.140.150':445
'21#.#0.168.143':445
'21#.#0.90.111':445
'21#.#0.139.243':445
'21#.#0.96.21':445
'21#.#0.107.85':445
'21#.#0.40.246':445
'21#.#0.196.127':445
'21#.#0.15.77':445
'21#.#0.245.112':139
'21#.#0.27.92':445
'21#.#0.201.249':445
'21#.#0.58.232':445
'21#.#0.19.61':445
'21#.#0.146.58':445
'21#.#0.142.170':445
'21#.#0.232.52':445
'21#.#0.139.144':445
'21#.#0.77.17':445
'21#.#0.145.229':445
'21#.50.5.95':445
'21#.#0.133.118':445
'21#.#0.103.103':445
'21#.#0.71.103':445
'21#.#0.47.90':445
'21#.#0.82.32':445
'21#.#0.153.45':445
'21#.#0.103.152':445
'21#.#0.100.133':445
'21#.#0.17.101':445
'21#.#0.157.17':445
'21#.#0.83.177':445
'21#.#0.50.253':445
'21#.#0.96.174':445
'21#.#0.153.224':445
'21#.50.2.13':445
'21#.#0.14.198':445
'21#.#0.105.104':445
'21#.#0.115.124':445
'21#.#0.102.115':445
'21#.#0.192.128':445
'21#.#0.22.69':445
'21#.#0.119.8':445
'21#.#0.113.22':139
'21#.#0.207.8':139
'21#.#0.12.98':139
'21#.#0.96.21':139
'21#.#0.116.227':139
'21#.#0.36.56':139
'21#.#0.200.208':139
'21#.#0.140.150':139
'21#.#0.90.111':139
'21#.#0.153.224':139
'21#.#0.139.243':139
'21#.#0.107.85':139
'21#.#0.168.143':139
'21#.#0.15.77':139
'21#.#0.196.127':139
'21#.#0.27.92':139
'21#.#0.40.246':139
'21#.#0.201.249':139
'21#.#0.142.170':139
'21#.#0.19.61':139
'21#.#0.146.58':139
'21#.#0.25.146':139
'21#.#0.232.52':139
'21#.#0.58.232':139
'21#.#0.139.144':139
'21#.#0.77.17':139
'21#.50.5.95':139
'21#.#0.133.118':139
'21#.#0.100.133':139
'21#.#0.71.103':139
'21#.#0.47.90':139
'21#.#0.145.229':139
'21#.#0.153.45':139
'21#.#0.103.152':139
'21#.#0.22.104':139
'21#.#0.17.101':139
'21#.#0.157.17':139
'21#.#0.82.32':139
'21#.#0.50.253':139
'21#.#0.96.174':139
'21#.#0.192.128':139
'21#.50.2.13':139
'21#.#0.14.198':139
'21#.#0.83.177':139
'21#.#0.115.124':139
'21#.#0.102.115':139
'21#.#0.103.103':139
'21#.#0.22.69':139
'21#.#0.119.8':139
'21#.#0.105.104':139
'21#.50.4.4':445
'21#.#0.219.115':445
'21#.#0.178.233':445
'21#.#0.146.160':445
'21#.#0.210.246':445
'21#.#0.146.211':445
'21#.#0.137.31':139
'21#.#0.50.207':139
'21#.#0.156.155':139
'21#.#0.69.178':445
'21#.#0.1.166':445
'21#.#0.89.169':445
'21#.#0.36.86':445
'21#.#0.62.155':445
'21#.#0.36.201':445
'21#.#0.54.33':445
'21#.#0.103.18':445
'21#.#0.21.210':445
'21#.#0.116.73':445
'21#.#0.151.12':445
'21#.#0.41.76':445
'21#.#0.87.196':445
'21#.#0.36.88':445
'21#.#0.61.29':445
'21#.#0.136.209':139
'21#.#0.163.26':139
'21#.#0.59.189':139
'21#.#0.247.218':139
'21#.#0.227.225':139
'21#.#0.29.131':139
'21#.#0.26.152':139
'21#.#0.136.209':445
'21#.#0.203.136':445
'21#.#0.57.180':445
'21#.#0.137.31':445
'21#.#0.50.207':445
'21#.#0.156.155':445
'21#.#0.130.196':139
'21#.#0.202.82':139
'21#.#0.86.226':139
'21#.#0.203.136':139
'21#.#0.57.180':139
'21#.#0.196.159':139
'21#.#0.252.174':139
'21#.#0.40.173':139
'21#.#0.122.5':139
'21#.#0.224.115':139
'21#.#0.96.133':139
'21#.#0.60.98':139
'21#.50.15.3':445
'21#.#0.51.211':139
'21#.#0.47.132':139
'21#.#0.146.95':139
'21#.#0.96.21':9988
'21#.#0.220.221':139
'21#.#0.178.216':139
'21#.#0.54.33':139
'21#.#0.103.18':139
'21#.#0.21.210':139
'21#.#0.63.67':139
'21#.#0.85.242':139
'21#.50.15.3':139
'21#.#0.90.111':9988
'21#.#0.40.246':9988
'21#.#0.207.8':9988
'21#.#0.22.104':445
'21#.#0.113.22':445
'21#.#0.245.112':445
'21#.#0.116.227':9988
'21#.#0.83.177':9988
'21#.#0.50.253':9988
'21#.#0.139.144':9988
'21#.#0.27.92':9988
'21#.#0.22.69':9988
'21#.#0.36.86':139
'21#.#0.1.166':139
'21#.#0.89.169':139
'21#.#0.220.221':445
'21#.#0.219.115':139
'21#.#0.178.233':139
'21#.#0.69.178':139
'21#.#0.146.95':445
'21#.#0.63.67':445
'21#.#0.85.242':445
'21#.#0.178.216':445
'21#.#0.51.211':445
'21#.#0.47.132':445
'21#.#0.36.88':139
'21#.#0.61.29':139
'21#.#0.116.73':139
'21#.#0.62.155':139
'21#.#0.36.201':139
'21#.#0.87.196':139
'21#.#0.210.246':139
'21#.#0.146.211':139
'21#.50.4.4':139
'21#.#0.151.12':139
'21#.#0.41.76':139
'21#.#0.146.160':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней