Trojan.DownLoader10.6413

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1132 -dm 7 7 %TEMP%\WER0710.dir00\svchost.exe.mdmp 16325836412031936

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER0710.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#3.108.184':445
'20#.#3.169.49':445
'20#.#3.244.193':445
'20#.#3.215.70':445
'20#.#3.84.105':445
'20#.#3.13.108':445
'20#.#3.136.79':445
'20#.#3.135.13':445
'20#.#3.31.248':445
'20#.#3.12.98':445
'20#.#3.71.162':445
'20#.#3.198.108':445
'20#.#3.230.247':445
'20#.#3.103.245':445
'20#.#3.26.169':445
'20#.#3.215.26':445
'20#.#3.151.181':139
'20#.#3.147.169':445
'20#.#3.195.78':445
'20#.#3.62.118':445
'20#.#3.250.244':445
'20#.#3.18.222':445
'20#.#3.201.175':445
'20#.#3.142.89':139
'20#.#3.61.254':139
'20#.#3.254.60':139
'20#.#3.147.113':139
'20#.#3.60.182':139
'20#.#3.17.212':139
'20#.#3.234.60':139
'20#.#3.78.238':139
'20#.23.3.31':139
'20#.#3.53.155':139
'20#.#3.10.244':139
'20#.#3.117.218':445
'20#.#3.80.117':139
'20#.#3.108.124':445
'20#.#3.132.201':445
'20#.#3.113.136':445
'20#.#3.10.57':139
'20#.#3.229.172':139
'20#.#3.228.113':139
'20#.#3.189.249':139
'20#.#3.204.109':139
'20#.#3.216.203':139
'20#.#3.169.49':139
'20#.#3.136.79':139
'20#.#3.201.175':139
'20#.#3.108.124':139
'20#.#3.135.13':139
'20#.#3.132.201':139
'20#.#3.13.108':139
'20#.#3.49.196':445
'20#.#3.113.136':139
'20#.#3.108.184':139
'20#.#3.31.248':139
'20#.#3.62.118':139
'20#.#3.18.222':139
'20#.#3.71.162':139
'20#.#3.117.218':139
'20#.#3.250.244':139
'20#.#3.195.78':139
'20#.#3.147.169':139
'20#.#3.84.105':139
'20#.#3.12.98':139
'20#.#3.244.193':139
'20#.#3.49.196':139
'20#.#3.120.46':445
'20#.#3.155.75':445
'20#.#3.35.65':445
'20#.#3.22.21':445
'20#.#3.155.179':445
'20#.#3.55.153':445
'20#.#3.185.94':445
'20#.#3.248.178':445
'20#.#3.91.26':445
'20#.#3.178.86':445
'20#.#3.243.99':445
'20#.#3.253.201':445
'20#.#3.111.162':445
'20#.#3.55.154':445
'20#.#3.162.19':445
'20#.#3.39.41':445
'20#.#3.176.126':445
'20#.#3.180.145':445
'20#.#3.170.20':445
'20#.#3.199.170':445
'20#.#3.3.245':445
'20#.#3.29.139':445
'20#.#3.153.57':445
'20#.#3.108.181':445
'20#.#3.199.208':445
'20#.#3.78.238':445
'20#.#3.194.186':445
'20#.#3.208.147':445
'20#.#3.1.139':445
'20#.23.4.97':445
'20#.#3.60.182':445
'20#.#3.168.20':445
'20#.#3.31.79':445
'20#.#3.210.19':445
'20#.#3.254.60':445
'20#.23.3.31':445
'20#.#3.142.89':445
'20#.#3.147.113':445
'20#.#3.53.155':445
'20#.#3.87.118':445
'20#.#3.201.33':445
'20#.#3.61.254':445
'20#.#3.117.92':445
'20#.#3.133.212':445
'20#.#3.77.124':445
'20#.#3.10.244':445
'20#.#3.89.226':445
'20#.#3.149.81':445
'20#.#3.57.169':445
'20#.#3.127.142':445
'20#.#3.175.60':445
'20#.#3.208.146':445
'20#.#3.79.97':445
'20#.#3.39.232':445
'20#.#3.170.155':445
'20#.#3.157.91':445
'20#.#3.140.17':445
'20#.#3.20.104':445
'20#.#3.8.219':445
'20#.#3.224.199':445
'20#.#3.55.221':445
'20#.#3.17.212':445
'20#.23.0.34':445
'20#.#3.2.166':445
'20#.#3.99.135':445
'20#.#3.101.34':445
'20#.#3.117.181':445
'20#.#3.212.204':445
'20#.#3.108.181':139
'20#.#3.127.142':139
'20#.#3.39.232':139
'20#.#3.208.147':139
'20#.#3.1.139':139
'20#.#3.77.124':139
'20#.#3.57.169':139
'20#.#3.157.91':139
'20#.#3.194.186':139
'20#.#3.117.92':139
'20#.#3.201.33':139
'20#.#3.2.166':139
'20#.#3.99.135':139
'20#.#3.133.212':139
'20#.#3.31.79':139
'20#.#3.168.20':139
'20#.#3.210.19':139
'20#.23.4.97':139
'20#.#3.199.208':139
'20#.23.0.34':139
'20#.#3.175.60':139
'20#.#3.87.118':139
'20#.#3.140.17':139
'20#.#3.174.84':445
'20#.#3.80.117':445
'20#.#3.151.181':445
'20#.#3.111.118':139
'20#.#3.101.34':139
'20#.#3.10.57':445
'20#.#3.229.172':445
'20#.#3.228.113':445
'20#.#3.189.249':445
'20#.#3.204.109':445
'20#.#3.216.203':445
'20#.#3.117.181':139
'20#.#3.149.81':139
'20#.#3.55.221':139
'20#.#3.170.155':139
'20#.#3.79.97':139
'20#.#3.20.104':139
'20#.#3.208.146':139
'20#.#3.224.199':139
'20#.#3.8.219':139
'20#.#3.212.204':139
'20#.#3.89.226':139
'20#.#3.215.70':139
'20#.#3.39.59':445
'20#.#3.189.195':445
'20#.#3.58.118':445
'20#.#3.138.76':445
'20#.#3.88.109':445
'20#.#3.131.55':445
'20#.#3.193.13':445
'20#.#3.141.10':445
'20#.#3.14.52':445
'20#.#3.153.39':445
'20#.#3.129.123':445
'20#.#3.136.41':139
'20#.#3.171.135':139
'20#.#3.107.74':139
'20#.#3.17.192':139
'20#.#3.58.225':139
'20#.#3.166.172':139
'20#.#3.114.177':445
'20#.#3.4.252':445
'20#.#3.168.118':445
'20#.#3.55.70':445
'20#.#3.112.174':445
'20#.#3.51.56':445
'20#.#3.56.230':445
'20#.#3.31.242':445
'20#.#3.50.126':445
'20#.#3.57.130':445
'20#.#3.189.105':445
'20#.#3.242.142':445
'20#.#3.223.221':445
'20#.23.5.6':445
'20#.#3.201.115':445
'20#.#3.87.103':445
'20#.#3.97.87':445
'20#.#3.127.148':445
'20#.#3.137.230':445
'20#.#3.26.193':445
'20#.#3.79.31':445
'20#.#3.198.252':445
'20#.#3.240.198':445
'20#.#3.169.157':445
'20#.#3.78.81':445
'20#.#3.115.111':445
'20#.#3.130.188':445
'20#.#3.32.210':445
'20#.#3.141.10':139
'20#.#3.14.52':139
'20#.#3.131.55':139
'20#.#3.129.123':139
'20#.#3.189.195':139
'20#.#3.193.13':139
'20#.#3.78.81':139
'20#.#3.189.105':139
'20#.#3.115.111':139
'20#.#3.26.193':139
'20#.#3.137.230':139
'20#.#3.112.174':139
'20#.#3.56.230':139
'20#.#3.138.76':139
'20#.#3.88.109':139
'20#.#3.168.118':139
'20#.#3.55.70':139
'20#.#3.39.59':139
'20#.#3.153.39':139
'20#.#3.58.118':139
'20#.#3.4.252':139
'20#.#3.114.177':139
'20#.#3.130.188':139
'20#.#3.201.115':139
'20#.23.5.6':139
'20#.#3.223.221':139
'20#.#3.87.103':139
'20#.#3.97.87':139
'20#.#3.55.156':139
'20#.#3.32.196':139
'20#.#3.62.70':139
'20#.#3.23.100':139
'20#.#3.211.158':139
'20#.#3.99.212':139
'20#.#3.240.198':139
'20#.#3.169.157':139
'20#.#3.79.31':139
'20#.#3.57.130':139
'20#.#3.32.210':139
'20#.#3.198.252':139
'20#.#3.242.142':139
'20#.#3.31.242':139
'20#.#3.50.126':139
'20#.#3.127.148':139
'20#.#3.51.56':139
'20#.#3.211.158':9988
'20#.#3.169.157':9988
'20#.#3.57.130':9988
'20#.#3.97.87':9988
'20#.#3.23.100':9988
'20#.#3.166.172':9988
'20#.#3.176.126':139
'20#.#3.162.19':139
'20#.#3.39.41':139
'20#.#3.29.139':139
'20#.#3.120.46':139
'20#.#3.14.52':9988
'20#.#3.107.74':9988
'20#.#3.99.212':9988
'20#.#3.50.126':9988
'20#.#3.127.148':9988
'20#.#3.223.221':9988
'20#.#3.55.156':9988
'20#.#3.189.105':9988
'20#.23.5.6':9988
'20#.#3.32.196':9988
'20#.#3.112.174':9988
'20#.#3.111.162':139
'20#.#3.248.178':139
'20#.#3.178.86':139
'20#.#3.253.201':139
'20#.#3.22.21':139
'20#.#3.155.179':139
'20#.#3.91.26':139
'20#.#3.198.108':139
'20#.#3.230.247':139
'20#.#3.103.245':139
'20#.#3.26.169':139
'20#.#3.215.26':139
'20#.#3.3.245':139
'20#.#3.170.20':139
'20#.#3.153.57':139
'20#.#3.180.145':139
'20#.#3.55.154':139
'20#.#3.199.170':139
'20#.#3.185.94':139
'20#.#3.55.153':139
'20#.#3.243.99':139
'20#.#3.155.75':139
'20#.#3.35.65':139
'20#.#3.136.41':9988
'20#.#3.129.123':9988
'20#.#3.137.230':9988
'20#.#3.166.172':445
'20#.#3.240.198':9988
'20#.#3.115.111':9988
'20#.#3.189.195':9988
'20#.#3.201.115':9988
'20#.#3.88.109':9988
'20#.#3.39.59':9988
'20#.#3.58.225':9988
'20#.#3.23.100':445
'20#.#3.32.196':445
'20#.#3.211.158':445
'20#.#3.55.156':445
'20#.#3.99.212':445
'20#.#3.17.192':445
'20#.#3.136.41':445
'20#.#3.171.135':445
'20#.#3.107.74':445
'20#.#3.58.225':445
'20#.#3.62.70':445
'20#.#3.32.210':9988
'20#.#3.131.55':9988
'20#.#3.26.193':9988
'20#.#3.4.252':9988
'20#.#3.141.10':9988
'20#.#3.58.118':9988
'20#.#3.17.192':9988
'20#.#3.56.230':9988
'20#.#3.62.70':9988
'20#.#3.171.135':9988
'20#.#3.31.242':9988
'20#.#3.87.103':9988
'20#.#3.153.39':9988
'20#.#3.55.70':9988
'20#.#3.114.177':9988
'20#.#3.242.142':9988
'20#.#3.130.188':9988
'20#.#3.138.76':9988
'20#.#3.193.13':9988
'20#.#3.198.252':9988
'20#.#3.79.31':9988
'20#.#3.168.118':9988
'20#.#3.51.56':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней