Trojan.DownLoader12.29253

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER36c2.dir00\svchost.exe.mdmp 16325836412032052

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER36c2.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'13#.#0.28.220':139
'13#.#0.76.112':139
'13#.50.9.42':139
'13#.#0.34.116':139
'13#.#0.41.187':139
'13#.#0.226.45':139
'13#.#0.21.82':139
'13#.#0.225.46':139
'13#.#0.202.34':139
'13#.#0.46.202':139
'13#.#0.230.239':139
'13#.#0.76.118':139
'13#.#0.113.40':139
'13#.#0.75.25':445
'13#.#0.127.25':445
'13#.#0.31.127':445
'13#.#0.65.243':139
'13#.#0.152.160':139
'13#.#0.194.86':139
'13#.#0.253.112':139
'13#.#0.29.136':139
'13#.#0.41.187':445
'13#.50.9.42':445
'13#.#0.34.116':445
'13#.#0.152.160':445
'13#.#0.230.239':445
'13#.#0.46.202':445
'13#.#0.225.46':445
'13#.#0.202.34':445
'13#.#0.28.220':445
'13#.#0.76.112':445
'13#.#0.65.243':445
'13#.#0.186.58':139
'13#.#0.237.80':139
'13#.#0.58.165':139
'13#.#0.123.55':139
'13#.#0.42.69':139
'13#.#0.29.136':445
'13#.#0.194.86':445
'13#.#0.253.112':445
'13#.#0.76.118':445
'13#.#0.113.40':445
'13#.#0.90.24':445
'13#.#0.90.24':139
'13#.#0.127.25':139
'13#.#0.69.64':139
'13#.#0.79.76':139
'13#.#0.171.79':139
'13#.50.67.4':445
'13#.#0.199.98':445
'13#.#0.142.59':445
'13#.#0.31.127':139
'13#.#0.75.25':139
'13#.#0.39.211':139
'13#.#0.68.12':139
'13#.#0.55.72':139
'13#.#0.31.153':139
'13#.#0.90.70':139
'13#.#0.44.205':139
'13#.#0.146.110':139
'13#.#0.119.237':139
'13#.#0.110.172':139
'13#.#0.55.184':139
'13#.#0.173.0':139
'13#.#0.110.172':445
'13#.#0.146.110':445
'13#.#0.173.0':445
'13#.#0.55.72':445
'13#.#0.55.184':445
'13#.#0.171.79':445
'13#.#0.69.64':445
'13#.#0.79.76':445
'13#.#0.119.237':445
'13#.#0.39.211':445
'13#.#0.68.12':445
'13#.#0.104.49':445
'13#.#0.246.21':445
'13#.#0.11.148':445
'13#.#0.78.158':445
'13#.#0.75.246':445
'13#.#0.44.205':445
'13#.#0.31.153':445
'13#.#0.90.70':445
'13#.#0.84.246':445
'13#.#0.36.57':445
'13#.#0.226.45':445
'13#.#0.21.143':445
'13#.#0.169.97':445
'13#.#0.143.212':445
'13#.#0.244.9':445
'13#.#0.137.79':445
'13#.#0.34.128':139
'13#.#0.185.250':139
'13#.#0.28.62':445
'13#.#0.134.155':445
'13#.#0.172.133':445
'13#.#0.54.243':445
'13#.#0.102.58':445
'13#.#0.137.100':445
'13#.#0.206.14':445
'13#.#0.52.54':445
'13#.#0.54.236':445
'13#.#0.23.218':445
'13#.#0.252.142':445
'13#.#0.218.0':445
'13#.#0.96.98':445
'13#.#0.84.102':445
'13#.#0.226.164':139
'13#.#0.210.18':139
'13#.#0.84.54':139
'13#.#0.152.171':139
'13#.#0.117.115':139
'13#.#0.4.168':139
'13#.#0.39.204':139
'13#.#0.112.96':139
'13#.#0.12.200':139
'13#.#0.96.153':139
'13#.#0.142.190':139
'13#.#0.72.114':139
'13#.#0.128.11':139
'13#.#0.12.237':139
'13#.#0.43.20':139
'13#.#0.237.234':139
'13#.#0.14.159':139
'13#.#0.141.70':139
'13#.#0.26.37':139
'13#.#0.40.128':139
'13#.#0.150.34':139
'13#.#0.177.24':445
'13#.#0.177.24':139
'13#.#0.52.54':139
'13#.#0.173.210':139
'13#.#0.201.166':139
'13#.#0.129.121':139
'13#.#0.137.100':139
'13#.#0.96.98':139
'13#.#0.102.58':139
'13#.#0.54.236':139
'13#.#0.206.14':139
'13#.#0.71.66':139
'13#.#0.58.165':445
'13#.#0.186.58':445
'13#.#0.42.69':445
'13#.#0.21.82':445
'13#.#0.123.55':445
'13#.#0.89.205':139
'13#.#0.34.219':139
'13#.#0.55.51':139
'13#.#0.237.80':445
'13#.#0.56.161':139
'13#.#0.55.51':445
'13#.#0.89.205':445
'13#.#0.56.161':445
'13#.#0.172.133':139
'13#.#0.28.62':139
'13#.#0.129.121':445
'13#.#0.173.210':445
'13#.#0.201.166':445
'13#.#0.34.219':445
'13#.#0.71.66':445
'13#.#0.134.155':139
'13#.#0.252.142':139
'13#.#0.54.243':139
'13#.#0.23.218':139
'13#.#0.84.102':139
'13#.#0.218.0':139
'13#.#0.21.143':139
'13#.#0.169.97':139
'13#.#0.143.212':139
'13#.#0.244.9':139
'13#.#0.137.79':139
'13#.#0.36.57':139
'13#.#0.184.84':445
'13#.#0.59.122':445
'13#.#0.115.2':445
'13#.50.8.6':445
'13#.#0.210.52':445
'13#.#0.50.54':445
'13#.#0.201.212':445
'13#.#0.15.134':445
'13#.#0.103.45':445
'13#.#0.134.102':445
'13#.#0.206.231':445
'13#.#0.70.192':139
'13#.#0.151.6':139
'13#.#0.55.211':139
'13#.#0.133.227':139
'13#.#0.83.120':139
'13#.#0.160.194':445
'13#.#0.11.230':445
'13#.#0.119.153':139
'13#.#0.77.176':139
'13#.#0.46.127':139
'13#.#0.47.18':445
'13#.#0.18.141':445
'13#.#0.144.74':445
'13#.#0.241.136':445
'13#.#0.52.228':445
'13#.#0.182.155':445
'13#.#0.12.106':445
'13#.#0.138.27':445
'13#.#0.45.111':445
'13#.#0.188.45':445
'13#.#0.108.219':445
'13#.#0.153.252':445
'13#.#0.186.205':445
'13#.#0.55.173':445
'13#.#0.46.19':445
'13#.#0.220.65':445
'13#.#0.112.213':445
'13#.#0.217.123':445
'13#.#0.141.219':445
'13#.#0.59.137':445
'13#.#0.29.48':445
'13#.#0.192.204':139
'13#.#0.220.65':139
'13#.#0.55.173':139
'13#.#0.46.19':139
'13#.#0.50.54':139
'13#.#0.201.212':139
'13#.#0.29.48':139
'13#.#0.141.219':139
'13#.#0.59.137':139
'13#.#0.153.252':139
'13#.#0.186.205':139
'13#.#0.15.134':139
'13#.50.8.6':139
'13#.#0.210.52':139
'13#.#0.160.194':139
'13#.#0.206.231':139
'13#.#0.11.230':139
'13#.#0.103.45':139
'13#.#0.134.102':139
'13#.#0.59.122':139
'13#.#0.115.2':139
'13#.#0.184.84':139
'13#.50.8.5':139
'13#.#0.36.99':139
'13#.#0.114.3':139
'13#.#0.182.155':139
'13#.#0.12.106':139
'13#.#0.120.4':139
'13#.#0.49.15':139
'13#.#0.7.105':139
'13#.#0.80.181':139
'13#.#0.58.153':139
'13#.#0.138.27':139
'13#.#0.52.228':139
'13#.#0.241.136':139
'13#.#0.108.219':139
'13#.#0.112.213':139
'13#.#0.217.123':139
'13#.#0.45.111':139
'13#.#0.188.45':139
'13#.#0.18.141':139
'13#.#0.144.74':139
'13#.#0.47.18':139
'13#.#0.114.3':445
'13#.#0.60.24':445
'13#.#0.59.40':445
'13#.#0.85.179':445
'13#.#0.243.23':445
'13#.#0.37.243':445
'13#.#0.113.235':445
'13#.#0.249.149':445
'13#.#0.19.159':445
'13#.#0.42.200':445
'13#.#0.58.84':445
'13#.#0.23.143':445
'13#.#0.117.22':139
'13#.#0.80.254':139
'13#.#0.76.34':139
'13#.#0.156.55':139
'13#.#0.170.126':139
'13#.#0.130.24':139
'13#.#0.185.188':139
'13#.#0.229.120':139
'13#.#0.52.56':139
'13#.#0.120.52':139
'13#.#0.199.98':139
'13#.#0.78.158':139
'13#.50.67.4':139
'13#.#0.185.188':445
'13#.#0.142.59':139
'13#.#0.246.21':139
'13#.#0.84.246':139
'13#.#0.104.49':139
'13#.#0.75.246':139
'13#.#0.11.148':139
'13#.#0.130.24':445
'13#.#0.170.126':445
'13#.#0.76.34':445
'13#.#0.156.55':445
'13#.#0.80.249':445
'13#.#0.112.106':445
'13#.#0.120.52':445
'13#.#0.229.120':445
'13#.#0.52.56':445
'13#.#0.117.22':445
'13#.#0.80.254':445
'13#.#0.112.106':139
'13#.#0.46.127':445
'13#.#0.119.153':445
'13#.#0.77.176':445
'13#.#0.70.192':445
'13#.#0.151.6':445
'13#.#0.134.102':9988
'13#.#0.15.134':9988
'13#.#0.59.122':9988
'13#.#0.160.194':9988
'13#.#0.184.84':9988
'13#.#0.55.211':445
'13#.#0.58.153':445
'13#.#0.7.105':445
'13#.#0.80.181':445
'13#.50.8.5':445
'13#.#0.36.99':445
'13#.#0.133.227':445
'13#.#0.83.120':445
'13#.#0.192.204':445
'13#.#0.120.4':445
'13#.#0.49.15':445
'13#.#0.59.40':139
'13#.#0.42.200':139
'13#.#0.60.24':139
'13#.#0.37.243':139
'13#.#0.85.179':139
'13#.#0.249.149':139
'13#.#0.80.249':139
'13#.#0.113.235':139
'13#.#0.58.84':139
'13#.#0.19.159':139
'13#.#0.243.23':139
'13#.#0.55.173':9988
'13#.#0.153.252':9988
'13#.#0.220.65':9988
'13#.#0.50.54':9988
'13#.#0.201.212':9988
'13#.#0.47.18':9988
'13#.#0.23.143':139
'13#.#0.241.136':9988
'13#.#0.141.219':9988
'13#.#0.108.219':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней