Trojan.DownLoader12.28874

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER20c5.dir00\svchost.exe.mdmp 16325836412032352

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#2.249.174':139
'19#.#2.40.252':139
'19#.#2.117.194':139
'19#.#2.194.33':139
'19#.#2.213.177':139
'19#.#2.155.152':139
'19#.42.79.7':139
'19#.#2.125.179':139
'19#.#2.149.7':139
'19#.#2.183.78':139
'19#.42.5.76':139
'19#.#2.11.78':445
'19#.#2.134.116':445
'19#.#2.242.5':445
'19#.#2.238.93':445
'19#.42.6.1':445
'19#.#2.231.190':139
'19#.#2.128.36':139
'19#.42.7.5':445
'19#.#2.136.124':445
'19#.#2.20.32':445
'19#.#2.125.179':445
'19#.#2.155.152':445
'19#.#2.183.78':445
'19#.#2.40.252':445
'19#.#2.149.7':445
'19#.#2.73.44':445
'19#.#2.189.72':445
'19#.#2.120.208':445
'19#.42.79.7':445
'19#.#2.65.35':445
'19#.#2.249.174':445
'19#.#2.189.72':139
'19#.#2.231.190':445
'19#.#2.73.44':139
'19#.#2.65.35':139
'19#.#2.120.208':139
'19#.#2.213.177':445
'19#.#2.117.194':445
'19#.#2.194.33':445
'19#.#2.128.36':445
'19#.42.5.76':445
'19#.#2.56.158':445
'19#.#2.136.124':139
'19#.#2.20.32':139
'19#.#2.134.116':139
'19#.#2.242.5':139
'19#.#2.11.78':139
'19#.#2.210.209':445
'19#.#2.45.150':445
'19#.#2.209.4':445
'19#.42.7.5':139
'19#.#2.74.171':445
'19#.42.6.1':139
'19#.#2.107.141':139
'19#.#2.143.94':139
'19#.#2.78.76':139
'19#.#2.92.32':139
'19#.#2.112.142':139
'19#.#2.56.158':139
'19#.#2.238.93':139
'19#.#2.16.196':139
'19#.#2.121.112':139
'19#.#2.186.178':139
'19#.#2.112.142':445
'19#.#2.78.76':445
'19#.#2.92.32':445
'19#.#2.129.195':445
'19#.#2.61.19':445
'19#.#2.186.178':445
'19#.#2.16.196':445
'19#.#2.121.112':445
'19#.#2.107.141':445
'19#.#2.143.94':445
'19#.#2.130.134':445
'19#.#2.119.0':445
'19#.42.11.2':445
'19#.#2.72.38':445
'19#.#2.94.101':445
'19#.#2.85.22':445
'19#.42.80.2':445
'19#.#2.134.156':445
'19#.#2.78.244':445
'19#.42.22.4':445
'19#.#2.3.131':445
'19#.#2.110.43':445
'19#.#2.135.149':445
'19#.#2.6.210':445
'19#.#2.27.157':445
'19#.#2.13.100':445
'19#.#2.93.45':445
'19#.#2.215.32':445
'19#.#2.129.182':445
'19#.#2.131.207':445
'19#.#2.182.149':445
'19#.#2.197.63':445
'19#.#2.99.167':445
'19#.#2.127.41':445
'19#.#2.142.243':445
'19#.#2.58.211':445
'19#.#2.127.59':445
'19#.#2.109.164':445
'19#.#2.86.225':445
'19#.#2.183.193':445
'19#.#2.197.238':445
'19#.#2.186.7':445
'19#.#2.198.24':139
'19#.#2.102.2':139
'19#.#2.64.29':139
'19#.#2.1.176':139
'19#.#2.55.36':139
'19#.#2.69.128':139
'19#.#2.149.69':139
'19#.#2.127.129':139
'19#.42.6.70':139
'19#.#2.39.22':139
'19#.#2.110.129':139
'19#.#2.92.169':445
'19#.#2.95.232':139
'19#.#2.169.172':445
'19#.#2.1.149':445
'19#.#2.172.190':445
'19#.#2.9.178':139
'19#.#2.142.89':139
'19#.#2.74.140':139
'19#.#2.151.178':139
'19#.#2.191.151':139
'19#.#2.246.244':445
'19#.#2.197.238':139
'19#.#2.186.7':139
'19#.#2.127.41':139
'19#.#2.142.243':139
'19#.#2.99.167':139
'19#.#2.197.63':139
'19#.#2.27.157':139
'19#.#2.86.225':139
'19#.#2.183.193':139
'19#.#2.109.164':139
'19#.#2.127.59':139
'19#.#2.78.125':139
'19#.#2.46.79':139
'19#.#2.131.13':139
'19#.#2.200.188':139
'19#.#2.226.226':139
'19#.#2.246.244':139
'19#.#2.58.211':139
'19#.#2.78.96':139
'19#.#2.81.227':139
'19#.#2.70.96':139
'19#.#2.226.226':445
'19#.#2.131.13':445
'19#.#2.200.188':445
'19#.#2.169.172':139
'19#.#2.92.169':139
'19#.#2.70.96':445
'19#.#2.78.96':445
'19#.#2.81.227':445
'19#.#2.78.125':445
'19#.#2.46.79':445
'19#.#2.172.190':139
'19#.#2.135.149':139
'19#.#2.131.207':139
'19#.#2.110.43':139
'19#.#2.13.100':139
'19#.#2.6.210':139
'19#.#2.215.32':139
'19#.#2.1.149':139
'19#.#2.93.45':139
'19#.#2.182.149':139
'19#.#2.129.182':139
'19#.#2.161.152':445
'19#.#2.131.161':445
'19#.#2.74.71':445
'19#.#2.130.94':445
'19#.#2.227.88':445
'19#.#2.23.164':445
'19#.#2.181.219':445
'19#.#2.200.73':445
'19#.#2.226.237':445
'19#.#2.140.142':445
'19#.#2.134.26':445
'19#.#2.77.210':139
'19#.#2.4.150':139
'19#.#2.207.83':139
'19#.#2.13.111':139
'19#.#2.62.109':139
'19#.#2.190.151':445
'19#.#2.159.232':445
'19#.#2.249.63':139
'19#.#2.14.167':139
'19#.#2.141.50':139
'19#.#2.128.178':445
'19#.#2.170.126':445
'19#.#2.44.98':445
'19#.#2.218.165':445
'19#.#2.97.185':445
'19#.#2.49.61':445
'19#.#2.122.36':445
'19#.42.6.80':445
'19#.#2.64.170':445
'19#.#2.137.64':445
'19#.#2.216.253':445
'19#.#2.232.2':445
'19#.#2.81.231':445
'19#.42.3.91':445
'19#.#2.239.69':445
'19#.#2.118.73':445
'19#.#2.58.238':445
'19#.#2.98.99':445
'19#.#2.74.167':445
'19#.#2.34.82':445
'19#.#2.48.35':445
'19#.#2.106.146':139
'19#.#2.118.73':139
'19#.42.3.91':139
'19#.#2.239.69':139
'19#.#2.23.164':139
'19#.#2.181.219':139
'19#.#2.48.35':139
'19#.#2.74.167':139
'19#.#2.34.82':139
'19#.#2.232.2':139
'19#.#2.81.231':139
'19#.#2.200.73':139
'19#.#2.130.94':139
'19#.#2.227.88':139
'19#.#2.134.26':139
'19#.#2.190.151':139
'19#.#2.159.232':139
'19#.#2.226.237':139
'19#.#2.140.142':139
'19#.#2.131.161':139
'19#.#2.74.71':139
'19#.#2.161.152':139
'19#.#2.30.158':139
'19#.#2.36.30':139
'19#.#2.74.86':139
'19#.#2.49.61':139
'19#.#2.122.36':139
'19#.#2.46.236':139
'19#.#2.205.46':139
'19#.#2.235.174':139
'19#.42.4.0':139
'19#.#2.175.66':139
'19#.42.6.80':139
'19#.#2.218.165':139
'19#.#2.97.185':139
'19#.#2.216.253':139
'19#.#2.58.238':139
'19#.#2.98.99':139
'19#.#2.64.170':139
'19#.#2.137.64':139
'19#.#2.170.126':139
'19#.#2.44.98':139
'19#.#2.128.178':139
'19#.#2.177.134':445
'19#.#2.61.177':445
'19#.#2.161.16':445
'19#.#2.172.201':445
'19#.#2.66.213':445
'19#.#2.241.162':445
'19#.#2.90.242':445
'19#.42.79.2':445
'19#.#2.141.94':445
'19#.#2.121.251':445
'19#.#2.1.197':445
'19#.#2.90.242':139
'19#.#2.253.175':139
'19#.#2.241.162':139
'19#.#2.121.251':139
'19#.42.79.2':139
'19#.#2.9.249':445
'19#.#2.230.93':445
'19#.#2.141.109':139
'19#.42.3.35':139
'19#.#2.35.202':139
'19#.#2.3.131':139
'19#.#2.78.244':139
'19#.42.22.4':139
'19#.#2.119.0':139
'19#.42.11.2':139
'19#.#2.129.195':139
'19#.#2.61.19':139
'19#.#2.130.134':139
'19#.42.80.2':139
'19#.#2.134.156':139
'19#.#2.72.38':139
'19#.#2.141.109':445
'19#.#2.74.171':139
'19#.#2.35.202':445
'19#.#2.253.175':445
'19#.42.3.35':445
'19#.#2.94.101':139
'19#.#2.85.22':139
'19#.#2.45.150':139
'19#.#2.209.4':139
'19#.#2.210.209':139
'19#.#2.141.94':139
'19#.#2.14.167':445
'19#.#2.141.50':445
'19#.#2.4.150':445
'19#.#2.207.83':445
'19#.#2.77.210':445
'19#.#2.190.151':9988
'19#.#2.227.88':9988
'19#.#2.159.232':9988
'19#.#2.249.63':445
'19#.#2.130.94':9988
'19#.#2.62.109':445
'19#.42.4.0':445
'19#.#2.175.66':445
'19#.#2.36.30':445
'19#.#2.74.86':445
'19#.#2.30.158':445
'19#.#2.106.146':445
'19#.#2.13.111':445
'19#.#2.205.46':445
'19#.#2.235.174':445
'19#.#2.46.236':445
'19#.#2.230.93':139
'19#.#2.1.197':139
'19#.#2.9.249':139
'19#.#2.44.98':9988
'19#.#2.81.231':9988
'19#.#2.177.134':139
'19#.#2.61.177':139
'19#.#2.161.16':139
'19#.#2.172.201':139
'19#.#2.66.213':139
'19#.#2.58.238':9988
'19#.#2.226.237':9988
'19#.#2.181.219':9988
'19#.#2.161.152':9988
'19#.#2.74.71':9988
'19#.#2.131.161':9988
'19#.#2.74.167':9988
'19#.#2.97.185':9988
'19#.#2.128.178':9988
'19#.#2.239.69':9988
'19#.#2.118.73':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней