Trojan.DownLoader12.29146

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3a3f.dir00\svchost.exe.mdmp 16325836412032160

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3a3f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#8.71.157':139
'20#.#8.14.71':139
'20#.#8.244.72':139
'20#.#8.39.89':139
'20#.#8.231.140':139
'20#.#8.132.226':139
'20#.#8.206.133':139
'20#.#8.133.199':139
'20#.#8.234.13':139
'20#.#8.80.213':139
'20#.#8.69.50':139
'20#.68.6.35':445
'20#.68.2.6':445
'20#.68.35.3':445
'20#.#8.251.160':445
'20#.#8.242.55':445
'20#.#8.145.200':139
'20#.#8.221.235':139
'20#.#8.52.37':139
'20#.#8.235.9':139
'20#.#8.164.47':139
'20#.#8.71.157':445
'20#.#8.14.71':445
'20#.#8.244.72':445
'20#.#8.39.89':445
'20#.#8.231.140':445
'20#.#8.132.226':445
'20#.#8.206.133':445
'20#.#8.133.199':445
'20#.#8.234.13':445
'20#.#8.80.213':445
'20#.#8.69.50':445
'20#.#8.161.164':139
'20#.#8.67.162':139
'20#.#8.0.200':139
'20#.#8.209.91':139
'20#.#8.110.179':139
'20#.#8.145.200':445
'20#.#8.221.235':445
'20#.#8.52.37':445
'20#.#8.235.9':445
'20#.#8.164.47':445
'20#.#8.194.92':445
'20#.#8.242.55':139
'20#.68.35.3':139
'20#.#8.251.160':139
'20#.#8.220.167':139
'20#.#8.194.92':139
'20#.#8.53.35':445
'20#.#8.129.135':445
'20#.#8.34.238':445
'20#.68.6.35':139
'20#.68.2.6':139
'20#.#8.206.0':139
'20#.#8.193.74':139
'20#.#8.110.63':139
'20#.#8.19.177':139
'20#.#8.213.164':139
'20#.#8.175.41':139
'20#.#8.65.144':139
'20#.#8.88.195':139
'20#.#8.13.36':139
'20#.#8.104.9':139
'20#.#8.243.124':139
'20#.#8.104.9':445
'20#.#8.243.124':445
'20#.#8.110.63':445
'20#.#8.19.177':445
'20#.#8.193.74':445
'20#.#8.206.0':445
'20#.#8.220.167':445
'20#.#8.88.195':445
'20#.#8.13.36':445
'20#.#8.65.144':445
'20#.#8.175.41':445
'20#.#8.133.130':445
'20#.68.96.4':445
'20#.#8.106.10':445
'20#.#8.130.243':445
'20#.#8.10.196':445
'20#.#8.92.63':445
'20#.#8.213.164':445
'20#.#8.79.206':445
'20#.#8.77.75':445
'20#.#8.2.120':445
'20#.#8.209.91':445
'20#.#8.244.54':445
'20#.#8.13.249':445
'20#.#8.230.166':445
'20#.#8.115.193':445
'20#.#8.48.241':445
'20#.#8.75.36':445
'20#.#8.60.43':445
'20#.#8.120.17':445
'20#.#8.125.224':445
'20#.#8.25.229':445
'20#.68.42.8':445
'20#.#8.123.168':445
'20#.#8.237.224':445
'20#.#8.168.36':445
'20#.#8.248.191':445
'20#.#8.164.198':445
'20#.#8.143.91':445
'20#.#8.43.28':445
'20#.#8.129.125':445
'20#.#8.91.77':445
'20#.#8.164.90':445
'20#.#8.253.200':139
'20#.#8.68.253':139
'20#.#8.53.220':139
'20#.#8.235.93':139
'20#.#8.26.76':139
'20#.#8.60.115':139
'20#.#8.79.155':139
'20#.#8.162.193':139
'20#.#8.237.120':139
'20#.#8.71.94':139
'20#.#8.250.54':139
'20#.#8.79.220':139
'20#.#8.40.209':139
'20#.#8.134.93':139
'20#.#8.122.160':139
'20#.#8.140.184':139
'20#.#8.129.145':139
'20#.#8.33.96':139
'20#.#8.26.246':139
'20#.#8.180.115':139
'20#.#8.48.180':139
'20#.#8.174.194':445
'20#.#8.164.198':139
'20#.#8.168.36':139
'20#.#8.248.191':139
'20#.68.17.7':139
'20#.#8.174.194':139
'20#.#8.164.90':139
'20#.#8.129.125':139
'20#.#8.91.77':139
'20#.#8.123.168':139
'20#.#8.237.224':139
'20#.#8.202.59':139
'20#.#8.67.162':445
'20#.#8.125.143':139
'20#.#8.161.164':445
'20#.#8.110.179':445
'20#.#8.0.200':445
'20#.#8.132.193':139
'20#.#8.73.27':139
'20#.#8.163.61':139
'20#.#8.45.167':139
'20#.#8.61.111':139
'20#.#8.45.167':445
'20#.#8.61.111':445
'20#.#8.125.143':445
'20#.#8.75.36':139
'20#.#8.60.43':139
'20#.#8.202.59':445
'20#.68.17.7':445
'20#.#8.73.27':445
'20#.#8.163.61':445
'20#.#8.132.193':445
'20#.#8.120.17':139
'20#.#8.115.193':139
'20#.#8.48.241':139
'20#.68.42.8':139
'20#.#8.143.91':139
'20#.#8.43.28':139
'20#.#8.125.224':139
'20#.#8.25.229':139
'20#.#8.13.249':139
'20#.#8.230.166':139
'20#.#8.244.54':139
'20#.#8.118.14':445
'20#.#8.144.67':445
'20#.#8.24.230':445
'20#.#8.186.82':445
'20#.#8.69.33':445
'20#.#8.31.106':445
'20#.#8.19.28':445
'20#.#8.126.50':445
'20#.#8.59.106':445
'20#.#8.113.21':445
'20#.#8.186.92':445
'20#.#8.249.23':139
'20#.#8.75.230':139
'20#.#8.3.179':139
'20#.68.49.5':139
'20#.#8.248.226':139
'20#.#8.245.221':445
'20#.#8.207.86':445
'20#.#8.248.39':139
'20#.#8.247.223':139
'20#.#8.39.166':139
'20#.#8.31.79':445
'20#.#8.196.181':445
'20#.#8.122.48':445
'20#.#8.174.115':445
'20#.#8.113.164':445
'20#.#8.67.120':445
'20#.#8.44.94':445
'20#.#8.9.164':445
'20#.#8.128.195':445
'20#.#8.243.127':445
'20#.#8.55.186':445
'20#.#8.17.115':445
'20#.#8.39.30':445
'20#.#8.17.217':445
'20#.#8.19.20':445
'20#.#8.217.18':445
'20#.#8.85.95':445
'20#.#8.46.100':445
'20#.#8.189.169':445
'20#.#8.49.39':445
'20#.#8.33.101':445
'20#.#8.204.142':139
'20#.#8.217.18':139
'20#.#8.17.217':139
'20#.#8.19.20':139
'20#.#8.31.106':139
'20#.#8.19.28':139
'20#.#8.33.101':139
'20#.#8.189.169':139
'20#.#8.49.39':139
'20#.#8.17.115':139
'20#.#8.39.30':139
'20#.#8.126.50':139
'20#.#8.186.82':139
'20#.#8.69.33':139
'20#.#8.186.92':139
'20#.#8.245.221':139
'20#.#8.207.86':139
'20#.#8.59.106':139
'20#.#8.113.21':139
'20#.#8.144.67':139
'20#.#8.24.230':139
'20#.#8.118.14':139
'20#.#8.238.40':139
'20#.#8.70.208':139
'20#.#8.205.133':139
'20#.#8.67.120':139
'20#.#8.44.94':139
'20#.#8.235.218':139
'20#.#8.63.235':139
'20#.#8.218.226':139
'20#.#8.201.219':139
'20#.#8.18.197':139
'20#.#8.9.164':139
'20#.#8.174.115':139
'20#.#8.113.164':139
'20#.#8.55.186':139
'20#.#8.85.95':139
'20#.#8.46.100':139
'20#.#8.128.195':139
'20#.#8.243.127':139
'20#.#8.196.181':139
'20#.#8.122.48':139
'20#.#8.31.79':139
'20#.#8.205.133':445
'20#.#8.163.159':445
'20#.#8.135.183':445
'20#.#8.220.166':445
'20#.#8.128.180':445
'20#.#8.104.178':445
'20#.#8.2.250':445
'20#.#8.25.170':445
'20#.#8.212.212':445
'20#.#8.173.170':445
'20#.#8.228.212':445
'20#.#8.192.49':445
'20#.#8.207.172':139
'20#.#8.134.183':139
'20#.#8.172.181':139
'20#.#8.134.92':139
'20#.#8.158.86':139
'20#.#8.59.98':139
'20#.#8.48.248':445
'20#.#8.199.32':139
'20#.#8.174.74':139
'20#.#8.93.67':139
'20#.#8.106.10':139
'20#.#8.133.130':139
'20#.#8.10.196':139
'20#.#8.129.135':139
'20#.#8.130.243':139
'20#.#8.79.206':139
'20#.#8.92.63':139
'20#.#8.2.120':139
'20#.68.96.4':139
'20#.#8.77.75':139
'20#.#8.53.35':139
'20#.#8.207.172':445
'20#.#8.134.183':445
'20#.#8.172.181':445
'20#.#8.134.92':445
'20#.#8.158.86':445
'20#.#8.59.98':445
'20#.#8.34.238':139
'20#.#8.199.32':445
'20#.#8.174.74':445
'20#.#8.93.67':445
'20#.#8.25.170':139
'20#.#8.39.166':445
'20#.#8.248.39':445
'20#.#8.247.223':445
'20#.#8.249.23':445
'20#.#8.75.230':445
'20#.#8.113.21':9988
'20#.#8.126.50':9988
'20#.#8.245.221':9988
'20#.#8.186.92':9988
'20#.#8.207.86':9988
'20#.#8.3.179':445
'20#.#8.18.197':445
'20#.#8.218.226':445
'20#.#8.201.219':445
'20#.#8.238.40':445
'20#.#8.70.208':445
'20#.68.49.5':445
'20#.#8.248.226':445
'20#.#8.204.142':445
'20#.#8.235.218':445
'20#.#8.63.235':445
'20#.#8.220.166':139
'20#.#8.163.159':139
'20#.#8.104.178':139
'20#.#8.192.49':139
'20#.#8.128.180':139
'20#.#8.212.212':139
'20#.#8.2.250':139
'20#.#8.228.212':139
'20#.#8.135.183':139
'20#.#8.173.170':139
'20#.#8.48.248':139
'20#.#8.217.18':9988
'20#.#8.17.217':9988
'20#.#8.19.20':9988
'20#.#8.31.106':9988
'20#.#8.19.28':9988
'20#.#8.55.186':9988
'20#.#8.196.181':9988
'20#.#8.85.95':9988
'20#.#8.17.115':9988
'20#.#8.49.39':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней