Trojan.DownLoader12.28958

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER3bba.dir00\svchost.exe.mdmp 16325836412032512

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3bba.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#24.39.95':445
'20#.#24.19.189':445
'20#.#24.151.165':445
'20#.#24.46.81':445
'20#.#24.132.10':445
'20#.#24.169.149':445
'20#.#24.124.184':445
'20#.#24.93.246':445
'20#.#24.134.175':445
'20#.#24.214.72':445
'20#.#24.242.92':445
'20#.#24.147.251':445
'20#.#24.207.47':445
'20#.#24.34.108':445
'20#.#24.181.142':445
'20#.#24.160.181':445
'20#.#24.57.228':445
'20#.#24.139.168':445
'20#.#24.69.240':445
'20#.#24.21.159':445
'20#.#24.190.0':445
'20#.#24.47.66':445
'20#.#24.10.141':445
'20#.#24.124.199':445
'20#.#24.201.64':445
'20#.#24.193.226':139
'20#.#24.146.194':139
'20#.#24.211.227':139
'20#.#24.89.20':445
'20#.#24.225.88':139
'20#.#24.30.60':139
'20#.#24.78.192':139
'20#.#24.173.153':139
'20#.#24.225.88':445
'20#.#24.26.108':139
'20#.#24.51.76':139
'20#.#24.86.99':139
'20#.#24.20.211':445
'20#.#24.245.166':445
'20#.#24.23.182':445
'20#.#24.33.143':445
'20#.#24.87.21':445
'20#.#24.162.209':445
'20#.#24.87.217':445
'20#.#24.56.215':445
'20#.224.6.1':445
'20#.#24.211.5':445
'20#.#24.78.6':445
'20#.#24.10.178':445
'20#.#24.42.37':445
'20#.#24.227.220':445
'20#.#24.10.141':139
'20#.#24.124.199':139
'20#.#24.201.64':139
'20#.#24.34.108':139
'20#.#24.181.142':139
'20#.#24.160.181':139
'20#.#24.207.47':139
'20#.#24.46.81':139
'20#.#24.132.10':139
'20#.#24.21.159':139
'20#.#24.190.0':139
'20#.#24.47.66':139
'20#.#24.69.240':139
'20#.#24.23.230':445
'20#.#24.50.74':445
'20#.#24.116.133':445
'20#.#24.7.73':445
'20#.#24.76.2':445
'20#.#24.230.75':445
'20#.#24.227.220':139
'20#.#24.57.228':139
'20#.#24.139.168':139
'20#.#24.37.176':445
'20#.#24.20.43':445
'20#.#24.5.116':139
'20#.#24.78.6':139
'20#.#24.10.178':139
'20#.#24.42.37':139
'20#.#24.245.166':139
'20#.#24.23.182':139
'20#.#24.33.143':139
'20#.#24.20.211':139
'20#.#24.89.20':139
'20#.#24.5.116':445
'20#.#24.56.215':139
'20#.224.6.1':139
'20#.#24.211.5':139
'20#.#24.87.217':139
'20#.#24.151.165':139
'20#.#24.214.72':139
'20#.#24.242.92':139
'20#.#24.169.149':139
'20#.#24.39.95':139
'20#.#24.19.189':139
'20#.#24.134.175':139
'20#.#24.87.21':139
'20#.#24.162.209':139
'20#.#24.147.251':139
'20#.#24.124.184':139
'20#.#24.93.246':139
'20#.#24.21.173':445
'20#.#24.165.184':445
'20#.#24.119.165':445
'20#.#24.6.254':445
'20#.#24.121.40':445
'20#.#24.24.34':445
'20#.#24.148.224':445
'20#.#24.41.249':445
'20#.#24.162.15':445
'20#.#24.39.33':445
'20#.#24.184.222':445
'20#.#24.138.70':445
'20#.#24.167.236':445
'20#.#24.20.131':445
'20#.#24.49.163':445
'20#.#24.16.116':445
'20#.#24.101.129':445
'20#.#24.179.101':445
'20#.#24.35.99':445
'20#.#24.43.6':445
'20#.#24.163.135':445
'20#.#24.153.156':445
'20#.#24.134.188':445
'20#.#24.126.234':445
'20#.#24.140.248':445
'20#.#24.65.240':139
'20#.#24.90.114':139
'20#.#24.95.58':139
'20#.#24.163.206':445
'20#.#24.166.103':445
'20#.#24.102.147':139
'20#.#24.116.137':139
'20#.#24.44.193':139
'20#.#24.14.159':139
'20#.#24.0.213':139
'20#.#24.65.0':139
'20#.#24.137.64':139
'20#.#24.206.136':445
'20#.#24.4.181':445
'20#.#24.110.219':445
'20#.#24.175.227':445
'20#.#24.112.49':445
'20#.#24.167.65':445
'20#.#24.220.81':445
'20#.#24.10.147':445
'20#.#24.216.16':445
'20#.#24.24.75':445
'20#.#24.179.61':445
'20#.#24.218.199':445
'20#.#24.252.4':445
'20#.#24.129.23':445
'20#.#24.134.188':139
'20#.#24.126.234':139
'20#.#24.140.248':139
'20#.#24.20.131':139
'20#.#24.49.163':139
'20#.#24.16.116':139
'20#.#24.167.236':139
'20#.#24.6.254':139
'20#.#24.121.40':139
'20#.#24.43.6':139
'20#.#24.163.135':139
'20#.#24.153.156':139
'20#.#24.35.99':139
'20#.#24.211.227':445
'20#.#24.26.108':445
'20#.#24.51.76':445
'20#.#24.30.60':445
'20#.#24.193.226':445
'20#.#24.146.194':445
'20#.#24.129.23':139
'20#.#24.101.129':139
'20#.#24.179.101':139
'20#.#24.86.99':445
'20#.#24.78.192':445
'20#.#24.173.153':445
'20#.#24.179.61':139
'20#.#24.218.199':139
'20#.#24.252.4':139
'20#.#24.4.181':139
'20#.#24.110.219':139
'20#.#24.175.227':139
'20#.#24.206.136':139
'20#.#24.163.206':139
'20#.#24.166.103':139
'20#.#24.10.147':139
'20#.#24.216.16':139
'20#.#24.24.75':139
'20#.#24.220.81':139
'20#.#24.119.165':139
'20#.#24.39.33':139
'20#.#24.184.222':139
'20#.#24.24.34':139
'20#.#24.21.173':139
'20#.#24.165.184':139
'20#.#24.162.15':139
'20#.#24.112.49':139
'20#.#24.167.65':139
'20#.#24.138.70':139
'20#.#24.148.224':139
'20#.#24.41.249':139
'20#.#24.224.203':445
'20#.#24.146.114':445
'20#.#24.57.42':445
'20#.#24.37.8':445
'20#.#24.174.100':445
'20#.#24.203.180':445
'20#.#24.34.144':445
'20#.#24.216.35':445
'20#.#24.214.215':445
'20#.#24.22.12':445
'20#.#24.162.47':445
'20#.#24.144.162':445
'20#.#24.187.72':445
'20#.#24.228.109':445
'20#.#24.111.25':445
'20#.#24.59.175':445
'20#.#24.151.187':445
'20#.#24.151.151':445
'20#.#24.187.228':445
'20#.#24.237.126':445
'20#.#24.68.38':445
'20#.#24.146.251':445
'20#.#24.223.25':445
'20#.#24.124.239':445
'20#.#24.127.93':445
'20#.#24.188.113':445
'20#.#24.98.220':445
'20#.#24.177.202':445
'20#.#24.140.187':445
'20#.#24.27.188':445
'20#.#24.26.3':445
'20#.#24.164.70':445
'20#.#24.188.135':445
'20#.#24.64.141':445
'20#.#24.19.178':445
'20#.#24.137.5':445
'20#.#24.164.72':445
'20#.#24.2.41':445
'20#.#24.131.104':445
'20#.#24.67.199':445
'20#.#24.126.67':445
'20#.#24.215.79':445
'20#.#24.212.43':445
'20#.#24.9.187':445
'20#.#24.192.147':445
'20#.#24.229.141':445
'20#.#24.135.91':445
'20#.#24.58.55':445
'20#.#24.198.205':445
'20#.#24.238.55':445
'20#.#24.69.195':139
'20#.#24.224.203':139
'20#.#24.146.114':139
'20#.#24.57.42':139
'20#.#24.37.8':139
'20#.#24.174.100':139
'20#.#24.203.180':139
'20#.#24.34.144':139
'20#.#24.216.35':139
'20#.#24.214.215':139
'20#.#24.22.12':139
'20#.#24.162.47':139
'20#.#24.144.162':139
'20#.#24.187.72':139
'20#.#24.151.151':139
'20#.#24.111.25':139
'20#.#24.59.175':139
'20#.#24.187.228':139
'20#.#24.228.109':139
'20#.#24.151.187':139
'20#.#24.237.126':139
'20#.#24.68.38':139
'20#.#24.146.251':139
'20#.#24.223.25':139
'20#.#24.124.239':139
'20#.#24.127.93':139
'20#.#24.188.113':139
'20#.#24.98.220':139
'20#.#24.177.202':139
'20#.#24.140.187':139
'20#.#24.27.188':139
'20#.#24.26.3':139
'20#.#24.164.70':139
'20#.#24.188.135':139
'20#.#24.64.141':139
'20#.#24.19.178':139
'20#.#24.137.5':139
'20#.#24.164.72':139
'20#.#24.2.41':139
'20#.#24.131.104':139
'20#.#24.67.199':139
'20#.#24.126.67':139
'20#.#24.215.79':139
'20#.#24.212.43':139
'20#.#24.9.187':139
'20#.#24.192.147':139
'20#.#24.229.141':139
'20#.#24.135.91':139
'20#.#24.58.55':139
'20#.#24.198.205':139
'20#.#24.238.55':139
'20#.#24.146.144':445
'20#.#24.131.116':445
'20#.#24.211.20':445
'20#.#24.227.69':445
'20#.#24.169.102':445
'20#.#24.129.178':445
'20#.#24.84.176':445
'20#.#24.65.159':445
'20#.#24.9.32':445
'20#.#24.197.117':445
'20#.#24.15.247':445
'20#.#24.176.104':445
'20#.#24.74.148':445
'20#.#24.115.117':445
'20#.#24.182.135':445
'20#.#24.66.236':445
'20#.#24.234.159':445
'20#.#24.51.175':445
'20#.#24.175.3':445
'20#.#24.105.246':445
'20#.#24.33.218':445
'20#.#24.150.190':445
'20#.#24.24.243':445
'20#.#24.173.63':445
'20#.#24.48.194':445
'20#.#24.76.2':139
'20#.#24.230.75':139
'20#.#24.23.230':139
'20#.#24.229.121':139
'20#.#24.231.240':139
'20#.#24.7.73':139
'20#.#24.20.43':139
'20#.#24.229.121':445
'20#.#24.231.240':445
'20#.#24.50.74':139
'20#.#24.116.133':139
'20#.#24.37.176':139
'20#.#24.52.136':445
'20#.#24.168.114':445
'20#.#24.2.75':445
'20#.#24.22.79':445
'20#.#24.4.56':445
'20#.#24.50.214':445
'20#.#24.7.230':445
'20#.#24.3.52':445
'20#.#24.35.180':445
'20#.#24.218.36':445
'20#.#24.17.177':445
'20#.#24.209.57':445
'20#.#24.239.233':445
'20#.#24.120.55':445
'20#.#24.24.243':139
'20#.#24.173.63':139
'20#.#24.48.194':139
'20#.#24.115.117':139
'20#.#24.182.135':139
'20#.#24.66.236':139
'20#.#24.74.148':139
'20#.#24.227.69':139
'20#.#24.169.102':139
'20#.#24.105.246':139
'20#.#24.33.218':139
'20#.#24.150.190':139
'20#.#24.175.3':139
'20#.#24.238.55':9988
'20#.#24.188.113':9988
'20#.#24.164.72':9988
'20#.#24.69.195':445
'20#.#24.228.109':9988
'20#.#24.151.151':9988
'20#.#24.120.55':139
'20#.#24.234.159':139
'20#.#24.51.175':139
'20#.#24.69.195':9988
'20#.#24.214.142':139
'20#.#24.39.25':139
'20#.#24.17.177':139
'20#.#24.209.57':139
'20#.#24.239.233':139
'20#.#24.168.114':139
'20#.#24.2.75':139
'20#.#24.22.79':139
'20#.#24.52.136':139
'20#.#24.214.142':445
'20#.#24.39.25':445
'20#.#24.3.52':139
'20#.#24.35.180':139
'20#.#24.218.36':139
'20#.#24.7.230':139
'20#.#24.211.20':139
'20#.#24.197.117':139
'20#.#24.15.247':139
'20#.#24.129.178':139
'20#.#24.146.144':139
'20#.#24.131.116':139
'20#.#24.9.32':139
'20#.#24.4.56':139
'20#.#24.50.214':139
'20#.#24.176.104':139
'20#.#24.84.176':139
'20#.#24.65.159':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней