Trojan.DownLoader12.29252

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERa1f5.dir00\svchost.exe.mdmp 16325836412030060

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa1f5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#2.240.146':445
'20#.#2.10.126':445
'20#.#2.40.68':445
'20#.#2.28.192':445
'20#.#2.250.248':445
'20#.#2.140.250':445
'20#.#2.118.236':445
'20#.#2.23.198':445
'20#.#2.77.249':445
'20#.#2.90.51':445
'20#.#2.254.102':445
'20#.#2.85.142':445
'20#.#2.222.86':445
'20#.#2.224.106':139
'20#.#2.101.130':139
'20#.#2.38.102':139
'20#.#2.43.24':139
'20#.#2.84.35':139
'20#.#2.1.149':139
'20#.#2.58.186':445
'20#.#2.116.122':445
'20#.#2.37.116':445
'20#.#2.182.151':445
'20#.#2.15.229':445
'20#.#2.39.200':445
'20#.#2.122.175':445
'20#.#2.225.89':445
'20#.#2.198.177':445
'20#.#2.90.72':445
'20#.#2.30.202':445
'20#.#2.11.52':445
'20#.#2.147.221':445
'20#.#2.177.121':445
'20#.#2.54.58':445
'20#.#2.24.168':445
'20#.#2.43.24':445
'20#.#2.84.35':445
'20#.#2.42.65':445
'20#.#2.110.208':445
'20#.#2.144.167':445
'20#.#2.68.163':445
'20#.#2.78.169':445
'20#.#2.41.63':445
'20#.#2.253.225':445
'20#.#2.64.74':445
'20#.#2.189.76':445
'20#.#2.251.52':445
'20#.#2.96.144':445
'20#.#2.63.172':445
'20#.#2.73.108':445
'20#.#2.238.28':445
'20#.#2.252.250':445
'20#.#2.53.106':445
'20#.#2.250.248':139
'20#.#2.140.250':139
'20#.#2.240.146':139
'20#.#2.37.116':139
'20#.#2.182.151':139
'20#.#2.28.192':139
'20#.#2.10.126':139
'20#.#2.85.142':139
'20#.#2.222.86':139
'20#.#2.23.198':139
'20#.#2.40.68':139
'20#.#2.118.236':139
'20#.#2.254.102':139
'20#.#2.177.48':445
'20#.#2.19.245':445
'20#.#2.130.72':445
'20#.#2.75.123':445
'20#.#2.175.81':445
'20#.#2.56.152':445
'20#.#2.190.202':445
'20#.#2.39.200':139
'20#.#2.122.175':139
'20#.#2.116.122':139
'20#.#2.81.211':445
'20#.#2.58.186':139
'20#.#2.15.229':139
'20#.#2.77.249':139
'20#.#2.147.221':139
'20#.#2.177.121':139
'20#.#2.198.177':139
'20#.#2.63.172':139
'20#.#2.73.108':139
'20#.#2.11.52':139
'20#.#2.90.72':139
'20#.#2.110.208':139
'20#.#2.144.167':139
'20#.#2.24.168':139
'20#.#2.30.202':139
'20#.#2.54.58':139
'20#.#2.42.65':139
'20#.#2.64.74':139
'20#.#2.189.76':139
'20#.#2.68.163':139
'20#.#2.90.51':139
'20#.#2.225.89':139
'20#.#2.253.225':139
'20#.#2.78.169':139
'20#.#2.252.250':139
'20#.#2.53.106':139
'20#.#2.96.144':139
'20#.#2.41.63':139
'20#.#2.251.52':139
'20#.#2.238.28':139
'20#.#2.97.100':445
'20#.#2.42.97':445
'20#.#2.60.58':445
'20#.#2.168.252':445
'20#.#2.20.169':445
'20#.#2.154.47':445
'20#.#2.121.241':445
'20#.#2.204.252':445
'20#.#2.154.205':445
'20#.#2.39.20':445
'20#.#2.214.99':445
'20#.#2.91.119':445
'20#.#2.39.248':445
'20#.#2.156.224':445
'20#.#2.37.156':445
'20#.#2.170.103':445
'20#.#2.132.148':139
'20#.#2.4.174':139
'20#.#2.224.37':445
'20#.#2.85.198':445
'20#.#2.88.141':445
'20#.#2.91.68':445
'20#.#2.117.114':445
'20#.#2.228.190':445
'20#.22.31.6':445
'20#.#2.243.197':445
'20#.#2.195.253':445
'20#.#2.92.168':445
'20#.#2.115.120':445
'20#.#2.171.6':445
'20#.#2.32.250':445
'20#.#2.206.166':445
'20#.#2.223.206':445
'20#.#2.132.159':445
'20#.#2.76.235':445
'20#.#2.132.148':445
'20#.#2.4.174':445
'20#.#2.117.62':445
'20#.#2.55.173':445
'20#.22.39.0':445
'20#.#2.136.158':445
'20#.#2.58.37':445
'20#.#2.170.223':445
'20#.#2.191.195':445
'20#.#2.212.214':445
'20#.22.23.0':445
'20#.#2.17.161':445
'20#.#2.117.174':445
'20#.#2.241.70':445
'20#.#2.11.176':445
'20#.#2.80.17':445
'20#.#2.29.80':445
'20#.#2.148.218':445
'20#.#2.20.169':139
'20#.#2.154.47':139
'20#.#2.97.100':139
'20#.#2.91.68':139
'20#.#2.117.114':139
'20#.#2.168.252':139
'20#.#2.42.97':139
'20#.#2.91.119':139
'20#.#2.39.248':139
'20#.#2.204.252':139
'20#.#2.60.58':139
'20#.#2.121.241':139
'20#.#2.214.99':139
'20#.#2.38.102':445
'20#.#2.224.37':139
'20#.#2.156.224':139
'20#.#2.1.149':445
'20#.#2.224.106':445
'20#.#2.101.130':445
'20#.#2.37.156':139
'20#.22.31.6':139
'20#.#2.243.197':139
'20#.#2.88.141':139
'20#.#2.170.103':139
'20#.#2.85.198':139
'20#.#2.228.190':139
'20#.#2.154.205':139
'20#.#2.206.166':139
'20#.#2.223.206':139
'20#.#2.92.168':139
'20#.#2.241.70':139
'20#.#2.11.176':139
'20#.#2.32.250':139
'20#.#2.115.120':139
'20#.#2.55.173':139
'20#.22.39.0':139
'20#.#2.76.235':139
'20#.#2.171.6':139
'20#.#2.132.159':139
'20#.#2.117.62':139
'20#.#2.212.214':139
'20#.22.23.0':139
'20#.#2.136.158':139
'20#.#2.39.20':139
'20#.#2.195.253':139
'20#.#2.191.195':139
'20#.#2.58.37':139
'20#.#2.29.80':139
'20#.#2.148.218':139
'20#.#2.117.174':139
'20#.#2.170.223':139
'20#.#2.17.161':139
'20#.#2.80.17':139
'20#.#2.62.170':445
'20#.#2.132.17':445
'20#.#2.56.167':445
'20#.#2.129.249':445
'20#.#2.107.22':445
'20#.#2.204.195':445
'20#.#2.17.204':445
'20#.#2.192.210':445
'20#.#2.145.231':445
'20#.#2.187.137':445
'20#.#2.116.110':445
'20#.#2.40.173':445
'20#.#2.245.51':445
'20#.#2.102.235':445
'20#.#2.55.125':445
'20#.#2.107.112':445
'20#.#2.132.126':445
'20#.#2.123.233':445
'20#.#2.247.123':445
'20#.#2.207.247':445
'20#.#2.100.103':445
'20#.#2.125.64':445
'20#.#2.179.35':445
'20#.#2.84.78':445
'20#.#2.72.93':445
'20#.#2.186.147':445
'20#.#2.120.111':445
'20#.#2.23.116':445
'20#.#2.131.200':445
'20#.#2.11.181':445
'20#.#2.48.85':445
'20#.#2.206.92':445
'20#.#2.25.60':445
'20#.#2.141.235':445
'20#.#2.96.210':445
'20#.#2.92.142':9988
'20#.#2.123.233':9988
'20#.#2.72.93':9988
'20#.#2.69.105':445
'20#.#2.107.242':445
'20#.#2.247.123':9988
'20#.#2.32.16':445
'20#.#2.206.251':445
'20#.#2.135.213':445
'20#.#2.59.162':445
'20#.#2.164.17':445
'20#.#2.19.164':445
'20#.#2.111.5':445
'20#.#2.129.101':445
'20#.#2.216.230':445
'20#.#2.207.216':445
'20#.#2.92.101':445
'20#.#2.137.217':445
'20#.#2.231.11':445
'20#.#2.204.195':139
'20#.#2.17.204':139
'20#.#2.132.17':139
'20#.#2.179.35':139
'20#.#2.84.78':139
'20#.#2.107.22':139
'20#.#2.56.167':139
'20#.#2.245.51':139
'20#.#2.102.235':139
'20#.#2.145.231':139
'20#.#2.129.249':139
'20#.#2.192.210':139
'20#.#2.40.173':139
'20#.#2.123.233':139
'20#.#2.14.54':139
'20#.#2.107.112':139
'20#.#2.247.123':139
'20#.#2.55.125':139
'20#.#2.207.247':139
'20#.#2.92.142':139
'20#.#2.186.147':139
'20#.#2.120.111':139
'20#.#2.125.64':139
'20#.#2.132.126':139
'20#.#2.100.103':139
'20#.#2.72.93':139
'20#.#2.187.137':139
'20#.#2.25.60':139
'20#.#2.141.235':139
'20#.#2.131.200':139
'20#.#2.216.230':139
'20#.#2.207.216':139
'20#.#2.206.92':139
'20#.#2.11.181':139
'20#.#2.107.242':139
'20#.#2.92.142':445
'20#.#2.14.54':445
'20#.#2.48.85':139
'20#.#2.96.210':139
'20#.#2.69.105':139
'20#.#2.164.17':139
'20#.#2.19.164':139
'20#.#2.32.16':139
'20#.#2.116.110':139
'20#.#2.23.116':139
'20#.#2.59.162':139
'20#.#2.206.251':139
'20#.#2.137.217':139
'20#.#2.231.11':139
'20#.#2.129.101':139
'20#.#2.135.213':139
'20#.#2.111.5':139
'20#.#2.92.101':139
'20#.#2.230.189':445
'20#.#2.104.154':445
'20#.#2.87.234':445
'20#.#2.135.86':445
'20#.#2.43.136':445
'20#.#2.20.107':445
'20#.#2.22.140':445
'20#.#2.84.44':445
'20#.#2.44.97':445
'20#.#2.207.43':445
'20#.#2.110.123':445
'20#.#2.213.23':445
'20#.#2.255.225':445
'20#.#2.75.123':139
'20#.#2.175.81':139
'20#.#2.56.152':139
'20#.#2.28.165':139
'20#.#2.75.73':139
'20#.#2.62.170':139
'20#.#2.177.48':139
'20#.#2.81.211':139
'20#.#2.109.203':445
'20#.#2.95.83':445
'20#.#2.19.245':139
'20#.#2.130.72':139
'20#.#2.190.202':139
'20#.#2.179.212':445
'20#.#2.131.47':445
'20#.#2.244.130':445
'20#.#2.157.244':445
'20#.#2.180.69':445
'20#.#2.65.185':445
'20#.#2.176.89':445
'20#.#2.16.96':445
'20#.#2.165.82':445
'20#.#2.28.165':445
'20#.#2.75.73':445
'20#.#2.111.80':445
'20#.#2.61.149':445
'20#.#2.62.17':445
'20#.#2.96.122':445
'20#.#2.6.230':445
'20#.#2.41.118':445
'20#.#2.26.55':445
'20#.#2.145.177':445
'20#.#2.239.16':445
'20#.#2.113.190':445
'20#.#2.104.118':445
'20#.#2.74.199':445
'20#.#2.117.139':445
'20#.#2.65.195':445
'20#.#2.46.23':445
'20#.#2.118.48':445
'20#.#2.43.136':139
'20#.#2.20.107':139
'20#.#2.230.189':139
'20#.#2.109.203':139
'20#.#2.95.83':139
'20#.#2.135.86':139
'20#.#2.104.154':139
'20#.#2.213.23':139
'20#.#2.255.225':139
'20#.#2.84.44':139
'20#.#2.87.234':139
'20#.#2.22.140':139
'20#.#2.110.123':139
'20#.#2.107.22':9988
'20#.#2.204.195':9988
'20#.#2.132.17':9988
'20#.#2.120.111':9988
'20#.#2.125.64':9988
'20#.#2.84.78':9988
'20#.#2.56.167':9988
'20#.#2.206.251':9988
'20#.#2.111.5':9988
'20#.#2.92.101':9988
'20#.#2.192.210':9988
'20#.#2.245.51':9988
'20#.#2.135.213':9988
'20#.#2.44.97':139
'20#.#2.65.185':139
'20#.#2.176.89':139
'20#.#2.131.47':139
'20#.#2.74.199':139
'20#.#2.117.139':139
'20#.#2.180.69':139
'20#.#2.244.130':139
'20#.#2.61.149':139
'20#.#2.62.17':139
'20#.#2.165.82':139
'20#.#2.157.244':139
'20#.#2.16.96':139
'20#.#2.111.80':139
'20#.#2.145.177':139
'20#.#2.239.16':139
'20#.#2.96.122':139
'20#.#2.207.43':139
'20#.#2.179.212':139
'20#.#2.26.55':139
'20#.#2.6.230':139
'20#.#2.46.23':139
'20#.#2.118.48':139
'20#.#2.104.118':139
'20#.#2.41.118':139
'20#.#2.113.190':139
'20#.#2.65.195':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней