Trojan.DownLoader12.28860

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER4b78.dir00\svchost.exe.mdmp 16325836412032308

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER4b78.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##.25.145':139
'24.##.24.120':139
'24.##.139.241':139
'24.#5.1.20':139
'24.##.201.234':139
'24.##.173.227':139
'24.##.179.86':139
'24.##.166.123':139
'24.##.71.135':139
'24.##.143.119':139
'24.##.245.81':139
'24.##.228.10':139
'24.#5.42.93':139
'24.##.91.238':139
'24.##.10.157':139
'24.##.153.117':139
'24.##.101.102':139
'24.#5.131.6':139
'24.##.78.196':139
'24.##.15.103':139
'24.##.201.96':139
'24.##.36.179':139
'24.#5.131.6':445
'24.##.245.81':445
'24.##.101.102':445
'24.##.201.96':445
'24.##.78.196':445
'24.##.25.145':445
'24.##.24.120':445
'24.##.139.241':445
'24.#5.1.20':445
'24.##.201.234':445
'24.##.15.103':445
'24.#5.42.81':139
'24.##.21.115':139
'24.##.250.41':139
'24.##.155.98':139
'24.##.26.142':139
'24.##.228.10':445
'24.#5.42.93':445
'24.##.91.238':445
'24.##.10.157':445
'24.##.153.117':445
'24.#5.38.47':139
'24.##.114.74':139
'24.##.45.224':139
'24.##.137.240':139
'24.##.107.115':139
'24.##.112.116':445
'24.##.176.225':445
'24.#5.84.57':139
'24.##.16.245':139
'24.##.174.163':139
'24.#5.99.2':139
'24.##.106.59':139
'24.##.186.185':139
'24.##.226.84':139
'24.#5.22.30':139
'24.#5.69.51':139
'24.##.121.44':139
'24.##.234.85':139
'24.##.204.99':139
'24.##.192.101':139
'24.##.99.247':139
'24.##.18.141':445
'24.##.107.115':445
'24.##.45.224':445
'24.##.137.240':445
'24.##.234.85':445
'24.#5.99.2':445
'24.##.174.163':445
'24.#5.84.57':445
'24.##.16.245':445
'24.#5.38.47':445
'24.##.114.74':445
'24.##.121.44':445
'24.#5.69.51':445
'24.##.226.84':445
'24.#5.22.30':445
'24.##.37.159':445
'24.##.123.196':445
'24.##.99.247':445
'24.##.204.99':445
'24.##.192.101':445
'24.##.106.59':445
'24.##.186.185':445
'24.##.229.58':445
'24.##.33.229':445
'24.#5.58.63':445
'24.#5.3.132':445
'24.##.171.151':445
'24.##.49.221':139
'24.##.45.172':139
'24.##.105.10':139
'24.#5.120.7':139
'24.##.76.136':139
'24.##.132.20':445
'24.##.207.167':445
'24.##.171.199':445
'24.##.113.129':445
'24.##.78.144':445
'24.#5.91.71':445
'24.##.141.190':445
'24.##.69.249':445
'24.##.156.114':445
'24.##.31.252':445
'24.##.123.208':445
'24.#5.91.38':139
'24.#5.80.50':139
'24.##.247.98':139
'24.##.208.95':139
'24.##.57.143':139
'24.##.95.180':139
'24.##.25.143':139
'24.##.211.129':139
'24.#5.16.18':139
'24.#5.3.51':139
'24.#5.88.85':139
'24.#5.92.73':139
'24.##.161.186':139
'24.##.203.56':139
'24.##.240.100':139
'24.#5.52.91':139
'24.##.101.52':139
'24.##.48.118':139
'24.##.10.241':139
'24.##.180.115':139
'24.##.147.23':139
'24.##.83.195':139
'24.##.240.244':139
'24.##.40.241':139
'24.##.244.249':139
'24.##.235.195':139
'24.#5.13.66':139
'24.##.78.144':139
'24.#5.91.71':139
'24.##.34.116':139
'24.##.219.184':139
'24.##.157.61':139
'24.##.21.115':445
'24.##.173.227':445
'24.##.179.86':445
'24.##.166.123':445
'24.##.71.135':445
'24.##.143.119':445
'24.##.250.41':445
'24.#5.42.81':445
'24.##.26.142':445
'24.##.36.179':445
'24.##.155.98':445
'24.##.113.129':139
'24.#5.13.66':445
'24.##.244.249':445
'24.##.235.195':445
'24.##.229.58':139
'24.##.33.229':139
'24.##.157.61':445
'24.##.34.116':445
'24.##.219.184':445
'24.##.240.244':445
'24.##.40.241':445
'24.#5.58.63':139
'24.##.123.208':139
'24.##.156.114':139
'24.##.31.252':139
'24.##.207.167':139
'24.##.171.199':139
'24.#5.3.132':139
'24.##.171.151':139
'24.##.132.20':139
'24.##.141.190':139
'24.##.69.249':139
'24.##.123.196':139
'24.#5.106.0':445
'24.#5.2.20':445
'24.##.135.14':445
'24.##.196.45':445
'24.##.40.119':445
'24.##.94.253':445
'24.#5.21.96':445
'24.#5.40.91':445
'24.##.69.233':445
'24.#5.201.7':445
'24.##.18.142':445
'24.##.117.228':139
'24.##.254.29':139
'24.##.116.150':139
'24.##.242.161':139
'24.##.150.77':139
'24.##.56.221':445
'24.##.14.197':445
'24.##.139.164':139
'24.##.57.166':139
'24.##.164.244':139
'24.#5.11.28':445
'24.#5.30.95':445
'24.##.187.30':445
'24.#5.29.36':445
'24.##.60.170':445
'24.##.150.212':445
'24.##.248.110':445
'24.##.110.39':445
'24.##.108.194':445
'24.##.187.186':445
'24.##.194.187':445
'24.##.163.171':445
'24.##.43.215':445
'24.##.236.42':445
'24.##.215.196':445
'24.##.40.129':445
'24.##.161.147':445
'24.#5.41.94':445
'24.##.86.238':445
'24.##.176.148':445
'24.##.71.236':445
'24.##.112.194':445
'24.##.40.129':139
'24.##.161.147':139
'24.#5.11.28':139
'24.##.94.253':139
'24.#5.21.96':139
'24.##.71.236':139
'24.##.112.194':139
'24.##.236.42':139
'24.##.215.196':139
'24.##.43.215':139
'24.#5.40.91':139
'24.##.56.221':139
'24.##.14.197':139
'24.##.18.142':139
'24.##.196.45':139
'24.##.40.119':139
'24.##.69.233':139
'24.#5.201.7':139
'24.#5.2.20':139
'24.##.135.14':139
'24.#5.106.0':139
'24.##.176.148':139
'24.#5.36.63':139
'24.##.181.215':139
'24.#5.163.7':139
'24.##.248.110':139
'24.##.110.39':139
'24.##.223.228':139
'24.##.15.217':139
'24.##.69.192':139
'24.##.218.181':139
'24.##.31.101':139
'24.##.108.194':139
'24.##.60.170':139
'24.##.150.212':139
'24.##.163.171':139
'24.#5.41.94':139
'24.##.86.238':139
'24.##.187.186':139
'24.##.194.187':139
'24.##.187.30':139
'24.#5.29.36':139
'24.#5.30.95':139
'24.#5.50.74':445
'24.##.163.40':445
'24.#5.72.75':445
'24.##.103.111':139
'24.##.111.76':445
'24.#5.54.94':445
'24.#5.6.70':445
'24.##.24.241':445
'24.##.93.141':445
'24.##.73.115':445
'24.##.165.180':139
'24.#5.7.103':139
'24.##.24.248':139
'24.##.183.51':139
'24.##.48.214':139
'24.##.158.168':139
'24.##.14.123':139
'24.##.180.156':139
'24.##.84.110':139
'24.##.111.181':139
'24.##.67.243':139
'24.##.220.25':445
'24.##.180.156':445
'24.##.165.180':445
'24.##.14.123':445
'24.##.67.243':445
'24.##.84.110':445
'24.##.18.141':139
'24.##.37.159':139
'24.##.176.225':139
'24.##.103.111':445
'24.##.112.116':139
'24.##.111.181':445
'24.##.153.213':445
'24.#5.94.54':445
'24.##.214.35':445
'24.#5.65.82':445
'24.#5.35.76':445
'24.#5.7.103':445
'24.##.24.248':445
'24.##.183.51':445
'24.##.48.214':445
'24.##.158.168':445
'24.##.164.244':445
'24.##.139.164':445
'24.##.57.166':445
'24.##.117.228':445
'24.##.254.29':445
'24.##.161.147':9988
'24.##.215.196':9988
'24.#5.2.20':9988
'24.##.40.119':9988
'24.#5.106.0':9988
'24.##.116.150':445
'24.##.218.181':445
'24.##.31.101':445
'24.##.181.215':445
'24.#5.163.7':445
'24.#5.36.63':445
'24.##.242.161':445
'24.##.150.77':445
'24.##.15.217':445
'24.##.69.192':445
'24.##.223.228':445
'24.##.112.194':9988
'24.#5.6.70':139
'24.##.220.25':139
'24.#5.54.94':139
'24.##.73.115':139
'24.##.24.241':139
'24.##.153.213':139
'24.#5.94.54':139
'24.##.214.35':139
'24.#5.65.82':139
'24.#5.35.76':139
'24.##.93.141':139
'24.##.60.170':9988
'24.##.150.212':9988
'24.##.86.238':9988
'24.##.176.148':9988
'24.#5.41.94':9988
'24.#5.50.74':139
'24.##.163.40':139
'24.#5.72.75':139
'24.#5.30.95':9988
'24.##.111.76':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней