Trojan.DownLoader12.29056

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER16fb.dir00\svchost.exe.mdmp 16325836412027896

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER16fb.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.##3.39.144':139
'82.##3.45.161':139
'82.##3.210.104':139
'82.##3.43.166':139
'82.##3.206.43':139
'82.##3.27.19':139
'82.##3.110.21':139
'82.##3.35.94':139
'82.##3.55.75':139
'82.##3.152.210':139
'82.##3.151.251':139
'82.##3.44.56':139
'82.##3.60.161':139
'82.##3.89.60':139
'82.##3.147.194':139
'82.##3.228.193':139
'82.##3.6.252':139
'82.##3.52.89':139
'82.#33.1.63':139
'82.##3.168.245':139
'82.##3.73.154':139
'82.##3.54.93':139
'82.##3.118.143':139
'82.##3.52.233':139
'82.##3.73.54':445
'82.##3.99.247':445
'82.##3.170.58':139
'82.##3.70.177':139
'82.##3.220.233':139
'82.##3.105.19':445
'82.#33.61.5':445
'82.##3.48.103':445
'82.##3.247.144':445
'82.##3.28.109':445
'82.##3.40.28':445
'82.##3.95.139':139
'82.##3.5.112':139
'82.##3.92.94':139
'82.##3.227.235':139
'82.##3.199.239':139
'82.##3.88.21':139
'82.##3.66.100':139
'82.##3.92.176':139
'82.##3.139.92':139
'82.##3.175.238':139
'82.##3.209.27':139
'82.##3.238.75':139
'82.##3.61.68':445
'82.##3.99.163':445
'82.##3.191.51':445
'82.##3.180.244':445
'82.##3.18.169':445
'82.#33.2.11':445
'82.##3.29.157':445
'82.##3.120.169':445
'82.##3.114.202':445
'82.##3.182.61':445
'82.##3.52.53':445
'82.##3.152.105':445
'82.##3.69.174':445
'82.##3.16.170':445
'82.##3.84.236':445
'82.##3.80.47':445
'82.##3.152.84':445
'82.##3.190.5':445
'82.##3.233.83':445
'82.##3.212.3':445
'82.##3.84.124':445
'82.##3.0.190':445
'82.##3.124.0':445
'82.##3.249.127':445
'82.##3.40.28':139
'82.##3.247.144':139
'82.##3.28.109':139
'82.##3.99.247':139
'82.##3.105.19':139
'82.#33.61.5':139
'82.##3.113.203':139
'82.##3.193.46':139
'82.##3.10.59':139
'82.##3.48.103':139
'82.##3.97.48':139
'82.##3.73.54':139
'82.##3.132.79':445
'82.##3.71.132':445
'82.##3.116.243':445
'82.##3.124.149':445
'82.##3.202.220':445
'82.##3.36.46':445
'82.##3.37.219':445
'82.##3.249.95':445
'82.##3.37.29':445
'82.##3.193.151':445
'82.##3.253.192':445
'82.##3.156.3':139
'82.##3.108.172':139
'82.##3.54.192':139
'82.##3.111.211':139
'82.##3.30.53':139
'82.##3.66.44':139
'82.##3.205.98':139
'82.##3.128.37':139
'82.##3.197.59':139
'82.##3.133.131':139
'82.##3.105.164':139
'82.##3.132.15':139
'82.##3.244.203':139
'82.##3.145.244':139
'82.##3.204.76':139
'82.##3.171.226':139
'82.##3.76.171':139
'82.##3.77.190':139
'82.##3.190.123':139
'82.##3.61.40':139
'82.##3.84.13':139
'82.##3.94.221':139
'82.##3.23.123':139
'82.##3.118.231':139
'82.##3.10.182':139
'82.##3.8.234':139
'82.##3.190.118':139
'82.##3.102.150':139
'82.##3.154.45':139
'82.##3.5.194':139
'82.##3.127.132':139
'82.##3.193.187':139
'82.##3.80.98':139
'82.##3.97.211':139
'82.##3.93.173':139
'82.##3.40.254':139
'82.##3.154.74':139
'82.##3.204.43':139
'82.##3.74.104':139
'82.##3.9.196':139
'82.##3.82.128':139
'82.##3.2.207':139
'82.##3.122.84':139
'82.##3.20.103':139
'82.##3.99.164':139
'82.##3.11.91':139
'82.##3.54.250':139
'82.##3.44.56':445
'82.##3.43.166':445
'82.##3.168.245':445
'82.##3.73.154':445
'82.#33.1.63':445
'82.##3.206.43':445
'82.##3.27.19':445
'82.##3.152.210':445
'82.##3.45.161':445
'82.##3.210.104':445
'82.##3.39.144':445
'82.##3.118.143':445
'82.##3.193.46':445
'82.##3.228.193':445
'82.##3.113.203':445
'82.##3.97.48':445
'82.##3.10.59':445
'82.##3.6.252':445
'82.##3.52.89':445
'82.##3.54.93':445
'82.##3.89.60':445
'82.##3.147.194':445
'82.##3.60.161':445
'82.##3.151.251':445
'82.##3.95.139':445
'82.##3.70.177':445
'82.##3.139.92':445
'82.##3.175.238':445
'82.##3.92.176':445
'82.##3.220.233':445
'82.##3.20.139':139
'82.##3.226.20':139
'82.##3.137.74':139
'82.##3.170.58':445
'82.#33.30.0':139
'82.##3.238.75':445
'82.##3.52.233':445
'82.##3.199.239':445
'82.##3.35.94':445
'82.##3.55.75':445
'82.##3.110.21':445
'82.##3.88.21':445
'82.##3.66.100':445
'82.##3.209.27':445
'82.##3.92.94':445
'82.##3.227.235':445
'82.##3.5.112':445
'82.##3.119.195':445
'82.##3.206.96':445
'82.##3.220.169':445
'82.##3.252.126':445
'82.##3.218.109':445
'82.##3.51.25':445
'82.##3.181.62':445
'82.##3.27.82':445
'82.##3.122.169':445
'82.#33.24.2':445
'82.##3.231.238':445
'82.##3.116.6':445
'82.##3.150.191':139
'82.##3.93.77':445
'82.##3.76.42':139
'82.##3.223.71':139
'82.##3.165.54':139
'82.##3.10.33':445
'82.##3.26.132':445
'82.##3.37.23':445
'82.#33.90.8':445
'82.##3.186.114':445
'82.##3.116.191':445
'82.##3.189.88':445
'82.##3.223.164':445
'82.##3.3.176':445
'82.##3.109.39':445
'82.##3.165.101':445
'82.##3.35.41':445
'82.##3.74.116':445
'82.##3.70.103':445
'82.##3.129.70':445
'82.##3.235.177':445
'82.##3.53.157':445
'82.##3.254.59':445
'82.##3.100.212':445
'82.##3.196.145':445
'82.##3.71.186':445
'82.##3.132.40':445
'82.##3.136.250':445
'82.##3.43.243':445
'82.##3.69.151':445
'82.##3.209.243':445
'82.##3.220.188':445
'82.##3.17.184':445
'82.##3.88.117':445
'82.##3.255.158':445
'82.##3.231.238':139
'82.##3.122.169':139
'82.#33.24.2':139
'82.##3.206.96':139
'82.##3.51.25':139
'82.##3.181.62':139
'82.##3.43.243':139
'82.##3.132.40':139
'82.##3.136.250':139
'82.##3.27.82':139
'82.##3.189.88':139
'82.##3.119.195':139
'82.##3.116.191':139
'82.#33.90.8':139
'82.##3.186.114':139
'82.##3.93.77':139
'82.##3.10.33':139
'82.##3.26.132':139
'82.##3.218.109':139
'82.##3.220.169':139
'82.##3.252.126':139
'82.##3.37.23':139
'82.##3.116.6':139
'82.##3.196.145':139
'82.##3.254.59':139
'82.##3.235.177':139
'82.##3.53.157':139
'82.##3.3.176':139
'82.##3.74.116':139
'82.##3.70.103':139
'82.##3.170.225':139
'82.##3.174.170':139
'82.##3.48.58':139
'82.##3.129.70':139
'82.##3.203.117':139
'82.##3.223.164':139
'82.##3.255.158':139
'82.##3.17.184':139
'82.##3.88.117':139
'82.##3.69.151':139
'82.##3.71.186':139
'82.##3.209.243':139
'82.##3.35.41':139
'82.##3.109.39':139
'82.##3.165.101':139
'82.##3.220.188':139
'82.##3.100.212':139
'82.##3.52.53':139
'82.##3.114.202':139
'82.##3.182.61':139
'82.##3.99.163':139
'82.#33.2.11':139
'82.##3.29.157':139
'82.##3.202.220':139
'82.##3.116.243':139
'82.##3.124.149':139
'82.##3.120.169':139
'82.##3.249.127':139
'82.##3.61.68':139
'82.##3.124.0':139
'82.##3.84.124':139
'82.##3.0.190':139
'82.##3.16.170':139
'82.##3.190.5':139
'82.##3.233.83':139
'82.##3.18.169':139
'82.##3.191.51':139
'82.##3.180.244':139
'82.##3.212.3':139
'82.##3.152.105':139
'82.##3.132.79':139
'82.##3.195.37':445
'82.##3.153.198':445
'82.##3.29.10':445
'82.##3.160.174':445
'82.##3.44.191':445
'82.##3.35.70':445
'82.##3.143.199':445
'82.##3.251.143':445
'82.##3.174.8':445
'82.##3.62.134':445
'82.##3.199.208':445
'82.##3.121.68':445
'82.##3.253.192':139
'82.##3.37.29':139
'82.##3.193.151':139
'82.##3.71.132':139
'82.##3.36.46':139
'82.##3.37.219':139
'82.##3.37.11':445
'82.##3.68.112':445
'82.##3.14.95':445
'82.##3.249.95':139
'82.##3.80.60':445
'82.##3.136.250':9988
'82.##3.132.40':9988
'82.##3.189.88':9988
'82.##3.218.109':9988
'82.##3.220.169':9988
'82.##3.196.145':9988
'82.##3.254.59':9988
'82.##3.203.117':9988
'82.##3.74.116':9988
'82.##3.71.186':9988
'82.##3.35.41':9988
'82.##3.252.126':9988
'82.##3.223.71':445
'82.##3.174.170':445
'82.##3.170.225':445
'82.##3.203.117':445
'82.##3.48.58':445
'82.##3.165.54':445
'82.##3.10.33':9988
'82.#33.90.8':9988
'82.##3.93.77':9988
'82.##3.76.42':445
'82.##3.150.191':445
'82.##3.170.225':9988
'82.##3.199.208':139
'82.##3.174.8':139
'82.##3.62.134':139
'82.##3.153.198':139
'82.##3.35.70':139
'82.##3.143.199':139
'82.##3.84.236':139
'82.##3.69.174':139
'82.##3.152.84':139
'82.##3.251.143':139
'82.##3.80.47':139
'82.##3.195.37':139
'82.##3.80.60':139
'82.##3.14.95':139
'82.##3.165.54':9988
'82.##3.223.71':9988
'82.##3.100.212':9988
'82.##3.37.11':139
'82.##3.44.191':139
'82.##3.29.10':139
'82.##3.160.174':139
'82.##3.68.112':139
'82.##3.121.68':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней