Trojan.DownLoader12.29096

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##.83.144':139
'24.##.107.220':139
'24.##.35.127':139
'24.##.251.144':139
'24.##.162.201':139
'24.##.118.86':139
'24.##.12.193':139
'24.##.213.122':445
'24.##.32.130':445
'24.##.150.10':445
'24.#0.54.46':445
'24.##.116.160':445
'24.##.122.116':445
'24.##.115.133':139
'24.##.178.16':139
'24.##.146.242':139
'24.##.120.54':139
'24.##.207.135':139
'24.##.153.62':139
'24.##.131.147':139
'24.##.168.103':139
'24.##.233.231':139
'24.##.90.229':139
'24.##.88.244':139
'24.##.110.167':139
'24.#0.30.86':139
'24.##.178.16':445
'24.##.146.242':445
'24.##.131.147':445
'24.##.207.135':445
'24.##.153.62':445
'24.##.115.133':445
'24.##.88.244':445
'24.##.233.231':445
'24.##.90.229':445
'24.##.251.144':445
'24.##.110.167':445
'24.#0.30.86':445
'24.##.168.103':445
'24.##.61.233':445
'24.#0.12.48':445
'24.##.64.120':445
'24.#0.12.69':445
'24.##.213.180':445
'24.##.131.28':445
'24.##.124.148':445
'24.##.18.154':445
'24.##.19.163':445
'24.##.120.54':445
'24.##.193.30':445
'24.##.163.193':445
'24.##.138.75':445
'24.##.19.163':139
'24.##.176.182':139
'24.#0.34.70':139
'24.##.24.204':139
'24.##.197.131':139
'24.##.191.76':139
'24.##.174.186':139
'24.##.28.210':139
'24.##.28.241':445
'24.##.92.178':445
'24.##.213.92':445
'24.#0.60.29':139
'24.#0.64.60':139
'24.#0.33.24':445
'24.##.167.112':445
'24.##.171.203':445
'24.##.140.231':445
'24.##.156.70':445
'24.#0.5.190':445
'24.#0.26.67':445
'24.##.151.65':445
'24.##.28.241':139
'24.##.92.178':139
'24.##.213.92':139
'24.##.138.238':445
'24.#0.61.84':445
'24.#0.33.24':139
'24.##.213.180':139
'24.##.131.28':139
'24.##.61.233':139
'24.##.32.130':139
'24.##.150.10':139
'24.#0.12.69':139
'24.#0.12.48':139
'24.##.163.193':139
'24.##.138.75':139
'24.##.18.154':139
'24.##.64.120':139
'24.##.124.148':139
'24.##.193.30':139
'24.##.176.182':445
'24.#0.34.70':445
'24.##.24.204':445
'24.##.197.131':445
'24.##.191.76':445
'24.##.174.186':445
'24.##.28.210':445
'24.##.116.160':139
'24.##.122.116':139
'24.##.213.122':139
'24.#0.60.29':445
'24.#0.64.60':445
'24.#0.54.46':139
'24.##.162.201':445
'24.##.242.48':445
'24.##.236.33':445
'24.##.44.236':445
'24.#0.54.87':139
'24.#0.32.73':139
'24.##.192.83':139
'24.##.83.159':445
'24.#0.38.42':445
'24.#0.43.94':445
'24.##.141.207':445
'24.##.14.222':445
'24.##.160.65':445
'24.#0.75.14':445
'24.##.31.228':139
'24.#0.24.55':139
'24.#0.90.71':139
'24.#0.7.85':139
'24.##.61.106':139
'24.##.153.189':139
'24.##.107.138':139
'24.#0.10.87':139
'24.##.80.166':139
'24.##.193.186':139
'24.#0.1.176':139
'24.##.11.160':139
'24.#0.80.21':139
'24.#0.24.55':445
'24.#0.90.71':445
'24.#0.1.176':445
'24.##.61.106':445
'24.##.153.189':445
'24.##.31.228':445
'24.##.107.138':445
'24.##.80.166':445
'24.##.193.186':445
'24.#0.54.87':445
'24.##.11.160':445
'24.#0.80.21':445
'24.#0.10.87':445
'24.##.83.196':445
'24.##.89.254':445
'24.##.91.232':445
'24.##.86.164':445
'24.#0.0.164':445
'24.##.104.33':445
'24.##.196.94':445
'24.##.126.82':445
'24.##.14.148':445
'24.#0.7.85':445
'24.##.200.183':445
'24.##.141.254':445
'24.##.195.223':445
'24.##.14.148':139
'24.##.172.27':139
'24.##.237.171':139
'24.##.166.237':445
'24.##.249.123':139
'24.##.42.135':139
'24.#0.27.42':139
'24.##.35.197':445
'24.##.85.216':445
'24.#0.77.60':445
'24.#0.20.77':445
'24.##.108.131':445
'24.#0.71.46':445
'24.#0.82.71':445
'24.##.35.127':445
'24.##.12.193':445
'24.##.166.237':139
'24.##.118.86':445
'24.##.83.144':445
'24.##.107.220':445
'24.##.35.197':139
'24.##.85.216':139
'24.#0.77.60':139
'24.#0.20.77':139
'24.##.108.131':139
'24.#0.71.46':139
'24.#0.82.71':139
'24.#0.0.164':139
'24.##.104.33':139
'24.##.83.196':139
'24.#0.43.94':139
'24.##.141.207':139
'24.##.86.164':139
'24.##.89.254':139
'24.##.141.254':139
'24.##.195.223':139
'24.##.126.82':139
'24.##.91.232':139
'24.##.196.94':139
'24.##.200.183':139
'24.##.172.27':445
'24.##.237.171':445
'24.##.242.48':139
'24.##.249.123':445
'24.##.42.135':445
'24.#0.27.42':445
'24.##.236.33':139
'24.##.160.65':139
'24.#0.75.14':139
'24.#0.38.42':139
'24.##.44.236':139
'24.##.83.159':139
'24.##.14.222':139
'24.##.118.245':445
'24.##.182.175':445
'24.##.226.96':445
'24.##.80.240':445
'24.##.52.223':445
'24.##.60.254':445
'24.#0.88.40':445
'24.#0.124.4':445
'24.##.242.144':445
'24.##.228.221':445
'24.##.61.193':445
'24.##.230.167':445
'24.##.95.148':445
'24.##.194.177':445
'24.#0.13.66':445
'24.#0.8.28':445
'24.#0.18.91':445
'24.#0.27.62':445
'24.##.111.100':445
'24.##.46.233':445
'24.#0.249.7':445
'24.##.12.109':445
'24.##.55.249':445
'24.#0.23.84':445
'24.##.39.104':445
'24.##.159.81':445
'24.##.134.105':445
'24.##.159.148':445
'24.##.40.238':445
'24.##.157.63':445
'24.##.93.219':445
'24.##.154.130':445
'24.##.56.192':445
'24.#0.71.27':9988
'24.##.194.177':9988
'24.#0.23.84':9988
'24.##.119.144':445
'24.##.140.119':445
'24.##.109.203':445
'24.#0.76.13':445
'24.#0.155.4':445
'24.##.76.154':445
'24.##.11.152':445
'24.#0.7.119':445
'24.##.64.196':445
'24.#0.62.29':445
'24.##.45.251':445
'24.##.150.175':445
'24.##.170.193':445
'24.##.205.254':445
'24.##.168.208':445
'24.##.132.30':445
'24.##.199.36':445
'24.##.52.223':139
'24.##.60.254':139
'24.##.118.245':139
'24.##.12.109':139
'24.##.55.249':139
'24.##.80.240':139
'24.##.182.175':139
'24.##.230.167':139
'24.##.95.148':139
'24.#0.124.4':139
'24.##.226.96':139
'24.#0.88.40':139
'24.##.61.193':139
'24.#0.18.91':139
'24.##.111.100':139
'24.#0.13.66':139
'24.##.199.36':139
'24.##.46.233':139
'24.#0.71.27':139
'24.##.194.177':139
'24.##.39.104':139
'24.##.159.81':139
'24.#0.249.7':139
'24.#0.27.62':139
'24.#0.8.28':139
'24.#0.23.84':139
'24.##.93.219':139
'24.##.154.130':139
'24.##.134.105':139
'24.##.150.175':139
'24.##.170.193':139
'24.##.157.63':139
'24.##.159.148':139
'24.##.140.119':139
'24.##.109.203':139
'24.#0.71.27':445
'24.##.40.238':139
'24.##.56.192':139
'24.##.119.144':139
'24.#0.7.119':139
'24.##.64.196':139
'24.#0.76.13':139
'24.##.242.144':139
'24.##.228.221':139
'24.##.11.152':139
'24.#0.155.4':139
'24.##.168.208':139
'24.##.132.30':139
'24.##.45.251':139
'24.##.76.154':139
'24.#0.62.29':139
'24.##.205.254':139
'24.##.159.81':9988
'24.#0.26.67':139
'24.##.167.112':139
'24.##.171.203':139
'24.#0.61.14':139
'24.##.156.70':139
'24.#0.5.190':139
'24.##.140.231':139
'24.##.105.191':445
'24.##.122.113':445
'24.#0.92.13':445
'24.##.151.65':139
'24.##.138.238':139
'24.#0.61.84':139
'24.##.12.212':139
'24.##.60.173':139
'24.##.133.230':139
'24.##.11.179':139
'24.##.217.128':139
'24.##.183.37':139
'24.##.137.153':139
'24.##.220.17':139
'24.##.146.203':139
'24.##.157.133':139
'24.##.69.165':139
'24.##.121.87':139
'24.#0.17.12':139
'24.##.60.173':445
'24.##.133.230':445
'24.##.137.153':445
'24.##.217.128':445
'24.##.183.37':445
'24.##.12.212':445
'24.##.69.165':445
'24.##.146.203':445
'24.##.157.133':445
'24.#0.61.14':445
'24.##.121.87':445
'24.#0.17.12':445
'24.##.220.17':445
'24.##.237.123':445
'24.##.25.102':445
'24.##.33.218':445
'24.##.70.115':445
'24.##.218.237':445
'24.##.168.77':445
'24.##.40.207':445
'24.#0.93.85':445
'24.##.66.224':445
'24.##.11.179':445
'24.##.164.40':445
'24.#0.53.61':445
'24.##.196.141':445
'24.##.66.224':139
'24.##.125.156':139
'24.##.107.197':139
'24.#0.82.66':139
'24.#0.155.4':9988
'24.#0.62.29':9988
'24.##.45.251':9988
'24.#0.84.81':139
'24.#0.5.216':139
'24.##.116.181':139
'24.##.27.138':139
'24.##.180.83':139
'24.##.129.73':139
'24.##.239.36':139
'24.##.61.193':9988
'24.##.230.167':9988
'24.##.95.148':9988
'24.##.55.249':9988
'24.##.52.223':9988
'24.##.118.245':9988
'24.#0.124.4':9988
'24.#0.7.119':9988
'24.##.64.196':9988
'24.#0.76.13':9988
'24.##.242.144':9988
'24.##.228.221':9988
'24.##.11.152':9988
'24.##.218.237':139
'24.##.168.77':139
'24.##.237.123':139
'24.##.122.113':139
'24.#0.92.13':139
'24.##.70.115':139
'24.##.25.102':139
'24.#0.53.61':139
'24.##.196.141':139
'24.#0.93.85':139
'24.##.33.218':139
'24.##.40.207':139
'24.##.164.40':139
'24.#0.82.66':445
'24.#0.84.81':445
'24.##.180.83':445
'24.##.197.63':139
'24.##.125.156':445
'24.##.107.197':445
'24.##.129.73':445
'24.##.27.138':445
'24.##.197.63':445
'24.##.105.191':139
'24.##.239.36':445
'24.#0.5.216':445
'24.##.116.181':445

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней