Trojan.DownLoader12.29212

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.#5.3.70':139
'82.##.190.120':139
'82.##.54.190':139
'82.##.30.133':139
'82.##.184.99':139
'82.##.207.195':139
'82.#5.28.49':139
'82.##.49.221':139
'82.##.240.44':139
'82.##.47.240':139
'82.##.162.40':139
'82.#5.68.38':139
'82.#5.7.0':139
'82.##.95.231':139
'82.##.45.123':139
'82.##.40.237':139
'82.#5.22.5':445
'82.##.40.237':445
'82.#5.22.5':139
'82.##.144.111':445
'82.#5.6.136':445
'82.##.152.108':445
'82.##.140.193':139
'82.#5.42.25':139
'82.##.199.208':139
'82.##.99.200':139
'82.##.224.33':139
'82.##.119.140':139
'82.#5.7.119':139
'82.#5.20.93':139
'82.##.37.224':139
'82.##.84.207':139
'82.#5.70.87':139
'82.##.61.111':139
'82.#5.8.91':139
'82.#5.31.40':139
'82.##.111.132':139
'82.#5.68.70':139
'82.##.224.33':445
'82.#5.20.93':445
'82.##.140.193':445
'82.##.119.140':445
'82.#5.37.68':139
'82.##.99.232':139
'82.##.246.81':139
'82.##.195.227':139
'82.##.146.243':139
'82.##.73.126':139
'82.##.100.94':139
'82.##.34.164':139
'82.##.193.37':139
'82.##.93.221':139
'82.#5.33.73':139
'82.##.137.209':139
'82.#5.27.46':139
'82.##.77.124':139
'82.##.45.154':139
'82.#5.96.33':139
'82.##.185.98':139
'82.##.109.97':139
'82.##.218.102':445
'82.#5.4.185':445
'82.##.205.29':445
'82.##.141.204':445
'82.#5.3.175':445
'82.#5.122.0':445
'82.##.21.172':445
'82.##.21.185':445
'82.##.153.100':445
'82.##.249.204':445
'82.##.240.38':445
'82.##.102.152':445
'82.##.125.189':445
'82.#5.6.129':445
'82.##.80.109':445
'82.#5.11.42':445
'82.##.36.228':139
'82.##.102.166':139
'82.##.218.60':139
'82.##.207.146':139
'82.##.146.34':139
'82.#5.70.1':139
'82.##.249.190':139
'82.##.250.77':139
'82.##.144.111':139
'82.#5.6.136':139
'82.##.152.108':139
'82.##.218.102':139
'82.##.98.191':139
'82.##.186.249':139
'82.##.103.100':139
'82.##.146.34':445
'82.#5.70.1':445
'82.##.249.190':445
'82.##.215.54':445
'82.#5.63.88':445
'82.##.27.179':445
'82.##.182.81':445
'82.##.207.146':445
'82.##.98.191':445
'82.##.186.249':445
'82.##.103.100':445
'82.##.250.77':445
'82.##.36.228':445
'82.##.102.166':445
'82.##.218.60':445
'82.##.171.104':445
'82.##.35.174':445
'82.#5.88.35':445
'82.##.18.180':445
'82.##.130.121':445
'82.#5.29.83':445
'82.##.26.216':445
'82.##.124.87':445
'82.#5.7.73':445
'82.##.16.249':445
'82.##.98.180':445
'82.##.39.145':445
'82.##.118.205':445
'82.#5.98.67':445
'82.#5.42.6':445
'82.#5.4.190':139
'82.#5.42.88':139
'82.##.176.197':139
'82.##.156.239':139
'82.#5.19.11':139
'82.#5.3.193':139
'82.##.136.231':139
'82.##.122.22':139
'82.##.151.181':139
'82.##.193.192':139
'82.##.162.249':139
'82.#5.182.0':139
'82.##.207.121':139
'82.#5.15.27':139
'82.##.116.49':139
'82.#5.29.95':139
'82.##.160.233':139
'82.##.154.29':139
'82.#5.42.27':139
'82.##.110.14':139
'82.##.239.164':139
'82.##.54.197':139
'82.##.107.150':139
'82.##.222.130':139
'82.##.132.222':139
'82.##.242.75':139
'82.##.68.143':139
'82.##.171.43':139
'82.##.236.171':139
'82.##.108.236':139
'82.##.110.14':445
'82.##.239.164':445
'82.##.54.197':445
'82.##.162.153':445
'82.#5.182.5':445
'82.#5.2.63':445
'82.##.134.118':445
'82.#5.42.27':445
'82.##.171.43':445
'82.##.236.171':445
'82.##.108.236':445
'82.##.107.150':445
'82.#5.29.95':445
'82.##.160.233':445
'82.##.154.29':445
'82.##.124.237':139
'82.##.144.152':139
'82.##.35.103':139
'82.##.62.106':139
'82.##.35.197':139
'82.##.33.245':139
'82.##.114.238':139
'82.##.57.142':445
'82.##.36.155':445
'82.##.250.179':445
'82.#5.5.251':445
'82.#5.38.55':445
'82.##.244.37':445
'82.##.204.189':445
'82.##.164.25':445
'82.##.162.153':139
'82.#5.7.0':445
'82.##.193.37':445
'82.##.100.94':445
'82.##.45.123':445
'82.#5.68.38':445
'82.##.34.164':445
'82.##.162.40':445
'82.##.93.221':445
'82.#5.96.33':445
'82.##.185.98':445
'82.##.109.97':445
'82.#5.33.73':445
'82.##.195.227':445
'82.##.146.243':445
'82.##.73.126':445
'82.##.207.195':445
'82.##.184.99':445
'82.#5.3.70':445
'82.##.99.200':445
'82.#5.42.25':445
'82.#5.7.119':445
'82.##.199.208':445
'82.##.30.133':445
'82.##.240.44':445
'82.##.95.231':445
'82.##.47.240':445
'82.##.49.221':445
'82.#5.28.49':445
'82.##.190.120':445
'82.##.54.190':445
'82.##.57.142':139
'82.##.244.37':139
'82.##.204.189':139
'82.##.60.177':445
'82.##.37.230':139
'82.##.60.177':139
'82.##.37.230':445
'82.##.164.25':139
'82.#5.182.5':139
'82.##.134.118':139
'82.#5.2.63':139
'82.#5.5.251':139
'82.#5.38.55':139
'82.##.36.155':139
'82.##.250.179':139
'82.#5.8.91':445
'82.#5.31.40':445
'82.##.111.132':445
'82.##.77.124':445
'82.##.45.154':445
'82.##.137.209':445
'82.#5.27.46':445
'82.##.37.224':445
'82.#5.68.70':445
'82.##.99.232':445
'82.##.246.81':445
'82.#5.37.68':445
'82.##.61.111':445
'82.##.84.207':445
'82.#5.70.87':445
'82.##.135.254':445
'82.#5.38.27':445
'82.#5.6.223':445
'82.##.187.179':445
'82.##.242.249':445
'82.##.63.219':445
'82.##.64.242':445
'82.##.121.241':445
'82.##.187.239':445
'82.##.41.176':445
'82.#5.39.35':445
'82.##.178.77':445
'82.##.184.210':445
'82.##.61.134':445
'82.##.110.94':445
'82.##.215.157':445
'82.##.174.215':445
'82.#5.3.4':445
'82.##.40.165':445
'82.##.79.227':445
'82.##.65.212':445
'82.#5.5.71':445
'82.##.223.248':445
'82.#5.98.26':445
'82.#5.35.15':445
'82.##.249.236':445
'82.##.148.195':445
'82.##.241.87':445
'82.##.241.182':445
'82.##.180.13':445
'82.#5.0.169':139
'82.##.188.200':139
'82.##.160.230':139
'82.##.213.51':139
'82.##.238.79':139
'82.##.105.23':139
'82.##.123.24':139
'82.##.228.114':139
'82.##.183.223':139
'82.#5.12.2':139
'82.##.180.101':139
'82.##.31.169':139
'82.##.236.121':139
'82.##.133.232':139
'82.#5.88.14':139
'82.##.101.74':445
'82.#5.27.19':445
'82.#5.6.37':445
'82.#5.58.9':445
'82.##.158.171':445
'82.##.28.155':445
'82.##.24.190':445
'82.##.234.196':445
'82.##.61.135':9988
'82.##.121.241':9988
'82.##.110.94':9988
'82.##.226.190':9988
'82.##.20.233':445
'82.##.164.43':445
'82.##.95.247':445
'82.##.200.187':445
'82.##.241.182':139
'82.##.180.13':139
'82.##.148.195':139
'82.##.223.248':139
'82.##.174.215':139
'82.#5.3.4':139
'82.##.241.87':139
'82.#5.98.26':139
'82.##.63.219':139
'82.##.187.179':139
'82.##.135.254':139
'82.##.64.242':139
'82.#5.35.15':139
'82.##.249.236':139
'82.##.242.249':139
'82.##.226.190':139
'82.#5.11.49':139
'82.##.182.176':139
'82.##.57.233':139
'82.##.170.143':139
'82.##.49.124':139
'82.##.61.135':139
'82.##.145.167':139
'82.#5.5.71':139
'82.##.40.165':139
'82.##.215.157':139
'82.##.65.212':139
'82.##.242.172':139
'82.##.200.187':139
'82.##.79.227':139
'82.##.234.196':139
'82.##.20.233':139
'82.##.49.124':445
'82.##.164.43':139
'82.##.101.74':139
'82.#5.6.37':139
'82.##.95.247':139
'82.##.57.233':445
'82.##.182.176':445
'82.##.145.167':445
'82.##.242.172':445
'82.##.226.190':445
'82.##.170.143':445
'82.##.61.135':445
'82.#5.11.49':445
'82.##.61.134':139
'82.##.110.94':139
'82.##.178.77':139
'82.##.184.210':139
'82.#5.38.27':139
'82.#5.6.223':139
'82.##.121.241':139
'82.##.187.239':139
'82.##.28.155':139
'82.#5.58.9':139
'82.#5.27.19':139
'82.##.24.190':139
'82.#5.39.35':139
'82.##.41.176':139
'82.##.158.171':139
'82.#5.1.87':445
'82.##.64.167':445
'82.##.157.190':445
'82.#5.69.77':445
'82.##.220.65':445
'82.##.20.102':445
'82.##.126.15':445
'82.##.163.157':139
'82.##.21.172':139
'82.##.21.185':139
'82.#5.3.175':139
'82.#5.122.0':139
'82.##.69.218':139
'82.##.163.157':445
'82.##.69.218':445
'82.##.117.242':445
'82.#5.83.76':445
'82.##.57.165':445
'82.##.129.54':445
'82.##.110.157':445
'82.##.222.197':445
'82.##.54.223':445
'82.##.104.19':445
'82.##.86.117':445
'82.##.217.21':445
'82.##.187.217':445
'82.##.55.129':445
'82.##.199.44':445
'82.#5.56.69':445
'82.##.124.161':445
'82.##.118.205':139
'82.#5.98.67':139
'82.#5.42.6':139
'82.##.124.87':139
'82.##.171.104':139
'82.##.35.174':139
'82.#5.88.35':139
'82.##.39.145':139
'82.##.27.179':139
'82.##.182.81':139
'82.##.215.54':139
'82.#5.63.88':139
'82.#5.7.73':139
'82.##.16.249':139
'82.##.98.180':139
'82.#5.6.129':139
'82.##.80.109':139
'82.#5.11.42':139
'82.##.153.100':139
'82.#5.4.185':139
'82.##.205.29':139
'82.##.141.204':139
'82.##.125.189':139
'82.#5.29.83':139
'82.##.26.216':139
'82.##.18.180':139
'82.##.130.121':139
'82.##.249.204':139
'82.##.240.38':139
'82.##.102.152':139
'82.##.172.243':445
'82.##.104.19':139
'82.##.199.44':139
'82.#5.56.69':139
'82.##.57.165':139
'82.##.129.54':139
'82.##.117.242':139
'82.#5.83.76':139
'82.##.124.161':139
'82.##.220.65':139
'82.##.20.102':139
'82.##.126.15':139
'82.##.187.217':139
'82.##.55.129':139
'82.##.86.117':139
'82.##.217.21':139
'82.##.101.216':139
'82.#5.67.21':139
'82.#5.46.93':139
'82.##.160.163':139
'82.##.38.125':139
'82.##.235.60':139
'82.##.248.234':139
'82.#5.7.47':139
'82.##.110.157':139
'82.##.222.197':139
'82.##.54.223':139
'82.##.172.243':139
'82.##.102.121':139
'82.#5.7.177':139
'82.##.121.24':139
'82.##.38.125':445
'82.##.235.60':445
'82.##.248.234':445
'82.##.180.101':445
'82.##.31.169':445
'82.##.183.223':445
'82.#5.12.2':445
'82.##.160.163':445
'82.##.102.121':445
'82.#5.7.177':445
'82.##.121.24':445
'82.#5.7.47':445
'82.##.101.216':445
'82.#5.67.21':445
'82.#5.46.93':445
'82.##.238.79':445
'82.##.105.23':445
'82.##.123.24':445
'82.##.157.190':139
'82.#5.69.77':139
'82.#5.1.87':139
'82.##.64.167':139
'82.##.213.51':445
'82.##.236.121':445
'82.##.133.232':445
'82.#5.88.14':445
'82.##.228.114':445
'82.#5.0.169':445
'82.##.188.200':445
'82.##.160.230':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней