Trojan.DownLoader12.29003

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1cd9.dir00\svchost.exe.mdmp 16325836412032060

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1cd9.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#2.48.180':139
'20#.#2.194.48':139
'20#.#2.16.190':139
'20#.#2.247.190':139
'20#.#2.57.232':139
'20#.#2.16.220':139
'20#.#2.128.151':445
'20#.#2.135.75':445
'20#.#2.82.124':445
'20#.#2.96.118':139
'20#.#2.76.247':139
'20#.#2.32.80':139
'20#.#2.166.108':139
'20#.#2.215.148':139
'20#.#2.34.115':139
'20#.#2.77.108':139
'20#.#2.94.137':139
'20#.#2.147.55':139
'20#.#2.105.160':139
'20#.#2.49.172':139
'20#.#2.160.216':139
'20#.#2.216.213':139
'20#.#2.215.216':139
'20#.#2.175.146':445
'20#.#2.238.116':445
'20#.#2.31.111':445
'20#.#2.220.207':445
'20#.#2.68.235':445
'20#.#2.208.94':445
'20#.#2.91.222':445
'20#.#2.181.243':445
'20#.#2.172.45':445
'20#.#2.182.88':445
'20#.#2.65.187':445
'20#.#2.33.66':445
'20#.#2.149.77':445
'20#.72.92.2':445
'20#.#2.101.137':445
'20#.#2.120.172':445
'20#.#2.94.146':445
'20#.#2.172.83':445
'20#.#2.55.102':445
'20#.#2.52.248':445
'20#.#2.64.53':445
'20#.#2.24.163':445
'20#.#2.45.201':445
'20#.#2.184.197':445
'20#.#2.118.0':139
'20#.#2.17.163':445
'20#.#2.198.155':445
'20#.#2.55.79':445
'20#.#2.169.79':445
'20#.#2.78.169':445
'20#.#2.82.124':139
'20#.#2.94.146':139
'20#.#2.172.83':139
'20#.#2.175.146':139
'20#.#2.128.151':139
'20#.#2.135.75':139
'20#.#2.102.71':445
'20#.#2.50.186':445
'20#.#2.184.191':445
'20#.#2.164.149':445
'20#.#2.69.225':445
'20#.#2.212.69':445
'20#.#2.232.166':445
'20#.#2.81.62':445
'20#.#2.123.59':445
'20#.#2.36.241':445
'20#.#2.188.151':445
'20#.#2.240.69':445
'20#.#2.120.172':139
'20#.#2.65.187':139
'20#.#2.33.66':139
'20#.#2.91.222':139
'20#.#2.238.116':139
'20#.#2.31.111':139
'20#.#2.182.88':139
'20#.#2.144.254':139
'20#.#2.224.144':139
'20#.#2.254.171':139
'20#.#2.181.243':139
'20#.#2.172.45':139
'20#.#2.220.207':139
'20#.#2.45.201':139
'20#.#2.184.197':139
'20#.#2.55.102':139
'20#.72.92.2':139
'20#.#2.101.137':139
'20#.#2.24.163':139
'20#.#2.68.235':139
'20#.#2.208.94':139
'20#.#2.149.77':139
'20#.#2.52.248':139
'20#.#2.64.53':139
'20#.#2.220.14':139
'20#.#2.189.112':139
'20#.#2.182.70':139
'20#.#2.70.121':139
'20#.#2.70.110':139
'20#.#2.146.78':139
'20#.#2.15.165':139
'20#.#2.101.121':139
'20#.#2.193.90':139
'20#.#2.27.114':139
'20#.#2.4.221':139
'20#.#2.16.24':139
'20#.#2.41.238':139
'20#.#2.141.176':139
'20#.#2.15.34':139
'20#.#2.49.29':139
'20#.#2.179.60':139
'20#.#2.122.253':139
'20#.#2.206.234':139
'20#.#2.110.135':139
'20#.#2.166.223':139
'20#.#2.140.122':139
'20#.#2.77.49':139
'20#.#2.11.135':139
'20#.#2.131.109':445
'20#.#2.177.248':445
'20#.#2.53.153':445
'20#.#2.41.230':445
'20#.#2.153.189':445
'20#.72.31.0':445
'20#.#2.123.242':445
'20#.#2.116.123':445
'20#.#2.125.191':445
'20#.#2.98.96':445
'20#.#2.244.56':445
'20#.#2.253.152':445
'20#.#2.173.114':445
'20#.#2.64.159':445
'20#.#2.24.82':139
'20#.#2.111.47':139
'20#.#2.152.5':139
'20#.#2.199.172':445
'20#.#2.141.8':445
'20#.#2.47.140':445
'20#.#2.21.170':445
'20#.#2.162.113':445
'20#.#2.106.7':445
'20#.#2.121.15':139
'20#.#2.32.80':445
'20#.#2.247.190':445
'20#.#2.49.172':445
'20#.#2.160.216':445
'20#.#2.105.160':445
'20#.#2.57.232':445
'20#.#2.16.220':445
'20#.#2.96.118':445
'20#.#2.194.48':445
'20#.#2.16.190':445
'20#.#2.48.180':445
'20#.#2.215.216':445
'20#.#2.118.0':445
'20#.#2.77.108':445
'20#.#2.224.144':445
'20#.#2.254.171':445
'20#.#2.144.254':445
'20#.#2.94.137':445
'20#.#2.147.55':445
'20#.#2.216.213':445
'20#.#2.215.148':445
'20#.#2.34.115':445
'20#.#2.166.108':445
'20#.#2.76.247':445
'20#.#2.98.96':139
'20#.#2.244.56':139
'20#.72.31.0':139
'20#.#2.131.109':139
'20#.#2.177.248':139
'20#.#2.125.191':139
'20#.#2.4.223':139
'20#.#2.20.32':139
'20#.#2.127.116':139
'20#.#2.123.242':139
'20#.#2.116.123':139
'20#.#2.53.153':139
'20#.#2.162.113':139
'20#.#2.106.7':139
'20#.#2.199.172':139
'20#.#2.173.114':139
'20#.#2.64.159':139
'20#.#2.21.170':139
'20#.#2.41.230':139
'20#.#2.153.189':139
'20#.#2.253.152':139
'20#.#2.141.8':139
'20#.#2.47.140':139
'20#.#2.25.152':445
'20#.#2.18.146':445
'20#.#2.196.178':445
'20#.#2.207.161':445
'20#.#2.222.80':445
'20#.#2.118.249':445
'20#.#2.232.228':445
'20#.#2.37.241':445
'20#.#2.66.11':445
'20#.#2.109.180':445
'20#.#2.25.136':445
'20#.#2.104.7':445
'20#.#2.216.89':445
'20#.#2.240.4':445
'20#.#2.61.31':139
'20#.#2.61.217':139
'20#.#2.31.105':139
'20#.#2.150.194':445
'20#.#2.68.248':445
'20#.#2.180.20':445
'20#.#2.15.66':445
'20#.#2.56.246':445
'20#.#2.82.145':445
'20#.#2.254.41':445
'20#.#2.97.14':445
'20#.#2.16.136':445
'20#.#2.42.153':445
'20#.#2.7.123':445
'20#.#2.231.194':445
'20#.#2.17.12':445
'20#.#2.61.217':445
'20#.#2.91.76':445
'20#.#2.31.105':445
'20#.#2.11.19':445
'20#.#2.129.161':445
'20#.#2.162.74':445
'20#.#2.55.219':445
'20#.#2.132.156':445
'20#.#2.42.60':445
'20#.#2.229.37':445
'20#.#2.58.147':445
'20#.#2.226.214':445
'20#.#2.173.145':445
'20#.#2.155.140':445
'20#.#2.158.207':445
'20#.#2.33.95':445
'20#.#2.89.191':445
'20#.#2.91.76':139
'20#.#2.118.249':139
'20#.#2.25.152':139
'20#.#2.25.136':139
'20#.#2.18.146':139
'20#.#2.196.178':139
'20#.#2.109.180':139
'20#.#2.226.214':139
'20#.#2.132.156':139
'20#.#2.229.37':139
'20#.#2.232.228':139
'20#.#2.55.219':139
'20#.#2.104.7':139
'20#.#2.150.194':139
'20#.#2.66.11':139
'20#.#2.240.4':139
'20#.#2.56.246':139
'20#.#2.216.89':139
'20#.#2.15.66':139
'20#.#2.207.161':139
'20#.#2.180.20':139
'20#.#2.68.248':139
'20#.#2.82.145':139
'20#.#2.222.80':139
'20#.#2.58.147':139
'20#.#2.158.207':139
'20#.#2.162.74':139
'20#.#2.7.123':139
'20#.#2.155.140':139
'20#.#2.173.145':139
'20#.#2.231.194':139
'20#.#2.129.161':139
'20#.#2.11.19':139
'20#.#2.16.136':139
'20#.#2.69.202':139
'20#.#2.97.14':139
'20#.#2.22.58':139
'20#.#2.33.95':139
'20#.#2.89.191':139
'20#.#2.37.241':139
'20#.#2.42.60':139
'20#.#2.254.41':139
'20#.#2.17.12':139
'20#.#2.122.109':139
'20#.#2.42.153':139
'20#.#2.56.14':139
'20#.#2.194.175':139
'20#.#2.101.243':139
'20#.#2.33.150':445
'20#.#2.0.165':445
'20#.#2.151.123':445
'20#.#2.198.155':139
'20#.#2.0.252':445
'20#.#2.38.189':445
'20#.#2.103.56':445
'20#.#2.207.110':445
'20#.#2.180.197':445
'20#.#2.230.43':445
'20#.#2.19.156':445
'20#.#2.17.163':139
'20#.#2.240.69':139
'20#.#2.36.241':139
'20#.#2.188.151':139
'20#.#2.184.191':139
'20#.#2.232.166':139
'20#.#2.81.62':139
'20#.#2.78.169':139
'20#.#2.55.79':139
'20#.#2.169.79':139
'20#.#2.123.59':139
'20#.#2.102.71':139
'20#.#2.203.207':445
'20#.#2.195.51':445
'20#.#2.219.2':445
'20#.#2.111.61':445
'20#.#2.158.194':445
'20#.#2.244.190':445
'20#.#2.176.207':445
'20#.#2.26.130':445
'20#.#2.243.131':445
'20#.#2.5.162':445
'20#.#2.115.238':445
'20#.#2.209.161':445
'20#.#2.68.184':445
'20#.#2.72.37':445
'20#.#2.126.71':445
'20#.#2.188.253':445
'20#.#2.229.203':445
'20#.#2.101.204':445
'20#.#2.31.107':445
'20#.#2.178.121':445
'20#.#2.24.178':445
'20#.#2.121.228':445
'20#.#2.242.8':445
'20#.#2.227.242':445
'20#.#2.50.186':139
'20#.#2.230.43':139
'20#.#2.19.156':139
'20#.#2.38.189':139
'20#.#2.33.150':139
'20#.#2.0.165':139
'20#.#2.180.197':139
'20#.#2.229.203':139
'20#.#2.101.204':139
'20#.#2.203.207':139
'20#.#2.103.56':139
'20#.#2.207.110':139
'20#.#2.151.123':139
'20#.#2.101.243':445
'20#.#2.22.58':445
'20#.#2.122.109':445
'20#.#2.61.31':445
'20#.#2.194.175':445
'20#.#2.69.202':445
'20#.#2.18.146':9988
'20#.#2.0.252':139
'20#.#2.15.66':9988
'20#.#2.56.14':445
'20#.#2.240.4':9988
'20#.#2.188.253':139
'20#.#2.115.238':139
'20#.#2.209.161':139
'20#.#2.176.207':139
'20#.#2.195.51':139
'20#.#2.219.2':139
'20#.#2.5.162':139
'20#.#2.212.69':139
'20#.#2.164.149':139
'20#.#2.69.225':139
'20#.#2.26.130':139
'20#.#2.243.131':139
'20#.#2.111.61':139
'20#.#2.242.8':139
'20#.#2.227.242':139
'20#.#2.31.107':139
'20#.#2.72.37':139
'20#.#2.126.71':139
'20#.#2.121.228':139
'20#.#2.158.194':139
'20#.#2.244.190':139
'20#.#2.68.184':139
'20#.#2.178.121':139
'20#.#2.24.178':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней