Trojan.DownLoader12.28857

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER71e4.dir00\svchost.exe.mdmp 16325836412032216

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'67.##5.134.73':139
'67.##5.181.100':139
'67.##5.49.113':139
'67.##5.77.22':139
'67.##5.21.52':139
'67.##5.61.133':139
'67.##5.164.61':139
'67.##5.133.115':139
'67.##5.168.110':139
'67.##5.170.153':139
'67.##5.54.114':139
'67.##5.190.60':445
'67.##5.155.190':445
'67.##5.60.147':445
'67.##5.40.154':445
'67.##5.248.45':445
'67.##5.150.150':139
'67.##5.153.227':139
'67.##5.145.239':445
'67.##5.170.188':445
'67.##5.181.216':445
'67.##5.133.115':445
'67.##5.61.133':445
'67.##5.170.153':445
'67.##5.181.100':445
'67.##5.168.110':445
'67.##5.112.178':445
'67.##5.132.16':445
'67.##5.65.21':445
'67.##5.164.61':445
'67.##5.250.252':445
'67.##5.134.73':445
'67.##5.132.16':139
'67.##5.150.150':445
'67.##5.112.178':139
'67.##5.250.252':139
'67.##5.65.21':139
'67.##5.21.52':445
'67.##5.49.113':445
'67.##5.77.22':445
'67.##5.153.227':445
'67.##5.54.114':445
'67.##5.33.102':445
'67.##5.170.188':139
'67.##5.181.216':139
'67.##5.155.190':139
'67.##5.60.147':139
'67.##5.190.60':139
'67.##5.195.248':445
'67.##5.5.153':445
'67.##5.199.188':445
'67.##5.145.239':139
'67.##5.71.253':445
'67.##5.248.45':139
'67.##5.20.32':139
'67.##5.244.26':139
'67.##5.94.217':139
'67.##5.29.94':139
'67.##5.155.161':139
'67.##5.33.102':139
'67.##5.40.154':139
'67.#05.0.60':139
'67.##5.54.215':139
'67.##5.206.15':139
'67.##5.155.161':445
'67.##5.94.217':445
'67.##5.29.94':445
'67.##5.81.201':445
'67.##5.169.92':445
'67.##5.206.15':445
'67.#05.0.60':445
'67.##5.54.215':445
'67.##5.20.32':445
'67.##5.244.26':445
'67.##5.36.160':445
'67.##5.23.147':445
'67.##5.162.62':445
'67.##5.40.212':445
'67.##5.113.5':445
'67.##5.234.112':445
'67.##5.107.87':445
'67.##5.129.225':445
'67.#05.57.3':445
'67.##5.133.169':445
'67.##5.94.148':445
'67.##5.110.33':445
'67.##5.244.248':445
'67.##5.71.144':445
'67.##5.187.246':445
'67.##5.61.91':445
'67.##5.186.60':445
'67.##5.103.77':445
'67.##5.32.102':445
'67.##5.111.120':445
'67.##5.56.234':445
'67.##5.81.211':445
'67.##5.40.133':445
'67.##5.227.80':445
'67.##5.10.151':445
'67.##5.98.203':445
'67.##5.92.138':445
'67.##5.76.119':445
'67.##5.211.12':445
'67.##5.120.131':445
'67.##5.213.251':445
'67.##5.12.163':445
'67.##5.111.245':139
'67.#05.3.40':139
'67.##5.121.39':139
'67.##5.108.34':139
'67.##5.39.108':139
'67.#05.10.4':139
'67.##5.29.234':139
'67.##5.162.206':139
'67.##5.101.149':139
'67.##5.135.123':139
'67.##5.248.225':139
'67.##5.162.154':445
'67.##5.111.162':139
'67.##5.98.209':445
'67.##5.39.21':445
'67.##5.198.222':445
'67.##5.149.101':139
'67.##5.135.112':139
'67.##5.144.49':139
'67.##5.26.111':139
'67.##5.208.86':139
'67.##5.107.62':445
'67.##5.213.251':139
'67.##5.12.163':139
'67.##5.227.80':139
'67.##5.10.151':139
'67.##5.40.133':139
'67.##5.81.211':139
'67.##5.187.246':139
'67.##5.211.12':139
'67.##5.120.131':139
'67.##5.76.119':139
'67.##5.92.138':139
'67.##5.166.98':139
'67.##5.58.236':139
'67.##5.98.76':139
'67.##5.48.132':139
'67.##5.169.194':139
'67.##5.107.62':139
'67.##5.98.203':139
'67.##5.254.33':139
'67.##5.51.60':139
'67.##5.63.201':139
'67.##5.169.194':445
'67.##5.98.76':445
'67.##5.48.132':445
'67.##5.98.209':139
'67.##5.162.154':139
'67.##5.63.201':445
'67.##5.254.33':445
'67.##5.51.60':445
'67.##5.166.98':445
'67.##5.58.236':445
'67.##5.198.222':139
'67.##5.244.248':139
'67.##5.111.120':139
'67.##5.110.33':139
'67.##5.61.91':139
'67.##5.71.144':139
'67.##5.103.77':139
'67.##5.39.21':139
'67.##5.186.60':139
'67.##5.56.234':139
'67.##5.32.102':139
'67.##5.91.153':445
'67.##5.252.248':445
'67.##5.168.111':445
'67.##5.100.69':445
'67.##5.122.22':445
'67.##5.88.52':445
'67.#05.9.27':445
'67.##5.216.39':445
'67.##5.48.45':445
'67.##5.40.80':445
'67.##5.22.118':445
'67.##5.34.128':139
'67.##5.18.35':139
'67.##5.127.147':139
'67.##5.234.180':139
'67.##5.53.93':139
'67.##5.242.54':445
'67.##5.117.242':445
'67.##5.52.193':139
'67.##5.26.209':139
'67.##5.46.153':139
'67.##5.253.197':445
'67.##5.211.253':445
'67.##5.197.164':445
'67.##5.227.143':445
'67.##5.165.31':445
'67.##5.193.4':445
'67.##5.33.195':445
'67.##5.164.248':445
'67.##5.63.216':445
'67.##5.161.222':445
'67.##5.74.212':445
'67.##5.135.252':445
'67.##5.101.50':445
'67.##5.26.127':445
'67.#05.76.1':445
'67.##5.31.144':445
'67.##5.203.18':445
'67.##5.90.57':445
'67.##5.76.184':445
'67.##5.42.19':445
'67.##5.129.89':445
'67.##5.99.181':139
'67.##5.31.144':139
'67.##5.26.127':139
'67.#05.76.1':139
'67.##5.88.52':139
'67.#05.9.27':139
'67.##5.129.89':139
'67.##5.76.184':139
'67.##5.42.19':139
'67.##5.135.252':139
'67.##5.101.50':139
'67.##5.216.39':139
'67.##5.100.69':139
'67.##5.168.111':139
'67.##5.117.242':139
'67.##5.242.54':139
'67.##5.22.118':139
'67.##5.48.45':139
'67.##5.40.80':139
'67.##5.252.248':139
'67.##5.122.22':139
'67.##5.91.153':139
'67.##5.205.125':139
'67.##5.162.95':139
'67.##5.88.33':139
'67.##5.193.4':139
'67.##5.33.195':139
'67.##5.119.161':139
'67.##5.154.119':139
'67.##5.49.147':139
'67.##5.252.18':139
'67.##5.51.115':139
'67.##5.164.248':139
'67.##5.227.143':139
'67.##5.165.31':139
'67.##5.74.212':139
'67.##5.203.18':139
'67.##5.90.57':139
'67.##5.63.216':139
'67.##5.161.222':139
'67.##5.211.253':139
'67.##5.197.164':139
'67.##5.253.197':139
'67.#05.84.0':445
'67.##5.194.24':445
'67.##5.167.24':445
'67.##5.64.107':445
'67.##5.37.149':445
'67.##5.18.73':445
'67.#05.42.4':445
'67.##5.219.147':445
'67.##5.164.227':445
'67.##5.24.24':445
'67.##5.223.123':445
'67.#05.42.4':139
'67.##5.38.22':139
'67.##5.18.73':139
'67.##5.24.24':139
'67.##5.219.147':139
'67.##5.67.218':445
'67.##5.85.94':445
'67.##5.173.24':139
'67.##5.78.238':139
'67.##5.167.78':139
'67.##5.94.148':139
'67.#05.57.3':139
'67.##5.133.169':139
'67.##5.23.147':139
'67.##5.162.62':139
'67.##5.81.201':139
'67.##5.169.92':139
'67.##5.36.160':139
'67.##5.107.87':139
'67.##5.129.225':139
'67.##5.40.212':139
'67.##5.173.24':445
'67.##5.71.253':139
'67.##5.167.78':445
'67.##5.38.22':445
'67.##5.78.238':445
'67.##5.113.5':139
'67.##5.234.112':139
'67.##5.5.153':139
'67.##5.199.188':139
'67.##5.195.248':139
'67.##5.164.227':139
'67.##5.26.209':445
'67.##5.46.153':445
'67.##5.18.35':445
'67.##5.127.147':445
'67.##5.34.128':445
'67.##5.40.80':9988
'67.##5.216.39':9988
'67.##5.122.22':9988
'67.##5.52.193':445
'67.##5.168.111':9988
'67.##5.53.93':445
'67.##5.252.18':445
'67.##5.51.115':445
'67.##5.162.95':445
'67.##5.88.33':445
'67.##5.205.125':445
'67.##5.99.181':445
'67.##5.234.180':445
'67.##5.154.119':445
'67.##5.49.147':445
'67.##5.119.161':445
'67.##5.85.94':139
'67.##5.223.123':139
'67.##5.67.218':139
'67.##5.164.248':9988
'67.##5.162.95':9988
'67.#05.84.0':139
'67.##5.194.24':139
'67.##5.167.24':139
'67.##5.64.107':139
'67.##5.37.149':139
'67.##5.253.197':9988
'67.##5.42.19':9988
'67.##5.129.89':9988
'67.##5.101.50':9988
'67.##5.88.52':9988
'67.##5.135.252':9988
'67.##5.165.31':9988
'67.##5.197.164':9988
'67.##5.74.212':9988
'67.##5.203.18':9988
'67.##5.90.57':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней