Trojan.DownLoader10.9255

Техническая информация

Для обеспечения автозапуска и распространения:

Создает следующие сервисы:

[<HKLM>\SYSTEM\ControlSet001\Services\MSWindows] 'Start' = '00000002'

Вредоносные функции:

Создает и запускает на исполнение:

'<SYSTEM32>\urdvxc.exe' /uninstallservice patch:<Полный путь к вирусу>
'<SYSTEM32>\urdvxc.exe' /service
'<SYSTEM32>\urdvxc.exe' /installservice
'<SYSTEM32>\urdvxc.exe' /start

Запускает на исполнение:

'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER274b.dir00\svchost.exe.mdmp 16325836412032952

Скрывает следующие процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
<SYSTEM32>\urdvxc.exe
%TEMP%\WER274b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe

Самоудаляется.

Сетевая активность:

Подключается к:

'21#.#3.181.33':139
'21#.#3.82.166':139
'21#.#3.6.218':139
'21#.#3.37.14':139
'21#.#3.118.170':139
'21#.#3.167.156':9988
'21#.#3.253.171':9988
'21#.#3.19.21':9988
'21#.#3.157.241':139
'21#.#3.64.225':9988
'21#.#3.164.224':139
'21#.#3.149.110':139
'21#.#3.211.100':139
'21#.#3.120.135':139
'21#.#3.134.106':139
'21#.43.82.8':139
'21#.#3.117.251':139
'21#.#3.70.129':139
'21#.#3.151.129':139
'21#.#3.136.53':139
'21#.#3.86.244':9988
'21#.#3.141.28':9988
'21#.#3.66.21':9988
'21#.#3.218.109':9988
'21#.#3.227.219':9988
'21#.#3.136.192':9988
'21#.#3.181.22':9988
'21#.#3.15.71':9988
'21#.#3.28.96':9988
'21#.#3.79.227':9988
'21#.#3.33.16':9988
'21#.#3.167.122':9988
'21#.#3.96.128':9988
'21#.#3.102.107':9988
'21#.#3.92.73':9988
'21#.#3.18.227':9988
'21#.#3.21.150':9988
'21#.#3.17.134':9988
'21#.#3.241.97':9988
'21#.#3.85.190':9988
'21#.#3.41.247':139
'21#.#3.36.156':139
'21#.#3.16.163':139
'21#.#3.247.87':139
'21#.#3.45.123':139
'21#.#3.134.71':139
'21#.#3.110.81':139
'21#.#3.153.159':139
'21#.#3.112.19':139
'21#.#3.61.173':139
'21#.#3.162.25':139
'21#.#3.217.39':139
'21#.#3.115.191':139
'21#.#3.60.137':139
'21#.#3.222.95':139
'21#.#3.72.134':139
'21#.#3.46.214':139
'21#.#3.123.203':139
'21#.#3.21.125':139
'21#.#3.169.18':139
'21#.#3.190.15':139
'21#.#3.186.247':139
'21#.#3.85.193':139
'21#.#3.78.56':139
'21#.#3.25.104':139
'21#.#3.47.170':139
'21#.#3.93.100':139
'21#.#3.83.153':139
'21#.#3.123.45':139
'21#.#3.228.72':139
'21#.#3.103.157':139
'21#.#3.200.90':139
'21#.#3.64.29':139
'21#.#3.237.232':139
'21#.#3.186.67':139
'21#.#3.226.51':139
'21#.#3.81.200':139
'21#.#3.0.238':139
'21#.#3.8.233':139
'21#.#3.7.186':139
'21#.#3.45.13':9988
'21#.#3.51.75':445
'21#.#3.183.230':445
'21#.#3.4.207':445
'21#.#3.74.170':445
'21#.#3.92.73':445
'21#.#3.237.33':445
'21#.#3.228.16':445
'21#.#3.85.190':445
'21#.#3.171.113':445
'21#.#3.215.212':445
'21#.#3.241.97':445
'21#.#3.18.227':445
'21#.#3.47.120':445
'21#.#3.253.138':445
'21#.#3.23.200':445
'21#.#3.79.227':445
'21#.#3.144.176':445
'21#.#3.86.244':445
'21#.#3.247.84':445
'21#.#3.171.21':445
'21#.#3.21.150':445
'21#.#3.66.21':445
'21#.#3.18.17':445
'21#.#3.6.183':445
'21#.#3.51.229':445
'21#.#3.122.34':445
'21#.#3.60.142':445
'21#.#3.227.110':445
'21#.#3.54.54':445
'21#.#3.233.160':445
'21#.#3.92.100':445
'21#.#3.168.123':445
'21#.#3.53.27':445
'21#.#3.43.35':445
'21#.#3.87.137':445
'21#.#3.251.162':445
'21#.#3.184.190':445
'21#.#3.19.21':445
'21#.#3.5.170':445
'21#.#3.167.122':445
'21#.#3.206.234':9988
'21#.#3.53.40':9988
'21#.#3.54.130':9988
'21#.#3.60.142':9988
'21#.#3.151.56':9988
'21#.#3.6.160':9988
'21#.#3.9.160':9988
'21#.#3.29.44':9988
'21#.#3.124.224':9988
'21#.#3.251.162':9988
'21#.#3.104.17':9988
'21#.#3.209.217':9988
'21#.#3.61.190':9988
'21#.#3.189.89':9988
'21#.#3.87.137':9988
'21#.#3.128.224':9988
'21#.#3.196.174':9988
'21#.#3.233.160':9988
'21#.#3.50.115':9988
'21#.#3.187.4':9988
'21#.#3.166.123':445
'21#.#3.233.56':445
'21#.#3.101.98':445
'21#.#3.109.145':445
'21#.#3.119.211':445
'21#.#3.227.71':445
'21#.#3.29.119':445
'21#.#3.121.247':445
'21#.#3.223.38':445
'21#.#3.29.33':445
'21#.#3.11.135':445
'21#.#3.102.107':445
'21#.#3.15.108':445
'21#.#3.78.51':9988
'21#.#3.53.40':445
'21#.#3.141.28':445
'21#.#3.225.201':445
'21#.#3.206.234':445
'21#.#3.16.130':445
'21#.#3.33.16':445
'21#.#3.52.11':445
'21#.#3.69.128':445
'21#.#3.238.128':445
'21#.#3.166.148':445
'21#.#3.174.161':445
'21#.#3.122.242':445
'21#.#3.121.143':445
'21#.#3.202.196':445
'21#.#3.117.251':445
'21#.#3.92.248':445
'21#.#3.118.170':445
'21#.#3.70.129':445
'21#.#3.200.90':445
'21#.#3.89.91':445
'21#.#3.177.157':445
'21#.#3.82.166':445
'21#.#3.155.221':445
'21#.#3.181.33':445
'21#.#3.106.60':445
'21#.#3.211.100':445
'21#.#3.120.135':445
'21#.#3.64.29':445
'21#.#3.103.112':445
'21#.#3.169.18':445
'21#.#3.110.81':445
'21#.#3.8.233':445
'21#.#3.203.156':445
'21#.#3.45.123':445
'21#.#3.237.232':445
'21#.#3.78.56':445
'21#.#3.116.3':445
'21#.#3.142.72':445
'21#.#3.233.77':445
'21#.#3.62.215':445
'21#.#3.6.136':445
'21#.#3.196.238':445
'21#.#3.247.211':445
'21#.#3.110.50':445
'21#.#3.30.241':445
'21#.#3.198.67':445
'21#.#3.162.117':445
'21#.#3.81.167':445
'21#.#3.217.157':445
'21#.#3.219.184':445
'21#.#3.4.183':445
'21#.#3.85.193':445
'21#.#3.123.45':445
'21#.#3.66.52':445
'21#.#3.226.140':445
'21#.#3.190.15':445
'21#.#3.79.244':445
'21#.#3.119.110':445
'21#.#3.214.73':445
'21#.#3.8.149':445
'21#.#3.222.142':445
'21#.#3.57.236':445
'21#.#3.60.176':445
'21#.#3.104.251':445
'21#.#3.218.186':445
'21#.#3.166.72':445
'21#.#3.185.152':445
'21#.#3.154.189':445
'21#.#3.115.191':445
'21#.#3.93.100':445
'21#.#3.7.204':445
'21#.#3.153.159':445
'21#.#3.226.51':445
'21#.#3.98.117':445
'21#.#3.123.203':445
'21#.#3.81.200':445
'21#.#3.228.72':445
'21#.#3.145.17':445
'21#.#3.47.170':445
'21#.#3.95.172':445
'21#.#3.186.247':445
'21#.#3.164.224':445
'21#.#3.60.137':445
'21#.#3.36.156':445
'21#.#3.83.153':445
'21#.#3.140.86':445
'21#.#3.34.72':445
'21#.#3.81.167':139
'21#.#3.4.183':139
'21#.#3.57.236':139
'21#.#3.247.211':139
'21#.#3.166.72':139
'21#.#3.198.67':139
'21#.#3.119.110':139
'21#.#3.30.241':139
'21#.#3.162.117':139
'21#.#3.142.72':139
'21#.#3.8.149':139
'21#.#3.6.136':139
'21#.#3.62.215':139
'21#.#3.217.157':139
'21#.#3.104.251':139
'21#.#3.110.50':139
'21#.#3.116.3':139
'21#.#3.60.176':139
'21#.#3.218.186':139
'21#.#3.233.77':139
'21#.#3.41.203':139
'21#.#3.95.172':139
'21#.#3.66.52':139
'21#.#3.145.17':139
'21#.#3.34.72':139
'21#.#3.185.152':139
'21#.#3.154.189':139
'21#.#3.140.86':139
'21#.#3.106.60':139
'21#.#3.7.204':139
'21#.#3.89.91':139
'21#.#3.98.117':139
'21#.#3.203.156':139
'21#.#3.166.148':139
'21#.#3.52.11':139
'21#.#3.203.253':139
'21#.#3.177.157':139
'21#.#3.219.77':139
'21#.#3.103.112':139
'21#.#3.226.140':139
'21#.#3.0.238':445
'21#.#3.186.67':445
'21#.#3.61.173':445
'21#.#3.103.157':445
'21#.#3.16.163':445
'21#.#3.157.241':445
'21#.#3.37.14':445
'21#.#3.149.110':445
'21#.#3.25.104':445
'21#.#3.41.203':445
'21#.#3.162.25':445
'21#.#3.72.134':445
'21#.#3.112.19':445
'21#.#3.134.106':445
'21#.#3.222.95':445
'21#.#3.134.71':445
'21#.#3.41.247':445
'21#.#3.217.39':445
'21#.#3.247.87':445
'21#.#3.21.125':445
'21#.#3.219.184':139
'21#.#3.238.128':139
'21#.#3.202.196':139
'21#.#3.122.242':139
'21#.#3.193.189':139
'21#.#3.121.143':139
'21#.#3.196.238':139
'21#.#3.69.128':139
'21#.#3.222.142':139
'21#.#3.174.161':139
'21#.#3.79.244':139
'21#.#3.21.168':445
'21#.#3.136.53':445
'21#.#3.6.218':445
'21#.43.82.8':445
'21#.#3.234.92':445
'21#.#3.92.248':139
'21#.#3.214.73':139
'21#.#3.72.56':139
'21#.#3.155.221':139
'21#.#3.254.208':445
'21#.#3.53.239':139
'21#.#3.45.103':139
'21#.#3.17.150':139
'21#.#3.241.97':139
'21#.#3.139.147':139
'21#.#3.253.171':139
'21#.#3.227.71':139
'21#.#3.121.247':139
'21#.#3.121.57':139
'21#.#3.47.120':139
'21#.#3.88.101':139
'21#.#3.223.38':139
'21#.#3.24.162':139
'21#.#3.101.98':139
'21#.#3.187.4':139
'21#.#3.23.200':139
'21#.#3.181.22':139
'21#.#3.199.69':139
'21#.#3.29.33':139
'21#.#3.167.156':139
'21#.#3.192.253':139
'21#.#3.92.73':139
'21#.#3.249.198':139
'21#.#3.130.217':139
'21#.#3.107.180':139
'21#.#3.171.21':139
'21#.#3.86.244':139
'21#.#3.247.84':139
'21#.#3.97.135':139
'21#.#3.75.51':139
'21#.#3.17.107':139
'21#.43.78.9':139
'21#.#3.151.56':139
'21#.#3.105.101':139
'21#.#3.253.138':139
'21#.#3.18.227':139
'21#.#3.29.119':139
'21#.#3.88.113':139
'21#.#3.61.190':139
'21#.#3.15.71':139
'21#.#3.149.157':139
'21#.#3.141.28':139
'21#.#3.77.235':139
'21#.#3.33.16':139
'21#.#3.200.48':139
'21#.#3.136.192':139
'21#.#3.53.109':139
'21#.#3.139.7':139
'21#.43.4.19':139
'21#.#3.225.201':139
'21#.#3.28.96':139
'21#.#3.13.213':139
'21#.#3.64.225':139
'21#.#3.184.26':139
'21#.#3.101.43':139
'21#.#3.44.72':139
'21#.#3.146.9':139
'21#.#3.206.234':139
'21#.#3.102.107':139
'21#.#3.16.130':139
'21#.#3.154.223':139
'21#.#3.99.60':139
'21#.#3.234.27':139
'21#.#3.75.164':139
'21#.#3.119.211':139
'21#.#3.233.56':139
'21#.#3.191.215':139
'21#.#3.157.147':139
'21#.#3.128.224':139
'21#.#3.166.123':139
'21#.#3.124.224':139
'21#.#3.33.237':139
'21#.#3.236.61':139
'21#.#3.226.17':139
'21#.#3.45.13':139
'21#.#3.18.145':139
'21#.#3.96.128':139
'21#.#3.19.135':139
'21#.#3.109.145':139
'21#.#3.20.63':139
'21#.#3.218.109':139
'21#.#3.59.96':139
'21#.#3.18.17':139
'21#.#3.5.239':139
'21#.#3.155.90':139
'21#.#3.251.162':139
'21#.#3.17.134':139
'21#.#3.208.209':139
'21#.#3.23.88':139
'21#.#3.104.17':139
'21#.#3.92.193':139
'21#.#3.245.17':139
'21#.#3.21.225':139
'21#.#3.231.63':139
'21#.#3.53.27':139
'21#.#3.6.160':139
'21#.#3.43.35':139
'21#.#3.227.208':139
'21#.#3.237.33':139
'21#.#3.29.44':139
'21#.#3.209.217':139
'21#.#3.160.245':139
'21#.#3.236.3':139
'21#.#3.68.253':139
'21#.#3.66.21':139
'21#.#3.233.160':139
'21#.#3.19.21':139
'21#.#3.161.46':139
'21#.#3.129.153':139
'21#.#3.11.12':139
'21#.#3.184.190':139
'21#.#3.54.54':139
'21#.#3.228.16':139
'21#.#3.87.137':139
'21#.#3.78.78':139
'21#.#3.9.160':139
'21#.#3.6.183':139
'21#.#3.51.229':139
'21#.#3.21.150':139
'21#.#3.168.123':139
'21#.#3.167.122':139
'21#.#3.98.252':139
'21#.43.8.22':139
'21#.#3.204.193':139
'21#.#3.1.204':139
'21#.#3.4.207':139
'21#.#3.202.77':139
'21#.#3.35.248':139
'21#.#3.147.67':139
'21#.#3.255.22':139
'21#.#3.59.150':139
'21#.#3.248.198':139
'21#.#3.248.6':139
'21#.#3.79.227':139
'21#.#3.111.161':139
'21#.#3.50.115':139
'21#.#3.149.224':139
'21#.#3.51.75':139
'21#.#3.74.170':139
'21#.#3.105.218':139
'21#.#3.144.176':139
'21#.#3.46.129':139
'21#.#3.120.53':139
'21#.43.6.52':139
'21#.#3.171.113':139
'21#.#3.92.100':139
'21#.#3.39.199':139
'21#.#3.20.216':139
'21#.#3.61.83':139
'21#.#3.87.44':139
'21#.43.84.5':139
'21#.#3.85.190':139
'21#.#3.183.230':139
'21#.#3.231.55':139
'21#.#3.73.65':139
'21#.#3.136.185':139
'21#.#3.5.170':139
'21#.#3.6.172':139
'21#.#3.235.113':139
'21#.#3.215.212':139
'21#.#3.96.176':139
'21#.#3.96.128':445
'21#.#3.234.27':445
'21#.#3.18.145':445
'21#.#3.191.215':445
'21#.#3.157.147':445
'21#.#3.105.101':445
'21#.#3.17.107':445
'21#.#3.151.56':445
'21#.#3.253.171':445
'21#.43.78.9':445
'21#.#3.88.101':445
'21#.#3.19.135':445
'21#.#3.187.4':445
'21#.#3.146.9':445
'21#.#3.24.162':445
'21#.#3.75.164':445
'21#.#3.128.224':445
'21#.#3.99.60':445
'21#.#3.154.223':445
'21#.#3.167.156':445
'21#.#3.105.218':445
'21#.#3.111.161':445
'21#.#3.97.135':445
'21#.#3.218.109':445
'21#.#3.75.51':445
'21#.#3.130.217':445
'21#.#3.107.180':445
'21#.#3.248.6':445
'21#.#3.248.198':445
'21#.#3.50.115':445
'21#.#3.53.239':445
'21#.#3.15.71':445
'21#.#3.181.22':445
'21#.#3.88.113':445
'21#.#3.199.69':445
'21#.#3.121.57':445
'21#.#3.61.190':445
'21#.#3.45.103':445
'21#.#3.139.147':445
'21#.#3.17.150':445
'21#.#3.9.112':445
'21#.#3.10.58':445
'21#.#3.213.131':445
'21#.#3.182.7':445
'21#.#3.189.89':445
'21#.#3.101.43':445
'21#.43.72.8':445
'21#.#3.64.225':445
'21#.#3.28.96':445
'21#.#3.196.174':445
'21#.#3.64.24':445
'21#.#3.203.233':445
'21#.#3.54.130':445
'21#.#3.39.222':445
'21#.#3.156.152':445
'21#.#3.133.106':445
'21#.#3.143.180':445
'21#.#3.85.195':445
'21#.#3.52.209':445
'21#.#3.221.199':445
'21#.43.4.19':445
'21#.#3.226.17':445
'21#.#3.200.48':445
'21#.#3.136.192':445
'21#.#3.44.72':445
'21#.#3.124.224':445
'21#.#3.33.237':445
'21#.#3.45.13':445
'21#.#3.236.61':445
'21#.#3.53.109':445
'21#.#3.116.175':445
'21#.#3.139.198':445
'21#.#3.235.86':445
'21#.#3.227.219':445
'21#.#3.184.26':445
'21#.#3.149.157':445
'21#.#3.20.63':445
'21#.#3.77.235':445
'21#.#3.13.213':445
'21#.#3.139.7':445
'21#.#3.249.198':445
'21#.#3.60.142':139
'21#.#3.85.195':139
'21#.#3.53.40':139
'21#.#3.142.192':445
'21#.#3.254.208':139
'21#.#3.15.108':139
'21#.#3.227.110':139
'21#.#3.78.51':139
'21#.#3.133.106':139
'21#.#3.182.7':139
'21#.#3.23.88':445
'21#.#3.5.239':445
'21#.#3.17.134':445
'21#.#3.155.90':445
'21#.#3.227.208':445
'21#.#3.78.51':445
'21#.#3.142.192':139
'21#.#3.59.96':445
'21#.#3.9.160':445
'21#.#3.104.17':445
'21#.#3.116.175':139
'21#.#3.196.174':139
'21#.#3.10.58':139
'21#.#3.213.131':139
'21#.#3.235.86':139
'21#.#3.11.135':139
'21#.43.72.8':139
'21#.#3.9.112':139
'21#.#3.139.198':139
'21#.#3.227.219':139
'21#.#3.203.233':139
'21#.#3.189.89':139
'21#.#3.143.180':139
'21#.#3.156.152':139
'21#.#3.52.209':139
'21#.#3.39.222':139
'21#.#3.221.199':139
'21#.#3.54.130':139
'21#.#3.64.24':139
'21#.#3.122.34':139
'21#.#3.255.22':445
'21#.#3.202.77':445
'21#.#3.59.150':445
'21#.#3.46.129':445
'21#.43.8.22':445
'21#.#3.68.253':445
'21#.#3.78.78':445
'21#.#3.73.65':445
'21#.#3.35.248':445
'21#.#3.231.55':445
'21#.#3.149.224':445
'21#.#3.147.67':445
'21#.#3.1.204':445
'21#.#3.192.253':445
'21#.#3.204.193':445
'21#.43.6.52':445
'21#.#3.98.252':445
'21#.#3.6.172':445
'21#.#3.136.185':445
'21#.#3.96.176':445
'21#.#3.87.44':445
'21#.#3.245.17':445
'21#.#3.231.63':445
'21#.#3.61.83':445
'21#.#3.39.199':445
'21#.#3.209.217':445
'21#.#3.29.44':445
'21#.#3.6.160':445
'21#.#3.20.216':445
'21#.#3.21.225':445
'21#.#3.11.12':445
'21#.#3.129.153':445
'21#.#3.236.3':445
'21#.#3.208.209':445
'21#.#3.160.245':445
'21#.#3.120.53':445
'21#.#3.235.113':445
'21#.43.84.5':445
'21#.#3.161.46':445
'21#.#3.92.193':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней