Trojan.DownLoader12.29077

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER5294.dir00\svchost.exe.mdmp 16325836412029068

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5294.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#19.95.140':139
'20#.#19.193.158':139
'20#.#19.60.116':139
'20#.#19.17.208':139
'20#.#19.189.105':139
'20#.#19.213.25':139
'20#.#19.175.213':139
'20#.#19.27.96':139
'20#.#19.231.184':139
'20#.#19.80.178':139
'20#.#19.207.22':139
'20#.219.1.3':139
'20#.#19.147.73':139
'20#.#19.2.130':139
'20#.#19.48.231':445
'20#.#19.249.50':445
'20#.#19.91.185':139
'20#.#19.61.197':139
'20#.#19.185.172':139
'20#.#19.185.0':139
'20#.#19.172.184':139
'20#.#19.156.175':139
'20#.#19.17.208':445
'20#.#19.189.105':445
'20#.#19.207.22':445
'20#.#19.91.185':445
'20#.#19.61.197':445
'20#.#19.231.184':445
'20#.#19.80.178':445
'20#.#19.193.158':445
'20#.#19.60.116':445
'20#.#19.95.140':445
'20#.#19.185.172':445
'20#.#19.114.117':139
'20#.#19.148.79':139
'20#.#19.201.80':139
'20#.#19.121.236':139
'20#.#19.161.241':139
'20#.#19.185.0':445
'20#.#19.172.184':445
'20#.#19.147.73':445
'20#.#19.2.130':445
'20#.219.1.3':445
'20#.#19.64.216':139
'20#.#19.198.108':139
'20#.#19.231.233':139
'20#.#19.81.127':139
'20#.#19.7.95':139
'20#.#19.243.211':445
'20#.#19.157.45':445
'20#.#19.249.50':139
'20#.#19.231.60':139
'20#.#19.48.231':139
'20#.#19.215.91':139
'20#.#19.128.214':139
'20#.#19.185.78':139
'20#.#19.247.121':139
'20#.#19.223.50':139
'20#.#19.116.83':139
'20#.#19.108.162':139
'20#.#19.110.96':139
'20#.#19.213.6':139
'20#.#19.200.170':139
'20#.#19.40.195':139
'20#.#19.225.161':445
'20#.#19.215.91':445
'20#.#19.81.127':445
'20#.#19.110.96':445
'20#.#19.213.6':445
'20#.#19.108.162':445
'20#.#19.198.108':445
'20#.#19.231.60':445
'20#.#19.64.216':445
'20#.#19.7.95':445
'20#.#19.231.233':445
'20#.#19.40.195':445
'20#.#19.116.141':445
'20#.#19.223.50':445
'20#.#19.26.188':445
'20#.#19.24.225':445
'20#.#19.73.30':445
'20#.#19.185.78':445
'20#.#19.200.170':445
'20#.#19.128.214':445
'20#.#19.116.83':445
'20#.#19.247.121':445
'20#.#19.173.4':445
'20#.#19.32.254':445
'20#.#19.18.95':445
'20#.#19.247.248':445
'20#.#19.16.248':445
'20#.#19.17.86':139
'20#.#19.159.43':139
'20#.#19.67.204':139
'20#.#19.212.125':445
'20#.#19.235.163':445
'20#.#19.248.243':445
'20#.#19.201.29':445
'20#.#19.144.131':445
'20#.#19.216.0':445
'20#.#19.167.129':445
'20#.#19.94.225':445
'20#.#19.150.73':445
'20#.#19.243.252':445
'20#.#19.196.149':445
'20#.#19.194.219':445
'20#.#19.149.166':445
'20#.#19.7.121':139
'20#.#19.47.130':139
'20#.#19.171.7':139
'20#.#19.174.230':139
'20#.#19.132.33':139
'20#.#19.37.117':139
'20#.#19.42.76':139
'20#.#19.33.34':139
'20#.#19.89.229':139
'20#.#19.22.99':139
'20#.#19.56.123':139
'20#.#19.11.237':139
'20#.#19.218.45':139
'20#.#19.236.252':139
'20#.#19.195.156':139
'20#.#19.104.100':139
'20#.#19.27.57':139
'20#.#19.63.87':139
'20#.#19.6.212':139
'20#.#19.19.9':139
'20#.#19.189.20':139
'20#.#19.144.26':139
'20#.#19.100.111':139
'20#.#19.158.221':139
'20#.#19.48.63':139
'20#.#19.134.66':139
'20#.#19.201.184':139
'20#.#19.216.0':139
'20#.#19.201.29':139
'20#.#19.94.225':139
'20#.#19.133.12':139
'20#.#19.167.129':139
'20#.#19.226.44':139
'20#.#19.156.175':445
'20#.#19.121.236':445
'20#.#19.175.213':445
'20#.#19.27.96':445
'20#.#19.213.25':445
'20#.#19.148.79':445
'20#.#19.44.233':139
'20#.#19.114.117':445
'20#.#19.161.241':445
'20#.#19.201.80':445
'20#.#19.144.131':139
'20#.#19.226.44':445
'20#.#19.134.66':445
'20#.#19.44.233':445
'20#.#19.212.125':139
'20#.#19.235.163':139
'20#.#19.158.221':445
'20#.#19.133.12':445
'20#.#19.100.111':445
'20#.#19.201.184':445
'20#.#19.48.63':445
'20#.#19.32.254':139
'20#.#19.150.73':139
'20#.#19.243.252':139
'20#.#19.196.149':139
'20#.#19.194.219':139
'20#.#19.149.166':139
'20#.#19.18.95':139
'20#.#19.173.4':139
'20#.#19.16.248':139
'20#.#19.248.243':139
'20#.#19.247.248':139
'20#.#19.151.14':445
'20#.#19.188.68':445
'20#.#19.98.159':445
'20#.#19.14.80':445
'20#.#19.11.238':445
'20#.#19.210.165':445
'20#.#19.125.210':445
'20#.#19.55.176':445
'20#.#19.103.1':445
'20#.#19.148.83':445
'20#.#19.11.65':445
'20#.#19.219.145':139
'20#.#19.54.44':139
'20#.#19.13.91':139
'20#.#19.177.146':139
'20#.#19.71.82':139
'20#.#19.9.58':445
'20#.#19.72.209':445
'20#.#19.151.251':139
'20#.#19.54.106':139
'20#.#19.104.82':139
'20#.#19.45.52':445
'20#.#19.196.52':445
'20#.#19.130.196':445
'20#.#19.52.24':445
'20#.#19.126.145':445
'20#.#19.237.124':445
'20#.#19.130.10':445
'20#.#19.57.1':445
'20#.#19.10.227':445
'20#.#19.126.130':445
'20#.#19.194.203':445
'20#.#19.131.91':445
'20#.#19.3.159':445
'20#.#19.102.162':445
'20#.#19.5.155':445
'20#.#19.70.214':445
'20#.#19.155.71':445
'20#.#19.139.251':445
'20#.#19.85.6':445
'20#.#19.91.39':445
'20#.#19.23.131':445
'20#.#19.151.53':445
'20#.#19.70.214':139
'20#.#19.155.71':139
'20#.#19.45.52':139
'20#.#19.210.165':139
'20#.#19.125.210':139
'20#.#19.23.131':139
'20#.#19.151.53':139
'20#.#19.102.162':139
'20#.#19.5.155':139
'20#.#19.3.159':139
'20#.#19.55.176':139
'20#.#19.11.238':139
'20#.#19.98.159':139
'20#.#19.11.65':139
'20#.#19.9.58':139
'20#.#19.72.209':139
'20#.#19.103.1':139
'20#.#19.148.83':139
'20#.#19.188.68':139
'20#.#19.14.80':139
'20#.#19.151.14':139
'20#.#19.91.39':139
'20#.#19.30.184':139
'20#.#19.199.185':139
'20#.#19.240.205':139
'20#.#19.130.10':139
'20#.#19.57.1':139
'20#.#19.25.114':139
'20#.#19.226.228':139
'20#.#19.86.249':139
'20#.#19.209.84':139
'20#.#19.159.89':139
'20#.#19.10.227':139
'20#.#19.126.145':139
'20#.#19.237.124':139
'20#.#19.131.91':139
'20#.#19.139.251':139
'20#.#19.85.6':139
'20#.#19.126.130':139
'20#.#19.194.203':139
'20#.#19.130.196':139
'20#.#19.52.24':139
'20#.#19.196.52':139
'20#.#19.66.164':445
'20#.#19.76.191':445
'20#.#19.28.30':445
'20#.#19.155.199':445
'20#.#19.30.196':445
'20#.#19.75.79':445
'20#.#19.70.39':445
'20#.#19.218.93':445
'20#.#19.113.77':445
'20#.#19.237.113':445
'20#.#19.211.82':139
'20#.#19.72.186':139
'20#.#19.187.144':139
'20#.#19.204.109':139
'20#.#19.23.116':139
'20#.#19.244.71':139
'20#.#19.111.13':139
'20#.#19.106.127':139
'20#.#19.215.234':139
'20#.#19.124.18':139
'20#.#19.19.167':139
'20#.#19.164.69':445
'20#.#19.243.211':139
'20#.#19.157.45':139
'20#.#19.211.82':445
'20#.#19.111.13':445
'20#.#19.106.127':445
'20#.#19.26.188':139
'20#.#19.116.141':139
'20#.#19.73.30':139
'20#.#19.225.161':139
'20#.#19.24.225':139
'20#.#19.215.234':445
'20#.#19.23.116':445
'20#.#19.244.71':445
'20#.#19.2.211':445
'20#.#19.5.117':445
'20#.#19.40.242':445
'20#.#19.124.18':445
'20#.#19.19.167':445
'20#.#19.187.144':445
'20#.#19.204.109':445
'20#.#19.72.186':445
'20#.#19.104.82':445
'20#.#19.151.251':445
'20#.#19.54.106':445
'20#.#19.219.145':445
'20#.#19.54.44':445
'20#.#19.148.83':9988
'20#.#19.55.176':9988
'20#.#19.151.14':9988
'20#.#19.72.209':9988
'20#.#19.98.159':9988
'20#.#19.13.91':445
'20#.#19.209.84':445
'20#.#19.159.89':445
'20#.#19.199.185':445
'20#.#19.240.205':445
'20#.#19.30.184':445
'20#.#19.177.146':445
'20#.#19.71.82':445
'20#.#19.226.228':445
'20#.#19.86.249':445
'20#.#19.25.114':445
'20#.#19.125.210':9988
'20#.#19.218.93':139
'20#.#19.75.79':139
'20#.#19.237.113':139
'20#.#19.76.191':139
'20#.#19.113.77':139
'20#.#19.40.242':139
'20#.#19.2.211':139
'20#.#19.5.117':139
'20#.#19.70.39':139
'20#.#19.164.69':139
'20#.#19.66.164':139
'20#.#19.3.159':9988
'20#.#19.102.162':9988
'20#.#19.5.155':9988
'20#.#19.45.52':9988
'20#.#19.70.214':9988
'20#.#19.30.196':139
'20#.#19.28.30':139
'20#.#19.155.199':139
'20#.#19.151.53':9988
'20#.#19.91.39':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней