Trojan.DownLoader12.29216

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER5523.dir00\svchost.exe.mdmp 16325836412032152

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5523.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'81.##7.143.186':139
'81.##7.29.209':139
'81.##7.192.166':139
'81.##7.209.72':139
'81.##7.50.151':139
'81.##7.221.252':139
'81.##7.195.228':139
'81.##7.132.8':139
'81.##7.79.124':139
'81.##7.71.55':139
'81.##7.3.177':139
'81.##7.96.77':139
'81.##7.134.141':139
'81.##7.59.205':139
'81.##7.220.94':139
'81.##7.204.220':139
'81.##7.159.184':139
'81.##7.102.160':139
'81.##7.184.11':139
'81.##7.235.96':139
'81.##7.233.97':139
'81.##7.0.221':139
'81.##7.235.96':445
'81.##7.233.97':445
'81.##7.134.141':445
'81.##7.59.205':445
'81.##7.96.77':445
'81.##7.3.177':445
'81.##7.209.72':445
'81.##7.102.160':445
'81.##7.184.11':445
'81.##7.159.184':445
'81.##7.204.220':445
'81.##7.54.222':139
'81.##7.217.202':139
'81.##7.215.70':139
'81.##7.0.142':139
'81.##7.0.225':139
'81.##7.77.155':445
'81.##7.220.94':445
'81.#97.7.72':445
'81.##7.81.72':139
'81.##7.204.161':445
'81.##7.69.252':139
'81.##7.74.141':139
'81.##7.252.225':139
'81.##7.88.209':139
'81.##7.8.182':139
'81.##7.75.55':139
'81.##7.157.137':445
'81.##7.27.113':139
'81.##7.144.246':139
'81.##7.77.154':139
'81.##7.115.51':139
'81.##7.144.232':139
'81.##7.27.33':139
'81.##7.235.151':139
'81.##7.157.137':139
'81.##7.151.157':139
'81.##7.108.232':139
'81.##7.163.168':139
'81.##7.33.38':139
'81.##7.200.42':139
'81.##7.21.143':139
'81.##7.151.157':445
'81.##7.144.246':445
'81.##7.77.154':445
'81.##7.74.141':445
'81.##7.252.225':445
'81.##7.69.252':445
'81.#97.7.72':139
'81.##7.77.155':139
'81.##7.204.161':139
'81.##7.27.113':445
'81.##7.75.55':445
'81.##7.8.182':445
'81.##7.200.42':445
'81.##7.21.143':445
'81.##7.27.33':445
'81.##7.235.151':445
'81.##7.144.232':445
'81.##7.115.51':445
'81.##7.88.209':445
'81.##7.163.168':445
'81.##7.33.38':445
'81.##7.108.232':445
'81.##7.50.151':445
'81.##7.138.37':139
'81.##7.10.138':139
'81.#97.15.5':139
'81.##7.246.203':445
'81.##7.78.214':139
'81.##7.125.215':139
'81.##7.213.125':139
'81.##7.56.223':139
'81.##7.118.170':139
'81.##7.78.227':139
'81.##7.171.252':445
'81.##7.197.218':445
'81.##7.109.56':445
'81.##7.54.206':445
'81.##7.149.83':445
'81.##7.99.132':445
'81.##7.145.139':445
'81.##7.134.130':445
'81.##7.125.112':445
'81.##7.52.176':445
'81.##7.154.24':445
'81.##7.175.109':139
'81.##7.157.39':139
'81.##7.167.117':139
'81.##7.225.197':139
'81.##7.78.167':139
'81.##7.98.51':139
'81.##7.164.215':139
'81.##7.71.223':139
'81.##7.103.229':139
'81.##7.144.241':139
'81.##7.121.145':139
'81.##7.160.55':139
'81.##7.147.64':139
'81.##7.75.82':139
'81.##7.16.241':139
'81.##7.236.45':139
'81.##7.45.122':139
'81.##7.241.215':139
'81.##7.17.211':139
'81.##7.214.148':139
'81.##7.153.59':139
'81.#97.60.1':139
'81.##7.81.72':445
'81.##7.82.220':139
'81.##7.217.202':445
'81.##7.215.70':445
'81.##7.54.222':445
'81.##7.18.169':139
'81.##7.238.74':139
'81.##7.226.192':139
'81.##7.62.115':139
'81.##7.140.81':139
'81.##7.0.225':445
'81.##7.79.124':445
'81.##7.71.55':445
'81.##7.29.209':445
'81.##7.192.166':445
'81.##7.143.186':445
'81.##7.0.221':445
'81.##7.0.142':445
'81.##7.195.228':445
'81.##7.132.8':445
'81.##7.221.252':445
'81.##7.49.238':139
'81.##7.62.115':445
'81.##7.140.81':445
'81.##7.82.220':445
'81.##7.171.252':139
'81.##7.246.203':139
'81.##7.49.238':445
'81.#97.4.13':445
'81.##7.238.74':445
'81.##7.226.192':445
'81.##7.18.169':445
'81.##7.134.130':139
'81.##7.54.206':139
'81.##7.197.218':139
'81.##7.99.132':139
'81.#97.4.13':139
'81.##7.149.83':139
'81.##7.125.112':139
'81.##7.145.139':139
'81.##7.154.24':139
'81.##7.109.56':139
'81.##7.52.176':139
'81.##7.138.73':445
'81.##7.161.183':445
'81.##7.183.243':445
'81.##7.54.96':445
'81.##7.125.138':445
'81.##7.29.129':445
'81.##7.232.212':445
'81.##7.67.67':445
'81.##7.43.213':445
'81.##7.41.185':445
'81.##7.3.102':445
'81.##7.170.56':445
'81.##7.27.187':139
'81.##7.17.72':139
'81.##7.90.139':139
'81.##7.45.168':139
'81.##7.22.124':139
'81.##7.117.224':445
'81.##7.144.162':445
'81.##7.12.38':139
'81.##7.249.172':139
'81.##7.111.125':139
'81.##7.224.67':445
'81.##7.26.79':445
'81.##7.55.26':445
'81.##7.86.242':445
'81.##7.56.60':445
'81.##7.18.226':445
'81.##7.169.241':445
'81.##7.82.127':445
'81.##7.210.21':445
'81.##7.240.34':445
'81.##7.143.66':445
'81.##7.112.44':445
'81.##7.7.192':445
'81.##7.110.193':445
'81.##7.73.103':445
'81.##7.28.147':445
'81.##7.214.95':445
'81.##7.93.13':445
'81.##7.134.33':445
'81.##7.23.96':445
'81.##7.51.40':445
'81.##7.118.134':445
'81.##7.28.147':139
'81.##7.214.95':139
'81.##7.224.67':139
'81.##7.232.212':139
'81.##7.67.67':139
'81.##7.51.40':139
'81.##7.118.134':139
'81.##7.110.193':139
'81.##7.73.103':139
'81.##7.7.192':139
'81.##7.43.213':139
'81.##7.29.129':139
'81.##7.125.138':139
'81.##7.144.162':139
'81.##7.117.224':139
'81.##7.170.56':139
'81.##7.41.185':139
'81.##7.3.102':139
'81.##7.183.243':139
'81.##7.54.96':139
'81.##7.161.183':139
'81.##7.23.96':139
'81.##7.191.183':139
'81.##7.139.89':139
'81.##7.215.82':139
'81.##7.169.241':139
'81.##7.82.127':139
'81.##7.22.212':139
'81.##7.32.217':139
'81.#97.99.4':139
'81.##7.156.138':139
'81.##7.111.6':139
'81.##7.210.21':139
'81.##7.56.60':139
'81.##7.18.226':139
'81.##7.112.44':139
'81.##7.93.13':139
'81.##7.134.33':139
'81.##7.240.34':139
'81.##7.143.66':139
'81.##7.55.26':139
'81.##7.86.242':139
'81.##7.26.79':139
'81.##7.215.82':445
'81.##7.177.212':445
'81.##7.135.58':445
'81.##7.26.242':445
'81.##7.254.92':139
'81.##7.138.73':139
'81.##7.35.167':445
'81.##7.46.16':445
'81.#97.93.1':445
'81.##7.228.141':445
'81.##7.255.46':445
'81.##7.164.37':139
'81.##7.48.14':139
'81.##7.144.201':139
'81.##7.70.230':139
'81.##7.51.57':139
'81.##7.33.62':139
'81.##7.158.245':139
'81.##7.5.120':139
'81.##7.245.218':139
'81.##7.78.166':139
'81.##7.230.113':139
'81.##7.108.173':445
'81.##7.78.166':445
'81.##7.230.113':445
'81.##7.144.201':445
'81.##7.70.230':445
'81.##7.48.14':445
'81.##7.164.37':445
'81.##7.254.92':445
'81.##7.5.120':445
'81.##7.245.218':445
'81.##7.158.245':445
'81.##7.33.62':445
'81.##7.5.136':445
'81.##7.119.5':445
'81.##7.43.58':445
'81.##7.244.16':445
'81.##7.227.57':445
'81.##7.57.84':445
'81.##7.51.57':445
'81.##7.84.64':445
'81.##7.39.119':445
'81.##7.64.39':445
'81.##7.12.38':445
'81.##7.29.129':9988
'81.##7.111.125':445
'81.##7.17.72':445
'81.##7.249.172':445
'81.##7.183.243':9988
'81.##7.43.213':9988
'81.##7.161.183':9988
'81.##7.54.96':9988
'81.##7.117.224':9988
'81.##7.27.187':445
'81.##7.111.6':445
'81.#97.99.4':445
'81.##7.139.89':445
'81.##7.191.183':445
'81.##7.156.138':445
'81.##7.22.124':445
'81.##7.90.139':445
'81.##7.45.168':445
'81.##7.22.212':445
'81.##7.32.217':445
'81.##7.73.103':9988
'81.##7.43.58':139
'81.##7.5.136':139
'81.##7.227.57':139
'81.##7.108.173':139
'81.##7.244.16':139
'81.##7.84.64':139
'81.##7.57.84':139
'81.##7.64.39':139
'81.##7.119.5':139
'81.##7.39.119':139
'81.##7.46.16':139
'81.##7.26.242':139
'81.##7.177.212':139
'81.##7.118.134':9988
'81.##7.7.192':9988
'81.##7.51.40':9988
'81.#97.93.1':139
'81.##7.35.167':139
'81.##7.255.46':139
'81.##7.135.58':139
'81.##7.228.141':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней