Trojan.DownLoader12.29049

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER4fd9.dir00\svchost.exe.mdmp 16325836412032216

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER4fd9.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'61.##0.234.57':139
'61.##0.45.86':139
'61.##0.146.241':139
'61.##0.128.234':139
'61.##0.96.141':139
'61.##0.130.119':139
'61.##0.172.221':139
'61.##0.59.73':139
'61.##0.172.107':139
'61.##0.62.242':139
'61.##0.219.82':139
'61.##0.28.116':139
'61.##0.168.202':139
'61.##0.158.67':139
'61.##0.215.121':139
'61.##0.111.67':139
'61.##0.163.153':139
'61.##0.126.124':139
'61.##0.15.107':139
'61.##0.42.68':139
'61.##0.249.31':139
'61.##0.88.172':139
'61.##0.42.68':445
'61.##0.249.31':445
'61.##0.168.202':445
'61.##0.158.67':445
'61.##0.28.116':445
'61.##0.219.82':445
'61.##0.128.234':445
'61.##0.126.124':445
'61.##0.15.107':445
'61.##0.163.153':445
'61.##0.111.67':445
'61.#80.0.42':139
'61.##0.115.48':139
'61.##0.216.200':139
'61.##0.85.225':139
'61.##0.123.143':139
'61.##0.142.110':445
'61.##0.215.121':445
'61.##0.228.249':445
'61.##0.29.132':139
'61.##0.250.131':445
'61.##0.213.134':139
'61.##0.66.23':139
'61.##0.173.16':139
'61.##0.1.205':139
'61.#80.16.2':139
'61.##0.132.2':139
'61.##0.177.178':445
'61.##0.24.216':139
'61.##0.163.31':139
'61.##0.21.163':139
'61.##0.204.204':139
'61.##0.21.14':139
'61.##0.112.142':139
'61.##0.26.202':139
'61.##0.177.178':139
'61.##0.114.251':139
'61.##0.134.193':139
'61.##0.205.134':139
'61.##0.193.8':139
'61.##0.166.185':139
'61.##0.8.167':139
'61.##0.114.251':445
'61.##0.163.31':445
'61.##0.21.163':445
'61.##0.66.23':445
'61.##0.173.16':445
'61.##0.213.134':445
'61.##0.228.249':139
'61.##0.142.110':139
'61.##0.250.131':139
'61.##0.24.216':445
'61.##0.132.2':445
'61.#80.16.2':445
'61.##0.166.185':445
'61.##0.8.167':445
'61.##0.112.142':445
'61.##0.26.202':445
'61.##0.21.14':445
'61.##0.204.204':445
'61.##0.1.205':445
'61.##0.205.134':445
'61.##0.193.8':445
'61.##0.134.193':445
'61.##0.96.141':445
'61.##0.48.60':139
'61.##0.119.219':139
'61.##0.143.74':139
'61.##0.133.217':445
'61.##0.187.86':139
'61.##0.16.249':139
'61.##0.138.215':139
'61.##0.30.79':139
'61.##0.55.108':139
'61.##0.225.33':139
'61.##0.135.103':445
'61.##0.185.14':445
'61.##0.71.173':445
'61.##0.5.155':445
'61.##0.187.202':445
'61.##0.160.85':445
'61.##0.143.216':445
'61.##0.33.144':445
'61.##0.51.235':445
'61.##0.253.99':445
'61.##0.123.253':445
'61.##0.205.52':139
'61.##0.79.19':139
'61.##0.129.109':139
'61.##0.39.205':139
'61.##0.48.76':139
'61.##0.68.156':139
'61.##0.111.193':139
'61.##0.39.119':139
'61.##0.137.54':139
'61.##0.188.115':139
'61.##0.143.119':139
'61.##0.28.128':139
'61.##0.248.225':139
'61.##0.140.93':139
'61.##0.226.74':139
'61.##0.225.156':139
'61.##0.74.163':139
'61.##0.251.170':139
'61.##0.185.212':139
'61.##0.183.126':139
'61.##0.171.30':139
'61.##0.53.222':139
'61.##0.29.132':445
'61.##0.217.229':139
'61.##0.115.48':445
'61.##0.216.200':445
'61.#80.0.42':445
'61.##0.83.238':139
'61.##0.83.17':139
'61.##0.149.168':139
'61.##0.189.84':139
'61.##0.168.18':139
'61.##0.123.143':445
'61.##0.172.107':445
'61.##0.62.242':445
'61.##0.45.86':445
'61.##0.146.241':445
'61.##0.234.57':445
'61.##0.88.172':445
'61.##0.85.225':445
'61.##0.172.221':445
'61.##0.59.73':445
'61.##0.130.119':445
'61.##0.225.162':139
'61.##0.189.84':445
'61.##0.168.18':445
'61.##0.217.229':445
'61.##0.135.103':139
'61.##0.133.217':139
'61.##0.225.162':445
'61.##0.28.106':445
'61.##0.83.17':445
'61.##0.149.168':445
'61.##0.83.238':445
'61.##0.33.144':139
'61.##0.5.155':139
'61.##0.185.14':139
'61.##0.160.85':139
'61.##0.28.106':139
'61.##0.187.202':139
'61.##0.51.235':139
'61.##0.143.216':139
'61.##0.123.253':139
'61.##0.71.173':139
'61.##0.253.99':139
'61.##0.132.146':445
'61.##0.26.19':445
'61.##0.37.170':445
'61.##0.205.221':445
'61.##0.23.81':445
'61.##0.7.121':445
'61.##0.12.186':445
'61.##0.233.55':445
'61.##0.170.123':445
'61.##0.147.205':445
'61.##0.8.237':445
'61.##0.36.181':445
'61.##0.112.22':139
'61.##0.231.42':139
'61.##0.233.228':139
'61.##0.79.18':139
'61.##0.4.246':139
'61.##0.200.31':445
'61.##0.63.88':445
'61.##0.66.80':139
'61.##0.63.132':139
'61.##0.79.210':139
'61.##0.165.139':445
'61.##0.245.47':445
'61.##0.17.57':445
'61.##0.62.21':445
'61.##0.133.241':445
'61.##0.212.133':445
'61.##0.65.214':445
'61.##0.49.233':445
'61.##0.6.167':445
'61.##0.165.59':445
'61.##0.189.96':445
'61.##0.148.134':445
'61.##0.73.24':445
'61.##0.217.72':445
'61.##0.24.185':445
'61.##0.184.185':445
'61.##0.108.114':445
'61.##0.28.49':445
'61.##0.27.120':445
'61.#80.8.76':445
'61.##0.39.73':445
'61.##0.76.62':445
'61.##0.184.185':139
'61.##0.108.114':139
'61.##0.165.139':139
'61.##0.12.186':139
'61.##0.233.55':139
'61.##0.39.73':139
'61.##0.76.62':139
'61.##0.217.72':139
'61.##0.24.185':139
'61.##0.73.24':139
'61.##0.170.123':139
'61.##0.36.181':139
'61.##0.37.170':139
'61.##0.7.121':139
'61.##0.26.19':139
'61.##0.63.88':139
'61.##0.147.205':139
'61.##0.8.237':139
'61.##0.205.221':139
'61.##0.200.31':139
'61.##0.23.81':139
'61.#80.8.76':139
'61.##0.232.91':139
'61.##0.204.99':139
'61.##0.234.64':139
'61.##0.65.214':139
'61.##0.49.233':139
'61.##0.39.130':139
'61.##0.51.238':139
'61.##0.176.238':139
'61.##0.159.222':139
'61.##0.189.119':139
'61.##0.6.167':139
'61.##0.133.241':139
'61.##0.212.133':139
'61.##0.148.134':139
'61.##0.28.49':139
'61.##0.27.120':139
'61.##0.165.59':139
'61.##0.189.96':139
'61.##0.17.57':139
'61.##0.62.21':139
'61.##0.245.47':139
'61.##0.234.64':445
'61.##0.72.104':445
'61.##0.190.100':445
'61.##0.30.245':445
'61.##0.47.120':139
'61.##0.132.146':139
'61.##0.218.172':445
'61.##0.176.32':445
'61.##0.183.122':445
'61.##0.29.97':445
'61.#80.52.1':445
'61.##0.36.225':139
'61.##0.40.27':139
'61.##0.153.40':139
'61.##0.26.165':139
'61.##0.105.156':139
'61.##0.87.28':139
'61.##0.13.21':139
'61.##0.245.118':139
'61.##0.13.137':139
'61.##0.198.133':139
'61.##0.216.24':139
'61.#80.5.42':445
'61.##0.198.133':445
'61.##0.216.24':445
'61.##0.153.40':445
'61.##0.26.165':445
'61.##0.40.27':445
'61.##0.36.225':445
'61.##0.47.120':445
'61.##0.245.118':445
'61.##0.13.137':445
'61.##0.13.21':445
'61.##0.87.28':445
'61.##0.140.129':445
'61.##0.54.200':445
'61.##0.23.114':445
'61.##0.108.19':445
'61.##0.52.38':445
'61.##0.166.212':445
'61.##0.105.156':445
'61.##0.13.42':445
'61.##0.121.112':445
'61.##0.44.106':445
'61.##0.66.80':445
'61.##0.200.31':9988
'61.##0.79.210':445
'61.##0.231.42':445
'61.##0.63.132':445
'61.##0.233.55':9988
'61.##0.165.139':9988
'61.##0.12.186':9988
'61.##0.36.181':9988
'61.##0.8.237':9988
'61.##0.112.22':445
'61.##0.189.119':445
'61.##0.176.238':445
'61.##0.159.222':445
'61.##0.232.91':445
'61.##0.204.99':445
'61.##0.4.246':445
'61.##0.233.228':445
'61.##0.79.18':445
'61.##0.39.130':445
'61.##0.51.238':445
'61.##0.184.185':9988
'61.##0.23.114':139
'61.##0.140.129':139
'61.##0.52.38':139
'61.#80.5.42':139
'61.##0.108.19':139
'61.##0.13.42':139
'61.##0.166.212':139
'61.##0.44.106':139
'61.##0.54.200':139
'61.##0.121.112':139
'61.##0.176.32':139
'61.##0.30.245':139
'61.##0.72.104':139
'61.##0.39.73':9988
'61.##0.108.114':9988
'61.##0.24.185':9988
'61.##0.183.122':139
'61.##0.218.172':139
'61.#80.52.1':139
'61.##0.190.100':139
'61.##0.29.97':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней