Trojan.DownLoader12.29244

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#5.248.32':139
'12#.#5.35.48':445
'12#.#5.59.37':139
'12#.#5.206.93':139
'12#.#5.83.30':139
'12#.#5.225.239':445
'12#.#5.114.5':445
'12#.#5.131.116':445
'12#.#5.12.207':445
'12#.25.8.85':445
'12#.#5.52.222':139
'12#.#5.115.28':139
'12#.#5.155.153':139
'12#.#5.152.118':139
'12#.#5.14.37':139
'12#.#5.141.192':139
'12#.#5.93.142':139
'12#.#5.43.133':139
'12#.#5.13.157':139
'12#.#5.198.216':139
'12#.#5.116.210':445
'12#.#5.45.245':445
'12#.#5.70.227':445
'12#.#5.19.117':445
'12#.#5.157.36':445
'12#.#5.112.156':445
'12#.#5.152.118':445
'12#.#5.14.37':445
'12#.#5.21.173':445
'12#.#5.95.226':445
'12#.#5.211.95':445
'12#.#5.21.210':445
'12#.#5.134.42':445
'12#.#5.156.46':445
'12#.#5.82.235':445
'12#.#5.46.83':445
'12#.#5.71.154':445
'12#.#5.36.211':445
'12#.#5.8.125':445
'12#.#5.146.56':445
'12#.#5.124.146':445
'12#.#5.67.44':445
'12#.#5.140.206':445
'12#.#5.20.62':445
'12#.#5.96.29':445
'12#.#5.78.88':445
'12#.25.8.85':139
'12#.#5.131.116':139
'12#.#5.12.207':139
'12#.#5.47.251':445
'12#.#5.35.48':139
'12#.#5.47.251':139
'12#.#5.127.79':445
'12#.#5.140.206':139
'12#.#5.20.62':139
'12#.#5.67.44':139
'12#.#5.33.191':445
'12#.#5.37.131':445
'12#.#5.160.71':445
'12#.#5.126.142':445
'12#.#5.197.54':445
'12#.#5.225.239':139
'12#.#5.112.156':139
'12#.#5.19.117':139
'12#.#5.157.36':139
'12#.#5.71.154':139
'12#.#5.36.211':139
'12#.#5.211.95':139
'12#.#5.21.173':139
'12#.#5.95.226':139
'12#.#5.45.245':139
'12#.#5.70.227':139
'12#.#5.46.83':139
'12#.#5.156.46':139
'12#.#5.82.235':139
'12#.#5.114.5':139
'12#.#5.116.210':139
'12#.#5.124.146':139
'12#.#5.8.125':139
'12#.#5.146.56':139
'12#.#5.21.210':139
'12#.#5.134.42':139
'12#.#5.132.191':139
'12#.#5.152.121':139
'12#.#5.122.152':139
'12#.#5.175.77':139
'12#.#5.21.169':139
'12#.#5.129.175':139
'12#.#5.191.31':139
'12#.#5.95.104':139
'12#.#5.198.5':139
'12#.#5.103.198':139
'12#.#5.35.212':139
'12#.#5.251.34':139
'12#.#5.83.70':139
'12#.#5.159.59':139
'12#.#5.62.101':139
'12#.25.3.15':139
'12#.#5.52.250':139
'12#.#5.62.199':139
'12#.#5.191.251':139
'12#.#5.252.134':139
'12#.#5.13.161':139
'12#.#5.87.75':445
'12#.#5.36.13':445
'12#.#5.1.161':139
'12#.#5.160.167':139
'12#.#5.197.220':139
'12#.#5.159.59':445
'12#.#5.62.101':445
'12#.#5.10.187':445
'12#.#5.13.36':445
'12#.#5.175.13':445
'12#.#5.138.246':139
'12#.#5.66.68':139
'12#.25.54.1':139
'12#.#5.62.238':139
'12#.#5.11.50':139
'12#.#5.124.186':139
'12#.#5.10.82':139
'12#.#5.187.88':139
'12#.#5.198.228':139
'12#.#5.63.77':139
'12#.#5.113.160':139
'12#.#5.80.36':139
'12#.#5.128.78':139
'12#.#5.59.37':445
'12#.#5.248.32':445
'12#.#5.136.59':139
'12#.#5.61.222':139
'12#.#5.51.166':139
'12#.#5.20.80':139
'12#.#5.116.20':139
'12#.#5.13.157':445
'12#.#5.198.216':445
'12#.#5.115.28':445
'12#.#5.155.153':445
'12#.#5.52.222':445
'12#.#5.206.93':445
'12#.#5.83.30':445
'12#.#5.93.142':445
'12#.#5.43.133':445
'12#.#5.141.192':445
'12#.#5.59.235':139
'12#.#5.123.177':445
'12#.#5.175.4':445
'12#.#5.193.162':445
'12#.#5.61.222':445
'12#.#5.59.235':445
'12#.#5.175.13':139
'12#.#5.10.187':139
'12#.#5.13.36':139
'12#.#5.87.75':139
'12#.#5.36.13':139
'12#.#5.128.78':445
'12#.#5.113.160':445
'12#.#5.175.4':139
'12#.#5.193.162':139
'12#.#5.123.177':139
'12#.#5.51.166':445
'12#.#5.136.59':445
'12#.#5.116.20':445
'12#.#5.80.36':445
'12#.#5.20.80':445
'12#.#5.206.221':445
'12#.#5.229.252':445
'12#.#5.152.208':445
'12#.#5.187.66':445
'12#.25.87.2':445
'12#.#5.227.28':445
'12#.#5.81.227':445
'12#.#5.190.242':445
'12#.#5.62.130':445
'12#.#5.93.56':445
'12#.#5.33.40':139
'12#.#5.104.8':139
'12#.#5.78.46':139
'12#.#5.53.240':139
'12#.#5.145.192':139
'12#.#5.59.91':139
'12#.#5.235.240':139
'12#.#5.78.235':139
'12#.#5.186.123':139
'12#.#5.113.186':139
'12#.#5.89.84':445
'12#.#5.224.181':445
'12#.#5.1.106':445
'12#.#5.199.241':445
'12#.#5.80.193':445
'12#.#5.31.80':445
'12#.25.0.24':445
'12#.#5.160.143':445
'12#.#5.216.36':445
'12#.#5.182.253':445
'12#.#5.177.116':445
'12#.#5.133.110':445
'12#.#5.137.4':445
'12#.#5.215.119':445
'12#.#5.3.195':445
'12#.#5.68.45':445
'12#.#5.245.44':445
'12#.#5.62.241':445
'12#.#5.45.120':445
'12#.#5.90.192':445
'12#.#5.9.175':445
'12#.#5.215.119':139
'12#.#5.133.110':139
'12#.#5.68.45':139
'12#.#5.89.84':139
'12#.#5.3.195':139
'12#.#5.45.120':139
'12#.#5.245.44':139
'12#.#5.9.175':139
'12#.#5.137.4':139
'12#.#5.90.192':139
'12#.#5.206.221':139
'12#.#5.229.252':139
'12#.#5.152.208':139
'12#.25.87.2':139
'12#.#5.187.66':139
'12#.#5.227.28':139
'12#.#5.81.227':139
'12#.#5.190.242':139
'12#.#5.62.130':139
'12#.#5.93.56':139
'12#.#5.62.241':139
'12#.#5.140.240':139
'12#.#5.193.128':139
'12#.#5.157.17':139
'12#.25.60.7':139
'12#.#5.32.248':139
'12#.#5.175.132':139
'12#.#5.38.113':139
'12#.#5.1.200':139
'12#.#5.42.213':139
'12#.#5.53.250':139
'12#.#5.224.181':139
'12#.#5.1.106':139
'12#.#5.199.241':139
'12#.#5.80.193':139
'12#.#5.31.80':139
'12#.25.0.24':139
'12#.#5.160.143':139
'12#.#5.216.36':139
'12#.#5.182.253':139
'12#.#5.177.116':139
'12#.#5.54.94':139
'12#.25.48.0':445
'12#.#5.172.199':139
'12#.#5.95.81':139
'12#.#5.18.105':139
'12#.#5.130.61':445
'12#.#5.99.130':445
'12#.#5.61.54':445
'12#.#5.84.182':445
'12#.#5.53.117':445
'12#.#5.22.32':139
'12#.#5.74.156':139
'12#.#5.191.98':139
'12#.#5.99.130':139
'12#.#5.100.99':139
'12#.#5.228.116':139
'12#.#5.206.87':139
'12#.#5.13.211':139
'12#.#5.193.54':139
'12#.#5.128.101':139
'12#.#5.100.99':445
'12#.#5.126.142':139
'12#.#5.197.54':139
'12#.#5.127.79':139
'12#.#5.172.199':445
'12#.#5.54.94':445
'12#.#5.96.29':139
'12#.#5.78.88':139
'12#.#5.37.131':139
'12#.#5.160.71':139
'12#.#5.33.191':139
'12#.#5.193.54':445
'12#.#5.128.101':445
'12#.#5.74.156':445
'12#.#5.191.98':445
'12#.#5.22.32':445
'12#.#5.95.81':445
'12#.#5.18.105':445
'12#.#5.206.87':445
'12#.#5.13.211':445
'12#.#5.228.116':445
'12#.#5.33.40':445
'12#.#5.104.8':445
'12#.#5.78.46':445
'12#.#5.53.240':445
'12#.#5.145.192':445
'12#.#5.59.91':445
'12#.#5.235.240':445
'12#.#5.78.235':445
'12#.#5.186.123':445
'12#.#5.113.186':445
'12#.#5.140.240':445
'12#.#5.193.128':445
'12#.#5.157.17':445
'12#.25.60.7':445
'12#.#5.32.248':445
'12#.#5.175.132':445
'12#.#5.38.113':445
'12#.#5.1.200':445
'12#.#5.42.213':445
'12#.#5.53.250':445
'12#.#5.187.66':9988
'12#.#5.177.116':9988
'12#.#5.182.253':9988
'12#.#5.157.17':9988
'12#.#5.224.181':9988
'12#.25.0.24':9988
'12#.#5.61.54':139
'12#.#5.130.61':139
'12#.#5.53.117':139
'12#.25.48.0':139
'12#.#5.84.182':139
'12#.#5.229.252':9988
'12#.#5.62.130':9988
'12#.#5.206.221':9988
'12#.#5.152.208':9988
'12#.25.87.2':9988
'12#.#5.1.106':9988
'12#.25.60.7':9988
'12#.#5.31.80':9988
'12#.#5.9.175':9988
'12#.#5.45.120':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней