Trojan.DownLoader12.29028

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc777.dir00\svchost.exe.mdmp 16325836412031932

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#6.221.164':139
'20#.#6.142.185':139
'20#.#6.170.235':139
'20#.96.9.87':139
'20#.#6.165.111':139
'20#.#6.14.189':139
'20#.#6.36.155':139
'20#.#6.139.163':139
'20#.#6.136.251':139
'20#.#6.51.39':139
'20#.#6.15.228':139
'20#.#6.177.149':445
'20#.#6.206.207':445
'20#.#6.149.41':445
'20#.#6.68.29':445
'20#.#6.41.68':445
'20#.#6.149.32':139
'20#.#6.219.148':139
'20#.#6.33.10':139
'20#.#6.85.202':139
'20#.#6.10.85':139
'20#.#6.221.164':445
'20#.#6.142.185':445
'20#.#6.170.235':445
'20#.96.9.87':445
'20#.#6.165.111':445
'20#.#6.14.189':445
'20#.#6.36.155':445
'20#.#6.139.163':445
'20#.#6.136.251':445
'20#.#6.51.39':445
'20#.#6.15.228':445
'20#.#6.82.158':139
'20#.#6.211.254':139
'20#.96.2.95':139
'20#.#6.180.140':139
'20#.#6.115.133':139
'20#.#6.149.32':445
'20#.#6.219.148':445
'20#.#6.33.10':445
'20#.#6.85.202':445
'20#.#6.10.85':445
'20#.#6.29.151':445
'20#.#6.41.68':139
'20#.#6.149.41':139
'20#.#6.68.29':139
'20#.#6.151.113':139
'20#.#6.29.151':139
'20#.#6.53.191':445
'20#.#6.181.245':445
'20#.#6.14.154':445
'20#.#6.177.149':139
'20#.#6.206.207':139
'20#.#6.113.72':139
'20#.#6.154.19':139
'20#.#6.104.99':139
'20#.#6.38.205':139
'20#.#6.102.227':139
'20#.#6.205.200':139
'20#.#6.14.182':139
'20#.#6.161.132':139
'20#.#6.76.212':139
'20#.#6.103.104':139
'20#.#6.35.176':139
'20#.#6.103.104':445
'20#.#6.35.176':445
'20#.#6.104.99':445
'20#.#6.38.205':445
'20#.#6.154.19':445
'20#.#6.113.72':445
'20#.#6.151.113':445
'20#.#6.161.132':445
'20#.#6.76.212':445
'20#.#6.14.182':445
'20#.#6.205.200':445
'20#.#6.4.105':445
'20#.#6.77.246':445
'20#.#6.184.198':445
'20#.#6.232.116':445
'20#.#6.19.108':445
'20#.#6.70.33':445
'20#.#6.102.227':445
'20#.#6.33.60':445
'20#.#6.13.212':445
'20#.#6.150.4':445
'20#.#6.180.140':445
'20#.#6.244.157':445
'20#.#6.213.195':445
'20#.#6.182.111':445
'20#.#6.33.137':445
'20#.#6.103.41':445
'20#.#6.158.233':445
'20#.#6.124.158':445
'20#.#6.233.129':445
'20#.#6.115.214':445
'20#.#6.130.115':445
'20#.#6.99.28':445
'20#.#6.209.83':445
'20#.#6.28.93':445
'20#.#6.224.46':445
'20#.#6.219.225':445
'20#.96.55.8':445
'20#.#6.30.144':445
'20#.#6.183.130':445
'20#.#6.69.223':445
'20#.#6.73.14':445
'20#.#6.63.196':445
'20#.#6.42.25':139
'20#.#6.150.70':139
'20#.#6.91.139':139
'20#.#6.91.122':139
'20#.#6.80.119':139
'20#.#6.132.156':139
'20#.#6.158.169':139
'20#.#6.217.87':139
'20#.#6.196.219':139
'20#.#6.87.195':139
'20#.#6.123.49':139
'20#.#6.161.40':139
'20#.#6.146.128':139
'20#.#6.129.181':139
'20#.#6.31.124':139
'20#.#6.161.105':139
'20#.#6.42.210':139
'20#.#6.21.228':139
'20#.#6.209.159':139
'20#.#6.147.146':139
'20#.#6.159.147':139
'20#.#6.225.194':445
'20#.96.55.8':139
'20#.#6.224.46':139
'20#.#6.219.225':139
'20#.#6.30.149':139
'20#.#6.225.194':139
'20#.#6.63.196':139
'20#.#6.69.223':139
'20#.#6.73.14':139
'20#.#6.209.83':139
'20#.#6.28.93':139
'20#.#6.173.134':139
'20#.#6.211.254':445
'20#.#6.217.39':139
'20#.#6.82.158':445
'20#.#6.115.133':445
'20#.96.2.95':445
'20#.#6.254.0':139
'20#.#6.170.168':139
'20#.#6.174.110':139
'20#.#6.251.145':139
'20#.#6.121.157':139
'20#.#6.251.145':445
'20#.#6.121.157':445
'20#.#6.217.39':445
'20#.#6.158.233':139
'20#.#6.124.158':139
'20#.#6.173.134':445
'20#.#6.30.149':445
'20#.#6.170.168':445
'20#.#6.174.110':445
'20#.#6.254.0':445
'20#.#6.233.129':139
'20#.#6.33.137':139
'20#.#6.103.41':139
'20#.#6.99.28':139
'20#.#6.30.144':139
'20#.#6.183.130':139
'20#.#6.115.214':139
'20#.#6.130.115':139
'20#.#6.213.195':139
'20#.#6.182.111':139
'20#.#6.244.157':139
'20#.#6.42.139':445
'20#.#6.18.72':445
'20#.#6.190.188':445
'20#.#6.196.138':445
'20#.#6.92.227':445
'20#.#6.53.227':445
'20#.#6.243.70':445
'20#.#6.11.25':445
'20#.#6.21.249':445
'20#.#6.113.206':445
'20#.#6.15.92':445
'20#.#6.1.134':139
'20#.#6.107.2':139
'20#.#6.132.207':139
'20#.#6.55.112':139
'20#.#6.62.151':139
'20#.#6.238.212':445
'20#.#6.8.165':445
'20#.96.3.32':139
'20#.#6.74.214':139
'20#.#6.33.236':139
'20#.#6.165.154':445
'20#.#6.193.51':445
'20#.#6.24.110':445
'20#.#6.12.13':445
'20#.#6.135.94':445
'20#.#6.116.9':445
'20#.#6.245.3':445
'20#.#6.245.17':445
'20#.#6.46.193':445
'20#.#6.20.70':445
'20#.#6.155.177':445
'20#.#6.95.92':445
'20#.#6.80.245':445
'20#.96.92.3':445
'20#.#6.34.31':445
'20#.#6.68.128':445
'20#.#6.254.194':445
'20#.#6.119.165':445
'20#.#6.152.87':445
'20#.#6.208.89':445
'20#.#6.46.184':445
'20#.#6.112.223':139
'20#.#6.68.128':139
'20#.96.92.3':139
'20#.#6.34.31':139
'20#.#6.53.227':139
'20#.#6.243.70':139
'20#.#6.46.184':139
'20#.#6.152.87':139
'20#.#6.208.89':139
'20#.#6.95.92':139
'20#.#6.80.245':139
'20#.#6.11.25':139
'20#.#6.92.227':139
'20#.#6.15.92':139
'20#.#6.8.165':139
'20#.#6.238.212':139
'20#.#6.190.188':139
'20#.#6.21.249':139
'20#.#6.113.206':139
'20#.#6.18.72':139
'20#.#6.196.138':139
'20#.#6.42.139':139
'20#.#6.182.88':139
'20#.#6.120.164':139
'20#.#6.39.191':139
'20#.#6.116.9':139
'20#.#6.245.3':139
'20#.#6.241.49':139
'20#.#6.209.76':139
'20#.#6.16.222':139
'20#.#6.28.226':139
'20#.#6.175.24':139
'20#.#6.245.17':139
'20#.#6.12.13':139
'20#.#6.135.94':139
'20#.#6.155.177':139
'20#.#6.254.194':139
'20#.#6.119.165':139
'20#.#6.46.193':139
'20#.#6.20.70':139
'20#.#6.193.51':139
'20#.#6.24.110':139
'20#.#6.165.154':139
'20#.#6.39.191':445
'20#.#6.14.235':445
'20#.#6.142.204':445
'20#.#6.116.191':445
'20#.#6.7.205':445
'20#.#6.191.245':445
'20#.#6.33.164':445
'20#.#6.200.180':445
'20#.#6.64.105':445
'20#.#6.86.178':445
'20#.#6.152.102':445
'20#.#6.194.46':445
'20#.#6.85.152':139
'20#.#6.76.192':139
'20#.#6.118.105':139
'20#.#6.79.73':139
'20#.#6.73.113':139
'20#.#6.11.253':139
'20#.#6.101.169':445
'20#.#6.101.85':139
'20#.#6.85.176':139
'20#.#6.218.110':139
'20#.#6.184.198':139
'20#.#6.4.105':139
'20#.#6.19.108':139
'20#.#6.181.245':139
'20#.#6.232.116':139
'20#.#6.33.60':139
'20#.#6.70.33':139
'20#.#6.150.4':139
'20#.#6.77.246':139
'20#.#6.13.212':139
'20#.#6.53.191':139
'20#.#6.85.152':445
'20#.#6.76.192':445
'20#.#6.118.105':445
'20#.#6.79.73':445
'20#.#6.73.113':445
'20#.#6.11.253':445
'20#.#6.14.154':139
'20#.#6.101.85':445
'20#.#6.85.176':445
'20#.#6.218.110':445
'20#.#6.200.180':139
'20#.#6.33.236':445
'20#.96.3.32':445
'20#.#6.74.214':445
'20#.#6.1.134':445
'20#.#6.107.2':445
'20#.#6.21.249':9988
'20#.#6.243.70':9988
'20#.#6.18.72':9988
'20#.#6.190.188':9988
'20#.#6.196.138':9988
'20#.#6.132.207':445
'20#.#6.175.24':445
'20#.#6.16.222':445
'20#.#6.28.226':445
'20#.#6.182.88':445
'20#.#6.120.164':445
'20#.#6.55.112':445
'20#.#6.62.151':445
'20#.#6.112.223':445
'20#.#6.241.49':445
'20#.#6.209.76':445
'20#.#6.116.191':139
'20#.#6.14.235':139
'20#.#6.191.245':139
'20#.#6.194.46':139
'20#.#6.7.205':139
'20#.#6.64.105':139
'20#.#6.33.164':139
'20#.#6.152.102':139
'20#.#6.142.204':139
'20#.#6.86.178':139
'20#.#6.101.169':139
'20#.#6.80.245':9988
'20#.#6.208.89':9988
'20#.96.92.3':9988
'20#.#6.34.31':9988
'20#.#6.68.128':9988
'20#.#6.193.51':9988
'20#.#6.39.191':9988
'20#.#6.119.165':9988
'20#.#6.152.87':9988
'20#.#6.254.194':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней