Trojan.DownLoader12.29010

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa854.dir00\svchost.exe.mdmp 16325836412030148

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa854.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#85.50.210':445
'20#.#85.106.130':445
'20#.#85.168.215':445
'20#.#85.170.225':445
'20#.#85.107.15':445
'20#.#85.57.106':445
'20#.#85.210.145':445
'20#.#85.28.9':445
'20#.#85.218.135':445
'20#.#85.35.224':445
'20#.#85.201.88':445
'20#.#85.126.156':445
'20#.#85.127.142':445
'20#.#85.71.37':445
'20#.#85.95.192':445
'20#.#85.223.97':445
'20#.#85.161.118':445
'20#.#85.52.23':445
'20#.#85.67.242':445
'20#.#85.31.235':445
'20#.#85.62.103':445
'20#.#85.152.43':445
'20#.#85.18.152':445
'20#.#85.41.174':445
'20#.#85.188.158':445
'20#.#85.230.158':139
'20#.#85.232.230':139
'20#.#85.252.49':139
'20#.#85.96.247':139
'20#.#85.252.80':139
'20#.#85.233.167':139
'20#.#85.87.201':139
'20#.#85.123.28':445
'20#.#85.84.123':445
'20#.#85.163.243':139
'20#.#85.87.131':139
'20#.#85.87.97':139
'20#.#85.84.123':139
'20#.#85.29.85':139
'20#.#85.187.6':139
'20#.#85.119.89':445
'20#.#85.28.197':445
'20#.#85.123.28':139
'20#.#85.50.228':139
'20#.#85.17.191':139
'20#.#85.178.27':139
'20#.#85.33.124':139
'20#.#85.146.133':139
'20#.#85.1.234':139
'20#.#85.64.196':445
'20#.#85.18.219':139
'20#.#85.184.110':139
'20#.#85.78.160':139
'20#.#85.139.240':445
'20#.#85.197.80':445
'20#.#85.169.20':445
'20#.#85.52.23':139
'20#.#85.127.142':139
'20#.#85.71.37':139
'20#.#85.64.196':139
'20#.#85.223.97':139
'20#.#85.161.118':139
'20#.#85.212.100':445
'20#.#85.213.93':445
'20#.#85.108.213':445
'20#.#85.236.210':445
'20#.#85.96.8':445
'20#.#85.198.114':445
'20#.#85.35.45':445
'20#.#85.115.154':445
'20#.#85.124.231':445
'20#.#85.192.26':445
'20#.#85.36.249':445
'20#.#85.92.192':445
'20#.#85.95.192':139
'20#.#85.210.145':139
'20#.#85.28.9':139
'20#.#85.218.135':139
'20#.#85.35.224':139
'20#.#85.201.88':139
'20#.#85.126.156':139
'20#.#85.18.219':445
'20#.#85.184.110':445
'20#.#85.78.160':445
'20#.#85.188.158':139
'20#.#85.119.89':139
'20#.#85.28.197':139
'20#.#85.67.242':139
'20#.#85.31.235':139
'20#.#85.62.103':139
'20#.#85.152.43':139
'20#.#85.18.152':139
'20#.#85.41.174':139
'20#.#85.50.210':139
'20#.#85.106.130':139
'20#.#85.168.215':139
'20#.#85.170.225':139
'20#.#85.107.15':139
'20#.#85.57.106':139
'20#.#85.29.85':445
'20#.#85.219.31':445
'20#.#85.119.91':445
'20#.#85.97.224':445
'20#.#85.206.117':445
'20#.#85.185.35':445
'20#.#85.91.209':445
'20#.#85.125.132':445
'20#.#85.3.62':445
'20#.#85.180.139':445
'20#.#85.19.75':445
'20#.#85.204.62':445
'20#.#85.129.84':445
'20#.#85.122.11':445
'20#.#85.61.130':445
'20#.#85.102.1':445
'20#.#85.13.74':445
'20#.#85.8.169':445
'20#.#85.235.31':445
'20#.#85.176.247':445
'20#.#85.59.132':445
'20#.#85.115.170':445
'20#.#85.148.101':445
'20#.#85.112.148':445
'20#.#85.115.150':445
'20#.#85.127.203':445
'20#.#85.226.246':139
'20#.#85.60.33':139
'20#.#85.52.229':139
'20#.#85.10.78':139
'20#.#85.5.120':139
'20#.#85.194.54':139
'20#.#85.146.129':139
'20#.#85.48.94':139
'20#.#85.157.73':139
'20#.#85.29.254':139
'20#.#85.128.162':139
'20#.#85.67.223':139
'20#.#85.50.242':445
'20#.#85.205.7':139
'20#.#85.101.254':139
'20#.#85.64.138':445
'20#.#85.241.178':445
'20#.#85.251.204':445
'20#.#85.251.122':139
'20#.#85.10.224':139
'20#.#85.78.112':139
'20#.#85.87.192':139
'20#.#85.242.142':139
'20#.#85.123.32':139
'20#.#85.218.12':445
'20#.#85.87.97':445
'20#.#85.87.201':445
'20#.#85.151.133':139
'20#.#85.252.49':445
'20#.#85.87.131':445
'20#.#85.163.243':445
'20#.#85.235.31':139
'20#.#85.122.11':139
'20#.#85.61.130':139
'20#.#85.218.12':139
'20#.#85.13.74':139
'20#.#85.8.169':139
'20#.#85.1.234':445
'20#.#85.50.228':445
'20#.#85.17.191':445
'20#.#85.187.6':445
'20#.#85.33.124':445
'20#.#85.146.133':445
'20#.#85.233.167':445
'20#.#85.230.158':445
'20#.#85.232.230':445
'20#.#85.178.27':445
'20#.#85.96.247':445
'20#.#85.252.80':445
'20#.#85.102.1':139
'20#.#85.180.139':139
'20#.#85.127.203':139
'20#.#85.3.62':139
'20#.#85.19.75':139
'20#.#85.204.62':139
'20#.#85.129.84':139
'20#.#85.241.178':139
'20#.#85.50.242':139
'20#.#85.151.133':445
'20#.#85.125.132':139
'20#.#85.64.138':139
'20#.#85.251.204':139
'20#.#85.176.247':139
'20#.#85.59.132':139
'20#.#85.115.170':139
'20#.#85.148.101':139
'20#.#85.112.148':139
'20#.#85.115.150':139
'20#.#85.219.31':139
'20#.#85.119.91':139
'20#.#85.97.224':139
'20#.#85.206.117':139
'20#.#85.185.35':139
'20#.#85.91.209':139
'20#.#85.36.124':445
'20#.#85.246.226':445
'20#.#85.84.129':445
'20#.#85.104.202':445
'20#.#85.247.242':445
'20#.#85.169.245':445
'20#.#85.217.190':445
'20#.#85.161.22':445
'20#.#85.86.219':445
'20#.#85.20.116':445
'20#.#85.221.141':445
'20#.#85.176.218':445
'20#.#85.113.104':445
'20#.#85.23.23':445
'20#.#85.54.16':445
'20#.#85.136.80':139
'20#.#85.188.181':445
'20#.#85.29.51':445
'20#.#85.38.50':445
'20#.#85.184.44':445
'20#.#85.136.222':445
'20#.#85.54.55':445
'20#.#85.123.83':445
'20#.#85.227.22':445
'20#.#85.134.169':445
'20#.#85.119.200':445
'20#.#85.33.100':445
'20#.#85.20.33':445
'20#.#85.60.250':445
'20#.#85.154.235':445
'20#.#85.254.1':445
'20#.#85.120.130':445
'20#.#85.92.74':445
'20#.#85.140.103':445
'20#.#85.74.64':445
'20#.#85.165.73':445
'20#.#85.123.215':445
'20#.#85.68.190':445
'20#.#85.39.107':445
'20#.#85.61.165':445
'20#.#85.18.183':445
'20#.#85.91.246':445
'20#.#85.152.168':445
'20#.#85.6.75':445
'20#.#85.128.184':445
'20#.#85.41.32':445
'20#.#85.89.254':445
'20#.#85.159.244':445
'20#.#85.139.39':445
'20#.#85.10.141':139
'20#.#85.246.226':139
'20#.#85.20.116':139
'20#.#85.217.190':139
'20#.#85.169.245':139
'20#.#85.247.242':139
'20#.#85.84.129':139
'20#.#85.161.22':139
'20#.#85.86.219':139
'20#.#85.134.169':139
'20#.#85.176.218':139
'20#.#85.36.124':139
'20#.#85.221.141':139
'20#.#85.113.104':139
'20#.#85.54.55':139
'20#.#85.123.83':139
'20#.#85.188.181':139
'20#.#85.23.23':139
'20#.#85.38.50':139
'20#.#85.184.44':139
'20#.#85.104.202':139
'20#.#85.136.222':139
'20#.#85.227.22':139
'20#.#85.29.51':139
'20#.#85.54.16':139
'20#.#85.18.183':139
'20#.#85.33.100':139
'20#.#85.20.33':139
'20#.#85.123.215':139
'20#.#85.154.235':139
'20#.#85.119.200':139
'20#.#85.254.1':139
'20#.#85.120.130':139
'20#.#85.103.2':139
'20#.#85.140.103':139
'20#.#85.74.64':139
'20#.#85.92.74':139
'20#.#85.165.73':139
'20#.#85.39.107':139
'20#.#85.139.39':139
'20#.#85.60.250':139
'20#.#85.68.190':139
'20#.#85.152.168':139
'20#.#85.91.246':139
'20#.#85.89.254':139
'20#.#85.61.165':139
'20#.#85.41.32':139
'20#.#85.6.75':139
'20#.#85.128.184':139
'20#.#85.159.244':139
'20#.#85.103.2':445
'20#.#85.254.125':445
'20#.#85.122.121':445
'20#.#85.98.101':445
'20#.#85.237.180':445
'20#.#85.238.235':445
'20#.#85.5.17':445
'20#.#85.208.236':445
'20#.#85.187.43':445
'20#.#85.117.19':445
'20#.#85.92.109':445
'20#.#85.63.220':445
'20#.#85.16.64':445
'20#.#85.161.46':445
'20#.#85.96.160':445
'20#.#85.32.114':445
'20#.#85.81.138':445
'20#.#85.34.229':445
'20#.#85.46.8':445
'20#.#85.82.233':445
'20#.#85.30.71':445
'20#.#85.137.187':445
'20#.#85.246.214':445
'20#.#85.254.245':445
'20#.#85.233.254':445
'20#.#85.176.211':139
'20#.#85.124.231':139
'20#.#85.139.240':139
'20#.#85.197.80':139
'20#.#85.92.192':139
'20#.#85.35.45':139
'20#.#85.115.154':139
'20#.#85.158.101':445
'20#.#85.208.184':445
'20#.#85.244.158':445
'20#.#85.169.20':139
'20#.#85.176.211':445
'20#.#85.87.48':445
'20#.#85.244.158':139
'20#.#85.236.210':139
'20#.#85.96.8':139
'20#.#85.87.48':139
'20#.#85.158.101':139
'20#.#85.208.184':139
'20#.#85.108.213':139
'20#.#85.192.26':139
'20#.#85.36.249':139
'20#.#85.198.114':139
'20#.#85.212.100':139
'20#.#85.213.93':139
'20#.#85.96.144':445
'20#.#85.89.147':139
'20#.#85.29.66':139
'20#.#85.46.29':139
'20#.#85.192.32':139
'20#.#85.164.191':139
'20#.#85.255.163':139
'20#.#85.46.8':139
'20#.#85.161.46':139
'20#.#85.96.160':139
'20#.#85.96.144':139
'20#.#85.81.138':139
'20#.#85.34.229':139
'20#.#85.104.202':9988
'20#.#85.247.242':9988
'20#.#85.169.245':9988
'20#.#85.10.141':445
'20#.#85.136.80':445
'20#.#85.227.22':9988
'20#.#85.134.169':9988
'20#.#85.152.168':9988
'20#.#85.68.190':9988
'20#.#85.36.124':9988
'20#.#85.20.116':9988
'20#.#85.161.22':9988
'20#.#85.32.114':139
'20#.#85.208.236':139
'20#.#85.187.43':139
'20#.#85.117.19':139
'20#.#85.92.109':139
'20#.#85.63.220':139
'20#.#85.16.64':139
'20#.#85.89.147':445
'20#.#85.29.66':445
'20#.#85.46.29':445
'20#.#85.192.32':445
'20#.#85.164.191':445
'20#.#85.255.163':445
'20#.#85.82.233':139
'20#.#85.30.71':139
'20#.#85.137.187':139
'20#.#85.246.214':139
'20#.#85.254.245':139
'20#.#85.233.254':139
'20#.#85.254.125':139
'20#.#85.122.121':139
'20#.#85.98.101':139
'20#.#85.237.180':139
'20#.#85.238.235':139
'20#.#85.5.17':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней