Trojan.DownLoader12.29108

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1e34.dir00\svchost.exe.mdmp 16325836412032140

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1e34.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#.213.144':139
'22#.#.40.214':139
'22#.#.144.55':139
'22#.#.171.49':139
'22#.#.195.12':139
'22#.#.185.119':139
'22#.#.165.183':139
'22#.#.248.177':139
'22#.#.221.40':139
'22#.#.243.162':139
'22#.#.214.30':139
'22#.#.72.217':139
'22#.3.36.19':139
'22#.#.21.201':139
'22#.#.12.205':139
'22#.#.68.232':139
'22#.#.74.100':139
'22#.#.103.214':139
'22#.#.233.44':139
'22#.#.58.221':139
'22#.3.48.59':139
'22#.#.161.188':139
'22#.#.58.221':445
'22#.3.48.59':445
'22#.3.36.19':445
'22#.#.21.201':445
'22#.#.72.217':445
'22#.#.214.30':445
'22#.#.171.49':445
'22#.#.103.214':445
'22#.#.233.44':445
'22#.#.74.100':445
'22#.#.68.232':445
'22#.#.253.110':139
'22#.3.4.14':139
'22#.#.110.135':139
'22#.#.151.99':139
'22#.#.135.150':139
'22#.#.204.172':445
'22#.#.12.205':445
'22#.#.78.100':445
'22#.#.213.16':139
'22#.#.215.218':445
'22#.3.99.76':139
'22#.3.75.32':139
'22#.#.37.248':139
'22#.#.181.47':139
'22#.#.125.36':139
'22#.#.22.185':139
'22#.#.252.57':445
'22#.#.184.214':139
'22#.#.115.61':139
'22#.#.214.100':139
'22#.3.48.4':139
'22#.#.114.52':139
'22#.#.210.197':139
'22#.3.6.252':139
'22#.#.252.57':139
'22#.#.241.151':139
'22#.#.22.178':139
'22#.#.201.103':139
'22#.#.200.137':139
'22#.#.212.73':139
'22#.#.206.209':139
'22#.#.241.151':445
'22#.#.115.61':445
'22#.#.214.100':445
'22#.3.75.32':445
'22#.#.37.248':445
'22#.3.99.76':445
'22#.#.78.100':139
'22#.#.204.172':139
'22#.#.215.218':139
'22#.#.184.214':445
'22#.#.22.185':445
'22#.#.125.36':445
'22#.#.212.73':445
'22#.#.206.209':445
'22#.#.210.197':445
'22#.3.6.252':445
'22#.#.114.52':445
'22#.3.48.4':445
'22#.#.181.47':445
'22#.#.201.103':445
'22#.#.200.137':445
'22#.#.22.178':445
'22#.#.195.12':445
'22#.#.76.244':139
'22#.3.59.49':139
'22#.#.249.58':139
'22#.#.38.181':445
'22#.#.101.136':139
'22#.#.177.42':139
'22#.3.7.78':139
'22#.#.29.169':139
'22#.#.45.108':139
'22#.3.33.47':139
'22#.#.180.114':445
'22#.#.163.223':445
'22#.#.108.124':445
'22#.#.51.196':445
'22#.#.142.151':445
'22#.#.206.142':445
'22#.#.40.227':445
'22#.#.114.40':445
'22#.#.228.30':445
'22#.#.55.241':445
'22#.#.31.117':445
'22#.#.186.12':139
'22#.3.21.79':139
'22#.3.8.21':139
'22#.#.135.96':139
'22#.#.27.206':139
'22#.3.32.54':139
'22#.#.35.166':139
'22#.3.79.49':139
'22#.#.166.91':139
'22#.#.202.81':139
'22#.#.104.72':139
'22#.#.48.245':139
'22#.#.36.190':139
'22#.#.151.147':139
'22#.#.45.101':139
'22#.#.190.185':139
'22#.#.236.190':139
'22#.#.155.199':139
'22#.#.144.156':139
'22#.#.89.165':139
'22#.#.236.155':139
'22#.#.14.160':139
'22#.#.213.16':445
'22#.#.191.213':139
'22#.3.4.14':445
'22#.#.110.135':445
'22#.#.253.110':445
'22#.3.59.51':139
'22#.#.72.140':139
'22#.3.51.78':139
'22#.#.112.76':139
'22#.#.78.190':139
'22#.#.135.150':445
'22#.#.221.40':445
'22#.#.243.162':445
'22#.#.40.214':445
'22#.#.144.55':445
'22#.#.213.144':445
'22#.#.161.188':445
'22#.#.151.99':445
'22#.#.165.183':445
'22#.#.248.177':445
'22#.#.185.119':445
'22#.3.7.9':139
'22#.#.112.76':445
'22#.#.78.190':445
'22#.#.191.213':445
'22#.#.180.114':139
'22#.#.38.181':139
'22#.3.7.9':445
'22#.3.72.99':445
'22#.#.72.140':445
'22#.3.51.78':445
'22#.3.59.51':445
'22#.#.114.40':139
'22#.#.51.196':139
'22#.#.163.223':139
'22#.#.206.142':139
'22#.3.72.99':139
'22#.#.142.151':139
'22#.#.228.30':139
'22#.#.40.227':139
'22#.#.31.117':139
'22#.#.108.124':139
'22#.#.55.241':139
'22#.#.108.199':445
'22#.#.143.207':445
'22#.#.205.180':445
'22#.#.27.112':445
'22#.#.81.117':445
'22#.#.31.113':445
'22#.#.66.190':445
'22#.#.157.26':445
'22#.3.88.25':445
'22#.3.48.83':445
'22#.3.26.74':445
'22#.#.80.135':445
'22#.#.28.180':139
'22#.#.209.156':139
'22#.3.5.138':139
'22#.#.216.135':139
'22#.#.181.128':139
'22#.#.172.170':445
'22#.#.180.247':445
'22#.3.15.65':139
'22#.#.111.21':139
'22#.#.235.214':139
'22#.#.83.105':445
'22#.#.150.123':445
'22#.#.182.165':445
'22#.#.181.76':445
'22#.3.24.27':445
'22#.#.76.193':445
'22#.#.138.182':445
'22#.#.10.105':445
'22#.#.167.209':445
'22#.#.78.133':445
'22#.#.40.226':445
'22#.#.103.130':445
'22#.3.22.53':445
'22#.#.165.208':445
'22#.#.26.202':445
'22#.#.20.238':445
'22#.#.100.15':445
'22#.#.111.253':445
'22#.#.104.42':445
'22#.#.87.236':445
'22#.#.233.147':445
'22#.#.25.234':445
'22#.#.20.238':139
'22#.#.100.15':139
'22#.#.83.105':139
'22#.#.66.190':139
'22#.#.157.26':139
'22#.#.233.147':139
'22#.#.25.234':139
'22#.#.165.208':139
'22#.#.26.202':139
'22#.3.22.53':139
'22#.3.88.25':139
'22#.#.81.117':139
'22#.#.80.135':139
'22#.#.27.112':139
'22#.#.31.113':139
'22#.#.172.170':139
'22#.3.48.83':139
'22#.3.26.74':139
'22#.#.205.180':139
'22#.#.180.247':139
'22#.#.143.207':139
'22#.#.87.236':139
'22#.#.198.253':139
'22#.#.235.48':139
'22#.#.165.213':139
'22#.#.138.182':139
'22#.#.10.105':139
'22#.#.89.126':139
'22#.3.79.90':139
'22#.#.205.109':139
'22#.3.46.26':139
'22#.#.224.177':139
'22#.#.167.209':139
'22#.3.24.27':139
'22#.#.76.193':139
'22#.#.103.130':139
'22#.#.111.253':139
'22#.#.104.42':139
'22#.#.78.133':139
'22#.#.40.226':139
'22#.#.182.165':139
'22#.#.181.76':139
'22#.#.150.123':139
'22#.#.165.213':445
'22#.#.111.69':445
'22#.#.21.150':445
'22#.#.126.227':445
'22#.#.199.162':139
'22#.#.108.199':139
'22#.3.26.44':445
'22#.#.124.212':445
'22#.#.117.159':445
'22#.3.5.232':445
'22#.3.14.84':445
'22#.#.160.26':139
'22#.#.108.194':139
'22#.3.70.88':139
'22#.#.148.207':139
'22#.#.40.235':139
'22#.#.168.109':139
'22#.3.27.52':139
'22#.#.114.123':139
'22#.3.46.19':139
'22#.#.181.229':139
'22#.#.18.182':139
'22#.#.103.140':445
'22#.#.181.229':445
'22#.#.18.182':445
'22#.3.70.88':445
'22#.#.148.207':445
'22#.#.108.194':445
'22#.#.160.26':445
'22#.#.199.162':445
'22#.#.114.123':445
'22#.3.46.19':445
'22#.3.27.52':445
'22#.#.168.109':445
'22#.#.105.94':445
'22#.#.131.86':445
'22#.#.122.72':445
'22#.#.26.106':445
'22#.#.72.211':445
'22#.3.3.12':445
'22#.#.40.235':445
'22#.#.195.82':445
'22#.#.158.130':445
'22#.#.173.38':445
'22#.3.15.65':445
'22#.#.180.247':9988
'22#.#.235.214':445
'22#.#.209.156':445
'22#.#.111.21':445
'22#.#.157.26':9988
'22#.#.83.105':9988
'22#.3.26.74':9988
'22#.3.48.83':9988
'22#.#.205.180':9988
'22#.#.28.180':445
'22#.#.224.177':445
'22#.#.205.109':445
'22#.3.46.26':445
'22#.#.198.253':445
'22#.#.235.48':445
'22#.#.181.128':445
'22#.3.5.138':445
'22#.#.216.135':445
'22#.#.89.126':445
'22#.3.79.90':445
'22#.#.20.238':9988
'22#.#.122.72':139
'22#.#.105.94':139
'22#.#.72.211':139
'22#.#.103.140':139
'22#.#.26.106':139
'22#.#.195.82':139
'22#.3.3.12':139
'22#.#.173.38':139
'22#.#.131.86':139
'22#.#.158.130':139
'22#.#.124.212':139
'22#.#.126.227':139
'22#.#.111.69':139
'22#.#.25.234':9988
'22#.#.26.202':9988
'22#.#.165.208':9988
'22#.#.117.159':139
'22#.3.26.44':139
'22#.3.14.84':139
'22#.#.21.150':139
'22#.3.5.232':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней