Trojan.DownLoader12.28930

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER9ec0.dir00\svchost.exe.mdmp 16325836412028836

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER9ec0.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#71.129.170':139
'22#.#71.149.81':139
'22#.#71.11.184':139
'22#.#71.160.31':139
'22#.#71.43.204':139
'22#.#71.58.93':139
'22#.#71.193.173':139
'22#.#71.170.131':139
'22#.#71.95.82':139
'22#.#71.131.229':139
'22#.#71.12.59':139
'22#.#71.93.158':139
'22#.#71.148.3':139
'22#.#71.48.6':139
'22#.#71.107.198':139
'22#.#71.27.108':139
'22#.#71.233.241':139
'22#.#71.197.221':139
'22#.#71.193.37':139
'22#.#71.25.220':139
'22#.#71.89.59':139
'22#.#71.233.241':445
'22#.#71.197.221':445
'22#.#71.193.37':445
'22#.#71.25.220':445
'22#.#71.89.59':445
'22#.#71.11.184':445
'22#.#71.129.170':445
'22#.#71.43.204':445
'22#.#71.12.59':445
'22#.#71.160.31':445
'22#.#71.148.3':445
'22#.#71.44.39':445
'22#.#71.121.177':445
'22#.#71.200.75':139
'22#.#71.78.33':139
'22#.#71.75.78':139
'22#.#71.48.6':445
'22#.#71.93.158':445
'22#.#71.27.108':445
'22#.#71.126.94':445
'22#.#71.107.198':445
'22#.#71.156.192':139
'22#.#71.17.63':445
'22#.#71.26.162':139
'22#.#71.62.151':139
'22#.#71.28.239':139
'22#.#71.191.73':445
'22#.#71.75.191':445
'22#.#71.74.27':445
'22#.#71.9.54':445
'22#.#71.92.16':445
'22#.#71.172.207':139
'22#.#71.183.121':139
'22#.#71.102.26':139
'22#.#71.83.184':139
'22#.#71.57.35':139
'22#.#71.166.25':139
'22#.#71.99.123':139
'22#.#71.161.83':139
'22#.#71.30.182':139
'22#.#71.75.139':139
'22#.171.8.2':139
'22#.#71.62.151':445
'22#.#71.28.239':445
'22#.#71.172.207':445
'22#.#71.99.123':445
'22#.#71.161.83':445
'22#.#71.121.177':139
'22#.#71.126.94':139
'22#.#71.44.39':139
'22#.#71.26.162':445
'22#.#71.156.192':445
'22#.#71.30.182':445
'22#.#71.57.35':445
'22#.#71.166.25':445
'22#.#71.12.103':445
'22#.#71.2.226':445
'22#.#71.32.74':445
'22#.#71.75.139':445
'22#.171.8.2':445
'22#.#71.102.26':445
'22#.#71.83.184':445
'22#.#71.183.121':445
'22#.#71.139.30':445
'22#.#71.46.45':139
'22#.#71.161.195':445
'22#.#71.34.244':445
'22#.#71.223.185':445
'22#.#71.8.233':139
'22#.#71.177.216':139
'22#.#71.125.218':139
'22#.#71.7.121':139
'22#.#71.212.7':139
'22#.#71.15.175':445
'22#.#71.97.230':445
'22#.#71.167.133':445
'22#.#71.118.206':445
'22#.#71.186.162':445
'22#.#71.21.117':445
'22#.#71.210.239':445
'22#.#71.167.116':445
'22#.#71.183.195':445
'22#.#71.150.205':445
'22#.#71.106.104':445
'22#.#71.104.24':139
'22#.#71.125.104':139
'22#.#71.24.94':139
'22#.#71.89.50':139
'22#.#71.66.9':139
'22#.#71.47.209':139
'22#.#71.34.76':139
'22#.#71.182.85':139
'22#.#71.145.108':139
'22#.#71.230.196':139
'22#.#71.115.161':139
'22#.#71.237.198':139
'22#.#71.242.138':139
'22#.#71.70.213':139
'22#.#71.186.15':139
'22#.#71.217.61':139
'22#.#71.194.176':139
'22#.#71.102.194':139
'22#.#71.176.167':139
'22#.#71.112.242':139
'22#.#71.168.112':139
'22#.#71.103.149':139
'22#.#71.40.104':139
'22#.#71.3.203':139
'22#.#71.140.31':139
'22#.#71.114.225':139
'22#.#71.21.117':139
'22#.#71.118.206':139
'22#.#71.186.162':139
'22#.#71.73.174':139
'22#.#71.18.185':139
'22#.#71.47.205':139
'22#.#71.170.131':445
'22#.#71.58.93':445
'22#.#71.131.229':445
'22#.#71.149.81':445
'22#.#71.95.82':445
'22#.#71.200.75':445
'22#.#71.85.221':139
'22#.#71.75.78':445
'22#.#71.193.173':445
'22#.#71.78.33':445
'22#.#71.140.31':445
'22#.#71.114.225':445
'22#.#71.47.205':445
'22#.#71.139.30':139
'22#.#71.85.221':445
'22#.#71.73.174':445
'22#.#71.18.185':445
'22#.#71.40.104':445
'22#.#71.3.203':445
'22#.#71.103.149':445
'22#.#71.161.195':139
'22#.#71.106.104':139
'22#.#71.183.195':139
'22#.#71.150.205':139
'22#.#71.97.230':139
'22#.#71.167.133':139
'22#.#71.34.244':139
'22#.#71.223.185':139
'22#.#71.15.175':139
'22#.#71.210.239':139
'22#.#71.167.116':139
'22#.#71.168.83':445
'22#.#71.170.180':445
'22#.#71.92.178':445
'22#.#71.70.124':445
'22#.#71.110.167':445
'22#.#71.73.232':445
'22#.#71.133.73':445
'22#.#71.165.184':445
'22#.#71.118.230':445
'22#.#71.169.47':445
'22#.#71.38.132':445
'22#.#71.205.200':139
'22#.#71.162.190':139
'22#.#71.62.88':139
'22#.#71.1.62':139
'22#.#71.13.242':139
'22#.#71.128.123':139
'22#.#71.8.185':445
'22#.#71.20.156':139
'22#.#71.255.105':139
'22#.#71.49.18':139
'22#.#71.97.115':445
'22#.#71.45.95':445
'22#.#71.115.104':445
'22#.#71.126.80':445
'22#.#71.61.152':445
'22#.#71.114.79':445
'22#.#71.50.66':445
'22#.#71.226.81':445
'22#.#71.40.158':445
'22#.#71.99.176':445
'22#.#71.80.214':445
'22#.#71.21.131':445
'22#.#71.201.21':445
'22#.#71.131.77':445
'22#.#71.175.37':445
'22#.#71.25.139':445
'22#.#71.182.61':445
'22#.#71.85.228':445
'22#.#71.62.46':445
'22#.#71.53.138':445
'22#.#71.45.168':445
'22#.#71.131.77':139
'22#.#71.21.131':139
'22#.#71.25.139':139
'22#.#71.133.73':139
'22#.#71.175.37':139
'22#.#71.62.46':139
'22#.#71.182.61':139
'22#.#71.45.168':139
'22#.#71.201.21':139
'22#.#71.53.138':139
'22#.#71.73.232':139
'22#.#71.110.167':139
'22#.#71.92.178':139
'22#.#71.70.124':139
'22#.#71.8.185':139
'22#.#71.38.132':139
'22#.#71.169.47':139
'22#.#71.165.184':139
'22#.#71.118.230':139
'22#.#71.168.83':139
'22#.#71.170.180':139
'22#.#71.235.92':139
'22#.#71.14.235':139
'22#.#71.212.243':139
'22#.#71.50.66':139
'22#.#71.129.52':139
'22#.#71.69.94':139
'22#.#71.9.161':139
'22#.#71.106.234':139
'22#.#71.12.15':139
'22#.#71.28.213':139
'22#.#71.114.79':139
'22#.#71.61.152':139
'22#.#71.115.104':139
'22#.#71.126.80':139
'22#.#71.85.228':139
'22#.#71.80.214':139
'22#.#71.99.176':139
'22#.#71.226.81':139
'22#.#71.40.158':139
'22#.#71.97.115':139
'22#.#71.45.95':139
'22#.#71.10.79':445
'22#.#71.198.165':445
'22#.#71.22.129':445
'22#.#71.192.6':139
'22#.#71.218.185':445
'22#.#71.188.142':445
'22#.#71.155.166':445
'22#.#71.238.107':445
'22#.#71.122.143':445
'22#.#71.0.229':445
'22#.#71.242.20':139
'22#.#71.13.233':139
'22#.#71.30.179':139
'22#.#71.195.23':139
'22#.#71.18.131':139
'22#.#71.95.80':139
'22#.#71.173.231':139
'22#.#71.166.87':139
'22#.#71.191.235':139
'22#.#71.193.116':139
'22#.#71.96.198':139
'22#.#71.92.16':139
'22#.#71.74.27':139
'22#.#71.9.54':139
'22#.#71.192.6':445
'22#.#71.17.63':139
'22#.#71.32.74':139
'22#.#71.12.103':139
'22#.#71.2.226':139
'22#.#71.191.73':139
'22#.#71.75.191':139
'22#.#71.242.20':445
'22#.#71.13.233':445
'22#.#71.30.179':445
'22#.#71.195.23':445
'22#.#71.18.131':445
'22#.#71.95.80':445
'22#.#71.173.231':445
'22#.#71.166.87':445
'22#.#71.191.235':445
'22#.#71.193.116':445
'22#.#71.96.198':445
'22#.#71.255.105':445
'22#.#71.49.18':445
'22#.#71.162.190':445
'22#.#71.62.88':445
'22#.#71.205.200':445
'22#.#71.38.132':9988
'22#.#71.70.124':9988
'22#.#71.8.185':9988
'22#.#71.20.156':445
'22#.#71.128.123':445
'22#.#71.13.242':445
'22#.#71.14.235':445
'22#.#71.12.15':445
'22#.#71.235.92':445
'22#.#71.129.52':445
'22#.#71.212.243':445
'22#.#71.9.161':445
'22#.#71.1.62':445
'22#.#71.69.94':445
'22#.#71.28.213':445
'22#.#71.106.234':445
'22#.#71.10.79':139
'22#.#71.198.165':139
'22#.#71.22.129':139
'22#.#71.1.62':9988
'22#.#71.218.185':139
'22#.#71.188.142':139
'22#.#71.155.166':139
'22#.#71.238.107':139
'22#.#71.122.143':139
'22#.#71.0.229':139
'22#.#71.69.94':9988
'22#.#71.131.77':9988
'22#.#71.21.131':9988
'22#.#71.175.37':9988
'22#.#71.73.232':9988
'22#.#71.25.139':9988
'22#.#71.115.104':9988
'22#.#71.129.52':9988
'22#.#71.45.168':9988
'22#.#71.201.21':9988
'22#.#71.53.138':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней