Trojan.DownLoader12.29237

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'13#.#1.215.25':445
'13#.#1.19.216':445
'13#.#1.195.207':445
'13#.#1.25.195':445
'13#.#1.100.30':139
'13#.#1.137.147':445
'13#.#1.47.139':139
'13#.#1.137.147':139
'13#.#1.100.30':445
'13#.#1.26.117':445
'13#.#1.79.231':445
'13#.#1.233.216':445
'13#.#1.27.113':445
'13#.#1.231.159':445
'13#.#1.88.129':445
'13#.#1.28.87':445
'13#.#1.113.113':445
'13#.#1.1.176':445
'13#.#1.250.86':445
'13#.#1.142.147':139
'13#.#1.15.108':139
'13#.#1.6.122':139
'13#.#1.154.250':139
'13#.#1.35.245':139
'13#.#1.50.129':139
'13#.#1.179.141':139
'13#.#1.5.219':139
'13#.#1.201.118':139
'13#.#1.219.208':139
'13#.#1.114.74':139
'13#.#1.198.15':139
'13#.#1.130.36':139
'13#.#1.59.110':139
'13#.#1.205.198':139
'13#.#1.65.251':139
'13#.#1.9.247':139
'13#.#1.155.219':139
'13#.91.67.1':139
'13#.91.9.55':139
'13#.#1.86.26':445
'13#.#1.69.86':445
'13#.#1.107.146':445
'13#.#1.112.102':445
'13#.#1.250.69':445
'13#.#1.248.68':445
'13#.#1.156.122':445
'13#.#1.68.250':445
'13#.#1.55.249':445
'13#.91.37.7':445
'13#.#1.215.25':139
'13#.#1.19.216':139
'13#.#1.195.207':139
'13#.#1.25.195':139
'13#.#1.238.119':445
'13#.#1.169.31':445
'13#.#1.199.89':445
'13#.#1.87.124':445
'13#.#1.75.202':445
'13#.#1.47.197':445
'13#.#1.40.92':445
'13#.#1.50.203':445
'13#.#1.232.244':445
'13#.#1.23.233':445
'13#.#1.181.217':445
'13#.#1.237.116':445
'13#.#1.19.18':445
'13#.#1.186.181':445
'13#.#1.84.69':445
'13#.#1.245.79':445
'13#.#1.151.250':445
'13#.#1.232.18':445
'13#.#1.68.204':445
'13#.#1.226.38':445
'13#.#1.26.135':445
'13#.#1.50.141':445
'13#.91.58.9':445
'13#.91.8.99':445
'13#.#1.115.208':445
'13#.#1.81.252':139
'13#.#1.77.14':445
'13#.#1.157.7':445
'13#.#1.96.159':445
'13#.91.14.8':445
'13#.#1.181.233':445
'13#.#1.61.52':445
'13#.#1.126.190':445
'13#.#1.105.214':445
'13#.#1.107.203':445
'13#.#1.81.252':445
'13#.#1.15.108':445
'13#.#1.6.122':445
'13#.#1.154.250':445
'13#.#1.35.245':445
'13#.#1.50.129':445
'13#.#1.179.141':445
'13#.#1.5.219':445
'13#.#1.201.118':445
'13#.#1.219.208':445
'13#.#1.66.76':445
'13#.#1.126.44':445
'13#.#1.171.139':445
'13#.#1.224.28':445
'13#.#1.78.106':445
'13#.#1.50.36':445
'13#.#1.252.218':139
'13#.#1.239.148':139
'13#.#1.32.56':445
'13#.#1.218.111':445
'13#.#1.176.102':445
'13#.#1.249.216':445
'13#.#1.30.92':445
'13#.#1.105.9':445
'13#.#1.93.132':445
'13#.#1.156.120':445
'13#.#1.25.41':445
'13#.#1.200.25':445
'13#.#1.255.26':445
'13#.#1.196.44':445
'13#.#1.249.216':139
'13#.#1.30.92':139
'13#.#1.105.9':139
'13#.#1.93.132':139
'13#.#1.156.120':139
'13#.#1.25.41':139
'13#.#1.200.25':139
'13#.#1.255.26':139
'13#.#1.196.44':139
'13#.#1.66.76':139
'13#.#1.77.14':139
'13#.#1.157.7':139
'13#.#1.96.159':139
'13#.91.14.8':139
'13#.#1.181.233':139
'13#.#1.61.52':139
'13#.#1.126.190':139
'13#.#1.105.214':139
'13#.#1.107.203':139
'13#.#1.176.102':139
'13#.#1.130.36':445
'13#.#1.65.251':445
'13#.#1.205.198':445
'13#.#1.198.15':445
'13#.91.67.1':445
'13#.#1.9.247':445
'13#.#1.114.74':445
'13#.91.9.55':445
'13#.#1.155.219':445
'13#.#1.59.110':445
'13#.#1.126.44':139
'13#.#1.171.139':139
'13#.#1.224.28':139
'13#.#1.78.106':139
'13#.#1.50.36':139
'13#.#1.47.139':445
'13#.#1.142.147':445
'13#.#1.32.56':139
'13#.#1.218.111':139
'13#.#1.14.10':445
'13#.#1.151.241':445
'13#.#1.197.43':139
'13#.#1.117.71':139
'13#.#1.148.18':445
'13#.#1.73.80':445
'13#.#1.30.24':445
'13#.#1.207.222':445
'13#.#1.86.85':445
'13#.91.5.48':139
'13#.#1.134.140':139
'13#.#1.34.134':139
'13#.#1.177.122':139
'13#.#1.140.176':139
'13#.#1.160.177':139
'13#.#1.64.235':139
'13#.#1.205.107':139
'13#.#1.226.149':139
'13#.#1.226.199':139
'13#.#1.72.30':445
'13#.#1.239.168':445
'13#.#1.29.64':445
'13#.#1.67.213':445
'13#.#1.31.22':445
'13#.#1.163.134':445
'13#.#1.114.85':445
'13#.#1.0.130':445
'13#.#1.125.163':445
'13#.#1.102.125':445
'13#.#1.88.89':445
'13#.#1.90.127':445
'13#.#1.98.60':445
'13#.#1.178.71':445
'13#.#1.191.147':445
'13#.#1.187.36':445
'13#.#1.76.34':445
'13#.#1.18.194':445
'13#.#1.16.217':445
'13#.#1.117.178':445
'13#.#1.187.36':139
'13#.#1.16.217':139
'13#.#1.90.127':139
'13#.#1.98.60':139
'13#.#1.117.178':139
'13#.#1.88.89':139
'13#.#1.67.213':139
'13#.#1.76.34':139
'13#.#1.18.194':139
'13#.#1.191.147':139
'13#.#1.151.241':139
'13#.#1.14.10':139
'13#.#1.86.85':139
'13#.#1.207.222':139
'13#.#1.148.18':139
'13#.#1.72.30':139
'13#.#1.178.71':139
'13#.#1.73.80':139
'13#.#1.30.24':139
'13#.#1.31.22':139
'13#.#1.71.10':139
'13#.#1.23.116':139
'13#.#1.86.161':139
'13#.#1.197.86':139
'13#.#1.180.43':139
'13#.#1.103.53':139
'13#.#1.122.78':139
'13#.#1.124.162':139
'13#.#1.55.92':139
'13#.#1.161.179':139
'13#.#1.163.134':139
'13#.#1.125.163':139
'13#.#1.239.168':139
'13#.#1.29.64':139
'13#.#1.102.125':139
'13#.#1.152.74':139
'13#.91.45.6':139
'13#.#1.114.85':139
'13#.#1.0.130':139
'13#.#1.152.74':445
'13#.#1.151.250':139
'13#.#1.232.18':139
'13#.#1.68.204':139
'13#.#1.226.38':139
'13#.#1.26.135':139
'13#.#1.50.141':139
'13#.91.58.9':139
'13#.91.8.99':139
'13#.#1.115.208':139
'13#.#1.47.197':139
'13#.#1.86.26':139
'13#.#1.69.86':139
'13#.#1.107.146':139
'13#.#1.112.102':139
'13#.#1.250.69':139
'13#.#1.55.249':139
'13#.#1.156.122':139
'13#.#1.68.250':139
'13#.#1.248.68':139
'13#.#1.245.79':139
'13#.#1.233.216':139
'13#.#1.88.129':139
'13#.#1.231.159':139
'13#.#1.79.231':139
'13#.#1.1.176':139
'13#.#1.113.113':139
'13#.#1.26.117':139
'13#.#1.250.86':139
'13#.#1.28.87':139
'13#.#1.27.113':139
'13#.#1.40.92':139
'13#.#1.50.203':139
'13#.#1.232.244':139
'13#.#1.23.233':139
'13#.#1.181.217':139
'13#.#1.237.116':139
'13#.#1.19.18':139
'13#.#1.186.181':139
'13#.#1.84.69':139
'13#.#1.140.176':445
'13#.#1.134.140':445
'13#.#1.122.78':445
'13#.#1.177.122':445
'13#.#1.34.134':445
'13#.#1.226.199':445
'13#.#1.64.235':445
'13#.#1.160.177':445
'13#.#1.226.149':445
'13#.#1.103.53':445
'13#.#1.161.179':445
'13#.#1.197.86':445
'13#.91.45.6':445
'13#.#1.86.161':445
'13#.#1.71.10':445
'13#.#1.124.162':445
'13#.#1.55.92':445
'13#.#1.23.116':445
'13#.#1.180.43':445
'13#.#1.205.107':445
'13#.#1.140.176':9988
'13#.#1.238.119':139
'13#.#1.23.116':9988
'13#.#1.180.43':9988
'13#.#1.87.124':139
'13#.#1.199.89':139
'13#.91.37.7':139
'13#.#1.75.202':139
'13#.#1.169.31':139
'13#.#1.197.86':9988
'13#.#1.117.71':445
'13#.#1.148.18':9988
'13#.91.5.48':445
'13#.#1.197.43':445
'13#.#1.14.10':9988
'13#.#1.0.130':9988
'13#.#1.161.179':9988
'13#.#1.187.36':9988
'13#.#1.125.163':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней