Trojan.DownLoader12.29053

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WERdbcc.dir00\svchost.exe.mdmp 16325836412032172

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERdbcc.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'65.##0.228.154':139
'65.##0.221.115':139
'65.##0.210.129':139
'65.##0.155.78':139
'65.##0.111.46':139
'65.##0.155.78':445
'65.##0.228.154':445
'65.##0.166.99':445
'65.##0.210.129':445
'65.##0.166.99':139
'65.##0.43.217':445
'65.##0.155.157':445
'65.##0.41.34':445
'65.##0.15.116':445
'65.##0.43.199':445
'65.##0.62.99':445
'65.##0.190.20':445
'65.##0.97.222':445
'65.##0.207.86':445
'65.##0.221.115':445
'65.##0.99.191':139
'65.##0.99.129':139
'65.#70.3.69':139
'65.##0.147.166':139
'65.##0.46.61':139
'65.#70.2.75':139
'65.##0.92.13':139
'65.##0.25.21':139
'65.##0.202.171':139
'65.##0.235.102':139
'65.##0.147.37':139
'65.##0.119.171':139
'65.##0.111.46':445
'65.##0.222.182':139
'65.##0.43.117':139
'65.##0.122.240':139
'65.##0.51.24':139
'65.##0.90.35':139
'65.##0.209.90':139
'65.##0.51.163':445
'65.##0.243.16':445
'65.#70.8.97':445
'65.##0.44.57':445
'65.#70.1.89':445
'65.#70.2.40':445
'65.##0.40.187':445
'65.##0.91.116':445
'65.#70.41.9':445
'65.##0.18.175':445
'65.##0.190.20':139
'65.##0.29.216':445
'65.##0.207.86':139
'65.##0.62.99':139
'65.##0.24.30':445
'65.##0.227.233':445
'65.#70.20.8':445
'65.##0.13.76':445
'65.##0.63.219':445
'65.##0.58.40':445
'65.##0.228.151':445
'65.##0.171.24':445
'65.##0.109.172':445
'65.##0.49.198':445
'65.##0.156.229':445
'65.##0.10.32':445
'65.##0.129.50':445
'65.##0.34.118':445
'65.##0.252.63':445
'65.##0.82.253':445
'65.##0.190.26':445
'65.##0.131.253':445
'65.##0.208.58':445
'65.##0.24.208':445
'65.##0.177.169':445
'65.##0.226.22':445
'65.##0.97.42':445
'65.##0.176.54':445
'65.##0.11.13':445
'65.##0.101.215':445
'65.##0.155.102':445
'65.##0.61.185':445
'65.##0.109.119':445
'65.##0.167.127':445
'65.##0.123.133':445
'65.##0.58.123':445
'65.##0.234.51':445
'65.##0.108.160':445
'65.##0.180.213':445
'65.##0.25.21':445
'65.##0.202.171':445
'65.##0.99.129':445
'65.##0.46.61':445
'65.#70.2.75':445
'65.##0.46.146':445
'65.##0.179.54':445
'65.##0.92.13':445
'65.##0.146.147':445
'65.##0.76.85':445
'65.#70.0.20':445
'65.##0.135.235':139
'65.##0.134.42':445
'65.##0.88.105':445
'65.##0.29.78':139
'65.##0.24.114':139
'65.##0.193.154':139
'65.##0.155.4':139
'65.##0.196.188':139
'65.##0.12.148':445
'65.##0.121.172':445
'65.##0.204.0':445
'65.##0.158.143':445
'65.##0.41.117':445
'65.##0.102.249':445
'65.##0.123.135':445
'65.##0.176.164':445
'65.##0.143.134':445
'65.##0.80.53':445
'65.##0.58.123':139
'65.##0.76.85':139
'65.##0.108.160':139
'65.##0.123.133':139
'65.##0.158.143':139
'65.##0.204.0':139
'65.##0.102.249':139
'65.##0.41.117':139
'65.##0.121.172':139
'65.##0.234.51':139
'65.##0.179.54':139
'65.##0.180.213':139
'65.##0.146.147':139
'65.##0.46.146':139
'65.##0.61.185':139
'65.##0.155.102':139
'65.##0.167.127':139
'65.##0.109.119':139
'65.##0.101.215':139
'65.##0.143.134':139
'65.##0.209.90':445
'65.##0.122.240':445
'65.##0.43.117':445
'65.##0.90.35':445
'65.##0.51.24':445
'65.##0.147.166':445
'65.##0.99.191':445
'65.##0.235.102':445
'65.#70.3.69':445
'65.##0.119.171':445
'65.##0.176.164':139
'65.##0.12.148':139
'65.##0.80.53':139
'65.##0.123.135':139
'65.##0.134.42':139
'65.##0.222.182':445
'65.##0.147.37':445
'65.##0.88.105':139
'65.#70.0.20':139
'65.##0.13.129':445
'65.##0.35.13':445
'65.##0.41.137':139
'65.##0.204.153':139
'65.##0.176.170':445
'65.##0.94.79':445
'65.##0.137.37':445
'65.##0.12.72':445
'65.##0.14.204':445
'65.##0.201.82':139
'65.##0.115.37':139
'65.##0.181.196':139
'65.##0.24.90':139
'65.##0.22.126':139
'65.##0.89.48':139
'65.##0.21.47':139
'65.##0.141.115':139
'65.##0.31.201':139
'65.##0.172.166':139
'65.##0.97.232':445
'65.##0.26.35':445
'65.##0.179.177':445
'65.##0.77.192':445
'65.##0.216.89':445
'65.##0.28.156':445
'65.##0.90.205':445
'65.##0.145.25':445
'65.##0.107.163':445
'65.##0.74.94':445
'65.##0.48.64':445
'65.##0.114.159':445
'65.##0.198.90':445
'65.#70.7.35':445
'65.##0.205.139':445
'65.##0.249.175':445
'65.##0.64.120':445
'65.##0.246.31':445
'65.##0.200.204':445
'65.##0.93.135':445
'65.##0.249.175':139
'65.##0.200.204':139
'65.##0.114.159':139
'65.##0.198.90':139
'65.##0.93.135':139
'65.##0.48.64':139
'65.##0.77.192':139
'65.##0.64.120':139
'65.##0.246.31':139
'65.##0.205.139':139
'65.##0.35.13':139
'65.##0.176.170':139
'65.##0.12.72':139
'65.##0.13.129':139
'65.##0.14.204':139
'65.##0.97.232':139
'65.#70.7.35':139
'65.##0.94.79':139
'65.##0.137.37':139
'65.##0.216.89':139
'65.##0.112.113':139
'65.##0.135.226':139
'65.#70.4.22':139
'65.##0.13.209':139
'65.##0.86.95':139
'65.##0.86.68':139
'65.##0.78.14':139
'65.##0.0.137':139
'65.##0.121.104':139
'65.##0.66.215':139
'65.##0.28.156':139
'65.##0.107.163':139
'65.##0.26.35':139
'65.##0.179.177':139
'65.##0.74.94':139
'65.##0.47.158':139
'65.##0.229.101':139
'65.##0.90.205':139
'65.##0.145.25':139
'65.##0.40.187':139
'65.##0.58.40':139
'65.#70.41.9':139
'65.#70.2.40':139
'65.##0.208.58':139
'65.##0.131.253':139
'65.##0.177.169':139
'65.##0.24.208':139
'65.##0.190.26':139
'65.##0.51.163':139
'65.#70.20.8':139
'65.##0.18.175':139
'65.##0.63.219':139
'65.##0.227.233':139
'65.#70.8.97':139
'65.##0.243.16':139
'65.##0.91.116':139
'65.##0.44.57':139
'65.#70.1.89':139
'65.##0.176.54':139
'65.##0.129.50':139
'65.##0.41.34':139
'65.##0.252.63':139
'65.##0.10.32':139
'65.##0.15.116':139
'65.##0.43.199':139
'65.##0.97.222':139
'65.##0.43.217':139
'65.##0.155.157':139
'65.##0.34.118':139
'65.##0.97.42':139
'65.##0.82.253':139
'65.##0.11.13':139
'65.##0.226.22':139
'65.##0.109.172':139
'65.##0.171.24':139
'65.##0.156.229':139
'65.##0.49.198':139
'65.##0.228.151':139
'65.##0.24.90':445
'65.##0.22.126':445
'65.##0.86.68':445
'65.##0.78.14':445
'65.##0.115.37':445
'65.##0.31.201':445
'65.##0.172.166':445
'65.##0.181.196':445
'65.##0.89.48':445
'65.##0.121.104':445
'65.##0.66.215':445
'65.#70.4.22':445
'65.##0.47.158':445
'65.##0.229.101':445
'65.##0.13.209':445
'65.##0.86.95':445
'65.##0.0.137':445
'65.##0.112.113':445
'65.##0.135.226':445
'65.##0.21.47':445
'65.##0.47.158':9988
'65.##0.13.209':9988
'65.##0.107.163':9988
'65.##0.145.25':9988
'65.##0.24.90':9988
'65.##0.24.30':139
'65.##0.13.76':139
'65.##0.172.166':9988
'65.##0.29.216':139
'65.##0.13.129':9988
'65.##0.204.153':445
'65.##0.41.137':445
'65.##0.141.115':445
'65.##0.201.82':445
'65.##0.94.79':9988
'65.##0.64.120':9988
'65.##0.48.64':9988
'65.##0.14.204':9988
'65.##0.114.159':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней