Trojan.DownLoader12.29242

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#9.230.90':139
'20#.#9.58.104':139
'20#.59.0.10':139
'20#.#9.64.123':139
'20#.#9.89.104':139
'20#.#9.22.185':139
'20#.#9.154.66':139
'20#.#9.38.220':139
'20#.#9.142.120':139
'20#.#9.32.11':139
'20#.#9.162.136':139
'20#.#9.130.160':139
'20#.#9.139.58':139
'20#.#9.71.72':139
'20#.#9.106.101':139
'20#.#9.72.106':139
'20#.#9.6.143':139
'20#.59.28.6':139
'20#.#9.70.164':139
'20#.#9.180.139':139
'20#.#9.107.22':139
'20#.#9.106.101':445
'20#.#9.72.106':445
'20#.#9.119.227':445
'20#.#9.88.52':445
'20#.#9.217.2':445
'20#.#9.180.139':445
'20#.#9.107.22':445
'20#.#9.139.58':445
'20#.#9.71.72':445
'20#.#9.130.160':445
'20#.#9.98.251':445
'20#.#9.27.169':139
'20#.#9.21.41':139
'20#.#9.48.147':139
'20#.#9.37.152':139
'20#.#9.138.32':139
'20#.#9.30.90':445
'20#.#9.35.134':445
'20#.#9.223.97':445
'20#.#9.79.220':445
'20#.#9.46.13':445
'20#.#9.119.227':139
'20#.#9.132.58':139
'20#.#9.224.4':139
'20#.#9.3.134':139
'20#.#9.255.51':139
'20#.#9.112.168':139
'20#.#9.214.43':445
'20#.#9.196.214':445
'20#.#9.46.55':445
'20#.#9.139.223':139
'20#.#9.85.139':139
'20#.#9.52.30':139
'20#.#9.214.43':139
'20#.#9.196.214':139
'20#.#9.46.55':139
'20#.#9.189.204':445
'20#.#9.210.189':445
'20#.#9.161.178':139
'20#.#9.73.149':139
'20#.#9.249.70':139
'20#.#9.179.143':139
'20#.#9.184.94':139
'20#.#9.46.13':139
'20#.#9.223.97':139
'20#.#9.79.220':139
'20#.#9.139.223':445
'20#.#9.85.139':445
'20#.#9.88.52':139
'20#.#9.217.2':139
'20#.#9.98.251':139
'20#.#9.30.90':139
'20#.#9.35.134':139
'20#.#9.224.4':445
'20#.#9.161.178':445
'20#.#9.73.149':445
'20#.#9.249.70':445
'20#.#9.179.143':445
'20#.#9.184.94':445
'20#.#9.3.134':445
'20#.#9.132.58':445
'20#.#9.112.168':445
'20#.#9.52.30':445
'20#.#9.255.51':445
'20#.#9.70.164':445
'20#.#9.118.238':139
'20#.#9.86.67':139
'20#.#9.237.237':139
'20#.#9.45.161':139
'20#.#9.56.206':139
'20#.#9.249.207':139
'20#.#9.56.139':139
'20#.#9.117.17':139
'20#.#9.213.192':139
'20#.#9.154.73':139
'20#.#9.38.250':139
'20#.#9.113.202':445
'20#.#9.33.95':445
'20#.#9.169.111':445
'20#.#9.111.24':445
'20#.#9.126.73':445
'20#.#9.186.154':139
'20#.#9.236.21':139
'20#.#9.5.179':139
'20#.#9.249.116':445
'20#.#9.46.249':445
'20#.#9.39.248':139
'20#.#9.135.54':139
'20#.#9.162.2':139
'20#.#9.209.88':139
'20#.#9.2.209':139
'20#.#9.38.159':139
'20#.#9.34.161':139
'20#.#9.155.109':139
'20#.#9.199.81':139
'20#.#9.108.199':139
'20#.#9.210.74':139
'20#.#9.172.191':139
'20#.#9.244.45':139
'20#.#9.105.156':139
'20#.#9.110.49':139
'20#.#9.24.46':139
'20#.#9.26.123':139
'20#.#9.101.140':139
'20#.#9.21.147':139
'20#.#9.100.211':139
'20#.#9.101.195':139
'20#.#9.23.242':445
'20#.#9.138.32':445
'20#.#9.48.147':445
'20#.#9.37.152':445
'20#.#9.22.185':445
'20#.#9.154.66':445
'20#.#9.74.131':139
'20#.#9.167.26':139
'20#.#9.170.190':139
'20#.#9.27.169':445
'20#.#9.21.41':445
'20#.#9.38.220':445
'20#.#9.64.123':445
'20#.#9.89.104':445
'20#.#9.162.136':445
'20#.#9.6.143':445
'20#.59.28.6':445
'20#.#9.142.120':445
'20#.#9.32.11':445
'20#.#9.58.104':445
'20#.59.0.10':445
'20#.#9.230.90':445
'20#.#9.74.131':445
'20#.#9.167.26':445
'20#.#9.170.190':445
'20#.#9.249.116':139
'20#.#9.46.249':139
'20#.#9.187.214':445
'20#.#9.213.197':445
'20#.#9.10.131':445
'20#.#9.33.238':445
'20#.#9.107.142':445
'20#.#9.33.95':139
'20#.#9.187.214':139
'20#.#9.213.197':139
'20#.#9.10.131':139
'20#.#9.33.238':139
'20#.#9.107.142':139
'20#.#9.169.111':139
'20#.#9.113.202':139
'20#.#9.126.73':139
'20#.#9.23.242':139
'20#.#9.111.24':139
'20#.#9.194.49':445
'20#.#9.170.226':445
'20#.#9.194.247':445
'20#.#9.34.164':445
'20#.#9.102.4':445
'20#.#9.72.17':445
'20#.#9.115.79':445
'20#.#9.228.253':445
'20#.#9.253.125':445
'20#.59.71.6':445
'20#.#9.25.46':445
'20#.#9.171.228':445
'20#.#9.99.41':139
'20#.#9.164.219':139
'20#.#9.100.117':139
'20#.#9.74.158':139
'20#.#9.245.178':139
'20#.#9.155.106':445
'20#.#9.232.88':445
'20#.#9.203.126':139
'20#.#9.37.238':139
'20#.#9.154.214':139
'20#.#9.144.124':445
'20#.#9.141.20':445
'20#.#9.163.83':445
'20#.#9.55.41':445
'20#.#9.190.64':445
'20#.#9.1.215':445
'20#.#9.17.62':445
'20#.#9.216.218':445
'20#.#9.149.176':445
'20#.#9.92.220':445
'20#.#9.137.168':445
'20#.#9.3.175':445
'20#.#9.36.242':445
'20#.#9.84.137':445
'20#.#9.32.225':445
'20#.#9.172.233':445
'20#.#9.73.252':445
'20#.#9.244.73':445
'20#.#9.30.197':445
'20#.#9.13.57':445
'20#.#9.100.246':445
'20#.#9.41.168':139
'20#.#9.172.233':139
'20#.#9.84.137':139
'20#.#9.32.225':139
'20#.#9.115.79':139
'20#.#9.228.253':139
'20#.#9.100.246':139
'20#.#9.30.197':139
'20#.#9.13.57':139
'20#.#9.3.175':139
'20#.#9.36.242':139
'20#.#9.253.125':139
'20#.#9.155.106':139
'20#.#9.171.228':139
'20#.#9.232.88':139
'20#.#9.102.4':139
'20#.#9.170.226':139
'20#.59.71.6':139
'20#.#9.25.46':139
'20#.#9.194.247':139
'20#.#9.72.17':139
'20#.#9.34.164':139
'20#.#9.217.134':139
'20#.#9.158.250':139
'20#.#9.173.216':139
'20#.#9.1.215':139
'20#.#9.17.62':139
'20#.#9.182.176':139
'20#.#9.128.6':139
'20#.#9.183.167':139
'20#.#9.245.88':139
'20#.#9.167.244':139
'20#.#9.216.218':139
'20#.#9.55.41':139
'20#.#9.190.64':139
'20#.#9.137.168':139
'20#.#9.73.252':139
'20#.#9.244.73':139
'20#.#9.149.176':139
'20#.#9.92.220':139
'20#.#9.141.20':139
'20#.#9.163.83':139
'20#.#9.144.124':139
'20#.#9.173.216':445
'20#.#9.139.21':445
'20#.#9.148.6':445
'20#.#9.210.189':139
'20#.#9.194.49':139
'20#.#9.189.204':139
'20#.#9.125.124':445
'20#.#9.210.125':445
'20#.#9.124.183':445
'20#.#9.179.208':445
'20#.#9.234.126':445
'20#.#9.239.145':139
'20#.#9.213.228':139
'20#.#9.150.232':139
'20#.#9.94.26':139
'20#.#9.191.126':139
'20#.#9.221.34':139
'20#.#9.198.19':139
'20#.#9.210.198':139
'20#.#9.30.170':139
'20#.#9.8.248':139
'20#.#9.163.161':139
'20#.#9.150.232':445
'20#.#9.8.248':445
'20#.#9.213.228':445
'20#.#9.221.34':445
'20#.#9.94.26':445
'20#.#9.210.198':445
'20#.#9.239.145':445
'20#.#9.198.19':445
'20#.#9.163.161':445
'20#.#9.30.170':445
'20#.#9.191.126':445
'20#.#9.27.233':445
'20#.#9.224.34':445
'20#.#9.212.245':445
'20#.#9.5.156':445
'20#.#9.33.163':445
'20#.#9.133.63':445
'20#.#9.45.133':445
'20#.#9.162.10':445
'20#.#9.53.224':445
'20#.#9.29.206':445
'20#.#9.45.133':139
'20#.#9.154.214':445
'20#.#9.203.126':445
'20#.#9.37.238':445
'20#.#9.99.41':445
'20#.#9.164.219':445
'20#.#9.100.246':9988
'20#.#9.13.57':9988
'20#.#9.170.226':9988
'20#.#9.102.4':9988
'20#.#9.34.164':9988
'20#.#9.100.117':445
'20#.#9.167.244':445
'20#.#9.183.167':445
'20#.#9.245.88':445
'20#.#9.217.134':445
'20#.#9.158.250':445
'20#.#9.74.158':445
'20#.#9.245.178':445
'20#.#9.41.168':445
'20#.#9.182.176':445
'20#.#9.128.6':445
'20#.#9.212.245':139
'20#.#9.27.233':139
'20#.#9.33.163':139
'20#.#9.210.125':139
'20#.#9.5.156':139
'20#.#9.162.10':139
'20#.#9.133.63':139
'20#.#9.29.206':139
'20#.#9.224.34':139
'20#.#9.53.224':139
'20#.#9.125.124':139
'20#.#9.158.250':9988
'20#.#9.17.62':9988
'20#.#9.137.168':9988
'20#.#9.30.197':9988
'20#.#9.244.73':9988
'20#.#9.234.126':139
'20#.#9.124.183':139
'20#.#9.179.208':139
'20#.#9.139.21':139
'20#.#9.148.6':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней