Trojan.DownLoader12.29206

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#1.234.191':445
'20#.#1.32.235':445
'20#.#1.241.126':445
'20#.#1.84.153':139
'20#.#1.148.214':139
'20#.#1.191.199':445
'20#.#1.24.205':445
'20#.#1.227.58':445
'20#.#1.117.24':445
'20#.#1.237.217':445
'20#.#1.14.195':445
'20#.#1.204.249':445
'20#.#1.60.177':139
'20#.#1.6.247':139
'20#.#1.139.127':139
'20#.#1.206.42':139
'20#.#1.147.87':139
'20#.#1.252.230':139
'20#.#1.94.136':139
'20#.#1.22.200':139
'20#.#1.72.107':139
'20#.#1.26.117':139
'20#.#1.229.26':139
'20#.#1.28.119':139
'20#.#1.174.63':445
'20#.#1.66.115':445
'20#.#1.35.180':445
'20#.#1.64.13':445
'20#.#1.82.207':445
'20#.#1.79.35':445
'20#.#1.171.95':445
'20#.#1.153.204':445
'20#.#1.192.199':445
'20#.#1.230.16':445
'20#.#1.177.220':445
'20#.#1.82.100':445
'20#.#1.47.156':445
'20#.#1.116.134':445
'20#.#1.216.25':445
'20#.#1.184.73':445
'20#.#1.49.240':445
'20#.#1.117.231':445
'20#.#1.42.205':445
'20#.#1.58.93':445
'20#.#1.19.213':445
'20#.#1.134.187':445
'20#.#1.198.183':445
'20#.#1.166.222':445
'20#.#1.92.208':445
'20#.#1.234.191':139
'20#.#1.32.235':139
'20#.#1.241.126':139
'20#.#1.151.123':445
'20#.#1.35.155':445
'20#.#1.191.199':139
'20#.#1.24.205':139
'20#.#1.227.58':139
'20#.#1.117.24':139
'20#.#1.237.217':139
'20#.#1.14.195':139
'20#.#1.204.249':139
'20#.#1.55.221':445
'20#.#1.154.235':445
'20#.#1.46.161':445
'20#.#1.121.79':445
'20#.#1.68.179':445
'20#.#1.6.245':445
'20#.#1.57.78':445
'20#.#1.151.123':139
'20#.#1.35.155':139
'20#.#1.12.182':445
'20#.#1.53.70':445
'20#.#1.59.49':445
'20#.#1.174.63':139
'20#.#1.66.115':139
'20#.#1.35.180':139
'20#.#1.64.13':139
'20#.#1.82.207':139
'20#.#1.79.35':139
'20#.#1.171.95':139
'20#.#1.153.204':139
'20#.#1.192.199':139
'20#.#1.230.16':139
'20#.#1.177.220':139
'20#.#1.82.100':139
'20#.#1.47.156':139
'20#.#1.116.134':139
'20#.#1.216.25':139
'20#.#1.184.73':139
'20#.#1.49.240':139
'20#.#1.117.231':139
'20#.#1.42.205':139
'20#.#1.58.93':139
'20#.#1.19.213':139
'20#.#1.134.187':139
'20#.#1.198.183':139
'20#.#1.166.222':139
'20#.#1.92.208':139
'20#.91.8.67':139
'20#.#1.127.157':139
'20#.#1.21.214':139
'20#.#1.79.52':139
'20#.#1.246.166':139
'20#.#1.119.247':139
'20#.#1.146.137':445
'20#.#1.245.142':445
'20#.#1.114.245':445
'20#.#1.178.117':445
'20#.#1.89.171':445
'20#.#1.53.150':445
'20#.#1.36.199':139
'20#.#1.233.114':139
'20#.#1.220.232':139
'20#.#1.224.29':139
'20#.#1.170.183':139
'20#.#1.240.22':139
'20#.#1.43.106':139
'20#.#1.177.130':139
'20#.#1.169.85':139
'20#.#1.92.221':139
'20#.#1.134.130':139
'20#.#1.143.212':139
'20#.#1.48.148':445
'20#.#1.19.83':445
'20#.#1.107.19':445
'20#.#1.151.47':445
'20#.#1.93.215':445
'20#.#1.59.15':445
'20#.#1.82.221':445
'20#.#1.30.128':445
'20#.#1.89.46':445
'20#.#1.2.189':445
'20#.#1.47.88':445
'20#.#1.222.166':445
'20#.#1.138.30':445
'20#.#1.144.217':445
'20#.#1.152.144':445
'20#.#1.50.153':445
'20#.#1.56.207':445
'20#.#1.143.206':445
'20#.#1.199.50':445
'20#.#1.97.128':445
'20#.91.7.51':445
'20#.#1.212.134':445
'20#.#1.47.21':445
'20#.#1.33.25':445
'20#.#1.246.117':445
'20#.#1.59.71':139
'20#.#1.29.132':445
'20#.#1.59.71':445
'20#.#1.84.153':445
'20#.#1.148.214':445
'20#.#1.29.132':139
'20#.#1.146.137':139
'20#.#1.245.142':139
'20#.#1.114.245':139
'20#.#1.178.117':139
'20#.#1.89.171':139
'20#.#1.53.150':139
'20#.#1.60.177':445
'20#.#1.6.247':445
'20#.#1.139.127':445
'20#.#1.206.42':445
'20#.#1.147.87':445
'20#.#1.252.230':445
'20#.#1.94.136':445
'20#.#1.22.200':445
'20#.#1.72.107':445
'20#.#1.26.117':445
'20#.#1.229.26':445
'20#.#1.28.119':445
'20#.#1.48.148':139
'20#.#1.19.83':139
'20#.#1.107.19':139
'20#.#1.151.47':139
'20#.#1.93.215':139
'20#.#1.59.15':139
'20#.#1.82.221':139
'20#.#1.30.128':139
'20#.#1.89.46':139
'20#.#1.2.189':139
'20#.#1.47.88':139
'20#.#1.222.166':139
'20#.#1.138.30':139
'20#.#1.144.217':139
'20#.#1.152.144':139
'20#.#1.50.153':139
'20#.#1.56.207':139
'20#.#1.143.206':139
'20#.#1.199.50':139
'20#.#1.97.128':139
'20#.91.7.51':139
'20#.#1.212.134':139
'20#.#1.47.21':139
'20#.#1.33.25':139
'20#.#1.246.117':139
'20#.#1.54.12':445
'20#.#1.2.176':445
'20#.91.68.1':445
'20#.#1.164.178':445
'20#.#1.250.240':445
'20#.#1.52.195':445
'20#.#1.42.93':445
'20#.#1.78.21':445
'20#.#1.50.63':445
'20#.#1.4.240':445
'20#.91.9.34':445
'20#.#1.120.182':445
'20#.#1.30.173':445
'20#.#1.145.2':445
'20#.#1.192.11':445
'20#.#1.64.116':445
'20#.#1.73.162':139
'20#.#1.172.73':139
'20#.#1.6.183':445
'20#.#1.133.62':445
'20#.#1.23.98':445
'20#.#1.154.194':445
'20#.#1.227.123':445
'20#.#1.178.208':445
'20#.#1.111.125':445
'20#.91.74.4':445
'20#.#1.234.88':445
'20#.#1.211.92':445
'20#.#1.194.123':445
'20#.#1.18.142':445
'20#.#1.231.151':445
'20#.#1.223.182':445
'20#.#1.93.88':445
'20#.#1.78.35':445
'20#.#1.202.160':445
'20#.#1.245.7':445
'20#.#1.165.65':445
'20#.#1.187.125':445
'20#.#1.72.210':445
'20#.#1.164.221':445
'20#.#1.196.164':445
'20#.#1.5.227':445
'20#.#1.115.223':445
'20#.#1.223.10':445
'20#.#1.199.253':445
'20#.#1.211.20':445
'20#.#1.92.178':445
'20#.#1.15.92':445
'20#.#1.142.203':445
'20#.#1.176.185':445
'20#.#1.164.178':139
'20#.91.9.34':139
'20#.#1.120.182':139
'20#.#1.42.93':139
'20#.#1.2.176':139
'20#.91.68.1':139
'20#.#1.4.240':139
'20#.91.74.4':139
'20#.#1.5.227':139
'20#.#1.30.173':139
'20#.#1.78.21':139
'20#.#1.50.63':139
'20#.#1.64.116':139
'20#.#1.192.11':139
'20#.#1.178.208':139
'20#.#1.6.183':139
'20#.#1.145.2':139
'20#.#1.227.123':139
'20#.#1.154.194':139
'20#.#1.250.240':139
'20#.#1.52.195':139
'20#.#1.111.125':139
'20#.#1.133.62':139
'20#.#1.23.98':139
'20#.#1.115.223':139
'20#.#1.194.123':139
'20#.#1.245.7':139
'20#.#1.165.65':139
'20#.#1.223.182':139
'20#.#1.234.88':139
'20#.#1.211.92':139
'20#.#1.202.160':139
'20#.#1.75.96':139
'20#.#1.43.153':139
'20#.#1.187.125':139
'20#.#1.93.88':139
'20#.#1.78.35':139
'20#.#1.196.164':139
'20#.#1.15.92':139
'20#.#1.142.203':139
'20#.#1.223.10':139
'20#.#1.72.210':139
'20#.#1.164.221':139
'20#.#1.92.178':139
'20#.#1.18.142':139
'20#.#1.231.151':139
'20#.#1.176.185':139
'20#.#1.199.253':139
'20#.#1.211.20':139
'20#.#1.220.75':445
'20#.#1.177.145':445
'20#.#1.41.177':445
'20#.#1.203.235':445
'20#.#1.120.146':445
'20#.#1.97.91':445
'20#.#1.201.50':445
'20#.#1.50.133':445
'20#.#1.29.64':445
'20#.#1.215.74':445
'20#.#1.30.23':445
'20#.#1.89.127':445
'20#.#1.6.245':139
'20#.#1.55.221':139
'20#.#1.154.235':139
'20#.#1.54.12':139
'20#.#1.121.79':139
'20#.#1.68.179':139
'20#.#1.59.49':139
'20#.#1.57.78':139
'20#.#1.5.158':445
'20#.#1.46.161':139
'20#.#1.12.182':139
'20#.#1.53.70':139
'20#.#1.231.98':445
'20#.#1.14.164':445
'20#.#1.19.165':445
'20#.#1.87.154':445
'20#.#1.173.82':445
'20#.#1.218.172':445
'20#.#1.68.220':445
'20#.#1.26.56':445
'20#.#1.203.117':445
'20#.#1.12.63':445
'20#.#1.183.49':445
'20#.#1.10.84':445
'20#.#1.56.85':445
'20#.#1.48.23':445
'20#.#1.164.47':445
'20#.#1.64.164':445
'20#.#1.236.231':445
'20#.#1.124.32':445
'20#.#1.139.234':445
'20#.#1.76.67':445
'20#.#1.18.166':445
'20#.#1.82.51':445
'20#.#1.151.21':445
'20#.#1.35.150':445
'20#.#1.254.114':445
'20#.#1.220.75':139
'20#.#1.177.145':139
'20#.#1.41.177':139
'20#.#1.203.235':139
'20#.#1.120.146':139
'20#.#1.97.91':139
'20#.#1.201.50':139
'20#.#1.50.133':139
'20#.#1.29.64':139
'20#.#1.215.74':139
'20#.#1.30.23':139
'20#.#1.89.127':139
'20#.#1.172.73':445
'20#.#1.23.98':9988
'20#.#1.64.116':9988
'20#.#1.75.96':445
'20#.#1.43.153':445
'20#.#1.73.162':445
'20#.#1.72.210':9988
'20#.#1.223.182':9988
'20#.#1.5.158':139
'20#.#1.133.62':9988
'20#.#1.164.178':9988
'20#.#1.120.182':9988
'20#.#1.231.98':139
'20#.#1.14.164':139
'20#.#1.19.165':139
'20#.#1.87.154':139
'20#.#1.173.82':139
'20#.#1.218.172':139
'20#.#1.68.220':139
'20#.#1.26.56':139
'20#.#1.203.117':139
'20#.#1.12.63':139
'20#.#1.183.49':139
'20#.#1.10.84':139
'20#.#1.56.85':139
'20#.#1.48.23':139
'20#.#1.164.47':139
'20#.#1.64.164':139
'20#.#1.236.231':139
'20#.#1.124.32':139
'20#.#1.139.234':139
'20#.#1.76.67':139
'20#.#1.18.166':139
'20#.#1.82.51':139
'20#.#1.35.150':139
'20#.#1.151.21':139
'20#.#1.254.114':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней