Trojan.DownLoader12.29219

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER5e79.dir00\svchost.exe.mdmp 16325836412032396

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'58.##2.46.184':445
'58.##2.131.233':445
'58.#72.15.3':445
'58.##2.209.88':445
'58.##2.79.223':445
'58.##2.143.4':139
'58.##2.40.204':139
'58.##2.119.14':445
'58.##2.125.184':139
'58.##2.118.31':445
'58.##2.66.93':445
'58.##2.171.66':445
'58.##2.50.115':445
'58.##2.21.205':445
'58.##2.43.200':445
'58.##2.174.176':445
'58.##2.47.174':445
'58.##2.122.1':445
'58.##2.13.85':445
'58.##2.146.14':139
'58.##2.221.36':139
'58.##2.26.163':139
'58.##2.202.51':139
'58.##2.73.101':139
'58.##2.29.202':139
'58.##2.1.219':139
'58.##2.17.112':139
'58.##2.151.158':139
'58.##2.147.124':139
'58.##2.191.3':139
'58.##2.186.237':139
'58.##2.28.105':139
'58.##2.122.168':139
'58.##2.4.138':139
'58.##2.173.166':139
'58.##2.15.62':139
'58.##2.170.251':139
'58.##2.212.206':139
'58.##2.190.203':139
'58.##2.166.183':445
'58.##2.72.50':445
'58.##2.19.196':445
'58.##2.247.39':445
'58.##2.48.160':445
'58.##2.76.240':445
'58.##2.193.36':445
'58.##2.129.210':445
'58.##2.224.189':445
'58.##2.68.250':445
'58.##2.79.223':139
'58.##2.119.14':139
'58.##2.209.88':139
'58.##2.131.233':139
'58.##2.117.26':445
'58.##2.140.110':445
'58.##2.47.20':445
'58.##2.121.39':445
'58.##2.240.46':445
'58.##2.79.116':445
'58.##2.241.179':445
'58.##2.200.65':445
'58.##2.53.17':445
'58.##2.176.224':445
'58.##2.165.11':445
'58.##2.195.51':445
'58.##2.151.142':445
'58.##2.57.99':445
'58.##2.186.105':445
'58.##2.128.214':445
'58.##2.95.219':445
'58.##2.243.120':445
'58.##2.87.196':445
'58.##2.60.61':445
'58.#72.4.21':445
'58.##2.37.207':445
'58.##2.51.69':445
'58.##2.2.252':445
'58.##2.44.17':445
'58.##2.60.214':139
'58.##2.205.224':445
'58.##2.167.92':445
'58.##2.17.112':445
'58.##2.60.214':445
'58.##2.91.133':445
'58.##2.32.110':445
'58.##2.35.84':445
'58.##2.246.177':445
'58.##2.168.74':445
'58.##2.1.219':445
'58.##2.202.51':445
'58.##2.73.101':445
'58.##2.170.251':445
'58.##2.191.3':445
'58.##2.221.36':445
'58.##2.151.158':445
'58.##2.147.124':445
'58.##2.26.163':445
'58.##2.29.202':445
'58.##2.20.35':445
'58.##2.14.80':445
'58.##2.9.182':445
'58.##2.216.169':445
'58.##2.30.56':445
'58.##2.55.62':445
'58.##2.178.34':445
'58.##2.218.11':445
'58.##2.11.28':445
'58.##2.80.33':445
'58.##2.40.243':445
'58.##2.43.14':445
'58.##2.213.189':445
'58.##2.122.99':445
'58.##2.137.64':445
'58.##2.106.97':445
'58.##2.24.26':445
'58.##2.171.97':445
'58.##2.89.228':445
'58.##2.117.207':445
'58.##2.106.97':139
'58.##2.89.228':139
'58.##2.43.14':139
'58.##2.213.189':139
'58.##2.117.207':139
'58.##2.40.243':139
'58.##2.216.169':139
'58.##2.24.26':139
'58.##2.171.97':139
'58.##2.137.64':139
'58.##2.91.133':139
'58.##2.246.177':139
'58.##2.205.224':139
'58.##2.167.92':139
'58.##2.168.74':139
'58.##2.20.35':139
'58.##2.122.99':139
'58.##2.32.110':139
'58.##2.35.84':139
'58.##2.30.56':139
'58.##2.4.138':445
'58.##2.186.237':445
'58.##2.146.14':445
'58.##2.122.168':445
'58.##2.28.105':445
'58.##2.190.203':445
'58.##2.15.62':445
'58.##2.173.166':445
'58.##2.212.206':445
'58.##2.40.204':445
'58.##2.55.62':139
'58.##2.11.28':139
'58.##2.14.80':139
'58.##2.9.182':139
'58.##2.80.33':139
'58.##2.125.184':445
'58.##2.143.4':445
'58.##2.178.34':139
'58.##2.218.11':139
'58.##2.18.251':445
'58.##2.193.185':445
'58.##2.62.27':139
'58.##2.114.175':139
'58.##2.164.146':445
'58.##2.200.6':445
'58.##2.170.132':445
'58.##2.83.142':445
'58.##2.90.79':445
'58.##2.149.147':139
'58.##2.193.227':139
'58.##2.58.42':139
'58.##2.252.231':139
'58.##2.209.223':139
'58.##2.172.80':139
'58.##2.131.102':139
'58.##2.53.68':139
'58.##2.133.116':139
'58.##2.127.223':139
'58.##2.79.45':445
'58.##2.107.61':445
'58.##2.59.100':445
'58.##2.39.128':445
'58.##2.191.132':445
'58.##2.125.228':445
'58.##2.58.90':445
'58.##2.151.193':445
'58.##2.108.240':445
'58.##2.62.109':445
'58.##2.183.46':445
'58.##2.227.105':445
'58.##2.90.89':445
'58.##2.141.51':445
'58.##2.162.254':445
'58.##2.84.177':445
'58.##2.93.13':445
'58.##2.227.92':445
'58.##2.216.186':445
'58.##2.125.233':445
'58.##2.84.177':139
'58.##2.216.186':139
'58.##2.227.105':139
'58.##2.90.89':139
'58.##2.125.233':139
'58.##2.183.46':139
'58.##2.39.128':139
'58.##2.93.13':139
'58.##2.227.92':139
'58.##2.162.254':139
'58.##2.193.185':139
'58.##2.18.251':139
'58.##2.200.6':139
'58.##2.164.146':139
'58.##2.83.142':139
'58.##2.79.45':139
'58.##2.141.51':139
'58.##2.90.79':139
'58.##2.170.132':139
'58.##2.191.132':139
'58.##2.126.213':139
'58.##2.243.233':139
'58.##2.146.43':139
'58.##2.183.73':139
'58.##2.125.244':139
'58.##2.139.164':139
'58.##2.60.107':139
'58.##2.102.88':139
'58.##2.165.5':139
'58.##2.150.213':139
'58.##2.125.228':139
'58.##2.108.240':139
'58.##2.107.61':139
'58.##2.59.100':139
'58.##2.62.109':139
'58.##2.84.151':139
'58.#72.59.3':139
'58.##2.58.90':139
'58.##2.151.193':139
'58.##2.84.151':445
'58.#72.4.21':139
'58.##2.2.252':139
'58.##2.95.219':139
'58.##2.243.120':139
'58.##2.44.17':139
'58.##2.128.214':139
'58.##2.53.17':139
'58.##2.37.207':139
'58.##2.51.69':139
'58.##2.60.61':139
'58.##2.48.160':139
'58.##2.129.210':139
'58.##2.166.183':139
'58.##2.72.50':139
'58.##2.224.189':139
'58.##2.79.116':139
'58.##2.87.196':139
'58.##2.76.240':139
'58.##2.193.36':139
'58.##2.176.224':139
'58.##2.122.1':139
'58.##2.13.85':139
'58.##2.171.66':139
'58.##2.43.200':139
'58.##2.174.176':139
'58.#72.15.3':139
'58.##2.46.184':139
'58.##2.47.174':139
'58.##2.118.31':139
'58.##2.66.93':139
'58.##2.165.11':139
'58.##2.57.99':139
'58.##2.241.179':139
'58.##2.200.65':139
'58.##2.186.105':139
'58.##2.21.205':139
'58.##2.50.115':139
'58.##2.195.51':139
'58.##2.151.142':139
'58.##2.209.223':445
'58.##2.193.227':445
'58.##2.60.107':445
'58.##2.252.231':445
'58.##2.58.42':445
'58.##2.127.223':445
'58.##2.131.102':445
'58.##2.172.80':445
'58.##2.133.116':445
'58.##2.139.164':445
'58.##2.146.43':445
'58.##2.183.73':445
'58.#72.59.3':445
'58.##2.150.213':445
'58.##2.126.213':445
'58.##2.102.88':445
'58.##2.165.5':445
'58.##2.243.233':445
'58.##2.125.244':445
'58.##2.53.68':445
'58.##2.121.39':139
'58.##2.240.46':139
'58.##2.183.73':9988
'58.##2.117.26':139
'58.##2.140.110':139
'58.##2.19.196':139
'58.##2.247.39':139
'58.##2.47.20':139
'58.##2.68.250':139
'58.##2.39.128':9988
'58.##2.114.175':445
'58.##2.183.46':9988
'58.##2.149.147':445
'58.##2.62.27':445
'58.##2.125.233':9988
'58.##2.164.146':9988
'58.##2.227.92':9988
'58.##2.108.240':9988
'58.##2.59.100':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней