Trojan.DownLoader12.29100

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER25e8.dir00\svchost.exe.mdmp 16325836412032340

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER25e8.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#1.144.56':139
'20#.#1.33.75':139
'20#.#1.129.93':139
'20#.#1.33.29':139
'20#.#1.200.240':139
'20#.#1.192.217':139
'20#.#1.163.55':139
'20#.#1.159.15':139
'20#.#1.64.213':139
'20#.#1.22.186':139
'20#.#1.61.58':139
'20#.#1.161.138':139
'20#.#1.132.5':139
'20#.#1.74.23':139
'20#.#1.99.157':445
'20#.#1.60.179':445
'20#.#1.32.202':139
'20#.#1.57.24':139
'20#.#1.220.154':139
'20#.#1.186.189':139
'20#.#1.163.19':139
'20#.#1.11.113':139
'20#.#1.33.29':445
'20#.#1.200.240':445
'20#.#1.61.58':445
'20#.#1.32.202':445
'20#.#1.57.24':445
'20#.#1.64.213':445
'20#.#1.22.186':445
'20#.#1.33.75':445
'20#.#1.129.93':445
'20#.#1.144.56':445
'20#.#1.220.154':445
'20#.#1.51.247':139
'20#.#1.68.96':139
'20#.#1.23.177':139
'20#.#1.58.120':139
'20#.#1.78.58':139
'20#.#1.186.189':445
'20#.#1.163.19':445
'20#.#1.132.5':445
'20#.#1.74.23':445
'20#.#1.161.138':445
'20#.#1.123.89':139
'20#.#1.123.123':139
'20#.#1.89.53':139
'20#.#1.234.85':139
'20#.#1.54.65':139
'20#.#1.133.19':445
'20#.#1.34.102':445
'20#.#1.60.179':139
'20#.#1.12.175':139
'20#.#1.99.157':139
'20#.#1.123.98':139
'20#.#1.138.216':139
'20#.#1.90.226':139
'20#.#1.9.160':139
'20#.#1.211.174':139
'20#.#1.120.205':139
'20#.#1.31.20':139
'20#.#1.218.51':139
'20#.#1.102.67':139
'20#.#1.207.8':139
'20#.#1.35.120':139
'20#.#1.52.125':445
'20#.#1.123.98':445
'20#.#1.234.85':445
'20#.#1.218.51':445
'20#.#1.102.67':445
'20#.#1.31.20':445
'20#.#1.123.123':445
'20#.#1.12.175':445
'20#.#1.123.89':445
'20#.#1.54.65':445
'20#.#1.89.53':445
'20#.#1.35.120':445
'20#.#1.175.131':445
'20#.#1.211.174':445
'20#.#1.64.21':445
'20#.#1.196.162':445
'20#.#1.236.84':445
'20#.#1.90.226':445
'20#.#1.207.8':445
'20#.#1.138.216':445
'20#.#1.120.205':445
'20#.#1.9.160':445
'20#.#1.148.59':445
'20#.#1.11.214':445
'20#.#1.36.155':445
'20#.#1.147.151':445
'20#.#1.185.82':445
'20#.#1.169.8':139
'20#.#1.247.106':139
'20#.#1.41.82':139
'20#.#1.139.246':445
'20#.#1.81.136':445
'20#.#1.187.122':445
'20#.#1.48.199':445
'20#.#1.77.48':445
'20#.#1.120.151':445
'20#.#1.10.143':445
'20#.#1.195.137':445
'20#.#1.29.59':445
'20#.#1.136.237':445
'20#.41.9.99':445
'20#.#1.199.241':445
'20#.#1.219.55':445
'20#.#1.106.171':139
'20#.#1.62.63':139
'20#.#1.78.187':139
'20#.#1.166.193':139
'20#.#1.23.135':139
'20#.#1.137.202':139
'20#.#1.227.127':139
'20#.#1.205.170':139
'20#.#1.184.13':139
'20#.#1.137.135':139
'20#.#1.13.138':139
'20#.#1.251.181':139
'20#.#1.4.198':139
'20#.#1.90.182':139
'20#.#1.44.16':139
'20#.#1.18.125':139
'20#.#1.65.218':139
'20#.#1.103.181':139
'20#.#1.40.74':139
'20#.#1.120.174':139
'20#.#1.95.91':139
'20#.#1.213.94':139
'20#.#1.147.5':139
'20#.#1.50.103':139
'20#.#1.38.140':139
'20#.#1.104.122':139
'20#.#1.83.118':139
'20#.#1.120.151':139
'20#.#1.48.199':139
'20#.#1.195.137':139
'20#.#1.38.178':139
'20#.#1.10.143':139
'20#.#1.178.107':139
'20#.#1.11.113':445
'20#.#1.58.120':445
'20#.#1.163.55':445
'20#.#1.159.15':445
'20#.#1.192.217':445
'20#.#1.68.96':445
'20#.#1.138.102':139
'20#.#1.51.247':445
'20#.#1.78.58':445
'20#.#1.23.177':445
'20#.#1.77.48':139
'20#.#1.178.107':445
'20#.#1.104.122':445
'20#.#1.138.102':445
'20#.#1.139.246':139
'20#.#1.81.136':139
'20#.#1.50.103':445
'20#.#1.38.178':445
'20#.#1.147.5':445
'20#.#1.83.118':445
'20#.#1.38.140':445
'20#.#1.11.214':139
'20#.#1.29.59':139
'20#.#1.136.237':139
'20#.41.9.99':139
'20#.#1.199.241':139
'20#.#1.219.55':139
'20#.#1.36.155':139
'20#.#1.148.59':139
'20#.#1.185.82':139
'20#.#1.187.122':139
'20#.#1.147.151':139
'20#.#1.41.197':445
'20#.#1.149.41':445
'20#.41.43.8':445
'20#.#1.35.187':445
'20#.#1.37.188':445
'20#.#1.240.14':445
'20#.#1.112.189':445
'20#.#1.105.168':445
'20#.#1.155.132':445
'20#.#1.130.253':445
'20#.#1.30.253':445
'20#.#1.16.237':139
'20#.41.34.1':139
'20#.#1.201.185':139
'20#.#1.83.242':139
'20#.#1.186.74':139
'20#.#1.70.12':445
'20#.#1.190.170':445
'20#.#1.48.237':139
'20#.#1.244.126':139
'20#.#1.227.141':139
'20#.#1.55.115':445
'20#.#1.221.108':445
'20#.#1.248.205':445
'20#.#1.134.62':445
'20#.#1.251.204':445
'20#.#1.140.135':445
'20#.#1.88.223':445
'20#.#1.204.52':445
'20#.#1.223.139':445
'20#.#1.28.249':445
'20#.#1.140.28':445
'20#.#1.20.240':445
'20#.#1.12.227':445
'20#.41.32.0':445
'20#.#1.64.162':445
'20#.#1.241.250':445
'20#.#1.236.170':445
'20#.#1.132.216':445
'20#.#1.219.207':445
'20#.#1.127.226':445
'20#.#1.221.246':445
'20#.#1.150.181':445
'20#.#1.241.250':139
'20#.#1.236.170':139
'20#.#1.55.115':139
'20#.#1.240.14':139
'20#.#1.112.189':139
'20#.#1.221.246':139
'20#.#1.150.181':139
'20#.41.32.0':139
'20#.#1.64.162':139
'20#.#1.12.227':139
'20#.#1.105.168':139
'20#.#1.35.187':139
'20#.#1.37.188':139
'20#.#1.30.253':139
'20#.#1.190.170':139
'20#.#1.70.12':139
'20#.#1.155.132':139
'20#.#1.130.253':139
'20#.#1.149.41':139
'20#.41.43.8':139
'20#.#1.41.197':139
'20#.#1.127.226':139
'20#.#1.120.60':139
'20#.#1.94.49':139
'20#.#1.151.21':139
'20#.#1.88.223':139
'20#.#1.204.52':139
'20#.#1.120.94':139
'20#.#1.106.2':139
'20#.#1.76.135':139
'20#.#1.165.164':139
'20#.#1.94.20':139
'20#.#1.223.139':139
'20#.#1.251.204':139
'20#.#1.140.135':139
'20#.#1.20.240':139
'20#.#1.132.216':139
'20#.#1.219.207':139
'20#.#1.28.249':139
'20#.#1.140.28':139
'20#.#1.248.205':139
'20#.#1.134.62':139
'20#.#1.221.108':139
'20#.#1.123.85':445
'20#.#1.242.250':445
'20#.#1.244.58':445
'20#.#1.183.161':445
'20#.#1.221.105':445
'20#.#1.101.108':445
'20#.#1.218.35':445
'20#.#1.221.178':445
'20#.#1.21.167':445
'20#.#1.17.202':445
'20#.#1.50.45':139
'20#.#1.98.36':139
'20#.#1.55.237':139
'20#.#1.44.26':139
'20#.#1.222.69':139
'20#.#1.218.221':139
'20#.#1.217.215':139
'20#.#1.189.171':139
'20#.#1.13.36':139
'20#.#1.24.243':139
'20#.#1.97.159':139
'20#.#1.27.215':445
'20#.#1.133.19':139
'20#.#1.34.102':139
'20#.#1.50.45':445
'20#.#1.217.215':445
'20#.#1.189.171':445
'20#.#1.64.21':139
'20#.#1.175.131':139
'20#.#1.236.84':139
'20#.#1.52.125':139
'20#.#1.196.162':139
'20#.#1.13.36':445
'20#.#1.222.69':445
'20#.#1.218.221':445
'20#.#1.57.129':445
'20#.#1.67.161':445
'20#.#1.147.53':445
'20#.#1.24.243':445
'20#.#1.97.159':445
'20#.#1.55.237':445
'20#.#1.44.26':445
'20#.#1.98.36':445
'20#.#1.227.141':445
'20#.#1.48.237':445
'20#.#1.244.126':445
'20#.#1.16.237':445
'20#.41.34.1':445
'20#.#1.70.12':9988
'20#.#1.149.41':9988
'20#.#1.30.253':9988
'20#.#1.190.170':9988
'20#.#1.35.187':9988
'20#.#1.201.185':445
'20#.#1.165.164':445
'20#.#1.94.20':445
'20#.#1.94.49':445
'20#.#1.151.21':445
'20#.#1.120.60':445
'20#.#1.83.242':445
'20#.#1.186.74':445
'20#.#1.106.2':445
'20#.#1.76.135':445
'20#.#1.120.94':445
'20#.#1.155.132':9988
'20#.#1.221.178':139
'20#.#1.101.108':139
'20#.#1.17.202':139
'20#.#1.242.250':139
'20#.#1.21.167':139
'20#.#1.147.53':139
'20#.#1.57.129':139
'20#.#1.67.161':139
'20#.#1.218.35':139
'20#.#1.27.215':139
'20#.#1.123.85':139
'20#.#1.236.170':9988
'20#.#1.64.162':9988
'20#.#1.241.250':9988
'20#.#1.130.253':9988
'20#.#1.55.115':9988
'20#.#1.221.105':139
'20#.#1.244.58':139
'20#.#1.183.161':139
'20#.#1.12.227':9988
'20#.#1.20.240':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней