Trojan.DownLoader12.28953

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER3f92.dir00\svchost.exe.mdmp 16325836412032164

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3f92.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'84.##.138.223':139
'84.##.201.192':139
'84.##.198.164':139
'84.##.233.39':139
'84.##.101.233':139
'84.#2.75.25':139
'84.##.201.62':139
'84.#2.43.34':139
'84.##.142.101':139
'84.#2.0.156':139
'84.##.24.123':139
'84.#2.59.62':445
'84.##.218.58':445
'84.##.62.145':445
'84.##.28.107':445
'84.##.145.28':445
'84.##.56.253':139
'84.#2.16.31':139
'84.##.200.12':139
'84.##.148.110':139
'84.##.160.126':139
'84.##.138.223':445
'84.##.201.192':445
'84.##.198.164':445
'84.##.233.39':445
'84.##.101.233':445
'84.#2.75.25':445
'84.##.201.62':445
'84.#2.43.34':445
'84.##.142.101':445
'84.#2.0.156':445
'84.##.24.123':445
'84.##.143.18':139
'84.##.228.165':139
'84.##.142.56':139
'84.##.155.89':139
'84.##.57.222':139
'84.##.56.253':445
'84.#2.16.31':445
'84.##.200.12':445
'84.##.148.110':445
'84.##.160.126':445
'84.##.107.44':445
'84.##.145.28':139
'84.##.62.145':139
'84.##.28.107':139
'84.##.198.104':139
'84.##.107.44':139
'84.#2.0.7':445
'84.##.241.216':445
'84.#2.41.60':445
'84.#2.59.62':139
'84.##.218.58':139
'84.##.153.141':139
'84.##.105.173':139
'84.##.23.161':139
'84.##.120.17':139
'84.##.36.233':139
'84.#2.19.35':139
'84.#2.188.2':139
'84.##.232.144':139
'84.##.62.177':139
'84.##.203.145':139
'84.##.75.188':139
'84.##.203.145':445
'84.##.75.188':445
'84.##.23.161':445
'84.##.120.17':445
'84.##.105.173':445
'84.##.153.141':445
'84.##.198.104':445
'84.##.232.144':445
'84.##.62.177':445
'84.#2.188.2':445
'84.#2.19.35':445
'84.#2.47.97':445
'84.##.36.107':445
'84.##.188.105':445
'84.##.39.192':445
'84.##.105.222':445
'84.##.56.201':445
'84.##.36.233':445
'84.#2.71.35':445
'84.##.207.36':445
'84.##.22.143':445
'84.##.155.89':445
'84.##.114.38':445
'84.##.219.113':445
'84.##.26.253':445
'84.#2.236.8':445
'84.##.131.236':445
'84.##.187.190':445
'84.##.40.226':445
'84.##.146.34':445
'84.##.198.219':445
'84.##.30.199':445
'84.#2.8.217':445
'84.##.125.204':445
'84.##.19.126':445
'84.##.177.225':445
'84.##.235.85':445
'84.##.131.148':445
'84.##.159.189':445
'84.#2.50.87':445
'84.##.52.250':445
'84.##.209.19':445
'84.##.185.208':445
'84.##.55.156':139
'84.##.61.227':139
'84.##.24.135':139
'84.##.162.77':139
'84.#2.37.4':139
'84.##.53.203':139
'84.#2.11.3':139
'84.#2.46.23':139
'84.##.147.63':139
'84.##.182.149':139
'84.#2.51.98':139
'84.##.17.153':139
'84.#2.6.53':139
'84.##.255.71':139
'84.##.23.106':139
'84.#2.48.40':139
'84.##.22.252':139
'84.##.14.138':139
'84.##.245.184':139
'84.##.213.34':139
'84.##.192.69':139
'84.##.86.160':445
'84.##.131.148':139
'84.##.177.225':139
'84.##.235.85':139
'84.#2.41.58':139
'84.##.86.160':139
'84.##.185.208':139
'84.##.52.250':139
'84.##.209.19':139
'84.##.125.204':139
'84.##.19.126':139
'84.##.91.221':139
'84.##.228.165':445
'84.#2.14.22':139
'84.##.143.18':445
'84.##.57.222':445
'84.##.142.56':445
'84.##.18.166':139
'84.##.219.86':139
'84.##.15.138':139
'84.##.14.254':139
'84.##.95.237':139
'84.##.14.254':445
'84.##.95.237':445
'84.#2.14.22':445
'84.##.187.190':139
'84.##.40.226':139
'84.##.91.221':445
'84.#2.41.58':445
'84.##.219.86':445
'84.##.15.138':445
'84.##.18.166':445
'84.##.146.34':139
'84.#2.236.8':139
'84.##.131.236':139
'84.#2.8.217':139
'84.##.159.189':139
'84.#2.50.87':139
'84.##.198.219':139
'84.##.30.199':139
'84.##.219.113':139
'84.##.26.253':139
'84.##.114.38':139
'84.#2.82.46':445
'84.##.228.21':445
'84.#2.78.7':445
'84.##.87.111':445
'84.#2.59.26':445
'84.#2.14.77':445
'84.##.219.69':445
'84.##.225.94':445
'84.##.42.216':445
'84.##.189.99':445
'84.##.140.41':445
'84.##.206.37':139
'84.##.132.221':139
'84.##.131.96':139
'84.##.126.189':139
'84.##.248.35':139
'84.#2.53.43':445
'84.#2.48.87':445
'84.##.138.181':139
'84.##.220.188':139
'84.#2.163.6':139
'84.##.116.158':445
'84.##.99.218':445
'84.##.101.48':445
'84.#2.55.43':445
'84.##.107.77':445
'84.#2.17.57':445
'84.##.42.208':445
'84.##.160.134':445
'84.##.34.237':445
'84.##.118.239':445
'84.##.172.27':445
'84.##.215.150':445
'84.##.102.140':445
'84.##.20.113':445
'84.##.232.22':445
'84.##.109.203':445
'84.##.135.133':445
'84.##.129.249':445
'84.#2.128.0':445
'84.##.103.74':445
'84.##.30.103':445
'84.##.252.77':139
'84.##.109.203':139
'84.##.20.113':139
'84.##.232.22':139
'84.#2.14.77':139
'84.##.219.69':139
'84.##.30.103':139
'84.#2.128.0':139
'84.##.103.74':139
'84.##.215.150':139
'84.##.102.140':139
'84.##.225.94':139
'84.#2.53.43':139
'84.#2.59.26':139
'84.##.140.41':139
'84.#2.48.87':139
'84.##.87.111':139
'84.##.42.216':139
'84.##.189.99':139
'84.##.228.21':139
'84.#2.78.7':139
'84.#2.82.46':139
'84.##.237.202':139
'84.##.102.73':139
'84.##.180.159':139
'84.#2.17.57':139
'84.##.42.208':139
'84.##.153.221':139
'84.##.86.153':139
'84.##.178.30':139
'84.##.12.133':139
'84.##.237.102':139
'84.##.160.134':139
'84.#2.55.43':139
'84.##.107.77':139
'84.##.172.27':139
'84.##.135.133':139
'84.##.129.249':139
'84.##.34.237':139
'84.##.118.239':139
'84.##.99.218':139
'84.##.101.48':139
'84.##.116.158':139
'84.##.180.159':445
'84.##.251.209':445
'84.#2.203.2':445
'84.##.209.171':445
'84.##.20.182':445
'84.##.172.20':445
'84.#2.34.42':445
'84.#2.86.96':445
'84.##.244.120':445
'84.##.225.146':445
'84.##.165.60':445
'84.##.181.134':445
'84.#2.81.58':139
'84.##.21.205':139
'84.#2.79.55':139
'84.#2.99.31':139
'84.#2.55.28':139
'84.##.149.32':139
'84.##.134.129':445
'84.##.32.123':139
'84.##.240.203':139
'84.##.123.70':139
'84.##.188.105':139
'84.#2.47.97':139
'84.##.105.222':139
'84.##.241.216':139
'84.##.39.192':139
'84.#2.71.35':139
'84.##.56.201':139
'84.##.22.143':139
'84.##.36.107':139
'84.##.207.36':139
'84.#2.0.7':139
'84.#2.81.58':445
'84.##.21.205':445
'84.#2.79.55':445
'84.#2.99.31':445
'84.#2.55.28':445
'84.##.149.32':445
'84.#2.41.60':139
'84.##.32.123':445
'84.##.240.203':445
'84.##.123.70':445
'84.#2.86.96':139
'84.#2.163.6':445
'84.##.138.181':445
'84.##.220.188':445
'84.##.206.37':445
'84.##.132.221':445
'84.##.87.111':9988
'84.#2.59.26':9988
'84.##.140.41':9988
'84.#2.53.43':9988
'84.#2.48.87':9988
'84.##.131.96':445
'84.##.237.102':445
'84.##.178.30':445
'84.##.12.133':445
'84.##.237.202':445
'84.##.102.73':445
'84.##.126.189':445
'84.##.248.35':445
'84.##.252.77':445
'84.##.153.221':445
'84.##.86.153':445
'84.##.209.171':139
'84.##.251.209':139
'84.##.172.20':139
'84.##.181.134':139
'84.##.20.182':139
'84.##.244.120':139
'84.#2.34.42':139
'84.##.165.60':139
'84.#2.203.2':139
'84.##.225.146':139
'84.##.134.129':139
'84.##.20.113':9988
'84.##.215.150':9988
'84.##.109.203':9988
'84.##.189.99':9988
'84.##.219.69':9988
'84.#2.128.0':9988
'84.##.135.133':9988
'84.##.30.103':9988
'84.##.102.140':9988
'84.##.103.74':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней