Trojan.DownLoader12.29068

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER6b4f.dir00\svchost.exe.mdmp 16325836412030136

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER6b4f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'24.##0.167.115':139
'24.##0.81.163':139
'24.##0.97.98':139
'24.##0.218.212':139
'24.##0.154.218':139
'24.##0.219.251':139
'24.##0.105.12':139
'24.##0.124.1':139
'24.##0.45.155':139
'24.##0.0.245':139
'24.##0.212.164':139
'24.##0.57.230':139
'24.##0.109.162':139
'24.##0.38.189':139
'24.##0.149.141':139
'24.##0.49.149':139
'24.##0.89.30':139
'24.##0.24.127':139
'24.##0.30.135':139
'24.##0.96.63':139
'24.##0.241.254':139
'24.##0.38.189':445
'24.##0.57.230':445
'24.##0.49.149':445
'24.##0.142.48':445
'24.##0.149.141':445
'24.##0.30.135':445
'24.##0.89.30':445
'24.##0.241.254':445
'24.##0.109.162':445
'24.##0.96.63':445
'24.##0.48.137':445
'24.##0.63.128':139
'24.##0.28.77':139
'24.##0.45.57':139
'24.##0.61.239':139
'24.##0.56.212':139
'24.##0.67.171':445
'24.##0.95.132':445
'24.##0.48.86':445
'24.##0.113.153':445
'24.##0.2.114':445
'24.##0.142.48':139
'24.##0.208.200':139
'24.##0.6.164':139
'24.##0.27.10':139
'24.##0.24.29':139
'24.##0.142.46':139
'24.##0.134.234':445
'24.##0.38.241':445
'24.##0.37.252':445
'24.##0.52.47':139
'24.##0.153.107':139
'24.##0.105.247':139
'24.##0.119.129':139
'24.##0.139.93':139
'24.##0.38.241':139
'24.##0.37.252':139
'24.##0.134.234':139
'24.##0.56.243':139
'24.##0.247.56':139
'24.##0.243.185':139
'24.##0.20.93':139
'24.##0.12.48':139
'24.##0.153.107':445
'24.##0.113.153':139
'24.##0.52.47':445
'24.##0.208.200':445
'24.##0.6.164':445
'24.##0.95.132':139
'24.##0.48.137':139
'24.##0.67.171':139
'24.##0.2.114':139
'24.##0.48.86':139
'24.##0.27.10':445
'24.##0.12.48':445
'24.##0.243.185':445
'24.##0.20.93':445
'24.##0.119.129':445
'24.##0.139.93':445
'24.##0.24.29':445
'24.##0.142.46':445
'24.##0.105.247':445
'24.##0.56.243':445
'24.##0.247.56':445
'24.##0.24.127':445
'24.##0.18.45':139
'24.##0.245.227':139
'24.##0.137.95':139
'24.##0.117.161':139
'24.##0.165.127':139
'24.##0.230.128':139
'24.##0.5.140':139
'24.##0.69.60':139
'24.##0.88.246':139
'24.##0.199.118':139
'24.##0.245.133':139
'24.##0.247.175':445
'24.##0.253.115':445
'24.##0.176.126':445
'24.##0.43.97':445
'24.##0.127.23':445
'24.##0.45.187':445
'24.##0.33.121':139
'24.##0.186.108':445
'24.##0.99.22':445
'24.##0.206.239':445
'24.##0.165.232':139
'24.##0.116.58':139
'24.##0.9.197':139
'24.##0.147.108':139
'24.##0.207.139':139
'24.##0.93.122':139
'24.##0.202.117':139
'24.##0.63.115':139
'24.##0.188.188':139
'24.##0.3.116':139
'24.##0.62.131':139
'24.##0.40.240':139
'24.##0.25.240':139
'24.##0.117.155':139
'24.##0.203.202':139
'24.##0.235.46':139
'24.##0.91.53':139
'24.##0.25.30':139
'24.##0.108.129':139
'24.##0.228.15':139
'24.##0.130.8':139
'24.##0.198.196':445
'24.##0.63.128':445
'24.##0.28.77':445
'24.##0.45.57':445
'24.##0.61.239':445
'24.##0.56.212':445
'24.##0.245.152':139
'24.##0.1.245':139
'24.##0.152.225':139
'24.##0.55.210':139
'24.##0.145.133':139
'24.##0.105.12':445
'24.##0.97.98':445
'24.##0.167.115':445
'24.##0.154.218':445
'24.##0.212.164':445
'24.##0.218.212':445
'24.##0.124.1':445
'24.##0.219.251':445
'24.##0.0.245':445
'24.##0.81.163':445
'24.##0.45.155':445
'24.##0.145.133':445
'24.##0.152.225':445
'24.##0.55.210':445
'24.##0.186.108':139
'24.##0.45.187':139
'24.##0.231.16':445
'24.##0.104.158':445
'24.#50.17.2':445
'24.##0.245.152':445
'24.##0.1.245':445
'24.##0.206.239':139
'24.##0.198.196':139
'24.##0.43.97':139
'24.##0.104.158':139
'24.#50.17.2':139
'24.##0.231.16':139
'24.##0.253.115':139
'24.##0.99.22':139
'24.##0.247.175':139
'24.##0.127.23':139
'24.##0.176.126':139
'24.##0.107.132':445
'24.##0.80.155':445
'24.##0.144.195':445
'24.##0.111.224':445
'24.##0.22.207':445
'24.##0.70.39':445
'24.##0.72.192':445
'24.##0.40.15':445
'24.##0.21.233':445
'24.##0.15.22':445
'24.##0.9.237':445
'24.##0.132.61':139
'24.##0.159.4':139
'24.##0.189.165':139
'24.##0.34.211':139
'24.##0.236.112':139
'24.##0.38.148':445
'24.##0.58.227':445
'24.##0.73.244':139
'24.##0.106.188':139
'24.##0.28.105':139
'24.##0.75.69':445
'24.##0.102.91':445
'24.##0.128.137':445
'24.##0.188.205':445
'24.#50.19.0':445
'24.##0.16.67':445
'24.##0.159.121':445
'24.##0.54.59':445
'24.##0.148.48':445
'24.##0.104.196':445
'24.##0.45.232':445
'24.##0.121.164':445
'24.##0.109.188':445
'24.##0.123.252':445
'24.##0.100.174':445
'24.#50.80.3':445
'24.##0.80.154':445
'24.##0.62.198':445
'24.##0.238.222':445
'24.##0.192.125':445
'24.##0.108.212':445
'24.##0.41.151':139
'24.#50.80.3':139
'24.##0.123.252':139
'24.##0.100.174':139
'24.##0.70.39':139
'24.##0.72.192':139
'24.##0.108.212':139
'24.##0.238.222':139
'24.##0.192.125':139
'24.##0.121.164':139
'24.##0.109.188':139
'24.##0.40.15':139
'24.##0.111.224':139
'24.##0.22.207':139
'24.##0.9.237':139
'24.##0.58.227':139
'24.##0.38.148':139
'24.##0.21.233':139
'24.##0.15.22':139
'24.##0.80.155':139
'24.##0.144.195':139
'24.##0.107.132':139
'24.##0.207.211':139
'24.##0.121.85':139
'24.##0.145.38':139
'24.##0.16.67':139
'24.##0.159.121':139
'24.##0.72.179':139
'24.##0.104.72':139
'24.##0.10.21':139
'24.##0.210.148':139
'24.##0.191.157':139
'24.##0.54.59':139
'24.##0.188.205':139
'24.#50.19.0':139
'24.##0.45.232':139
'24.##0.80.154':139
'24.##0.62.198':139
'24.##0.148.48':139
'24.##0.104.196':139
'24.##0.102.91':139
'24.##0.128.137':139
'24.##0.75.69':139
'24.##0.145.38':445
'24.##0.173.32':445
'24.#50.6.50':445
'24.##0.4.237':445
'24.##0.220.227':139
'24.##0.210.130':139
'24.##0.48.193':445
'24.##0.187.138':445
'24.##0.230.101':445
'24.##0.79.39':445
'24.##0.101.129':445
'24.##0.249.43':139
'24.##0.162.38':139
'24.##0.80.157':139
'24.##0.252.125':139
'24.##0.176.151':139
'24.##0.255.56':139
'24.##0.69.143':139
'24.##0.167.244':139
'24.##0.49.194':139
'24.##0.151.209':139
'24.##0.47.173':139
'24.##0.47.173':445
'24.##0.49.194':445
'24.##0.151.209':445
'24.##0.162.38':445
'24.##0.80.157':445
'24.##0.220.227':445
'24.##0.210.130':445
'24.##0.249.43':445
'24.##0.69.143':445
'24.##0.167.244':445
'24.##0.252.125':445
'24.##0.30.50':445
'24.##0.147.184':445
'24.##0.26.128':445
'24.##0.74.205':445
'24.##0.197.185':445
'24.##0.176.151':445
'24.##0.255.56':445
'24.##0.83.130':445
'24.##0.207.17':445
'24.##0.106.234':445
'24.##0.83.130':139
'24.##0.28.105':445
'24.##0.73.244':445
'24.##0.106.188':445
'24.##0.132.61':445
'24.##0.159.4':445
'24.##0.107.132':9988
'24.##0.40.15':9988
'24.##0.144.195':9988
'24.##0.38.148':9988
'24.##0.22.207':9988
'24.##0.189.165':445
'24.##0.191.157':445
'24.##0.10.21':445
'24.##0.210.148':445
'24.##0.207.211':445
'24.##0.121.85':445
'24.##0.34.211':445
'24.##0.236.112':445
'24.##0.41.151':445
'24.##0.72.179':445
'24.##0.104.72':445
'24.##0.74.205':139
'24.##0.197.185':139
'24.##0.187.138':139
'24.##0.230.101':139
'24.##0.48.193':139
'24.##0.30.50':139
'24.##0.106.234':139
'24.##0.147.184':139
'24.##0.207.17':139
'24.##0.26.128':139
'24.##0.101.129':139
'24.##0.102.91':9988
'24.##0.191.157':9988
'24.##0.62.198':9988
'24.##0.100.174':9988
'24.#50.80.3':9988
'24.#50.6.50':139
'24.##0.79.39':139
'24.##0.173.32':139
'24.##0.10.21':9988
'24.##0.4.237':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней