Trojan.DownLoader12.28917

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER1c90.dir00\svchost.exe.mdmp 16325836412027512

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1c90.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##.129.230':445
'69.##.167.163':445
'69.##.101.119':445
'69.##.116.156':445
'69.##.106.220':445
'69.##.60.200':445
'69.##.203.177':445
'69.##.185.174':445
'69.#5.52.62':445
'69.##.183.20':445
'69.##.39.251':445
'69.##.122.215':445
'69.##.224.219':445
'69.##.213.94':445
'69.##.114.77':445
'69.##.18.203':445
'69.#5.25.37':445
'69.##.29.186':445
'69.##.194.196':445
'69.##.175.219':445
'69.##.80.210':445
'69.##.219.200':445
'69.##.104.68':445
'69.##.112.235':445
'69.##.104.65':445
'69.##.211.37':139
'69.##.118.54':139
'69.##.100.176':139
'69.#5.4.42':139
'69.#5.64.4':139
'69.##.153.117':139
'69.##.146.89':139
'69.##.171.26':445
'69.##.41.159':445
'69.##.191.204':139
'69.##.192.191':139
'69.##.27.187':139
'69.##.41.159':139
'69.##.138.59':445
'69.##.180.117':445
'69.##.194.133':445
'69.##.205.38':445
'69.#5.62.61':445
'69.#5.189.0':445
'69.#5.70.75':445
'69.##.131.175':445
'69.##.171.26':139
'69.##.67.223':445
'69.##.238.77':445
'69.##.218.118':445
'69.##.18.203':139
'69.##.112.235':139
'69.##.104.68':139
'69.##.194.196':139
'69.##.213.94':139
'69.##.114.77':139
'69.##.219.200':139
'69.##.224.219':139
'69.##.116.156':139
'69.##.104.65':139
'69.##.175.219':139
'69.##.80.210':139
'69.##.29.186':139
'69.##.30.122':445
'69.#5.89.30':445
'69.##.51.116':445
'69.#5.17.65':445
'69.##.185.100':445
'69.#5.2.5':445
'69.##.232.162':139
'69.##.201.22':139
'69.#5.25.37':139
'69.##.42.204':445
'69.##.21.210':445
'69.##.249.77':139
'69.##.194.133':139
'69.##.67.223':139
'69.##.238.77':139
'69.#5.189.0':139
'69.##.138.59':139
'69.##.180.117':139
'69.##.249.77':445
'69.##.232.162':445
'69.##.201.22':445
'69.##.218.118':139
'69.#5.70.75':139
'69.##.131.175':139
'69.#5.62.61':139
'69.##.167.163':139
'69.##.101.119':139
'69.##.183.20':139
'69.##.106.220':139
'69.##.60.200':139
'69.##.129.230':139
'69.##.185.174':139
'69.#5.52.62':139
'69.##.205.38':139
'69.##.39.251':139
'69.##.122.215':139
'69.##.203.177':139
'69.##.166.226':445
'69.##.188.238':445
'69.##.72.121':445
'69.##.235.71':445
'69.##.186.43':445
'69.##.12.186':445
'69.##.11.226':445
'69.##.13.206':445
'69.#5.88.46':445
'69.##.30.166':445
'69.#5.47.47':445
'69.#5.84.47':445
'69.##.137.23':445
'69.##.42.243':445
'69.#5.0.141':445
'69.##.24.173':445
'69.##.242.244':445
'69.##.47.193':445
'69.##.242.238':445
'69.##.120.65':445
'69.##.245.168':445
'69.##.243.245':445
'69.##.131.123':445
'69.##.128.85':445
'69.##.225.117':445
'69.#5.62.17':139
'69.#5.85.59':139
'69.#5.58.89':139
'69.#5.64.52':139
'69.##.178.245':139
'69.#5.17.79':139
'69.##.254.54':139
'69.#5.18.55':139
'69.##.246.237':139
'69.##.247.165':139
'69.##.180.247':139
'69.##.150.172':139
'69.##.25.231':445
'69.#5.53.67':445
'69.##.191.155':445
'69.#5.0.207':445
'69.##.162.248':445
'69.##.85.162':445
'69.#5.79.86':445
'69.##.91.211':445
'69.##.82.218':445
'69.##.81.153':445
'69.#5.69.48':445
'69.##.89.161':445
'69.##.208.141':445
'69.##.24.173':139
'69.##.131.123':139
'69.##.128.85':139
'69.##.242.238':139
'69.##.42.243':139
'69.#5.0.141':139
'69.##.243.245':139
'69.##.137.23':139
'69.##.235.71':139
'69.##.225.117':139
'69.##.120.65':139
'69.##.245.168':139
'69.##.47.193':139
'69.##.211.37':445
'69.##.118.54':445
'69.##.100.176':445
'69.#5.4.42':445
'69.#5.64.4':445
'69.##.153.117':445
'69.##.146.89':445
'69.#5.8.147':139
'69.##.242.244':139
'69.##.191.204':445
'69.##.192.191':445
'69.##.27.187':445
'69.#5.0.207':139
'69.#5.69.48':139
'69.##.89.161':139
'69.#5.79.86':139
'69.#5.53.67':139
'69.##.191.155':139
'69.##.81.153':139
'69.##.25.231':139
'69.#5.8.147':445
'69.##.208.141':139
'69.##.91.211':139
'69.##.82.218':139
'69.##.85.162':139
'69.##.188.238':139
'69.##.72.121':139
'69.##.30.166':139
'69.##.186.43':139
'69.##.12.186':139
'69.##.166.226':139
'69.##.13.206':139
'69.#5.88.46':139
'69.##.162.248':139
'69.#5.47.47':139
'69.#5.84.47':139
'69.##.11.226':139
'69.##.125.249':445
'69.##.43.205':445
'69.##.147.163':445
'69.##.135.222':445
'69.##.173.46':445
'69.##.188.39':445
'69.##.252.119':445
'69.##.226.101':445
'69.##.148.207':445
'69.##.90.148':445
'69.##.235.182':445
'69.##.66.199':445
'69.#5.132.7':445
'69.##.229.227':445
'69.##.197.21':445
'69.##.186.82':445
'69.#5.26.33':445
'69.##.173.62':139
'69.##.86.181':445
'69.##.15.141':445
'69.##.73.242':445
'69.#5.77.91':445
'69.##.138.241':445
'69.##.21.155':445
'69.#5.62.80':445
'69.##.11.141':445
'69.#5.252.5':445
'69.##.216.227':445
'69.##.213.183':445
'69.##.139.75':445
'69.#5.3.5':445
'69.##.182.127':445
'69.##.29.124':445
'69.##.211.117':445
'69.#5.21.62':445
'69.##.58.100':445
'69.##.221.57':445
'69.##.240.230':445
'69.##.168.51':445
'69.##.147.143':445
'69.##.44.220':445
'69.#5.249.4':445
'69.##.69.148':445
'69.##.76.136':445
'69.##.143.76':445
'69.##.241.110':445
'69.#5.1.242':445
'69.#5.91.27':445
'69.##.127.248':445
'69.##.18.128':445
'69.##.111.18':445
'69.##.147.163':139
'69.##.135.222':139
'69.##.235.182':139
'69.##.188.39':139
'69.##.252.119':139
'69.##.43.205':139
'69.##.148.207':139
'69.##.90.148':139
'69.##.69.148':139
'69.##.66.199':139
'69.#5.132.7':139
'69.##.226.101':139
'69.##.173.46':139
'69.#5.62.80':139
'69.##.21.155':139
'69.##.73.242':139
'69.#5.26.33':139
'69.##.197.21':139
'69.##.186.82':139
'69.#5.77.91':139
'69.##.138.241':139
'69.##.229.227':139
'69.##.86.181':139
'69.##.15.141':139
'69.##.11.141':139
'69.##.216.227':139
'69.##.213.183':139
'69.##.58.100':139
'69.#5.3.5':139
'69.##.182.127':139
'69.#5.252.5':139
'69.##.211.117':139
'69.#5.21.62':139
'69.#5.93.94':139
'69.##.221.57':139
'69.##.240.230':139
'69.##.29.124':139
'69.##.139.75':139
'69.##.44.220':139
'69.#5.249.4':139
'69.##.127.248':139
'69.##.76.136':139
'69.##.143.76':139
'69.##.147.143':139
'69.#5.1.242':139
'69.##.168.51':139
'69.#5.91.27':139
'69.##.18.128':139
'69.##.111.18':139
'69.##.241.110':139
'69.##.136.120':445
'69.##.75.183':445
'69.#5.51.74':445
'69.##.31.155':445
'69.#5.3.31':445
'69.#5.42.37':445
'69.#5.42.22':445
'69.##.193.69':445
'69.#5.36.78':445
'69.#5.76.77':445
'69.#5.9.127':445
'69.##.67.237':445
'69.#5.83.27':445
'69.##.105.126':445
'69.##.148.218':445
'69.##.137.125':445
'69.##.52.199':445
'69.##.32.112':445
'69.##.126.32':445
'69.##.22.119':445
'69.#5.28.16':445
'69.##.214.193':445
'69.##.175.235':445
'69.##.58.160':445
'69.##.118.182':445
'69.#5.2.5':139
'69.##.30.122':139
'69.#5.89.30':139
'69.#5.17.65':139
'69.##.247.133':139
'69.##.185.100':139
'69.##.247.133':445
'69.#5.0.223':445
'69.##.86.168':445
'69.##.51.116':139
'69.##.42.204':139
'69.##.21.210':139
'69.##.125.249':139
'69.##.44.212':445
'69.##.124.57':445
'69.##.199.124':445
'69.##.180.136':445
'69.#5.56.65':445
'69.#5.78.55':445
'69.##.52.192':445
'69.##.86.168':139
'69.#5.0.223':139
'69.##.230.197':445
'69.##.164.70':445
'69.##.184.21':445
'69.##.137.125':139
'69.##.175.235':139
'69.##.58.160':139
'69.##.126.32':139
'69.##.105.126':139
'69.##.148.218':139
'69.##.214.193':139
'69.#5.83.27':139
'69.##.31.155':139
'69.##.118.182':139
'69.##.22.119':139
'69.#5.28.16':139
'69.##.32.112':139
'69.##.69.148':9988
'69.#5.249.4':9988
'69.##.173.46':9988
'69.#5.93.94':445
'69.##.173.62':445
'69.##.182.127':9988
'69.##.190.98':139
'69.##.162.189':139
'69.##.52.199':139
'69.##.173.62':9988
'69.#5.48.32':139
'69.##.176.170':139
'69.##.199.124':139
'69.##.230.197':139
'69.##.164.70':139
'69.#5.78.55':139
'69.##.44.212':139
'69.##.124.57':139
'69.##.176.170':445
'69.##.190.98':445
'69.##.162.189':445
'69.##.184.21':139
'69.##.52.192':139
'69.#5.48.32':445
'69.#5.56.65':139
'69.##.75.183':139
'69.#5.51.74':139
'69.#5.76.77':139
'69.#5.3.31':139
'69.#5.42.37':139
'69.##.136.120':139
'69.##.193.69':139
'69.#5.36.78':139
'69.##.180.136':139
'69.#5.9.127':139
'69.##.67.237':139
'69.#5.42.22':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней