Trojan.DownLoader20.31613

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%ProgramFiles%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#3.7.107':139
'19#.#3.35.54':139
'19#.#3.112.81':139
'19#.#3.236.169':139
'19#.#3.80.36':139
'19#.#3.106.112':139
'19#.#3.17.106':139
'19#.#3.68.154':139
'19#.73.30.9':139
'19#.73.1.33':139
'19#.73.67.9':139
'19#.#3.63.147':139
'19#.#3.174.240':139
'19#.#3.153.160':445
'19#.#3.29.62':445
'19#.#3.255.28':445
'19#.#3.194.9':139
'19#.#3.104.193':139
'19#.#3.9.230':139
'19#.#3.210.196':139
'19#.#3.105.127':139
'19#.#3.80.36':445
'19#.#3.112.81':445
'19#.#3.236.169':445
'19#.#3.104.193':445
'19#.73.67.9':445
'19#.73.1.33':445
'19#.#3.68.154':445
'19#.73.30.9':445
'19#.#3.7.107':445
'19#.#3.35.54':445
'19#.#3.194.9':445
'19#.#3.144.234':139
'19#.#3.232.113':139
'19#.#3.20.254':139
'19#.#3.24.67':139
'19#.#3.68.159':139
'19#.#3.105.127':445
'19#.#3.9.230':445
'19#.#3.210.196':445
'19#.#3.63.147':445
'19#.#3.174.240':445
'19#.#3.9.158':445
'19#.#3.9.158':139
'19#.#3.29.62':139
'19#.#3.219.144':139
'19#.73.1.74':139
'19#.#3.40.11':139
'19#.#3.249.175':445
'19#.#3.66.96':445
'19#.#3.135.229':445
'19#.#3.255.28':139
'19#.#3.153.160':139
'19#.#3.130.211':139
'19#.#3.12.69':139
'19#.#3.59.26':139
'19#.#3.212.83':139
'19#.#3.76.132':139
'19#.#3.133.175':139
'19#.#3.92.187':139
'19#.#3.97.252':139
'19#.#3.212.179':139
'19#.#3.66.129':139
'19#.#3.219.66':139
'19#.#3.212.179':445
'19#.#3.92.187':445
'19#.#3.219.66':445
'19#.#3.59.26':445
'19#.#3.66.129':445
'19#.#3.40.11':445
'19#.#3.219.144':445
'19#.73.1.74':445
'19#.#3.97.252':445
'19#.#3.130.211':445
'19#.#3.12.69':445
'19#.#3.229.74':445
'19#.#3.12.138':445
'19#.#3.63.162':445
'19#.#3.90.185':445
'19#.#3.183.3':445
'19#.#3.133.175':445
'19#.#3.212.83':445
'19#.#3.76.132':445
'19#.#3.65.44':445
'19#.#3.14.10':445
'19#.#3.106.112':445
'19#.#3.46.187':445
'19#.#3.141.31':445
'19#.#3.134.203':445
'19#.#3.189.12':445
'19#.#3.23.13':445
'19#.#3.60.125':139
'19#.#3.24.244':139
'19#.#3.124.242':445
'19#.#3.20.53':445
'19#.#3.242.94':445
'19#.#3.162.33':445
'19#.#3.158.8':445
'19#.#3.94.250':445
'19#.#3.153.242':445
'19#.#3.84.169':445
'19#.#3.85.12':445
'19#.#3.111.45':445
'19#.#3.93.212':445
'19#.#3.182.111':445
'19#.#3.46.126':445
'19#.#3.71.94':445
'19#.#3.88.225':139
'19#.#3.195.88':139
'19#.#3.148.17':139
'19#.#3.0.118':139
'19#.#3.14.112':139
'19#.#3.75.113':139
'19#.#3.115.135':139
'19#.#3.113.142':139
'19#.#3.69.16':139
'19#.#3.141.172':139
'19#.#3.103.151':139
'19#.#3.130.111':139
'19#.#3.22.187':139
'19#.#3.124.183':139
'19#.#3.79.222':139
'19#.#3.89.79':139
'19#.#3.124.153':139
'19#.#3.15.188':139
'19#.#3.46.51':139
'19#.#3.104.196':139
'19#.#3.126.142':139
'19#.#3.16.25':445
'19#.#3.16.25':139
'19#.#3.84.169':139
'19#.#3.43.197':139
'19#.#3.54.53':139
'19#.#3.102.43':139
'19#.#3.94.250':139
'19#.#3.46.126':139
'19#.#3.158.8':139
'19#.#3.85.12':139
'19#.#3.153.242':139
'19#.#3.51.205':139
'19#.#3.20.254':445
'19#.#3.144.234':445
'19#.#3.68.159':445
'19#.#3.17.106':445
'19#.#3.24.67':445
'19#.#3.205.140':139
'19#.#3.205.205':139
'19#.#3.140.53':139
'19#.#3.232.113':445
'19#.#3.44.147':139
'19#.#3.140.53':445
'19#.#3.205.140':445
'19#.#3.44.147':445
'19#.#3.242.94':139
'19#.#3.124.242':139
'19#.#3.102.43':445
'19#.#3.43.197':445
'19#.#3.54.53':445
'19#.#3.205.205':445
'19#.#3.51.205':445
'19#.#3.20.53':139
'19#.#3.93.212':139
'19#.#3.162.33':139
'19#.#3.111.45':139
'19#.#3.71.94':139
'19#.#3.182.111':139
'19#.#3.46.187':139
'19#.#3.141.31':139
'19#.#3.134.203':139
'19#.#3.189.12':139
'19#.#3.23.13':139
'19#.#3.14.10':139
'19#.#3.53.129':445
'19#.#3.64.143':445
'19#.#3.197.197':445
'19#.#3.75.31':445
'19#.73.56.1':445
'19#.#3.30.40':445
'19#.#3.30.30':445
'19#.#3.77.15':445
'19#.#3.192.36':445
'19#.#3.91.44':445
'19#.#3.19.36':445
'19#.#3.61.191':139
'19#.#3.101.198':139
'19#.#3.175.107':139
'19#.#3.101.217':139
'19#.#3.191.88':139
'19#.#3.109.247':445
'19#.#3.39.245':445
'19#.#3.194.202':139
'19#.#3.211.87':139
'19#.#3.49.237':139
'19#.#3.86.152':445
'19#.#3.242.86':445
'19#.#3.152.254':445
'19#.#3.67.100':445
'19#.#3.166.39':445
'19#.#3.4.110':445
'19#.#3.32.147':445
'19#.#3.48.202':445
'19#.#3.49.45':445
'19#.#3.204.158':445
'19#.#3.4.223':445
'19#.#3.247.198':445
'19#.#3.189.56':445
'19#.#3.196.45':445
'19#.#3.53.146':445
'19#.#3.212.79':445
'19#.#3.212.158':445
'19#.#3.216.222':445
'19#.#3.158.186':445
'19#.#3.95.147':445
'19#.#3.185.246':445
'19#.#3.234.71':139
'19#.#3.212.79':139
'19#.#3.196.45':139
'19#.#3.53.146':139
'19#.#3.30.40':139
'19#.#3.30.30':139
'19#.#3.185.246':139
'19#.#3.158.186':139
'19#.#3.95.147':139
'19#.#3.247.198':139
'19#.#3.189.56':139
'19#.#3.77.15':139
'19#.#3.109.247':139
'19#.73.56.1':139
'19#.#3.39.245':139
'19#.#3.19.36':139
'19#.#3.75.31':139
'19#.#3.192.36':139
'19#.#3.91.44':139
'19#.#3.64.143':139
'19#.#3.197.197':139
'19#.#3.53.129':139
'19#.#3.173.72':139
'19#.#3.32.49':139
'19#.#3.170.162':139
'19#.#3.4.110':139
'19#.#3.32.147':139
'19#.#3.39.135':139
'19#.#3.92.110':139
'19#.#3.221.224':139
'19#.#3.79.87':139
'19#.#3.100.42':139
'19#.#3.48.202':139
'19#.#3.67.100':139
'19#.#3.166.39':139
'19#.#3.4.223':139
'19#.#3.212.158':139
'19#.#3.216.222':139
'19#.#3.49.45':139
'19#.#3.204.158':139
'19#.#3.242.86':139
'19#.#3.152.254':139
'19#.#3.86.152':139
'19#.#3.170.162':445
'19#.#3.12.177':445
'19#.#3.19.13':445
'19#.#3.44.110':445
'19#.#3.169.224':445
'19#.#3.44.172':445
'19#.#3.120.118':445
'19#.#3.18.79':445
'19#.#3.31.51':445
'19#.#3.46.41':445
'19#.#3.50.159':445
'19#.#3.224.101':445
'19#.#3.54.217':139
'19#.#3.6.211':139
'19#.73.8.88':139
'19#.#3.26.175':139
'19#.#3.70.169':139
'19#.#3.35.147':139
'19#.#3.131.152':139
'19#.#3.181.209':139
'19#.#3.204.49':139
'19#.#3.102.172':139
'19#.#3.66.96':139
'19#.#3.90.185':139
'19#.#3.249.175':139
'19#.#3.131.152':445
'19#.#3.135.229':139
'19#.#3.12.138':139
'19#.#3.65.44':139
'19#.#3.229.74':139
'19#.#3.183.3':139
'19#.#3.63.162':139
'19#.#3.35.147':445
'19#.#3.70.169':445
'19#.73.8.88':445
'19#.#3.26.175':445
'19#.#3.22.23':445
'19#.#3.38.67':445
'19#.#3.102.172':445
'19#.#3.181.209':445
'19#.#3.204.49':445
'19#.#3.54.217':445
'19#.#3.6.211':445
'19#.#3.38.67':139
'19#.#3.49.237':445
'19#.#3.194.202':445
'19#.#3.211.87':445
'19#.#3.61.191':445
'19#.#3.101.198':445
'19#.#3.64.143':9988
'19#.#3.192.36':9988
'19#.#3.53.129':9988
'19#.#3.75.31':9988
'19#.#3.197.197':9988
'19#.#3.175.107':445
'19#.#3.100.42':445
'19#.#3.221.224':445
'19#.#3.79.87':445
'19#.#3.173.72':445
'19#.#3.32.49':445
'19#.#3.101.217':445
'19#.#3.191.88':445
'19#.#3.234.71':445
'19#.#3.39.135':445
'19#.#3.92.110':445
'19#.#3.19.13':139
'19#.#3.46.41':139
'19#.#3.12.177':139
'19#.#3.44.172':139
'19#.#3.44.110':139
'19#.#3.18.79':139
'19#.#3.22.23':139
'19#.#3.120.118':139
'19#.#3.50.159':139
'19#.#3.31.51':139
'19#.#3.169.224':139
'19#.#3.95.147':9988
'19#.#3.185.246':9988
'19#.#3.212.79':9988
'19#.#3.30.40':9988
'19#.#3.53.146':9988
'19#.#3.152.254':9988
'19#.#3.224.101':139
'19#.#3.67.100':9988
'19#.#3.158.186':9988
'19#.#3.216.222':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней