Trojan.DownLoader12.29201

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd66f.dir00\svchost.exe.mdmp 16325836412032256

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'81.##.65.215':139
'81.#3.79.87':139
'81.##.142.62':139
'81.#3.170.6':139
'81.##.59.197':139
'81.#3.43.22':139
'81.##.117.187':139
'81.#3.78.32':139
'81.#3.85.96':139
'81.##.92.173':139
'81.##.44.186':139
'81.##.205.125':139
'81.##.234.25':139
'81.##.77.121':139
'81.##.205.140':139
'81.##.195.38':139
'81.##.209.83':139
'81.#3.61.32':139
'81.##.156.91':139
'81.#3.88.10':139
'81.#3.51.95':139
'81.##.44.186':445
'81.#3.170.6':445
'81.#3.61.32':445
'81.##.156.91':445
'81.##.209.83':445
'81.#3.79.87':445
'81.#3.85.96':445
'81.##.65.215':445
'81.##.59.197':445
'81.##.142.62':445
'81.#3.51.95':445
'81.#3.68.55':139
'81.##.205.140':445
'81.##.52.238':139
'81.##.213.42':139
'81.##.230.44':139
'81.##.234.25':445
'81.#3.88.10':445
'81.##.205.125':445
'81.##.195.38':445
'81.##.77.121':445
'81.#3.66.71':139
'81.##.19.197':139
'81.##.63.194':139
'81.#3.24.35':139
'81.##.161.122':139
'81.##.118.184':445
'81.#3.75.85':445
'81.#3.121.4':445
'81.##.127.119':445
'81.#3.4.128':445
'81.#3.89.63':139
'81.##.218.218':139
'81.##.104.164':139
'81.##.237.200':139
'81.##.71.131':139
'81.#3.52.46':139
'81.##.240.234':139
'81.##.189.163':139
'81.#3.44.4':139
'81.##.53.102':139
'81.##.161.215':139
'81.##.189.163':445
'81.#3.89.63':445
'81.##.240.234':445
'81.##.161.215':445
'81.#3.44.4':445
'81.#3.66.71':445
'81.##.19.197':445
'81.##.63.194':445
'81.#3.24.35':445
'81.##.161.122':445
'81.##.53.102':445
'81.#3.45.48':445
'81.#3.73.46':445
'81.##.43.120':445
'81.#3.62.30':445
'81.#3.61.46':445
'81.##.218.218':445
'81.##.104.164':445
'81.##.237.200':445
'81.##.71.131':445
'81.#3.52.46':445
'81.##.92.173':445
'81.##.106.100':445
'81.##.146.68':445
'81.##.210.139':445
'81.##.126.94':445
'81.#3.6.223':445
'81.##.174.114':139
'81.##.37.163':139
'81.##.81.217':139
'81.##.114.168':445
'81.#3.38.95':139
'81.##.145.192':445
'81.##.165.76':445
'81.##.147.145':445
'81.##.222.44':445
'81.##.117.173':445
'81.#3.32.89':445
'81.##.157.30':445
'81.##.152.243':445
'81.##.163.214':445
'81.##.93.147':445
'81.##.166.139':445
'81.##.95.178':139
'81.#3.2.153':139
'81.##.21.100':139
'81.#3.68.98':139
'81.##.154.32':139
'81.##.51.165':139
'81.##.56.118':139
'81.#3.71.85':139
'81.##.226.39':139
'81.##.163.101':139
'81.##.138.146':139
'81.##.70.152':139
'81.##.246.56':139
'81.##.152.144':139
'81.#3.38.37':139
'81.##.177.109':139
'81.##.232.205':139
'81.##.226.60':139
'81.##.122.65':139
'81.##.167.203':139
'81.##.213.167':139
'81.##.111.53':139
'81.#3.24.71':139
'81.##.94.130':139
'81.##.147.11':139
'81.##.222.68':139
'81.##.165.76':139
'81.##.147.145':139
'81.##.222.44':139
'81.##.117.173':139
'81.#3.32.89':139
'81.##.203.86':139
'81.##.213.42':445
'81.##.230.44':445
'81.##.117.187':445
'81.#3.43.22':445
'81.#3.78.32':445
'81.##.151.235':139
'81.#3.145.4':139
'81.##.235.225':139
'81.##.52.238':445
'81.#3.68.55':445
'81.#3.145.4':445
'81.##.203.86':445
'81.##.151.235':445
'81.##.114.168':139
'81.##.235.225':445
'81.##.111.53':445
'81.#3.24.71':445
'81.##.94.130':445
'81.##.147.11':445
'81.##.222.68':445
'81.##.146.68':139
'81.##.157.30':139
'81.##.152.243':139
'81.##.163.214':139
'81.##.93.147':139
'81.##.166.139':139
'81.##.210.139':139
'81.##.106.100':139
'81.#3.6.223':139
'81.##.145.192':139
'81.##.126.94':139
'81.##.172.42':445
'81.##.138.62':445
'81.#3.42.29':445
'81.##.72.212':445
'81.#3.17.35':445
'81.##.101.239':445
'81.#3.66.54':445
'81.##.216.46':445
'81.##.43.162':445
'81.##.114.190':445
'81.##.74.251':445
'81.##.205.244':139
'81.##.233.221':139
'81.#3.244.0':139
'81.#3.90.98':139
'81.##.88.135':139
'81.##.80.117':139
'81.#3.6.157':445
'81.##.250.148':139
'81.##.129.194':139
'81.#3.243.7':139
'81.##.187.56':445
'81.##.74.143':445
'81.##.56.245':445
'81.##.21.141':445
'81.##.129.203':445
'81.##.114.129':445
'81.#3.0.7':445
'81.#3.74.33':445
'81.##.93.250':445
'81.##.148.158':445
'81.##.172.138':445
'81.##.143.116':445
'81.##.194.142':445
'81.##.111.146':445
'81.##.23.252':445
'81.##.14.112':445
'81.##.22.190':445
'81.##.104.66':445
'81.##.136.86':445
'81.#3.41.54':445
'81.#3.47.54':445
'81.##.111.146':139
'81.##.143.116':139
'81.##.14.112':139
'81.#3.66.54':139
'81.##.23.252':139
'81.##.136.86':139
'81.##.22.190':139
'81.#3.47.54':139
'81.##.194.142':139
'81.#3.41.54':139
'81.##.101.239':139
'81.#3.17.35':139
'81.#3.42.29':139
'81.##.72.212':139
'81.##.74.251':139
'81.#3.6.157':139
'81.##.114.190':139
'81.##.216.46':139
'81.##.43.162':139
'81.##.172.42':139
'81.##.138.62':139
'81.#3.5.82':139
'81.##.223.222':139
'81.##.114.11':139
'81.#3.0.7':139
'81.#3.11.83':139
'81.#3.50.42':139
'81.##.152.99':139
'81.##.188.195':139
'81.##.191.222':139
'81.##.246.105':139
'81.##.114.129':139
'81.##.129.203':139
'81.##.56.245':139
'81.##.21.141':139
'81.##.104.66':139
'81.##.172.138':139
'81.##.148.158':139
'81.#3.74.33':139
'81.##.93.250':139
'81.##.187.56':139
'81.##.74.143':139
'81.#3.11.83':445
'81.#3.1.85':445
'81.#3.237.6':445
'81.##.128.146':445
'81.#3.71.40':445
'81.##.83.237':445
'81.##.229.191':445
'81.#3.21.19':445
'81.##.198.189':445
'81.##.130.128':445
'81.##.216.126':445
'81.##.95.206':139
'81.##.187.99':139
'81.##.26.189':139
'81.##.62.194':139
'81.##.25.116':139
'81.##.160.67':139
'81.##.114.43':139
'81.##.117.157':139
'81.##.31.108':139
'81.##.248.145':139
'81.##.252.116':139
'81.##.118.184':139
'81.#3.75.85':139
'81.#3.121.4':139
'81.##.127.119':139
'81.#3.4.128':139
'81.#3.45.48':139
'81.#3.73.46':139
'81.##.43.120':139
'81.#3.62.30':139
'81.#3.61.46':139
'81.##.95.206':445
'81.##.187.99':445
'81.##.248.145':445
'81.##.62.194':445
'81.##.25.116':445
'81.##.160.67':445
'81.##.114.43':445
'81.##.117.157':445
'81.##.31.108':445
'81.##.26.189':445
'81.##.252.116':445
'81.#3.243.7':445
'81.##.250.148':445
'81.##.129.194':445
'81.##.205.244':445
'81.##.233.221':445
'81.#3.6.157':9988
'81.#3.42.29':9988
'81.##.72.212':9988
'81.##.80.117':445
'81.#3.17.35':9988
'81.#3.244.0':445
'81.##.191.222':445
'81.##.246.105':445
'81.##.223.222':445
'81.##.114.11':445
'81.#3.5.82':445
'81.##.88.135':445
'81.#3.90.98':445
'81.#3.50.42':445
'81.##.188.195':445
'81.##.152.99':445
'81.#3.71.40':139
'81.##.128.146':139
'81.##.83.237':139
'81.#3.1.85':139
'81.#3.237.6':139
'81.#3.21.19':139
'81.##.198.189':139
'81.##.229.191':139
'81.##.130.128':139
'81.##.216.126':139
'81.#3.244.0':9988
'81.#3.41.54':9988
'81.##.104.66':9988
'81.##.111.146':9988
'81.##.114.190':9988
'81.##.216.46':9988
'81.##.223.222':9988
'81.##.188.195':9988
'81.##.114.11':9988
'81.##.172.138':9988
'81.##.93.250':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней