Trojan.DownLoader12.29241

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#5.57.97':139
'22#.#5.215.88':139
'22#.#5.79.89':139
'22#.#5.164.47':139
'22#.65.6.36':139
'22#.#5.88.118':445
'22#.#5.137.105':445
'22#.#5.50.164':139
'22#.#5.56.216':139
'22#.#5.10.216':139
'22#.#5.187.114':139
'22#.#5.119.165':139
'22#.#5.78.43':139
'22#.#5.66.16':139
'22#.#5.208.39':139
'22#.#5.48.208':139
'22#.#5.18.57':139
'22#.#5.14.61':139
'22#.#5.235.159':139
'22#.65.46.2':139
'22#.#5.73.10':445
'22#.#5.75.158':445
'22#.#5.238.9':445
'22#.#5.98.227':445
'22#.#5.174.34':445
'22#.#5.238.252':445
'22#.#5.153.236':445
'22#.#5.34.219':445
'22#.#5.254.37':445
'22#.#5.165.172':445
'22#.#5.140.19':445
'22#.#5.128.129':445
'22#.#5.204.171':445
'22#.#5.142.90':445
'22#.#5.0.147':445
'22#.#5.56.21':445
'22#.#5.228.29':445
'22#.#5.84.62':445
'22#.#5.207.3':445
'22#.#5.163.253':445
'22#.#5.44.114':445
'22#.65.59.5':445
'22#.#5.88.118':139
'22#.#5.22.147':445
'22#.#5.27.127':445
'22#.#5.3.254':445
'22#.#5.56.21':139
'22#.#5.142.90':139
'22#.#5.0.147':139
'22#.#5.137.105':139
'22#.#5.73.10':139
'22#.#5.60.207':139
'22#.#5.27.127':139
'22#.#5.36.240':139
'22#.65.0.64':445
'22#.#5.189.97':445
'22#.#5.36.240':445
'22#.#5.60.207':445
'22#.65.59.5':139
'22#.#5.3.254':139
'22#.#5.22.147':139
'22#.#5.128.129':139
'22#.#5.254.37':139
'22#.#5.153.236':139
'22#.#5.140.19':139
'22#.#5.238.9':139
'22#.#5.165.172':139
'22#.#5.218.38':139
'22#.#5.35.17':139
'22#.#5.9.252':139
'22#.#5.34.219':139
'22#.#5.157.115':139
'22#.#5.207.3':139
'22#.#5.228.29':139
'22#.#5.44.114':139
'22#.#5.204.171':139
'22#.#5.163.253':139
'22#.#5.98.227':139
'22#.#5.75.158':139
'22#.#5.238.252':139
'22#.#5.84.62':139
'22#.#5.174.34':139
'22#.#5.157.115':445
'22#.#5.59.207':139
'22#.#5.166.59':139
'22#.#5.207.59':139
'22#.#5.197.205':139
'22#.#5.209.118':139
'22#.65.49.3':139
'22#.#5.205.99':139
'22#.#5.37.47':139
'22#.#5.93.18':139
'22#.#5.139.62':139
'22#.#5.98.86':139
'22#.#5.13.164':139
'22#.65.5.59':139
'22#.#5.158.5':139
'22#.#5.127.158':139
'22#.#5.215.241':139
'22#.#5.89.144':139
'22#.#5.190.175':139
'22#.#5.150.0':139
'22#.#5.35.116':139
'22#.#5.45.23':139
'22#.#5.81.221':139
'22#.#5.212.244':139
'22#.#5.77.216':139
'22#.#5.110.174':139
'22#.#5.125.152':139
'22#.#5.67.154':445
'22#.#5.33.12':445
'22#.#5.43.219':445
'22#.#5.106.195':139
'22#.#5.22.245':445
'22#.#5.42.145':139
'22#.#5.148.21':139
'22#.#5.120.230':139
'22#.#5.156.44':139
'22#.#5.120.51':139
'22#.#5.20.63':139
'22#.#5.22.111':139
'22#.#5.62.210':139
'22#.#5.16.56':139
'22#.#5.42.89':139
'22#.#5.164.47':445
'22#.65.6.36':445
'22#.#5.18.57':445
'22#.#5.14.61':445
'22#.#5.48.208':445
'22#.#5.56.216':445
'22#.#5.10.216':445
'22#.#5.215.88':445
'22#.#5.79.89':445
'22#.#5.57.97':445
'22#.#5.66.16':445
'22#.#5.208.39':445
'22#.#5.35.17':445
'22#.#5.9.252':445
'22#.#5.218.38':445
'22#.#5.235.159':445
'22#.65.46.2':445
'22#.#5.119.165':445
'22#.#5.78.43':445
'22#.#5.187.114':445
'22#.#5.50.164':445
'22#.#5.43.219':139
'22#.#5.33.12':139
'22#.#5.22.245':139
'22#.65.5.69':445
'22#.#5.103.173':445
'22#.#5.42.243':139
'22#.#5.97.21':139
'22#.#5.138.214':139
'22#.#5.67.154':139
'22#.#5.179.120':139
'22#.#5.8.133':139
'22#.65.5.69':139
'22#.#5.31.77':139
'22#.#5.13.148':139
'22#.#5.77.58':139
'22#.#5.31.77':445
'22#.#5.8.133':445
'22#.#5.77.58':445
'22#.#5.103.173':139
'22#.#5.13.148':445
'22#.#5.153.149':445
'22#.#5.87.87':445
'22#.#5.224.11':445
'22#.#5.159.222':445
'22#.#5.151.160':445
'22#.#5.104.147':445
'22#.#5.181.198':445
'22#.#5.85.226':445
'22#.#5.33.230':445
'22#.#5.150.5':445
'22#.#5.150.150':445
'22#.#5.61.220':139
'22#.#5.138.142':139
'22#.#5.84.108':139
'22#.#5.128.180':139
'22#.#5.63.24':139
'22#.#5.201.205':139
'22#.#5.112.17':139
'22#.#5.80.62':139
'22#.#5.157.138':139
'22#.#5.97.148':139
'22#.#5.195.85':445
'22#.65.93.0':445
'22#.#5.76.214':445
'22#.#5.53.173':445
'22#.#5.112.154':445
'22#.#5.105.104':445
'22#.#5.247.113':445
'22#.#5.155.150':445
'22#.#5.103.234':445
'22#.#5.76.164':445
'22#.#5.42.104':445
'22#.#5.32.207':445
'22#.#5.247.252':445
'22#.#5.148.235':445
'22#.#5.168.11':445
'22#.#5.35.27':445
'22#.#5.102.76':445
'22#.#5.157.149':445
'22#.#5.75.242':445
'22#.#5.54.81':445
'22#.#5.144.18':445
'22#.#5.148.235':139
'22#.#5.32.207':139
'22#.#5.35.27':139
'22#.#5.195.85':139
'22#.#5.168.11':139
'22#.#5.75.242':139
'22#.#5.102.76':139
'22#.#5.144.18':139
'22#.#5.247.252':139
'22#.#5.54.81':139
'22#.#5.87.87':139
'22#.#5.224.11':139
'22#.#5.159.222':139
'22#.#5.151.160':139
'22#.#5.104.147':139
'22#.#5.181.198':139
'22#.#5.85.226':139
'22#.#5.33.230':139
'22#.#5.150.5':139
'22#.#5.150.150':139
'22#.#5.157.149':139
'22#.#5.123.97':139
'22#.#5.100.103':139
'22#.#5.8.120':139
'22#.#5.101.247':139
'22#.#5.227.71':139
'22#.#5.234.132':139
'22#.#5.12.232':139
'22#.65.8.5':139
'22#.#5.244.100':139
'22#.#5.188.244':139
'22#.65.93.0':139
'22#.#5.76.214':139
'22#.#5.53.173':139
'22#.#5.112.154':139
'22#.#5.105.104':139
'22#.#5.155.150':139
'22#.#5.247.113':139
'22#.#5.42.104':139
'22#.#5.76.164':139
'22#.#5.103.234':139
'22#.#5.101.247':445
'22#.#5.149.124':139
'22#.#5.153.149':139
'22#.#5.88.129':139
'22#.#5.6.206':139
'22#.#5.29.129':139
'22#.#5.107.52':445
'22#.#5.48.139':445
'22#.#5.251.110':445
'22#.65.0.64':139
'22#.#5.189.97':139
'22#.#5.143.22':139
'22#.#5.50.254':139
'22#.#5.169.23':139
'22#.#5.96.90':139
'22#.#5.93.122':139
'22#.#5.26.85':139
'22#.#5.206.25':139
'22#.#5.18.241':139
'22#.#5.74.131':139
'22#.#5.142.48':139
'22#.#5.55.212':445
'22#.#5.18.241':445
'22#.#5.26.85':445
'22#.#5.142.48':445
'22#.#5.50.254':445
'22#.#5.74.131':445
'22#.#5.88.129':445
'22#.#5.149.124':445
'22#.#5.29.129':445
'22#.#5.206.25':445
'22#.#5.6.206':445
'22#.#5.44.75':445
'22#.#5.79.231':445
'22#.#5.144.246':445
'22#.#5.63.166':445
'22#.#5.153.181':445
'22#.#5.169.23':445
'22#.#5.143.22':445
'22#.#5.93.122':445
'22#.#5.238.113':445
'22#.#5.96.90':445
'22#.#5.138.142':445
'22#.#5.157.138':445
'22#.#5.61.220':445
'22#.#5.63.24':445
'22#.#5.84.108':445
'22#.#5.112.17':445
'22#.#5.224.11':9988
'22#.#5.201.205':445
'22#.#5.97.148':445
'22#.#5.80.62':445
'22#.#5.100.103':445
'22#.#5.244.100':445
'22#.#5.123.97':445
'22#.#5.227.71':445
'22#.#5.8.120':445
'22#.#5.12.232':445
'22#.#5.128.180':445
'22#.#5.234.132':445
'22#.#5.188.244':445
'22#.65.8.5':445
'22#.#5.104.147':9988
'22#.#5.55.212':139
'22#.#5.63.166':139
'22#.#5.48.139':139
'22#.#5.251.110':139
'22#.#5.107.52':139
'22#.#5.79.231':139
'22#.#5.238.113':139
'22#.#5.44.75':139
'22#.#5.153.181':139
'22#.#5.144.246':139
'22#.65.93.0':9988
'22#.#5.42.104':9988
'22#.#5.105.104':9988
'22#.#5.85.226':9988
'22#.#5.102.76':9988
'22#.#5.227.71':9988
'22#.#5.188.244':9988
'22#.#5.101.247':9988
'22#.#5.76.164':9988
'22#.#5.103.234':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней