Trojan.DownLoader12.29052

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER3812.dir00\svchost.exe.mdmp 16325836412032188

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3812.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#08.234.242':445
'12#.#08.56.204':445
'12#.#08.57.150':445
'12#.#08.112.34':445
'12#.#08.0.241':445
'12#.#08.232.39':445
'12#.#08.146.228':445
'12#.#08.81.138':445
'12#.#08.171.22':445
'12#.#08.181.24':445
'12#.#08.32.217':445
'12#.#08.67.38':445
'12#.#08.38.100':445
'12#.#08.38.158':445
'12#.#08.88.250':445
'12#.#08.167.113':445
'12#.#08.102.207':445
'12#.#08.152.32':445
'12#.#08.76.179':445
'12#.#08.181.24':139
'12#.#08.32.217':139
'12#.#08.67.38':139
'12#.#08.38.100':139
'12#.#08.38.158':139
'12#.#08.88.250':139
'12#.#08.167.113':139
'12#.#08.102.207':139
'12#.#08.152.32':139
'12#.#08.75.83':139
'12#.#08.8.47':139
'12#.#08.183.247':139
'12#.#08.110.180':139
'12#.#08.46.143':139
'12#.#08.127.111':139
'12#.#08.208.22':139
'12#.#08.142.171':139
'12#.#08.11.174':139
'12#.#08.208.22':445
'12#.#08.13.195':139
'12#.#08.195.75':139
'12#.#08.121.252':139
'12#.#08.66.218':139
'12#.#08.174.139':139
'12#.#08.82.120':139
'12#.#08.52.204':139
'12#.#08.68.69':139
'12#.#08.69.87':139
'12#.#08.199.115':445
'12#.#08.125.252':445
'12#.#08.123.66':445
'12#.#08.229.198':445
'12#.#08.44.138':445
'12#.#08.155.111':139
'12#.#08.19.218':139
'12#.#08.113.36':445
'12#.#08.66.155':139
'12#.#08.237.157':139
'12#.#08.110.180':445
'12#.#08.75.83':445
'12#.#08.113.36':139
'12#.#08.183.247':445
'12#.#08.8.47':445
'12#.#08.11.174':445
'12#.#08.127.111':445
'12#.#08.46.143':445
'12#.#08.142.171':445
'12#.#08.38.234':139
'12#.#08.165.205':139
'12#.#08.134.91':139
'12#.#08.90.240':139
'12#.#08.123.66':139
'12#.#08.125.252':139
'12#.#08.44.138':139
'12#.#08.229.198':139
'12#.#08.199.115':139
'12#.#08.32.129':139
'12#.#08.129.4':139
'12#.#08.34.199':139
'12#.#08.197.125':139
'12#.#08.138.198':139
'12#.#08.144.197':139
'12#.#08.223.26':139
'12#.#08.242.177':139
'12#.#08.102.226':139
'12#.#08.139.4':139
'12#.#08.4.135':139
'12#.#08.81.168':139
'12#.#08.23.177':139
'12#.#08.232.30':139
'12#.#08.66.216':139
'12#.#08.44.191':139
'12#.#08.208.179':139
'12#.#08.254.54':139
'12#.#08.229.45':445
'12#.#08.83.11':445
'12#.#08.239.142':445
'12#.#08.58.155':445
'12#.#08.88.245':445
'12#.#08.63.158':445
'12#.#08.73.37':445
'12#.#08.104.151':445
'12#.#08.239.238':445
'12#.#08.0.17':445
'12#.#08.120.3':445
'12#.#08.250.141':445
'12#.#08.45.101':445
'12#.#08.144.199':445
'12#.#08.1.126':445
'12#.#08.72.65':445
'12#.#08.164.119':445
'12#.#08.126.58':445
'12#.#08.58.72':445
'12#.#08.54.147':139
'12#.#08.191.75':445
'12#.#08.18.250':445
'12#.#08.76.179':139
'12#.#08.156.166':445
'12#.#08.181.65':445
'12#.#08.23.177':445
'12#.#08.139.4':445
'12#.#08.54.147':445
'12#.#08.81.168':445
'12#.#08.234.242':139
'12#.#08.56.204':139
'12#.#08.57.150':139
'12#.#08.112.34':139
'12#.#08.0.241':139
'12#.#08.232.39':139
'12#.#08.146.228':139
'12#.#08.81.138':139
'12#.#08.171.22':139
'12#.#08.4.135':445
'12#.#08.102.226':445
'12#.#08.144.197':445
'12#.#08.138.198':445
'12#.#08.242.177':445
'12#.#08.223.26':445
'12#.#08.18.250':139
'12#.#08.181.65':139
'12#.#08.156.166':139
'12#.#08.191.75':139
'12#.#08.254.54':445
'12#.#08.66.216':445
'12#.#08.232.30':445
'12#.#08.208.179':445
'12#.#08.44.191':445
'12#.#08.32.129':445
'12#.#08.129.4':445
'12#.#08.34.199':445
'12#.#08.197.125':445
'12#.#08.31.25':445
'12#.#08.6.92':445
'12#.#08.206.95':445
'12#.#08.95.31':445
'12#.#08.67.56':445
'12#.#08.189.237':139
'12#.#08.104.240':139
'12#.#08.62.46':445
'12#.#08.35.119':445
'12#.#08.15.180':445
'12#.#08.179.173':445
'12#.#08.18.73':445
'12#.#08.73.15':445
'12#.#08.174.79':445
'12#.#08.133.102':445
'12#.#08.11.105':445
'12#.#08.80.49':445
'12#.#08.49.126':445
'12#.#08.64.12':139
'12#.#08.133.102':139
'12#.#08.11.105':139
'12#.#08.80.49':139
'12#.#08.49.126':139
'12#.#08.206.95':139
'12#.#08.6.92':139
'12#.#08.67.56':139
'12#.#08.95.31':139
'12#.#08.31.25':139
'12#.#08.116.100':139
'12#.#08.168.160':139
'12#.#08.12.66':139
'12#.#08.65.138':139
'12#.#08.18.73':139
'12#.#08.179.173':139
'12#.#08.174.79':139
'12#.#08.73.15':139
'12#.#08.15.180':139
'12#.#08.168.160':445
'12#.#08.172.251':139
'12#.#08.162.75':139
'12#.#08.62.193':139
'12#.#08.193.60':139
'12#.#08.76.145':139
'12#.#08.100.160':139
'12#.#08.1.114':139
'12#.#08.145.163':139
'12#.#08.122.49':139
'12#.#08.218.189':445
'12#.#08.51.7':139
'12#.#08.134.245':445
'12#.#08.167.15':445
'12#.#08.37.122':139
'12#.#08.153.180':139
'12#.#08.40.111':139
'12#.#08.67.55':139
'12#.#08.108.40':139
'12#.#08.115.54':139
'12#.#08.218.189':139
'12#.#08.189.237':445
'12#.#08.134.245':139
'12#.#08.167.15':139
'12#.#08.104.240':445
'12#.#08.65.138':445
'12#.#08.116.100':445
'12#.#08.64.12':445
'12#.#08.12.66':445
'12#.#08.98.177':139
'12#.#08.1.169':139
'12#.#08.22.70':139
'12#.#08.124.214':139
'12#.#08.166.190':139
'12#.#08.94.184':139
'12#.#08.151.19':139
'12#.#08.49.234':139
'12#.#08.148.29':139
'12#.#08.225.180':139
'12#.#08.27.112':139
'12#.#08.70.236':139
'12#.#08.235.225':139
'12#.#08.95.177':139
'12#.#08.84.187':139
'12#.#08.74.33':139
'12#.#08.177.79':139
'12#.#08.79.97':139
'12#.#08.249.220':139
'12#.#08.174.226':139
'12#.#08.85.14':139
'12#.#08.50.254':139
'12#.#08.11.107':139
'12#.#08.33.145':139
'12#.#08.254.176':139
'12#.#08.16.248':139
'12#.#08.141.172':139
'12#.#08.38.217':139
'12#.#08.82.120':445
'12#.#08.52.204':445
'12#.#08.68.69':445
'12#.#08.69.87':445
'12#.#08.237.157':445
'12#.#08.38.234':445
'12#.#08.165.205':445
'12#.#08.134.91':445
'12#.#08.90.240':445
'12#.#08.155.111':445
'12#.#08.19.218':445
'12#.#08.240.35':139
'12#.#08.66.155':445
'12#.#08.121.252':445
'12#.#08.195.75':445
'12#.#08.174.139':445
'12#.#08.66.218':445
'12#.#08.13.195':445
'12#.#08.37.135':139
'12#.#08.50.254':445
'12#.#08.249.220':445
'12#.#08.37.135':445
'12#.#08.85.14':445
'12#.#08.174.226':445
'12#.#08.141.172':445
'12#.#08.33.145':445
'12#.#08.11.107':445
'12#.#08.16.248':445
'12#.#08.239.52':445
'12#.#08.104.113':445
'12#.#08.62.46':139
'12#.#08.35.119':139
'12#.#08.30.82':445
'12#.#08.8.147':445
'12#.#08.9.96':445
'12#.#08.232.67':445
'12#.#08.155.9':445
'12#.#08.254.176':445
'12#.#08.239.52':139
'12#.#08.104.113':139
'12#.#08.38.217':445
'12#.#08.240.35':445
'12#.#08.30.82':139
'12#.#08.8.147':139
'12#.#08.9.96':139
'12#.#08.232.67':139
'12#.#08.155.9':139
'12#.#08.225.180':445
'12#.#08.27.112':445
'12#.#08.70.236':445
'12#.#08.235.225':445
'12#.#08.95.177':445
'12#.#08.84.187':445
'12#.#08.74.33':445
'12#.#08.177.79':445
'12#.#08.79.97':445
'12#.#08.208.102':445
'12#.#08.137.50':445
'12#.#08.86.238':445
'12#.#08.105.246':9988
'12#.#08.169.183':445
'12#.#08.3.214':445
'12#.#08.27.202':445
'12#.#08.68.254':445
'12#.#08.92.109':445
'12#.#08.52.27':445
'12#.#08.33.201':9988
'12#.#08.32.231':9988
'12#.#08.15.42':9988
'12#.#08.42.253':9988
'12#.#08.171.23':9988
'12#.#08.47.132':9988
'12#.#08.72.19':9988
'12#.#08.100.102':9988
'12#.#08.86.27':9988
'12#.#08.64.172':445
'12#.#08.112.59':445
'12#.#08.27.157':445
'12#.#08.200.189':445
'12#.#08.204.213':445
'12#.#08.138.228':445
'12#.#08.3.126':445
'12#.#08.212.120':445
'12#.#08.186.140':445
'12#.#08.115.140':445
'12#.#08.216.109':445
'12#.#08.44.117':445
'12#.#08.81.131':445
'12#.#08.205.194':445
'12#.#08.15.31':445
'12#.#08.68.34':445
'12#.#08.242.252':445
'12#.#08.193.149':445
'12#.#08.149.182':445
'12#.#08.78.247':9988
'12#.#08.107.164':139
'12#.#08.163.226':139
'12#.#08.26.171':445
'12#.#08.147.90':445
'12#.#08.104.123':139
'12#.#08.96.17':139
'12#.#08.133.62':139
'12#.#08.164.225':139
'12#.#08.125.51':139
'12#.#08.152.27':445
'12#.#08.8.58':445
'12#.#08.111.20':445
'12#.#08.0.228':445
'12#.#08.238.62':445
'12#.#08.37.209':445
'12#.#08.225.206':445
'12#.#08.162.138':445
'12#.#08.198.171':445
'12#.#08.6.187':139
'12#.#08.37.209':139
'12#.#08.225.206':139
'12#.#08.162.138':139
'12#.#08.198.171':139
'12#.#08.26.171':139
'12#.#08.162.196':9988
'12#.#08.196.41':9988
'12#.#08.147.90':139
'12#.#08.27.157':9988
'12#.#08.18.187':139
'12#.#08.49.193':139
'12#.#08.243.149':139
'12#.#08.75.18':139
'12#.#08.111.20':139
'12#.#08.8.58':139
'12#.#08.238.62':139
'12#.#08.0.228':139
'12#.#08.152.27':139
'12#.#08.3.126':139
'12#.#08.212.120':139
'12#.#08.186.140':139
'12#.#08.115.140':139
'12#.#08.162.196':139
'12#.#08.15.42':139
'12#.#08.42.253':139
'12#.#08.196.41':139
'12#.#08.78.247':139
'12#.#08.68.34':139
'12#.#08.242.252':139
'12#.#08.193.149':139
'12#.#08.149.182':139
'12#.#08.200.189':139
'12#.#08.27.157':139
'12#.#08.138.228':139
'12#.#08.204.213':139
'12#.#08.112.59':139
'12#.#08.33.201':139
'12#.#08.251.152':139
'12#.#08.47.132':139
'12#.#08.229.24':139
'12#.#08.245.249':139
'12#.#08.26.135':139
'12#.#08.72.19':139
'12#.#08.122.166':139
'12#.#08.105.246':139
'12#.#08.8.148':139
'12#.#08.23.226':139
'12#.#08.226.100':139
'12#.#08.32.231':139
'12#.#08.171.23':139
'12#.#08.100.102':139
'12#.#08.10.166':139
'12#.#08.86.27':139
'12#.#08.102.128':139
'12#.#08.128.13':139
'12#.#08.15.31':139
'12#.#08.102.128':445
'12#.#08.128.13':445
'12#.#08.226.100':445
'12#.#08.100.102':445
'12#.#08.10.166':445
'12#.#08.245.249':445
'12#.#08.251.152':445
'12#.#08.86.27':445
'12#.#08.229.24':445
'12#.#08.78.247':445
'12#.#08.15.42':445
'12#.#08.162.196':445
'12#.#08.196.41':445
'12#.#08.42.253':445
'12#.#08.171.23':445
'12#.#08.23.226':445
'12#.#08.33.201':445
'12#.#08.32.231':445
'12#.#08.47.132':445
'12#.#08.27.202':139
'12#.#08.68.254':139
'12#.#08.92.109':139
'12#.#08.52.27':139
'12#.#08.64.172':139
'12#.#08.216.109':139
'12#.#08.44.117':139
'12#.#08.81.131':139
'12#.#08.205.194':139
'12#.#08.26.135':445
'12#.#08.72.19':445
'12#.#08.122.166':445
'12#.#08.8.148':445
'12#.#08.105.246':445
'12#.#08.86.238':139
'12#.#08.3.214':139
'12#.#08.169.183':139
'12#.#08.137.50':139
'12#.#08.169.162':445
'12#.#08.212.150':445
'12#.#08.48.137':445
'12#.#08.136.93':445
'12#.#08.196.15':445
'12#.#08.36.162':445
'12#.#08.162.96':445
'12#.#08.37.32':445
'12#.#08.7.206':445
'12#.#08.1.155':445
'12#.#08.99.5':445
'12#.#08.131.217':445
'12#.#08.217.111':445
'12#.#08.54.252':445
'12#.#08.153.81':445
'12#.#08.25.105':445
'12#.#08.75.47':445
'12#.#08.124.139':445
'12#.#08.234.133':445
'12#.#08.153.81':139
'12#.#08.25.105':139
'12#.#08.75.47':139
'12#.#08.124.139':139
'12#.#08.48.137':139
'12#.#08.212.150':139
'12#.#08.196.15':139
'12#.#08.136.93':139
'12#.#08.169.162':139
'12#.#08.142.197':139
'12#.#08.113.131':139
'12#.#08.119.191':445
'12#.#08.100.65':445
'12#.#08.131.217':139
'12#.#08.99.5':139
'12#.#08.54.252':139
'12#.#08.217.111':139
'12#.#08.1.155':139
'12#.#08.113.131':445
'12#.#08.120.3':139
'12#.#08.250.141':139
'12#.#08.45.101':139
'12#.#08.144.199':139
'12#.#08.1.126':139
'12#.#08.72.65':139
'12#.#08.164.119':139
'12#.#08.126.58':139
'12#.#08.58.72':139
'12#.#08.83.91':445
'12#.#08.186.67':445
'12#.#08.28.197':445
'12#.#08.225.109':445
'12#.#08.209.45':445
'12#.#08.79.105':445
'12#.#08.229.45':139
'12#.#08.51.69':445
'12#.#08.67.93':445
'12#.#08.58.155':139
'12#.#08.83.91':139
'12#.#08.186.67':139
'12#.#08.28.197':139
'12#.#08.225.109':139
'12#.#08.209.45':139
'12#.#08.79.105':139
'12#.#08.142.197':445
'12#.#08.51.69':139
'12#.#08.67.93':139
'12#.#08.239.142':139
'12#.#08.63.158':139
'12#.#08.88.245':139
'12#.#08.83.11':139
'12#.#08.0.17':139
'12#.#08.104.151':139
'12#.#08.208.102':139
'12#.#08.239.238':139
'12#.#08.73.37':139
'12#.#08.230.66':139
'12#.#08.188.185':139
'12#.#08.60.168':139
'12#.#08.26.96':139
'12#.#08.22.181':139
'12#.#08.89.179':139
'12#.#08.80.118':139
'12#.#08.180.211':139
'12#.#08.211.89':139
'12#.#08.102.233':139
'12#.#08.212.55':139
'12#.#08.67.200':139
'12#.#08.203.18':139
'12#.#08.122.126':139
'12#.#08.105.169':139
'12#.#08.4.237':139
'12#.#08.17.162':139
'12#.#08.58.209':139
'12#.#08.174.126':139
'12#.#08.133.62':445
'12#.#08.96.17':445
'12#.#08.164.225':445
'12#.#08.125.51':445
'12#.#08.6.187':445
'12#.#08.18.187':445
'12#.#08.49.193':445
'12#.#08.243.149':445
'12#.#08.75.18':445
'12#.#08.147.21':139
'12#.#08.126.210':139
'12#.#08.134.175':139
'12#.#08.31.130':139
'12#.#08.140.26':139
'12#.#08.163.226':445
'12#.#08.104.123':445
'12#.#08.36.108':139
'12#.#08.107.164':445
'12#.#08.80.93':139
'12#.#08.80.93':445
'12#.#08.67.200':445
'12#.#08.102.233':445
'12#.#08.212.55':445
'12#.#08.203.18':445
'12#.#08.17.162':445
'12#.#08.105.169':445
'12#.#08.122.126':445
'12#.#08.58.209':445
'12#.#08.36.162':139
'12#.#08.162.96':139
'12#.#08.37.32':139
'12#.#08.7.206':139
'12#.#08.119.191':139
'12#.#08.255.57':445
'12#.#08.145.122':445
'12#.#08.234.133':139
'12#.#08.100.65':139
'12#.#08.4.237':445
'12#.#08.31.130':445
'12#.#08.147.21':445
'12#.#08.134.175':445
'12#.#08.174.126':445
'12#.#08.126.210':445
'12#.#08.255.57':139
'12#.#08.145.122':139
'12#.#08.140.26':445
'12#.#08.36.108':445
'12#.#08.230.66':445
'12#.#08.188.185':445
'12#.#08.60.168':445
'12#.#08.26.96':445
'12#.#08.180.211':445
'12#.#08.89.179':445
'12#.#08.80.118':445
'12#.#08.22.181':445
'12#.#08.211.89':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней