Trojan.DownLoader12.29114

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERcb8c.dir00\svchost.exe.mdmp 16325836412030268

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERcb8c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#56.0.64':445
'20#.#56.28.86':445
'20#.#56.216.23':445
'20#.#56.94.184':445
'20#.#56.225.94':445
'20#.#56.179.225':445
'20#.#56.19.216':445
'20#.#56.243.183':445
'20#.#56.55.219':445
'20#.#56.90.133':445
'20#.#56.134.19':445
'20#.#56.107.222':445
'20#.#56.144.164':445
'20#.#56.139.240':445
'20#.#56.49.235':445
'20#.#56.123.149':445
'20#.#56.114.182':139
'20#.#56.124.192':139
'20#.#56.211.124':139
'20#.#56.79.206':445
'20#.#56.37.87':445
'20#.#56.248.85':445
'20#.#56.178.123':445
'20#.#56.120.1':445
'20#.#56.64.120':445
'20#.#56.27.105':445
'20#.#56.65.153':445
'20#.#56.37.142':445
'20#.#56.71.243':445
'20#.#56.149.7':445
'20#.#56.143.142':445
'20#.#56.119.18':445
'20#.#56.105.186':445
'20#.#56.211.124':445
'20#.#56.136.219':139
'20#.#56.18.211':139
'20#.#56.38.35':445
'20#.#56.114.182':445
'20#.#56.124.192':445
'20#.#56.236.229':445
'20#.#56.31.194':445
'20#.#56.5.42':445
'20#.#56.182.102':445
'20#.#56.52.139':445
'20#.#56.55.78':445
'20#.#56.195.5':445
'20#.#56.198.162':445
'20#.#56.241.65':445
'20#.#56.168.190':445
'20#.#56.59.69':445
'20#.#56.3.114':445
'20#.#56.69.73':445
'20#.#56.248.85':139
'20#.#56.178.123':139
'20#.#56.94.184':139
'20#.#56.64.120':139
'20#.#56.27.105':139
'20#.#56.37.87':139
'20#.#56.225.94':139
'20#.#56.216.23':139
'20#.#56.19.216':139
'20#.#56.134.19':139
'20#.#56.179.225':139
'20#.#56.0.64':139
'20#.#56.28.86':139
'20#.#56.32.102':139
'20#.#56.37.70':445
'20#.#56.76.169':445
'20#.#56.37.70':139
'20#.#56.76.169':139
'20#.#56.235.9':139
'20#.#56.235.9':445
'20#.#56.123.149':139
'20#.#56.79.206':139
'20#.#56.120.1':139
'20#.#56.32.102':445
'20#.#56.139.240':139
'20#.#56.49.235':139
'20#.#56.241.65':139
'20#.#56.168.190':139
'20#.#56.149.7':139
'20#.#56.3.114':139
'20#.#56.69.73':139
'20#.#56.198.162':139
'20#.#56.143.142':139
'20#.#56.71.243':139
'20#.#56.105.186':139
'20#.#56.38.35':139
'20#.#56.119.18':139
'20#.#56.65.153':139
'20#.#56.37.142':139
'20#.#56.55.219':139
'20#.#56.90.133':139
'20#.#56.182.102':139
'20#.#56.107.222':139
'20#.#56.144.164':139
'20#.#56.243.183':139
'20#.#56.52.139':139
'20#.#56.5.42':139
'20#.#56.195.5':139
'20#.#56.59.69':139
'20#.#56.55.78':139
'20#.#56.236.229':139
'20#.#56.31.194':139
'20#.#56.8.24':445
'20#.#56.176.189':445
'20#.#56.13.225':445
'20#.#56.106.44':445
'20#.#56.244.4':445
'20#.#56.200.208':445
'20#.#56.211.126':445
'20#.#56.50.37':445
'20#.#56.176.210':445
'20#.#56.49.65':445
'20#.#56.20.51':445
'20#.#56.86.236':445
'20#.#56.225.51':445
'20#.#56.240.182':445
'20#.#56.198.188':445
'20#.#56.98.203':445
'20#.#56.160.19':139
'20#.#56.28.166':445
'20#.#56.44.158':445
'20#.#56.127.134':445
'20#.#56.251.201':445
'20#.#56.34.203':445
'20#.#56.44.120':445
'20#.#56.54.161':445
'20#.#56.155.12':445
'20#.#56.201.158':445
'20#.#56.18.248':445
'20#.#56.23.198':445
'20#.#56.135.240':445
'20#.#56.115.99':445
'20#.#56.16.246':445
'20#.#56.21.188':445
'20#.#56.9.94':445
'20#.#56.168.53':139
'20#.#56.209.167':139
'20#.#56.27.91':139
'20#.#56.31.10':445
'20#.#56.160.19':445
'20#.#56.26.154':139
'20#.#56.152.48':445
'20#.#56.16.153':445
'20#.#56.143.16':445
'20#.#56.229.16':445
'20#.#56.161.229':445
'20#.#56.174.78':445
'20#.#56.63.143':445
'20#.#56.12.74':445
'20#.#56.12.98':445
'20#.#56.220.232':445
'20#.#56.4.77':445
'20#.#56.50.223':445
'20#.#56.43.50':445
'20#.#56.34.203':139
'20#.#56.44.120':139
'20#.#56.106.44':139
'20#.#56.155.12':139
'20#.#56.201.158':139
'20#.#56.251.201':139
'20#.#56.244.4':139
'20#.#56.13.225':139
'20#.#56.211.126':139
'20#.#56.20.51':139
'20#.#56.200.208':139
'20#.#56.8.24':139
'20#.#56.176.189':139
'20#.#56.18.211':445
'20#.#56.107.33':445
'20#.#56.9.202':445
'20#.#56.107.33':139
'20#.#56.9.202':139
'20#.#56.136.219':445
'20#.#56.28.166':139
'20#.#56.98.203':139
'20#.#56.127.134':139
'20#.#56.54.161':139
'20#.#56.44.158':139
'20#.#56.240.182':139
'20#.#56.198.188':139
'20#.#56.12.98':139
'20#.#56.220.232':139
'20#.#56.115.99':139
'20#.#56.50.223':139
'20#.#56.43.50':139
'20#.#56.12.74':139
'20#.#56.16.246':139
'20#.#56.135.240':139
'20#.#56.9.94':139
'20#.#56.31.10':139
'20#.#56.21.188':139
'20#.#56.18.248':139
'20#.#56.23.198':139
'20#.#56.176.210':139
'20#.#56.49.65':139
'20#.#56.229.16':139
'20#.#56.86.236':139
'20#.#56.225.51':139
'20#.#56.50.37':139
'20#.#56.161.229':139
'20#.#56.143.16':139
'20#.#56.63.143':139
'20#.#56.4.77':139
'20#.#56.174.78':139
'20#.#56.152.48':139
'20#.#56.16.153':139
'20#.#56.35.21':445
'20#.#56.9.80':445
'20#.#56.194.206':445
'20#.#56.103.89':445
'20#.#56.60.239':445
'20#.#56.21.61':445
'20#.#56.41.138':445
'20#.#56.83.206':445
'20#.#56.112.2':445
'20#.#56.236.64':445
'20#.#56.200.237':445
'20#.#56.38.144':445
'20#.#56.145.70':445
'20#.#56.31.171':445
'20#.#56.169.34':445
'20#.#56.240.216':445
'20#.#56.192.52':445
'20#.#56.158.24':445
'20#.#56.27.127':445
'20#.#56.67.142':445
'20#.#56.76.78':445
'20#.#56.11.243':445
'20#.#56.22.17':445
'20#.#56.190.158':445
'20#.#56.118.132':445
'20#.#56.102.78':445
'20#.#56.64.78':445
'20#.#56.192.160':445
'20#.#56.85.25':445
'20#.#56.137.198':445
'20#.#56.38.137':445
'20#.#56.199.123':445
'20#.#56.89.195':445
'20#.#56.38.128':445
'20#.#56.240.216':9988
'20#.#56.158.24':9988
'20#.#56.166.139':445
'20#.#56.219.216':445
'20#.#56.184.142':445
'20#.#56.72.251':445
'20#.#56.60.12':445
'20#.#56.175.151':445
'20#.#56.234.235':445
'20#.#56.10.76':445
'20#.#56.251.192':445
'20#.#56.17.72':445
'20#.#56.42.241':445
'20#.#56.241.127':445
'20#.#56.197.243':445
'20#.#56.231.169':445
'20#.#56.4.219':445
'20#.#56.6.93':445
'20#.#56.21.61':139
'20#.#56.35.21':139
'20#.#56.9.80':139
'20#.#56.22.17':139
'20#.#56.103.89':139
'20#.#56.60.239':139
'20#.#56.194.206':139
'20#.#56.145.70':139
'20#.#56.83.206':139
'20#.#56.112.2':139
'20#.#56.41.138':139
'20#.#56.200.237':139
'20#.#56.38.144':139
'20#.#56.158.24':139
'20#.#56.31.171':139
'20#.#56.169.34':139
'20#.#56.27.127':139
'20#.#56.192.52':139
'20#.#56.63.193':139
'20#.#56.240.216':139
'20#.#56.102.78':139
'20#.#56.76.78':139
'20#.#56.11.243':139
'20#.#56.67.142':139
'20#.#56.190.158':139
'20#.#56.118.132':139
'20#.#56.199.123':139
'20#.#56.64.78':139
'20#.#56.192.160':139
'20#.#56.197.243':139
'20#.#56.137.198':139
'20#.#56.38.137':139
'20#.#56.85.25':139
'20#.#56.184.142':139
'20#.#56.38.128':139
'20#.#56.63.193':445
'20#.#56.89.195':139
'20#.#56.166.139':139
'20#.#56.219.216':139
'20#.#56.251.192':139
'20#.#56.72.251':139
'20#.#56.60.12':139
'20#.#56.236.64':139
'20#.#56.234.235':139
'20#.#56.10.76':139
'20#.#56.175.151':139
'20#.#56.6.93':139
'20#.#56.42.241':139
'20#.#56.241.127':139
'20#.#56.17.72':139
'20#.#56.231.169':139
'20#.#56.4.219':139
'20#.#56.144.19':445
'20#.#56.191.143':445
'20#.#56.138.254':445
'20#.#56.228.76':445
'20#.#56.255.227':445
'20#.#56.237.113':445
'20#.#56.95.194':445
'20#.#56.23.216':445
'20#.#56.231.71':445
'20#.#56.84.110':445
'20#.#56.131.174':445
'20#.#56.83.207':445
'20#.#56.58.142':445
'20#.#56.14.140':139
'20#.#56.136.120':139
'20#.#56.255.223':445
'20#.#56.177.133':139
'20#.#56.148.15':139
'20#.#56.33.0':139
'20#.#56.188.227':445
'20#.#56.34.56':445
'20#.#56.159.120':445
'20#.#56.124.25':445
'20#.#56.121.188':445
'20#.#56.191.121':445
'20#.#56.169.14':445
'20#.#56.82.139':445
'20#.#56.183.160':445
'20#.#56.6.137':445
'20#.#56.239.52':445
'20#.#56.53.60':445
'20#.#56.131.180':445
'20#.#56.152.151':445
'20#.#56.33.0':445
'20#.#56.14.140':445
'20#.#56.136.120':445
'20#.#56.113.113':445
'20#.#56.177.133':445
'20#.#56.148.15':445
'20#.#56.102.48':445
'20#.#56.39.181':445
'20#.#56.10.66':445
'20#.#56.150.176':445
'20#.#56.134.141':445
'20#.#56.196.172':445
'20#.#56.156.16':445
'20#.#56.135.249':445
'20#.#56.109.73':445
'20#.#56.52.179':445
'20#.#56.157.254':445
'20#.#56.73.56':445
'20#.#56.116.160':445
'20#.#56.159.120':139
'20#.#56.124.25':139
'20#.#56.228.76':139
'20#.#56.191.121':139
'20#.#56.169.14':139
'20#.#56.34.56':139
'20#.#56.255.227':139
'20#.#56.138.254':139
'20#.#56.95.194':139
'20#.#56.131.174':139
'20#.#56.237.113':139
'20#.#56.144.19':139
'20#.#56.191.143':139
'20#.#56.76.78':9988
'20#.#56.11.243':9988
'20#.#56.22.17':9988
'20#.#56.67.142':9988
'20#.#56.190.158':9988
'20#.#56.118.132':9988
'20#.#56.103.89':9988
'20#.#56.255.223':139
'20#.#56.188.227':139
'20#.#56.121.188':139
'20#.#56.38.144':9988
'20#.#56.38.128':9988
'20#.#56.64.78':9988
'20#.#56.109.73':139
'20#.#56.52.179':139
'20#.#56.239.52':139
'20#.#56.73.56':139
'20#.#56.116.160':139
'20#.#56.135.249':139
'20#.#56.53.60':139
'20#.#56.6.137':139
'20#.#56.152.151':139
'20#.#56.113.113':139
'20#.#56.131.180':139
'20#.#56.82.139':139
'20#.#56.183.160':139
'20#.#56.231.71':139
'20#.#56.84.110':139
'20#.#56.150.176':139
'20#.#56.83.207':139
'20#.#56.58.142':139
'20#.#56.23.216':139
'20#.#56.134.141':139
'20#.#56.10.66':139
'20#.#56.156.16':139
'20#.#56.157.254':139
'20#.#56.196.172':139
'20#.#56.102.48':139
'20#.#56.39.181':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней