Trojan.DownLoader12.29103

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER4cbf.dir00\svchost.exe.mdmp 16325836412028064

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER4cbf.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'82.##1.6.194':139
'82.##1.51.231':139
'82.##1.236.21':139
'82.##1.115.74':139
'82.#11.21.4':139
'82.##1.199.144':139
'82.##1.66.242':139
'82.##1.143.222':139
'82.#11.72.0':139
'82.##1.138.218':139
'82.##1.129.128':139
'82.##1.34.143':139
'82.##1.33.48':139
'82.##1.137.85':139
'82.##1.79.180':139
'82.##1.101.198':139
'82.##1.139.28':139
'82.##1.81.199':139
'82.##1.13.135':139
'82.##1.163.100':139
'82.##1.95.163':139
'82.##1.182.6':139
'82.##1.81.199':445
'82.##1.129.128':445
'82.##1.139.28':445
'82.##1.95.163':445
'82.##1.13.135':445
'82.##1.6.194':445
'82.##1.51.231':445
'82.##1.236.21':445
'82.##1.115.74':445
'82.#11.21.4':445
'82.##1.163.100':445
'82.##1.190.132':139
'82.##1.202.180':139
'82.##1.132.232':139
'82.##1.95.58':139
'82.##1.232.94':139
'82.##1.34.143':445
'82.##1.33.48':445
'82.##1.137.85':445
'82.##1.79.180':445
'82.##1.101.198':445
'82.##1.12.176':139
'82.##1.64.204':139
'82.##1.50.112':139
'82.##1.42.59':139
'82.##1.187.67':139
'82.##1.140.127':445
'82.##1.213.131':445
'82.##1.64.217':139
'82.##1.30.250':139
'82.##1.239.196':139
'82.##1.179.43':139
'82.##1.83.141':139
'82.##1.254.83':139
'82.##1.110.49':139
'82.##1.173.160':139
'82.##1.12.12':139
'82.##1.22.44':139
'82.##1.88.221':139
'82.##1.44.80':139
'82.##1.37.254':139
'82.##1.150.195':139
'82.##1.15.140':445
'82.##1.187.67':445
'82.##1.50.112':445
'82.##1.42.59':445
'82.##1.88.221':445
'82.##1.179.43':445
'82.##1.239.196':445
'82.##1.64.217':445
'82.##1.30.250':445
'82.##1.12.176':445
'82.##1.64.204':445
'82.##1.22.44':445
'82.##1.12.12':445
'82.##1.110.49':445
'82.##1.173.160':445
'82.##1.13.216':445
'82.##1.138.107':445
'82.##1.150.195':445
'82.##1.44.80':445
'82.##1.37.254':445
'82.##1.83.141':445
'82.##1.254.83':445
'82.##1.45.165':445
'82.##1.209.50':445
'82.##1.72.235':445
'82.##1.170.184':445
'82.##1.40.60':445
'82.##1.66.185':139
'82.##1.204.84':139
'82.##1.213.245':139
'82.##1.189.37':139
'82.##1.159.184':139
'82.##1.185.59':445
'82.##1.191.87':445
'82.##1.14.13':445
'82.##1.238.51':445
'82.##1.82.165':445
'82.##1.11.166':445
'82.##1.132.27':445
'82.##1.9.197':445
'82.#11.12.4':445
'82.##1.58.180':445
'82.##1.128.230':445
'82.##1.225.233':139
'82.##1.57.172':139
'82.##1.134.77':139
'82.##1.172.231':139
'82.##1.148.192':139
'82.##1.230.243':139
'82.##1.73.208':139
'82.##1.181.253':139
'82.##1.165.219':139
'82.##1.217.187':139
'82.##1.218.217':139
'82.##1.202.165':139
'82.##1.59.151':139
'82.##1.196.199':139
'82.##1.208.151':139
'82.##1.1.104':139
'82.##1.94.61':139
'82.##1.224.199':139
'82.##1.146.103':139
'82.##1.23.61':139
'82.##1.45.162':139
'82.##1.169.124':139
'82.##1.87.208':139
'82.#11.8.12':139
'82.##1.65.218':139
'82.##1.190.2':139
'82.##1.217.209':139
'82.##1.82.165':139
'82.##1.11.166':139
'82.##1.243.179':139
'82.##1.235.35':139
'82.##1.182.117':139
'82.##1.202.180':445
'82.##1.199.144':445
'82.##1.66.242':445
'82.##1.143.222':445
'82.#11.72.0':445
'82.##1.138.218':445
'82.##1.132.232':445
'82.##1.190.132':445
'82.##1.232.94':445
'82.##1.182.6':445
'82.##1.95.58':445
'82.##1.238.51':139
'82.##1.217.209':445
'82.##1.65.218':445
'82.##1.190.2':445
'82.##1.45.165':139
'82.##1.209.50':139
'82.##1.182.117':445
'82.##1.243.179':445
'82.##1.235.35':445
'82.##1.87.208':445
'82.#11.8.12':445
'82.##1.72.235':139
'82.##1.128.230':139
'82.#11.12.4':139
'82.##1.58.180':139
'82.##1.191.87':139
'82.##1.14.13':139
'82.##1.170.184':139
'82.##1.40.60':139
'82.##1.185.59':139
'82.##1.132.27':139
'82.##1.9.197':139
'82.##1.138.107':139
'82.##1.42.27':445
'82.##1.227.91':445
'82.##1.154.206':445
'82.##1.224.96':445
'82.##1.156.143':445
'82.##1.138.251':445
'82.##1.37.54':445
'82.##1.49.84':445
'82.##1.175.206':445
'82.##1.24.43':445
'82.##1.81.210':445
'82.##1.109.112':139
'82.##1.176.147':139
'82.##1.222.128':139
'82.##1.204.181':139
'82.##1.121.204':139
'82.##1.29.27':445
'82.##1.74.34':445
'82.##1.69.100':139
'82.##1.107.120':139
'82.##1.136.146':139
'82.##1.11.152':445
'82.##1.68.72':445
'82.##1.53.18':445
'82.##1.88.64':445
'82.##1.189.200':445
'82.##1.84.251':445
'82.##1.33.185':445
'82.##1.218.33':445
'82.##1.186.165':445
'82.##1.31.112':445
'82.##1.30.216':445
'82.##1.81.21':445
'82.##1.98.254':445
'82.#11.29.0':445
'82.##1.130.186':445
'82.##1.227.224':445
'82.##1.158.24':445
'82.##1.234.230':445
'82.##1.255.234':445
'82.##1.135.0':445
'82.##1.144.166':445
'82.##1.74.112':445
'82.##1.227.224':139
'82.##1.158.24':139
'82.##1.11.152':139
'82.##1.138.251':139
'82.##1.37.54':139
'82.##1.144.166':139
'82.##1.74.112':139
'82.#11.29.0':139
'82.##1.130.186':139
'82.##1.98.254':139
'82.##1.49.84':139
'82.##1.74.34':139
'82.##1.81.210':139
'82.##1.29.27':139
'82.##1.227.91':139
'82.##1.154.206':139
'82.##1.175.206':139
'82.##1.24.43':139
'82.##1.42.27':139
'82.##1.156.143':139
'82.##1.224.96':139
'82.##1.135.0':139
'82.##1.215.36':139
'82.##1.255.147':139
'82.##1.255.166':139
'82.##1.33.185':139
'82.##1.218.33':139
'82.##1.87.213':139
'82.##1.181.87':139
'82.##1.213.212':139
'82.##1.236.145':139
'82.##1.212.235':139
'82.##1.186.165':139
'82.##1.189.200':139
'82.##1.88.64':139
'82.##1.81.21':139
'82.##1.234.230':139
'82.##1.255.234':139
'82.##1.31.112':139
'82.##1.30.216':139
'82.##1.53.18':139
'82.##1.84.251':139
'82.##1.68.72':139
'82.##1.45.200':445
'82.#11.5.59':445
'82.##1.44.28':445
'82.##1.183.192':139
'82.##1.162.73':445
'82.##1.194.95':445
'82.##1.84.23':445
'82.##1.3.200':445
'82.##1.172.204':445
'82.##1.0.198':445
'82.#11.3.54':139
'82.##1.219.139':139
'82.##1.241.218':139
'82.##1.137.25':139
'82.##1.96.52':139
'82.##1.171.90':139
'82.##1.183.130':139
'82.##1.242.183':139
'82.##1.36.135':139
'82.##1.81.241':139
'82.##1.48.12':139
'82.##1.190.231':445
'82.##1.242.183':445
'82.#11.3.54':445
'82.##1.183.130':445
'82.##1.48.12':445
'82.##1.36.135':445
'82.##1.15.140':139
'82.##1.13.216':139
'82.##1.213.131':139
'82.##1.183.192':445
'82.##1.140.127':139
'82.##1.81.241':445
'82.##1.135.23':445
'82.##1.20.87':445
'82.##1.26.106':445
'82.##1.132.156':445
'82.##1.14.138':445
'82.##1.219.139':445
'82.##1.241.218':445
'82.##1.137.25':445
'82.##1.96.52':445
'82.##1.171.90':445
'82.##1.136.146':445
'82.##1.69.100':445
'82.##1.107.120':445
'82.##1.109.112':445
'82.##1.176.147':445
'82.##1.227.224':9988
'82.##1.130.186':9988
'82.##1.11.152':9988
'82.##1.24.43':9988
'82.##1.37.54':9988
'82.##1.222.128':445
'82.##1.236.145':445
'82.##1.212.235':445
'82.##1.255.147':445
'82.##1.255.166':445
'82.##1.215.36':445
'82.##1.204.181':445
'82.##1.121.204':445
'82.##1.181.87':445
'82.##1.213.212':445
'82.##1.87.213':445
'82.##1.98.254':9988
'82.##1.84.23':139
'82.##1.190.231':139
'82.##1.194.95':139
'82.##1.0.198':139
'82.##1.3.200':139
'82.##1.135.23':139
'82.##1.20.87':139
'82.##1.26.106':139
'82.##1.132.156':139
'82.##1.14.138':139
'82.##1.172.204':139
'82.##1.135.0':9988
'82.##1.255.234':9988
'82.##1.74.112':9988
'82.#11.29.0':9988
'82.##1.144.166':9988
'82.##1.45.200':139
'82.#11.5.59':139
'82.##1.44.28':139
'82.##1.189.200':9988
'82.##1.162.73':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней