Trojan.DownLoader12.29231

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#7.61.31':445
'21#.#7.102.125':445
'21#.#7.158.23':445
'21#.#7.86.193':445
'21#.#7.74.75':445
'21#.#7.34.53':445
'21#.97.87.5':445
'21#.#7.153.241':445
'21#.#7.66.56':445
'21#.#7.41.213':445
'21#.#7.10.119':445
'21#.#7.229.76':445
'21#.#7.165.229':445
'21#.#7.148.214':445
'21#.#7.32.72':445
'21#.#7.140.44':445
'21#.#7.112.212':445
'21#.#7.144.234':445
'21#.#7.25.195':445
'21#.#7.208.247':445
'21#.#7.89.206':445
'21#.#7.21.203':445
'21#.#7.75.205':139
'21#.#7.14.65':139
'21#.#7.136.225':139
'21#.#7.97.131':139
'21#.#7.21.63':139
'21#.#7.38.203':139
'21#.#7.141.233':139
'21#.#7.158.38':139
'21#.#7.204.0':139
'21#.#7.88.184':139
'21#.#7.154.212':445
'21#.#7.177.171':139
'21#.#7.103.178':139
'21#.#7.97.234':445
'21#.#7.46.141':445
'21#.#7.127.226':445
'21#.#7.103.178':445
'21#.#7.16.254':445
'21#.#7.177.171':445
'21#.#7.16.254':139
'21#.#7.154.212':139
'21#.#7.31.139':445
'21#.#7.41.213':139
'21#.#7.153.241':139
'21#.#7.66.56':139
'21#.#7.61.31':139
'21#.#7.102.125':139
'21#.#7.46.141':139
'21#.#7.127.226':139
'21#.#7.21.203':139
'21#.#7.34.53':139
'21#.97.87.5':139
'21#.#7.158.23':139
'21#.#7.89.206':139
'21#.#7.25.195':139
'21#.#7.208.247':139
'21#.#7.229.76':139
'21#.#7.165.229':139
'21#.#7.86.193':139
'21#.#7.74.75':139
'21#.#7.10.119':139
'21#.#7.112.212':139
'21#.#7.144.234':139
'21#.#7.97.234':139
'21#.#7.15.11':445
'21#.#7.33.141':445
'21#.#7.181.197':445
'21#.#7.140.207':445
'21#.#7.197.206':445
'21#.#7.98.119':445
'21#.#7.38.55':445
'21#.#7.200.254':445
'21#.#7.40.146':445
'21#.97.39.7':445
'21#.#7.232.48':445
'21#.#7.112.145':445
'21#.#7.201.41':445
'21#.#7.170.222':445
'21#.#7.121.72':445
'21#.#7.38.33':445
'21#.#7.189.246':445
'21#.#7.140.79':445
'21#.#7.107.71':445
'21#.#7.62.198':445
'21#.#7.249.105':445
'21#.#7.117.141':139
'21#.#7.184.173':445
'21#.#7.176.171':445
'21#.#7.76.100':445
'21#.#7.83.252':445
'21#.#7.24.160':445
'21#.#7.113.51':445
'21#.97.19.1':445
'21#.#7.41.77':445
'21#.#7.202.178':445
'21#.#7.120.17':445
'21#.#7.162.237':445
'21#.#7.133.117':445
'21#.#7.101.167':445
'21#.#7.117.141':445
'21#.#7.38.203':445
'21#.#7.141.233':445
'21#.#7.26.212':445
'21#.#7.208.168':445
'21#.#7.165.29':445
'21#.#7.242.181':445
'21#.#7.224.87':445
'21#.#7.195.142':445
'21#.#7.177.99':445
'21#.#7.222.133':445
'21#.#7.106.105':445
'21#.#7.250.88':445
'21#.#7.249.13':445
'21#.#7.244.67':139
'21#.#7.44.174':139
'21#.#7.241.8':139
'21#.#7.36.73':445
'21#.#7.77.96':139
'21#.#7.75.47':445
'21#.#7.96.123':445
'21#.#7.237.49':445
'21#.#7.1.135':445
'21#.#7.168.10':445
'21#.#7.157.131':445
'21#.#7.157.198':445
'21#.#7.242.15':445
'21#.#7.199.126':445
'21#.#7.146.84':445
'21#.#7.126.144':445
'21#.#7.158.38':445
'21#.#7.120.17':139
'21#.#7.41.77':139
'21#.#7.202.178':139
'21#.#7.184.173':139
'21#.#7.176.171':139
'21#.#7.168.10':139
'21#.#7.157.131':139
'21#.#7.195.142':139
'21#.#7.113.51':139
'21#.97.19.1':139
'21#.#7.76.100':139
'21#.#7.224.87':139
'21#.#7.165.29':139
'21#.#7.242.181':139
'21#.#7.133.117':139
'21#.#7.101.167':139
'21#.#7.83.252':139
'21#.#7.24.160':139
'21#.#7.162.237':139
'21#.#7.26.212':139
'21#.#7.208.168':139
'21#.#7.1.135':139
'21#.#7.97.131':445
'21#.#7.21.63':445
'21#.#7.36.73':139
'21#.#7.177.99':139
'21#.#7.222.133':139
'21#.#7.204.0':445
'21#.#7.88.184':445
'21#.#7.14.65':445
'21#.#7.136.225':445
'21#.#7.75.205':445
'21#.#7.106.105':139
'21#.#7.126.144':139
'21#.#7.199.126':139
'21#.#7.146.84':139
'21#.#7.96.123':139
'21#.#7.237.49':139
'21#.#7.250.88':139
'21#.#7.249.13':139
'21#.#7.75.47':139
'21#.#7.157.198':139
'21#.#7.242.15':139
'21#.#7.240.118':445
'21#.#7.62.66':445
'21#.#7.25.152':445
'21#.#7.207.138':445
'21#.#7.59.101':445
'21#.#7.55.51':445
'21#.#7.124.97':445
'21#.#7.13.211':445
'21#.#7.88.220':445
'21#.#7.131.221':445
'21#.#7.71.39':445
'21#.#7.32.28':139
'21#.#7.159.119':139
'21#.#7.44.229':139
'21#.#7.208.40':139
'21#.#7.37.194':139
'21#.#7.74.43':445
'21#.#7.95.123':445
'21#.#7.17.200':445
'21#.#7.78.125':139
'21#.#7.137.242':139
'21#.#7.20.43':445
'21#.#7.81.120':445
'21#.#7.48.166':445
'21#.#7.74.142':445
'21#.#7.192.241':445
'21#.#7.88.89':445
'21#.#7.3.136':445
'21#.#7.110.99':445
'21#.#7.25.229':445
'21#.#7.20.200':445
'21#.#7.228.182':445
'21#.#7.186.195':445
'21#.#7.190.191':445
'21#.#7.18.21':445
'21#.#7.140.70':445
'21#.#7.226.229':445
'21#.#7.152.240':445
'21#.#7.67.127':445
'21#.#7.134.113':445
'21#.#7.20.103':445
'21#.#7.175.242':445
'21#.#7.127.157':445
'21#.#7.123.115':139
'21#.#7.20.43':139
'21#.#7.226.229':139
'21#.#7.124.97':139
'21#.#7.13.211':139
'21#.#7.55.51':139
'21#.#7.18.21':139
'21#.#7.175.242':139
'21#.#7.190.191':139
'21#.#7.152.240':139
'21#.#7.140.70':139
'21#.#7.131.221':139
'21#.#7.95.123':139
'21#.#7.71.39':139
'21#.#7.207.138':139
'21#.#7.17.200':139
'21#.#7.74.43':139
'21#.#7.62.66':139
'21#.#7.88.220':139
'21#.#7.240.118':139
'21#.#7.59.101':139
'21#.#7.25.152':139
'21#.#7.127.157':139
'21#.#7.223.91':139
'21#.#7.223.201':139
'21#.#7.110.99':139
'21#.#7.25.229':139
'21#.#7.3.136':139
'21#.#7.158.107':139
'21#.#7.239.111':139
'21#.#7.102.14':139
'21#.#7.102.146':139
'21#.#7.14.87':139
'21#.#7.228.182':139
'21#.#7.186.195':139
'21#.#7.192.241':139
'21#.#7.134.113':139
'21#.#7.20.103':139
'21#.#7.67.127':139
'21#.#7.48.166':139
'21#.#7.20.200':139
'21#.#7.81.120':139
'21#.#7.88.89':139
'21#.#7.74.142':139
'21#.#7.223.91':445
'21#.#7.225.95':445
'21#.#7.118.204':445
'21#.#7.71.199':139
'21#.#7.118.204':139
'21#.#7.130.174':139
'21#.#7.38.33':139
'21#.#7.170.222':139
'21#.#7.121.72':139
'21#.#7.130.174':445
'21#.#7.71.199':445
'21#.#7.225.95':139
'21#.#7.183.191':445
'21#.#7.104.145':445
'21#.#7.73.57':445
'21#.#7.5.183':445
'21#.#7.17.194':445
'21#.#7.30.44':445
'21#.#7.96.166':445
'21#.#7.208.201':445
'21#.#7.31.53':445
'21#.#7.6.131':445
'21#.#7.112.145':139
'21#.#7.200.254':139
'21#.#7.98.119':139
'21#.97.39.7':139
'21#.#7.33.141':139
'21#.#7.40.146':139
'21#.#7.140.44':139
'21#.#7.148.214':139
'21#.#7.32.72':139
'21#.#7.38.55':139
'21#.#7.31.139':139
'21#.#7.15.11':139
'21#.#7.107.71':139
'21#.#7.189.246':139
'21#.#7.249.105':139
'21#.#7.201.41':139
'21#.#7.62.198':139
'21#.#7.197.206':139
'21#.#7.181.197':139
'21#.#7.140.207':139
'21#.#7.140.79':139
'21#.#7.232.48':139
'21#.#7.106.33':445
'21#.#7.131.221':9988
'21#.#7.67.127':9988
'21#.#7.137.242':445
'21#.#7.159.119':445
'21#.#7.78.125':445
'21#.#7.152.240':9988
'21#.#7.74.142':9988
'21#.#7.20.43':9988
'21#.#7.175.242':9988
'21#.#7.190.191':9988
'21#.#7.32.28':445
'21#.#7.102.14':445
'21#.#7.158.107':445
'21#.#7.14.87':445
'21#.#7.223.201':445
'21#.#7.102.146':445
'21#.#7.37.194':445
'21#.#7.44.229':445
'21#.#7.208.40':445
'21#.#7.239.111':445
'21#.#7.123.115':445
'21#.#7.62.66':9988
'21#.#7.183.191':139
'21#.#7.104.145':139
'21#.#7.73.57':139
'21#.#7.5.183':139
'21#.#7.17.194':139
'21#.#7.30.44':139
'21#.#7.96.166':139
'21#.#7.208.201':139
'21#.#7.31.53':139
'21#.#7.6.131':139
'21#.#7.106.33':139
'21#.#7.226.229':9988
'21#.#7.186.195':9988
'21#.#7.81.120':9988
'21#.#7.95.123':9988
'21#.#7.55.51':9988
'21#.#7.134.113':9988
'21#.#7.74.43':9988
'21#.#7.88.220':9988
'21#.#7.59.101':9988
'21#.#7.207.138':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней