Trojan.DownLoader12.29215

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1116 -dm 7 7 %TEMP%\WER7f91.dir00\svchost.exe.mdmp 16325836412032300

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7f91.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#53.32.32':139
'21#.#53.12.44':445
'21#.#53.9.237':139
'21#.#53.17.61':139
'21#.#53.171.44':445
'21#.#53.70.132':445
'21#.#53.120.185':445
'21#.#53.161.73':445
'21#.#53.80.235':445
'21#.#53.42.210':139
'21#.#53.173.29':139
'21#.#53.10.177':139
'21#.#53.242.20':139
'21#.#53.41.180':139
'21#.#53.69.63':139
'21#.#53.229.164':139
'21#.#53.8.182':139
'21#.#53.17.212':139
'21#.#53.164.31':139
'21#.#53.184.235':445
'21#.#53.2.88':445
'21#.#53.251.50':445
'21#.#53.235.231':445
'21#.#53.21.214':445
'21#.#53.26.228':445
'21#.#53.5.88':445
'21#.#53.170.63':445
'21#.#53.83.87':445
'21#.#53.51.95':445
'21#.#53.188.153':445
'21#.#53.28.184':445
'21#.#53.7.120':445
'21#.#53.23.7':445
'21#.#53.55.129':445
'21#.#53.136.89':445
'21#.#53.38.210':445
'21#.#53.182.39':445
'21#.#53.156.49':445
'21#.#53.214.43':139
'21#.#53.182.39':139
'21#.#53.156.49':139
'21#.#53.28.184':139
'21#.#53.55.129':139
'21#.#53.136.89':139
'21#.#53.251.50':139
'21#.#53.235.231':139
'21#.#53.38.210':139
'21#.#53.51.95':139
'21#.#53.188.153':139
'21#.#53.171.44':139
'21#.#53.161.73':139
'21#.#53.76.143':445
'21#.#53.12.44':139
'21#.#53.80.235':139
'21#.#53.7.120':139
'21#.#53.23.7':139
'21#.#53.70.132':139
'21#.#53.120.185':139
'21#.#53.31.88':139
'21#.#53.193.11':139
'21#.#53.90.37':139
'21#.#53.192.90':139
'21#.#53.177.53':139
'21#.#53.222.11':139
'21#.#53.161.31':139
'21#.#53.27.116':139
'21#.#53.44.38':139
'21#.#53.37.9':139
'21#.#53.21.214':139
'21#.#53.170.63':139
'21#.#53.184.235':139
'21#.#53.2.88':139
'21#.#53.83.87':139
'21#.#53.255.189':139
'21#.253.9.0':139
'21#.#53.26.228':139
'21#.#53.5.88':139
'21#.#53.91.113':139
'21#.#53.141.155':139
'21#.#53.11.97':139
'21#.#53.6.117':139
'21#.#53.172.90':139
'21#.#53.147.113':139
'21#.#53.184.147':139
'21#.#53.24.249':139
'21#.#53.113.24':139
'21#.#53.97.140':139
'21#.#53.43.205':139
'21#.#53.196.159':139
'21#.#53.162.184':139
'21#.#53.228.55':139
'21#.#53.34.210':139
'21#.#53.10.221':139
'21#.#53.179.207':139
'21#.#53.114.239':139
'21#.#53.211.88':139
'21#.#53.23.143':139
'21#.#53.218.206':139
'21#.#53.19.186':139
'21#.#53.233.149':139
'21#.#53.140.223':139
'21#.#53.52.3':139
'21#.#53.215.7':139
'21#.#53.179.80':139
'21#.#53.149.42':139
'21#.#53.38.155':139
'21#.#53.6.224':139
'21#.#53.197.205':139
'21#.#53.58.200':139
'21#.#53.71.227':139
'21#.#53.32.213':139
'21#.#53.42.105':139
'21#.#53.115.68':139
'21#.#53.102.135':139
'21#.#53.85.72':139
'21#.#53.185.248':139
'21#.#53.214.43':445
'21#.#53.242.20':445
'21#.#53.222.11':445
'21#.#53.161.31':445
'21#.#53.41.180':445
'21#.#53.69.63':445
'21#.#53.17.212':445
'21#.#53.173.29':445
'21#.#53.10.177':445
'21#.#53.44.38':445
'21#.#53.37.9':445
'21#.#53.90.37':445
'21#.#53.255.189':445
'21#.253.9.0':445
'21#.#53.192.90':445
'21#.#53.177.53':445
'21#.#53.27.116':445
'21#.#53.31.88':445
'21#.#53.193.11':445
'21#.#53.202.94':139
'21#.#53.153.53':139
'21#.#53.111.177':139
'21#.#53.120.223':139
'21#.#53.15.53':139
'21#.#53.20.225':139
'21#.#53.252.90':139
'21#.#53.63.242':139
'21#.#53.10.24':139
'21#.#53.88.140':139
'21#.#53.8.182':445
'21#.#53.42.210':445
'21#.#53.164.31':445
'21#.#53.229.164':445
'21#.#53.9.237':445
'21#.#53.251.31':139
'21#.#53.66.204':139
'21#.#53.17.61':445
'21#.#53.32.32':445
'21#.#53.81.190':445
'21#.#53.39.211':445
'21#.#53.94.39':445
'21#.#53.100.15':139
'21#.#53.6.232':139
'21#.#53.18.80':445
'21#.#53.3.123':445
'21#.#53.201.241':445
'21#.#53.146.94':445
'21#.#53.109.48':445
'21#.#53.172.119':139
'21#.#53.152.130':139
'21#.#53.148.175':139
'21#.#53.131.8':139
'21#.#53.222.162':139
'21#.#53.219.177':139
'21#.#53.122.66':139
'21#.#53.119.122':139
'21#.#53.26.210':139
'21#.#53.65.166':139
'21#.#53.3.110':445
'21#.#53.58.3':445
'21#.#53.237.176':445
'21#.#53.109.242':445
'21#.#53.148.64':445
'21#.#53.118.252':445
'21#.#53.25.200':445
'21#.#53.104.111':445
'21#.#53.117.96':445
'21#.#53.182.12':445
'21#.#53.106.106':445
'21#.#53.174.43':445
'21#.#53.190.226':445
'21#.#53.26.193':445
'21#.#53.3.146':445
'21#.#53.207.66':445
'21#.#53.125.126':445
'21#.#53.163.205':445
'21#.#53.17.216':445
'21#.#53.67.146':139
'21#.#53.163.205':139
'21#.#53.17.216':139
'21#.#53.174.43':139
'21#.#53.3.146':139
'21#.#53.207.66':139
'21#.#53.237.176':139
'21#.#53.109.242':139
'21#.#53.125.126':139
'21#.#53.182.12':139
'21#.#53.106.106':139
'21#.#53.18.80':139
'21#.#53.146.94':139
'21#.#53.39.211':139
'21#.#53.94.39':139
'21#.#53.109.48':139
'21#.#53.190.226':139
'21#.#53.26.193':139
'21#.#53.3.123':139
'21#.#53.201.241':139
'21#.#53.43.141':139
'21#.#53.189.43':139
'21#.#53.171.31':139
'21#.#53.52.213':139
'21#.#53.47.225':139
'21#.#53.127.57':139
'21#.#53.146.127':139
'21#.#53.236.195':139
'21#.#53.83.211':139
'21#.#53.146.144':139
'21#.#53.148.64':139
'21#.#53.104.111':139
'21#.#53.3.110':139
'21#.#53.58.3':139
'21#.#53.117.96':139
'21#.#53.107.84':139
'21#.#53.64.150':139
'21#.#53.118.252':139
'21#.#53.25.200':139
'21#.#53.75.61':139
'21#.#53.6.35':139
'21#.#53.129.78':139
'21#.#53.24.173':139
'21#.#53.77.195':139
'21#.#53.64.170':139
'21#.#53.54.198':139
'21#.#53.104.23':139
'21#.#53.170.17':139
'21#.#53.162.220':139
'21#.#53.8.178':139
'21#.#53.116.198':139
'21#.#53.219.177':9988
'21#.#53.6.232':9988
'21#.#53.80.158':139
'21#.#53.108.54':139
'21#.#53.25.250':139
'21#.#53.195.193':139
'21#.#53.254.194':139
'21#.#53.75.61':445
'21#.#53.6.35':445
'21#.#53.129.78':445
'21#.#53.24.173':445
'21#.#53.77.195':445
'21#.#53.64.170':445
'21#.#53.54.198':445
'21#.#53.104.23':445
'21#.#53.170.17':445
'21#.#53.162.220':445
'21#.#53.8.178':445
'21#.#53.116.198':445
'21#.#53.81.190':139
'21#.#53.76.143':139
'21#.#53.80.158':445
'21#.#53.108.54':445
'21#.#53.25.250':445
'21#.#53.195.193':445
'21#.#53.254.194':445
'21#.#53.148.175':9988
'21#.#53.67.146':445
'21#.#53.131.8':445
'21#.#53.127.57':445
'21#.#53.146.127':445
'21#.#53.222.162':445
'21#.#53.219.177':445
'21#.#53.26.210':445
'21#.#53.152.130':445
'21#.#53.148.175':445
'21#.#53.83.211':445
'21#.#53.146.144':445
'21#.#53.171.31':445
'21#.#53.107.84':445
'21#.#53.64.150':445
'21#.#53.52.213':445
'21#.#53.47.225':445
'21#.#53.236.195':445
'21#.#53.43.141':445
'21#.#53.189.43':445
'21#.#53.207.66':9988
'21#.#53.125.126':9988
'21#.#53.106.106':9988
'21#.#53.174.43':9988
'21#.#53.182.12':9988
'21#.#53.47.225':9988
'21#.#53.83.211':9988
'21#.#53.107.84':9988
'21#.#53.171.31':9988
'21#.#53.26.193':9988
'21#.#53.119.122':445
'21#.#53.172.119':445
'21#.#53.65.166':445
'21#.#53.122.66':445
'21#.#53.100.15':445
'21#.#53.201.241':9988
'21#.#53.146.94':9988
'21#.#53.6.232':445
'21#.#53.109.48':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней