Trojan.DownLoader12.29008

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd682.dir00\svchost.exe.mdmp 16325836412032128

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERd682.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#61.199.97':445
'20#.#61.140.251':445
'20#.#61.104.39':445
'20#.#61.239.134':445
'20#.#61.28.135':445
'20#.#61.238.216':445
'20#.#61.98.36':445
'20#.#61.225.109':445
'20#.#61.164.159':445
'20#.#61.103.98':445
'20#.#61.122.169':445
'20#.#61.135.40':445
'20#.#61.181.134':445
'20#.#61.35.65':139
'20#.#61.57.1':445
'20#.#61.30.45':445
'20#.#61.118.82':139
'20#.#61.32.189':139
'20#.#61.173.90':139
'20#.#61.167.152':445
'20#.#61.39.62':445
'20#.#61.141.89':445
'20#.#61.58.221':445
'20#.#61.109.115':445
'20#.#61.136.214':445
'20#.#61.92.139':445
'20#.#61.55.89':445
'20#.#61.208.214':445
'20#.#61.115.74':445
'20#.#61.194.125':445
'20#.#61.165.205':445
'20#.#61.25.147':445
'20#.#61.102.90':445
'20#.#61.26.84':445
'20#.#61.143.140':445
'20#.#61.118.82':445
'20#.#61.56.70':445
'20#.#61.253.220':445
'20#.#61.57.81':445
'20#.#61.11.123':445
'20#.#61.186.11':445
'20#.#61.39.186':445
'20#.#61.156.219':445
'20#.#61.242.173':445
'20#.#61.161.127':445
'20#.#61.18.14':445
'20#.#61.160.13':445
'20#.#61.232.85':445
'20#.#61.91.242':445
'20#.#61.7.84':445
'20#.#61.3.113':445
'20#.#61.95.247':445
'20#.#61.238.216':139
'20#.#61.199.97':139
'20#.#61.140.251':139
'20#.#61.58.221':139
'20#.#61.239.134':139
'20#.#61.28.135':139
'20#.#61.104.39':139
'20#.#61.181.134':139
'20#.#61.225.109':139
'20#.#61.164.159':139
'20#.#61.98.36':139
'20#.#61.122.169':139
'20#.#61.135.40':139
'20#.#61.175.222':445
'20#.#61.29.209':445
'20#.#61.57.1':139
'20#.#61.1.210':445
'20#.#61.201.109':445
'20#.#61.106.248':445
'20#.#61.30.45':139
'20#.#61.92.139':139
'20#.#61.39.62':139
'20#.#61.141.89':139
'20#.#61.167.152':139
'20#.#61.109.115':139
'20#.#61.136.214':139
'20#.#61.25.147':139
'20#.#61.55.89':139
'20#.#61.208.214':139
'20#.#61.91.242':139
'20#.#61.194.125':139
'20#.#61.165.205':139
'20#.#61.115.74':139
'20#.#61.57.81':139
'20#.#61.26.84':139
'20#.#61.143.140':139
'20#.#61.102.90':139
'20#.#61.56.70':139
'20#.#61.253.220':139
'20#.#61.161.127':139
'20#.#61.11.123':139
'20#.#61.186.11':139
'20#.#61.103.98':139
'20#.#61.156.219':139
'20#.#61.242.173':139
'20#.#61.39.186':139
'20#.#61.95.247':139
'20#.#61.160.13':139
'20#.#61.232.85':139
'20#.#61.18.14':139
'20#.#61.7.84':139
'20#.#61.3.113':139
'20#.#61.32.189':445
'20#.#61.89.227':445
'20#.#61.36.90':445
'20#.#61.125.36':445
'20#.#61.117.51':445
'20#.#61.116.117':445
'20#.#61.23.90':445
'20#.#61.161.130':445
'20#.#61.42.82':445
'20#.#61.140.242':445
'20#.#61.8.141':445
'20#.#61.254.80':445
'20#.#61.1.152':445
'20#.#61.99.100':445
'20#.#61.55.155':445
'20#.#61.225.40':445
'20#.#61.114.15':445
'20#.#61.71.99':139
'20#.#61.66.243':445
'20#.#61.82.91':445
'20#.#61.41.236':445
'20#.#61.210.157':445
'20#.#61.90.59':445
'20#.#61.50.191':445
'20#.#61.16.217':445
'20#.#61.142.194':445
'20#.#61.86.137':445
'20#.#61.11.30':445
'20#.#61.172.233':445
'20#.#61.55.117':445
'20#.#61.54.137':445
'20#.#61.89.208':445
'20#.#61.30.90':445
'20#.#61.50.253':445
'20#.#61.86.167':445
'20#.#61.114.94':445
'20#.#61.71.99':445
'20#.#61.10.190':445
'20#.#61.37.11':445
'20#.#61.117.15':445
'20#.#61.69.102':445
'20#.#61.238.228':445
'20#.#61.51.80':445
'20#.#61.98.8':445
'20#.#61.81.98':445
'20#.#61.165.69':445
'20#.#61.229.192':445
'20#.#61.141.190':445
'20#.#61.173.63':445
'20#.#61.247.3':445
'20#.#61.10.45':445
'20#.#61.209.209':445
'20#.#61.16.250':445
'20#.#61.23.90':139
'20#.#61.89.227':139
'20#.#61.36.90':139
'20#.#61.50.191':139
'20#.#61.117.51':139
'20#.#61.116.117':139
'20#.#61.125.36':139
'20#.#61.99.100':139
'20#.#61.42.82':139
'20#.#61.140.242':139
'20#.#61.161.130':139
'20#.#61.254.80':139
'20#.#61.1.152':139
'20#.#61.82.91':139
'20#.#61.55.155':139
'20#.#61.225.40':139
'20#.#61.173.90':445
'20#.#61.35.65':445
'20#.#61.66.243':139
'20#.#61.114.15':139
'20#.#61.86.137':139
'20#.#61.210.157':139
'20#.#61.90.59':139
'20#.#61.41.236':139
'20#.#61.16.217':139
'20#.#61.142.194':139
'20#.#61.30.90':139
'20#.#61.11.30':139
'20#.#61.172.233':139
'20#.#61.247.3':139
'20#.#61.54.137':139
'20#.#61.89.208':139
'20#.#61.55.117':139
'20#.#61.117.15':139
'20#.#61.86.167':139
'20#.#61.114.94':139
'20#.#61.50.253':139
'20#.#61.10.190':139
'20#.#61.37.11':139
'20#.#61.165.69':139
'20#.#61.69.102':139
'20#.#61.238.228':139
'20#.#61.8.141':139
'20#.#61.98.8':139
'20#.#61.81.98':139
'20#.#61.51.80':139
'20#.#61.16.250':139
'20#.#61.141.190':139
'20#.#61.173.63':139
'20#.#61.229.192':139
'20#.#61.10.45':139
'20#.#61.209.209':139
'20#.#61.56.14':445
'20#.#61.34.40':445
'20#.#61.40.2':445
'20#.#61.223.105':445
'20#.#61.241.84':445
'20#.#61.93.205':445
'20#.#61.20.157':445
'20#.#61.57.223':445
'20#.#61.160.180':445
'20#.#61.227.222':445
'20#.#61.222.149':445
'20#.#61.250.211':445
'20#.#61.214.234':445
'20#.#61.117.238':445
'20#.#61.22.245':445
'20#.#61.219.193':445
'20#.#61.72.145':445
'20#.#61.171.129':445
'20#.#61.129.174':445
'20#.#61.138.66':445
'20#.#61.161.125':445
'20#.#61.32.69':445
'20#.#61.206.20':445
'20#.#61.84.246':445
'20#.#61.250.132':445
'20#.#61.85.42':445
'20#.#61.194.55':445
'20#.#61.9.96':445
'20#.#61.81.158':445
'20#.#61.28.171':445
'20#.#61.222.54':445
'20#.#61.205.45':445
'20#.#61.228.154':445
'20#.#61.120.17':445
'20#.#61.234.192':445
'20#.#61.72.145':9988
'20#.#61.219.193':9988
'20#.#61.136.64':445
'20#.#61.43.71':445
'20#.#61.26.44':445
'20#.#61.114.182':445
'20#.#61.229.41':445
'20#.#61.124.251':445
'20#.#61.18.174':445
'20#.#61.254.30':445
'20#.#61.36.82':445
'20#.#61.165.202':445
'20#.#61.248.1':445
'20#.#61.45.244':445
'20#.#61.55.47':445
'20#.#61.16.197':445
'20#.#61.146.229':445
'20#.#61.159.9':445
'20#.#61.20.157':139
'20#.#61.34.40':139
'20#.#61.40.2':139
'20#.#61.84.246':139
'20#.#61.241.84':139
'20#.#61.93.205':139
'20#.#61.223.105':139
'20#.#61.117.238':139
'20#.#61.160.180':139
'20#.#61.222.149':139
'20#.#61.57.223':139
'20#.#61.250.211':139
'20#.#61.214.234':139
'20#.#61.138.66':139
'20#.#61.174.219':139
'20#.#61.22.245':139
'20#.#61.85.42':139
'20#.#61.219.193':139
'20#.#61.161.125':139
'20#.#61.129.174':139
'20#.#61.194.55':139
'20#.#61.32.69':139
'20#.#61.206.20':139
'20#.#61.171.129':139
'20#.#61.72.145':139
'20#.#61.250.132':139
'20#.#61.228.154':139
'20#.#61.9.96':139
'20#.#61.81.158':139
'20#.#61.55.47':139
'20#.#61.222.54':139
'20#.#61.205.45':139
'20#.#61.28.171':139
'20#.#61.26.44':139
'20#.#61.234.192':139
'20#.#61.174.219':445
'20#.#61.120.17':139
'20#.#61.136.64':139
'20#.#61.43.71':139
'20#.#61.36.82':139
'20#.#61.114.182':139
'20#.#61.229.41':139
'20#.#61.227.222':139
'20#.#61.18.174':139
'20#.#61.254.30':139
'20#.#61.146.229':139
'20#.#61.159.9':139
'20#.#61.248.1':139
'20#.#61.45.244':139
'20#.#61.165.202':139
'20#.#61.16.197':139
'20#.#61.124.251':139
'20#.#61.129.174':9988
'20#.#61.143.174':445
'20#.#61.147.143':445
'20#.#61.197.147':445
'20#.#61.210.86':445
'20#.#61.131.238':445
'20#.#61.174.143':445
'20#.#61.105.161':445
'20#.#61.150.245':445
'20#.#61.67.150':445
'20#.#61.94.156':445
'20#.#61.27.174':445
'20#.#61.17.2':445
'20#.#61.18.107':445
'20#.#61.201.109':139
'20#.#61.106.248':139
'20#.#61.175.222':139
'20#.#61.136.33':139
'20#.#61.56.14':139
'20#.#61.1.210':139
'20#.#61.29.209':139
'20#.#61.74.151':445
'20#.#61.197.74':445
'20#.#61.105.35':445
'20#.#61.37.219':445
'20#.#61.90.122':445
'20#.#61.151.103':445
'20#.#61.60.55':445
'20#.#61.57.229':445
'20#.#61.240.0':445
'20#.#61.132.249':445
'20#.#61.69.214':445
'20#.#61.31.2':445
'20#.#61.123.214':445
'20#.#61.35.254':445
'20#.#61.33.201':445
'20#.#61.136.33':445
'20#.#61.81.250':445
'20#.#61.193.168':445
'20#.#61.31.29':445
'20#.#61.233.41':445
'20#.#61.159.98':445
'20#.#61.163.54':445
'20#.#61.143.185':445
'20#.#61.111.209':445
'20#.#61.84.228':445
'20#.#61.159.12':445
'20#.#61.179.237':445
'20#.#61.117.193':445
'20#.#61.85.119':445
'20#.#61.103.57':445
'20#.#61.209.8':445
'20#.#61.98.66':445
'20#.#61.174.143':139
'20#.#61.143.174':139
'20#.#61.147.143':139
'20#.#61.105.35':139
'20#.#61.210.86':139
'20#.#61.131.238':139
'20#.#61.197.147':139
'20#.#61.18.107':139
'20#.#61.150.245':139
'20#.#61.67.150':139
'20#.#61.105.161':139
'20#.#61.27.174':139
'20#.#61.17.2':139
'20#.#61.20.157':9988
'20#.#61.214.234':9988
'20#.#61.117.238':9988
'20#.#61.206.20':9988
'20#.#61.84.246':9988
'20#.#61.241.84':9988
'20#.#61.227.222':9988
'20#.#61.151.103':139
'20#.#61.74.151':139
'20#.#61.197.74':139
'20#.#61.229.41':9988
'20#.#61.37.219':139
'20#.#61.90.122':139
'20#.#61.31.2':139
'20#.#61.60.55':139
'20#.#61.57.229':139
'20#.#61.85.119':139
'20#.#61.132.249':139
'20#.#61.69.214':139
'20#.#61.240.0':139
'20#.#61.31.29':139
'20#.#61.35.254':139
'20#.#61.33.201':139
'20#.#61.123.214':139
'20#.#61.81.250':139
'20#.#61.193.168':139
'20#.#61.84.228':139
'20#.#61.233.41':139
'20#.#61.159.98':139
'20#.#61.94.156':139
'20#.#61.143.185':139
'20#.#61.111.209':139
'20#.#61.163.54':139
'20#.#61.98.66':139
'20#.#61.179.237':139
'20#.#61.117.193':139
'20#.#61.159.12':139
'20#.#61.103.57':139
'20#.#61.209.8':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней