Trojan.DownLoader12.29224

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3977.dir00\svchost.exe.mdmp 16325836412032320

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3977.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##5.192.56':139
'60.##5.187.73':139
'60.##5.78.90':139
'60.##5.147.82':139
'60.##5.121.44':139
'60.##5.119.217':139
'60.##5.88.26':139
'60.##5.105.180':139
'60.##5.124.187':139
'60.##5.180.124':139
'60.##5.21.146':139
'60.##5.184.252':139
'60.##5.91.175':139
'60.##5.46.82':139
'60.##5.12.178':445
'60.##5.153.12':445
'60.##5.147.170':139
'60.##5.39.14':139
'60.##5.191.215':139
'60.##5.98.235':139
'60.##5.99.138':139
'60.##5.170.147':139
'60.##5.147.82':445
'60.##5.121.44':445
'60.##5.21.146':445
'60.##5.147.170':445
'60.##5.39.14':445
'60.##5.124.187':445
'60.##5.180.124':445
'60.##5.187.73':445
'60.##5.78.90':445
'60.##5.192.56':445
'60.##5.191.215':445
'60.##5.54.76':139
'60.##5.4.125':139
'60.##5.243.212':139
'60.##5.201.170':139
'60.##5.214.80':139
'60.##5.98.235':445
'60.##5.99.138':445
'60.##5.91.175':445
'60.##5.46.82':445
'60.##5.184.252':445
'60.##5.177.170':139
'60.##5.60.16':139
'60.##5.36.224':139
'60.##5.245.100':139
'60.##5.53.70':139
'60.##5.70.217':445
'60.##5.22.114':445
'60.##5.153.12':139
'60.##5.68.81':139
'60.##5.12.178':139
'60.##5.101.27':139
'60.##5.101.203':139
'60.##5.136.102':139
'60.##5.137.165':139
'60.##5.128.25':139
'60.##5.119.128':139
'60.#25.3.77':139
'60.#25.27.1':139
'60.##5.154.97':139
'60.##5.100.131':139
'60.##5.170.108':139
'60.##5.94.79':445
'60.##5.101.27':445
'60.##5.245.100':445
'60.#25.27.1':445
'60.##5.154.97':445
'60.#25.3.77':445
'60.##5.60.16':445
'60.##5.68.81':445
'60.##5.177.170':445
'60.##5.53.70':445
'60.##5.36.224':445
'60.##5.170.108':445
'60.##5.25.203':445
'60.##5.128.25':445
'60.##5.110.213':445
'60.##5.190.26':445
'60.##5.2.190':445
'60.##5.136.102':445
'60.##5.100.131':445
'60.##5.101.203':445
'60.##5.119.128':445
'60.##5.137.165':445
'60.##5.105.114':445
'60.##5.60.187':445
'60.##5.64.74':445
'60.##5.154.169':445
'60.##5.34.31':445
'60.##5.53.80':139
'60.##5.132.193':139
'60.##5.102.83':139
'60.##5.28.234':445
'60.##5.92.82':445
'60.##5.226.54':445
'60.##5.193.89':445
'60.##5.105.53':445
'60.##5.78.116':445
'60.#25.37.4':445
'60.##5.71.97':445
'60.##5.65.231':445
'60.##5.133.66':445
'60.##5.60.214':445
'60.##5.25.154':445
'60.##5.194.51':445
'60.##5.252.43':139
'60.##5.50.96':139
'60.##5.16.51':139
'60.##5.202.7':139
'60.##5.2.124':139
'60.##5.155.11':139
'60.##5.186.150':139
'60.##5.29.187':139
'60.##5.151.169':139
'60.##5.184.15':139
'60.##5.228.179':139
'60.#25.79.1':139
'60.##5.137.104':139
'60.##5.42.84':139
'60.##5.105.196':139
'60.##5.196.213':139
'60.##5.147.235':139
'60.##5.79.171':139
'60.#25.1.80':139
'60.##5.60.168':139
'60.##5.26.43':139
'60.##5.114.49':139
'60.##5.87.43':139
'60.##5.238.207':139
'60.##5.191.43':139
'60.##5.110.128':139
'60.##5.0.236':139
'60.##5.78.116':139
'60.##5.193.89':139
'60.##5.71.97':139
'60.##5.171.157':139
'60.#25.37.4':139
'60.##5.197.151':139
'60.##5.170.147':445
'60.##5.201.170':445
'60.##5.88.26':445
'60.##5.105.180':445
'60.##5.119.217':445
'60.##5.4.125':445
'60.##5.112.232':139
'60.##5.54.76':445
'60.##5.214.80':445
'60.##5.243.212':445
'60.##5.105.53':139
'60.##5.197.151':445
'60.##5.110.128':445
'60.##5.112.232':445
'60.##5.28.234':139
'60.##5.92.82':139
'60.##5.238.207':445
'60.##5.171.157':445
'60.##5.87.43':445
'60.##5.0.236':445
'60.##5.191.43':445
'60.##5.60.187':139
'60.##5.65.231':139
'60.##5.133.66':139
'60.##5.60.214':139
'60.##5.25.154':139
'60.##5.194.51':139
'60.##5.64.74':139
'60.##5.105.114':139
'60.##5.34.31':139
'60.##5.226.54':139
'60.##5.154.169':139
'60.##5.120.45':445
'60.##5.230.196':445
'60.##5.221.132':445
'60.##5.25.207':445
'60.##5.244.117':445
'60.##5.114.194':445
'60.##5.211.114':445
'60.##5.194.133':445
'60.##5.217.168':445
'60.##5.133.217':445
'60.##5.157.95':445
'60.##5.46.137':139
'60.##5.100.140':139
'60.##5.164.68':139
'60.##5.23.215':139
'60.##5.211.53':139
'60.##5.96.125':445
'60.##5.126.8':445
'60.##5.97.74':139
'60.##5.182.82':139
'60.##5.58.149':139
'60.##5.38.88':445
'60.##5.161.234':445
'60.##5.6.251':445
'60.##5.109.223':445
'60.##5.128.9':445
'60.##5.223.127':445
'60.##5.222.13':445
'60.##5.36.46':445
'60.##5.56.90':445
'60.##5.115.5':445
'60.##5.31.33':445
'60.##5.164.220':445
'60.##5.51.71':445
'60.##5.27.95':445
'60.##5.107.122':445
'60.##5.79.55':445
'60.##5.209.250':445
'60.##5.117.210':445
'60.##5.205.10':445
'60.##5.95.209':445
'60.##5.54.212':445
'60.##5.44.108':445
'60.##5.79.55':139
'60.##5.209.250':139
'60.##5.38.88':139
'60.##5.114.194':139
'60.##5.211.114':139
'60.##5.54.212':139
'60.##5.44.108':139
'60.##5.27.95':139
'60.##5.107.122':139
'60.##5.51.71':139
'60.##5.194.133':139
'60.##5.96.125':139
'60.##5.244.117':139
'60.##5.126.8':139
'60.##5.157.95':139
'60.##5.25.207':139
'60.##5.217.168':139
'60.##5.133.217':139
'60.##5.230.196':139
'60.##5.221.132':139
'60.##5.120.45':139
'60.##5.95.209':139
'60.##5.39.250':139
'60.##5.82.230':139
'60.##5.250.51':139
'60.##5.222.13':139
'60.##5.36.46':139
'60.##5.23.235':139
'60.#25.22.1':139
'60.##5.45.96':139
'60.##5.212.135':139
'60.#25.1.88':139
'60.##5.56.90':139
'60.##5.128.9':139
'60.##5.223.127':139
'60.##5.164.220':139
'60.##5.117.210':139
'60.##5.205.10':139
'60.##5.115.5':139
'60.##5.31.33':139
'60.##5.6.251':139
'60.##5.109.223':139
'60.##5.161.234':139
'60.##5.69.118':445
'60.##5.55.208':445
'60.##5.204.152':445
'60.##5.54.243':445
'60.##5.100.197':445
'60.##5.220.26':445
'60.##5.12.72':445
'60.##5.85.44':445
'60.##5.130.164':445
'60.##5.69.160':445
'60.##5.228.7':139
'60.#25.45.4':139
'60.##5.202.158':139
'60.##5.211.209':139
'60.##5.28.152':139
'60.##5.63.250':139
'60.##5.36.190':139
'60.##5.167.133':139
'60.##5.189.231':139
'60.##5.39.227':139
'60.##5.175.72':139
'60.##5.32.12':445
'60.##5.70.217':139
'60.##5.22.114':139
'60.##5.228.7':445
'60.##5.36.190':445
'60.##5.167.133':445
'60.##5.110.213':139
'60.##5.25.203':139
'60.##5.2.190':139
'60.##5.94.79':139
'60.##5.190.26':139
'60.##5.189.231':445
'60.##5.28.152':445
'60.##5.63.250':445
'60.##5.208.116':445
'60.##5.133.186':445
'60.##5.97.120':445
'60.##5.39.227':445
'60.##5.175.72':445
'60.##5.202.158':445
'60.##5.211.209':445
'60.#25.45.4':445
'60.##5.58.149':445
'60.##5.97.74':445
'60.##5.182.82':445
'60.##5.46.137':445
'60.##5.100.140':445
'60.##5.157.95':9988
'60.##5.221.132':9988
'60.##5.25.207':9988
'60.##5.244.117':9988
'60.##5.96.125':9988
'60.##5.164.68':445
'60.##5.212.135':445
'60.#25.1.88':445
'60.##5.82.230':445
'60.##5.250.51':445
'60.##5.39.250':445
'60.##5.23.215':445
'60.##5.211.53':445
'60.#25.22.1':445
'60.##5.45.96':445
'60.##5.23.235':445
'60.##5.120.45':9988
'60.##5.85.44':139
'60.##5.220.26':139
'60.##5.69.160':139
'60.##5.55.208':139
'60.##5.130.164':139
'60.##5.97.120':139
'60.##5.208.116':139
'60.##5.133.186':139
'60.##5.12.72':139
'60.##5.32.12':139
'60.##5.69.118':139
'60.##5.194.133':9988
'60.##5.114.194':9988
'60.##5.133.217':9988
'60.##5.230.196':9988
'60.##5.217.168':9988
'60.##5.100.197':139
'60.##5.204.152':139
'60.##5.54.243':139
'60.##5.211.114':9988
'60.##5.38.88':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней