Trojan.DownLoader12.28853

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd3fe.dir00\svchost.exe.mdmp 16325836412032048

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERd3fe.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#3.205.131':445
'21#.#3.223.204':445
'21#.#3.67.106':445
'21#.#3.76.196':445
'21#.#3.42.203':445
'21#.#3.132.49':445
'21#.43.8.48':445
'21#.#3.145.8':445
'21#.#3.122.145':445
'21#.#3.135.51':445
'21#.#3.134.135':445
'21#.#3.234.212':445
'21#.#3.1.132':445
'21#.#3.147.122':139
'21#.#3.93.54':139
'21#.#3.90.205':139
'21#.#3.200.110':139
'21#.#3.37.87':139
'21#.#3.131.204':139
'21#.#3.18.51':445
'21#.#3.72.56':445
'21#.#3.117.86':445
'21#.#3.238.37':139
'21#.#3.82.50':139
'21#.#3.137.23':139
'21#.#3.167.206':445
'21#.#3.139.187':445
'21#.#3.37.137':445
'21#.#3.253.63':445
'21#.#3.36.213':445
'21#.#3.164.38':445
'21#.#3.131.204':445
'21#.#3.147.122':445
'21#.#3.93.54':445
'21#.#3.46.169':445
'21#.#3.200.110':445
'21#.#3.37.87':445
'21#.#3.63.253':445
'21#.43.89.4':445
'21#.#3.64.166':445
'21#.#3.247.196':445
'21#.#3.236.243':445
'21#.#3.22.151':445
'21#.#3.190.228':445
'21#.#3.112.109':445
'21#.43.47.9':445
'21#.43.6.47':445
'21#.#3.71.45':445
'21#.#3.135.46':445
'21#.#3.125.68':445
'21#.#3.117.86':139
'21#.#3.1.132':139
'21#.#3.76.196':139
'21#.#3.143.71':445
'21#.#3.18.51':139
'21#.#3.72.56':139
'21#.#3.223.204':139
'21#.#3.67.106':139
'21#.#3.135.51':139
'21#.#3.42.203':139
'21#.#3.132.49':139
'21#.#3.205.131':139
'21#.#3.183.164':445
'21#.#3.54.242':139
'21#.#3.148.54':139
'21#.#3.152.201':139
'21#.#3.75.120':445
'21#.#3.35.130':445
'21#.#3.38.159':139
'21#.#3.54.242':445
'21#.#3.148.54':445
'21#.#3.152.201':445
'21#.#3.183.164':139
'21#.#3.143.71':139
'21#.#3.38.159':445
'21#.43.6.47':139
'21#.#3.63.253':139
'21#.#3.253.63':139
'21#.#3.125.68':139
'21#.#3.112.109':139
'21#.43.47.9':139
'21#.#3.139.187':139
'21#.#3.37.137':139
'21#.#3.46.169':139
'21#.#3.36.213':139
'21#.#3.164.38':139
'21#.#3.167.206':139
'21#.#3.135.46':139
'21#.#3.145.8':139
'21#.#3.122.145':139
'21#.#3.236.243':139
'21#.#3.134.135':139
'21#.#3.234.212':139
'21#.43.8.48':139
'21#.#3.64.166':139
'21#.#3.247.196':139
'21#.#3.71.45':139
'21#.#3.22.151':139
'21#.#3.190.228':139
'21#.43.89.4':139
'21#.#3.164.139':445
'21#.#3.6.239':445
'21#.#3.149.248':445
'21#.#3.190.3':445
'21#.#3.39.73':445
'21#.#3.140.52':445
'21#.#3.72.210':445
'21#.#3.22.190':445
'21#.#3.82.76':445
'21#.43.78.5':445
'21#.#3.40.34':445
'21#.#3.63.65':445
'21#.#3.219.187':445
'21#.#3.65.238':139
'21#.#3.139.163':139
'21#.#3.3.183':139
'21#.#3.96.12':139
'21#.#3.31.39':139
'21#.#3.239.104':139
'21#.#3.98.60':139
'21#.#3.162.97':139
'21#.#3.188.33':445
'21#.#3.219.109':139
'21#.#3.60.220':139
'21#.#3.60.61':139
'21#.43.23.3':445
'21#.#3.104.42':445
'21#.#3.113.225':445
'21#.#3.181.207':445
'21#.#3.45.160':445
'21#.#3.95.249':445
'21#.#3.239.104':445
'21#.#3.65.238':445
'21#.#3.139.163':445
'21#.#3.85.244':445
'21#.#3.96.12':445
'21#.#3.31.39':445
'21#.#3.51.227':445
'21#.#3.168.126':445
'21#.#3.67.236':445
'21#.#3.9.195':445
'21#.#3.218.240':445
'21#.#3.84.31':445
'21#.#3.158.180':445
'21#.#3.220.32':445
'21#.#3.84.215':445
'21#.#3.55.236':445
'21#.#3.107.246':445
'21#.#3.76.213':445
'21#.43.5.38':445
'21#.#3.188.33':139
'21#.#3.219.187':139
'21#.#3.190.3':139
'21#.#3.172.3':445
'21#.#3.143.187':445
'21#.#3.33.170':445
'21#.#3.6.239':139
'21#.#3.149.248':139
'21#.43.78.5':139
'21#.#3.39.73':139
'21#.#3.140.52':139
'21#.#3.164.139':139
'21#.#3.168.207':445
'21#.#3.137.23':445
'21#.#3.66.90':139
'21#.#3.203.229':139
'21#.#3.90.205':445
'21#.#3.238.37':445
'21#.#3.82.50':445
'21#.#3.33.170':139
'21#.#3.66.90':445
'21#.#3.203.229':445
'21#.#3.168.207':139
'21#.#3.172.3':139
'21#.#3.143.187':139
'21#.#3.55.236':139
'21#.#3.51.227':139
'21#.#3.181.207':139
'21#.43.5.38':139
'21#.#3.220.32':139
'21#.#3.84.215':139
'21#.#3.104.42':139
'21#.#3.113.225':139
'21#.#3.85.244':139
'21#.#3.45.160':139
'21#.#3.95.249':139
'21#.43.23.3':139
'21#.#3.76.213':139
'21#.#3.22.190':139
'21#.#3.82.76':139
'21#.#3.218.240':139
'21#.#3.40.34':139
'21#.#3.63.65':139
'21#.#3.72.210':139
'21#.#3.67.236':139
'21#.#3.9.195':139
'21#.#3.107.246':139
'21#.#3.84.31':139
'21#.#3.158.180':139
'21#.#3.168.126':139
'21#.43.9.59':445
'21#.#3.200.235':445
'21#.#3.121.145':445
'21#.#3.190.130':445
'21#.#3.169.151':445
'21#.#3.200.11':445
'21#.#3.140.182':445
'21#.#3.81.141':445
'21#.#3.138.187':445
'21#.#3.20.165':445
'21#.#3.9.107':445
'21#.#3.173.32':445
'21#.#3.157.228':445
'21#.#3.175.225':445
'21#.#3.89.216':445
'21#.#3.117.161':445
'21#.#3.200.15':139
'21#.#3.153.31':445
'21#.#3.37.205':445
'21#.#3.69.154':445
'21#.#3.159.156':445
'21#.#3.78.99':445
'21#.43.6.99':445
'21#.#3.136.59':445
'21#.#3.247.121':445
'21#.#3.53.82':445
'21#.#3.181.152':445
'21#.#3.145.41':445
'21#.#3.109.108':445
'21#.#3.150.148':445
'21#.#3.99.153':445
'21#.#3.156.165':445
'21#.#3.42.65':445
'21#.#3.11.83':445
'21#.#3.123.197':445
'21#.#3.0.203':445
'21#.#3.140.61':445
'21#.#3.220.190':445
'21#.#3.163.32':445
'21#.#3.49.21':445
'21#.#3.142.160':445
'21#.#3.77.41':445
'21#.#3.88.25':445
'21#.#3.214.126':445
'21#.#3.208.88':445
'21#.#3.190.207':445
'21#.#3.67.127':445
'21#.#3.181.254':445
'21#.#3.244.51':445
'21#.#3.88.244':445
'21#.43.9.59':139
'21#.#3.121.145':139
'21#.#3.20.165':139
'21#.#3.169.151':139
'21#.#3.200.11':139
'21#.#3.200.235':139
'21#.#3.81.141':139
'21#.#3.138.187':139
'21#.#3.77.41':139
'21#.#3.9.107':139
'21#.#3.173.32':139
'21#.#3.140.182':139
'21#.#3.190.130':139
'21#.#3.89.216':139
'21#.#3.175.225':139
'21#.#3.153.31':139
'21#.#3.136.59':139
'21#.#3.37.205':139
'21#.#3.117.161':139
'21#.#3.159.156':139
'21#.#3.78.99':139
'21#.#3.157.228':139
'21#.43.6.99':139
'21#.#3.247.121':139
'21#.#3.69.154':139
'21#.#3.181.152':139
'21#.#3.145.41':139
'21#.#3.123.197':139
'21#.#3.150.148':139
'21#.#3.99.153':139
'21#.#3.53.82':139
'21#.#3.42.65':139
'21#.#3.11.83':139
'21#.#3.42.76':139
'21#.#3.0.203':139
'21#.#3.140.61':139
'21#.#3.156.165':139
'21#.#3.109.108':139
'21#.#3.49.21':139
'21#.#3.142.160':139
'21#.#3.181.254':139
'21#.#3.88.25':139
'21#.#3.214.126':139
'21#.#3.163.32':139
'21#.#3.190.207':139
'21#.#3.220.190':139
'21#.#3.67.127':139
'21#.#3.244.51':139
'21#.#3.88.244':139
'21#.#3.208.88':139
'21#.#3.6.114':445
'21#.43.83.4':445
'21#.#3.12.195':445
'21#.#3.212.75':445
'21#.#3.177.251':445
'21#.#3.211.2':445
'21#.#3.188.187':445
'21#.#3.38.32':445
'21#.#3.206.192':445
'21#.#3.23.233':445
'21#.#3.47.227':445
'21#.#3.7.186':445
'21#.#3.32.26':445
'21#.#3.28.95':139
'21#.#3.56.14':139
'21#.#3.75.120':139
'21#.#3.179.252':139
'21#.#3.251.214':139
'21#.#3.247.149':139
'21#.#3.41.248':445
'21#.#3.196.62':445
'21#.#3.27.57':445
'21#.#3.35.130':139
'21#.#3.18.196':445
'21#.#3.248.147':445
'21#.#3.18.159':445
'21#.#3.39.18':445
'21#.#3.239.38':445
'21#.#3.61.36':445
'21#.#3.133.130':445
'21#.#3.159.133':445
'21#.#3.247.149':445
'21#.#3.28.95':445
'21#.#3.56.14':445
'21#.#3.52.111':445
'21#.#3.179.252':445
'21#.#3.251.214':445
'21#.#3.118.222':445
'21#.#3.45.57':445
'21#.#3.246.75':445
'21#.#3.121.246':445
'21#.#3.206.229':445
'21#.#3.8.186':445
'21#.43.14.3':445
'21#.#3.187.211':445
'21#.#3.171.244':445
'21#.#3.221.171':445
'21#.#3.99.122':445
'21#.#3.162.99':445
'21#.#3.41.143':445
'21#.#3.27.57':139
'21#.#3.32.26':139
'21#.#3.212.75':139
'21#.#3.248.147':139
'21#.#3.41.248':139
'21#.#3.196.62':139
'21#.43.83.4':139
'21#.#3.12.195':139
'21#.#3.23.233':139
'21#.#3.177.251':139
'21#.#3.211.2':139
'21#.#3.6.114':139
'21#.#3.18.196':139
'21#.#3.169.151':9988
'21#.#3.200.11':9988
'21#.#3.200.235':9988
'21#.#3.42.76':445
'21#.#3.200.15':445
'21#.#3.37.205':9988
'21#.#3.67.127':9988
'21#.#3.0.203':9988
'21#.#3.140.61':9988
'21#.#3.140.182':9988
'21#.#3.88.25':9988
'21#.#3.181.254':9988
'21#.#3.221.171':139
'21#.#3.118.222':139
'21#.#3.61.36':139
'21#.#3.41.143':139
'21#.#3.187.211':139
'21#.#3.171.244':139
'21#.#3.39.18':139
'21#.#3.239.38':139
'21#.#3.52.111':139
'21#.#3.133.130':139
'21#.#3.159.133':139
'21#.#3.18.159':139
'21#.#3.162.99':139
'21#.#3.38.32':139
'21#.#3.206.192':139
'21#.#3.206.229':139
'21#.#3.47.227':139
'21#.#3.7.186':139
'21#.#3.188.187':139
'21#.#3.246.75':139
'21#.#3.121.246':139
'21#.#3.99.122':139
'21#.#3.8.186':139
'21#.43.14.3':139
'21#.#3.45.57':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней