Trojan.DownLoader12.29203

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1e76.dir00\svchost.exe.mdmp 16325836412032344

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#.15.103':139
'21#.8.32.15':139
'21#.#.75.121':139
'21#.#.61.184':139
'21#.#.61.175':139
'21#.#.155.10':139
'21#.#.71.238':139
'21#.#.241.154':139
'21#.8.29.70':139
'21#.#.245.189':139
'21#.#.23.144':139
'21#.#.170.115':139
'21#.#.156.170':139
'21#.8.73.49':139
'21#.8.22.95':139
'21#.#.20.142':139
'21#.#.62.203':139
'21#.#.237.128':139
'21#.#.210.223':139
'21#.#.190.168':139
'21#.8.51.54':139
'21#.#.26.224':139
'21#.#.210.223':445
'21#.#.62.203':445
'21#.8.51.54':445
'21#.#.156.170':445
'21#.#.190.168':445
'21#.#.61.175':445
'21#.#.75.121':445
'21#.#.61.184':445
'21#.#.237.128':445
'21#.#.23.144':445
'21#.#.170.115':445
'21#.#.194.72':139
'21#.8.182.7':139
'21#.8.26.58':139
'21#.#.54.190':139
'21#.#.165.235':139
'21#.#.20.142':445
'21#.8.73.49':445
'21#.8.22.95':445
'21#.#.153.18':139
'21#.#.180.193':445
'21#.#.10.108':139
'21#.#.199.51':139
'21#.#.121.102':139
'21#.#.70.249':139
'21#.#.48.234':139
'21#.#.193.155':139
'21#.#.102.241':445
'21#.8.59.70':139
'21#.#.41.127':139
'21#.#.110.161':139
'21#.#.170.222':139
'21#.#.136.209':139
'21#.8.13.29':139
'21#.#.167.127':139
'21#.#.134.167':139
'21#.#.143.135':139
'21#.#.64.226':139
'21#.#.173.191':139
'21#.8.213.7':139
'21#.#.242.216':139
'21#.8.95.68':139
'21#.8.8.204':445
'21#.#.10.108':445
'21#.#.199.51':445
'21#.#.121.102':445
'21#.#.70.249':445
'21#.#.48.234':445
'21#.#.193.155':445
'21#.#.180.193':139
'21#.8.59.70':445
'21#.#.41.127':445
'21#.#.110.161':445
'21#.#.170.222':445
'21#.#.136.209':445
'21#.8.13.29':445
'21#.#.167.127':445
'21#.#.134.167':445
'21#.#.143.135':445
'21#.#.64.226':445
'21#.#.173.191':445
'21#.8.213.7':445
'21#.#.242.216':445
'21#.8.95.68':445
'21#.#.15.103':445
'21#.#.126.120':139
'21#.8.84.28':139
'21#.#.167.82':445
'21#.8.6.97':445
'21#.8.197.6':445
'21#.#.222.50':139
'21#.#.117.40':139
'21#.#.237.108':139
'21#.#.52.240':139
'21#.#.12.136':139
'21#.#.49.184':445
'21#.8.7.119':445
'21#.#.203.197':445
'21#.8.49.5':445
'21#.#.161.58':445
'21#.#.27.227':445
'21#.#.129.80':445
'21#.#.74.129':445
'21#.#.80.112':445
'21#.8.28.94':445
'21#.#.101.228':445
'21#.#.61.139':139
'21#.#.211.252':139
'21#.#.33.124':139
'21#.#.68.219':139
'21#.#.140.84':139
'21#.#.218.140':139
'21#.#.54.129':139
'21#.#.103.121':139
'21#.#.99.139':139
'21#.#.132.102':139
'21#.#.116.85':139
'21#.#.245.52':139
'21#.#.124.227':139
'21#.#.167.124':139
'21#.#.112.57':139
'21#.8.92.19':139
'21#.8.65.3':139
'21#.#.17.188':139
'21#.#.139.115':139
'21#.8.3.65':139
'21#.#.136.173':139
'21#.8.3.248':139
'21#.#.175.31':139
'21#.#.195.183':139
'21#.#.31.202':139
'21#.8.182.7':445
'21#.#.153.18':445
'21#.#.63.199':139
'21#.#.204.46':139
'21#.#.44.229':139
'21#.#.40.114':139
'21#.8.9.213':139
'21#.#.194.72':445
'21#.#.241.154':445
'21#.#.155.10':445
'21#.#.245.189':445
'21#.8.32.15':445
'21#.8.29.70':445
'21#.#.165.235':445
'21#.8.26.58':445
'21#.#.54.190':445
'21#.#.71.238':445
'21#.#.26.224':445
'21#.#.161.58':139
'21#.#.175.31':445
'21#.#.195.183':445
'21#.#.31.202':445
'21#.8.197.6':139
'21#.#.167.82':139
'21#.#.63.199':445
'21#.#.204.46':445
'21#.#.44.229':445
'21#.#.40.114':445
'21#.8.9.213':445
'21#.8.6.97':139
'21#.#.203.197':139
'21#.8.28.94':139
'21#.8.7.119':139
'21#.#.27.227':139
'21#.8.49.5':139
'21#.#.74.129':139
'21#.#.49.184':139
'21#.#.129.80':139
'21#.#.101.228':139
'21#.#.80.112':139
'21#.#.191.148':445
'21#.#.113.17':445
'21#.#.116.164':445
'21#.#.37.197':445
'21#.#.187.238':445
'21#.#.244.176':445
'21#.#.130.54':445
'21#.#.117.13':445
'21#.#.44.113':445
'21#.#.140.243':445
'21#.8.46.14':445
'21#.#.179.163':139
'21#.#.134.179':139
'21#.#.164.49':139
'21#.#.10.147':139
'21#.#.216.228':139
'21#.#.45.216':445
'21#.#.142.66':445
'21#.8.53.60':139
'21#.#.101.104':139
'21#.#.236.46':139
'21#.#.172.11':445
'21#.#.103.99':445
'21#.8.56.56':445
'21#.#.207.100':445
'21#.#.206.176':445
'21#.8.39.13':445
'21#.#.213.14':445
'21#.#.90.110':445
'21#.#.205.130':445
'21#.#.208.56':445
'21#.8.87.69':445
'21#.#.177.41':445
'21#.8.2.187':445
'21#.#.161.13':445
'21#.#.89.227':445
'21#.#.180.189':445
'21#.8.65.25':445
'21#.#.109.77':445
'21#.#.175.131':445
'21#.#.249.192':445
'21#.8.59.46':445
'21#.#.217.41':445
'21#.#.180.189':139
'21#.8.65.25':139
'21#.#.172.11':139
'21#.#.244.176':139
'21#.#.130.54':139
'21#.8.59.46':139
'21#.#.217.41':139
'21#.#.161.13':139
'21#.#.89.227':139
'21#.8.2.187':139
'21#.#.117.13':139
'21#.#.116.164':139
'21#.#.187.238':139
'21#.#.37.197':139
'21#.#.191.148':139
'21#.#.142.66':139
'21#.#.44.113':139
'21#.#.140.243':139
'21#.#.113.17':139
'21#.8.46.14':139
'21#.#.45.216':139
'21#.#.249.192':139
'21#.#.187.33':139
'21#.#.172.244':139
'21#.#.213.14':139
'21#.#.90.110':139
'21#.#.115.101':139
'21#.#.21.150':139
'21#.#.91.129':139
'21#.#.45.177':139
'21#.#.63.204':139
'21#.#.176.63':139
'21#.#.205.130':139
'21#.#.206.176':139
'21#.8.39.13':139
'21#.#.177.41':139
'21#.#.109.77':139
'21#.#.175.131':139
'21#.#.208.56':139
'21#.8.87.69':139
'21#.8.56.56':139
'21#.#.207.100':139
'21#.#.103.99':139
'21#.#.115.101':445
'21#.8.50.66':445
'21#.8.143.3':445
'21#.8.66.26':445
'21#.8.13.36':139
'21#.#.116.81':445
'21#.8.97.59':445
'21#.8.44.97':445
'21#.#.158.121':445
'21#.#.29.152':445
'21#.#.16.228':445
'21#.8.12.56':139
'21#.#.34.170':139
'21#.8.50.94':139
'21#.#.114.101':139
'21#.#.45.133':139
'21#.8.48.62':139
'21#.#.136.52':139
'21#.#.129.48':139
'21#.8.7.76':139
'21#.8.22.58':139
'21#.#.141.154':139
'21#.#.234.44':445
'21#.8.7.76':445
'21#.#.136.52':445
'21#.#.141.154':445
'21#.8.50.94':445
'21#.8.22.58':445
'21#.#.102.241':139
'21#.8.8.204':139
'21#.8.13.36':445
'21#.#.129.48':445
'21#.8.12.56':445
'21#.#.34.170':445
'21#.#.158.214':445
'21#.8.52.36':445
'21#.#.214.230':445
'21#.#.21.120':445
'21#.8.185.4':445
'21#.8.48.62':445
'21#.#.114.101':445
'21#.#.45.133':445
'21#.8.2.58':445
'21#.8.43.97':445
'21#.8.53.60':445
'21#.8.46.14':9988
'21#.#.101.104':445
'21#.#.179.163':445
'21#.#.236.46':445
'21#.#.244.176':9988
'21#.#.130.54':9988
'21#.#.37.197':9988
'21#.#.142.66':9988
'21#.#.191.148':9988
'21#.#.134.179':445
'21#.#.176.63':445
'21#.#.45.177':445
'21#.#.63.204':445
'21#.#.187.33':445
'21#.#.172.244':445
'21#.#.216.228':445
'21#.#.164.49':445
'21#.#.10.147':445
'21#.#.21.150':445
'21#.#.91.129':445
'21#.#.172.11':9988
'21#.#.21.120':139
'21#.8.185.4':139
'21#.#.234.44':139
'21#.8.97.59':139
'21#.8.44.97':139
'21#.8.2.58':139
'21#.8.43.97':139
'21#.8.52.36':139
'21#.#.214.230':139
'21#.#.158.214':139
'21#.#.158.121':139
'21#.#.115.101':9988
'21#.#.116.81':139
'21#.#.213.14':9988
'21#.#.89.227':9988
'21#.#.249.192':9988
'21#.#.29.152':139
'21#.#.16.228':139
'21#.8.143.3':139
'21#.8.66.26':139
'21#.8.50.66':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней