Trojan.DownLoader12.28876

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER363e.dir00\svchost.exe.mdmp 16325836412032084

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER363e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'14#.#33.182.13':139
'14#.#33.10.182':139
'14#.#33.82.204':139
'14#.#33.39.1':139
'14#.#33.29.75':139
'14#.#33.8.253':139
'14#.#33.15.239':139
'14#.#33.134.2':139
'14#.#33.230.77':139
'14#.#33.129.45':139
'14#.#33.229.46':139
'14#.#33.165.145':139
'14#.#33.226.165':139
'14#.#33.154.34':139
'14#.#33.26.89':139
'14#.#33.161.250':139
'14#.133.5.1':139
'14#.#33.31.184':139
'14#.#33.153.221':139
'14#.#33.46.186':139
'14#.#33.29.167':139
'14#.#33.158.88':139
'14#.#33.161.250':445
'14#.#33.154.34':445
'14#.#33.26.89':445
'14#.#33.10.59':445
'14#.#33.2.235':445
'14#.#33.29.167':445
'14#.#33.153.221':445
'14#.#33.46.186':445
'14#.#33.165.145':445
'14#.#33.226.165':445
'14#.#33.255.239':445
'14#.#33.184.232':139
'14#.#33.65.72':139
'14#.#33.188.165':139
'14#.#33.132.220':139
'14#.#33.172.173':139
'14#.#33.255.212':445
'14#.#33.240.38':445
'14#.#33.49.37':445
'14#.#33.170.58':139
'14#.#33.37.200':445
'14#.#33.2.235':139
'14#.#33.114.152':139
'14#.#33.183.42':139
'14#.#33.35.62':139
'14#.#33.156.216':139
'14#.#33.62.211':139
'14#.#33.255.234':139
'14#.#33.199.142':139
'14#.#33.74.187':139
'14#.#33.181.254':139
'14#.#33.42.186':139
'14#.#33.68.19':139
'14#.#33.239.80':445
'14#.#33.50.239':445
'14#.#33.138.197':445
'14#.#33.13.93':445
'14#.#33.52.39':445
'14#.#33.88.61':139
'14#.#33.101.47':139
'14#.#33.243.139':139
'14#.#33.145.102':139
'14#.#33.236.137':139
'14#.#33.145.102':445
'14#.#33.199.142':445
'14#.#33.37.200':139
'14#.#33.255.234':445
'14#.#33.42.186':445
'14#.#33.74.187':445
'14#.#33.255.239':139
'14#.#33.10.59':139
'14#.#33.240.38':139
'14#.#33.49.37':139
'14#.#33.255.212':139
'14#.#33.181.254':445
'14#.#33.101.47':445
'14#.#33.68.19':445
'14#.#33.88.61':445
'14#.#33.236.137':445
'14#.#33.243.139':445
'14#.#33.114.152':445
'14#.#33.183.42':445
'14#.#33.35.62':445
'14#.#33.156.216':445
'14#.#33.62.211':445
'14#.#33.139.117':139
'14#.#33.133.139':139
'14#.#33.206.112':139
'14#.#33.129.74':139
'14#.#33.183.190':139
'14#.#33.39.246':139
'14#.#33.248.250':139
'14#.#33.215.108':139
'14#.#33.119.226':139
'14#.#33.4.153':139
'14#.#33.30.196':139
'14#.#33.197.230':445
'14#.#33.78.204':445
'14#.#33.55.182':445
'14#.#33.204.185':445
'14#.#33.137.146':445
'14#.#33.80.190':139
'14#.#33.252.60':139
'14#.#33.24.135':445
'14#.#33.63.149':445
'14#.#33.151.134':445
'14#.#33.34.214':139
'14#.#33.78.200':139
'14#.#33.76.80':139
'14#.#33.251.225':139
'14#.#33.124.133':139
'14#.#33.188.203':139
'14#.#33.34.92':139
'14#.#33.29.242':139
'14#.#33.151.119':139
'14#.#33.139.69':139
'14#.#33.5.36':139
'14#.#33.134.10':139
'14#.#33.43.15':139
'14#.#33.36.43':139
'14#.#33.14.173':139
'14#.#33.119.208':139
'14#.#33.31.62':139
'14#.#33.90.99':139
'14#.#33.54.245':139
'14#.#33.80.174':139
'14#.#33.105.104':139
'14#.#33.76.30':139
'14#.#33.196.68':445
'14#.#33.132.220':445
'14#.#33.172.173':445
'14#.#33.158.88':445
'14#.#33.8.253':445
'14#.#33.15.239':445
'14#.#33.170.58':445
'14#.#33.56.170':139
'14#.#33.65.72':445
'14#.#33.188.165':445
'14#.#33.184.232':445
'14#.#33.134.2':445
'14#.#33.39.1':445
'14#.#33.29.75':445
'14#.#33.229.46':445
'14#.133.5.1':445
'14#.#33.31.184':445
'14#.#33.230.77':445
'14#.#33.129.45':445
'14#.#33.10.182':445
'14#.#33.82.204':445
'14#.#33.182.13':445
'14#.#33.103.56':139
'14#.#33.56.170':445
'14#.#33.103.56':445
'14#.#33.24.135':139
'14#.#33.63.149':139
'14#.#33.151.134':139
'14#.#33.169.199':445
'14#.#33.172.111':445
'14#.#33.4.208':445
'14#.#33.158.102':445
'14#.#33.139.158':445
'14#.#33.78.204':139
'14#.#33.169.199':139
'14#.#33.172.111':139
'14#.#33.4.208':139
'14#.#33.158.102':139
'14#.#33.139.158':139
'14#.#33.55.182':139
'14#.#33.197.230':139
'14#.#33.137.146':139
'14#.#33.196.68':139
'14#.#33.204.185':139
'14#.#33.56.193':445
'14#.#33.245.18':445
'14#.#33.77.184':445
'14#.#33.68.194':445
'14#.#33.143.171':445
'14#.#33.194.194':445
'14#.#33.71.246':445
'14#.#33.108.176':445
'14#.#33.47.46':445
'14#.#33.17.80':445
'14#.#33.201.17':445
'14#.#33.81.29':445
'14#.#33.205.231':139
'14#.#33.56.183':139
'14#.#33.140.208':139
'14#.#33.28.191':139
'14#.#33.216.110':139
'14#.#33.89.96':445
'14#.#33.194.153':445
'14#.#33.86.249':445
'14#.#33.116.38':139
'14#.#33.224.116':139
'14#.#33.139.60':445
'14#.#33.132.49':445
'14#.#33.138.119':445
'14#.133.0.1':445
'14#.#33.40.150':445
'14#.#33.58.225':445
'14#.#33.81.68':445
'14#.#33.181.99':445
'14#.#33.45.44':445
'14#.#33.180.138':445
'14#.#33.59.213':445
'14#.#33.43.161':445
'14#.#33.13.181':445
'14#.#33.16.28':445
'14#.#33.0.54':445
'14#.#33.29.87':445
'14#.#33.53.130':445
'14#.#33.188.75':445
'14#.#33.160.187':445
'14#.#33.46.171':445
'14#.#33.64.61':445
'14#.#33.61.64':445
'14#.#33.31.178':139
'14#.#33.139.60':139
'14#.#33.29.87':139
'14#.#33.108.176':139
'14#.#33.47.46':139
'14#.#33.71.246':139
'14#.#33.16.28':139
'14#.#33.64.61':139
'14#.#33.13.181':139
'14#.#33.53.130':139
'14#.#33.0.54':139
'14#.#33.201.17':139
'14#.#33.89.96':139
'14#.#33.194.153':139
'14#.#33.81.29':139
'14#.#33.143.171':139
'14#.#33.86.249':139
'14#.#33.77.184':139
'14#.#33.17.80':139
'14#.#33.245.18':139
'14#.#33.194.194':139
'14#.#33.68.194':139
'14#.#33.61.64':139
'14#.#33.13.40':139
'14#.#33.175.98':139
'14#.#33.181.99':139
'14#.#33.45.44':139
'14#.#33.81.68':139
'14#.#33.120.48':139
'14#.#33.158.120':139
'14#.#33.36.8':139
'14#.#33.124.91':139
'14#.#33.15.146':139
'14#.#33.59.213':139
'14#.#33.43.161':139
'14#.#33.40.150':139
'14#.#33.160.187':139
'14#.#33.46.171':139
'14#.#33.188.75':139
'14#.#33.138.119':139
'14#.#33.180.138':139
'14#.#33.132.49':139
'14#.#33.58.225':139
'14#.133.0.1':139
'14#.#33.12.218':445
'14#.#33.237.108':445
'14#.#33.50.239':139
'14#.#33.138.197':139
'14#.#33.239.80':139
'14#.#33.53.104':445
'14#.#33.100.40':445
'14#.#33.138.195':445
'14#.#33.163.130':445
'14#.#33.12.188':445
'14#.#33.52.39':139
'14#.#33.77.44':139
'14#.#33.136.33':139
'14#.#33.189.40':139
'14#.#33.128.209':139
'14#.#33.5.90':139
'14#.#33.56.193':139
'14#.#33.13.93':139
'14#.#33.58.228':139
'14#.#33.93.127':139
'14#.#33.42.148':139
'14#.#33.39.132':445
'14#.#33.5.90':445
'14#.#33.189.40':445
'14#.#33.128.209':445
'14#.#33.50.68':445
'14#.#33.177.44':445
'14#.#33.42.148':445
'14#.#33.58.228':445
'14#.#33.93.127':445
'14#.#33.77.44':445
'14#.#33.136.33':445
'14#.#33.20.163':445
'14#.#33.26.84':445
'14#.#33.129.200':445
'14#.#33.224.68':445
'14#.#33.97.83':445
'14#.#33.107.85':445
'14#.#33.174.101':445
'14#.#33.80.131':445
'14#.#33.101.229':445
'14#.#33.66.87':445
'14#.#33.202.156':445
'14#.#33.177.44':139
'14#.#33.224.116':445
'14#.#33.89.96':9988
'14#.#33.116.38':445
'14#.#33.205.231':445
'14#.#33.56.183':445
'14#.#33.16.28':9988
'14#.#33.46.171':9988
'14#.#33.13.181':9988
'14#.#33.81.29':9988
'14#.#33.53.130':9988
'14#.#33.140.208':445
'14#.#33.15.146':445
'14#.#33.36.8':445
'14#.#33.124.91':445
'14#.#33.13.40':445
'14#.#33.175.98':445
'14#.#33.28.191':445
'14#.#33.216.110':445
'14#.#33.31.178':445
'14#.#33.120.48':445
'14#.#33.158.120':445
'14#.#33.188.75':9988
'14#.#33.66.87':139
'14#.#33.202.156':139
'14#.#33.129.200':139
'14#.#33.224.68':139
'14#.#33.26.84':139
'14#.#33.20.163':139
'14#.#33.50.68':139
'14#.#33.80.131':139
'14#.#33.101.229':139
'14#.#33.174.101':139
'14#.#33.107.85':139
'14#.#33.163.130':139
'14#.#33.12.188':139
'14#.#33.237.108':139
'14#.#33.40.150':9988
'14#.#33.12.218':139
'14#.#33.39.132':139
'14#.#33.97.83':139
'14#.#33.100.40':139
'14#.#33.138.195':139
'14#.#33.53.104':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней