Trojan.DownLoader12.29050

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER3575.dir00\svchost.exe.mdmp 16325836412032324

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3575.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##1.167.71':139
'60.##1.66.35':139
'60.##1.39.48':139
'60.##1.152.35':139
'60.##1.201.146':139
'60.##1.173.210':139
'60.##1.232.116':139
'60.##1.15.94':139
'60.##1.253.114':139
'60.##1.13.123':139
'60.##1.37.48':139
'60.##1.242.217':139
'60.##1.146.12':139
'60.##1.103.43':139
'60.##1.213.231':139
'60.##1.39.176':139
'60.##1.176.169':139
'60.##1.210.222':139
'60.##1.192.217':445
'60.##1.172.192':445
'60.##1.20.89':445
'60.##1.232.20':445
'60.#01.73.1':445
'60.##1.248.30':445
'60.##1.37.247':445
'60.##1.199.169':445
'60.##1.45.18':445
'60.##1.131.235':139
'60.##1.109.15':139
'60.##1.52.25':139
'60.##1.176.15':139
'60.##1.234.105':139
'60.##1.179.149':139
'60.##1.14.59':139
'60.##1.54.174':139
'60.##1.103.43':445
'60.##1.213.231':445
'60.##1.39.176':445
'60.##1.176.169':445
'60.##1.152.35':445
'60.##1.167.71':445
'60.##1.253.114':445
'60.##1.39.48':445
'60.##1.37.48':445
'60.##1.86.35':445
'60.##1.35.215':445
'60.##1.133.57':139
'60.##1.77.63':445
'60.##1.146.12':445
'60.##1.13.123':445
'60.##1.4.135':445
'60.##1.242.217':445
'60.##1.232.116':445
'60.##1.54.174':445
'60.##1.179.149':445
'60.##1.14.59':445
'60.##1.234.105':445
'60.##1.86.35':139
'60.##1.35.215':139
'60.##1.77.63':139
'60.##1.4.135':139
'60.##1.131.235':445
'60.##1.15.94':445
'60.##1.173.210':445
'60.##1.66.35':445
'60.##1.201.146':445
'60.##1.176.15':445
'60.##1.109.15':445
'60.##1.210.222':445
'60.##1.52.25':445
'60.##1.252.216':445
'60.##1.74.57':445
'60.##1.90.16':445
'60.#01.0.3':445
'60.##1.10.221':445
'60.##1.237.177':445
'60.##1.82.32':445
'60.##1.227.160':445
'60.##1.181.75':445
'60.##1.166.89':445
'60.##1.150.58':445
'60.#01.4.40':445
'60.##1.21.13':445
'60.##1.33.11':445
'60.##1.87.252':445
'60.##1.185.73':445
'60.##1.8.192':445
'60.##1.104.231':445
'60.##1.82.149':445
'60.##1.104.231':139
'60.##1.8.192':139
'60.##1.82.210':139
'60.##1.210.104':139
'60.##1.33.11':139
'60.##1.150.58':139
'60.#01.4.40':139
'60.#01.9.43':139
'60.##1.78.122':445
'60.##1.90.248':445
'60.##1.206.178':445
'60.##1.129.93':445
'60.##1.17.100':445
'60.##1.191.204':445
'60.#01.15.0':445
'60.##1.108.200':445
'60.##1.8.119':445
'60.##1.232.20':139
'60.##1.20.89':139
'60.#01.51.9':445
'60.##1.244.82':445
'60.##1.192.217':139
'60.##1.37.247':139
'60.##1.45.18':139
'60.##1.172.192':139
'60.##1.235.149':445
'60.##1.100.244':445
'60.##1.32.36':445
'60.##1.60.80':445
'60.##1.101.72':445
'60.##1.51.221':445
'60.##1.221.81':445
'60.##1.40.121':445
'60.##1.87.51':445
'60.##1.199.169':139
'60.#01.51.9':139
'60.##1.235.149':139
'60.##1.51.221':139
'60.##1.221.81':139
'60.##1.210.104':445
'60.#01.9.43':445
'60.##1.244.82':139
'60.##1.82.210':445
'60.##1.87.51':139
'60.##1.252.216':139
'60.##1.60.80':139
'60.#01.73.1':139
'60.##1.248.30':139
'60.##1.32.36':139
'60.##1.40.121':139
'60.##1.101.72':139
'60.##1.100.244':139
'60.##1.168.198':139
'60.##1.210.181':445
'60.##1.75.19':445
'60.##1.219.51':445
'60.#01.0.83':445
'60.##1.7.221':445
'60.##1.17.212':445
'60.##1.146.21':445
'60.##1.168.8':445
'60.##1.98.75':445
'60.##1.155.113':139
'60.##1.129.228':139
'60.##1.139.114':139
'60.##1.114.155':139
'60.##1.136.30':445
'60.##1.209.23':445
'60.##1.82.59':139
'60.##1.151.56':139
'60.#01.1.71':445
'60.##1.60.39':445
'60.##1.92.170':445
'60.##1.94.27':445
'60.##1.215.69':445
'60.##1.9.112':445
'60.##1.185.172':445
'60.##1.1.202':445
'60.##1.26.11':445
'60.##1.156.102':445
'60.##1.175.4':445
'60.##1.5.122':445
'60.##1.70.33':445
'60.##1.204.234':445
'60.##1.235.88':445
'60.##1.88.13':445
'60.##1.122.218':445
'60.##1.81.132':445
'60.##1.96.208':445
'60.#01.46.6':445
'60.##1.138.175':445
'60.##1.175.94':445
'60.##1.114.155':445
'60.##1.155.113':445
'60.##1.143.133':445
'60.##1.139.114':445
'60.##1.53.138':445
'60.##1.167.199':445
'60.##1.141.22':445
'60.#01.59.6':445
'60.##1.152.251':445
'60.##1.82.156':445
'60.##1.43.54':445
'60.##1.22.174':445
'60.##1.5.166':445
'60.##1.129.228':445
'60.##1.53.138':139
'60.##1.138.175':139
'60.##1.82.156':139
'60.##1.43.54':139
'60.#01.46.6':139
'60.##1.143.133':139
'60.##1.175.94':139
'60.##1.96.208':139
'60.##1.5.166':139
'60.##1.180.154':139
'60.#01.59.6':139
'60.##1.82.59':445
'60.##1.151.56':445
'60.##1.141.22':139
'60.##1.22.174':139
'60.##1.152.251':139
'60.##1.167.199':139
'60.##1.18.122':445
'60.##1.59.22':445
'60.##1.82.228':445
'60.##1.140.85':445
'60.##1.25.160':445
'60.##1.133.57':445
'60.##1.72.147':139
'60.##1.190.168':445
'60.##1.168.198':445
'60.##1.185.101':445
'60.##1.181.1':445
'60.##1.85.53':445
'60.##1.223.102':445
'60.##1.108.34':445
'60.##1.52.230':445
'60.##1.166.54':445
'60.##1.130.154':445
'60.##1.230.116':445
'60.##1.60.223':139
'60.##1.185.101':139
'60.##1.140.85':139
'60.##1.130.154':139
'60.##1.166.54':139
'60.##1.82.228':139
'60.##1.190.168':139
'60.##1.25.160':139
'60.##1.59.22':139
'60.##1.230.116':139
'60.##1.8.191':139
'60.##1.223.102':139
'60.##1.3.167':139
'60.##1.237.0':139
'60.##1.85.53':139
'60.##1.52.230':139
'60.##1.108.34':139
'60.##1.181.1':139
'60.#01.1.71':139
'60.##1.70.33':139
'60.##1.7.221':139
'60.##1.17.212':139
'60.##1.5.122':139
'60.##1.122.218':139
'60.##1.204.234':139
'60.##1.175.4':139
'60.##1.168.8':139
'60.##1.98.75':139
'60.##1.219.51':139
'60.##1.136.30':139
'60.##1.209.23':139
'60.##1.75.19':139
'60.##1.146.21':139
'60.#01.0.83':139
'60.##1.210.181':139
'60.##1.81.132':139
'60.##1.18.122':139
'60.##1.72.147':445
'60.##1.9.112':139
'60.##1.185.172':139
'60.##1.237.0':445
'60.##1.8.191':445
'60.##1.60.223':445
'60.##1.3.167':445
'60.##1.26.11':139
'60.##1.156.102':139
'60.##1.94.27':139
'60.##1.235.88':139
'60.##1.88.13':139
'60.##1.92.170':139
'60.##1.1.202':139
'60.##1.215.69':139
'60.##1.60.39':139
'60.##1.184.109':445
'60.##1.109.224':445
'60.##1.23.123':445
'60.##1.136.29':445
'60.##1.231.243':445
'60.##1.223.39':445
'60.##1.32.121':445
'60.##1.176.64':445
'60.##1.62.151':445
'60.##1.101.212':9988
'60.##1.90.89':9988
'60.##1.32.168':9988
'60.##1.211.165':9988
'60.##1.73.97':445
'60.##1.73.254':445
'60.##1.43.25':445
'60.##1.176.27':445
'60.##1.17.248':445
'60.##1.66.167':445
'60.##1.210.137':445
'60.##1.232.235':445
'60.##1.235.232':445
'60.##1.22.235':445
'60.##1.69.229':445
'60.##1.45.79':445
'60.##1.227.29':445
'60.##1.1.100':445
'60.##1.60.30':445
'60.##1.28.63':445
'60.##1.15.72':445
'60.##1.246.233':445
'60.##1.115.50':445
'60.##1.26.216':445
'60.##1.190.69':445
'60.#01.1.60':445
'60.##1.155.185':139
'60.##1.35.82':139
'60.##1.113.77':139
'60.##1.156.231':139
'60.##1.111.166':139
'60.##1.201.185':139
'60.##1.81.88':139
'60.##1.88.111':139
'60.##1.37.82':139
'60.##1.177.149':445
'60.##1.48.124':139
'60.##1.172.210':445
'60.##1.210.62':445
'60.##1.232.63':139
'60.##1.46.87':139
'60.##1.29.54':139
'60.##1.93.10':139
'60.##1.197.58':139
'60.##1.15.158':9988
'60.##1.210.29':9988
'60.##1.69.229':9988
'60.##1.233.201':9988
'60.##1.69.125':9988
'60.##1.139.243':9988
'60.##1.18.88':9988
'60.##1.117.69':9988
'60.##1.227.29':9988
'60.##1.121.215':139
'60.##1.172.210':139
'60.##1.246.36':139
'60.##1.92.212':139
'60.##1.210.137':9988
'60.##1.45.79':9988
'60.##1.210.62':139
'60.##1.177.149':139
'60.##1.38.179':445
'60.##1.45.79':139
'60.##1.227.29':139
'60.##1.66.167':139
'60.##1.210.137':139
'60.##1.38.179':139
'60.##1.233.201':139
'60.##1.22.235':139
'60.##1.69.229':139
'60.##1.235.232':139
'60.##1.190.69':139
'60.#01.1.60':139
'60.##1.60.30':139
'60.##1.28.63':139
'60.##1.1.100':139
'60.##1.232.235':139
'60.##1.115.50':139
'60.##1.26.216':139
'60.##1.82.244':139
'60.##1.69.125':139
'60.##1.139.243':139
'60.##1.18.88':139
'60.##1.117.69':139
'60.##1.90.89':139
'60.##1.211.165':139
'60.##1.32.168':139
'60.##1.101.212':139
'60.##1.116.111':139
'60.##1.17.103':139
'60.##1.210.29':139
'60.##1.223.143':139
'60.##1.15.158':139
'60.##1.250.4':139
'60.##1.1.119':139
'60.##1.31.123':139
'60.##1.226.167':139
'60.##1.18.88':445
'60.##1.117.69':445
'60.##1.1.119':445
'60.##1.116.111':445
'60.##1.32.168':445
'60.##1.101.212':445
'60.##1.69.125':445
'60.##1.139.243':445
'60.##1.250.4':445
'60.##1.223.143':445
'60.##1.15.158':445
'60.##1.233.201':445
'60.##1.82.244':445
'60.##1.31.123':445
'60.##1.226.167':445
'60.##1.17.103':445
'60.##1.210.29':445
'60.##1.211.165':445
'60.##1.176.64':139
'60.##1.231.243':139
'60.##1.109.224':139
'60.##1.32.121':139
'60.##1.15.72':139
'60.##1.246.233':139
'60.##1.223.39':139
'60.##1.17.248':139
'60.##1.184.109':139
'60.##1.176.27':139
'60.##1.73.97':139
'60.##1.90.89':445
'60.##1.43.25':139
'60.##1.23.123':139
'60.##1.136.29':139
'60.##1.73.254':139
'60.##1.62.151':139
'60.##1.121.215':445
'60.##1.135.96':139
'60.##1.251.251':139
'60.##1.65.223':139
'60.##1.105.130':139
'60.##1.67.35':139
'60.##1.158.201':139
'60.##1.104.86':139
'60.##1.75.93':139
'60.##1.233.104':139
'60.##1.94.84':445
'60.##1.203.233':445
'60.##1.200.171':445
'60.##1.173.116':445
'60.##1.88.189':445
'60.##1.103.122':445
'60.##1.227.8':445
'60.##1.195.90':445
'60.##1.55.89':139
'60.##1.156.208':445
'60.##1.220.2':445
'60.##1.88.189':139
'60.##1.103.122':139
'60.##1.94.241':445
'60.##1.33.35':445
'60.##1.149.250':445
'60.##1.181.5':445
'60.##1.195.90':139
'60.##1.207.78':139
'60.##1.200.171':139
'60.##1.88.204':139
'60.##1.203.220':139
'60.##1.203.233':139
'60.##1.227.8':139
'60.##1.173.116':139
'60.##1.94.84':139
'60.##1.82.32':139
'60.##1.82.149':139
'60.##1.181.75':139
'60.##1.237.177':139
'60.##1.90.248':139
'60.##1.206.178':139
'60.##1.129.93':139
'60.##1.17.100':139
'60.##1.227.160':139
'60.##1.185.73':139
'60.##1.74.57':139
'60.##1.21.13':139
'60.##1.87.252':139
'60.##1.166.89':139
'60.##1.90.16':139
'60.##1.10.221':139
'60.#01.0.3':139
'60.##1.108.200':139
'60.##1.67.35':445
'60.##1.158.201':445
'60.##1.104.86':445
'60.##1.75.93':445
'60.##1.203.220':445
'60.##1.207.78':445
'60.##1.55.89':445
'60.##1.88.204':445
'60.##1.251.251':445
'60.##1.78.122':139
'60.##1.191.204':139
'60.#01.15.0':139
'60.##1.8.119':139
'60.##1.105.130':445
'60.##1.135.96':445
'60.##1.233.104':445
'60.##1.65.223':445
'60.##1.79.168':445
'60.##1.18.224':139
'60.##1.13.60':139
'60.##1.104.178':139
'60.##1.157.144':139
'60.##1.254.78':139
'60.##1.160.69':139
'60.##1.162.130':139
'60.##1.147.82':139
'60.##1.111.80':139
'60.##1.193.232':139
'60.##1.232.214':139
'60.##1.88.61':139
'60.##1.213.46':139
'60.##1.246.80':139
'60.##1.34.179':139
'60.##1.85.202':139
'60.##1.68.237':139
'60.##1.78.209':139
'60.##1.88.111':445
'60.##1.111.166':445
'60.##1.35.82':445
'60.##1.81.88':445
'60.##1.246.36':445
'60.##1.92.212':445
'60.##1.201.185':445
'60.##1.197.58':445
'60.##1.155.185':445
'60.##1.93.10':445
'60.##1.232.63':445
'60.##1.48.124':445
'60.##1.29.54':445
'60.##1.113.77':445
'60.##1.156.231':445
'60.##1.46.87':445
'60.##1.37.82':445
'60.##1.246.80':445
'60.##1.34.179':445
'60.##1.85.202':445
'60.##1.68.237':445
'60.##1.157.144':445
'60.##1.18.224':445
'60.##1.111.80':445
'60.##1.104.178':445
'60.##1.232.214':445
'60.##1.137.233':445
'60.##1.78.64':445
'60.##1.97.61':445
'60.##1.71.215':445
'60.##1.213.46':445
'60.##1.193.232':445
'60.##1.10.172':445
'60.##1.88.61':445
'60.##1.13.60':445
'60.##1.79.168':139
'60.##1.97.61':139
'60.##1.94.241':139
'60.##1.33.35':139
'60.##1.78.64':139
'60.##1.10.172':139
'60.##1.71.215':139
'60.##1.137.233':139
'60.##1.181.5':139
'60.##1.254.78':445
'60.##1.160.69':445
'60.##1.162.130':445
'60.##1.147.82':445
'60.##1.220.2':139
'60.##1.149.250':139
'60.##1.78.209':445
'60.##1.156.208':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней