Trojan.DownLoader12.29037

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1f5a.dir00\svchost.exe.mdmp 16325836412029860

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1f5a.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'72.##.210.177':445
'72.#7.54.40':445
'72.##.124.72':445
'72.#7.251.7':445
'72.##.42.124':445
'72.##.167.247':445
'72.##.88.126':445
'72.##.158.225':445
'72.##.73.229':445
'72.##.54.150':445
'72.#7.191.0':445
'72.##.58.228':445
'72.#7.8.32':445
'72.##.208.11':445
'72.#7.6.106':445
'72.##.178.26':445
'72.##.254.187':445
'72.##.115.109':445
'72.##.28.241':445
'72.#7.15.10':445
'72.##.27.155':445
'72.#7.197.9':445
'72.##.157.111':445
'72.##.118.111':445
'72.#7.9.174':445
'72.#7.76.60':139
'72.##.205.76':139
'72.##.113.136':139
'72.##.163.70':139
'72.##.109.138':139
'72.##.13.244':139
'72.##.56.233':139
'72.##.64.146':445
'72.##.131.182':445
'72.#7.211.0':139
'72.##.48.123':139
'72.#7.49.73':139
'72.##.174.116':139
'72.##.170.235':445
'72.##.110.95':445
'72.#7.95.71':445
'72.##.51.141':445
'72.##.134.192':445
'72.##.235.133':445
'72.##.64.146':139
'72.##.131.182':139
'72.##.85.131':139
'72.##.253.47':445
'72.##.202.253':445
'72.##.60.203':445
'72.##.208.11':139
'72.#7.6.106':139
'72.##.178.26':139
'72.##.254.187':139
'72.##.115.109':139
'72.##.28.241':139
'72.#7.15.10':139
'72.##.27.155':139
'72.#7.197.9':139
'72.##.157.111':139
'72.##.118.111':139
'72.#7.9.174':139
'72.##.188.82':139
'72.##.242.91':445
'72.##.240.241':445
'72.##.229.240':445
'72.##.168.169':445
'72.##.27.194':445
'72.##.210.183':445
'72.#7.138.4':445
'72.##.62.213':139
'72.#7.82.93':139
'72.##.92.230':445
'72.##.130.93':445
'72.##.33.155':445
'72.##.170.235':139
'72.##.110.95':139
'72.#7.95.71':139
'72.##.51.141':139
'72.##.134.192':139
'72.##.235.133':139
'72.##.62.213':445
'72.#7.82.93':445
'72.##.188.82':445
'72.##.253.47':139
'72.##.202.253':139
'72.##.60.203':139
'72.##.73.229':139
'72.##.167.247':139
'72.##.210.177':139
'72.#7.54.40':139
'72.#7.8.32':139
'72.#7.251.7':139
'72.##.42.124':139
'72.##.58.228':139
'72.##.88.126':139
'72.##.158.225':139
'72.##.124.72':139
'72.##.54.150':139
'72.#7.191.0':139
'72.##.174.116':445
'72.#7.40.41':445
'72.##.153.243':445
'72.##.139.18':445
'72.##.164.114':445
'72.##.170.170':445
'72.##.120.30':445
'72.##.162.126':445
'72.#7.2.85':445
'72.##.219.186':445
'72.##.81.139':445
'72.#7.34.0':445
'72.#7.9.195':445
'72.##.154.247':445
'72.#7.41.1':445
'72.##.255.156':445
'72.##.126.181':445
'72.##.86.225':445
'72.##.71.159':445
'72.##.136.189':445
'72.##.91.184':445
'72.#7.75.36':445
'72.##.204.210':445
'72.##.108.20':445
'72.##.219.199':445
'72.##.210.120':445
'72.##.174.95':139
'72.##.77.174':139
'72.##.252.254':139
'72.##.183.162':139
'72.##.161.58':139
'72.##.50.183':139
'72.##.181.76':139
'72.##.216.195':139
'72.##.234.23':139
'72.##.20.222':139
'72.##.38.215':139
'72.##.91.164':139
'72.#7.28.86':139
'72.##.147.95':445
'72.#7.85.18':445
'72.##.230.120':445
'72.##.14.105':445
'72.#7.54.74':445
'72.##.95.102':445
'72.##.121.177':445
'72.#7.29.28':139
'72.##.161.254':139
'72.##.77.163':445
'72.##.57.225':445
'72.#7.46.42':445
'72.#7.41.1':139
'72.##.255.156':139
'72.##.126.181':139
'72.##.86.225':139
'72.##.71.159':139
'72.##.136.189':139
'72.##.210.120':139
'72.##.204.210':139
'72.#7.75.36':139
'72.##.219.199':139
'72.##.108.20':139
'72.##.91.184':139
'72.##.156.90':139
'72.##.205.76':445
'72.#7.76.60':445
'72.##.13.244':445
'72.##.85.131':445
'72.##.163.70':445
'72.##.109.138':445
'72.#7.49.73':445
'72.##.56.233':445
'72.##.18.195':139
'72.##.113.136':445
'72.#7.211.0':445
'72.##.48.123':445
'72.##.147.95':139
'72.#7.85.18':139
'72.##.230.120':139
'72.##.219.186':139
'72.#7.54.74':139
'72.##.95.102':139
'72.##.121.177':139
'72.##.18.195':445
'72.##.156.90':445
'72.##.77.163':139
'72.##.57.225':139
'72.#7.46.42':139
'72.##.14.105':139
'72.##.120.30':139
'72.#7.40.41':139
'72.##.153.243':139
'72.##.164.114':139
'72.##.154.247':139
'72.##.170.170':139
'72.##.162.126':139
'72.#7.2.85':139
'72.#7.9.195':139
'72.##.139.18':139
'72.##.81.139':139
'72.#7.34.0':139
'72.##.59.137':445
'72.##.238.217':445
'72.#7.2.3':445
'72.#7.75.10':445
'72.##.171.194':445
'72.##.218.59':445
'72.#7.0.114':445
'72.#7.99.54':445
'72.##.123.135':445
'72.##.90.108':445
'72.##.243.152':445
'72.##.179.180':445
'72.##.50.151':445
'72.#7.8.64':445
'72.##.141.164':445
'72.##.144.56':445
'72.#7.67.26':139
'72.#7.88.18':445
'72.#7.227.3':445
'72.##.234.33':445
'72.#7.45.26':445
'72.##.175.127':445
'72.##.129.11':445
'72.##.165.23':445
'72.##.10.162':445
'72.##.158.212':445
'72.##.139.207':445
'72.##.126.210':445
'72.##.219.90':445
'72.##.229.25':445
'72.#7.1.33':445
'72.##.124.162':445
'72.##.190.65':445
'72.#7.66.36':445
'72.#7.8.126':445
'72.##.51.138':445
'72.##.250.48':445
'72.##.119.162':445
'72.##.72.230':445
'72.##.183.12':445
'72.#7.7.113':445
'72.#7.30.18':445
'72.##.135.80':445
'72.##.114.106':445
'72.##.18.166':445
'72.##.226.181':445
'72.##.186.155':445
'72.#7.94.59':445
'72.##.102.67':445
'72.#7.62.86':445
'72.##.238.217':139
'72.#7.2.3':139
'72.##.243.152':139
'72.##.171.194':139
'72.##.59.137':139
'72.##.218.59':139
'72.#7.99.54':139
'72.##.114.106':139
'72.##.135.80':139
'72.##.90.108':139
'72.##.179.180':139
'72.#7.0.114':139
'72.##.175.127':139
'72.##.144.56':139
'72.#7.227.3':139
'72.#7.45.26':139
'72.##.165.23':139
'72.##.50.151':139
'72.#7.88.18':139
'72.##.129.11':139
'72.##.10.162':139
'72.##.234.33':139
'72.#7.8.64':139
'72.#7.75.10':139
'72.##.141.164':139
'72.##.139.207':139
'72.##.126.210':139
'72.#7.8.126':139
'72.##.219.90':139
'72.#7.1.33':139
'72.##.158.212':139
'72.#7.66.36':139
'72.##.190.65':139
'72.##.143.109':139
'72.##.51.138':139
'72.##.250.48':139
'72.##.124.162':139
'72.##.229.25':139
'72.#7.7.113':139
'72.##.183.12':139
'72.##.102.67':139
'72.##.123.135':139
'72.#7.30.18':139
'72.##.72.230':139
'72.##.226.181':139
'72.##.186.155':139
'72.##.119.162':139
'72.#7.94.59':139
'72.#7.62.86':139
'72.##.18.166':139
'72.##.143.109':445
'72.##.144.206':445
'72.##.115.235':445
'72.##.176.205':445
'72.##.150.182':445
'72.##.227.177':445
'72.##.157.60':445
'72.#7.3.61':445
'72.##.30.249':445
'72.##.218.70':445
'72.##.82.231':445
'72.##.56.184':445
'72.##.216.191':445
'72.#7.183.1':445
'72.##.175.169':445
'72.#7.21.54':445
'72.#7.84.60':445
'72.#7.12.59':445
'72.##.230.19':445
'72.#7.56.11':445
'72.##.26.101':445
'72.##.60.251':445
'72.##.99.128':445
'72.#7.16.20':445
'72.##.236.15':445
'72.##.206.73':445
'72.##.229.240':139
'72.##.92.230':139
'72.##.130.93':139
'72.##.210.183':139
'72.##.242.91':139
'72.##.240.241':139
'72.##.32.134':445
'72.##.142.122':445
'72.##.220.142':445
'72.##.33.155':139
'72.#7.138.4':139
'72.#7.4.211':445
'72.##.27.194':139
'72.##.28.134':445
'72.##.86.235':445
'72.##.137.86':445
'72.##.196.42':445
'72.##.22.152':445
'72.##.58.253':445
'72.##.142.122':139
'72.##.220.142':139
'72.##.168.169':139
'72.##.127.166':445
'72.#7.4.211':139
'72.##.32.134':139
'72.##.175.169':139
'72.#7.21.54':139
'72.#7.84.60':139
'72.#7.12.59':139
'72.##.230.19':139
'72.#7.56.11':139
'72.##.26.101':139
'72.##.60.251':139
'72.##.99.128':139
'72.#7.16.20':139
'72.##.236.15':139
'72.##.206.73':139
'72.##.221.128':139
'72.##.165.23':9988
'72.##.238.217':9988
'72.##.243.152':9988
'72.#7.67.26':445
'72.##.234.33':9988
'72.##.144.56':9988
'72.##.39.246':139
'72.##.192.220':139
'72.##.169.248':139
'72.##.90.108':9988
'72.##.179.180':9988
'72.##.133.107':139
'72.##.28.134':139
'72.##.86.235':139
'72.##.137.86':139
'72.##.196.42':139
'72.##.22.152':139
'72.##.58.253':139
'72.##.192.220':445
'72.##.169.248':445
'72.##.221.128':445
'72.##.127.166':139
'72.##.133.107':445
'72.##.39.246':445
'72.##.218.70':139
'72.##.157.60':139
'72.##.144.206':139
'72.##.115.235':139
'72.#7.183.1':139
'72.##.150.182':139
'72.##.227.177':139
'72.##.216.191':139
'72.#7.3.61':139
'72.##.30.249':139
'72.##.176.205':139
'72.##.82.231':139
'72.##.56.184':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней