Trojan.DownLoader12.29236

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##8.93.208':139
'65.##8.83.246':139
'65.##8.11.181':139
'65.##8.110.109':139
'65.##8.224.65':139
'65.##8.2.152':139
'65.##8.133.64':139
'65.##8.56.29':139
'65.##8.100.137':139
'65.##8.229.249':139
'65.##8.234.251':139
'65.##8.242.49':139
'65.##8.5.195':139
'65.##8.36.226':139
'65.##8.38.203':139
'65.##8.227.113':139
'65.##8.129.123':139
'65.##8.19.244':139
'65.##8.47.67':139
'65.#08.1.69':139
'65.##8.166.73':139
'65.##8.216.49':445
'65.##8.36.226':445
'65.##8.80.136':445
'65.##8.61.53':445
'65.##8.99.213':445
'65.##8.242.49':445
'65.##8.47.67':445
'65.##8.234.251':445
'65.##8.38.203':445
'65.##8.5.195':445
'65.##8.152.68':445
'65.##8.81.186':445
'65.##8.68.172':445
'65.##8.183.216':139
'65.##8.242.211':139
'65.##8.80.103':445
'65.##8.152.71':445
'65.##8.71.238':445
'65.##8.191.96':445
'65.##8.32.154':445
'65.##8.216.49':139
'65.##8.88.34':139
'65.##8.181.99':445
'65.##8.165.20':139
'65.##8.55.185':139
'65.##8.139.55':139
'65.##8.82.222':445
'65.##8.215.171':445
'65.##8.251.52':445
'65.##8.204.78':445
'65.##8.105.210':445
'65.##8.215.171':139
'65.##8.209.158':139
'65.##8.82.222':139
'65.##8.105.210':139
'65.##8.251.52':139
'65.##8.231.237':139
'65.##8.185.231':139
'65.##8.105.25':139
'65.##8.98.210':139
'65.##8.166.98':139
'65.##8.209.158':445
'65.##8.32.154':139
'65.##8.71.238':139
'65.##8.191.96':139
'65.##8.152.68':139
'65.##8.81.186':139
'65.##8.99.213':139
'65.##8.80.136':139
'65.##8.61.53':139
'65.##8.80.103':139
'65.##8.152.71':139
'65.##8.231.237':445
'65.##8.185.231':445
'65.##8.105.25':445
'65.##8.98.210':445
'65.##8.166.98':445
'65.##8.88.34':445
'65.##8.68.172':139
'65.##8.165.20':445
'65.##8.55.185':445
'65.##8.139.55':445
'65.#08.1.69':445
'65.##8.162.107':139
'65.##8.101.23':139
'65.##8.47.178':139
'65.##8.199.161':139
'65.##8.34.69':139
'65.##8.28.241':139
'65.##8.19.190':139
'65.##8.182.83':139
'65.##8.94.209':139
'65.##8.103.224':139
'65.##8.20.224':445
'65.##8.31.179':445
'65.#08.7.42':445
'65.##8.181.195':445
'65.##8.10.21':445
'65.##8.209.10':139
'65.##8.161.209':139
'65.##8.207.240':139
'65.##8.89.93':445
'65.##8.88.213':139
'65.##8.208.130':139
'65.##8.89.56':139
'65.##8.175.12':139
'65.##8.212.207':139
'65.##8.197.6':139
'65.#08.38.1':139
'65.#08.0.8':139
'65.##8.48.188':139
'65.##8.211.25':139
'65.##8.137.175':139
'65.##8.160.137':139
'65.##8.171.244':139
'65.##8.110.171':139
'65.##8.244.177':139
'65.##8.19.170':139
'65.##8.178.152':139
'65.##8.243.209':139
'65.##8.248.111':139
'65.##8.6.135':139
'65.#08.2.61':139
'65.##8.189.13':139
'65.##8.90.178':445
'65.##8.166.73':445
'65.##8.183.216':445
'65.##8.133.64':445
'65.##8.56.29':445
'65.##8.2.152':445
'65.##8.110.8':139
'65.##8.246.110':139
'65.##8.134.103':139
'65.##8.242.211':445
'65.##8.47.183':139
'65.##8.110.109':445
'65.##8.224.65':445
'65.##8.129.123':445
'65.##8.19.244':445
'65.##8.227.113':445
'65.##8.100.137':445
'65.##8.229.249':445
'65.##8.83.246':445
'65.##8.11.181':445
'65.##8.93.208':445
'65.##8.225.246':139
'65.##8.110.8':445
'65.##8.246.110':445
'65.##8.134.103':445
'65.##8.89.93':139
'65.##8.47.183':445
'65.##8.189.115':445
'65.##8.44.31':445
'65.##8.183.233':445
'65.##8.225.246':445
'65.##8.83.163':445
'65.##8.44.31':139
'65.##8.90.178':139
'65.##8.189.115':139
'65.##8.83.163':139
'65.##8.183.233':139
'65.##8.20.224':139
'65.##8.31.179':139
'65.#08.7.42':139
'65.##8.181.195':139
'65.##8.10.21':139
'65.##8.188.169':445
'65.##8.24.142':445
'65.##8.18.108':445
'65.##8.18.175':445
'65.##8.116.0':445
'65.##8.193.97':445
'65.##8.137.191':445
'65.##8.36.167':445
'65.##8.190.131':445
'65.##8.163.143':445
'65.##8.161.229':139
'65.##8.63.254':139
'65.##8.229.9':139
'65.##8.148.57':139
'65.##8.14.68':139
'65.##8.243.42':139
'65.##8.63.19':445
'65.##8.85.167':139
'65.##8.53.229':139
'65.##8.167.53':139
'65.##8.76.131':445
'65.##8.36.173':445
'65.##8.104.195':445
'65.##8.9.106':445
'65.##8.46.58':445
'65.##8.167.11':445
'65.##8.123.24':445
'65.##8.175.68':445
'65.#08.9.12':445
'65.##8.66.61':445
'65.#08.22.1':445
'65.##8.2.191':445
'65.##8.76.107':445
'65.##8.211.78':445
'65.##8.97.23':445
'65.##8.27.51':445
'65.##8.153.124':445
'65.##8.25.89':445
'65.##8.146.204':445
'65.##8.196.188':445
'65.##8.63.26':445
'65.##8.156.198':139
'65.##8.27.51':139
'65.##8.211.78':139
'65.##8.97.23':139
'65.##8.137.191':139
'65.##8.76.131':139
'65.##8.63.26':139
'65.##8.146.204':139
'65.##8.196.188':139
'65.##8.2.191':139
'65.##8.76.107':139
'65.##8.18.108':139
'65.##8.188.169':139
'65.##8.116.0':139
'65.##8.63.19':139
'65.##8.18.175':139
'65.##8.36.167':139
'65.##8.193.97':139
'65.##8.163.143':139
'65.##8.24.142':139
'65.##8.190.131':139
'65.##8.167.11':139
'65.##8.72.179':139
'65.##8.52.73':139
'65.##8.239.1':139
'65.##8.175.68':139
'65.##8.112.23':139
'65.##8.41.252':139
'65.##8.199.42':139
'65.##8.44.152':139
'65.##8.148.125':139
'65.##8.2.113':139
'65.##8.25.89':139
'65.##8.36.173':139
'65.##8.153.124':139
'65.##8.46.58':139
'65.##8.9.106':139
'65.#08.9.12':139
'65.##8.123.24':139
'65.#08.22.1':139
'65.##8.104.195':139
'65.##8.66.61':139
'65.##8.112.23':445
'65.##8.162.140':139
'65.##8.128.76':445
'65.##8.253.21':139
'65.##8.106.252':139
'65.##8.103.128':139
'65.##8.31.135':445
'65.##8.14.230':445
'65.##8.241.223':445
'65.##8.111.250':445
'65.##8.42.236':445
'65.##8.132.220':139
'65.##8.129.10':139
'65.##8.220.149':139
'65.##8.25.107':139
'65.##8.51.74':139
'65.##8.240.224':139
'65.##8.25.44':139
'65.##8.67.94':139
'65.##8.224.96':139
'65.##8.39.171':139
'65.##8.67.36':445
'65.##8.25.44':445
'65.##8.106.252':445
'65.##8.240.224':445
'65.##8.39.171':445
'65.##8.67.94':445
'65.##8.181.99':139
'65.##8.204.78':139
'65.##8.162.140':445
'65.##8.103.128':445
'65.##8.253.21':445
'65.##8.24.39':445
'65.##8.25.107':445
'65.##8.94.169':445
'65.##8.220.208':445
'65.##8.168.154':445
'65.##8.129.10':445
'65.##8.224.96':445
'65.##8.132.220':445
'65.##8.51.74':445
'65.##8.220.149':445
'65.##8.24.39':139
'65.##8.63.254':445
'65.##8.53.229':445
'65.##8.161.229':445
'65.##8.14.68':445
'65.##8.229.9':445
'65.##8.188.169':9988
'65.##8.18.175':9988
'65.##8.243.42':445
'65.##8.167.53':445
'65.##8.85.167':445
'65.##8.148.125':445
'65.##8.2.113':445
'65.##8.52.73':445
'65.##8.239.1':445
'65.##8.72.179':445
'65.##8.156.198':445
'65.##8.148.57':445
'65.##8.199.42':445
'65.##8.44.152':445
'65.##8.41.252':445
'65.##8.163.143':9988
'65.##8.241.223':139
'65.##8.31.135':139
'65.##8.42.236':139
'65.##8.128.76':139
'65.##8.111.250':139
'65.##8.168.154':139
'65.##8.94.169':139
'65.##8.220.208':139
'65.##8.14.230':139
'65.##8.67.36':139
'65.##8.153.124':9988
'65.##8.104.195':9988
'65.##8.63.26':9988
'65.##8.193.97':9988
'65.##8.97.23':9988
'65.##8.41.252':9988
'65.##8.199.42':9988
'65.##8.72.179':9988
'65.#08.22.1':9988
'65.##8.112.23':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней