Trojan.DownLoader12.29180

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#08.117.240':445
'13#.#08.211.81':445
'13#.#08.43.197':445
'13#.#08.38.169':445
'13#.#08.149.38':445
'13#.#08.229.176':445
'13#.#08.195.29':445
'13#.#08.14.199':445
'13#.#08.62.82':445
'13#.#08.161.62':445
'13#.#08.231.234':445
'13#.#08.146.145':445
'13#.#08.74.31':445
'13#.#08.240.24':445
'13#.#08.84.20':445
'13#.#08.71.93':445
'13#.#08.122.117':445
'13#.#08.35.133':445
'13#.#08.117.29':445
'13#.#08.123.77':445
'13#.#08.170.8':445
'13#.#08.130.91':445
'13#.#08.47.204':139
'13#.#08.47.134':139
'13#.#08.182.5':139
'13#.#08.251.104':139
'13#.#08.161.118':139
'13#.#08.130.207':139
'13#.#08.177.130':139
'13#.#08.90.191':139
'13#.#08.178.213':139
'13#.#08.208.4':139
'13#.#08.170.97':139
'13#.#08.33.45':445
'13#.#08.205.32':139
'13#.#08.45.48':445
'13#.#08.246.134':445
'13#.#08.8.233':445
'13#.#08.87.250':139
'13#.#08.18.194':139
'13#.#08.40.205':445
'13#.#08.40.205':139
'13#.#08.205.32':445
'13#.#08.178.119':445
'13#.#08.229.176':139
'13#.#08.195.29':139
'13#.#08.14.199':139
'13#.#08.62.82':139
'13#.#08.161.62':139
'13#.#08.45.48':139
'13#.#08.33.45':139
'13#.#08.8.233':139
'13#.#08.130.91':139
'13#.#08.246.134':139
'13#.#08.211.81':139
'13#.#08.122.117':139
'13#.#08.35.133':139
'13#.#08.117.29':139
'13#.#08.123.77':139
'13#.#08.170.8':139
'13#.#08.43.197':139
'13#.#08.117.240':139
'13#.#08.149.38':139
'13#.#08.231.234':139
'13#.#08.38.169':139
'13#.#08.168.166':445
'13#.#08.211.63':445
'13#.#08.85.211':445
'13#.#08.53.225':445
'13#.#08.54.163':445
'13#.#08.221.88':445
'13#.#08.134.0':445
'13#.#08.78.180':445
'13#.#08.104.115':445
'13#.#08.96.86':445
'13#.#08.141.120':445
'13#.#08.199.129':445
'13#.#08.52.0':445
'13#.#08.173.64':445
'13#.#08.44.191':445
'13#.#08.116.62':445
'13#.#08.243.25':445
'13#.#08.35.167':445
'13#.#08.133.77':445
'13#.#08.32.245':445
'13#.#08.72.69':445
'13#.#08.87.225':445
'13#.#08.166.118':445
'13#.#08.23.204':445
'13#.#08.194.220':445
'13#.#08.124.19':445
'13#.#08.105.63':445
'13#.#08.215.126':445
'13#.#08.105.198':445
'13#.#08.128.6':445
'13#.#08.51.37':445
'13#.#08.180.251':445
'13#.#08.118.194':445
'13#.#08.130.207':445
'13#.#08.177.130':445
'13#.#08.90.191':445
'13#.#08.178.213':445
'13#.#08.208.4':445
'13#.#08.94.91':445
'13#.#08.13.0':445
'13#.#08.130.17':445
'13#.#08.54.177':445
'13#.#08.23.54':445
'13#.#08.53.250':445
'13#.#08.91.146':445
'13#.#08.97.83':445
'13#.#08.80.4':445
'13#.#08.204.222':445
'13#.#08.242.204':445
'13#.#08.176.181':139
'13#.#08.51.19':139
'13#.#08.61.190':445
'13#.#08.203.0':445
'13#.#08.189.95':445
'13#.#08.223.13':445
'13#.#08.68.162':445
'13#.#08.100.68':445
'13#.#08.126.181':445
'13#.#08.104.73':445
'13#.#08.242.86':445
'13#.#08.194.198':445
'13#.#08.239.129':445
'13#.#08.58.191':445
'13#.#08.106.226':445
'13#.#08.199.140':445
'13#.#08.47.134':445
'13#.#08.215.126':139
'13#.#08.105.198':139
'13#.#08.128.6':139
'13#.#08.51.37':139
'13#.#08.180.251':139
'13#.#08.126.181':139
'13#.#08.68.162':139
'13#.#08.242.86':139
'13#.#08.53.250':139
'13#.#08.104.73':139
'13#.#08.23.204':139
'13#.#08.94.91':139
'13#.#08.13.0':139
'13#.#08.130.17':139
'13#.#08.54.177':139
'13#.#08.23.54':139
'13#.#08.194.220':139
'13#.#08.166.118':139
'13#.#08.105.63':139
'13#.#08.118.194':139
'13#.#08.124.19':139
'13#.#08.100.68':139
'13#.#08.87.250':445
'13#.#08.18.194':445
'13#.#08.61.190':139
'13#.#08.203.0':139
'13#.#08.189.95':139
'13#.#08.182.5':445
'13#.#08.47.204':445
'13#.#08.161.118':445
'13#.#08.170.97':445
'13#.#08.251.104':445
'13#.#08.97.83':139
'13#.#08.194.198':139
'13#.#08.239.129':139
'13#.#08.58.191':139
'13#.#08.106.226':139
'13#.#08.199.140':139
'13#.#08.80.4':139
'13#.#08.91.146':139
'13#.#08.242.204':139
'13#.#08.223.13':139
'13#.#08.204.222':139
'13#.#08.74.31':139
'13#.#08.166.205':445
'13#.#08.71.19':445
'13#.#08.66.8':445
'13#.#08.141.3':445
'13#.#08.118.254':445
'13#.#08.156.241':445
'13#.#08.7.251':445
'13#.#08.11.232':445
'13#.#08.65.211':445
'13#.#08.59.196':445
'13#.#08.112.166':445
'13#.#08.239.227':139
'13#.#08.14.231':139
'13#.#08.224.152':139
'13#.#08.229.199':139
'13#.#08.84.142':139
'13#.#08.39.236':445
'13#.#08.66.158':445
'13#.#08.3.144':445
'13#.#08.7.193':139
'13#.#08.67.56':139
'13#.#08.71.57':445
'13#.#08.3.83':445
'13#.#08.33.153':445
'13#.#08.248.48':445
'13#.#08.4.45':445
'13#.#08.39.43':445
'13#.#08.66.225':445
'13#.#08.174.152':445
'13#.#08.66.116':445
'13#.#08.238.55':445
'13#.#08.116.238':445
'13#.#08.120.48':445
'13#.#08.7.132':445
'13#.#08.196.6':445
'13#.#08.93.48':445
'13#.#08.54.110':445
'13#.#08.124.141':445
'13#.#08.227.154':445
'13#.#08.55.155':445
'13#.#08.170.6':445
'13#.#08.222.115':445
'13#.#08.10.112':445
'13#.#08.154.49':139
'13#.#08.71.57':139
'13#.#08.54.110':139
'13#.#08.7.251':139
'13#.#08.11.232':139
'13#.#08.156.241':139
'13#.#08.196.6':139
'13#.#08.222.115':139
'13#.#08.7.132':139
'13#.#08.124.141':139
'13#.#08.93.48':139
'13#.#08.59.196':139
'13#.#08.3.144':139
'13#.#08.141.3':139
'13#.#08.112.166':139
'13#.#08.39.236':139
'13#.#08.66.158':139
'13#.#08.71.19':139
'13#.#08.65.211':139
'13#.#08.166.205':139
'13#.#08.118.254':139
'13#.#08.66.8':139
'13#.#08.10.112':139
'13#.#08.79.163':139
'13#.#08.126.168':139
'13#.#08.174.152':139
'13#.#08.66.116':139
'13#.#08.66.225':139
'13#.#08.113.203':139
'13#.#08.232.16':139
'13#.#08.67.103':139
'13#.#08.150.82':139
'13#.#08.217.174':139
'13#.#08.116.238':139
'13#.#08.120.48':139
'13#.#08.4.45':139
'13#.#08.55.155':139
'13#.#08.170.6':139
'13#.#08.227.154':139
'13#.#08.33.153':139
'13#.#08.238.55':139
'13#.#08.3.83':139
'13#.#08.39.43':139
'13#.#08.248.48':139
'13#.#08.162.246':445
'13#.#08.28.147':445
'13#.#08.28.147':139
'13#.#08.247.73':445
'13#.#08.162.246':139
'13#.#08.44.191':139
'13#.#08.52.0':139
'13#.#08.243.25':139
'13#.#08.168.166':139
'13#.#08.116.62':139
'13#.#08.73.126':445
'13#.#08.179.125':445
'13#.#08.252.243':445
'13#.#08.46.228':445
'13#.#08.247.73':139
'13#.#08.195.46':445
'13#.#08.145.170':445
'13#.#08.245.92':445
'13#.#08.151.250':445
'13#.#08.179.45':445
'13#.#08.30.160':445
'13#.#08.173.64':139
'13#.#08.134.0':139
'13#.#08.78.180':139
'13#.#08.104.115':139
'13#.#08.96.86':139
'13#.#08.141.120':139
'13#.#08.240.24':139
'13#.#08.146.145':139
'13#.#08.71.93':139
'13#.#08.178.119':139
'13#.#08.84.20':139
'13#.#08.85.211':139
'13#.#08.35.167':139
'13#.#08.133.77':139
'13#.#08.32.245':139
'13#.#08.72.69':139
'13#.#08.87.225':139
'13#.#08.53.225':139
'13#.#08.211.63':139
'13#.#08.221.88':139
'13#.#08.199.129':139
'13#.#08.54.163':139
'13#.#08.73.126':139
'13#.#08.67.56':445
'13#.#08.93.48':9988
'13#.#08.7.193':445
'13#.#08.239.227':445
'13#.#08.14.231':445
'13#.#08.39.236':9988
'13#.#08.118.254':9988
'13#.#08.66.158':9988
'13#.#08.112.166':9988
'13#.#08.196.6':9988
'13#.#08.224.152':445
'13#.#08.217.174':445
'13#.#08.67.103':445
'13#.#08.150.82':445
'13#.#08.79.163':445
'13#.#08.126.168':445
'13#.#08.229.199':445
'13#.#08.84.142':445
'13#.#08.154.49':445
'13#.#08.113.203':445
'13#.#08.232.16':445
'13#.#08.71.57':9988
'13#.#08.179.125':139
'13#.#08.252.243':139
'13#.#08.46.228':139
'13#.#08.120.48':9988
'13#.#08.195.46':139
'13#.#08.145.170':139
'13#.#08.245.92':139
'13#.#08.151.250':139
'13#.#08.179.45':139
'13#.#08.30.160':139
'13#.#08.222.115':9988
'13#.#08.54.110':9988
'13#.#08.65.211':9988
'13#.#08.71.19':9988
'13#.#08.124.141':9988
'13#.#08.166.205':9988
'13#.#08.156.241':9988
'13#.#08.7.251':9988
'13#.#08.66.8':9988
'13#.#08.7.132':9988
'13#.#08.59.196':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней