Trojan.DownLoader12.28908

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER5574.dir00\svchost.exe.mdmp 16325836412030808

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##0.43.165':139
'65.##0.221.91':139
'65.#50.29.9':139
'65.##0.127.124':139
'65.##0.46.235':445
'65.##0.5.251':445
'65.##0.155.84':445
'65.##0.91.245':445
'65.##0.125.140':445
'65.##0.246.214':139
'65.##0.74.165':139
'65.##0.242.64':139
'65.##0.238.164':139
'65.##0.126.188':139
'65.##0.58.79':139
'65.##0.104.100':139
'65.##0.26.44':139
'65.##0.211.0':139
'65.##0.140.167':139
'65.##0.58.190':445
'65.##0.232.194':445
'65.##0.69.245':445
'65.##0.88.59':445
'65.##0.13.148':445
'65.##0.65.219':445
'65.##0.29.66':445
'65.##0.177.88':445
'65.##0.218.177':445
'65.##0.67.192':445
'65.##0.247.115':445
'65.##0.175.60':445
'65.##0.129.207':445
'65.##0.116.129':445
'65.##0.157.167':445
'65.##0.24.130':445
'65.##0.192.1':445
'65.##0.193.246':445
'65.##0.68.177':445
'65.##0.233.190':139
'65.##0.175.60':139
'65.##0.157.167':139
'65.##0.116.129':139
'65.##0.247.115':139
'65.##0.193.246':139
'65.##0.192.1':139
'65.##0.67.192':139
'65.##0.68.177':139
'65.##0.24.130':139
'65.##0.129.207':139
'65.##0.228.90':445
'65.##0.152.5':445
'65.##0.228.90':139
'65.##0.152.5':139
'65.##0.46.235':139
'65.##0.5.251':139
'65.##0.155.84':139
'65.##0.91.245':139
'65.##0.125.140':139
'65.##0.91.91':139
'65.##0.1.176':139
'65.##0.108.228':139
'65.##0.92.36':139
'65.##0.82.49':139
'65.##0.81.81':139
'65.##0.115.81':139
'65.##0.178.96':139
'65.##0.81.178':139
'65.#50.9.29':139
'65.##0.58.190':139
'65.##0.232.194':139
'65.##0.69.245':139
'65.##0.88.59':139
'65.##0.13.148':139
'65.##0.65.219':139
'65.##0.29.66':139
'65.##0.177.88':139
'65.##0.218.177':139
'65.#50.9.29':445
'65.##0.75.38':139
'65.##0.25.75':139
'65.##0.170.226':139
'65.##0.29.138':139
'65.##0.189.25':139
'65.##0.231.4':139
'65.##0.63.182':139
'65.##0.73.189':139
'65.#50.0.5':139
'65.##0.123.213':139
'65.##0.116.35':139
'65.##0.31.248':139
'65.##0.157.159':139
'65.##0.35.71':139
'65.##0.110.171':139
'65.##0.177.97':139
'65.##0.70.70':139
'65.##0.115.128':139
'65.##0.17.54':139
'65.##0.68.113':139
'65.##0.12.55':139
'65.##0.230.209':139
'65.##0.62.231':139
'65.##0.27.157':139
'65.##0.39.95':139
'65.##0.132.180':139
'65.##0.96.10':139
'65.##0.252.39':139
'65.##0.211.49':139
'65.##0.214.7':139
'65.##0.125.51':139
'65.##0.75.80':139
'65.##0.56.18':139
'65.##0.26.75':139
'65.##0.63.36':139
'65.##0.149.175':139
'65.##0.39.131':139
'65.##0.231.183':139
'65.##0.243.206':139
'65.##0.74.165':445
'65.##0.242.64':445
'65.##0.238.164':445
'65.##0.126.188':445
'65.##0.58.79':445
'65.##0.104.100':445
'65.##0.26.44':445
'65.##0.211.0':445
'65.##0.140.167':445
'65.##0.233.190':445
'65.##0.91.91':445
'65.##0.1.176':445
'65.##0.108.228':445
'65.##0.92.36':445
'65.##0.82.49':445
'65.##0.81.81':445
'65.##0.115.81':445
'65.##0.178.96':445
'65.##0.81.178':445
'65.##0.166.192':139
'65.##0.57.142':139
'65.##0.169.133':139
'65.##0.156.104':139
'65.##0.237.186':139
'65.#50.74.1':139
'65.##0.199.73':139
'65.##0.3.198':139
'65.##0.210.181':139
'65.##0.22.135':139
'65.##0.127.124':445
'65.##0.43.165':445
'65.##0.246.214':445
'65.#50.29.9':445
'65.##0.221.91':445
'65.##0.130.72':445
'65.##0.179.121':445
'65.##0.130.72':139
'65.##0.179.121':139
'65.##0.105.233':445
'65.##0.242.79':445
'65.##0.94.156':139
'65.##0.221.205':139
'65.##0.233.48':445
'65.##0.218.72':445
'65.##0.14.217':445
'65.##0.25.219':445
'65.##0.115.233':445
'65.##0.82.251':139
'65.##0.52.251':139
'65.##0.42.40':139
'65.##0.6.191':139
'65.##0.4.103':139
'65.##0.230.41':139
'65.##0.29.161':139
'65.##0.94.168':139
'65.##0.69.242':139
'65.##0.59.89':139
'65.##0.246.184':445
'65.##0.124.246':445
'65.##0.119.118':445
'65.##0.151.181':445
'65.##0.93.183':445
'65.##0.46.241':445
'65.##0.142.246':445
'65.##0.83.166':445
'65.##0.38.190':445
'65.##0.112.229':445
'65.##0.149.234':445
'65.##0.64.17':445
'65.##0.154.169':445
'65.##0.116.155':445
'65.##0.22.168':445
'65.##0.186.143':445
'65.##0.113.186':445
'65.##0.13.129':445
'65.##0.143.200':445
'65.##0.104.217':139
'65.##0.13.129':139
'65.##0.143.200':139
'65.##0.64.17':139
'65.##0.22.168':139
'65.##0.186.143':139
'65.##0.119.118':139
'65.##0.151.181':139
'65.##0.113.186':139
'65.##0.112.229':139
'65.##0.149.234':139
'65.##0.105.233':139
'65.##0.25.219':139
'65.##0.233.48':139
'65.##0.242.79':139
'65.##0.115.233':139
'65.##0.154.169':139
'65.##0.116.155':139
'65.##0.218.72':139
'65.##0.14.217':139
'65.##0.146.202':139
'65.##0.147.126':139
'65.##0.24.245':139
'65.##0.22.67':139
'65.##0.142.131':139
'65.##0.59.50':139
'65.##0.217.79':139
'65.##0.24.143':139
'65.##0.211.208':139
'65.##0.11.146':139
'65.##0.93.183':139
'65.##0.83.166':139
'65.##0.246.184':139
'65.##0.124.246':139
'65.##0.38.190':139
'65.##0.85.215':139
'65.##0.30.85':139
'65.##0.46.241':139
'65.##0.142.246':139
'65.##0.85.215':445
'65.##0.81.143':139
'65.##0.167.117':139
'65.##0.110.143':139
'65.##0.99.23':139
'65.##0.54.125':139
'65.##0.34.153':139
'65.##0.79.103':139
'65.##0.155.123':139
'65.##0.68.182':139
'65.##0.194.240':139
'65.##0.143.56':139
'65.##0.12.215':139
'65.##0.236.146':139
'65.##0.168.148':139
'65.##0.38.169':139
'65.##0.10.209':139
'65.##0.241.10':139
'65.##0.46.210':139
'65.##0.14.97':139
'65.##0.81.143':445
'65.##0.167.117':445
'65.##0.110.143':445
'65.##0.99.23':445
'65.##0.54.125':445
'65.##0.34.153':445
'65.##0.79.103':445
'65.##0.155.123':445
'65.##0.68.182':445
'65.##0.194.240':445
'65.##0.143.56':445
'65.##0.12.215':445
'65.##0.236.146':445
'65.##0.168.148':445
'65.##0.38.169':445
'65.##0.10.209':445
'65.##0.241.10':445
'65.##0.46.210':445
'65.##0.14.97':445
'65.##0.64.17':9988
'65.##0.6.191':445
'65.##0.4.103':445
'65.##0.217.79':445
'65.##0.104.217':445
'65.##0.52.251':445
'65.##0.69.242':445
'65.##0.59.89':445
'65.##0.42.40':445
'65.##0.230.41':445
'65.##0.59.50':445
'65.##0.24.245':445
'65.##0.22.67':445
'65.##0.30.85':445
'65.##0.11.146':445
'65.##0.146.202':445
'65.##0.24.143':445
'65.##0.211.208':445
'65.##0.147.126':445
'65.##0.142.131':445
'65.##0.116.155':9988
'65.##0.233.48':9988
'65.##0.113.186':9988
'65.##0.149.234':9988
'65.##0.151.181':9988
'65.##0.112.229':9988
'65.##0.14.217':9988
'65.##0.25.219':9988
'65.##0.186.143':9988
'65.##0.119.118':9988
'65.##0.82.251':445
'65.##0.94.156':445
'65.##0.29.161':445
'65.##0.94.168':445
'65.##0.221.205':445
'65.##0.242.79':9988
'65.##0.22.168':9988
'65.##0.13.129':9988
'65.##0.246.184':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней