Trojan.DownLoader12.29128

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERaa71.dir00\svchost.exe.mdmp 16325836412029488

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERaa71.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'72.##.37.193':139
'72.##.254.33':139
'72.##.95.162':139
'72.##.38.249':139
'72.##.151.102':139
'72.##.123.210':139
'72.##.13.173':139
'72.#2.35.67':139
'72.##.61.174':139
'72.#2.62.19':445
'72.##.18.160':445
'72.#2.37.19':445
'72.##.189.106':445
'72.#2.8.67':445
'72.#2.22.37':445
'72.#2.62.19':139
'72.##.251.191':445
'72.##.189.114':445
'72.##.251.191':139
'72.##.153.30':139
'72.##.182.116':139
'72.##.35.215':139
'72.##.25.175':139
'72.##.116.25':139
'72.##.227.131':139
'72.##.149.132':139
'72.#2.9.202':139
'72.##.236.198':139
'72.#2.8.35':139
'72.##.174.105':139
'72.#2.53.98':139
'72.##.26.146':139
'72.##.88.166':139
'72.#2.98.88':139
'72.##.112.94':139
'72.##.64.160':139
'72.##.138.107':139
'72.##.195.99':139
'72.##.111.64':139
'72.#2.90.46':445
'72.##.157.136':445
'72.##.255.209':445
'72.#2.80.91':445
'72.##.236.10':445
'72.#2.46.98':445
'72.##.60.248':445
'72.##.236.86':445
'72.##.98.236':445
'72.#2.83.86':445
'72.##.106.97':445
'72.##.113.106':445
'72.#2.81.98':445
'72.##.97.154':445
'72.#2.0.68':445
'72.##.193.168':445
'72.##.230.206':445
'72.##.161.124':445
'72.##.146.30':445
'72.##.76.190':445
'72.##.60.177':445
'72.##.35.152':445
'72.##.206.62':445
'72.##.81.206':445
'72.##.177.71':445
'72.##.86.173':445
'72.##.32.204':445
'72.##.62.194':445
'72.##.121.240':445
'72.##.73.100':445
'72.##.145.64':445
'72.##.29.224':445
'72.##.248.189':445
'72.##.63.248':445
'72.##.159.62':445
'72.##.107.121':445
'72.##.166.91':445
'72.##.244.107':445
'72.##.149.212':445
'72.#2.91.7':445
'72.##.23.145':445
'72.#2.94.4':445
'72.##.57.100':445
'72.##.147.227':445
'72.##.83.197':445
'72.##.88.134':445
'72.##.159.147':445
'72.##.107.86':445
'72.#2.9.202':445
'72.##.116.25':445
'72.##.182.116':445
'72.##.174.105':445
'72.##.25.175':445
'72.##.35.215':445
'72.#2.8.35':445
'72.##.149.132':445
'72.##.227.131':445
'72.##.236.198':445
'72.#2.62.43':445
'72.##.137.88':445
'72.##.76.155':445
'72.##.137.88':139
'72.##.76.155':139
'72.##.162.214':139
'72.##.223.69':139
'72.##.12.193':139
'72.#2.239.7':139
'72.##.136.29':139
'72.##.85.157':445
'72.#2.2.133':445
'72.#2.73.12':445
'72.##.239.61':445
'72.#2.8.27':445
'72.#2.0.228':445
'72.##.116.179':445
'72.##.202.26':445
'72.##.111.206':445
'72.#2.14.17':445
'72.#2.2.133':139
'72.#2.73.12':139
'72.##.239.61':139
'72.#2.8.27':139
'72.#2.0.228':139
'72.##.116.179':139
'72.##.202.26':139
'72.##.111.206':139
'72.#2.14.17':139
'72.#2.62.43':139
'72.#2.91.7':139
'72.##.23.145':139
'72.#2.94.4':139
'72.##.57.100':139
'72.##.147.227':139
'72.##.83.197':139
'72.##.88.134':139
'72.##.159.147':139
'72.##.107.86':139
'72.##.85.157':139
'72.#2.53.98':445
'72.##.26.146':445
'72.##.88.166':445
'72.#2.98.88':445
'72.##.112.94':445
'72.##.64.160':445
'72.##.138.107':445
'72.##.195.99':445
'72.##.111.64':445
'72.##.153.30':445
'72.##.37.193':445
'72.##.254.33':445
'72.##.95.162':445
'72.##.38.249':445
'72.##.151.102':445
'72.##.123.210':445
'72.##.13.173':445
'72.#2.35.67':445
'72.##.61.174':445
'72.##.206.133':445
'72.##.237.221':445
'72.##.49.205':445
'72.##.108.143':139
'72.#2.6.109':139
'72.##.21.242':445
'72.##.198.56':445
'72.#2.0.14':445
'72.##.57.112':445
'72.##.129.74':445
'72.##.201.223':139
'72.##.229.246':139
'72.##.165.137':139
'72.##.51.146':139
'72.##.247.148':139
'72.##.91.213':139
'72.##.44.220':139
'72.##.246.33':139
'72.#2.24.49':139
'72.##.42.181':139
'72.##.127.197':445
'72.##.132.86':445
'72.##.195.44':445
'72.#2.11.14':445
'72.##.153.124':445
'72.#2.66.10':445
'72.#2.65.67':445
'72.##.215.169':445
'72.#2.61.37':445
'72.##.73.132':445
'72.#2.85.51':445
'72.##.172.249':445
'72.##.34.159':445
'72.#2.91.85':445
'72.##.83.252':445
'72.##.114.101':445
'72.##.220.121':445
'72.##.14.217':445
'72.##.166.198':445
'72.##.199.216':445
'72.##.114.101':139
'72.##.166.198':139
'72.##.172.249':139
'72.##.34.159':139
'72.##.199.216':139
'72.#2.85.51':139
'72.#2.11.14':139
'72.##.220.121':139
'72.##.14.217':139
'72.##.83.252':139
'72.##.49.205':139
'72.##.57.112':139
'72.##.129.74':139
'72.#2.0.14':139
'72.##.21.242':139
'72.##.127.197':139
'72.#2.91.85':139
'72.##.237.221':139
'72.##.198.56':139
'72.##.153.124':139
'72.##.71.116':139
'72.#2.1.74':139
'72.##.163.141':139
'72.##.116.112':139
'72.##.64.124':139
'72.#2.52.97':139
'72.##.143.19':139
'72.##.183.84':139
'72.##.192.227':139
'72.##.247.198':139
'72.#2.66.10':139
'72.#2.61.37':139
'72.##.132.86':139
'72.##.195.44':139
'72.##.73.132':139
'72.##.54.215':139
'72.##.220.222':139
'72.#2.65.67':139
'72.##.215.169':139
'72.##.63.248':139
'72.##.145.64':139
'72.##.76.190':139
'72.##.248.189':139
'72.##.29.224':139
'72.##.149.212':139
'72.##.107.121':139
'72.##.159.62':139
'72.##.244.107':139
'72.##.60.248':139
'72.#2.80.91':139
'72.#2.90.46':139
'72.#2.83.86':139
'72.##.255.209':139
'72.##.157.136':139
'72.##.98.236':139
'72.#2.46.98':139
'72.##.236.10':139
'72.##.236.86':139
'72.##.166.91':139
'72.##.18.160':139
'72.#2.37.19':139
'72.##.189.106':139
'72.#2.8.67':139
'72.#2.22.37':139
'72.##.15.104':445
'72.##.134.177':445
'72.##.189.114':139
'72.##.225.240':445
'72.##.32.204':139
'72.##.81.206':139
'72.##.60.177':139
'72.##.73.100':139
'72.##.206.62':139
'72.##.35.152':139
'72.##.121.240':139
'72.##.86.173':139
'72.##.177.71':139
'72.##.62.194':139
'72.##.51.146':445
'72.##.247.148':445
'72.#2.52.97':445
'72.##.143.19':445
'72.##.229.246':445
'72.#2.24.49':445
'72.##.42.181':445
'72.##.165.137':445
'72.##.91.213':445
'72.##.192.227':445
'72.##.247.198':445
'72.##.163.141':445
'72.##.54.215':445
'72.##.220.222':445
'72.##.116.112':445
'72.##.64.124':445
'72.##.183.84':445
'72.##.71.116':445
'72.#2.1.74':445
'72.##.44.220':445
'72.##.106.97':139
'72.##.113.106':139
'72.#2.81.98':139
'72.##.97.154':139
'72.#2.0.68':139
'72.##.193.168':139
'72.##.230.206':139
'72.##.161.124':139
'72.##.146.30':139
'72.##.206.133':139
'72.##.108.143':445
'72.#2.6.109':445
'72.##.246.33':445
'72.##.201.223':445
'72.##.21.242':9988
'72.##.15.104':139
'72.##.134.177':139
'72.##.237.221':9988
'72.##.225.240':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней