Trojan.DownLoader19.50652

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%ProgramFiles%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##6.108.205':445
'72.##6.56.195':445
'72.##6.205.59':445
'72.##6.203.53':445
'72.##6.98.178':139
'72.##6.142.42':139
'72.##6.61.199':139
'72.##6.174.69':139
'72.##6.153.174':139
'72.##6.159.242':445
'72.##6.24.73':445
'72.##6.110.116':445
'72.##6.86.184':445
'72.##6.136.243':445
'72.##6.150.10':445
'72.##6.229.98':445
'72.##6.242.112':445
'72.##6.62.192':445
'72.##6.130.131':445
'72.##6.221.236':139
'72.##6.63.222':139
'72.##6.11.58':139
'72.##6.186.83':139
'72.##6.75.138':139
'72.##6.244.175':139
'72.##6.146.88':139
'72.##6.157.151':139
'72.##6.150.7':139
'72.##6.18.250':139
'72.##6.63.184':139
'72.##6.100.80':139
'72.##6.119.84':139
'72.##6.7.216':139
'72.##6.243.3':139
'72.##6.217.192':139
'72.##6.81.122':139
'72.##6.134.211':139
'72.##6.192.37':139
'72.##6.99.169':445
'72.##6.27.189':445
'72.##6.9.143':445
'72.##6.53.177':445
'72.##6.98.233':445
'72.##6.52.73':445
'72.##6.153.192':445
'72.##6.122.75':445
'72.##6.160.204':445
'72.##6.136.129':445
'72.##6.242.68':445
'72.##6.158.239':445
'72.##6.188.90':445
'72.##6.108.205':139
'72.##6.56.195':139
'72.##6.220.54':445
'72.#16.0.88':445
'72.##6.234.143':445
'72.##6.109.81':445
'72.##6.216.45':445
'72.##6.191.2':445
'72.##6.6.119':445
'72.##6.125.110':445
'72.##6.58.252':445
'72.##6.204.7':445
'72.##6.159.249':445
'72.##6.169.119':445
'72.##6.103.9':445
'72.##6.117.102':445
'72.##6.134.136':445
'72.##6.82.60':445
'72.##6.242.144':445
'72.##6.241.230':445
'72.##6.195.94':445
'72.##6.118.243':445
'72.#16.7.28':445
'72.##6.109.210':445
'72.##6.119.241':445
'72.##6.15.120':445
'72.##6.86.227':139
'72.##6.240.86':445
'72.##6.177.165':445
'72.##6.146.88':445
'72.##6.86.227':445
'72.##6.112.50':445
'72.##6.51.33':445
'72.##6.206.249':445
'72.#16.9.39':445
'72.##6.96.62':445
'72.##6.244.175':445
'72.##6.11.58':445
'72.##6.186.83':445
'72.##6.81.122':445
'72.##6.18.250':445
'72.##6.221.236':445
'72.##6.157.151':445
'72.##6.150.7':445
'72.##6.63.222':445
'72.##6.75.138':445
'72.##6.62.167':445
'72.##6.182.62':445
'72.##6.164.235':445
'72.##6.127.10':445
'72.##6.105.181':445
'72.##6.18.87':445
'72.##6.81.18':445
'72.##6.37.27':445
'72.##6.145.159':445
'72.##6.235.84':445
'72.##6.67.59':445
'72.##6.109.66':445
'72.##6.225.177':445
'72.##6.196.198':445
'72.##6.135.76':445
'72.##6.3.141':445
'72.##6.60.252':445
'72.##6.254.100':445
'72.##6.141.42':445
'72.##6.217.192':445
'72.##6.254.100':139
'72.##6.141.42':139
'72.##6.109.66':139
'72.##6.135.76':139
'72.##6.3.141':139
'72.##6.164.235':139
'72.##6.127.10':139
'72.##6.60.252':139
'72.##6.235.84':139
'72.##6.67.59':139
'72.##6.112.50':139
'72.#16.9.39':139
'72.##6.240.86':139
'72.##6.177.165':139
'72.##6.96.62':139
'72.##6.225.177':139
'72.##6.196.198':139
'72.##6.51.33':139
'72.##6.206.249':139
'72.##6.119.84':445
'72.##6.7.216':445
'72.##6.142.42':445
'72.##6.61.199':445
'72.##6.63.184':445
'72.##6.134.211':445
'72.##6.192.37':445
'72.##6.100.80':445
'72.##6.243.3':445
'72.##6.153.174':445
'72.##6.105.181':139
'72.##6.37.27':139
'72.##6.62.167':139
'72.##6.182.62':139
'72.##6.145.159':139
'72.##6.98.178':445
'72.##6.174.69':445
'72.##6.18.87':139
'72.##6.81.18':139
'72.##6.205.59':139
'72.##6.187.195':445
'72.##6.88.63':445
'72.##6.149.129':139
'72.##6.134.84':139
'72.##6.180.26':445
'72.##6.92.193':445
'72.##6.30.12':445
'72.##6.254.56':445
'72.##6.142.253':445
'72.##6.160.171':139
'72.##6.244.216':139
'72.##6.179.166':139
'72.##6.222.120':139
'72.##6.169.195':139
'72.##6.218.19':139
'72.##6.108.88':139
'72.#16.29.5':139
'72.##6.132.125':139
'72.##6.102.2':139
'72.##6.147.63':445
'72.##6.3.133':445
'72.##6.127.210':445
'72.##6.149.36':445
'72.##6.202.129':445
'72.##6.158.155':445
'72.##6.213.158':445
'72.##6.158.27':445
'72.##6.156.109':445
'72.##6.90.252':445
'72.##6.79.24':445
'72.##6.36.205':445
'72.##6.143.200':445
'72.##6.81.42':445
'72.##6.33.112':445
'72.##6.71.212':445
'72.##6.32.246':445
'72.##6.232.128':445
'72.##6.55.55':445
'72.##6.196.68':139
'72.##6.232.128':139
'72.##6.55.55':139
'72.##6.36.205':139
'72.##6.33.112':139
'72.##6.71.212':139
'72.##6.127.210':139
'72.##6.149.36':139
'72.##6.32.246':139
'72.##6.90.252':139
'72.##6.79.24':139
'72.##6.88.63':139
'72.##6.81.42':139
'72.##6.92.193':139
'72.##6.187.195':139
'72.##6.143.200':139
'72.##6.254.56':139
'72.##6.180.26':139
'72.##6.142.253':139
'72.##6.30.12':139
'72.##6.49.23':139
'72.##6.87.196':139
'72.##6.152.198':139
'72.##6.127.152':139
'72.##6.39.88':139
'72.##6.244.5':139
'72.##6.6.121':139
'72.##6.214.237':139
'72.##6.76.110':139
'72.##6.110.93':139
'72.##6.202.129':139
'72.##6.158.27':139
'72.##6.147.63':139
'72.##6.3.133':139
'72.##6.156.109':139
'72.##6.165.85':139
'72.##6.57.185':139
'72.##6.158.155':139
'72.##6.213.158':139
'72.##6.165.85':445
'72.##6.119.241':139
'72.##6.15.120':139
'72.##6.242.144':139
'72.##6.118.243':139
'72.#16.7.28':139
'72.##6.134.136':139
'72.##6.191.2':139
'72.##6.109.210':139
'72.##6.125.110':139
'72.##6.82.60':139
'72.##6.52.73':139
'72.##6.160.204':139
'72.##6.27.189':139
'72.##6.9.143':139
'72.##6.136.129':139
'72.##6.241.230':139
'72.##6.195.94':139
'72.##6.153.192':139
'72.##6.122.75':139
'72.##6.150.10':139
'72.##6.62.192':139
'72.##6.136.243':139
'72.##6.110.116':139
'72.##6.130.131':139
'72.##6.159.242':139
'72.##6.203.53':139
'72.##6.229.98':139
'72.##6.242.112':139
'72.##6.24.73':139
'72.##6.204.7':139
'72.##6.103.9':139
'72.##6.58.252':139
'72.##6.6.119':139
'72.##6.117.102':139
'72.##6.99.169':139
'72.##6.86.184':139
'72.##6.159.249':139
'72.##6.169.119':139
'72.##6.98.233':139
'72.##6.222.120':445
'72.##6.169.195':445
'72.##6.6.121':445
'72.##6.196.68':445
'72.##6.244.216':445
'72.##6.132.125':445
'72.##6.102.2':445
'72.##6.179.166':445
'72.##6.218.19':445
'72.##6.244.5':445
'72.##6.152.198':445
'72.##6.127.152':445
'72.##6.57.185':445
'72.##6.110.93':445
'72.##6.49.23':445
'72.##6.214.237':445
'72.##6.76.110':445
'72.##6.87.196':445
'72.##6.39.88':445
'72.##6.220.54':139
'72.##6.109.81':139
'72.##6.158.239':139
'72.##6.188.90':139
'72.##6.216.45':139
'72.##6.242.68':139
'72.##6.53.177':139
'72.#16.0.88':139
'72.##6.234.143':139
'72.##6.134.84':9988
'72.##6.160.171':445
'72.##6.149.129':445
'72.##6.108.88':445
'72.#16.29.5':445
'72.##6.134.84':445
'72.##6.254.56':9988
'72.##6.36.205':9988
'72.##6.88.63':9988
'72.##6.79.24':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней