Trojan.DownLoader12.29135

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1112.dir00\svchost.exe.mdmp 16325836412032292

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1112.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#3.209.170':139
'20#.#3.194.209':139
'20#.#3.171.24':139
'20#.#3.206.69':139
'20#.#3.24.206':139
'20#.#3.80.52':139
'20#.#3.75.13':139
'20#.#3.85.56':139
'20#.#3.102.57':139
'20#.#3.16.18':139
'20#.#3.181.12':139
'20#.#3.127.197':139
'20#.#3.17.131':139
'20#.#3.113.215':139
'20#.#3.15.75':139
'20#.#3.103.128':139
'20#.#3.70.100':139
'20#.#3.62.56':139
'20#.#3.114.127':139
'20#.23.8.82':139
'20#.#3.17.131':445
'20#.#3.181.12':445
'20#.#3.15.75':445
'20#.#3.248.116':445
'20#.#3.113.215':445
'20#.#3.62.56':445
'20#.#3.103.128':445
'20#.23.8.82':445
'20#.#3.127.197':445
'20#.#3.114.127':445
'20#.#3.178.117':445
'20#.#3.140.21':445
'20#.#3.160.62':445
'20#.#3.41.141':445
'20#.#3.80.62':445
'20#.#3.98.246':445
'20#.#3.243.98':445
'20#.#3.16.64':445
'20#.#3.89.126':445
'20#.#3.232.89':445
'20#.#3.248.116':139
'20#.#3.167.8':445
'20#.23.1.53':445
'20#.#3.225.159':445
'20#.#3.35.102':445
'20#.#3.76.124':445
'20#.#3.165.223':445
'20#.#3.124.229':445
'20#.23.2.84':445
'20#.#3.95.112':445
'20#.#3.84.95':445
'20#.#3.71.178':139
'20#.#3.52.16':139
'20#.#3.238.32':139
'20#.#3.31.104':139
'20#.#3.36.201':139
'20#.#3.131.197':139
'20#.#3.141.131':139
'20#.#3.235.50':139
'20#.#3.76.52':139
'20#.#3.14.244':139
'20#.#3.178.117':139
'20#.#3.140.21':139
'20#.#3.160.62':139
'20#.#3.41.141':139
'20#.#3.80.62':139
'20#.#3.98.246':139
'20#.#3.243.98':139
'20#.#3.16.64':139
'20#.#3.89.126':139
'20#.#3.232.89':139
'20#.#3.71.178':445
'20#.#3.52.16':445
'20#.#3.238.32':445
'20#.#3.31.104':445
'20#.#3.36.201':445
'20#.#3.131.197':445
'20#.#3.141.131':445
'20#.#3.235.50':445
'20#.#3.76.52':445
'20#.#3.14.244':445
'20#.#3.70.100':445
'20#.23.6.92':139
'20#.#3.101.6':139
'20#.#3.91.250':139
'20#.#3.14.125':139
'20#.#3.10.232':139
'20#.#3.10.22':139
'20#.#3.254.250':139
'20#.#3.255.79':139
'20#.#3.25.93':139
'20#.#3.127.96':139
'20#.#3.170.68':445
'20#.#3.218.222':445
'20#.#3.99.58':445
'20#.23.31.4':445
'20#.#3.155.252':445
'20#.#3.177.34':445
'20#.#3.25.177':139
'20#.23.34.1':445
'20#.#3.34.188':445
'20#.#3.63.95':445
'20#.#3.246.91':139
'20#.#3.169.116':139
'20#.#3.233.78':139
'20#.#3.128.224':139
'20#.#3.189.124':139
'20#.#3.101.75':139
'20#.#3.1.100':139
'20#.#3.27.180':139
'20#.#3.132.198':139
'20#.#3.45.137':139
'20#.#3.157.245':139
'20#.23.28.5':139
'20#.#3.12.87':139
'20#.#3.65.70':139
'20#.#3.140.41':139
'20#.#3.232.77':139
'20#.#3.224.232':139
'20#.#3.144.100':139
'20#.#3.87.240':139
'20#.#3.90.54':139
'20#.#3.3.169':445
'20#.#3.139.54':139
'20#.#3.230.170':139
'20#.#3.167.72':139
'20#.#3.226.74':139
'20#.#3.71.226':139
'20#.23.62.6':139
'20#.#3.91.244':139
'20#.#3.137.38':139
'20#.#3.212.165':139
'20#.#3.93.212':139
'20#.#3.209.170':445
'20#.#3.194.209':445
'20#.#3.171.24':445
'20#.#3.206.69':445
'20#.#3.24.206':445
'20#.#3.80.52':445
'20#.#3.75.13':445
'20#.#3.85.56':445
'20#.#3.102.57':445
'20#.#3.16.18':445
'20#.#3.139.54':445
'20#.#3.230.170':445
'20#.#3.167.72':445
'20#.#3.226.74':445
'20#.#3.71.226':445
'20#.23.62.6':445
'20#.#3.91.244':445
'20#.#3.137.38':445
'20#.#3.212.165':445
'20#.#3.93.212':445
'20#.#3.99.58':139
'20#.#3.170.68':139
'20#.#3.155.252':139
'20#.#3.3.169':139
'20#.23.31.4':139
'20#.23.34.1':139
'20#.#3.177.34':139
'20#.#3.63.95':139
'20#.#3.218.222':139
'20#.#3.34.188':139
'20#.#3.155.115':445
'20#.#3.159.97':445
'20#.#3.231.25':445
'20#.#3.25.165':445
'20#.#3.237.140':445
'20#.#3.191.29':445
'20#.#3.228.187':445
'20#.#3.139.174':445
'20#.#3.7.118':445
'20#.#3.69.250':445
'20#.#3.42.199':139
'20#.#3.35.137':139
'20#.#3.122.25':139
'20#.#3.101.60':139
'20#.#3.201.188':139
'20#.#3.25.49':139
'20#.#3.225.126':139
'20#.#3.225.55':139
'20#.#3.22.210':139
'20#.#3.204.22':139
'20#.#3.214.91':445
'20#.#3.178.155':445
'20#.#3.252.50':445
'20#.#3.82.15':445
'20#.#3.50.96':445
'20#.#3.125.31':445
'20#.#3.94.240':445
'20#.#3.168.21':445
'20#.#3.131.86':445
'20#.#3.21.131':445
'20#.#3.95.111':445
'20#.#3.176.95':445
'20#.#3.111.172':445
'20#.#3.133.44':445
'20#.#3.39.202':445
'20#.#3.36.36':445
'20#.#3.13.197':445
'20#.#3.111.35':445
'20#.#3.12.181':445
'20#.#3.75.90':445
'20#.#3.28.22':139
'20#.#3.95.111':139
'20#.#3.176.95':139
'20#.#3.111.172':139
'20#.#3.133.44':139
'20#.#3.39.202':139
'20#.#3.36.36':139
'20#.#3.13.197':139
'20#.#3.111.35':139
'20#.#3.12.181':139
'20#.#3.75.90':139
'20#.#3.155.115':139
'20#.#3.159.97':139
'20#.#3.231.25':139
'20#.#3.237.140':139
'20#.#3.25.165':139
'20#.#3.191.29':139
'20#.#3.228.187':139
'20#.#3.139.174':139
'20#.#3.7.118':139
'20#.#3.69.250':139
'20#.#3.192.92':139
'20#.#3.38.164':139
'20#.#3.44.110':139
'20#.#3.194.219':139
'20#.#3.110.116':139
'20#.#3.126.190':139
'20#.#3.228.118':139
'20#.#3.91.207':139
'20#.#3.54.107':139
'20#.#3.133.54':139
'20#.#3.214.91':139
'20#.#3.178.155':139
'20#.#3.252.50':139
'20#.#3.82.15':139
'20#.#3.50.96':139
'20#.#3.125.31':139
'20#.#3.94.240':139
'20#.#3.168.21':139
'20#.#3.131.86':139
'20#.#3.21.131':139
'20#.#3.194.219':445
'20#.#3.131.72':445
'20#.#3.133.214':445
'20#.#3.57.221':139
'20#.#3.47.69':139
'20#.#3.150.2':139
'20#.#3.30.110':445
'20#.#3.220.158':445
'20#.#3.137.228':445
'20#.#3.199.41':445
'20#.#3.137.149':445
'20#.#3.83.67':139
'20#.#3.102.83':139
'20#.#3.220.158':139
'20#.#3.137.228':139
'20#.#3.30.110':139
'20#.#3.112.56':139
'20#.#3.33.155':139
'20#.#3.56.223':139
'20#.#3.192.101':139
'20#.#3.128.248':139
'20#.#3.167.8':139
'20#.23.1.53':139
'20#.#3.225.159':139
'20#.#3.35.102':139
'20#.#3.76.124':139
'20#.#3.165.223':139
'20#.#3.124.229':139
'20#.23.2.84':139
'20#.#3.95.112':139
'20#.#3.84.95':139
'20#.#3.128.248':445
'20#.#3.56.223':445
'20#.#3.192.101':445
'20#.#3.83.67':445
'20#.#3.102.83':445
'20#.#3.150.2':445
'20#.#3.57.221':445
'20#.#3.47.69':445
'20#.#3.112.56':445
'20#.#3.33.155':445
'20#.#3.137.149':139
'20#.#3.42.199':445
'20#.#3.35.137':445
'20#.#3.122.25':445
'20#.#3.101.60':445
'20#.#3.201.188':445
'20#.#3.25.49':445
'20#.#3.225.126':445
'20#.#3.225.55':445
'20#.#3.22.210':445
'20#.#3.204.22':445
'20#.#3.38.164':445
'20#.#3.54.107':445
'20#.#3.192.92':445
'20#.#3.110.116':445
'20#.#3.44.110':445
'20#.#3.228.118':445
'20#.#3.28.22':445
'20#.#3.126.190':445
'20#.#3.133.54':445
'20#.#3.91.207':445
'20#.#3.94.240':9988
'20#.#3.194.219':9988
'20#.#3.168.21':9988
'20#.#3.214.91':9988
'20#.#3.21.131':9988
'20#.#3.133.214':139
'20#.#3.199.41':139
'20#.#3.131.72':139
'20#.#3.110.116':9988
'20#.#3.192.92':9988
'20#.#3.25.165':9988
'20#.#3.159.97':9988
'20#.#3.237.140':9988
'20#.#3.155.115':9988
'20#.#3.231.25':9988
'20#.#3.75.90':9988
'20#.#3.111.35':9988
'20#.#3.95.111':9988
'20#.#3.228.187':9988
'20#.#3.111.172':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней