Trojan.DownLoader12.28920

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1116 -dm 7 7 %TEMP%\WER7f91.dir00\svchost.exe.mdmp 16325836412032152

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'63.#3.9.97':139
'63.#3.15.7':445
'63.##.24.204':445
'63.#3.15.7':139
'63.#3.9.97':445
'63.##.217.29':139
'63.##.161.75':139
'63.#3.37.42':139
'63.#3.1.112':139
'63.##.241.25':445
'63.#3.77.52':445
'63.##.195.64':445
'63.##.245.32':445
'63.#3.68.1':445
'63.##.76.173':445
'63.##.218.125':445
'63.##.255.140':445
'63.##.46.214':445
'63.##.227.46':445
'63.##.107.221':139
'63.##.103.241':139
'63.##.222.58':139
'63.#3.183.4':139
'63.##.54.177':139
'63.#3.14.87':139
'63.##.160.246':139
'63.##.24.143':139
'63.##.254.52':139
'63.##.142.44':139
'63.##.238.184':139
'63.##.15.111':139
'63.##.78.161':139
'63.##.185.78':139
'63.##.136.128':139
'63.##.111.247':139
'63.#3.6.144':139
'63.##.162.186':139
'63.#3.132.9':139
'63.#3.8.62':445
'63.##.162.197':445
'63.##.206.123':445
'63.#3.40.81':445
'63.##.197.207':445
'63.##.120.70':445
'63.##.111.91':445
'63.#3.9.207':445
'63.##.242.111':445
'63.##.139.79':445
'63.#3.49.83':445
'63.#3.2.208':445
'63.##.166.19':445
'63.##.24.204':139
'63.##.20.210':445
'63.#3.44.24':445
'63.##.113.140':445
'63.##.175.65':445
'63.##.160.113':445
'63.##.49.210':445
'63.##.36.168':445
'63.#3.55.57':445
'63.#3.6.239':445
'63.#3.25.55':445
'63.##.177.28':445
'63.##.23.253':445
'63.##.214.228':445
'63.##.199.176':445
'63.##.135.241':445
'63.##.122.127':445
'63.##.32.218':445
'63.#3.76.33':445
'63.##.207.40':445
'63.##.218.106':445
'63.#3.5.206':445
'63.##.221.63':445
'63.#3.251.9':445
'63.##.110.52':445
'63.##.114.143':445
'63.##.178.133':445
'63.##.190.145':445
'63.##.42.210':445
'63.##.54.217':445
'63.##.31.153':445
'63.##.172.209':445
'63.##.167.229':445
'63.##.226.178':445
'63.##.145.181':445
'63.#3.14.87':445
'63.#3.183.4':445
'63.##.107.221':445
'63.##.142.44':445
'63.##.222.58':445
'63.##.103.241':445
'63.##.254.52':445
'63.##.160.246':445
'63.##.54.177':445
'63.##.24.143':445
'63.##.125.117':445
'63.##.84.125':445
'63.##.108.27':445
'63.##.170.16':445
'63.#3.92.14':445
'63.##.37.161':139
'63.##.22.243':139
'63.##.171.149':445
'63.##.128.56':445
'63.##.110.14':445
'63.##.141.226':445
'63.#3.4.207':445
'63.##.158.168':445
'63.##.32.199':445
'63.#3.44.26':445
'63.##.198.98':445
'63.##.13.198':445
'63.#3.151.3':445
'63.##.13.149':445
'63.#3.6.144':445
'63.#3.4.207':139
'63.#3.44.26':139
'63.##.32.199':139
'63.##.141.226':139
'63.#3.151.3':139
'63.##.13.198':139
'63.##.110.14':139
'63.##.13.149':139
'63.##.198.98':139
'63.##.158.168':139
'63.##.178.133':139
'63.##.190.145':139
'63.##.42.210':139
'63.##.54.217':139
'63.##.31.153':139
'63.##.172.209':139
'63.##.167.229':139
'63.##.226.178':139
'63.##.145.181':139
'63.##.185.78':445
'63.##.238.184':445
'63.##.161.75':445
'63.##.78.161':445
'63.##.15.111':445
'63.#3.132.9':445
'63.##.111.247':445
'63.##.136.128':445
'63.##.162.186':445
'63.##.217.29':445
'63.##.125.117':139
'63.##.84.125':139
'63.##.108.27':139
'63.##.170.16':139
'63.#3.92.14':139
'63.#3.37.42':445
'63.#3.1.112':445
'63.##.171.149':139
'63.##.128.56':139
'63.##.185.86':445
'63.##.105.193':445
'63.##.179.44':139
'63.##.167.253':139
'63.#3.31.78':445
'63.#3.68.18':445
'63.##.137.247':445
'63.##.122.144':445
'63.##.247.98':445
'63.##.73.219':139
'63.#3.32.43':139
'63.##.126.182':139
'63.##.102.233':139
'63.#3.80.36':139
'63.##.172.116':139
'63.##.255.116':139
'63.##.251.106':139
'63.##.221.205':139
'63.##.205.103':139
'63.#3.94.20':445
'63.#3.82.16':445
'63.##.206.17':445
'63.##.111.127':445
'63.##.168.236':445
'63.##.154.114':445
'63.#3.62.43':445
'63.##.193.80':445
'63.##.133.129':445
'63.##.102.201':445
'63.##.125.139':445
'63.#3.13.54':445
'63.##.185.139':445
'63.##.17.184':445
'63.##.156.28':445
'63.##.187.216':445
'63.##.103.140':445
'63.##.133.77':445
'63.##.65.221':445
'63.##.30.106':139
'63.##.133.77':139
'63.##.65.221':139
'63.#3.13.54':139
'63.##.156.28':139
'63.##.187.216':139
'63.##.206.17':139
'63.##.111.127':139
'63.##.103.140':139
'63.##.102.201':139
'63.##.125.139':139
'63.##.122.144':139
'63.##.185.86':139
'63.#3.68.18':139
'63.##.105.193':139
'63.#3.31.78':139
'63.##.185.139':139
'63.##.17.184':139
'63.##.247.98':139
'63.##.137.247':139
'63.##.163.237':139
'63.##.213.185':139
'63.#3.7.68':139
'63.#3.68.36':139
'63.##.110.56':139
'63.##.181.203':139
'63.##.184.224':139
'63.##.80.181':139
'63.##.22.225':139
'63.#3.44.10':139
'63.##.168.236':139
'63.##.193.80':139
'63.#3.94.20':139
'63.#3.82.16':139
'63.##.133.129':139
'63.##.116.143':139
'63.#3.10.22':139
'63.##.154.114':139
'63.#3.62.43':139
'63.#3.5.206':139
'63.##.110.52':139
'63.##.32.218':139
'63.#3.76.33':139
'63.##.114.143':139
'63.##.122.127':139
'63.#3.6.239':139
'63.##.221.63':139
'63.#3.251.9':139
'63.##.218.106':139
'63.##.206.123':139
'63.##.120.70':139
'63.##.197.207':139
'63.##.162.197':139
'63.##.242.111':139
'63.#3.9.207':139
'63.##.207.40':139
'63.##.139.79':139
'63.##.111.91':139
'63.##.195.64':139
'63.##.76.173':139
'63.#3.68.1':139
'63.#3.77.52':139
'63.##.46.214':139
'63.##.255.140':139
'63.##.241.25':139
'63.##.227.46':139
'63.##.218.125':139
'63.##.245.32':139
'63.#3.55.57':139
'63.##.177.28':139
'63.#3.25.55':139
'63.##.36.168':139
'63.##.199.176':139
'63.##.214.228':139
'63.#3.8.62':139
'63.##.135.241':139
'63.##.23.253':139
'63.#3.40.81':139
'63.##.30.106':445
'63.##.102.233':445
'63.##.181.203':445
'63.##.184.224':445
'63.#3.80.36':445
'63.##.172.116':445
'63.##.221.205':445
'63.#3.32.43':445
'63.##.126.182':445
'63.##.22.225':445
'63.#3.44.10':445
'63.#3.7.68':445
'63.##.116.143':445
'63.#3.10.22':445
'63.#3.68.36':445
'63.##.110.56':445
'63.##.80.181':445
'63.##.163.237':445
'63.##.213.185':445
'63.##.166.19':139
'63.#3.44.24':139
'63.##.20.210':139
'63.#3.2.208':139
'63.##.160.113':139
'63.##.175.65':139
'63.#3.49.83':139
'63.##.49.210':139
'63.##.113.140':139
'63.##.206.17':9988
'63.##.251.106':445
'63.##.73.219':445
'63.##.205.103':445
'63.##.255.116':445
'63.##.179.44':445
'63.##.125.139':9988
'63.##.103.140':9988
'63.##.167.253':445
'63.#3.68.18':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней