Trojan.Packed.30129

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd277.dir00\svchost.exe.mdmp 16325836412029484

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERd277.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##1.124.26':139
'65.##1.30.213':139
'65.##1.196.208':139
'65.##1.60.25':139
'65.##1.209.15':139
'65.#51.6.31':139
'65.##1.125.126':139
'65.##1.202.28':139
'65.##1.66.174':139
'65.##1.214.24':139
'65.##1.127.229':139
'65.##1.47.246':139
'65.##1.194.239':139
'65.##1.16.57':139
'65.##1.136.219':139
'65.##1.166.170':139
'65.##1.212.51':139
'65.##1.15.200':139
'65.##1.213.220':139
'65.##1.189.254':139
'65.##1.10.127':139
'65.##1.70.165':139
'65.##1.104.201':139
'65.##1.66.98':445
'65.##1.240.173':445
'65.##1.87.161':445
'65.##1.57.104':139
'65.##1.135.113':445
'65.#51.85.7':445
'65.##1.188.201':445
'65.##1.219.170':445
'65.##1.229.72':445
'65.##1.96.47':445
'65.##1.202.101':445
'65.##1.36.91':139
'65.##1.19.86':139
'65.##1.81.109':139
'65.##1.103.104':139
'65.##1.202.103':139
'65.##1.96.175':139
'65.##1.93.172':139
'65.##1.72.69':139
'65.##1.24.241':139
'65.##1.56.175':139
'65.##1.106.0':139
'65.##1.219.184':139
'65.##1.245.180':445
'65.##1.219.59':445
'65.##1.176.237':445
'65.##1.129.150':445
'65.##1.176.53':445
'65.##1.249.21':445
'65.##1.164.223':445
'65.##1.90.65':445
'65.##1.200.137':445
'65.##1.93.237':445
'65.##1.254.168':445
'65.##1.151.102':445
'65.##1.243.84':445
'65.##1.216.135':445
'65.##1.152.7':445
'65.##1.135.152':445
'65.##1.39.243':445
'65.##1.27.140':445
'65.##1.111.162':445
'65.##1.140.21':445
'65.##1.31.39':445
'65.##1.131.15':445
'65.##1.205.191':445
'65.##1.229.72':139
'65.##1.188.201':139
'65.##1.202.101':139
'65.#51.85.7':139
'65.##1.96.47':139
'65.##1.219.170':139
'65.##1.27.209':139
'65.##1.115.176':139
'65.##1.83.136':139
'65.##1.242.37':139
'65.##1.115.4':139
'65.##1.40.124':445
'65.##1.123.144':445
'65.##1.184.1':445
'65.##1.175.79':445
'65.##1.132.30':445
'65.##1.44.20':445
'65.##1.66.98':139
'65.##1.240.173':139
'65.##1.87.161':139
'65.##1.135.95':445
'65.##1.135.113':139
'65.##1.242.37':445
'65.##1.225.209':139
'65.##1.99.24':139
'65.##1.159.244':139
'65.##1.70.240':139
'65.##1.149.238':139
'65.##1.99.225':139
'65.##1.117.219':139
'65.##1.46.76':139
'65.##1.76.163':139
'65.##1.127.59':139
'65.##1.172.26':139
'65.##1.150.166':139
'65.##1.195.217':139
'65.##1.126.117':139
'65.##1.68.244':139
'65.##1.16.69':139
'65.##1.179.195':139
'65.##1.121.233':139
'65.##1.136.221':139
'65.##1.15.193':139
'65.##1.52.78':139
'65.##1.217.191':139
'65.##1.207.189':139
'65.##1.199.56':139
'65.#51.33.7':139
'65.##1.38.16':139
'65.##1.25.38':139
'65.##1.68.37':139
'65.##1.130.237':139
'65.##1.97.73':139
'65.##1.31.30':139
'65.##1.73.47':139
'65.##1.49.130':139
'65.#51.27.7':139
'65.##1.161.226':139
'65.##1.48.24':139
'65.##1.176.179':139
'65.##1.93.31':139
'65.##1.157.73':139
'65.##1.166.227':139
'65.##1.232.43':139
'65.##1.86.11':139
'65.##1.179.182':139
'65.##1.164.240':139
'65.##1.32.202':139
'65.##1.214.76':139
'65.##1.15.200':445
'65.##1.213.220':445
'65.##1.189.254':445
'65.##1.10.127':445
'65.##1.70.165':445
'65.##1.60.25':445
'65.##1.30.213':445
'65.#51.6.31':445
'65.##1.124.26':445
'65.##1.209.15':445
'65.##1.196.208':445
'65.##1.115.176':445
'65.##1.219.184':445
'65.##1.27.209':445
'65.##1.115.4':445
'65.##1.83.136':445
'65.##1.136.219':445
'65.##1.194.239':445
'65.##1.212.51':445
'65.##1.47.246':445
'65.##1.166.170':445
'65.##1.16.57':445
'65.##1.214.24':445
'65.##1.93.172':445
'65.##1.72.69':445
'65.##1.24.241':445
'65.##1.56.175':445
'65.##1.106.0':445
'65.##1.57.104':445
'65.##1.2.146':139
'65.##1.154.152':139
'65.##1.250.82':139
'65.##1.243.53':139
'65.##1.8.246':139
'65.##1.202.28':445
'65.##1.104.201':445
'65.##1.125.126':445
'65.##1.127.229':445
'65.##1.66.174':445
'65.##1.103.104':445
'65.##1.19.86':445
'65.##1.96.175':445
'65.##1.36.91':445
'65.##1.202.103':445
'65.##1.81.109':445
'65.##1.101.173':445
'65.##1.91.97':445
'65.##1.35.120':445
'65.##1.207.191':445
'65.##1.71.20':445
'65.##1.27.174':445
'65.##1.16.120':445
'65.##1.122.51':445
'65.##1.30.92':445
'65.##1.29.233':445
'65.##1.48.153':445
'65.##1.50.83':445
'65.##1.77.12':139
'65.##1.87.230':139
'65.##1.106.156':139
'65.##1.10.53':139
'65.##1.57.178':139
'65.##1.200.69':445
'65.##1.165.226':445
'65.##1.66.231':445
'65.##1.81.68':445
'65.##1.240.184':445
'65.##1.104.240':445
'65.##1.48.110':445
'65.##1.252.236':445
'65.##1.59.253':445
'65.##1.196.225':445
'65.##1.143.222':445
'65.##1.127.92':445
'65.##1.251.128':445
'65.##1.89.199':445
'65.#51.8.81':445
'65.##1.126.127':445
'65.##1.71.153':445
'65.##1.106.95':445
'65.##1.69.117':445
'65.##1.214.145':445
'65.##1.228.179':445
'65.##1.89.75':445
'65.#51.6.79':445
'65.##1.57.207':445
'65.##1.52.84':445
'65.##1.222.169':445
'65.##1.84.165':445
'65.##1.153.58':445
'65.##1.207.148':445
'65.##1.17.230':139
'65.##1.29.233':139
'65.##1.122.51':139
'65.##1.50.83':139
'65.##1.16.120':139
'65.##1.48.153':139
'65.##1.30.92':139
'65.##1.228.179':139
'65.##1.69.117':139
'65.#51.6.79':139
'65.##1.48.110':139
'65.##1.89.75':139
'65.##1.81.68':139
'65.##1.165.226':139
'65.##1.104.240':139
'65.##1.200.69':139
'65.##1.240.184':139
'65.##1.66.231':139
'65.##1.91.97':139
'65.##1.35.120':139
'65.##1.207.191':139
'65.##1.71.20':139
'65.##1.27.174':139
'65.##1.214.145':139
'65.##1.126.127':139
'65.##1.89.199':139
'65.##1.106.95':139
'65.##1.251.128':139
'65.##1.71.153':139
'65.#51.8.81':139
'65.##1.81.227':139
'65.##1.41.48':139
'65.##1.71.141':139
'65.#51.1.93':139
'65.##1.125.118':139
'65.##1.84.165':139
'65.##1.52.84':139
'65.##1.207.148':139
'65.##1.57.207':139
'65.##1.153.58':139
'65.##1.222.169':139
'65.##1.252.236':139
'65.##1.59.253':139
'65.##1.196.225':139
'65.##1.143.222':139
'65.##1.127.92':139
'65.#51.1.93':445
'65.##1.200.137':139
'65.##1.164.223':139
'65.##1.254.168':139
'65.##1.249.21':139
'65.##1.93.237':139
'65.##1.90.65':139
'65.##1.184.1':139
'65.##1.40.124':139
'65.##1.132.30':139
'65.##1.205.191':139
'65.##1.175.79':139
'65.##1.140.21':139
'65.##1.27.140':139
'65.##1.131.15':139
'65.##1.39.243':139
'65.##1.31.39':139
'65.##1.111.162':139
'65.##1.245.180':139
'65.##1.219.59':139
'65.##1.176.237':139
'65.##1.129.150':139
'65.##1.176.53':139
'65.##1.123.144':139
'65.##1.119.201':445
'65.##1.71.105':445
'65.##1.177.252':445
'65.##1.124.62':445
'65.##1.253.151':445
'65.##1.51.195':445
'65.##1.41.18':445
'65.##1.65.227':445
'65.##1.84.15':445
'65.##1.29.106':445
'65.##1.199.186':445
'65.##1.144.134':445
'65.##1.120.4':445
'65.##1.44.93':445
'65.##1.44.20':139
'65.##1.135.95':139
'65.##1.88.116':445
'65.##1.37.103':445
'65.##1.113.103':445
'65.##1.223.208':445
'65.##1.104.230':445
'65.##1.4.247':445
'65.##1.243.84':139
'65.##1.50.83':9988
'65.##1.29.233':9988
'65.##1.91.97':9988
'65.##1.240.184':9988
'65.##1.71.20':9988
'65.#51.6.79':9988
'65.##1.44.93':139
'65.##1.144.134':139
'65.##1.71.153':9988
'65.##1.69.117':9988
'65.##1.214.145':9988
'65.##1.41.48':445
'65.##1.17.230':445
'65.##1.81.227':445
'65.##1.125.118':445
'65.##1.71.141':445
'65.##1.10.53':445
'65.##1.87.230':445
'65.##1.66.231':9988
'65.##1.77.12':445
'65.##1.57.178':445
'65.##1.106.156':445
'65.##1.120.4':139
'65.##1.84.15':139
'65.##1.41.18':139
'65.##1.199.186':139
'65.##1.51.195':139
'65.##1.29.106':139
'65.##1.65.227':139
'65.##1.216.135':139
'65.##1.151.102':139
'65.##1.135.152':139
'65.##1.101.173':139
'65.##1.152.7':139
'65.##1.223.208':139
'65.##1.37.103':139
'65.##1.4.247':139
'65.##1.88.116':139
'65.##1.104.230':139
'65.##1.113.103':139
'65.##1.119.201':139
'65.##1.71.105':139
'65.##1.177.252':139
'65.##1.124.62':139
'65.##1.253.151':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней