Trojan.DownLoader12.28919

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERf5e1.dir00\svchost.exe.mdmp 16325836412031916

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERf5e1.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.33.4.54':139
'19#.#3.105.61':139
'19#.#3.43.108':139
'19#.#3.240.23':139
'19#.#3.125.233':139
'19#.#3.177.133':139
'19#.#3.121.132':139
'19#.33.9.66':139
'19#.#3.149.242':139
'19#.#3.2.101':139
'19#.#3.242.249':139
'19#.#3.84.131':139
'19#.#3.93.64':139
'19#.#3.29.105':139
'19#.#3.238.132':139
'19#.#3.27.101':139
'19#.#3.0.151':139
'19#.#3.162.10':139
'19#.#3.129.227':139
'19#.#3.25.202':139
'19#.#3.5.245':139
'19#.#3.112.190':139
'19#.#3.108.213':139
'19#.#3.126.30':139
'19#.#3.83.229':139
'19#.#3.30.32':139
'19#.#3.66.224':139
'19#.#3.182.138':139
'19#.#3.254.94':139
'19#.33.0.94':139
'19#.#3.218.191':445
'19#.#3.198.26':139
'19#.#3.203.248':139
'19#.#3.162.18':139
'19#.#3.46.24':139
'19#.#3.115.222':139
'19#.#3.56.219':139
'19#.#3.103.1':139
'19#.#3.140.61':139
'19#.#3.126.123':139
'19#.#3.252.112':139
'19#.#3.96.73':139
'19#.#3.250.119':139
'19#.#3.10.171':139
'19#.#3.125.252':139
'19#.#3.208.126':139
'19#.#3.95.244':445
'19#.#3.89.143':445
'19#.#3.226.137':445
'19#.#3.126.111':445
'19#.#3.233.139':445
'19#.#3.213.58':445
'19#.#3.90.37':445
'19#.#3.223.48':445
'19#.#3.55.90':445
'19#.#3.113.154':445
'19#.#3.74.179':445
'19#.#3.250.128':445
'19#.#3.246.25':445
'19#.#3.108.133':445
'19#.#3.25.160':445
'19#.#3.221.226':445
'19#.#3.81.151':445
'19#.#3.54.215':445
'19#.#3.109.66':445
'19#.#3.37.200':445
'19#.#3.37.61':445
'19#.#3.143.1':445
'19#.#3.61.142':445
'19#.#3.107.74':445
'19#.#3.157.226':445
'19#.#3.254.68':445
'19#.#3.221.69':445
'19#.#3.91.221':445
'19#.#3.218.191':139
'19#.#3.63.34':139
'19#.#3.220.154':139
'19#.#3.80.161':139
'19#.#3.156.218':139
'19#.#3.175.233':139
'19#.#3.70.143':445
'19#.#3.38.103':445
'19#.#3.114.33':445
'19#.#3.249.210':445
'19#.#3.166.223':445
'19#.#3.103.64':445
'19#.#3.14.71':445
'19#.33.19.1':445
'19#.#3.133.147':445
'19#.#3.0.217':445
'19#.#3.41.216':445
'19#.#3.93.167':445
'19#.#3.156.218':445
'19#.#3.255.196':139
'19#.#3.151.36':139
'19#.#3.251.215':139
'19#.#3.93.94':139
'19#.#3.250.253':139
'19#.#3.24.64':139
'19#.#3.24.116':139
'19#.#3.195.24':139
'19#.#3.116.54':139
'19#.#3.175.188':139
'19#.#3.54.227':139
'19#.#3.204.228':139
'19#.#3.206.18':139
'19#.#3.138.193':139
'19#.33.0.94':445
'19#.#3.162.18':445
'19#.#3.198.26':445
'19#.#3.58.14':139
'19#.#3.52.143':139
'19#.#3.1.204':139
'19#.#3.42.76':139
'19#.#3.28.160':139
'19#.#3.54.82':139
'19#.#3.17.176':139
'19#.#3.101.49':139
'19#.#3.134.69':139
'19#.#3.169.242':139
'19#.#3.95.134':139
'19#.#3.7.170':139
'19#.#3.15.42':139
'19#.#3.221.1':139
'19#.#3.140.171':139
'19#.#3.82.149':139
'19#.#3.229.223':139
'19#.#3.13.25':139
'19#.#3.109.203':139
'19#.#3.187.177':139
'19#.#3.129.115':139
'19#.#3.48.195':139
'19#.#3.155.251':139
'19#.#3.13.180':139
'19#.#3.223.187':139
'19#.#3.113.225':139
'19#.#3.20.248':139
'19#.#3.77.238':139
'19#.#3.248.38':139
'19#.#3.84.131':445
'19#.#3.240.23':445
'19#.#3.25.202':445
'19#.#3.5.245':445
'19#.#3.129.227':445
'19#.#3.125.233':445
'19#.#3.177.133':445
'19#.#3.2.101':445
'19#.#3.105.61':445
'19#.#3.43.108':445
'19#.33.4.54':445
'19#.#3.108.213':445
'19#.#3.220.154':445
'19#.#3.27.101':445
'19#.#3.63.34':445
'19#.#3.175.233':445
'19#.#3.80.161':445
'19#.#3.0.151':445
'19#.#3.162.10':445
'19#.#3.112.190':445
'19#.#3.29.105':445
'19#.#3.238.132':445
'19#.#3.93.64':445
'19#.#3.46.24':445
'19#.#3.66.224':445
'19#.#3.250.119':445
'19#.#3.10.171':445
'19#.#3.96.73':445
'19#.#3.182.138':445
'19#.#3.254.94':445
'19#.#3.203.248':445
'19#.#3.83.229':445
'19#.#3.30.32':445
'19#.#3.126.30':445
'19#.#3.208.126':445
'19#.33.9.66':445
'19#.#3.140.61':445
'19#.#3.121.132':445
'19#.#3.242.249':445
'19#.#3.149.242':445
'19#.#3.126.123':445
'19#.#3.252.112':445
'19#.#3.125.252':445
'19#.#3.56.219':445
'19#.#3.103.1':445
'19#.#3.115.222':445
'19#.#3.71.75':445
'19#.#3.253.71':445
'19#.#3.40.211':445
'19#.#3.74.205':445
'19#.33.15.3':445
'19#.#3.163.98':445
'19#.#3.33.155':445
'19#.#3.254.209':445
'19#.#3.103.5':445
'19#.#3.145.112':445
'19#.#3.216.144':445
'19#.#3.213.71':445
'19#.#3.167.87':139
'19#.#3.236.69':139
'19#.#3.85.57':139
'19#.#3.224.161':139
'19#.#3.198.6':139
'19#.#3.234.223':445
'19#.#3.19.14':445
'19#.#3.213.213':445
'19#.#3.39.109':445
'19#.#3.51.235':445
'19#.#3.24.207':445
'19#.#3.248.33':445
'19#.#3.223.173':445
'19#.#3.20.189':445
'19#.#3.203.194':445
'19#.#3.226.188':445
'19#.#3.80.102':445
'19#.#3.60.47':445
'19#.#3.160.58':445
'19#.#3.95.64':445
'19#.#3.162.157':445
'19#.#3.116.86':445
'19#.#3.34.135':445
'19#.#3.155.92':445
'19#.#3.85.155':445
'19#.#3.111.232':445
'19#.#3.110.252':445
'19#.#3.36.13':445
'19#.#3.16.86':445
'19#.#3.51.176':445
'19#.#3.82.65':445
'19#.33.7.6':445
'19#.#3.254.15':445
'19#.#3.5.254':445
'19#.#3.103.5':139
'19#.#3.33.155':139
'19#.#3.216.144':139
'19#.#3.163.98':139
'19#.#3.145.112':139
'19#.#3.254.209':139
'19#.#3.155.92':139
'19#.#3.85.155':139
'19#.#3.111.232':139
'19#.#3.110.252':139
'19#.#3.36.13':139
'19#.#3.253.71':139
'19#.#3.234.223':139
'19#.#3.24.207':139
'19#.#3.51.235':139
'19#.#3.39.109':139
'19#.#3.213.213':139
'19#.#3.213.71':139
'19#.#3.40.211':139
'19#.#3.71.75':139
'19#.33.15.3':139
'19#.#3.19.14':139
'19#.#3.74.205':139
'19#.#3.95.64':139
'19#.#3.60.47':139
'19#.#3.116.86':139
'19#.#3.80.102':139
'19#.#3.162.157':139
'19#.#3.160.58':139
'19#.#3.127.167':139
'19#.#3.193.230':139
'19#.#3.46.103':139
'19#.#3.51.136':139
'19#.#3.174.202':139
'19#.#3.223.173':139
'19#.33.7.6':139
'19#.#3.51.176':139
'19#.#3.5.254':139
'19#.#3.16.86':139
'19#.#3.254.15':139
'19#.#3.82.65':139
'19#.#3.20.189':139
'19#.#3.248.33':139
'19#.#3.226.188':139
'19#.#3.34.135':139
'19#.#3.203.194':139
'19#.#3.51.136':445
'19#.#3.55.90':139
'19#.#3.90.37':139
'19#.#3.74.179':139
'19#.#3.213.58':139
'19#.#3.113.154':139
'19#.#3.223.48':139
'19#.#3.114.33':139
'19#.#3.38.103':139
'19#.#3.249.210':139
'19#.#3.166.223':139
'19#.#3.103.64':139
'19#.#3.89.143':139
'19#.#3.37.61':139
'19#.#3.109.66':139
'19#.#3.61.142':139
'19#.#3.54.215':139
'19#.#3.143.1':139
'19#.#3.37.200':139
'19#.#3.226.137':139
'19#.#3.95.244':139
'19#.#3.233.139':139
'19#.#3.250.128':139
'19#.#3.126.111':139
'19#.#3.222.251':445
'19#.#3.41.240':445
'19#.#3.182.106':445
'19#.#3.48.236':445
'19#.#3.210.207':445
'19#.#3.239.222':445
'19#.#3.27.24':445
'19#.#3.61.75':445
'19#.#3.94.247':445
'19#.#3.58.42':445
'19#.#3.136.76':445
'19#.#3.157.226':139
'19#.#3.93.167':139
'19#.33.19.1':139
'19#.#3.0.217':139
'19#.#3.14.71':139
'19#.#3.41.216':139
'19#.#3.133.147':139
'19#.#3.254.68':139
'19#.#3.107.74':139
'19#.#3.91.221':139
'19#.#3.70.143':139
'19#.#3.221.69':139
'19#.#3.145.112':9988
'19#.#3.33.155':9988
'19#.#3.216.144':9988
'19#.#3.163.98':9988
'19#.#3.103.5':9988
'19#.#3.36.13':9988
'19#.#3.16.86':9988
'19#.#3.254.15':9988
'19#.#3.111.232':9988
'19#.#3.254.209':9988
'19#.#3.155.92':9988
'19#.#3.51.235':9988
'19#.#3.193.230':445
'19#.#3.224.161':445
'19#.#3.127.167':445
'19#.#3.174.202':445
'19#.#3.46.103':445
'19#.#3.198.6':445
'19#.#3.19.14':9988
'19#.#3.71.75':9988
'19#.#3.236.69':445
'19#.#3.85.57':445
'19#.#3.167.87':445
'19#.#3.94.247':139
'19#.#3.27.24':139
'19#.#3.136.76':139
'19#.#3.41.240':139
'19#.#3.58.42':139
'19#.#3.61.75':139
'19#.#3.246.25':139
'19#.#3.108.133':139
'19#.#3.25.160':139
'19#.#3.221.226':139
'19#.#3.81.151':139
'19#.#3.239.222':139
'19#.#3.248.33':9988
'19#.#3.223.173':9988
'19#.#3.226.188':9988
'19#.33.7.6':9988
'19#.#3.20.189':9988
'19#.#3.80.102':9988
'19#.#3.182.106':139
'19#.#3.222.251':139
'19#.#3.210.207':139
'19#.#3.60.47':9988
'19#.#3.48.236':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней