Trojan.DownLoader12.28896

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERbc4e.dir00\svchost.exe.mdmp 16325836412032356

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERbc4e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#51.95.123':445
'21#.#51.65.22':139
'21#.#51.155.69':139
'21#.#51.108.230':445
'21#.#51.223.108':445
'21#.#51.123.223':445
'21#.#51.184.106':139
'21#.#51.96.64':139
'21#.#51.180.107':139
'21#.#51.76.154':139
'21#.#51.69.32':139
'21#.#51.239.49':139
'21#.#51.62.185':445
'21#.#51.47.155':445
'21#.#51.30.36':445
'21#.#51.96.59':445
'21#.#51.215.235':445
'21#.#51.255.141':445
'21#.#51.145.53':445
'21#.#51.164.213':445
'21#.#51.231.7':445
'21#.#51.253.29':445
'21#.#51.32.253':445
'21#.#51.8.34':445
'21#.#51.234.235':139
'21#.#51.135.158':139
'21#.#51.111.86':139
'21#.#51.66.1':139
'21#.#51.74.115':139
'21#.#51.221.66':139
'21#.#51.9.237':139
'21#.#51.65.22':445
'21#.#51.155.69':445
'21#.#51.76.154':445
'21#.#51.131.254':139
'21#.#51.214.11':139
'21#.#51.230.26':139
'21#.#51.2.168':139
'21#.#51.115.64':139
'21#.#51.228.127':139
'21#.#51.177.124':139
'21#.#51.224.109':139
'21#.#51.53.111':139
'21#.#51.40.167':139
'21#.#51.76.127':139
'21#.#51.66.241':139
'21#.#51.124.253':139
'21#.#51.221.201':139
'21#.#51.228.144':139
'21#.#51.230.7':445
'21#.#51.104.42':445
'21#.#51.235.100':445
'21#.#51.104.104':445
'21#.#51.220.100':445
'21#.#51.199.119':445
'21#.#51.115.94':445
'21#.#51.160.76':445
'21#.#51.3.160':445
'21#.#51.9.106':445
'21#.#51.179.203':445
'21#.#51.9.19':445
'21#.#51.47.175':445
'21#.#51.87.128':445
'21#.#51.210.38':445
'21#.#51.186.184':445
'21#.#51.67.64':445
'21#.#51.157.66':445
'21#.#51.132.4':445
'21#.#51.225.123':445
'21#.#51.207.224':445
'21#.#51.143.14':445
'21#.#51.89.97':445
'21#.#51.188.47':445
'21#.#51.6.56':445
'21#.#51.11.66':139
'21#.#51.231.7':139
'21#.#51.108.230':139
'21#.#51.223.108':139
'21#.#51.8.34':139
'21#.#51.145.53':139
'21#.#51.164.213':139
'21#.#51.58.184':445
'21#.#51.103.58':445
'21#.#51.12.209':445
'21#.#51.123.223':139
'21#.#51.95.123':139
'21#.#51.11.66':445
'21#.#51.230.7':139
'21#.#51.96.59':139
'21#.#51.215.235':139
'21#.#51.58.184':139
'21#.#51.103.58':139
'21#.#51.12.209':139
'21#.#51.30.36':139
'21#.#51.253.29':139
'21#.#51.32.253':139
'21#.#51.255.141':139
'21#.#51.62.185':139
'21#.#51.47.155':139
'21#.#51.144.81':445
'21#.#51.35.145':445
'21#.#51.63.50':445
'21#.#51.136.174':445
'21#.#51.53.145':445
'21#.#51.47.56':445
'21#.#51.247.221':139
'21#.#51.105.7':139
'21#.#51.95.247':139
'21#.#51.218.16':445
'21#.#51.3.235':139
'21#.#51.221.206':139
'21#.#51.8.246':445
'21#.#51.44.9':445
'21#.#51.254.43':445
'21#.#51.28.179':445
'21#.#51.134.6':445
'21#.#51.245.133':445
'21#.#51.103.252':445
'21#.#51.18.31':445
'21#.#51.177.191':445
'21#.#51.14.144':445
'21#.#51.41.190':445
'21#.#51.128.15':445
'21#.#51.118.87':139
'21#.#51.107.112':139
'21#.#51.230.182':139
'21#.#51.229.150':139
'21#.#51.101.129':139
'21#.#51.51.168':139
'21#.#51.73.18':139
'21#.#51.181.248':139
'21#.#51.81.79':139
'21#.#51.211.205':139
'21#.#51.225.18':139
'21#.#51.156.38':139
'21#.#51.67.134':139
'21#.#51.31.196':139
'21#.#51.125.204':139
'21#.#51.245.125':139
'21#.#51.108.156':139
'21#.#51.11.181':139
'21#.#51.125.11':139
'21#.#51.150.180':139
'21#.#51.227.150':139
'21#.#51.233.148':139
'21#.#51.7.245':139
'21#.#51.76.8':139
'21#.#51.180.75':139
'21#.#51.15.145':445
'21#.#51.40.167':445
'21#.#51.76.127':445
'21#.#51.66.241':445
'21#.#51.124.253':445
'21#.#51.221.201':445
'21#.#51.228.144':445
'21#.#51.135.158':445
'21#.#51.111.86':445
'21#.#51.66.1':445
'21#.#51.74.115':445
'21#.#51.221.66':445
'21#.#51.9.237':445
'21#.#51.96.64':445
'21#.#51.180.107':445
'21#.#51.234.235':445
'21#.#51.69.32':445
'21#.#51.239.49':445
'21#.#51.184.106':445
'21#.#51.2.168':445
'21#.#51.115.64':445
'21#.#51.228.127':445
'21#.#51.177.124':445
'21#.#51.224.109':445
'21#.#51.53.111':445
'21#.#51.131.254':445
'21#.#51.177.191':139
'21#.#51.136.174':139
'21#.#51.53.145':139
'21#.#51.128.15':139
'21#.#51.103.252':139
'21#.#51.18.31':139
'21#.#51.63.50':139
'21#.#51.218.16':139
'21#.#51.182.239':445
'21#.#51.47.56':139
'21#.#51.144.81':139
'21#.#51.35.145':139
'21#.#51.15.145':139
'21#.#51.28.179':139
'21#.#51.134.6':139
'21#.#51.214.11':445
'21#.#51.230.26':445
'21#.#51.182.239':139
'21#.#51.254.43':139
'21#.#51.14.144':139
'21#.#51.41.190':139
'21#.#51.245.133':139
'21#.#51.8.246':139
'21#.#51.44.9':139
'21#.#51.4.45':445
'21#.#51.242.208':445
'21#.#51.132.252':445
'21#.#51.150.186':445
'21#.#51.91.243':445
'21#.#51.23.202':445
'21#.#51.53.113':445
'21#.#51.157.148':445
'21#.#51.91.47':445
'21#.#51.106.169':445
'21#.#51.8.106':445
'21#.#51.176.7':445
'21#.#51.196.13':445
'21#.#51.194.110':445
'21#.#51.13.104':445
'21#.#51.184.168':139
'21#.#51.150.138':445
'21#.#51.29.154':445
'21#.#51.147.116':445
'21#.#51.8.238':445
'21#.#51.186.9':445
'21#.#51.19.165':445
'21#.#51.57.178':445
'21#.#51.117.33':445
'21#.#51.0.194':445
'21#.#51.179.108':445
'21#.#51.230.186':445
'21#.#51.155.230':445
'21#.#51.117.11':445
'21#.#51.95.245':445
'21#.#51.198.17':445
'21#.#51.149.84':445
'21#.#51.189.225':445
'21#.#51.77.21':445
'21#.#51.113.64':445
'21#.#51.225.128':445
'21#.#51.84.234':445
'21#.#51.9.181':445
'21#.#51.32.196':445
'21#.#51.204.32':445
'21#.#51.30.20':445
'21#.#51.12.167':445
'21#.#51.210.59':445
'21#.#51.191.74':445
'21#.#51.216.30':445
'21#.#51.120.176':445
'21#.#51.59.147':445
'21#.#51.254.130':445
'21#.#51.89.9':445
'21#.#51.51.23':139
'21#.#51.242.208':139
'21#.#51.132.252':139
'21#.#51.106.169':139
'21#.#51.91.243':139
'21#.#51.23.202':139
'21#.#51.4.45':139
'21#.#51.157.148':139
'21#.#51.91.47':139
'21#.#51.0.194':139
'21#.#51.8.106':139
'21#.#51.176.7':139
'21#.#51.53.113':139
'21#.#51.194.110':139
'21#.#51.13.104':139
'21#.#51.19.165':139
'21#.#51.150.138':139
'21#.#51.196.13':139
'21#.#51.29.154':139
'21#.#51.8.238':139
'21#.#51.186.9':139
'21#.#51.150.186':139
'21#.#51.57.178':139
'21#.#51.117.33':139
'21#.#51.147.116':139
'21#.#51.30.20':139
'21#.#51.230.186':139
'21#.#51.155.230':139
'21#.#51.113.64':139
'21#.#51.95.245':139
'21#.#51.198.17':139
'21#.#51.179.108':139
'21#.#51.189.225':139
'21#.#51.77.21':139
'21#.#51.45.195':139
'21#.#51.225.128':139
'21#.#51.84.234':139
'21#.#51.149.84':139
'21#.#51.32.196':139
'21#.#51.204.32':139
'21#.#51.59.147':139
'21#.#51.12.167':139
'21#.#51.210.59':139
'21#.#51.9.181':139
'21#.#51.216.30':139
'21#.#51.120.176':139
'21#.#51.117.11':139
'21#.#51.254.130':139
'21#.#51.89.9':139
'21#.#51.191.74':139
'21#.#51.43.188':139
'21#.#51.164.88':139
'21#.#51.127.7':139
'21#.#51.73.210':445
'21#.#51.55.190':139
'21#.#51.187.111':139
'21#.#51.132.4':139
'21#.#51.87.128':139
'21#.#51.210.38':139
'21#.#51.102.69':139
'21#.#51.67.64':139
'21#.#51.157.66':139
'21#.#51.24.217':445
'21#.#51.101.190':445
'21#.#51.114.197':445
'21#.#51.226.40':445
'21#.#51.49.134':445
'21#.#51.217.140':445
'21#.#51.217.101':445
'21#.#51.15.165':445
'21#.#51.121.143':445
'21#.#51.103.226':445
'21#.#51.94.208':445
'21#.#51.246.158':445
'21#.#51.186.184':139
'21#.#51.160.76':139
'21#.#51.3.160':139
'21#.#51.9.106':139
'21#.#51.179.203':139
'21#.#51.9.19':139
'21#.#51.47.175':139
'21#.#51.164.88':445
'21#.#51.127.7':445
'21#.#51.102.69':445
'21#.#51.55.190':445
'21#.#51.187.111':445
'21#.#51.43.188':445
'21#.#51.225.123':139
'21#.#51.207.224':139
'21#.#51.143.14':139
'21#.#51.89.97':139
'21#.#51.188.47':139
'21#.#51.6.56':139
'21#.#51.104.42':139
'21#.#51.235.100':139
'21#.#51.104.104':139
'21#.#51.220.100':139
'21#.#51.199.119':139
'21#.#51.115.94':139
'21#.#51.3.24':445
'21#.#51.30.20':9988
'21#.#51.12.167':9988
'21#.#51.254.130':9988
'21#.#51.8.106':9988
'21#.#51.176.7':9988
'21#.#51.91.47':9988
'21#.#51.162.200':139
'21#.#51.37.192':139
'21#.#51.227.38':139
'21#.#51.120.176':9988
'21#.#51.149.84':9988
'21#.#51.184.168':9988
'21#.#51.13.104':9988
'21#.#51.29.154':9988
'21#.#51.19.165':9988
'21#.#51.45.195':445
'21#.#51.51.23':445
'21#.#51.184.168':445
'21#.#51.242.208':9988
'21#.#51.132.252':9988
'21#.#51.106.169':9988
'21#.#51.57.178':9988
'21#.#51.23.202':9988
'21#.#51.4.45':9988
'21#.#51.113.227':139
'21#.#51.121.143':139
'21#.#51.73.210':139
'21#.#51.162.200':445
'21#.#51.246.158':139
'21#.#51.217.101':139
'21#.#51.15.165':139
'21#.#51.180.172':445
'21#.#51.103.231':445
'21#.#51.107.9':445
'21#.#51.37.192':445
'21#.#51.227.38':445
'21#.#51.113.227':445
'21#.#51.3.24':139
'21#.#51.226.40':139
'21#.#51.49.134':139
'21#.#51.180.172':139
'21#.#51.103.231':139
'21#.#51.107.9':139
'21#.#51.114.197':139
'21#.#51.103.226':139
'21#.#51.94.208':139
'21#.#51.217.140':139
'21#.#51.24.217':139
'21#.#51.101.190':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней