Trojan.DownLoader12.29140

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER9947.dir00\svchost.exe.mdmp 16325836412032084

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WER9947.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'61.##7.147.21':139
'61.##7.134.121':139
'61.##7.144.88':139
'61.##7.40.143':139
'61.##7.208.192':139
'61.##7.21.209':139
'61.##7.38.143':139
'61.##7.46.233':139
'61.##7.58.209':139
'61.##7.102.95':139
'61.##7.22.162':139
'61.##7.156.3':139
'61.##7.55.126':139
'61.##7.78.58':139
'61.##7.132.18':139
'61.##7.30.28':139
'61.##7.28.232':139
'61.##7.143.170':139
'61.##7.71.116':139
'61.##7.133.103':445
'61.##7.14.110':445
'61.#07.1.46':445
'61.##7.33.144':139
'61.##7.98.240':139
'61.##7.65.58':139
'61.##7.87.116':139
'61.##7.240.48':139
'61.##7.123.174':139
'61.##7.194.248':139
'61.##7.40.127':139
'61.#07.8.11':139
'61.##7.144.88':445
'61.##7.46.233':445
'61.##7.55.126':445
'61.##7.134.121':445
'61.##7.208.192':445
'61.##7.40.143':445
'61.##7.147.21':445
'61.##7.78.58':445
'61.##7.102.95':445
'61.#07.8.11':445
'61.##7.38.58':445
'61.##7.58.209':445
'61.##7.132.18':445
'61.##7.156.3':445
'61.##7.22.162':445
'61.##7.28.232':445
'61.##7.33.144':445
'61.##7.123.174':445
'61.##7.143.170':445
'61.##7.38.58':139
'61.##7.71.116':445
'61.##7.30.28':445
'61.##7.194.248':445
'61.##7.87.116':445
'61.##7.38.143':445
'61.##7.21.209':445
'61.##7.65.58':445
'61.##7.240.48':445
'61.##7.40.127':445
'61.##7.98.240':445
'61.##7.163.164':445
'61.##7.39.36':445
'61.##7.106.233':445
'61.##7.242.106':139
'61.##7.140.159':445
'61.##7.160.192':445
'61.##7.159.254':445
'61.##7.12.209':445
'61.##7.31.225':139
'61.##7.187.107':139
'61.##7.24.125':139
'61.##7.203.56':139
'61.##7.52.181':139
'61.##7.123.20':139
'61.##7.10.239':139
'61.##7.110.4':139
'61.##7.37.142':445
'61.##7.109.160':445
'61.##7.68.114':445
'61.##7.49.202':445
'61.##7.74.205':445
'61.##7.192.62':445
'61.##7.198.69':445
'61.##7.47.222':445
'61.##7.17.55':445
'61.##7.109.166':445
'61.##7.176.176':445
'61.##7.192.189':445
'61.##7.68.70':445
'61.##7.212.4':445
'61.##7.29.75':445
'61.##7.101.186':139
'61.##7.101.186':445
'61.##7.24.125':445
'61.##7.203.56':445
'61.##7.187.107':445
'61.##7.110.4':445
'61.##7.10.239':445
'61.##7.52.181':445
'61.##7.117.186':445
'61.##7.10.101':445
'61.##7.42.11':445
'61.##7.57.72':445
'61.##7.27.10':445
'61.##7.211.18':445
'61.##7.111.210':445
'61.##7.65.37':445
'61.##7.163.164':139
'61.##7.10.101':139
'61.##7.27.10':139
'61.##7.65.37':139
'61.##7.117.186':139
'61.##7.211.18':139
'61.##7.111.210':139
'61.##7.42.11':139
'61.##7.242.106':445
'61.##7.31.225':445
'61.##7.123.20':445
'61.#07.1.46':139
'61.##7.57.72':139
'61.##7.133.103':139
'61.##7.14.110':139
'61.##7.39.122':139
'61.#07.9.33':445
'61.##7.137.140':445
'61.##7.27.126':445
'61.##7.61.63':445
'61.##7.47.105':445
'61.##7.20.92':445
'61.#07.4.23':445
'61.##7.76.135':445
'61.##7.161.192':445
'61.##7.172.237':445
'61.##7.43.28':445
'61.##7.115.122':445
'61.##7.245.161':445
'61.##7.42.210':445
'61.##7.72.166':445
'61.##7.68.42':139
'61.##7.176.172':139
'61.##7.150.137':139
'61.##7.43.28':139
'61.##7.116.173':139
'61.##7.2.161':139
'61.##7.150.164':139
'61.##7.127.107':139
'61.##7.95.14':445
'61.##7.184.62':445
'61.##7.138.199':445
'61.##7.196.254':445
'61.##7.212.127':139
'61.##7.181.122':139
'61.##7.107.161':445
'61.##7.68.42':445
'61.##7.25.122':139
'61.##7.184.44':139
'61.##7.251.76':139
'61.#07.13.7':139
'61.#07.85.2':139
'61.##7.201.189':139
'61.##7.181.201':139
'61.##7.209.72':139
'61.##7.73.174':139
'61.##7.100.31':139
'61.##7.15.254':139
'61.##7.3.212':139
'61.##7.243.222':139
'61.#07.8.93':139
'61.##7.104.197':139
'61.##7.150.137':445
'61.##7.127.107':445
'61.##7.181.122':445
'61.##7.176.172':445
'61.##7.116.173':445
'61.##7.2.161':445
'61.##7.150.164':445
'61.##7.212.127':445
'61.##7.118.209':139
'61.##7.40.188':139
'61.##7.147.70':139
'61.##7.167.24':139
'61.##7.51.145':139
'61.##7.38.118':139
'61.##7.205.239':139
'61.##7.172.237':139
'61.##7.189.112':139
'61.##7.12.247':139
'61.##7.39.122':445
'61.##7.167.111':139
'61.##7.89.187':139
'61.##7.24.79':139
'61.##7.37.232':139
'61.#07.14.5':445
'61.##7.139.13':445
'61.##7.177.138':445
'61.##7.19.177':445
'61.##7.192.242':445
'61.##7.98.51':445
'61.##7.115.98':445
'61.##7.92.115':445
'61.##7.192.242':139
'61.##7.177.138':139
'61.##7.139.13':139
'61.##7.92.115':139
'61.#07.14.5':139
'61.##7.98.51':139
'61.##7.115.98':139
'61.##7.19.177':139
'61.##7.139.36':139
'61.##7.162.67':139
'61.##7.199.128':139
'61.##7.122.141':139
'61.##7.127.70':139
'61.#07.3.70':139
'61.##7.197.149':139
'61.##7.197.149':445
'61.##7.20.92':139
'61.##7.27.126':139
'61.##7.42.210':139
'61.#07.4.23':139
'61.##7.184.62':139
'61.##7.138.199':139
'61.##7.47.105':139
'61.##7.76.135':139
'61.##7.72.166':139
'61.##7.115.122':139
'61.##7.161.192':139
'61.#07.9.33':139
'61.##7.137.140':139
'61.##7.245.161':139
'61.##7.61.63':139
'61.##7.162.67':445
'61.##7.199.128':445
'61.##7.89.187':445
'61.##7.139.36':445
'61.#07.3.70':445
'61.##7.127.70':445
'61.##7.122.141':445
'61.##7.24.79':445
'61.##7.107.161':139
'61.##7.196.254':139
'61.##7.95.14':139
'61.##7.12.247':445
'61.##7.37.232':445
'61.##7.167.111':445
'61.##7.189.112':445
'61.##7.168.19':445
'61.##7.209.237':445
'61.##7.238.3':445
'61.##7.168.250':445
'61.##7.129.227':445
'61.##7.73.16':445
'61.##7.250.216':445
'61.##7.141.75':445
'61.##7.49.26':445
'61.##7.47.49':445
'61.##7.19.48':445
'61.##7.26.247':445
'61.##7.200.141':445
'61.#07.3.84':445
'61.##7.159.248':445
'61.#07.4.1':445
'61.##7.109.103':445
'61.##7.144.187':445
'61.##7.0.240':445
'61.##7.84.40':445
'61.##7.32.122':445
'61.##7.130.114':445
'61.##7.236.144':445
'61.##7.91.177':445
'61.##7.141.193':445
'61.##7.193.91':445
'61.##7.100.107':445
'61.##7.75.83':445
'61.#07.30.2':445
'61.##7.78.63':445
'61.##7.84.18':445
'61.##7.35.190':139
'61.##7.58.88':139
'61.#07.6.77':139
'61.##7.45.69':139
'61.##7.88.13':139
'61.##7.118.165':139
'61.##7.102.41':139
'61.##7.127.1':139
'61.##7.155.1':139
'61.##7.21.155':139
'61.##7.61.22':139
'61.#07.9.53':139
'61.##7.122.31':139
'61.##7.166.208':139
'61.##7.79.217':139
'61.##7.166.134':445
'61.##7.59.79':445
'61.##7.197.147':445
'61.#07.7.26':445
'61.##7.162.84':445
'61.##7.17.162':445
'61.##7.25.17':445
'61.##7.193.42':445
'61.##7.26.247':9988
'61.##7.19.48':9988
'61.##7.17.162':9988
'61.##7.159.248':9988
'61.##7.12.193':445
'61.##7.141.193':9988
'61.##7.141.219':9988
'61.##7.141.219':445
'61.##7.75.83':139
'61.##7.78.63':139
'61.#07.30.2':139
'61.##7.236.144':139
'61.#07.4.1':139
'61.##7.109.103':139
'61.##7.144.187':139
'61.##7.100.107':139
'61.##7.129.227':139
'61.##7.250.216':139
'61.##7.168.250':139
'61.##7.73.16':139
'61.##7.91.177':139
'61.##7.193.91':139
'61.##7.141.193':139
'61.##7.196.240':139
'61.##7.206.36':139
'61.##7.93.104':139
'61.##7.0.147':139
'61.##7.102.64':139
'61.##7.37.22':139
'61.##7.141.219':139
'61.##7.41.127':139
'61.##7.32.122':139
'61.##7.130.114':139
'61.##7.0.240':139
'61.##7.84.40':139
'61.##7.207.171':139
'61.##7.172.118':139
'61.#07.9.24':139
'61.##7.168.19':139
'61.##7.12.193':139
'61.##7.102.64':445
'61.##7.0.147':445
'61.##7.193.42':139
'61.##7.166.134':139
'61.##7.59.79':139
'61.##7.197.147':139
'61.##7.41.127':445
'61.##7.172.118':445
'61.#07.9.24':445
'61.##7.207.171':445
'61.##7.37.22':445
'61.##7.206.36':445
'61.##7.93.104':445
'61.##7.196.240':445
'61.#07.3.84':139
'61.##7.159.248':139
'61.##7.26.247':139
'61.##7.200.141':139
'61.##7.209.237':139
'61.##7.238.3':139
'61.##7.141.75':139
'61.##7.49.26':139
'61.##7.17.162':139
'61.##7.25.17':139
'61.#07.7.26':139
'61.##7.162.84':139
'61.##7.47.49':139
'61.##7.19.48':139
'61.##7.84.18':139
'61.##7.166.224':139
'61.##7.60.217':445
'61.##7.119.84':445
'61.##7.22.135':445
'61.##7.217.141':445
'61.##7.237.179':445
'61.##7.148.95':445
'61.##7.39.99':445
'61.##7.225.228':445
'61.##7.141.203':139
'61.#07.0.26':139
'61.##7.202.233':139
'61.##7.229.219':139
'61.##7.56.148':445
'61.##7.28.103':139
'61.##7.176.28':139
'61.##7.17.50':445
'61.##7.85.111':445
'61.#07.7.69':445
'61.##7.73.200':445
'61.##7.22.135':139
'61.##7.56.148':139
'61.##7.14.123':445
'61.##7.96.88':445
'61.##7.17.135':445
'61.##7.233.206':445
'61.##7.27.132':445
'61.##7.212.194':445
'61.##7.109.192':445
'61.##7.192.0':445
'61.##7.42.249':445
'61.##7.32.247':139
'61.##7.140.159':139
'61.##7.12.209':139
'61.##7.106.233':139
'61.##7.159.254':139
'61.##7.109.166':139
'61.##7.176.176':139
'61.##7.39.36':139
'61.#07.0.26':445
'61.##7.176.28':445
'61.##7.229.219':445
'61.##7.196.182':445
'61.##7.202.233':445
'61.##7.141.203':445
'61.##7.32.247':445
'61.##7.28.103':445
'61.##7.212.4':139
'61.##7.29.75':139
'61.##7.109.160':139
'61.##7.74.205':139
'61.##7.196.182':139
'61.##7.192.62':139
'61.##7.198.69':139
'61.##7.68.114':139
'61.##7.192.189':139
'61.##7.160.192':139
'61.##7.17.55':139
'61.##7.49.202':139
'61.##7.68.70':139
'61.##7.47.222':139
'61.##7.37.142':139
'61.##7.225.228':139
'61.#07.6.77':445
'61.##7.127.1':445
'61.##7.166.208':445
'61.##7.58.88':445
'61.##7.45.69':445
'61.##7.102.41':445
'61.##7.88.13':445
'61.#07.9.53':445
'61.##7.21.155':445
'61.##7.166.224':445
'61.##7.67.36':445
'61.##7.61.22':445
'61.##7.79.217':445
'61.##7.122.31':445
'61.##7.155.1':445
'61.##7.177.242':139
'61.##7.127.3':139
'61.##7.214.127':139
'61.##7.153.25':139
'61.##7.67.36':139
'61.##7.151.95':139
'61.##7.117.141':139
'61.##7.206.214':139
'61.##7.12.166':139
'61.##7.118.165':445
'61.##7.35.190':445
'61.##7.12.146':139
'61.##7.247.202':139
'61.##7.65.163':139
'61.##7.35.142':139
'61.##7.151.95':445
'61.##7.237.179':139
'61.##7.212.194':139
'61.##7.17.135':139
'61.#07.7.69':139
'61.##7.192.0':139
'61.##7.109.192':139
'61.##7.96.88':139
'61.##7.233.206':139
'61.##7.119.84':139
'61.##7.217.141':139
'61.##7.60.217':139
'61.##7.39.99':139
'61.##7.42.249':139
'61.##7.27.132':139
'61.##7.148.95':139
'61.##7.127.3':445
'61.##7.206.214':445
'61.##7.247.202':445
'61.##7.177.242':445
'61.##7.117.141':445
'61.##7.153.25':445
'61.##7.214.127':445
'61.##7.65.163':445
'61.##7.73.200':139
'61.##7.17.50':139
'61.##7.85.111':139
'61.##7.12.166':445
'61.##7.35.142':445
'61.##7.12.146':445
'61.##7.14.123':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней