Trojan.DownLoader12.29209

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#15.13.138':445
'20#.#15.59.101':445
'20#.#15.170.208':445
'20#.#15.63.84':445
'20#.#15.84.63':445
'20#.#15.40.246':445
'20#.#15.188.211':445
'20#.#15.190.188':445
'20#.#15.27.116':445
'20#.#15.51.47':445
'20#.#15.72.1':445
'20#.#15.143.200':445
'20#.#15.120.8':445
'20#.#15.81.147':445
'20#.#15.163.121':445
'20#.115.6.4':445
'20#.#15.16.108':445
'20#.#15.105.91':445
'20#.#15.112.128':445
'20#.#15.74.51':445
'20#.#15.175.170':445
'20#.#15.103.161':445
'20#.#15.199.92':445
'20#.#15.81.194':445
'20#.#15.214.15':445
'20#.#15.28.160':445
'20#.#15.52.134':445
'20#.#15.27.82':139
'20#.#15.157.69':139
'20#.#15.161.7':139
'20#.#15.42.83':139
'20#.#15.25.244':139
'20#.#15.244.124':139
'20#.#15.28.160':139
'20#.#15.52.134':139
'20#.#15.158.29':139
'20#.#15.97.230':139
'20#.#15.29.64':139
'20#.#15.214.15':139
'20#.#15.29.64':445
'20#.#15.158.29':445
'20#.#15.97.230':445
'20#.#15.199.92':139
'20#.#15.81.194':139
'20#.#15.170.208':139
'20#.#15.13.138':139
'20#.#15.84.63':139
'20#.#15.112.128':139
'20#.#15.63.84':139
'20#.#15.59.101':139
'20#.#15.27.116':139
'20#.#15.188.211':139
'20#.#15.72.1':139
'20#.#15.40.246':139
'20#.#15.51.47':139
'20#.#15.81.147':139
'20#.#15.143.200':139
'20#.115.6.4':139
'20#.#15.7.71':139
'20#.#15.163.121':139
'20#.#15.120.8':139
'20#.#15.74.51':139
'20#.#15.105.91':139
'20#.#15.103.161':139
'20#.#15.16.108':139
'20#.#15.175.170':139
'20#.#15.14.62':445
'20#.#15.67.8':445
'20#.#15.127.120':445
'20#.#15.116.113':445
'20#.#15.122.208':445
'20#.#15.130.227':445
'20#.#15.106.178':445
'20#.#15.7.71':445
'20#.#15.177.189':445
'20#.#15.195.155':445
'20#.#15.189.195':445
'20#.#15.227.92':445
'20#.#15.126.128':445
'20#.#15.92.149':445
'20#.#15.190.188':139
'20#.#15.149.65':445
'20#.#15.55.200':445
'20#.#15.72.47':445
'20#.#15.203.23':445
'20#.#15.59.145':445
'20#.#15.234.216':445
'20#.#15.30.10':445
'20#.#15.37.219':445
'20#.#15.253.37':445
'20#.#15.219.174':445
'20#.#15.241.7':445
'20#.#15.94.243':445
'20#.#15.14.67':445
'20#.#15.102.132':445
'20#.#15.126.222':445
'20#.#15.210.0':445
'20#.#15.108.35':445
'20#.#15.184.59':445
'20#.#15.80.184':445
'20#.#15.0.181':445
'20#.#15.154.59':445
'20#.#15.172.125':445
'20#.#15.59.44':445
'20#.#15.48.189':445
'20#.#15.120.191':445
'20#.#15.90.184':445
'20#.#15.73.86':445
'20#.#15.32.155':445
'20#.#15.189.32':445
'20#.#15.245.237':139
'20#.#15.8.146':139
'20#.#15.192.115':445
'20#.#15.10.66':445
'20#.#15.115.47':445
'20#.#15.173.172':139
'20#.#15.164.214':139
'20#.#15.23.20':139
'20#.#15.85.231':139
'20#.#15.162.173':139
'20#.#15.186.31':139
'20#.#15.142.24':445
'20#.#15.117.161':445
'20#.#15.211.244':445
'20#.#15.117.27':445
'20#.#15.35.128':445
'20#.#15.202.117':445
'20#.#15.86.215':445
'20#.#15.79.169':445
'20#.#15.234.98':445
'20#.#15.122.202':445
'20#.#15.93.205':445
'20#.#15.219.174':139
'20#.#15.37.219':139
'20#.#15.94.243':139
'20#.#15.90.184':139
'20#.#15.241.7':139
'20#.#15.253.37':139
'20#.#15.210.0':139
'20#.#15.102.132':139
'20#.#15.184.59':139
'20#.#15.14.67':139
'20#.#15.108.35':139
'20#.#15.154.59':139
'20#.#15.80.184':139
'20#.#15.59.44':139
'20#.#15.204.160':139
'20#.#15.172.125':139
'20#.#15.0.181':139
'20#.#15.73.86':139
'20#.#15.120.191':139
'20#.#15.189.32':139
'20#.#15.48.189':139
'20#.#15.32.155':139
'20#.#15.192.115':139
'20#.#15.27.82':445
'20#.#15.115.47':139
'20#.#15.79.169':139
'20#.#15.10.66':139
'20#.#15.25.244':445
'20#.#15.161.7':445
'20#.#15.204.160':445
'20#.#15.157.69':445
'20#.#15.244.124':445
'20#.#15.42.83':445
'20#.#15.211.244':139
'20#.#15.142.24':139
'20#.#15.35.128':139
'20#.#15.126.222':139
'20#.#15.117.27':139
'20#.#15.117.161':139
'20#.#15.234.98':139
'20#.#15.86.215':139
'20#.#15.93.205':139
'20#.#15.202.117':139
'20#.#15.122.202':139
'20#.#15.60.20':445
'20#.#15.106.23':445
'20#.#15.248.180':445
'20#.#15.100.154':445
'20#.#15.180.230':445
'20#.#15.146.102':445
'20#.#15.27.154':445
'20#.#15.12.132':445
'20#.#15.224.167':445
'20#.#15.17.90':445
'20#.#15.187.89':445
'20#.#15.44.32':139
'20#.#15.96.57':139
'20#.#15.181.176':139
'20#.#15.113.28':139
'20#.#15.203.172':139
'20#.#15.162.64':139
'20#.#15.151.217':445
'20#.#15.96.73':445
'20#.#15.25.101':445
'20#.#15.220.92':139
'20#.#15.138.198':445
'20#.#15.62.41':445
'20#.#15.128.254':445
'20#.#15.22.222':445
'20#.#15.41.70':445
'20#.#15.79.41':445
'20#.#15.53.88':445
'20#.#15.45.21':445
'20#.#15.79.113':445
'20#.#15.21.63':445
'20#.#15.79.212':445
'20#.#15.63.118':445
'20#.#15.229.87':445
'20#.#15.156.4':445
'20#.#15.36.248':445
'20#.#15.30.167':445
'20#.#15.253.173':445
'20#.#15.73.156':445
'20#.#15.214.219':445
'20#.#15.70.71':445
'20#.#15.215.103':445
'20#.#15.57.73':445
'20#.#15.151.129':445
'20#.#15.12.132':139
'20#.#15.30.167':139
'20#.#15.27.154':139
'20#.#15.187.89':139
'20#.#15.224.167':139
'20#.#15.253.173':139
'20#.#15.73.156':139
'20#.#15.57.73':139
'20#.#15.156.4':139
'20#.#15.36.248':139
'20#.#15.229.87':139
'20#.#15.151.217':139
'20#.#15.96.73':139
'20#.#15.138.198':139
'20#.#15.100.154':139
'20#.#15.25.101':139
'20#.#15.180.230':139
'20#.#15.146.102':139
'20#.#15.17.90':139
'20#.#15.106.23':139
'20#.#15.248.180':139
'20#.#15.60.20':139
'20#.#15.79.113':139
'20#.#15.202.251':139
'20#.#15.45.21':139
'20#.#15.63.118':139
'20#.#15.21.63':139
'20#.#15.119.142':139
'20#.#15.9.155':139
'20#.#15.244.223':139
'20#.#15.220.170':139
'20#.#15.54.104':139
'20#.#15.126.118':139
'20#.#15.70.71':139
'20#.#15.41.70':139
'20#.#15.214.219':139
'20#.#15.151.129':139
'20#.#15.215.103':139
'20#.#15.79.41':139
'20#.#15.53.88':139
'20#.#15.79.212':139
'20#.#15.128.254':139
'20#.#15.22.222':139
'20#.#15.62.41':139
'20#.#15.157.48':139
'20#.#15.35.213':139
'20#.#15.49.1':139
'20#.#15.2.222':139
'20#.#15.235.190':139
'20#.#15.104.245':445
'20#.#15.235.190':445
'20#.#15.49.1':445
'20#.#15.2.222':445
'20#.#15.41.238':445
'20#.#15.52.159':445
'20#.#15.111.208':445
'20#.#15.173.83':445
'20#.#15.1.24':445
'20#.#15.129.76':445
'20#.#15.19.43':445
'20#.#15.26.149':445
'20#.#15.41.238':139
'20#.#15.52.159':139
'20#.#15.104.245':139
'20#.#15.191.203':445
'20#.#15.78.210':445
'20#.#15.127.120':139
'20#.#15.14.62':139
'20#.#15.122.208':139
'20#.#15.203.23':139
'20#.#15.116.113':139
'20#.#15.67.8':139
'20#.#15.177.189':139
'20#.#15.106.178':139
'20#.#15.189.195':139
'20#.#15.130.227':139
'20#.#15.195.155':139
'20#.#15.92.149':139
'20#.#15.227.92':139
'20#.#15.149.65':139
'20#.#15.157.48':445
'20#.#15.35.213':445
'20#.#15.126.128':139
'20#.#15.59.145':139
'20#.#15.72.47':139
'20#.#15.30.10':139
'20#.#15.55.200':139
'20#.#15.234.216':139
'20#.#15.151.129':9988
'20#.#15.253.173':9988
'20#.#15.220.92':445
'20#.#15.96.57':445
'20#.#15.162.64':445
'20#.#15.100.154':9988
'20#.#15.224.167':9988
'20#.#15.156.4':9988
'20#.#15.17.90':9988
'20#.#15.151.217':9988
'20#.#15.70.71':9988
'20#.#15.126.118':445
'20#.#15.220.170':445
'20#.#15.54.104':445
'20#.#15.202.251':445
'20#.#15.119.142':445
'20#.#15.9.155':445
'20#.#15.181.176':445
'20#.#15.44.32':445
'20#.#15.203.172':445
'20#.#15.244.223':445
'20#.#15.113.28':445
'20#.#15.111.208':139
'20#.#15.173.83':139
'20#.#15.1.24':139
'20#.#15.129.76':139
'20#.#15.19.43':139
'20#.#15.26.149':139
'20#.#15.242.144':445
'20#.#15.19.100':445
'20#.#15.98.137':445
'20#.#15.191.203':139
'20#.#15.78.210':139
'20#.#15.187.89':9988
'20#.#15.106.23':9988
'20#.#15.138.198':9988
'20#.#15.60.20':9988
'20#.#15.36.248':9988
'20#.#15.27.154':9988
'20#.#15.242.144':139
'20#.#15.19.100':139
'20#.#15.98.137':139
'20#.#15.146.102':9988
'20#.#15.57.73':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней