Trojan.DownLoader12.28936

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1e13.dir00\svchost.exe.mdmp 16325836412032212

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1e13.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#1.178.106':139
'20#.#1.94.142':139
'20#.#1.175.78':139
'20#.#1.111.10':139
'20#.#1.135.111':139
'20#.#1.144.78':139
'20#.#1.100.212':139
'20#.#1.108.73':139
'20#.#1.216.223':139
'20#.81.4.40':139
'20#.#1.46.55':139
'20#.#1.12.20':139
'20#.#1.161.177':139
'20#.#1.68.180':139
'20#.#1.202.188':139
'20#.#1.85.155':139
'20#.#1.123.61':139
'20#.#1.85.223':139
'20#.#1.44.53':139
'20#.#1.27.222':139
'20#.#1.132.200':139
'20#.81.7.87':139
'20#.#1.85.223':445
'20#.#1.46.55':445
'20#.#1.123.61':445
'20#.#1.132.200':445
'20#.#1.44.53':445
'20#.#1.178.106':445
'20#.#1.94.142':445
'20#.#1.175.78':445
'20#.#1.111.10':445
'20#.#1.135.111':445
'20#.#1.27.222':445
'20#.#1.52.184':139
'20#.#1.27.53':139
'20#.#1.138.174':139
'20#.#1.66.158':139
'20#.#1.75.234':139
'20#.#1.12.20':445
'20#.#1.161.177':445
'20#.#1.68.180':445
'20#.#1.202.188':445
'20#.#1.85.155':445
'20#.#1.110.65':139
'20#.#1.107.43':139
'20#.#1.246.204':139
'20#.#1.74.24':139
'20#.#1.106.161':139
'20#.81.15.3':445
'20#.#1.87.12':445
'20#.#1.117.116':139
'20#.#1.45.234':139
'20#.#1.156.215':139
'20#.#1.194.145':139
'20#.#1.89.168':139
'20#.#1.74.170':139
'20#.#1.36.248':139
'20#.#1.115.167':139
'20#.#1.68.72':139
'20#.#1.242.93':139
'20#.#1.189.120':139
'20#.81.0.31':139
'20#.#1.227.169':139
'20#.#1.130.208':139
'20#.#1.168.108':445
'20#.#1.106.161':445
'20#.#1.246.204':445
'20#.#1.74.24':445
'20#.#1.189.120':445
'20#.#1.194.145':445
'20#.#1.156.215':445
'20#.#1.117.116':445
'20#.#1.45.234':445
'20#.#1.110.65':445
'20#.#1.107.43':445
'20#.#1.242.93':445
'20#.#1.68.72':445
'20#.#1.36.248':445
'20#.#1.115.167':445
'20#.#1.196.248':445
'20#.#1.66.83':445
'20#.#1.130.208':445
'20#.81.0.31':445
'20#.#1.227.169':445
'20#.#1.89.168':445
'20#.#1.74.170':445
'20#.#1.151.133':445
'20#.#1.204.205':445
'20#.#1.132.233':445
'20#.#1.68.65':445
'20#.#1.233.68':445
'20#.#1.235.70':139
'20#.#1.219.231':139
'20#.#1.19.189':139
'20#.#1.195.130':139
'20#.#1.103.195':139
'20#.#1.65.52':445
'20#.#1.150.84':445
'20#.#1.27.39':445
'20#.#1.79.53':445
'20#.#1.84.85':445
'20#.#1.255.220':445
'20#.#1.236.79':445
'20#.#1.50.202':445
'20#.81.3.47':445
'20#.#1.55.87':445
'20#.#1.33.74':445
'20#.#1.222.196':139
'20#.#1.127.215':139
'20#.#1.22.230':139
'20#.#1.220.237':139
'20#.#1.68.68':139
'20#.#1.41.68':139
'20#.#1.111.12':139
'20#.#1.165.195':139
'20#.#1.107.212':139
'20#.#1.206.236':139
'20#.#1.100.134':139
'20#.#1.234.98':139
'20#.#1.190.154':139
'20#.#1.226.13':139
'20#.#1.154.171':139
'20#.#1.160.56':139
'20#.#1.171.115':139
'20#.#1.49.110':139
'20#.#1.224.224':139
'20#.#1.220.42':139
'20#.#1.136.143':139
'20#.#1.239.136':139
'20#.#1.94.137':139
'20#.#1.110.166':139
'20#.#1.202.231':139
'20#.#1.77.26':139
'20#.#1.25.57':139
'20#.#1.84.85':139
'20#.#1.255.220':139
'20#.#1.29.117':139
'20#.#1.193.9':139
'20#.#1.2.236':139
'20#.#1.27.53':445
'20#.#1.144.78':445
'20#.#1.100.212':445
'20#.#1.108.73':445
'20#.#1.216.223':445
'20#.81.4.40':445
'20#.#1.138.174':445
'20#.#1.52.184':445
'20#.#1.75.234':445
'20#.81.7.87':445
'20#.#1.66.158':445
'20#.#1.79.53':139
'20#.#1.25.57':445
'20#.#1.202.231':445
'20#.#1.77.26':445
'20#.#1.151.133':139
'20#.#1.204.205':139
'20#.#1.2.236':445
'20#.#1.29.117':445
'20#.#1.193.9':445
'20#.#1.94.137':445
'20#.#1.110.166':445
'20#.#1.132.233':139
'20#.#1.33.74':139
'20#.81.3.47':139
'20#.#1.55.87':139
'20#.#1.150.84':139
'20#.#1.27.39':139
'20#.#1.68.65':139
'20#.#1.233.68':139
'20#.#1.65.52':139
'20#.#1.236.79':139
'20#.#1.50.202':139
'20#.#1.66.83':139
'20#.#1.59.183':445
'20#.#1.94.170':445
'20#.#1.201.156':445
'20#.#1.170.47':445
'20#.#1.63.17':445
'20#.#1.96.96':445
'20#.#1.250.95':445
'20#.#1.222.152':445
'20#.#1.0.226':445
'20#.#1.43.155':445
'20#.#1.156.170':445
'20#.#1.200.144':139
'20#.#1.96.88':139
'20#.#1.142.89':139
'20#.#1.153.23':139
'20#.#1.207.151':139
'20#.#1.54.72':445
'20#.#1.47.215':445
'20#.#1.223.129':139
'20#.#1.51.234':139
'20#.#1.38.177':139
'20#.#1.162.185':445
'20#.#1.253.46':445
'20#.#1.34.163':445
'20#.#1.188.7':445
'20#.#1.85.121':445
'20#.#1.51.142':445
'20#.#1.72.110':445
'20#.#1.109.72':445
'20#.#1.71.41':445
'20#.#1.171.79':445
'20#.#1.18.57':445
'20#.#1.33.133':445
'20#.#1.172.91':445
'20#.#1.89.15':445
'20#.#1.90.92':445
'20#.#1.29.101':445
'20#.#1.196.89':445
'20#.#1.170.184':445
'20#.#1.132.170':445
'20#.#1.185.44':445
'20#.#1.149.253':445
'20#.#1.118.72':445
'20#.#1.29.101':139
'20#.#1.196.89':139
'20#.#1.162.185':139
'20#.#1.96.96':139
'20#.#1.250.95':139
'20#.#1.149.253':139
'20#.#1.118.72':139
'20#.#1.89.15':139
'20#.#1.90.92':139
'20#.#1.172.91':139
'20#.#1.222.152':139
'20#.#1.54.72':139
'20#.#1.47.215':139
'20#.#1.201.156':139
'20#.#1.170.47':139
'20#.#1.156.170':139
'20#.#1.0.226':139
'20#.#1.43.155':139
'20#.#1.94.170':139
'20#.#1.63.17':139
'20#.#1.59.183':139
'20#.#1.185.44':139
'20#.#1.164.87':139
'20#.#1.179.235':139
'20#.#1.87.109':139
'20#.#1.72.110':139
'20#.#1.109.72':139
'20#.#1.117.246':139
'20#.#1.171.98':139
'20#.#1.247.253':139
'20#.#1.133.230':139
'20#.#1.254.128':139
'20#.#1.71.41':139
'20#.#1.85.121':139
'20#.#1.51.142':139
'20#.#1.33.133':139
'20#.#1.170.184':139
'20#.#1.132.170':139
'20#.#1.171.79':139
'20#.#1.18.57':139
'20#.#1.34.163':139
'20#.#1.188.7':139
'20#.#1.253.46':139
'20#.#1.106.244':445
'20#.#1.210.166':445
'20#.#1.140.214':445
'20#.#1.126.82':139
'20#.#1.200.86':445
'20#.#1.176.156':445
'20#.#1.0.209':445
'20#.#1.55.176':445
'20#.#1.192.5':445
'20#.#1.17.167':445
'20#.#1.246.54':139
'20#.#1.178.250':139
'20#.#1.159.111':139
'20#.#1.37.56':139
'20#.#1.64.107':139
'20#.#1.129.72':139
'20#.#1.15.169':139
'20#.#1.84.26':139
'20#.#1.239.204':139
'20#.#1.229.67':139
'20#.#1.76.20':139
'20#.#1.51.209':445
'20#.#1.84.26':445
'20#.#1.246.54':445
'20#.#1.15.169':445
'20#.#1.76.20':445
'20#.#1.239.204':445
'20#.#1.168.108':139
'20#.#1.196.248':139
'20#.#1.87.12':139
'20#.#1.126.82':445
'20#.81.15.3':139
'20#.#1.229.67':445
'20#.#1.20.218':445
'20#.#1.26.138':445
'20#.#1.41.237':445
'20#.#1.61.52':445
'20#.#1.235.198':445
'20#.#1.178.250':445
'20#.#1.159.111':445
'20#.#1.37.56':445
'20#.#1.64.107':445
'20#.#1.129.72':445
'20#.#1.38.177':445
'20#.#1.223.129':445
'20#.#1.51.234':445
'20#.#1.200.144':445
'20#.#1.96.88':445
'20#.#1.96.96':9988
'20#.#1.162.185':9988
'20#.#1.222.152':9988
'20#.#1.63.17':9988
'20#.#1.43.155':9988
'20#.#1.142.89':445
'20#.#1.133.230':445
'20#.#1.254.128':445
'20#.#1.179.235':445
'20#.#1.87.109':445
'20#.#1.164.87':445
'20#.#1.153.23':445
'20#.#1.207.151':445
'20#.#1.171.98':445
'20#.#1.247.253':445
'20#.#1.117.246':445
'20#.#1.29.101':9988
'20#.#1.0.209':139
'20#.#1.51.209':139
'20#.#1.176.156':139
'20#.#1.17.167':139
'20#.#1.55.176':139
'20#.#1.20.218':139
'20#.#1.26.138':139
'20#.#1.41.237':139
'20#.#1.61.52':139
'20#.#1.235.198':139
'20#.#1.192.5':139
'20#.#1.149.253':9988
'20#.#1.118.72':9988
'20#.#1.89.15':9988
'20#.#1.196.89':9988
'20#.#1.90.92':9988
'20#.#1.106.244':139
'20#.#1.210.166':139
'20#.#1.140.214':139
'20#.#1.185.44':9988
'20#.#1.200.86':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней