Trojan.DownLoader19.48345

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%ProgramFiles%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'84.##.202.75':445
'84.##.159.179':445
'84.##.240.120':139
'84.#8.33.38':445
'84.##.214.31':445
'84.##.75.214':445
'84.#8.25.86':139
'84.##.193.25':139
'84.##.90.193':139
'84.##.34.240':139
'84.##.31.199':139
'84.##.86.147':139
'84.##.63.101':445
'84.##.60.143':445
'84.##.81.153':445
'84.##.247.111':445
'84.##.157.10':445
'84.##.153.11':445
'84.#8.42.35':445
'84.##.183.168':445
'84.##.12.184':445
'84.##.33.100':445
'84.##.234.32':445
'84.##.197.95':445
'84.#8.32.61':139
'84.##.69.254':139
'84.#8.55.70':139
'84.##.76.132':139
'84.##.200.65':139
'84.##.122.71':139
'84.##.255.30':139
'84.##.34.240':445
'84.##.31.199':445
'84.##.86.147':445
'84.#8.7.7':139
'84.##.240.104':139
'84.##.240.120':445
'84.##.40.237':139
'84.##.227.40':139
'84.##.237.227':139
'84.##.25.169':139
'84.##.12.198':139
'84.##.237.11':139
'84.##.129.60':139
'84.#8.97.24':139
'84.##.144.40':139
'84.##.94.237':139
'84.#8.82.18':139
'84.##.217.60':139
'84.##.106.131':445
'84.#8.97.42':445
'84.##.76.207':445
'84.##.128.221':445
'84.##.180.49':445
'84.##.23.182':445
'84.##.120.149':139
'84.##.71.254':139
'84.#8.20.49':139
'84.##.42.235':445
'84.##.119.42':445
'84.##.55.125':139
'84.##.110.60':445
'84.##.218.65':445
'84.##.230.55':445
'84.##.25.150':445
'84.##.45.159':445
'84.##.103.196':445
'84.#8.15.85':445
'84.##.243.56':445
'84.#8.21.19':445
'84.##.243.68':445
'84.##.78.180':445
'84.#8.68.21':445
'84.##.130.224':139
'84.##.75.214':139
'84.##.202.75':139
'84.##.159.179':139
'84.##.12.184':139
'84.#8.33.38':139
'84.##.214.31':139
'84.#8.20.49':445
'84.##.130.224':445
'84.##.111.131':445
'84.##.55.125':445
'84.##.120.149':445
'84.##.71.254':445
'84.##.153.11':139
'84.##.63.101':139
'84.##.60.143':139
'84.##.111.131':139
'84.##.247.111':139
'84.##.157.10':139
'84.##.197.95':139
'84.#8.42.35':139
'84.##.183.168':139
'84.##.81.153':139
'84.##.33.100':139
'84.##.234.32':139
'84.##.32.134':445
'84.#8.64.18':445
'84.##.206.184':445
'84.#8.98.57':445
'84.##.178.73':445
'84.#8.80.83':445
'84.##.143.52':139
'84.##.118.139':139
'84.##.106.185':139
'84.##.203.206':445
'84.#8.3.89':445
'84.##.131.125':445
'84.#8.61.63':445
'84.#8.52.88':445
'84.##.188.206':445
'84.##.151.148':445
'84.##.127.124':445
'84.##.172.101':445
'84.##.34.250':445
'84.##.178.194':445
'84.##.57.200':445
'84.#8.15.59':445
'84.##.100.244':445
'84.##.239.232':445
'84.##.119.91':139
'84.##.87.242':139
'84.##.172.87':139
'84.##.128.193':139
'84.##.211.86':139
'84.##.136.181':139
'84.##.242.127':139
'84.##.254.227':139
'84.#8.66.30':139
'84.##.125.92':139
'84.##.223.120':139
'84.##.101.141':139
'84.##.60.108':139
'84.##.108.91':139
'84.##.95.191':139
'84.##.50.180':139
'84.##.155.73':139
'84.##.12.144':139
'84.##.246.175':139
'84.##.83.221':139
'84.#8.4.110':139
'84.#8.2.200':139
'84.##.216.235':139
'84.##.211.31':139
'84.##.62.211':139
'84.##.144.40':445
'84.##.200.65':445
'84.##.122.71':445
'84.##.217.60':445
'84.##.129.60':445
'84.#8.97.24':445
'84.##.76.132':445
'84.#8.7.7':445
'84.##.240.104':445
'84.##.255.30':445
'84.##.69.254':445
'84.#8.55.70':445
'84.#8.32.61':445
'84.##.25.169':445
'84.##.12.198':445
'84.#8.25.86':445
'84.##.193.25':445
'84.##.90.193':445
'84.##.237.227':445
'84.##.94.237':445
'84.#8.82.18':445
'84.##.237.11':445
'84.##.40.237':445
'84.##.227.40':445
'84.##.245.22':139
'84.#8.80.83':139
'84.##.32.134':139
'84.#8.64.18':139
'84.##.57.200':139
'84.#8.98.57':139
'84.##.178.73':139
'84.##.131.125':139
'84.##.245.22':445
'84.#8.42.69':445
'84.##.206.184':139
'84.##.203.206':139
'84.#8.3.89':139
'84.##.172.101':139
'84.#8.61.63':139
'84.#8.52.88':139
'84.#8.42.69':139
'84.##.151.148':139
'84.##.127.124':139
'84.##.239.232':139
'84.##.34.250':139
'84.##.178.194':139
'84.##.188.206':139
'84.#8.15.59':139
'84.##.100.244':139
'84.##.149.229':445
'84.#8.6.249':445
'84.##.237.14':445
'84.##.56.230':445
'84.#8.64.68':445
'84.##.216.68':445
'84.##.115.195':445
'84.##.157.193':445
'84.##.154.197':445
'84.#8.2.146':445
'84.#8.69.63':445
'84.##.147.19':445
'84.##.148.33':445
'84.##.40.199':445
'84.##.130.18':445
'84.##.34.196':445
'84.##.141.227':139
'84.##.110.147':139
'84.##.202.36':445
'84.##.25.130':445
'84.##.130.11':445
'84.#8.1.169':445
'84.##.235.247':445
'84.#8.92.97':445
'84.##.131.25':445
'84.#8.107.2':445
'84.##.157.65':445
'84.##.191.106':445
'84.#8.70.20':445
'84.##.126.240':445
'84.##.210.25':445
'84.##.234.168':445
'84.##.250.23':445
'84.#8.89.63':445
'84.##.102.78':445
'84.##.210.240':445
'84.##.79.125':445
'84.##.103.253':445
'84.##.102.13':445
'84.##.38.145':445
'84.##.112.102':445
'84.##.209.106':445
'84.##.116.75':445
'84.##.185.180':445
'84.##.68.166':445
'84.#8.61.68':445
'84.#8.88.27':445
'84.##.172.148':445
'84.##.69.151':445
'84.##.183.91':445
'84.##.56.230':139
'84.#8.69.63':139
'84.##.147.19':139
'84.##.115.195':139
'84.#8.6.249':139
'84.##.237.14':139
'84.#8.2.146':139
'84.#8.107.2':139
'84.##.209.106':139
'84.##.148.33':139
'84.##.157.193':139
'84.##.154.197':139
'84.##.235.247':139
'84.##.34.196':139
'84.##.130.18':139
'84.##.40.199':139
'84.#8.92.97':139
'84.##.202.36':139
'84.#8.1.169':139
'84.#8.64.68':139
'84.##.216.68':139
'84.##.25.130':139
'84.##.131.25':139
'84.##.130.11':139
'84.##.116.75':139
'84.##.210.240':139
'84.#8.70.20':139
'84.##.79.125':139
'84.##.234.168':139
'84.##.157.65':139
'84.##.191.106':139
'84.##.102.78':139
'84.##.16.123':139
'84.##.254.219':139
'84.##.103.253':139
'84.##.250.23':139
'84.#8.89.63':139
'84.##.112.102':139
'84.##.172.148':139
'84.##.69.151':139
'84.##.185.180':139
'84.##.38.145':139
'84.##.102.13':139
'84.#8.88.27':139
'84.##.126.240':139
'84.##.210.25':139
'84.##.183.91':139
'84.##.68.166':139
'84.#8.61.68':139
'84.##.60.183':139
'84.##.126.75':139
'84.##.129.117':139
'84.#8.97.70':445
'84.#8.0.233':445
'84.##.109.100':139
'84.##.149.229':139
'84.##.25.150':139
'84.##.45.159':139
'84.##.246.140':139
'84.##.171.16':139
'84.##.220.20':139
'84.##.195.30':445
'84.##.109.161':445
'84.##.96.104':445
'84.#8.77.82':445
'84.##.35.202':445
'84.##.30.215':445
'84.##.119.110':445
'84.#8.11.52':445
'84.##.63.174':445
'84.##.16.224':445
'84.##.102.24':445
'84.##.27.191':445
'84.##.103.196':139
'84.##.42.235':139
'84.##.119.42':139
'84.##.109.100':445
'84.##.106.131':139
'84.#8.97.42':139
'84.##.76.207':139
'84.##.246.140':445
'84.##.171.16':445
'84.##.220.20':445
'84.##.60.183':445
'84.##.126.75':445
'84.##.129.117':445
'84.##.243.68':139
'84.##.78.180':139
'84.#8.68.21':139
'84.##.110.60':139
'84.##.218.65':139
'84.##.230.55':139
'84.##.128.221':139
'84.##.180.49':139
'84.##.23.182':139
'84.#8.15.85':139
'84.##.243.56':139
'84.#8.21.19':139
'84.#8.70.20':9988
'84.##.110.147':9988
'84.##.113.233':139
'84.##.235.247':9988
'84.##.126.240':9988
'84.##.157.65':9988
'84.##.178.18':139
'84.##.86.211':139
'84.##.93.205':139
'84.##.240.15':139
'84.##.70.242':139
'84.##.125.250':139
'84.##.110.147':445
'84.#8.6.249':9988
'84.#8.2.146':9988
'84.##.16.123':445
'84.##.254.219':445
'84.##.141.227':445
'84.##.34.196':9988
'84.#8.69.63':9988
'84.##.115.195':9988
'84.##.209.106':9988
'84.##.102.13':9988
'84.##.40.199':9988
'84.##.208.82':139
'84.##.113.233':445
'84.##.240.15':445
'84.##.70.242':445
'84.##.63.174':139
'84.#8.97.70':139
'84.#8.0.233':139
'84.##.93.205':445
'84.##.208.82':445
'84.##.82.214':445
'84.##.125.250':445
'84.##.178.18':445
'84.##.86.211':445
'84.##.30.215':139
'84.##.195.30':139
'84.##.109.161':139
'84.##.82.214':139
'84.#8.77.82':139
'84.##.35.202':139
'84.##.27.191':139
'84.##.119.110':139
'84.#8.11.52':139
'84.##.96.104':139
'84.##.16.224':139
'84.##.102.24':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней