Trojan.DownLoader19.44118

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%ProgramFiles%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.##8.221.94':445
'88.##8.58.82':445
'88.##8.145.58':445
'88.##8.179.42':445
'88.##8.127.132':445
'88.##8.6.122':445
'88.##8.197.104':445
'88.##8.22.69':445
'88.##8.42.230':445
'88.##8.39.145':445
'88.##8.122.16':445
'88.##8.45.223':445
'88.##8.207.62':445
'88.##8.65.185':445
'88.##8.33.71':445
'88.##8.97.242':445
'88.##8.146.188':139
'88.##8.124.207':445
'88.##8.121.86':445
'88.##8.154.243':445
'88.##8.12.66':445
'88.##8.207.50':445
'88.##8.42.109':445
'88.##8.184.15':445
'88.##8.14.43':445
'88.##8.40.56':445
'88.##8.181.18':445
'88.##8.235.235':445
'88.##8.46.154':445
'88.##8.66.194':445
'88.##8.16.90':445
'88.##8.85.170':445
'88.##8.217.227':139
'88.##8.35.68':139
'88.##8.159.24':139
'88.##8.68.250':445
'88.##8.113.33':445
'88.##8.146.188':445
'88.##8.195.20':445
'88.##8.81.245':445
'88.##8.213.45':445
'88.##8.175.122':445
'88.##8.125.220':445
'88.##8.26.236':445
'88.##8.83.136':445
'88.##8.213.99':445
'88.##8.242.6':445
'88.##8.99.14':445
'88.##8.19.204':445
'88.##8.232.18':445
'88.##8.11.140':445
'88.##8.207.62':139
'88.##8.179.42':139
'88.##8.127.132':139
'88.##8.154.243':139
'88.##8.12.66':139
'88.##8.207.50':139
'88.##8.145.58':139
'88.##8.39.145':139
'88.##8.122.16':139
'88.##8.6.122':139
'88.##8.221.94':139
'88.##8.58.82':139
'88.##8.14.43':139
'88.##8.54.140':445
'88.##8.140.128':445
'88.##8.124.207':139
'88.##8.140.128':139
'88.##8.165.125':445
'88.##8.164.191':445
'88.##8.97.242':139
'88.##8.42.109':139
'88.##8.184.15':139
'88.##8.121.86':139
'88.##8.65.185':139
'88.##8.33.71':139
'88.##8.45.223':139
'88.##8.195.20':139
'88.##8.66.194':139
'88.##8.16.90':139
'88.##8.213.99':139
'88.##8.242.6':139
'88.##8.99.14':139
'88.##8.46.154':139
'88.##8.68.250':139
'88.##8.113.33':139
'88.##8.85.170':139
'88.##8.181.18':139
'88.##8.235.235':139
'88.##8.11.140':139
'88.##8.40.56':139
'88.##8.125.220':139
'88.##8.26.236':139
'88.##8.197.104':139
'88.##8.22.69':139
'88.##8.42.230':139
'88.##8.175.122':139
'88.##8.19.204':139
'88.##8.232.18':139
'88.##8.83.136':139
'88.##8.81.245':139
'88.##8.213.45':139
'88.##8.35.159':139
'88.##8.162.157':445
'88.##8.41.148':445
'88.##8.82.96':445
'88.##8.144.203':445
'88.##8.194.242':445
'88.##8.158.40':445
'88.##8.194.189':445
'88.##8.56.197':445
'88.##8.85.15':445
'88.##8.39.170':445
'88.##8.145.39':445
'88.##8.182.35':445
'88.##8.203.0':445
'88.##8.93.132':445
'88.##8.178.63':445
'88.##8.174.173':445
'88.##8.24.172':445
'88.##8.142.97':445
'88.##8.189.98':445
'88.##8.179.24':445
'88.##8.126.127':445
'88.##8.78.80':445
'88.##8.171.46':445
'88.##8.31.248':445
'88.##8.43.217':445
'88.##8.19.236':445
'88.##8.100.140':445
'88.##8.251.94':445
'88.##8.53.251':445
'88.##8.56.37':445
'88.##8.225.86':445
'88.##8.51.83':445
'88.##8.154.120':139
'88.##8.77.154':139
'88.##8.80.177':139
'88.##8.57.234':445
'88.##8.145.75':445
'88.##8.120.149':139
'88.#88.8.52':445
'88.##8.105.62':445
'88.##8.78.14':445
'88.##8.175.26':445
'88.##8.216.47':445
'88.##8.66.71':445
'88.##8.202.223':445
'88.##8.20.157':445
'88.##8.92.107':445
'88.##8.39.128':445
'88.##8.107.44':445
'88.##8.92.166':445
'88.##8.189.179':445
'88.##8.203.0':139
'88.##8.144.203':139
'88.##8.194.242':139
'88.##8.179.24':139
'88.##8.126.127':139
'88.##8.78.80':139
'88.##8.82.96':139
'88.##8.39.170':139
'88.##8.145.39':139
'88.##8.158.40':139
'88.##8.162.157':139
'88.##8.41.148':139
'88.##8.43.217':139
'88.##8.35.159':445
'88.##8.24.172':139
'88.##8.142.97':139
'88.##8.217.227':445
'88.##8.35.68':445
'88.##8.159.24':445
'88.##8.174.173':139
'88.##8.171.46':139
'88.##8.31.248':139
'88.##8.189.98':139
'88.##8.93.132':139
'88.##8.178.63':139
'88.##8.182.35':139
'88.#88.8.52':139
'88.##8.56.37':139
'88.##8.225.86':139
'88.##8.20.157':139
'88.##8.92.107':139
'88.##8.39.128':139
'88.##8.53.251':139
'88.##8.57.234':139
'88.##8.145.75':139
'88.##8.51.83':139
'88.##8.100.140':139
'88.##8.251.94':139
'88.##8.189.179':139
'88.##8.19.236':139
'88.##8.216.47':139
'88.##8.66.71':139
'88.##8.194.189':139
'88.##8.56.197':139
'88.##8.85.15':139
'88.##8.175.26':139
'88.##8.107.44':139
'88.##8.92.166':139
'88.##8.202.223':139
'88.##8.105.62':139
'88.##8.78.14':139
'88.##8.58.177':445
'88.##8.150.171':445
'88.##8.151.252':445
'88.##8.191.93':445
'88.##8.138.190':445
'88.##8.177.138':445
'88.##8.87.239':445
'88.#88.2.37':445
'88.##8.85.37':445
'88.##8.175.254':445
'88.##8.20.80':445
'88.##8.184.194':445
'88.##8.96.232':445
'88.##8.27.216':445
'88.##8.211.55':445
'88.##8.165.39':445
'88.##8.200.67':445
'88.##8.24.40':445
'88.##8.145.199':445
'88.##8.80.117':445
'88.##8.197.80':445
'88.##8.149.216':445
'88.##8.40.145':445
'88.##8.117.250':445
'88.##8.29.68':445
'88.##8.118.103':445
'88.##8.246.188':445
'88.##8.132.246':445
'88.##8.30.99':445
'88.#88.87.6':445
'88.##8.159.202':445
'88.##8.74.216':445
'88.#88.9.5':445
'88.##8.102.9':445
'88.##8.83.144':445
'88.##8.49.73':445
'88.##8.36.251':445
'88.#88.5.37':445
'88.##8.167.234':445
'88.##8.34.237':445
'88.##8.123.69':445
'88.##8.164.248':445
'88.##8.209.57':445
'88.##8.224.43':445
'88.##8.60.27':445
'88.##8.27.204':445
'88.##8.64.21':445
'88.##8.234.65':445
'88.##8.64.128':445
'88.#88.9.46':445
'88.##8.204.8':445
'88.##8.58.177':139
'88.##8.150.171':139
'88.##8.151.252':139
'88.##8.191.93':139
'88.##8.138.190':139
'88.##8.177.138':139
'88.#88.2.37':139
'88.##8.87.239':139
'88.##8.85.37':139
'88.##8.175.254':139
'88.##8.20.80':139
'88.##8.184.194':139
'88.##8.96.232':139
'88.##8.29.68':139
'88.##8.145.199':139
'88.##8.24.40':139
'88.##8.211.55':139
'88.##8.27.216':139
'88.##8.40.145':139
'88.##8.80.117':139
'88.##8.197.80':139
'88.##8.149.216':139
'88.##8.200.67':139
'88.##8.165.39':139
'88.##8.117.250':139
'88.##8.118.103':139
'88.##8.246.188':139
'88.##8.132.246':139
'88.##8.30.99':139
'88.##8.159.202':139
'88.#88.87.6':139
'88.##8.74.216':139
'88.#88.9.5':139
'88.##8.102.9':139
'88.##8.83.144':139
'88.##8.49.73':139
'88.##8.36.251':139
'88.#88.5.37':139
'88.##8.167.234':139
'88.##8.34.237':139
'88.##8.123.69':139
'88.##8.164.248':139
'88.##8.209.57':139
'88.##8.224.43':139
'88.##8.60.27':139
'88.##8.27.204':139
'88.##8.64.21':139
'88.##8.234.65':139
'88.##8.64.128':139
'88.#88.9.46':139
'88.##8.204.8':139
'88.##8.58.177':9988
'88.##8.183.77':445
'88.##8.225.224':445
'88.##8.187.138':445
'88.##8.218.2':445
'88.##8.195.14':445
'88.#88.3.31':445
'88.##8.83.221':445
'88.##8.10.245':445
'88.##8.35.95':445
'88.##8.111.140':445
'88.##8.168.66':445
'88.##8.204.88':445
'88.##8.153.107':445
'88.##8.160.203':445
'88.##8.19.63':445
'88.##8.82.244':445
'88.##8.98.51':139
'88.##8.85.72':445
'88.##8.62.110':445
'88.##8.22.120':445
'88.##8.87.22':445
'88.##8.197.95':445
'88.##8.185.82':445
'88.##8.129.142':445
'88.##8.227.84':445
'88.#88.43.0':445
'88.##8.19.225':445
'88.##8.215.158':445
'88.##8.249.117':445
'88.##8.23.198':445
'88.##8.76.91':445
'88.##8.74.81':445
'88.##8.165.125':139
'88.##8.164.191':139
'88.##8.54.140':139
'88.##8.15.249':445
'88.##8.252.232':445
'88.##8.98.51':445
'88.##8.55.96':445
'88.##8.68.114':445
'88.##8.67.47':445
'88.#88.1.57':445
'88.##8.167.88':445
'88.##8.36.19':445
'88.##8.143.240':445
'88.##8.138.104':445
'88.##8.103.138':445
'88.##8.205.103':445
'88.##8.166.91':445
'88.##8.217.30':445
'88.##8.75.170':445
'88.##8.153.107':139
'88.##8.218.2':139
'88.##8.195.14':139
'88.##8.22.120':139
'88.##8.87.22':139
'88.##8.197.95':139
'88.##8.187.138':139
'88.##8.111.140':139
'88.##8.168.66':139
'88.#88.3.31':139
'88.##8.183.77':139
'88.##8.225.224':139
'88.##8.227.84':139
'88.##8.36.251':9988
'88.##8.83.144':9988
'88.##8.85.72':139
'88.##8.200.67':9988
'88.##8.175.254':9988
'88.##8.224.43':9988
'88.##8.82.244':139
'88.##8.185.82':139
'88.##8.129.142':139
'88.##8.62.110':139
'88.##8.160.203':139
'88.##8.19.63':139
'88.##8.204.88':139
'88.##8.55.96':139
'88.##8.23.198':139
'88.##8.76.91':139
'88.##8.138.104':139
'88.##8.103.138':139
'88.##8.205.103':139
'88.##8.249.117':139
'88.##8.15.249':139
'88.##8.252.232':139
'88.##8.74.81':139
'88.##8.19.225':139
'88.##8.215.158':139
'88.##8.75.170':139
'88.#88.43.0':139
'88.##8.167.88':139
'88.##8.36.19':139
'88.##8.83.221':139
'88.##8.10.245':139
'88.##8.35.95':139
'88.#88.1.57':139
'88.##8.166.91':139
'88.##8.217.30':139
'88.##8.143.240':139
'88.##8.68.114':139
'88.##8.67.47':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней