Trojan.DownLoader12.29125

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERc991.dir00\svchost.exe.mdmp 16325836412032192

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc991.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'89.#2.38.57':139
'89.##.83.201':139
'89.##.107.48':139
'89.#2.165.0':139
'89.##.118.152':139
'89.##.242.97':139
'89.##.37.160':139
'89.##.97.116':139
'89.##.177.132':139
'89.##.107.21':139
'89.##.194.192':139
'89.##.135.109':445
'89.#2.3.203':445
'89.##.146.248':445
'89.##.85.130':445
'89.##.28.161':445
'89.##.104.15':445
'89.##.120.209':445
'89.##.211.103':445
'89.##.59.142':445
'89.#2.97.77':445
'89.##.37.160':445
'89.##.252.91':445
'89.##.242.97':445
'89.##.107.21':445
'89.##.97.116':445
'89.##.105.167':139
'89.#2.30.24':139
'89.##.155.27':445
'89.##.115.190':445
'89.#2.42.28':445
'89.##.177.132':445
'89.##.155.27':139
'89.##.194.192':445
'89.#2.42.28':139
'89.##.252.91':139
'89.##.115.190':139
'89.##.118.152':445
'89.##.83.201':445
'89.##.107.48':445
'89.#2.165.0':445
'89.#2.38.57':445
'89.##.211.103':139
'89.##.120.209':139
'89.##.104.15':139
'89.##.59.142':139
'89.#2.97.77':139
'89.##.42.212':445
'89.##.159.134':445
'89.##.167.165':445
'89.##.208.47':445
'89.##.19.173':445
'89.#2.3.203':139
'89.##.159.157':139
'89.##.16.120':139
'89.##.32.107':139
'89.##.226.146':139
'89.##.143.239':139
'89.##.28.161':139
'89.##.135.109':139
'89.##.146.248':139
'89.##.206.174':139
'89.##.85.130':139
'89.#2.2.102':445
'89.##.226.146':445
'89.##.145.193':445
'89.##.252.178':445
'89.##.183.181':445
'89.##.16.120':445
'89.##.206.174':445
'89.##.159.157':445
'89.##.143.239':445
'89.##.32.107':445
'89.##.26.135':445
'89.##.174.77':445
'89.##.37.154':445
'89.#2.46.75':445
'89.##.51.159':445
'89.##.143.51':445
'89.##.96.198':445
'89.#2.82.71':445
'89.#2.75.50':445
'89.##.29.191':445
'89.##.147.158':445
'89.##.162.29':139
'89.##.168.194':445
'89.##.96.245':445
'89.##.162.158':445
'89.##.141.235':445
'89.#2.50.99':445
'89.#2.47.64':445
'89.##.132.47':445
'89.##.64.167':445
'89.##.233.156':445
'89.#2.2.232':445
'89.##.29.214':445
'89.##.139.40':445
'89.##.201.188':445
'89.#2.7.55':445
'89.##.224.33':445
'89.#2.140.6':445
'89.##.173.185':445
'89.##.159.180':445
'89.##.59.127':445
'89.##.121.157':445
'89.#2.71.21':445
'89.##.105.195':139
'89.#2.86.91':139
'89.##.195.108':139
'89.#2.4.230':139
'89.##.109.133':139
'89.##.235.98':139
'89.##.45.235':139
'89.##.98.227':139
'89.#2.97.45':139
'89.##.227.97':139
'89.##.18.223':139
'89.##.64.245':445
'89.##.157.242':445
'89.##.157.26':445
'89.#2.6.89':445
'89.##.26.127':445
'89.##.207.30':139
'89.##.223.207':139
'89.##.245.161':139
'89.##.230.98':445
'89.##.65.205':139
'89.##.173.185':139
'89.##.159.180':139
'89.##.59.127':139
'89.##.121.157':139
'89.#2.71.21':139
'89.##.162.158':139
'89.##.168.194':139
'89.#2.50.99':139
'89.##.29.214':139
'89.##.141.235':139
'89.##.201.188':139
'89.##.204.81':139
'89.#2.24.67':139
'89.##.199.95':139
'89.##.210.34':139
'89.#2.224.3':139
'89.#2.7.55':139
'89.##.139.40':139
'89.#2.140.6':139
'89.##.42.231':139
'89.##.224.33':139
'89.##.162.29':445
'89.##.210.34':445
'89.#2.30.24':445
'89.##.230.98':139
'89.##.105.167':445
'89.#2.24.67':445
'89.##.42.231':445
'89.##.204.81':445
'89.#2.224.3':445
'89.##.199.95':445
'89.##.157.242':139
'89.##.64.167':139
'89.#2.47.64':139
'89.#2.2.232':139
'89.##.96.245':139
'89.##.233.156':139
'89.##.157.26':139
'89.##.64.245':139
'89.##.26.127':139
'89.##.132.47':139
'89.#2.6.89':139
'89.#2.2.102':139
'89.##.183.162':445
'89.#2.77.17':445
'89.#2.83.55':445
'89.##.237.82':445
'89.#2.28.23':445
'89.#2.11.91':445
'89.##.157.107':445
'89.##.90.147':445
'89.#2.52.57':445
'89.#2.76.52':445
'89.##.73.137':445
'89.##.67.116':139
'89.##.218.254':139
'89.##.134.166':139
'89.#2.83.68':139
'89.##.17.158':139
'89.##.189.236':139
'89.##.73.237':445
'89.##.234.10':139
'89.##.34.167':139
'89.##.10.127':139
'89.##.151.230':445
'89.##.232.248':445
'89.##.198.150':445
'89.##.48.195':445
'89.#2.49.60':445
'89.#2.12.4':445
'89.##.125.11':445
'89.#2.75.45':445
'89.##.150.246':445
'89.#2.17.34':445
'89.##.37.168':445
'89.##.184.60':445
'89.##.157.97':445
'89.#2.9.191':445
'89.##.185.90':445
'89.#2.10.84':445
'89.##.123.215':445
'89.##.64.124':445
'89.##.215.164':445
'89.##.195.157':445
'89.#2.91.51':445
'89.#2.9.191':139
'89.##.184.60':139
'89.#2.10.84':139
'89.##.157.107':139
'89.##.185.90':139
'89.##.215.164':139
'89.##.123.215':139
'89.#2.91.51':139
'89.##.157.97':139
'89.##.195.157':139
'89.#2.11.91':139
'89.##.73.237':139
'89.#2.83.55':139
'89.#2.28.23':139
'89.##.73.137':139
'89.##.237.82':139
'89.#2.76.52':139
'89.##.90.147':139
'89.#2.52.57':139
'89.##.183.162':139
'89.#2.77.17':139
'89.##.123.217':139
'89.##.80.124':139
'89.##.217.167':139
'89.##.125.11':139
'89.##.99.103':139
'89.#2.12.45':139
'89.##.14.147':139
'89.##.111.202':139
'89.##.237.80':139
'89.#2.43.58':139
'89.#2.12.4':139
'89.#2.49.60':139
'89.##.198.150':139
'89.##.48.195':139
'89.##.64.124':139
'89.##.37.168':139
'89.#2.17.34':139
'89.#2.75.45':139
'89.##.150.246':139
'89.##.151.230':139
'89.##.232.248':139
'89.##.99.103':445
'89.#2.1.41':445
'89.##.16.254':445
'89.##.168.113':445
'89.##.49.148':445
'89.##.162.245':445
'89.##.153.105':445
'89.##.123.174':445
'89.#2.71.50':445
'89.##.157.200':445
'89.##.174.49':445
'89.##.12.137':445
'89.##.123.174':139
'89.#2.71.50':139
'89.##.174.49':139
'89.##.162.245':139
'89.##.49.148':139
'89.#2.6.79':445
'89.##.102.208':445
'89.#2.16.44':139
'89.##.153.105':139
'89.##.222.163':139
'89.#2.75.50':139
'89.##.96.198':139
'89.##.147.158':139
'89.##.37.154':139
'89.##.29.191':139
'89.##.183.181':139
'89.##.145.193':139
'89.##.252.178':139
'89.#2.82.71':139
'89.##.26.135':139
'89.##.174.77':139
'89.##.208.47':139
'89.##.167.165':139
'89.##.19.173':139
'89.##.222.163':445
'89.#2.16.44':445
'89.##.143.51':139
'89.#2.46.75':139
'89.##.51.159':139
'89.##.42.212':139
'89.##.159.134':139
'89.##.10.127':445
'89.##.234.10':445
'89.##.34.167':445
'89.##.67.116':445
'89.##.218.254':445
'89.#2.76.52':9988
'89.##.185.90':9988
'89.##.73.237':9988
'89.##.189.236':445
'89.##.183.162':9988
'89.##.134.166':445
'89.##.237.80':445
'89.#2.43.58':445
'89.##.80.124':445
'89.##.217.167':445
'89.##.123.217':445
'89.#2.83.68':445
'89.##.17.158':445
'89.##.14.147':445
'89.##.111.202':445
'89.#2.12.45':445
'89.##.16.254':139
'89.##.157.200':139
'89.##.10.127':9988
'89.#2.83.68':9988
'89.##.17.158':9988
'89.#2.1.41':139
'89.##.168.113':139
'89.##.102.208':139
'89.##.12.137':139
'89.#2.6.79':139
'89.#2.12.45':9988
'89.##.37.168':9988
'89.##.48.195':9988
'89.##.64.124':9988
'89.##.157.97':9988
'89.##.215.164':9988
'89.##.217.167':9988
'89.##.237.80':9988
'89.##.125.11':9988
'89.#2.49.60':9988
'89.##.150.246':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней