Trojan.DownLoader11.11620

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1112 -dm 7 7 %TEMP%\WER9c58.dir00\svchost.exe.mdmp 16325836412032516

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER9c58.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##6.192.176':139
'12.##6.128.59':139
'12.##6.100.155':139
'12.##6.92.13':139
'12.##6.8.134':139
'12.##6.182.195':139
'12.##6.147.141':139
'12.#46.8.28':139
'12.##6.168.127':139
'12.##6.194.87':139
'12.##6.46.223':139
'12.##6.241.102':139
'12.##6.156.43':139
'12.##6.122.51':139
'12.##6.88.118':139
'12.##6.158.102':139
'12.##6.53.209':139
'12.##6.81.38':139
'12.##6.218.174':139
'12.##6.118.218':139
'12.##6.32.217':139
'12.##6.151.97':139
'12.#46.53.6':139
'12.##6.36.78':445
'12.##6.80.222':445
'12.##6.183.24':445
'12.##6.42.82':445
'12.##6.109.240':445
'12.##6.41.49':445
'12.##6.21.18':445
'12.##6.253.75':445
'12.##6.17.127':445
'12.##6.86.178':445
'12.##6.20.54':445
'12.##6.81.196':445
'12.##6.120.66':139
'12.##6.132.243':139
'12.##6.225.218':139
'12.##6.152.145':139
'12.##6.219.0':139
'12.##6.171.132':139
'12.##6.45.244':139
'12.##6.130.107':445
'12.##6.4.101':139
'12.##6.87.147':139
'12.##6.195.246':139
'12.##6.115.245':445
'12.##6.41.151':445
'12.##6.91.203':445
'12.##6.195.62':445
'12.##6.163.178':445
'12.##6.99.40':445
'12.##6.112.177':445
'12.##6.167.189':445
'12.##6.170.109':445
'12.##6.36.156':445
'12.##6.113.229':445
'12.##6.85.123':445
'12.##6.74.236':445
'12.##6.29.40':445
'12.##6.147.118':445
'12.##6.239.22':445
'12.##6.126.196':445
'12.##6.144.199':445
'12.##6.135.42':445
'12.##6.107.45':445
'12.##6.9.212':445
'12.##6.123.115':445
'12.##6.56.167':445
'12.##6.17.127':139
'12.##6.21.18':139
'12.##6.20.54':139
'12.##6.80.222':139
'12.##6.86.178':139
'12.##6.253.75':139
'12.##6.102.177':139
'12.##6.222.102':139
'12.##6.205.190':139
'12.##6.40.25':139
'12.##6.206.247':139
'12.##6.41.49':139
'12.##6.99.107':445
'12.##6.128.155':445
'12.##6.1.220':445
'12.##6.17.109':445
'12.##6.14.206':445
'12.##6.130.107':139
'12.##6.183.24':139
'12.##6.36.78':139
'12.##6.109.240':139
'12.##6.81.196':139
'12.##6.42.82':139
'12.##6.40.25':445
'12.##6.21.32':139
'12.##6.183.192':139
'12.##6.87.220':139
'12.##6.25.97':139
'12.##6.43.164':139
'12.##6.12.44':139
'12.##6.184.82':139
'12.##6.97.253':139
'12.##6.21.94':139
'12.##6.112.170':139
'12.##6.231.94':139
'12.##6.36.215':139
'12.##6.47.230':139
'12.##6.81.144':139
'12.##6.83.13':139
'12.##6.51.67':139
'12.##6.229.3':139
'12.##6.69.202':139
'12.##6.55.179':139
'12.##6.188.46':139
'12.#46.48.5':139
'12.##6.36.49':139
'12.##6.46.213':139
'12.##6.88.15':139
'12.##6.175.175':139
'12.##6.80.69':139
'12.##6.79.254':139
'12.##6.108.80':139
'12.##6.228.3':139
'12.##6.20.69':445
'12.##6.60.50':445
'12.##6.165.21':445
'12.##6.92.228':139
'12.##6.40.188':445
'12.##6.125.68':139
'12.##6.29.111':139
'12.##6.48.14':139
'12.##6.73.100':139
'12.##6.58.141':139
'12.##6.188.184':139
'12.##6.19.62':139
'12.##6.174.158':139
'12.##6.247.74':139
'12.##6.114.167':139
'12.##6.34.225':139
'12.##6.39.203':139
'12.##6.241.102':445
'12.##6.92.13':445
'12.##6.118.218':445
'12.##6.32.217':445
'12.##6.218.174':445
'12.##6.8.134':445
'12.##6.182.195':445
'12.##6.194.87':445
'12.##6.192.176':445
'12.##6.100.155':445
'12.##6.128.59':445
'12.#46.53.6':445
'12.##6.222.102':445
'12.##6.158.102':445
'12.##6.102.177':445
'12.##6.206.247':445
'12.##6.205.190':445
'12.##6.53.209':445
'12.##6.81.38':445
'12.##6.151.97':445
'12.##6.122.51':445
'12.##6.88.118':445
'12.##6.156.43':445
'12.##6.165.21':139
'12.##6.20.69':139
'12.##6.40.188':139
'12.##6.4.101':445
'12.##6.45.244':445
'12.##6.60.50':139
'12.##6.63.109':139
'12.##6.113.36':139
'12.##6.45.90':139
'12.##6.12.60':139
'12.##6.177.157':139
'12.##6.195.246':445
'12.##6.147.141':445
'12.##6.152.145':445
'12.#46.8.28':445
'12.##6.168.127':445
'12.##6.46.223':445
'12.##6.219.0':445
'12.##6.120.66':445
'12.##6.87.147':445
'12.##6.132.243':445
'12.##6.225.218':445
'12.##6.171.132':445
'12.##6.23.87':445
'12.##6.77.137':445
'12.##6.114.223':445
'12.##6.142.77':445
'12.##6.181.90':445
'12.##6.94.200':445
'12.##6.108.90':445
'12.##6.156.235':445
'12.##6.105.177':445
'12.##6.145.144':445
'12.##6.76.113':445
'12.##6.96.154':445
'12.##6.65.237':445
'12.##6.172.117':139
'12.##6.1.174':139
'12.##6.129.247':139
'12.##6.47.252':139
'12.##6.122.12':139
'12.##6.240.91':445
'12.##6.254.189':445
'12.##6.242.180':445
'12.##6.48.240':445
'12.##6.55.59':445
'12.##6.201.247':445
'12.##6.96.224':445
'12.##6.37.59':445
'12.##6.128.250':445
'12.##6.70.185':445
'12.##6.159.236':445
'12.##6.104.69':445
'12.##6.153.213':445
'12.##6.144.222':445
'12.##6.145.22':445
'12.##6.95.208':445
'12.##6.15.78':445
'12.##6.99.206':445
'12.##6.221.192':445
'12.##6.194.210':445
'12.##6.37.115':445
'12.##6.246.87':445
'12.##6.159.164':445
'12.##6.199.124':445
'12.##6.179.29':445
'12.##6.172.140':445
'12.##6.31.198':445
'12.##6.113.194':445
'12.##6.144.240':445
'12.##6.145.144':139
'12.##6.156.235':139
'12.##6.76.113':139
'12.##6.108.90':139
'12.##6.96.154':139
'12.##6.105.177':139
'12.##6.221.192':139
'12.##6.194.210':139
'12.##6.37.115':139
'12.##6.246.87':139
'12.##6.159.164':139
'12.##6.114.223':139
'12.##6.181.90':139
'12.##6.240.91':139
'12.##6.254.189':139
'12.##6.48.240':139
'12.##6.201.247':139
'12.##6.55.59':139
'12.##6.77.137':139
'12.##6.142.77':139
'12.##6.94.200':139
'12.##6.65.237':139
'12.##6.242.180':139
'12.##6.145.22':139
'12.##6.153.213':139
'12.##6.15.78':139
'12.##6.104.69':139
'12.##6.95.208':139
'12.##6.144.222':139
'12.##6.53.91':139
'12.##6.129.137':139
'12.##6.165.221':139
'12.##6.219.227':139
'12.##6.51.235':139
'12.##6.37.59':139
'12.##6.31.198':139
'12.##6.179.29':139
'12.##6.144.240':139
'12.##6.199.124':139
'12.##6.113.194':139
'12.##6.172.140':139
'12.##6.128.250':139
'12.##6.96.224':139
'12.##6.159.236':139
'12.##6.70.185':139
'12.##6.99.206':139
'12.##6.219.227':445
'12.##6.113.229':139
'12.##6.170.109':139
'12.##6.36.156':139
'12.##6.41.151':139
'12.##6.99.40':139
'12.##6.112.177':139
'12.##6.1.220':139
'12.##6.99.107':139
'12.##6.14.206':139
'12.##6.167.189':139
'12.##6.17.109':139
'12.##6.115.245':139
'12.##6.56.167':139
'12.##6.9.212':139
'12.##6.123.115':139
'12.##6.29.40':139
'12.##6.144.199':139
'12.##6.135.42':139
'12.##6.163.178':139
'12.##6.91.203':139
'12.##6.195.62':139
'12.##6.107.45':139
'12.##6.85.123':139
'12.##6.219.55':445
'12.##6.143.219':445
'12.#46.35.1':445
'12.##6.56.77':445
'12.##6.228.91':445
'12.##6.253.143':445
'12.##6.8.100':445
'12.##6.73.180':445
'12.#46.57.8':445
'12.##6.219.252':445
'12.##6.79.219':445
'12.##6.64.19':445
'12.##6.60.53':445
'12.##6.124.104':445
'12.##6.130.6':445
'12.##6.128.155':139
'12.##6.180.116':445
'12.##6.153.89':445
'12.##6.65.130':445
'12.##6.35.145':445
'12.##6.158.117':445
'12.##6.133.73':445
'12.##6.94.215':445
'12.##6.254.189':9988
'12.##6.221.192':9988
'12.##6.113.194':9988
'12.##6.48.240':9988
'12.##6.94.200':9988
'12.##6.55.59':9988
'12.##6.60.53':139
'12.##6.153.89':139
'12.##6.130.6':139
'12.##6.96.154':9988
'12.##6.180.116':139
'12.##6.246.87':9988
'12.##6.129.137':445
'12.##6.47.252':445
'12.##6.53.91':445
'12.##6.51.235':445
'12.##6.165.221':445
'12.##6.122.12':445
'12.##6.199.124':9988
'12.##6.108.90':9988
'12.##6.1.174':445
'12.##6.129.247':445
'12.##6.172.117':445
'12.#46.57.8':139
'12.##6.8.100':139
'12.##6.79.219':139
'12.##6.253.143':139
'12.##6.219.252':139
'12.##6.73.180':139
'12.##6.147.118':139
'12.##6.74.236':139
'12.##6.126.196':139
'12.##6.23.87':139
'12.##6.239.22':139
'12.##6.143.219':139
'12.##6.158.117':139
'12.##6.65.130':139
'12.##6.94.215':139
'12.##6.124.104':139
'12.##6.133.73':139
'12.##6.35.145':139
'12.#46.35.1':139
'12.##6.219.55':139
'12.##6.228.91':139
'12.##6.64.19':139
'12.##6.56.77':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней