Trojan.DownLoader9.37880

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1112 -dm 7 7 %TEMP%\WER85ec.dir00\svchost.exe.mdmp 16325836412032536

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WER85ec.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'20#.#23.34.4':139
'20#.#23.53.178':139
'20#.#23.10.11':139
'20#.#23.138.3':139
'20#.#23.138.3':445
'20#.#23.34.4':445
'20#.#23.85.241':139
'20#.#23.53.178':445
'20#.#23.10.11':445
'20#.#23.255.65':139
'20#.#23.87.82':445
'20#.#23.238.228':445
'20#.#23.38.213':445
'20#.#23.71.15':445
'20#.#23.95.241':445
'20#.#23.87.127':445
'20#.#23.127.34':445
'20#.#23.80.83':445
'20#.#23.0.66':445
'20#.#23.150.249':139
'20#.#23.27.176':139
'20#.#23.223.98':139
'20#.#23.115.24':139
'20#.#23.172.33':139
'20#.#23.77.30':139
'20#.#23.98.84':139
'20#.#23.252.163':139
'20#.#23.31.229':139
'20#.#23.9.246':139
'20#.#23.148.207':139
'20#.#23.157.55':139
'20#.#23.23.86':139
'20#.#23.31.77':139
'20#.#23.255.65':445
'20#.#23.133.46':139
'20#.#23.71.229':139
'20#.#23.223.156':139
'20#.#23.109.236':139
'20#.#23.129.28':445
'20#.#23.28.243':445
'20#.#23.208.185':445
'20#.#23.242.183':445
'20#.#23.58.8':445
'20#.#23.109.54':445
'20#.#23.127.109':445
'20#.#23.60.23':445
'20#.#23.54.68':445
'20#.#23.127.34':139
'20#.#23.71.15':139
'20#.#23.87.82':139
'20#.#23.40.133':139
'20#.#23.38.213':139
'20#.#23.238.228':139
'20#.#23.0.66':139
'20#.#23.87.127':139
'20#.#23.95.241':139
'20#.#23.80.83':139
'20#.#23.84.140':445
'20#.#23.91.190':445
'20#.#23.89.186':445
'20#.#23.133.139':445
'20#.#23.228.137':445
'20#.#23.69.92':445
'20#.#23.40.133':445
'20#.#23.172.98':445
'20#.#23.20.86':445
'20#.#23.61.103':445
'20#.#23.122.238':445
'20#.#23.222.122':445
'20#.#23.38.127':445
'20#.#23.135.136':445
'20#.#23.136.222':445
'20#.#23.228.244':445
'20#.#23.244.228':445
'20#.#23.7.98':445
'20#.#23.244.152':445
'20#.#23.27.70':139
'20#.#23.54.178':445
'20#.#23.75.153':445
'20#.#23.184.30':445
'20#.#23.50.223':445
'20#.#23.59.148':445
'20#.#23.178.119':445
'20#.#23.133.46':445
'20#.#23.91.7':445
'20#.#23.246.152':445
'20#.#23.18.241':445
'20#.#23.31.131':445
'20#.#23.115.24':445
'20#.#23.27.70':445
'20#.#23.231.31':445
'20#.#23.153.89':445
'20#.#23.25.43':445
'20#.#23.77.30':445
'20#.#23.57.112':445
'20#.#23.98.84':445
'20#.#23.133.198':445
'20#.#23.179.7':445
'20#.#23.95.231':139
'20#.#23.231.19':139
'20#.#23.121.17':445
'20#.#23.210.14':445
'20#.#23.7.65':445
'20#.#23.14.179':445
'20#.#23.8.10':445
'20#.#23.20.56':445
'20#.#23.150.249':445
'20#.#23.46.245':445
'20#.#23.223.98':445
'20#.#23.27.176':445
'20#.#23.71.229':445
'20#.#23.104.231':445
'20#.#23.55.210':139
'20#.#23.171.74':445
'20#.#23.9.246':445
'20#.#23.54.178':139
'20#.#23.59.148':139
'20#.#23.184.30':139
'20#.#23.50.223':139
'20#.#23.75.153':139
'20#.#23.133.198':139
'20#.#23.178.119':139
'20#.#23.91.7':139
'20#.#23.246.152':139
'20#.#23.18.241':139
'20#.#23.171.74':139
'20#.#23.164.242':139
'20#.#23.57.112':139
'20#.#23.25.43':139
'20#.#23.104.231':139
'20#.#23.31.131':139
'20#.#23.231.31':139
'20#.#23.46.245':139
'20#.#23.153.89':139
'20#.#23.148.207':445
'20#.#23.223.156':445
'20#.#23.85.241':445
'20#.#23.157.55':445
'20#.#23.109.236':445
'20#.#23.172.33':445
'20#.#23.164.242':445
'20#.#23.31.229':445
'20#.#23.252.163':445
'20#.#23.23.86':445
'20#.#23.121.17':139
'20#.#23.14.179':139
'20#.#23.8.10':139
'20#.#23.71.83':139
'20#.#23.125.172':139
'20#.#23.7.65':139
'20#.#23.31.77':445
'20#.#23.179.7':139
'20#.#23.210.14':139
'20#.#23.166.75':139
'20#.#23.209.156':445
'20#.#23.227.102':139
'20#.#23.7.154':139
'20#.#23.131.6':445
'20#.#23.91.105':445
'20#.#23.47.183':445
'20#.#23.5.211':445
'20#.#23.43.195':445
'20#.#23.93.214':139
'20#.#23.11.182':139
'20#.#23.133.253':139
'20#.#23.90.237':139
'20#.#23.249.115':139
'20#.#23.97.136':139
'20#.#23.110.178':139
'20#.#23.30.73':139
'20#.223.8.7':139
'20#.#23.198.15':139
'20#.#23.81.129':445
'20#.#23.255.67':445
'20#.#23.154.111':445
'20#.#23.127.79':445
'20#.#23.4.89':445
'20#.#23.20.188':445
'20#.#23.137.170':445
'20#.#23.104.180':445
'20#.#23.208.12':445
'20#.#23.52.69':445
'20#.#23.76.79':445
'20#.#23.232.127':445
'20#.#23.85.223':445
'20#.#23.125.25':445
'20#.#23.27.32':445
'20#.#23.17.131':445
'20#.#23.78.109':445
'20#.#23.204.104':445
'20#.#23.32.232':445
'20#.#23.127.79':139
'20#.#23.78.109':139
'20#.#23.43.195':139
'20#.#23.52.69':139
'20#.#23.4.89':139
'20#.#23.32.232':139
'20#.#23.81.129':139
'20#.#23.154.111':139
'20#.#23.204.104':139
'20#.#23.131.6':139
'20#.#23.125.25':139
'20#.#23.27.32':139
'20#.#23.76.79':139
'20#.#23.91.105':139
'20#.#23.5.211':139
'20#.#23.85.223':139
'20#.#23.47.183':139
'20#.#23.209.156':139
'20#.#23.232.127':139
'20#.#23.39.31':139
'20#.#23.116.11':139
'20#.#23.109.20':139
'20#.#23.187.168':139
'20#.#23.24.79':139
'20#.#23.219.106':139
'20#.#23.172.85':139
'20#.#23.28.27':139
'20#.#23.204.39':139
'20#.#23.44.143':139
'20#.#23.104.180':139
'20#.#23.208.12':139
'20#.#23.255.67':139
'20#.#23.17.131':139
'20#.#23.20.188':139
'20#.#23.16.144':139
'20#.#23.137.247':139
'20#.#23.117.98':139
'20#.#23.137.170':139
'20#.#23.44.143':445
'20#.#23.242.183':139
'20#.#23.129.28':139
'20#.#23.185.54':445
'20#.#23.208.185':139
'20#.#23.28.243':139
'20#.#23.54.68':139
'20#.#23.109.54':139
'20#.#23.58.8':139
'20#.#23.60.23':139
'20#.#23.123.14':445
'20#.#23.204.104':9988
'20#.#23.32.232':9988
'20#.#23.185.54':139
'20#.#23.91.105':9988
'20#.#23.110.30':445
'20#.#23.55.42':445
'20#.#23.188.130':445
'20#.#23.170.197':445
'20#.#23.214.41':445
'20#.#23.133.139':139
'20#.#23.84.140':139
'20#.#23.61.103':139
'20#.#23.89.186':139
'20#.#23.91.190':139
'20#.#23.20.86':139
'20#.#23.69.92':139
'20#.#23.228.137':139
'20#.#23.172.98':139
'20#.#23.244.228':139
'20#.#23.135.136':139
'20#.#23.122.238':139
'20#.#23.127.109':139
'20#.#23.38.127':139
'20#.#23.222.122':139
'20#.#23.244.152':139
'20#.#23.228.244':139
'20#.#23.136.222':139
'20#.#23.7.98':139
'20#.#23.204.39':445
'20#.#23.90.237':445
'20#.#23.249.115':445
'20#.#23.28.27':445
'20#.#23.172.85':445
'20#.#23.97.136':445
'20#.223.8.7':445
'20#.#23.93.214':445
'20#.#23.133.253':445
'20#.#23.219.106':445
'20#.#23.16.144':445
'20#.#23.109.20':445
'20#.#23.117.98':445
'20#.#23.137.247':445
'20#.#23.187.168':445
'20#.#23.24.79':445
'20#.#23.11.182':445
'20#.#23.39.31':445
'20#.#23.116.11':445
'20#.#23.7.154':9988
'20#.#23.110.30':139
'20#.#23.97.136':9988
'20#.#23.90.237':9988
'20#.#23.170.197':139
'20#.#23.188.130':139
'20#.#23.123.14':139
'20#.#23.214.41':139
'20#.#23.55.42':139
'20#.#23.116.11':9988
'20#.#23.110.178':445
'20#.#23.30.73':445
'20#.#23.7.154':445
'20#.#23.166.75':445
'20#.#23.227.102':445
'20#.#23.125.25':9988
'20#.#23.47.183':9988
'20#.#23.198.15':445
'20#.#23.5.211':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней