Trojan.DownLoader12.29221

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER1dc7.dir00\svchost.exe.mdmp 16325836412032148

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'64.##5.66.21':139
'64.##5.148.244':139
'64.##5.98.174':139
'64.##5.236.12':139
'64.##5.45.46':445
'64.##5.7.229':445
'64.##5.12.45':139
'64.##5.149.6':139
'64.##5.22.30':139
'64.##5.34.101':139
'64.##5.184.150':139
'64.##5.208.69':139
'64.##5.113.5':139
'64.##5.150.234':139
'64.##5.123.221':445
'64.##5.7.229':139
'64.##5.68.154':445
'64.##5.123.42':445
'64.##5.123.42':139
'64.##5.192.124':139
'64.##5.59.172':139
'64.#85.43.1':139
'64.##5.129.68':445
'64.##5.59.172':445
'64.##5.154.126':445
'64.##5.221.45':445
'64.##5.47.175':445
'64.##5.192.124':445
'64.#85.43.1':445
'64.##5.220.51':139
'64.##5.218.147':139
'64.##5.67.232':139
'64.##5.95.52':139
'64.##5.36.159':139
'64.##5.207.111':139
'64.##5.240.90':139
'64.##5.163.115':139
'64.##5.12.45':445
'64.##5.236.12':445
'64.##5.115.76':139
'64.##5.47.67':139
'64.##5.34.51':139
'64.##5.47.99':139
'64.##5.103.231':139
'64.##5.48.30':139
'64.##5.194.230':139
'64.##5.254.69':139
'64.##5.154.153':139
'64.##5.212.13':139
'64.##5.175.159':139
'64.##5.213.85':139
'64.#85.0.40':139
'64.##5.98.109':139
'64.##5.48.90':139
'64.##5.214.132':139
'64.##5.106.254':139
'64.##5.134.106':139
'64.##5.30.101':139
'64.##5.123.221':139
'64.##5.252.116':445
'64.##5.19.156':445
'64.##5.10.25':445
'64.##5.185.123':445
'64.##5.118.187':445
'64.##5.239.23':445
'64.##5.98.125':445
'64.##5.116.51':445
'64.##5.89.116':445
'64.##5.249.89':445
'64.##5.70.91':445
'64.#85.6.10':445
'64.##5.37.180':445
'64.##5.175.5':445
'64.##5.37.166':445
'64.##5.191.198':139
'64.##5.174.59':139
'64.##5.123.174':139
'64.##5.28.171':139
'64.#85.2.92':139
'64.##5.211.100':139
'64.##5.133.250':139
'64.##5.71.133':139
'64.##5.238.235':139
'64.##5.42.107':445
'64.##5.166.206':139
'64.##5.19.124':139
'64.##5.80.73':139
'64.##5.213.237':139
'64.##5.71.133':445
'64.##5.213.237':445
'64.##5.166.206':445
'64.##5.80.73':445
'64.##5.174.59':445
'64.##5.123.174':445
'64.##5.19.124':445
'64.##5.47.175':139
'64.##5.45.46':139
'64.##5.221.45':139
'64.##5.129.68':139
'64.##5.238.235':445
'64.##5.154.126':139
'64.##5.68.154':139
'64.##5.191.198':445
'64.##5.94.60':445
'64.##5.64.94':445
'64.##5.53.30':445
'64.##5.59.242':445
'64.#85.45.2':445
'64.##5.246.224':445
'64.##5.242.48':445
'64.##5.211.100':445
'64.##5.133.250':445
'64.##5.28.171':445
'64.#85.2.92':445
'64.##5.160.2':445
'64.##5.152.196':445
'64.##5.168.254':445
'64.##5.16.159':139
'64.##5.64.249':139
'64.##5.13.65':139
'64.##5.19.168':139
'64.##5.47.76':139
'64.##5.157.47':139
'64.##5.90.62':139
'64.##5.199.249':139
'64.##5.225.4':139
'64.##5.24.64':139
'64.##5.202.138':139
'64.##5.23.148':139
'64.##5.103.51':139
'64.##5.171.53':139
'64.##5.62.17':139
'64.##5.36.74':139
'64.##5.36.146':139
'64.#85.66.9':139
'64.##5.188.205':139
'64.##5.3.168':445
'64.##5.250.167':445
'64.##5.57.176':139
'64.##5.242.225':139
'64.##5.229.242':139
'64.##5.102.11':139
'64.##5.238.105':139
'64.##5.11.178':139
'64.##5.49.55':139
'64.##5.247.190':139
'64.##5.247.190':445
'64.##5.238.105':445
'64.##5.242.225':445
'64.##5.49.55':445
'64.##5.36.146':445
'64.#85.66.9':445
'64.##5.11.178':445
'64.##5.157.47':445
'64.##5.90.62':445
'64.##5.19.168':445
'64.##5.47.76':445
'64.##5.229.242':445
'64.##5.62.17':445
'64.##5.102.11':445
'64.##5.36.74':445
'64.##5.21.50':139
'64.##5.188.146':139
'64.##5.108.95':139
'64.##5.182.37':139
'64.##5.233.24':139
'64.##5.120.233':139
'64.##5.37.121':139
'64.##5.50.23':139
'64.##5.57.176':445
'64.##5.188.205':445
'64.##5.160.191':139
'64.##5.26.167':139
'64.##5.41.62':139
'64.##5.36.14':139
'64.##5.168.3':445
'64.#85.0.40':445
'64.##5.254.69':445
'64.##5.30.101':445
'64.##5.194.230':445
'64.##5.214.132':445
'64.##5.98.109':445
'64.##5.48.90':445
'64.##5.240.90':445
'64.##5.207.111':445
'64.##5.95.52':445
'64.##5.36.159':445
'64.##5.106.254':445
'64.##5.48.30':445
'64.##5.103.231':445
'64.##5.134.106':445
'64.##5.113.5':445
'64.##5.150.234':445
'64.##5.184.150':445
'64.##5.208.69':445
'64.##5.66.21':445
'64.##5.148.244':445
'64.##5.98.174':445
'64.##5.213.85':445
'64.##5.175.159':445
'64.##5.154.153':445
'64.##5.212.13':445
'64.##5.149.6':445
'64.##5.22.30':445
'64.##5.34.101':445
'64.##5.250.167':139
'64.##5.102.198':445
'64.##5.236.209':445
'64.##5.168.3':139
'64.##5.217.181':139
'64.##5.167.234':139
'64.##5.3.168':139
'64.#85.6.2':445
'64.##5.217.181':445
'64.##5.167.234':445
'64.##5.211.243':445
'64.##5.4.135':445
'64.##5.57.99':445
'64.##5.224.164':445
'64.##5.211.243':139
'64.##5.34.51':445
'64.##5.47.67':445
'64.##5.163.115':445
'64.##5.47.99':445
'64.##5.220.51':445
'64.##5.218.147':445
'64.##5.67.232':445
'64.##5.4.135':139
'64.##5.224.164':139
'64.#85.6.2':139
'64.##5.57.99':139
'64.##5.115.76':445
'64.##5.102.198':139
'64.##5.236.209':139
'64.##5.168.254':139
'64.##5.183.103':445
'64.##5.28.104':445
'64.##5.240.199':445
'64.##5.244.44':445
'64.##5.251.242':445
'64.#85.48.7':445
'64.##5.44.201':445
'64.##5.62.190':445
'64.##5.212.174':445
'64.##5.115.63':445
'64.##5.92.29':445
'64.##5.142.42':445
'64.##5.45.249':445
'64.##5.19.126':445
'64.##5.242.91':445
'64.##5.80.42':445
'64.##5.12.36':445
'64.##5.34.89':445
'64.##5.95.180':445
'64.##5.199.150':445
'64.##5.241.198':445
'64.##5.117.0':445
'64.##5.204.41':445
'64.##5.19.199':445
'64.##5.240.60':445
'64.#85.55.6':445
'64.##5.56.34':445
'64.##5.221.55':445
'64.##5.245.221':445
'64.##5.21.78':139
'64.##5.60.222':139
'64.##5.195.83':139
'64.##5.123.247':9988
'64.##5.212.71':9988
'64.##5.44.201':9988
'64.##5.112.141':9988
'64.##5.102.137':139
'64.##5.179.206':139
'64.##5.244.66':139
'64.##5.41.180':139
'64.##5.53.84':139
'64.##5.219.126':139
'64.##5.120.91':139
'64.##5.19.126':9988
'64.##5.163.139':445
'64.##5.25.132':445
'64.##5.197.23':445
'64.##5.112.141':445
'64.##5.198.119':445
'64.##5.40.199':445
'64.##5.7.151':445
'64.##5.108.175':445
'64.##5.170.52':445
'64.##5.32.195':445
'64.##5.212.71':445
'64.##5.28.204':445
'64.##5.172.248':445
'64.##5.145.195':445
'64.##5.151.56':445
'64.##5.204.41':139
'64.##5.19.199':139
'64.##5.240.60':139
'64.#85.55.6':139
'64.##5.56.34':139
'64.##5.221.55':139
'64.##5.245.221':139
'64.##5.244.44':139
'64.##5.183.103':139
'64.##5.28.104':139
'64.##5.44.201':139
'64.##5.242.91':139
'64.##5.251.242':139
'64.#85.48.7':139
'64.##5.34.89':139
'64.##5.195.99':139
'64.##5.18.120':139
'64.##5.56.198':139
'64.##5.123.247':139
'64.##5.233.28':139
'64.##5.93.22':139
'64.##5.166.72':139
'64.##5.95.180':139
'64.##5.80.42':139
'64.##5.12.36':139
'64.##5.117.0':139
'64.##5.151.56':139
'64.##5.199.150':139
'64.##5.241.198':139
'64.##5.108.175':139
'64.##5.170.52':139
'64.##5.32.195':139
'64.##5.212.71':139
'64.##5.28.204':139
'64.##5.172.248':139
'64.##5.145.195':139
'64.##5.93.22':445
'64.##5.56.198':445
'64.##5.166.72':445
'64.##5.195.99':445
'64.##5.123.247':445
'64.##5.233.28':445
'64.##5.18.120':445
'64.##5.197.23':139
'64.##5.92.29':139
'64.##5.62.190':139
'64.##5.212.174':139
'64.##5.19.126':139
'64.##5.240.199':139
'64.##5.142.42':139
'64.##5.45.249':139
'64.##5.112.141':139
'64.##5.163.139':139
'64.##5.25.132':139
'64.##5.7.151':139
'64.##5.115.63':139
'64.##5.198.119':139
'64.##5.40.199':139
'64.##5.97.179':139
'64.##5.110.10':139
'64.##5.25.33':445
'64.##5.159.247':139
'64.##5.79.13':139
'64.##5.244.6':139
'64.##5.1.244':139
'64.##5.123.72':445
'64.##5.79.13':445
'64.##5.244.6':445
'64.##5.72.208':445
'64.##5.87.196':445
'64.#85.33.2':445
'64.##5.209.32':445
'64.##5.123.72':139
'64.##5.69.192':445
'64.##5.125.215':445
'64.##5.217.137':445
'64.##5.35.54':445
'64.##5.166.11':445
'64.##5.95.162':445
'64.##5.241.6':445
'64.#85.33.2':139
'64.##5.209.32':139
'64.##5.72.208':139
'64.##5.87.196':139
'64.##5.200.153':445
'64.##5.2.201':445
'64.##5.25.33':139
'64.##5.249.89':139
'64.#85.45.2':139
'64.##5.246.224':139
'64.##5.89.116':139
'64.##5.175.5':139
'64.##5.70.91':139
'64.##5.116.51':139
'64.##5.53.30':139
'64.##5.152.196':139
'64.##5.160.2':139
'64.##5.64.94':139
'64.##5.242.48':139
'64.##5.59.242':139
'64.##5.94.60':139
'64.#85.6.10':139
'64.##5.42.107':139
'64.##5.37.166':139
'64.##5.118.187':139
'64.##5.110.10':445
'64.##5.1.244':445
'64.##5.159.247':445
'64.##5.97.179':445
'64.##5.37.180':139
'64.##5.19.156':139
'64.##5.10.25':139
'64.##5.252.116':139
'64.##5.239.23':139
'64.##5.98.125':139
'64.##5.185.123':139
'64.##5.95.219':445
'64.##5.95.219':139
'64.##5.166.11':139
'64.##5.95.162':139
'64.##5.34.85':139
'64.##5.161.114':139
'64.##5.180.160':139
'64.##5.237.195':139
'64.##5.217.137':139
'64.##5.200.153':139
'64.##5.2.201':139
'64.##5.125.215':139
'64.##5.241.6':139
'64.##5.35.54':139
'64.##5.69.192':139
'64.##5.114.97':139
'64.##5.208.72':139
'64.##5.117.252':139
'64.##5.171.188':139
'64.##5.137.253':139
'64.##5.8.191':139
'64.##5.156.95':139
'64.##5.141.124':139
'64.##5.254.169':139
'64.#85.17.3':139
'64.##5.161.48':139
'64.##5.86.181':139
'64.##5.203.65':139
'64.##5.39.206':139
'64.##5.22.51':139
'64.##5.22.51':445
'64.##5.86.181':445
'64.##5.254.169':445
'64.##5.39.206':445
'64.##5.117.252':445
'64.##5.171.188':445
'64.##5.203.65':445
'64.##5.180.160':445
'64.##5.237.195':445
'64.##5.34.85':445
'64.##5.161.114':445
'64.#85.17.3':445
'64.##5.161.48':445
'64.##5.114.97':445
'64.##5.208.72':445
'64.##5.219.126':445
'64.##5.120.91':445
'64.##5.41.180':445
'64.##5.53.84':445
'64.##5.21.78':445
'64.##5.60.222':445
'64.##5.195.83':445
'64.##5.156.95':445
'64.##5.141.124':445
'64.##5.137.253':445
'64.##5.8.191':445
'64.##5.102.137':445
'64.##5.179.206':445
'64.##5.244.66':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней