Trojan.DownLoader9.41604

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER9714.dir00\svchost.exe.mdmp 16325836412032748

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER9714.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#85.191.179':139
'20#.#85.210.191':139
'20#.#85.157.236':139
'20#.#85.213.167':139
'20#.#85.213.14':445
'20#.#85.14.211':139
'20#.#85.67.48':139
'20#.#85.171.66':139
'20#.#85.48.184':139
'20#.#85.107.15':139
'20#.#85.106.8':139
'20#.#85.167.252':139
'20#.#85.190.190':445
'20#.#85.183.69':445
'20#.#85.77.62':445
'20#.#85.241.35':445
'20#.#85.197.156':445
'20#.#85.175.239':445
'20#.#85.81.233':445
'20#.#85.122.250':139
'20#.#85.227.17':445
'20#.#85.219.114':445
'20#.#85.218.219':445
'20#.#85.171.66':445
'20#.#85.231.211':445
'20#.#85.48.184':445
'20#.#85.213.167':445
'20#.#85.14.211':445
'20#.#85.106.8':445
'20#.#85.157.236':445
'20#.#85.209.88':445
'20#.#85.107.15':445
'20#.#85.189.231':445
'20#.#85.207.30':445
'20#.#85.210.191':445
'20#.#85.209.88':139
'20#.#85.207.30':139
'20#.#85.189.231':139
'20#.#85.211.171':139
'20#.#85.231.211':139
'20#.#85.34.150':139
'20#.#85.191.179':445
'20#.#85.67.48':445
'20#.#85.167.252':445
'20#.#85.122.250':445
'20#.#85.211.171':445
'20#.#85.229.131':139
'20#.#85.77.62':139
'20#.#85.190.190':139
'20#.#85.197.156':139
'20#.#85.241.35':139
'20#.#85.183.69':139
'20#.#85.227.17':139
'20#.#85.81.233':139
'20#.#85.218.219':139
'20#.#85.175.239':139
'20#.#85.219.114':139
'20#.#85.156.168':139
'20#.#85.10.131':139
'20#.#85.29.13':139
'20#.#85.144.163':139
'20#.#85.47.253':139
'20#.#85.164.47':139
'20#.#85.91.176':139
'20#.#85.27.10':139
'20#.#85.44.188':139
'20#.#85.9.227':139
'20#.#85.87.110':139
'20#.#85.17.101':139
'20#.#85.29.13':445
'20#.#85.87.110':445
'20#.#85.91.176':445
'20#.#85.144.163':445
'20#.#85.10.131':445
'20#.#85.17.101':445
'20#.#85.156.168':445
'20#.#85.229.131':445
'20#.#85.44.188':445
'20#.#85.27.10':445
'20#.#85.9.227':445
'20#.#85.164.47':445
'20#.#85.181.66':445
'20#.#85.237.212':445
'20#.#85.14.50':445
'20#.#85.213.14':139
'20#.#85.88.251':445
'20#.#85.230.198':445
'20#.#85.204.9':445
'20#.#85.47.253':445
'20#.#85.21.8':445
'20#.#85.218.179':445
'20#.#85.28.164':445
'20#.#85.34.150':445
'20#.#85.25.243':445
'20#.#85.203.204':445
'20#.#85.240.183':445
'20#.#85.190.210':445
'20#.#85.247.183':445
'20#.#85.100.137':445
'20#.#85.135.209':139
'20#.#85.16.194':139
'20#.#85.138.65':445
'20#.#85.176.95':445
'20#.#85.111.82':139
'20#.#85.79.62':445
'20#.#85.166.79':445
'20#.#85.208.133':445
'20#.#85.221.165':445
'20#.#85.79.84':445
'20#.#85.89.222':445
'20#.#85.236.224':445
'20#.#85.225.242':445
'20#.#85.66.243':445
'20#.#85.93.197':445
'20#.#85.17.187':445
'20#.#85.134.91':445
'20#.#85.111.82':445
'20#.#85.135.209':445
'20#.#85.205.202':139
'20#.#85.130.195':139
'20#.#85.102.166':139
'20#.#85.204.38':445
'20#.#85.40.50':445
'20#.#85.31.241':445
'20#.#85.49.223':445
'20#.#85.44.34':445
'20#.#85.16.194':445
'20#.#85.102.84':139
'20#.#85.40.50':139
'20#.#85.31.241':139
'20#.#85.49.223':139
'20#.#85.44.34':139
'20#.#85.204.38':139
'20#.#85.25.14':139
'20#.#85.31.181':139
'20#.#85.84.58':139
'20#.#85.243.198':139
'20#.#85.116.156':139
'20#.#85.134.32':139
'20#.#85.221.165':139
'20#.#85.89.222':139
'20#.#85.166.79':139
'20#.#85.45.160':139
'20#.#85.79.84':139
'20#.#85.236.224':139
'20#.#85.93.197':139
'20#.#85.225.242':139
'20#.#85.134.91':139
'20#.#85.208.133':139
'20#.#85.17.187':139
'20#.#85.220.98':139
'20#.#85.107.190':139
'20#.#85.45.126':139
'20#.#85.92.234':139
'20#.#85.84.242':139
'20#.#85.149.123':139
'20#.#85.175.39':139
'20#.#85.107.208':139
'20#.#85.113.37':139
'20#.#85.25.223':139
'20#.#85.103.102':139
'20#.#85.166.103':139
'20#.#85.175.39':445
'20#.#85.166.103':445
'20#.#85.45.126':445
'20#.#85.149.123':445
'20#.#85.107.190':445
'20#.#85.25.223':445
'20#.#85.45.160':445
'20#.#85.113.37':445
'20#.#85.220.98':445
'20#.#85.103.102':445
'20#.#85.107.208':445
'20#.#85.84.242':445
'20#.#85.190.210':139
'20#.#85.240.183':139
'20#.#85.247.183':139
'20#.#85.66.243':139
'20#.#85.79.62':139
'20#.#85.25.243':139
'20#.#85.203.204':139
'20#.#85.92.234':445
'20#.#85.138.65':139
'20#.#85.176.95':139
'20#.#85.100.137':139
'20#.#85.21.8':139
'20#.#85.18.212':445
'20#.#85.29.230':445
'20#.#85.10.48':445
'20#.#85.20.105':445
'20#.#85.141.254':445
'20#.#85.128.42':445
'20#.#85.57.212':445
'20#.#85.106.16':445
'20#.#85.254.74':445
'20#.#85.173.79':445
'20#.#85.162.86':445
'20#.#85.74.186':445
'20#.#85.197.155':139
'20#.#85.249.98':139
'20#.#85.164.147':139
'20#.#85.88.89':139
'20#.#85.30.160':139
'20#.#85.43.204':445
'20#.#85.247.4':445
'20#.#85.61.88':445
'20#.#85.84.170':445
'20#.#85.9.87':445
'20#.#85.81.250':445
'20#.#85.240.254':445
'20#.#85.117.81':445
'20#.#85.20.28':445
'20#.#85.126.9':445
'20#.#85.212.39':445
'20#.#85.177.116':445
'20#.#85.80.64':445
'20#.#85.86.63':445
'20#.#85.58.221':445
'20#.#85.128.177':445
'20#.#85.163.128':445
'20#.#85.233.252':445
'20#.#85.161.126':445
'20#.#85.37.15':445
'20#.#85.64.133':445
'20#.#85.55.237':445
'20#.#85.248.36':445
'20#.#85.156.73':445
'20#.#85.158.188':445
'20#.#85.30.234':445
'20#.#85.84.250':445
'20#.#85.0.226':445
'20#.#85.172.42':445
'20#.#85.254.74':139
'20#.#85.57.212':139
'20#.#85.162.86':139
'20#.#85.128.42':139
'20#.#85.173.79':139
'20#.#85.106.16':139
'20#.#85.161.126':139
'20#.#85.37.15':139
'20#.#85.64.133':139
'20#.#85.55.237':139
'20#.#85.248.36':139
'20#.#85.29.230':139
'20#.#85.84.170':139
'20#.#85.247.4':139
'20#.#85.43.204':139
'20#.#85.9.87':139
'20#.#85.81.250':139
'20#.#85.61.88':139
'20#.#85.10.48':139
'20#.#85.18.212':139
'20#.#85.141.254':139
'20#.#85.74.186':139
'20#.#85.20.105':139
'20#.#85.58.221':139
'20#.#85.80.64':139
'20#.#85.163.128':139
'20#.#85.177.116':139
'20#.#85.128.177':139
'20#.#85.86.63':139
'20#.#85.58.25':139
'20#.#85.97.222':139
'20#.#85.170.149':139
'20#.#85.207.224':139
'20#.#85.232.14':139
'20#.#85.117.81':139
'20#.#85.84.250':139
'20#.#85.158.188':139
'20#.#85.172.42':139
'20#.#85.156.73':139
'20#.#85.0.226':139
'20#.#85.30.234':139
'20#.#85.20.28':139
'20#.#85.240.254':139
'20#.#85.212.39':139
'20#.#85.233.252':139
'20#.#85.126.9':139
'20#.#85.207.224':445
'20#.#85.211.40':445
'20#.#85.71.215':445
'20#.#85.9.240':445
'20#.#85.192.20':139
'20#.#85.14.192':139
'20#.#85.1.24':445
'20#.#85.179.33':445
'20#.#85.125.198':445
'20#.#85.29.129':445
'20#.#85.231.233':445
'20#.#85.240.5':445
'20#.#85.42.202':139
'20#.#85.106.235':139
'20#.#85.247.106':139
'20#.#85.81.250':9988
'20#.#85.54.86':139
'20#.#85.61.88':9988
'20#.#85.18.212':9988
'20#.#85.151.198':139
'20#.#85.194.206':139
'20#.#85.184.141':139
'20#.#85.80.57':139
'20#.#85.178.230':139
'20#.#85.14.50':139
'20#.#85.88.251':139
'20#.#85.14.192':445
'20#.#85.42.202':445
'20#.#85.192.20':445
'20#.#85.181.66':139
'20#.#85.230.198':139
'20#.#85.204.9':139
'20#.#85.237.212':139
'20#.#85.218.179':139
'20#.#85.28.164':139
'20#.#85.194.206':445
'20#.#85.86.154':445
'20#.#85.154.150':445
'20#.#85.54.86':445
'20#.#85.151.86':445
'20#.#85.134.198':445
'20#.#85.106.235':445
'20#.#85.247.106':445
'20#.#85.178.230':445
'20#.#85.184.141':445
'20#.#85.80.57':445
'20#.#85.151.198':445
'20#.#85.156.73':9988
'20#.#85.43.204':9988
'20#.#85.254.74':9988
'20#.#85.57.212':9988
'20#.#85.20.105':9988
'20#.#85.158.188':9988
'20#.#85.84.250':9988
'20#.#85.55.237':9988
'20#.#85.173.79':9988
'20#.#85.233.252':9988
'20#.#85.172.42':9988
'20#.#85.128.42':9988
'20#.#85.97.222':445
'20#.#85.88.89':445
'20#.#85.58.25':445
'20#.#85.232.14':445
'20#.#85.170.149':445
'20#.#85.30.160':445
'20#.#85.30.234':9988
'20#.#85.126.9':9988
'20#.#85.249.98':445
'20#.#85.164.147':445
'20#.#85.197.155':445
'20#.#85.240.5':139
'20#.#85.29.129':139
'20#.#85.231.233':139
'20#.#85.71.215':139
'20#.#85.1.24':139
'20#.#85.179.33':139
'20#.#85.154.150':139
'20#.#85.86.154':139
'20#.#85.151.86':139
'20#.#85.125.198':139
'20#.#85.134.198':139
'20#.#85.9.240':139
'20#.#85.207.224':9988
'20#.#85.240.254':9988
'20#.#85.248.36':9988
'20#.#85.212.39':9988
'20#.#85.29.230':9988
'20#.#85.80.64':9988
'20#.#85.84.170':9988
'20#.#85.211.40':139
'20#.#85.9.87':9988
'20#.#85.74.186':9988
'20#.#85.232.14':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней