Trojan.DownLoader12.28883

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERc6bd.dir00\svchost.exe.mdmp 16325836412032216

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.#8.14.92':139
'72.#8.50.55':139
'72.##.57.160':139
'72.##.34.208':139
'72.##.63.178':139
'72.#8.91.69':139
'72.##.170.91':139
'72.##.163.96':139
'72.##.76.128':139
'72.##.246.58':139
'72.##.207.245':139
'72.#8.33.31':139
'72.##.138.193':139
'72.##.178.120':139
'72.##.72.100':139
'72.##.222.153':139
'72.##.20.187':139
'72.##.95.126':139
'72.#8.7.212':139
'72.#8.72.95':139
'72.##.119.72':139
'72.#8.9.218':445
'72.##.68.151':445
'72.##.144.67':445
'72.##.51.176':445
'72.##.187.148':445
'72.##.120.210':445
'72.##.154.120':445
'72.##.10.212':445
'72.#8.70.53':445
'72.##.223.106':445
'72.##.111.71':445
'72.##.134.205':139
'72.#8.46.23':445
'72.##.91.109':139
'72.##.84.170':139
'72.##.196.84':139
'72.##.125.189':445
'72.##.194.157':445
'72.#8.76.82':445
'72.##.178.232':445
'72.#8.94.99':445
'72.##.55.198':139
'72.##.182.131':139
'72.##.121.252':139
'72.##.164.115':139
'72.##.186.80':139
'72.##.164.115':445
'72.##.186.80':445
'72.##.116.49':445
'72.##.217.227':445
'72.##.138.243':445
'72.##.116.49':139
'72.##.48.145':445
'72.#8.29.76':445
'72.##.142.14':445
'72.##.56.117':445
'72.##.139.56':445
'72.##.217.227':139
'72.##.138.243':139
'72.##.64.163':445
'72.##.70.134':445
'72.#8.7.227':445
'72.##.68.151':139
'72.#8.70.53':139
'72.#8.9.218':139
'72.##.187.148':139
'72.##.144.67':139
'72.##.154.120':139
'72.#8.10.86':139
'72.##.120.210':139
'72.##.223.106':139
'72.##.10.212':139
'72.##.51.176':139
'72.#8.46.23':139
'72.##.178.232':139
'72.##.182.131':445
'72.##.121.252':445
'72.##.55.198':445
'72.##.194.157':139
'72.##.111.71':139
'72.##.125.189':139
'72.#8.94.99':139
'72.#8.76.82':139
'72.#8.10.86':445
'72.##.137.13':139
'72.##.212.136':139
'72.#8.49.89':139
'72.##.128.98':139
'72.##.63.150':139
'72.##.75.166':139
'72.##.110.106':139
'72.#8.52.75':139
'72.##.34.213':139
'72.##.82.219':139
'72.#8.23.48':139
'72.##.141.131':139
'72.#8.25.26':139
'72.#8.81.29':139
'72.##.55.237':139
'72.##.57.225':139
'72.##.53.232':139
'72.##.61.175':139
'72.##.226.115':139
'72.##.189.232':139
'72.##.116.33':139
'72.##.66.125':139
'72.#8.48.84':139
'72.##.106.66':139
'72.##.36.141':139
'72.##.140.85':139
'72.##.221.36':139
'72.#8.62.11':139
'72.#8.9.66':139
'72.##.205.63':139
'72.##.113.193':139
'72.##.32.233':139
'72.#8.127.8':139
'72.##.69.211':139
'72.##.144.50':139
'72.##.141.89':139
'72.#8.116.3':139
'72.##.240.103':139
'72.##.245.185':139
'72.##.110.236':139
'72.##.30.104':139
'72.##.181.100':139
'72.#8.14.92':445
'72.#8.50.55':445
'72.##.57.160':445
'72.##.34.208':445
'72.##.63.178':445
'72.#8.91.69':445
'72.##.170.91':445
'72.##.163.96':445
'72.##.76.128':445
'72.##.246.58':445
'72.##.207.245':445
'72.#8.33.31':445
'72.##.138.193':445
'72.##.178.120':445
'72.##.72.100':445
'72.##.222.153':445
'72.##.20.187':445
'72.##.95.126':445
'72.#8.7.212':445
'72.#8.72.95':445
'72.##.119.72':445
'72.##.230.209':445
'72.#8.49.59':445
'72.#8.76.54':445
'72.##.140.247':139
'72.#8.45.45':445
'72.##.140.247':445
'72.##.149.152':139
'72.##.82.172':445
'72.##.105.72':445
'72.#8.5.179':445
'72.##.82.172':139
'72.##.134.205':445
'72.#8.45.45':139
'72.##.91.109':445
'72.##.84.170':445
'72.##.196.84':445
'72.##.105.72':139
'72.#8.5.179':139
'72.#8.49.59':139
'72.#8.76.54':139
'72.##.230.209':139
'72.##.202.117':445
'72.#8.5.16':445
'72.##.33.172':445
'72.##.181.210':445
'72.##.134.36':445
'72.##.180.158':445
'72.#8.50.41':445
'72.##.240.12':445
'72.#8.41.49':445
'72.##.25.223':445
'72.#8.34.30':445
'72.##.255.107':139
'72.##.164.160':139
'72.##.127.110':139
'72.##.176.91':139
'72.##.77.159':139
'72.##.17.158':139
'72.##.212.88':445
'72.#8.31.97':139
'72.#8.93.47':139
'72.##.126.231':139
'72.##.11.254':445
'72.##.10.242':445
'72.##.254.125':445
'72.##.228.176':445
'72.##.132.207':445
'72.#8.3.59':445
'72.##.215.75':445
'72.##.56.182':445
'72.#8.42.37':445
'72.##.206.252':445
'72.##.184.232':445
'72.##.174.26':445
'72.##.151.137':445
'72.#8.30.41':445
'72.#8.33.86':445
'72.##.13.229':445
'72.##.164.80':445
'72.##.45.214':445
'72.##.90.135':445
'72.##.121.114':445
'72.##.192.148':445
'72.#8.30.41':139
'72.##.174.26':139
'72.##.13.229':139
'72.#8.50.41':139
'72.#8.33.86':139
'72.##.90.135':139
'72.##.164.80':139
'72.##.192.148':139
'72.##.151.137':139
'72.##.121.114':139
'72.##.180.158':139
'72.##.134.36':139
'72.##.33.172':139
'72.##.181.210':139
'72.##.212.88':139
'72.#8.34.30':139
'72.##.25.223':139
'72.##.240.12':139
'72.#8.41.49':139
'72.##.202.117':139
'72.#8.5.16':139
'72.#8.70.49':139
'72.##.65.163':139
'72.#8.58.86':139
'72.##.215.75':139
'72.#8.94.29':139
'72.##.197.235':139
'72.##.162.197':139
'72.##.235.115':139
'72.#8.38.40':139
'72.##.116.110':139
'72.#8.3.59':139
'72.##.132.207':139
'72.##.254.125':139
'72.##.228.176':139
'72.##.45.214':139
'72.##.184.232':139
'72.##.206.252':139
'72.##.56.182':139
'72.#8.42.37':139
'72.##.11.254':139
'72.##.10.242':139
'72.#8.94.29':445
'72.##.70.134':139
'72.#8.7.227':139
'72.#8.29.76':139
'72.##.142.14':139
'72.##.48.145':139
'72.#8.85.28':445
'72.##.167.254':445
'72.#8.6.203':445
'72.##.64.163':139
'72.##.46.167':445
'72.##.139.56':139
'72.##.246.145':139
'72.##.145.230':139
'72.#8.67.85':139
'72.##.44.200':139
'72.#8.28.24':139
'72.##.117.72':139
'72.##.56.117':139
'72.#8.252.0':139
'72.##.154.102':139
'72.##.238.153':139
'72.#8.67.85':445
'72.##.246.145':445
'72.#8.28.24':445
'72.##.162.163':445
'72.##.44.200':445
'72.#8.252.0':445
'72.##.117.72':445
'72.##.238.153':445
'72.##.145.230':445
'72.##.154.102':445
'72.#8.36.60':445
'72.##.210.21':445
'72.#8.1.74':445
'72.##.83.165':445
'72.#8.37.22':445
'72.##.132.37':445
'72.##.225.24':445
'72.##.14.236':445
'72.##.118.129':445
'72.##.199.168':445
'72.##.147.173':445
'72.##.126.231':445
'72.#8.31.97':445
'72.#8.93.47':445
'72.##.255.107':445
'72.##.164.160':445
'72.##.90.135':9988
'72.##.132.207':9988
'72.#8.50.41':9988
'72.##.17.158':445
'72.##.181.210':9988
'72.##.127.110':445
'72.#8.38.40':445
'72.##.116.110':445
'72.##.65.163':445
'72.#8.58.86':445
'72.#8.70.49':445
'72.##.176.91':445
'72.##.77.159':445
'72.##.162.197':445
'72.##.235.115':445
'72.##.197.235':445
'72.##.199.168':139
'72.##.147.173':139
'72.#8.1.74':139
'72.##.83.165':139
'72.##.210.21':139
'72.#8.36.60':139
'72.##.162.163':139
'72.##.14.236':139
'72.##.118.129':139
'72.##.225.24':139
'72.##.132.37':139
'72.##.164.160':9988
'72.##.126.231':9988
'72.##.176.91':9988
'72.##.206.252':9988
'72.##.116.110':9988
'72.##.167.254':139
'72.#8.37.22':139
'72.#8.85.28':139
'72.##.46.167':139
'72.#8.6.203':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней