Trojan.DownLoader12.28864

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER540f.dir00\svchost.exe.mdmp 16325836412032300

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER540f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.72.42.7':139
'22#.#2.251.4':139
'22#.#2.22.187':139
'22#.#2.138.175':139
'22#.#2.41.139':139
'22#.#2.7.176':139
'22#.#2.146.152':139
'22#.#2.25.75':139
'22#.#2.32.135':139
'22#.#2.33.181':139
'22#.#2.43.189':139
'22#.#2.105.84':445
'22#.#2.241.252':445
'22#.#2.182.66':445
'22#.#2.61.213':445
'22#.#2.152.93':445
'22#.#2.135.223':139
'22#.72.5.78':139
'22#.#2.172.101':139
'22#.#2.252.241':445
'22#.#2.164.252':139
'22#.#2.32.135':445
'22#.#2.33.181':445
'22#.#2.251.4':445
'22#.#2.22.187':445
'22#.72.42.7':445
'22#.#2.89.147':445
'22#.#2.46.170':445
'22#.#2.146.152':445
'22#.#2.25.75':445
'22#.#2.7.176':445
'22#.#2.41.139':445
'22#.#2.192.158':139
'22#.#2.164.252':445
'22#.#2.101.252':139
'22#.#2.89.147':139
'22#.#2.46.170':139
'22#.#2.43.189':445
'22#.#2.138.175':445
'22#.72.5.78':445
'22#.#2.172.101':445
'22#.#2.135.223':445
'22#.#2.205.74':445
'22#.#2.105.84':139
'22#.#2.241.252':139
'22#.#2.182.66':139
'22#.#2.61.213':139
'22#.#2.152.93':139
'22#.#2.67.137':445
'22#.#2.255.67':445
'22#.#2.137.143':445
'22#.#2.252.241':139
'22#.#2.155.40':445
'22#.#2.205.74':139
'22#.#2.90.176':139
'22#.#2.19.59':139
'22#.#2.176.90':139
'22#.#2.124.233':139
'22#.#2.90.188':139
'22#.#2.120.189':139
'22#.#2.74.218':139
'22#.72.24.0':139
'22#.#2.27.221':139
'22#.#2.115.142':139
'22#.#2.90.176':445
'22#.#2.19.59':445
'22#.#2.176.90':445
'22#.#2.124.233':445
'22#.#2.90.188':445
'22#.#2.120.189':445
'22#.#2.74.218':445
'22#.72.24.0':445
'22#.#2.27.221':445
'22#.#2.115.142':445
'22#.#2.76.246':445
'22#.#2.72.201':445
'22#.#2.64.229':445
'22#.#2.0.155':445
'22#.#2.226.210':445
'22#.#2.159.149':445
'22#.#2.22.238':445
'22#.#2.107.237':445
'22#.#2.0.236':445
'22#.#2.151.159':445
'22#.#2.195.141':445
'22#.#2.31.248':445
'22#.#2.52.208':445
'22#.#2.181.122':445
'22#.#2.20.121':445
'22#.#2.10.21':445
'22#.#2.165.216':445
'22#.#2.40.235':445
'22#.#2.131.189':445
'22#.#2.53.41':445
'22#.#2.189.218':445
'22#.#2.64.228':445
'22#.#2.152.32':445
'22#.72.41.9':445
'22#.#2.32.176':445
'22#.#2.11.100':445
'22#.#2.175.197':445
'22#.#2.165.78':445
'22#.#2.234.32':445
'22#.#2.226.10':445
'22#.#2.142.102':445
'22#.#2.70.143':445
'22#.#2.154.180':139
'22#.#2.67.155':139
'22#.#2.168.61':139
'22#.72.3.63':139
'22#.#2.64.127':139
'22#.#2.197.163':139
'22#.#2.88.31':139
'22#.#2.95.190':139
'22#.#2.183.67':139
'22#.#2.211.20':139
'22#.#2.38.138':139
'22#.#2.207.113':139
'22#.#2.37.205':139
'22#.#2.247.173':139
'22#.72.20.6':445
'22#.#2.11.93':445
'22#.#2.110.171':139
'22#.#2.95.38':139
'22#.72.70.1':139
'22#.#2.174.148':139
'22#.#2.193.185':139
'22#.#2.94.236':445
'22#.#2.152.32':139
'22#.72.41.9':139
'22#.#2.32.176':139
'22#.#2.11.100':139
'22#.#2.175.197':139
'22#.#2.165.78':139
'22#.#2.234.32':139
'22#.#2.226.10':139
'22#.#2.142.102':139
'22#.#2.70.143':139
'22#.#2.94.236':139
'22#.#2.99.131':139
'22#.#2.153.137':139
'22#.#2.233.14':139
'22#.#2.101.252':445
'22#.#2.192.158':445
'22#.72.2.91':139
'22#.#2.147.14':139
'22#.#2.52.133':139
'22#.#2.163.92':139
'22#.#2.205.162':139
'22#.#2.99.131':445
'22#.#2.153.137':445
'22#.#2.233.14':445
'22#.72.20.6':139
'22#.#2.11.93':139
'22#.72.2.91':445
'22#.#2.147.14':445
'22#.#2.52.133':445
'22#.#2.163.92':445
'22#.#2.205.162':445
'22#.#2.40.235':139
'22#.#2.181.122':139
'22#.#2.31.248':139
'22#.#2.10.21':139
'22#.#2.64.228':139
'22#.#2.20.121':139
'22#.#2.131.189':139
'22#.#2.165.216':139
'22#.#2.189.218':139
'22#.#2.52.208':139
'22#.#2.53.41':139
'22#.#2.76.246':139
'22#.#2.84.119':445
'22#.#2.126.131':445
'22#.72.86.1':445
'22#.#2.253.228':445
'22#.#2.101.224':445
'22#.#2.38.91':445
'22#.#2.154.118':445
'22#.#2.3.160':445
'22#.#2.121.135':445
'22#.#2.160.136':445
'22#.#2.39.227':445
'22#.#2.156.5':139
'22#.#2.68.221':139
'22#.#2.15.89':139
'22#.#2.211.13':139
'22#.#2.53.211':139
'22#.#2.9.228':445
'22#.#2.134.16':445
'22#.#2.88.185':139
'22#.#2.180.140':139
'22#.#2.121.167':139
'22#.#2.202.39':445
'22#.#2.118.67':445
'22#.#2.86.239':445
'22#.#2.249.96':445
'22#.#2.25.250':445
'22#.#2.157.15':445
'22#.#2.101.157':445
'22#.#2.15.35':445
'22#.#2.254.24':445
'22#.#2.34.254':445
'22#.#2.223.105':445
'22#.#2.40.103':445
'22#.#2.47.42':445
'22#.#2.181.207':445
'22#.#2.100.192':445
'22#.#2.19.67':445
'22#.#2.147.115':445
'22#.#2.92.239':445
'22#.#2.53.117':445
'22#.#2.194.13':445
'22#.#2.153.194':445
'22#.#2.13.182':139
'22#.#2.19.67':139
'22#.#2.181.207':139
'22#.#2.100.192':139
'22#.#2.38.91':139
'22#.#2.154.118':139
'22#.#2.153.194':139
'22#.#2.53.117':139
'22#.#2.194.13':139
'22#.#2.40.103':139
'22#.#2.47.42':139
'22#.#2.3.160':139
'22#.#2.253.228':139
'22#.#2.101.224':139
'22#.#2.39.227':139
'22#.#2.9.228':139
'22#.#2.134.16':139
'22#.#2.121.135':139
'22#.#2.160.136':139
'22#.#2.126.131':139
'22#.72.86.1':139
'22#.#2.84.119':139
'22#.#2.42.143':139
'22#.#2.145.20':139
'22#.#2.156.8':139
'22#.#2.157.15':139
'22#.#2.101.157':139
'22#.#2.167.20':139
'22#.#2.20.248':139
'22#.#2.239.53':139
'22#.#2.211.143':139
'22#.#2.72.207':139
'22#.#2.15.35':139
'22#.#2.249.96':139
'22#.#2.25.250':139
'22#.#2.223.105':139
'22#.#2.147.115':139
'22#.#2.92.239':139
'22#.#2.254.24':139
'22#.#2.34.254':139
'22#.#2.118.67':139
'22#.#2.86.239':139
'22#.#2.202.39':139
'22#.#2.24.180':445
'22#.#2.142.28':445
'22#.#2.180.106':445
'22#.#2.202.202':445
'22#.#2.177.3':445
'22#.#2.205.123':445
'22#.#2.217.83':445
'22#.#2.71.209':445
'22#.72.36.4':445
'22#.#2.49.92':445
'22#.#2.202.124':445
'22#.#2.105.193':139
'22#.#2.55.23':139
'22#.72.3.20':139
'22#.#2.205.123':139
'22#.#2.217.83':139
'22#.#2.173.60':139
'22#.#2.86.56':445
'22#.#2.252.96':139
'22#.#2.174.72':139
'22#.#2.66.142':139
'22#.#2.72.201':139
'22#.#2.64.229':139
'22#.#2.0.155':139
'22#.#2.226.210':139
'22#.#2.159.149':139
'22#.#2.22.238':139
'22#.#2.107.237':139
'22#.#2.0.236':139
'22#.#2.151.159':139
'22#.#2.195.141':139
'22#.#2.255.67':139
'22#.#2.174.72':445
'22#.#2.66.142':445
'22#.#2.55.23':445
'22#.72.3.20':445
'22#.#2.105.193':445
'22#.#2.137.143':139
'22#.#2.67.137':139
'22#.#2.155.40':139
'22#.#2.252.96':445
'22#.#2.173.60':445
'22#.#2.71.209':139
'22#.#2.180.140':445
'22#.#2.121.167':445
'22#.#2.68.221':445
'22#.#2.15.89':445
'22#.#2.156.5':445
'22#.#2.39.227':9988
'22#.#2.253.228':9988
'22#.#2.134.16':9988
'22#.#2.88.185':445
'22#.#2.9.228':9988
'22#.#2.53.211':445
'22#.#2.211.143':445
'22#.#2.72.207':445
'22#.#2.145.20':445
'22#.#2.156.8':445
'22#.#2.42.143':445
'22#.#2.13.182':445
'22#.#2.211.13':445
'22#.#2.20.248':445
'22#.#2.239.53':445
'22#.#2.167.20':445
'22#.#2.202.202':139
'22#.#2.177.3':139
'22#.#2.202.124':139
'22#.#2.34.254':9988
'22#.#2.86.56':139
'22#.72.36.4':139
'22#.#2.49.92':139
'22#.#2.142.28':139
'22#.#2.180.106':139
'22#.#2.24.180':139
'22#.#2.254.24':9988
'22#.#2.126.131':9988
'22#.#2.160.136':9988
'22#.72.86.1':9988
'22#.#2.101.224':9988
'22#.#2.84.119':9988
'22#.#2.53.117':9988
'22#.#2.118.67':9988
'22#.#2.153.194':9988
'22#.#2.3.160':9988
'22#.#2.38.91':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней