Trojan.DownLoader12.29127

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER7934.dir00\svchost.exe.mdmp 16325836412032088

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7934.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##6.171.66':445
'24.##6.182.122':445
'24.##6.139.231':445
'24.##6.37.43':445
'24.##6.163.37':445
'24.##6.111.45':445
'24.##6.211.115':445
'24.#26.49.9':445
'24.##6.95.67':445
'24.##6.110.7':445
'24.##6.150.237':445
'24.##6.136.198':445
'24.##6.27.145':445
'24.#26.4.27':445
'24.##6.72.25':445
'24.##6.12.189':445
'24.##6.106.140':445
'24.##6.85.106':445
'24.##6.10.85':445
'24.##6.52.77':445
'24.##6.100.231':445
'24.##6.46.17':445
'24.##6.75.131':445
'24.##6.244.187':445
'24.##6.219.241':445
'24.##6.11.213':139
'24.##6.41.230':139
'24.##6.117.168':139
'24.##6.46.51':139
'24.##6.143.163':139
'24.##6.47.218':139
'24.##6.213.202':139
'24.##6.166.89':445
'24.##6.55.239':445
'24.##6.157.160':139
'24.##6.97.249':139
'24.##6.202.97':139
'24.##6.152.48':139
'24.##6.86.160':445
'24.##6.157.86':445
'24.##6.18.156':445
'24.##6.132.247':445
'24.##6.73.133':445
'24.##6.160.178':445
'24.##6.166.89':139
'24.##6.55.239':139
'24.##6.4.132':139
'24.##6.255.11':445
'24.##6.80.60':445
'24.##6.122.34':445
'24.#26.4.27':139
'24.##6.72.25':139
'24.##6.12.189':139
'24.##6.106.140':139
'24.##6.85.106':139
'24.##6.10.85':139
'24.##6.52.77':139
'24.##6.100.231':139
'24.##6.46.17':139
'24.##6.75.131':139
'24.##6.244.187':139
'24.##6.219.241':139
'24.##6.206.188':139
'24.##6.170.106':445
'24.##6.4.103':445
'24.##6.108.31':445
'24.##6.47.86':445
'24.##6.131.239':445
'24.##6.101.239':445
'24.##6.179.196':445
'24.##6.86.11':139
'24.##6.231.20':139
'24.##6.87.238':445
'24.##6.121.112':445
'24.##6.188.143':445
'24.##6.86.160':139
'24.##6.157.86':139
'24.##6.18.156':139
'24.##6.132.247':139
'24.##6.73.133':139
'24.##6.160.178':139
'24.##6.86.11':445
'24.##6.231.20':445
'24.##6.206.188':445
'24.##6.255.11':139
'24.##6.80.60':139
'24.##6.122.34':139
'24.##6.95.67':139
'24.##6.111.45':139
'24.##6.171.66':139
'24.##6.182.122':139
'24.##6.27.145':139
'24.##6.37.43':139
'24.##6.163.37':139
'24.##6.136.198':139
'24.##6.211.115':139
'24.#26.49.9':139
'24.##6.139.231':139
'24.##6.110.7':139
'24.##6.150.237':139
'24.##6.58.165':445
'24.##6.34.235':445
'24.##6.166.48':445
'24.##6.55.173':445
'24.##6.254.56':445
'24.##6.118.108':445
'24.##6.116.200':445
'24.##6.231.126':445
'24.##6.35.90':445
'24.##6.222.147':445
'24.##6.137.165':445
'24.##6.100.167':445
'24.##6.72.97':445
'24.##6.127.53':445
'24.##6.141.186':445
'24.##6.23.224':445
'24.##6.112.210':445
'24.##6.127.242':445
'24.#26.65.9':445
'24.##6.9.173':445
'24.##6.76.91':445
'24.##6.58.183':445
'24.##6.140.88':445
'24.##6.217.177':445
'24.##6.80.30':445
'24.##6.151.91':139
'24.##6.165.151':139
'24.##6.5.171':139
'24.##6.174.199':139
'24.##6.247.173':139
'24.##6.91.248':139
'24.##6.190.32':139
'24.##6.136.154':139
'24.##6.107.239':139
'24.##6.93.246':139
'24.##6.171.213':139
'24.##6.66.191':139
'24.##6.137.37':139
'24.##6.52.87':445
'24.##6.124.130':445
'24.##6.166.196':445
'24.##6.198.215':445
'24.##6.183.232':445
'24.##6.132.183':445
'24.##6.132.132':445
'24.##6.51.199':445
'24.##6.10.60':139
'24.##6.203.166':445
'24.##6.74.203':445
'24.##6.87.110':445
'24.##6.127.53':139
'24.##6.141.186':139
'24.##6.23.224':139
'24.##6.112.210':139
'24.##6.127.242':139
'24.#26.65.9':139
'24.##6.9.173':139
'24.##6.76.91':139
'24.##6.58.183':139
'24.##6.140.88':139
'24.##6.217.177':139
'24.##6.80.30':139
'24.##6.231.180':139
'24.##6.143.163':445
'24.##6.47.218':445
'24.##6.11.213':445
'24.##6.4.132':445
'24.##6.152.48':445
'24.##6.46.51':445
'24.##6.97.249':445
'24.##6.202.97':445
'24.##6.213.202':445
'24.##6.41.230':445
'24.##6.117.168':445
'24.##6.157.160':445
'24.##6.52.87':139
'24.##6.124.130':139
'24.##6.166.196':139
'24.##6.198.215':139
'24.##6.183.232':139
'24.##6.132.183':139
'24.##6.132.132':139
'24.##6.51.199':139
'24.##6.231.180':445
'24.##6.203.166':139
'24.##6.74.203':139
'24.##6.87.110':139
'24.##6.35.90':139
'24.##6.118.108':139
'24.##6.58.165':139
'24.##6.34.235':139
'24.##6.72.97':139
'24.##6.55.173':139
'24.##6.254.56':139
'24.##6.100.167':139
'24.##6.116.200':139
'24.##6.231.126':139
'24.##6.166.48':139
'24.##6.222.147':139
'24.##6.137.165':139
'24.##6.240.79':445
'24.##6.131.103':445
'24.##6.12.106':445
'24.##6.121.48':445
'24.##6.144.107':445
'24.##6.223.125':445
'24.##6.76.130':445
'24.##6.165.98':445
'24.##6.96.210':445
'24.##6.187.108':445
'24.##6.98.205':445
'24.##6.27.94':445
'24.##6.222.127':445
'24.##6.185.175':445
'24.##6.90.189':445
'24.##6.193.10':445
'24.##6.138.106':139
'24.##6.176.166':445
'24.##6.232.112':445
'24.##6.82.207':445
'24.##6.10.208':445
'24.##6.66.213':445
'24.##6.77.214':445
'24.##6.56.34':445
'24.##6.170.216':445
'24.##6.180.8':445
'24.##6.8.232':445
'24.##6.232.13':445
'24.##6.94.72':445
'24.##6.26.209':445
'24.##6.101.0':445
'24.##6.110.70':445
'24.##6.142.11':445
'24.##6.247.200':445
'24.##6.149.180':445
'24.##6.24.150':445
'24.##6.88.196':445
'24.##6.218.75':445
'24.##6.149.229':445
'24.##6.250.26':445
'24.##6.116.250':445
'24.##6.44.195':445
'24.##6.248.233':445
'24.##6.53.132':445
'24.##6.146.91':445
'24.##6.42.223':445
'24.##6.67.34':445
'24.##6.195.116':445
'24.##6.230.27':445
'24.##6.93.195':445
'24.##6.12.106':139
'24.##6.131.103':139
'24.##6.187.108':139
'24.##6.121.48':139
'24.##6.223.125':139
'24.##6.240.79':139
'24.##6.165.98':139
'24.##6.96.210':139
'24.##6.44.195':139
'24.##6.98.205':139
'24.##6.27.94':139
'24.##6.76.130':139
'24.##6.144.107':139
'24.##6.193.10':139
'24.##6.10.208':139
'24.##6.232.112':139
'24.##6.77.214':139
'24.##6.56.34':139
'24.##6.90.189':139
'24.##6.82.207':139
'24.##6.66.213':139
'24.##6.222.127':139
'24.##6.176.166':139
'24.##6.185.175':139
'24.##6.170.216':139
'24.##6.8.232':139
'24.##6.180.8':139
'24.##6.149.180':139
'24.##6.101.0':139
'24.##6.26.209':139
'24.##6.232.13':139
'24.##6.142.11':139
'24.##6.248.11':139
'24.##6.247.200':139
'24.##6.24.150':139
'24.##6.88.196':139
'24.##6.110.70':139
'24.##6.94.72':139
'24.##6.250.26':139
'24.##6.116.250':139
'24.##6.195.116':139
'24.##6.53.132':139
'24.##6.248.233':139
'24.##6.149.229':139
'24.##6.146.91':139
'24.##6.67.34':139
'24.##6.218.75':139
'24.##6.93.195':139
'24.##6.230.27':139
'24.##6.42.223':139
'24.##6.133.13':445
'24.##6.189.9':445
'24.##6.51.248':445
'24.##6.239.39':445
'24.##6.224.98':445
'24.##6.44.203':445
'24.##6.223.180':445
'24.##6.56.224':445
'24.##6.205.124':445
'24.##6.211.36':445
'24.##6.176.210':445
'24.##6.180.176':445
'24.##6.67.230':445
'24.##6.16.55':445
'24.##6.10.158':445
'24.##6.64.192':445
'24.##6.39.140':445
'24.##6.60.40':445
'24.##6.24.14':445
'24.##6.6.201':445
'24.##6.14.129':445
'24.##6.53.218':445
'24.##6.161.108':445
'24.##6.110.41':445
'24.##6.156.53':445
'24.##6.108.31':139
'24.##6.87.238':139
'24.##6.121.112':139
'24.##6.101.239':139
'24.##6.170.106':139
'24.##6.4.103':139
'24.##6.19.24':445
'24.##6.13.197':445
'24.##6.194.91':445
'24.##6.188.143':139
'24.##6.179.196':139
'24.##6.236.71':445
'24.##6.131.239':139
'24.##6.41.185':445
'24.#26.52.0':445
'24.##6.119.30':445
'24.##6.55.176':445
'24.##6.235.149':445
'24.##6.97.37':445
'24.##6.13.197':139
'24.##6.194.91':139
'24.##6.47.86':139
'24.#26.97.9':445
'24.##6.236.71':139
'24.##6.19.24':139
'24.##6.16.55':139
'24.##6.10.158':139
'24.##6.64.192':139
'24.##6.39.140':139
'24.##6.60.40':139
'24.##6.24.14':139
'24.##6.6.201':139
'24.##6.239.39':139
'24.##6.14.129':139
'24.##6.161.108':139
'24.##6.110.41':139
'24.##6.156.53':139
'24.##6.174.195':139
'24.##6.56.34':9988
'24.##6.10.208':9988
'24.##6.53.132':9988
'24.##6.248.11':445
'24.##6.138.106':445
'24.##6.44.195':9988
'24.##6.214.208':139
'24.##6.151.234':139
'24.##6.89.41':139
'24.##6.230.27':9988
'24.##6.42.223':9988
'24.##6.209.20':139
'24.##6.41.185':139
'24.#26.52.0':139
'24.##6.119.30':139
'24.##6.55.176':139
'24.##6.235.149':139
'24.##6.97.37':139
'24.##6.151.234':445
'24.##6.89.41':445
'24.##6.174.195':445
'24.#26.97.9':139
'24.##6.209.20':445
'24.##6.214.208':445
'24.##6.205.124':139
'24.##6.44.203':139
'24.##6.133.13':139
'24.##6.189.9':139
'24.##6.53.218':139
'24.##6.67.230':139
'24.##6.224.98':139
'24.##6.180.176':139
'24.##6.223.180':139
'24.##6.56.224':139
'24.##6.51.248':139
'24.##6.211.36':139
'24.##6.176.210':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней