Trojan.DownLoader12.29084

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERfcce.dir00\svchost.exe.mdmp 16325836412029312

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERfcce.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#16.216.84':445
'19#.#16.170.215':445
'19#.#16.80.171':445
'19#.#16.185.135':445
'19#.#16.99.198':445
'19#.#16.115.248':445
'19#.#16.143.186':445
'19#.#16.29.177':445
'19#.#16.89.125':445
'19#.#16.164.117':445
'19#.#16.90.152':445
'19#.#16.92.166':445
'19#.#16.135.60':445
'19#.#16.181.148':139
'19#.#16.160.89':139
'19#.#16.71.203':139
'19#.#16.95.138':139
'19#.#16.243.94':139
'19#.#16.178.211':139
'19#.#16.61.190':445
'19#.#16.26.160':445
'19#.#16.101.166':445
'19#.#16.218.102':445
'19#.#16.37.25':445
'19#.#16.165.139':445
'19#.#16.228.81':445
'19#.#16.95.138':445
'19#.#16.243.94':445
'19#.#16.178.211':445
'19#.#16.117.246':445
'19#.#16.185.117':445
'19#.#16.81.52':445
'19#.#16.111.116':139
'19#.#16.2.173':139
'19#.#16.37.35':139
'19#.#16.181.148':445
'19#.#16.160.89':445
'19#.#16.71.203':445
'19#.#16.10.216':445
'19#.#16.8.18':445
'19#.#16.150.207':445
'19#.#16.73.215':445
'19#.#16.130.142':445
'19#.#16.199.15':445
'19#.#16.111.184':445
'19#.#16.196.219':445
'19#.#16.79.7':445
'19#.#16.132.67':445
'19#.#16.165.163':445
'19#.#16.220.165':445
'19#.#16.178.203':445
'19#.#16.37.25':139
'19#.#16.165.139':139
'19#.#16.61.190':139
'19#.#16.106.202':445
'19#.#16.243.76':445
'19#.#16.218.102':139
'19#.#16.185.135':139
'19#.#16.99.198':139
'19#.#16.115.248':139
'19#.#16.26.160':139
'19#.#16.101.166':139
'19#.#16.135.60':139
'19#.#16.201.248':445
'19#.#16.201.248':139
'19#.#16.106.202':139
'19#.#16.243.76':139
'19#.#16.58.216':139
'19#.#16.167.193':139
'19#.#16.248.167':139
'19#.#16.58.216':445
'19#.#16.167.193':445
'19#.#16.248.167':445
'19#.#16.11.108':445
'19#.#16.223.106':445
'19#.#16.50.188':445
'19#.#16.216.84':139
'19#.#16.220.165':139
'19#.#16.178.203':139
'19#.#16.196.219':139
'19#.#16.150.207':139
'19#.#16.73.215':139
'19#.#16.165.163':139
'19#.#16.117.246':139
'19#.#16.185.117':139
'19#.#16.81.52':139
'19#.#16.79.7':139
'19#.#16.132.67':139
'19#.#16.10.216':139
'19#.#16.8.18':139
'19#.#16.90.152':139
'19#.#16.92.166':139
'19#.#16.143.186':139
'19#.#16.170.215':139
'19#.#16.80.171':139
'19#.#16.164.117':139
'19#.#16.130.142':139
'19#.#16.199.15':139
'19#.#16.111.184':139
'19#.#16.29.177':139
'19#.#16.89.125':139
'19#.#16.228.81':139
'19#.#16.54.135':445
'19#.#16.102.47':445
'19#.#16.252.94':445
'19#.#16.234.51':445
'19#.#16.31.10':445
'19#.#16.230.68':445
'19#.#16.76.117':445
'19#.#16.117.119':445
'19#.#16.116.129':445
'19#.#16.253.3':445
'19#.#16.181.123':445
'19#.#16.15.200':445
'19#.#16.80.121':445
'19#.#16.159.72':139
'19#.#16.48.227':139
'19#.#16.143.104':139
'19#.#16.22.217':139
'19#.#16.107.71':139
'19#.#16.45.21':139
'19#.#16.120.213':445
'19#.#16.231.120':445
'19#.#16.240.230':445
'19#.#16.40.141':445
'19#.#16.45.106':445
'19#.#16.212.192':445
'19#.#16.106.84':445
'19#.#16.22.217':445
'19#.#16.107.71':445
'19#.#16.45.21':445
'19#.#16.58.172':445
'19#.#16.58.109':445
'19#.#16.157.184':445
'19#.#16.63.101':139
'19#.#16.81.64':139
'19#.#16.190.97':139
'19#.#16.159.72':445
'19#.#16.48.227':445
'19#.#16.143.104':445
'19#.#16.144.16':445
'19#.#16.232.199':445
'19#.#16.224.132':445
'19#.#16.47.41':445
'19#.#16.196.20':445
'19#.#16.205.195':445
'19#.#16.182.205':445
'19#.#16.118.206':445
'19#.#16.114.3':445
'19#.#16.186.118':445
'19#.#16.158.148':445
'19#.#16.254.141':445
'19#.#16.104.219':445
'19#.#16.45.106':139
'19#.#16.212.192':139
'19#.#16.120.213':139
'19#.#16.187.231':445
'19#.#16.78.238':445
'19#.#16.40.141':139
'19#.#16.234.51':139
'19#.#16.31.10':139
'19#.#16.230.68':139
'19#.#16.231.120':139
'19#.#16.240.230':139
'19#.#16.80.121':139
'19#.#16.231.168':445
'19#.#16.231.168':139
'19#.#16.187.231':139
'19#.#16.78.238':139
'19#.#16.108.165':139
'19#.#16.252.65':139
'19#.#16.86.10':139
'19#.#16.108.165':445
'19#.#16.252.65':445
'19#.#16.86.10':445
'19#.#16.111.116':445
'19#.#16.2.173':445
'19#.#16.37.35':445
'19#.#16.54.135':139
'19#.#16.254.141':139
'19#.#16.104.219':139
'19#.#16.118.206':139
'19#.#16.224.132':139
'19#.#16.47.41':139
'19#.#16.158.148':139
'19#.#16.58.172':139
'19#.#16.58.109':139
'19#.#16.157.184':139
'19#.#16.114.3':139
'19#.#16.186.118':139
'19#.#16.144.16':139
'19#.#16.232.199':139
'19#.#16.181.123':139
'19#.#16.15.200':139
'19#.#16.76.117':139
'19#.#16.102.47':139
'19#.#16.252.94':139
'19#.#16.253.3':139
'19#.#16.196.20':139
'19#.#16.205.195':139
'19#.#16.182.205':139
'19#.#16.117.119':139
'19#.#16.116.129':139
'19#.#16.106.84':139
'19#.#16.50.188':139
'19#.#16.138.92':445
'19#.#16.222.68':445
'19#.#16.93.222':445
'19#.#16.8.145':445
'19#.#16.19.235':445
'19#.#16.59.40':445
'19#.#16.132.64':445
'19#.#16.87.45':445
'19#.#16.63.189':445
'19#.#16.58.112':445
'19#.#16.92.244':445
'19#.#16.128.27':445
'19#.#16.167.84':445
'19#.#16.161.160':445
'19#.#16.245.165':445
'19#.#16.84.245':445
'19#.#16.88.52':445
'19#.#16.70.170':445
'19#.#16.157.185':445
'19#.#16.161.144':445
'19#.#16.205.218':445
'19#.#16.231.96':445
'19#.#16.161.128':445
'19#.#16.14.92':445
'19#.#16.157.161':445
'19#.#16.159.109':445
'19#.#16.32.43':445
'19#.#16.229.80':445
'19#.#16.160.17':445
'19#.#16.143.64':445
'19#.#16.141.142':445
'19#.#16.79.13':445
'19#.#16.188.239':445
'19#.#16.131.166':445
'19#.#16.25.37':445
'19#.#16.255.180':445
'19#.#16.46.0':445
'19#.#16.29.243':445
'19#.#16.61.18':445
'19#.#16.202.74':445
'19#.#16.70.145':445
'19#.#16.189.118':445
'19#.#16.79.6':445
'19#.#16.100.197':445
'19#.#16.103.126':445
'19#.#16.48.148':445
'19#.#16.67.49':445
'19#.#16.239.110':445
'19#.#16.120.189':445
'19#.#16.33.25':445
'19#.#16.23.22':445
'19#.#16.138.92':139
'19#.#16.222.68':139
'19#.#16.93.222':139
'19#.#16.8.145':139
'19#.#16.19.235':139
'19#.#16.59.40':139
'19#.#16.132.64':139
'19#.#16.87.45':139
'19#.#16.63.189':139
'19#.#16.58.112':139
'19#.#16.92.244':139
'19#.#16.128.27':139
'19#.#16.167.84':139
'19#.#16.161.160':139
'19#.#16.245.165':139
'19#.#16.84.245':139
'19#.#16.88.52':139
'19#.#16.157.185':139
'19#.#16.70.170':139
'19#.#16.161.144':139
'19#.#16.205.218':139
'19#.#16.231.96':139
'19#.#16.14.92':139
'19#.#16.161.128':139
'19#.#16.157.161':139
'19#.#16.159.109':139
'19#.#16.32.43':139
'19#.#16.229.80':139
'19#.#16.160.17':139
'19#.#16.143.64':139
'19#.#16.141.142':139
'19#.#16.79.13':139
'19#.#16.188.239':139
'19#.#16.131.166':139
'19#.#16.25.37':139
'19#.#16.255.180':139
'19#.#16.46.0':139
'19#.#16.29.243':139
'19#.#16.61.18':139
'19#.#16.202.74':139
'19#.#16.70.145':139
'19#.#16.189.118':139
'19#.#16.79.6':139
'19#.#16.100.197':139
'19#.#16.103.126':139
'19#.#16.48.148':139
'19#.#16.67.49':139
'19#.#16.239.110':139
'19#.#16.120.189':139
'19#.#16.33.25':139
'19#.#16.23.22':139
'19#.#16.87.104':445
'19#.#16.132.102':445
'19#.#16.58.85':445
'19#.#16.194.149':445
'19#.#16.106.172':445
'19#.#16.217.163':445
'19#.#16.23.225':445
'19#.#16.39.91':445
'19#.#16.53.161':445
'19#.#16.5.46':445
'19#.#16.154.149':445
'19#.#16.207.11':445
'19#.#16.66.5':445
'19#.#16.155.184':139
'19#.#16.185.0':139
'19#.#16.254.184':139
'19#.#16.58.225':139
'19#.#16.111.238':139
'19#.#16.244.238':139
'19#.#16.246.252':445
'19#.#16.118.246':445
'19#.#16.149.175':445
'19#.#16.52.126':445
'19#.#16.156.250':445
'19#.#16.31.73':445
'19#.#16.251.4':445
'19#.#16.15.30':445
'19#.#16.33.201':445
'19#.#16.111.238':445
'19#.#16.248.222':445
'19#.#16.58.225':445
'19#.#16.3.30':445
'19#.#16.254.184':445
'19#.#16.11.108':139
'19#.#16.223.106':139
'19#.#16.244.238':445
'19#.#16.155.184':445
'19#.#16.185.0':445
'19#.#16.90.130':445
'19#.#16.78.232':445
'19#.#16.162.41':445
'19#.#16.152.142':445
'19#.#16.154.71':445
'19#.#16.115.42':445
'19#.#16.39.9':445
'19#.#16.217.65':445
'19#.#16.148.142':445
'19#.#16.35.51':445
'19#.#16.197.115':445
'19#.#16.131.122':445
'19#.#16.23.90':445
'19#.#16.31.73':139
'19#.#16.246.252':139
'19#.#16.118.246':139
'19#.#16.239.110':9988
'19#.#16.52.126':139
'19#.#16.156.250':139
'19#.#16.106.172':139
'19#.#16.217.163':139
'19#.#16.87.104':139
'19#.#16.149.175':139
'19#.#16.66.5':139
'19#.#16.194.149':139
'19#.#16.67.49':9988
'19#.#16.161.160':9988
'19#.#16.245.165':9988
'19#.#16.84.245':9988
'19#.#16.157.185':9988
'19#.#16.88.52':9988
'19#.#16.70.170':9988
'19#.#16.231.96':9988
'19#.#16.8.145':9988
'19#.#16.48.148':9988
'19#.#16.14.92':9988
'19#.#16.157.161':9988
'19#.#16.161.144':9988
'19#.#16.132.102':139
'19#.#16.23.90':139
'19#.#16.217.65':139
'19#.#16.148.142':139
'19#.#16.78.232':139
'19#.#16.162.41':139
'19#.#16.131.122':139
'19#.#16.33.201':139
'19#.#16.15.30':139
'19#.#16.3.30':139
'19#.#16.35.51':139
'19#.#16.90.130':139
'19#.#16.248.222':139
'19#.#16.39.9':139
'19#.#16.207.11':139
'19#.#16.23.225':139
'19#.#16.39.91':139
'19#.#16.58.85':139
'19#.#16.5.46':139
'19#.#16.154.149':139
'19#.#16.115.42':139
'19#.#16.197.115':139
'19#.#16.152.142':139
'19#.#16.53.161':139
'19#.#16.251.4':139
'19#.#16.154.71':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней