Trojan.DownLoader9.39665

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER1462.dir00\svchost.exe.mdmp 16325836412032484

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1462.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'66.##2.5.226':445
'66.##2.20.212':445
'66.#02.28.6':445
'66.##2.19.221':445
'66.##2.211.27':445
'66.##2.82.139':445
'66.##2.229.245':445
'66.##2.23.143':445
'66.##2.114.216':445
'66.##2.192.187':445
'66.##2.130.85':445
'66.##2.112.209':445
'66.##2.238.56':445
'66.##2.26.145':139
'66.##2.224.122':139
'66.##2.165.82':445
'66.##2.88.136':445
'66.##2.110.40':445
'66.##2.38.248':445
'66.#02.91.3':445
'66.##2.245.207':445
'66.##2.10.186':445
'66.##2.15.11':445
'66.##2.128.203':445
'66.##2.50.55':445
'66.##2.55.123':445
'66.##2.39.249':445
'66.##2.151.163':445
'66.##2.116.159':445
'66.##2.109.211':445
'66.##2.191.232':445
'66.##2.180.128':445
'66.##2.108.6':445
'66.##2.132.117':445
'66.##2.207.204':445
'66.#02.28.5':445
'66.##2.183.227':445
'66.##2.125.251':445
'66.##2.160.111':445
'66.##2.92.126':445
'66.##2.31.15':445
'66.##2.109.209':139
'66.##2.74.75':139
'66.##2.154.177':139
'66.##2.67.74':139
'66.##2.2.254':139
'66.##2.4.207':139
'66.##2.61.16':139
'66.##2.15.44':139
'66.##2.196.61':139
'66.##2.161.187':139
'66.##2.201.195':139
'66.##2.44.100':139
'66.##2.99.130':139
'66.##2.28.219':139
'66.##2.162.139':139
'66.##2.222.85':139
'66.##2.138.144':139
'66.##2.87.104':139
'66.##2.161.187':445
'66.##2.202.168':139
'66.##2.41.172':139
'66.##2.227.164':139
'66.##2.77.200':139
'66.##2.153.115':139
'66.##2.133.2':139
'66.##2.21.92':139
'66.##2.30.213':139
'66.##2.175.22':139
'66.##2.11.30':139
'66.##2.81.106':139
'66.##2.9.155':139
'66.##2.102.2':139
'66.##2.141.101':139
'66.##2.25.253':139
'66.##2.107.148':139
'66.##2.45.64':139
'66.##2.227.203':139
'66.##2.200.211':139
'66.##2.72.10':139
'66.##2.172.200':139
'66.##2.210.105':139
'66.##2.105.172':139
'66.##2.239.191':445
'66.##2.10.77':139
'66.##2.101.7':139
'66.##2.86.12':139
'66.##2.158.10':139
'66.##2.14.182':139
'66.##2.117.15':139
'66.##2.237.25':139
'66.##2.28.153':139
'66.##2.32.93':139
'66.##2.35.103':139
'66.##2.109.211':139
'66.##2.151.163':139
'66.##2.10.186':139
'66.##2.31.15':139
'66.##2.15.11':139
'66.##2.239.191':139
'66.##2.232.158':139
'66.##2.191.232':139
'66.##2.116.159':139
'66.##2.39.249':139
'66.##2.96.238':445
'66.##2.199.81':445
'66.##2.1.235':445
'66.##2.236.211':445
'66.##2.94.43':445
'66.##2.151.174':445
'66.##2.36.176':445
'66.##2.37.190':445
'66.##2.180.36':445
'66.##2.221.31':445
'66.##2.12.64':445
'66.##2.95.84':445
'66.##2.232.149':445
'66.##2.155.204':445
'66.##2.255.27':445
'66.##2.168.254':445
'66.##2.191.154':445
'66.##2.192.236':445
'66.##2.236.181':445
'66.##2.143.224':445
'66.##2.214.203':445
'66.##2.183.227':139
'66.#02.91.3':139
'66.##2.38.248':139
'66.##2.130.85':139
'66.##2.237.25':445
'66.##2.110.40':139
'66.##2.19.221':139
'66.##2.112.209':139
'66.##2.238.56':139
'66.##2.88.136':139
'66.##2.165.82':139
'66.##2.158.10':445
'66.##2.32.93':445
'66.##2.86.12':445
'66.##2.232.158':445
'66.##2.14.182':445
'66.##2.28.153':445
'66.##2.117.15':445
'66.##2.35.103':445
'66.##2.101.7':445
'66.##2.10.77':445
'66.##2.211.27':139
'66.##2.128.203':139
'66.##2.50.55':139
'66.##2.180.128':139
'66.##2.132.117':139
'66.#02.28.5':139
'66.##2.92.126':139
'66.##2.160.111':139
'66.##2.108.6':139
'66.##2.125.251':139
'66.##2.55.123':139
'66.##2.20.212':139
'66.##2.114.216':139
'66.##2.192.187':139
'66.#02.28.6':139
'66.##2.5.226':139
'66.##2.245.207':139
'66.##2.207.204':139
'66.##2.229.245':139
'66.##2.82.139':139
'66.##2.23.143':139
'66.##2.195.7':139
'66.##2.144.210':445
'66.##2.224.63':139
'66.##2.29.224':139
'66.##2.157.195':139
'66.##2.211.159':445
'66.##2.138.24':139
'66.##2.2.247':139
'66.##2.218.80':445
'66.##2.22.19':139
'66.##2.199.98':445
'66.##2.180.221':445
'66.##2.221.112':445
'66.##2.104.226':445
'66.##2.28.25':445
'66.##2.42.199':445
'66.##2.87.159':139
'66.##2.59.86':445
'66.##2.143.180':445
'66.##2.179.149':445
'66.##2.43.81':139
'66.#02.37.9':139
'66.##2.134.125':139
'66.##2.14.147':139
'66.##2.58.194':139
'66.##2.42.199':139
'66.##2.113.196':139
'66.##2.202.21':139
'66.##2.56.28':139
'66.##2.33.235':139
'66.##2.108.84':139
'66.##2.113.0':139
'66.##2.72.147':139
'66.##2.251.248':139
'66.##2.135.56':139
'66.##2.236.162':139
'66.##2.157.98':139
'66.##2.218.28':139
'66.##2.76.36':139
'66.##2.68.167':139
'66.##2.95.206':139
'66.##2.226.171':445
'66.##2.246.156':139
'66.##2.10.215':139
'66.##2.154.115':139
'66.#02.96.7':139
'66.##2.93.139':139
'66.##2.195.7':445
'66.##2.224.63':445
'66.##2.135.56':445
'66.##2.11.173':139
'66.##2.21.137':445
'66.##2.87.159':445
'66.##2.113.0':445
'66.##2.157.195':445
'66.##2.251.248':445
'66.##2.43.81':445
'66.##2.164.57':445
'66.##2.170.186':139
'66.##2.123.216':445
'66.##2.37.76':445
'66.##2.22.19':445
'66.##2.134.125':445
'66.##2.63.123':445
'66.##2.113.196':445
'66.#02.37.9':445
'66.##2.14.147':445
'66.##2.76.36':445
'66.##2.10.105':445
'66.##2.110.190':445
'66.##2.61.164':445
'66.##2.56.28':445
'66.##2.202.21':445
'66.##2.214.20':445
'66.##2.68.167':445
'66.##2.58.194':445
'66.##2.74.35':445
'66.##2.95.206':445
'66.##2.33.235':445
'66.##2.45.158':139
'66.##2.108.84':445
'66.##2.157.98':445
'66.##2.218.28':445
'66.##2.214.20':139
'66.##2.74.75':445
'66.##2.102.2':445
'66.##2.153.115':445
'66.##2.201.195':445
'66.##2.26.145':445
'66.##2.196.61':445
'66.##2.133.2':445
'66.##2.175.82':139
'66.##2.4.207':445
'66.##2.154.177':445
'66.##2.210.105':445
'66.##2.87.104':445
'66.##2.200.211':445
'66.##2.227.164':445
'66.##2.105.172':445
'66.##2.2.254':445
'66.##2.138.144':445
'66.##2.202.168':445
'66.##2.99.130':445
'66.##2.41.172':445
'66.##2.15.44':445
'66.##2.211.92':139
'66.##2.113.79':139
'66.##2.129.121':139
'66.##2.11.30':445
'66.##2.109.209':445
'66.##2.149.66':139
'66.##2.126.185':139
'66.##2.102.115':139
'66.##2.243.28':139
'66.#02.8.96':139
'66.##2.44.100':445
'66.##2.167.88':139
'66.##2.175.22':445
'66.##2.21.92':445
'66.##2.224.122':445
'66.##2.30.213':445
'66.##2.9.155':445
'66.##2.77.200':445
'66.##2.67.74':445
'66.##2.81.106':445
'66.##2.141.101':445
'66.##2.21.137':139
'66.##2.180.221':139
'66.##2.74.35':139
'66.##2.199.98':139
'66.##2.143.180':139
'66.##2.211.159':139
'66.##2.218.80':139
'66.##2.59.86':139
'66.##2.179.149':139
'66.##2.221.112':139
'66.##2.123.216':139
'66.##2.10.105':139
'66.##2.61.164':139
'66.##2.63.123':139
'66.##2.37.76':139
'66.##2.226.171':139
'66.##2.28.25':139
'66.##2.104.226':139
'66.##2.110.190':139
'66.##2.164.57':139
'66.##2.144.210':139
'66.##2.227.203':445
'66.##2.72.10':445
'66.##2.28.219':445
'66.##2.162.139':445
'66.##2.222.85':445
'66.##2.61.16':445
'66.##2.25.253':445
'66.##2.172.200':445
'66.##2.45.64':445
'66.##2.107.148':445
'66.##2.167.88':445
'66.##2.175.82':445
'66.##2.243.28':445
'66.##2.102.115':445
'66.##2.129.121':445
'66.##2.149.66':445
'66.##2.126.185':445
'66.##2.211.92':445
'66.##2.113.79':445
'66.#02.8.96':445
'66.##2.108.67':445
'66.##2.14.16':9988
'66.##2.185.52':9988
'66.##2.62.209':9988
'66.##2.231.22':9988
'66.##2.62.38':9988
'66.##2.101.240':9988
'66.##2.139.48':9988
'66.##2.38.11':9988
'66.##2.133.163':9988
'66.##2.229.94':9988
'66.##2.244.118':9988
'66.##2.223.172':9988
'66.##2.138.44':9988
'66.##2.138.3':9988
'66.##2.173.88':9988
'66.##2.38.244':9988
'66.##2.31.216':9988
'66.##2.255.45':9988
'66.##2.146.191':9988
'66.##2.250.120':9988
'66.##2.53.129':9988
'66.##2.250.120':445
'66.##2.244.118':445
'66.##2.45.191':445
'66.##2.50.144':445
'66.##2.170.159':445
'66.##2.216.226':445
'66.##2.38.244':445
'66.##2.156.161':445
'66.##2.62.38':445
'66.##2.46.51':445
'66.##2.188.63':445
'66.##2.138.3':445
'66.##2.154.202':445
'66.##2.56.137':9988
'66.##2.70.231':9988
'66.##2.66.48':445
'66.##2.255.45':445
'66.##2.63.135':445
'66.##2.138.44':445
'66.##2.255.63':445
'66.##2.188.63':9988
'66.##2.107.141':139
'66.##2.244.157':139
'66.##2.52.40':139
'66.##2.5.253':139
'66.##2.25.146':139
'66.##2.152.229':9988
'66.##2.186.6':9988
'66.##2.75.103':9988
'66.##2.2.189':139
'66.##2.142.2':139
'66.##2.26.56':139
'66.##2.30.247':139
'66.##2.20.163':139
'66.##2.72.105':139
'66.##2.120.102':139
'66.##2.186.121':139
'66.##2.121.76':139
'66.##2.53.23':139
'66.##2.114.32':139
'66.##2.56.114':139
'66.##2.144.63':9988
'66.##2.154.202':9988
'66.##2.229.133':9988
'66.##2.213.207':9988
'66.##2.70.96':9988
'66.##2.66.48':9988
'66.##2.34.164':9988
'66.##2.170.159':9988
'66.##2.46.51':9988
'66.##2.216.226':9988
'66.##2.255.63':9988
'66.##2.63.135':9988
'66.##2.27.94':9988
'66.##2.26.153':9988
'66.##2.55.228':9988
'66.##2.111.189':9988
'66.##2.156.161':9988
'66.##2.221.93':9988
'66.##2.29.106':9988
'66.##2.93.232':9988
'66.##2.50.144':9988
'66.##2.27.94':445
'66.##2.144.63':139
'66.##2.204.68':139
'66.##2.229.94':139
'66.##2.27.94':139
'66.##2.147.21':139
'66.##2.70.231':139
'66.##2.223.172':139
'66.##2.146.191':139
'66.##2.38.11':139
'66.##2.31.216':139
'66.##2.216.226':139
'66.##2.45.191':139
'66.##2.244.118':139
'66.##2.156.161':139
'66.##2.38.244':139
'66.##2.29.106':139
'66.##2.34.164':139
'66.##2.250.120':139
'66.##2.50.144':139
'66.##2.46.51':139
'66.##2.173.88':139
'66.##2.62.209':139
'66.##2.53.129':139
'66.##2.185.52':139
'66.##2.133.163':139
'66.##2.221.93':139
'66.##2.70.96':139
'66.##2.231.22':139
'66.##2.139.48':139
'66.##2.14.16':139
'66.##2.213.207':139
'66.##2.75.103':139
'66.##2.56.137':139
'66.##2.93.232':139
'66.##2.101.240':139
'66.##2.186.6':139
'66.##2.26.153':139
'66.##2.229.133':139
'66.##2.152.229':139
'66.##2.55.228':139
'66.##2.111.189':139
'66.##2.62.38':139
'66.##2.186.6':445
'66.##2.93.232':445
'66.##2.101.240':445
'66.##2.70.231':445
'66.##2.173.88':445
'66.##2.152.229':445
'66.##2.55.228':445
'66.##2.111.189':445
'66.##2.75.103':445
'66.##2.56.137':445
'66.##2.229.94':445
'66.##2.204.68':445
'66.##2.34.164':445
'66.##2.147.21':445
'66.##2.29.106':445
'66.##2.31.216':445
'66.##2.223.172':445
'66.##2.38.11':445
'66.##2.146.191':445
'66.##2.144.63':445
'66.##2.26.153':445
'66.##2.138.3':139
'66.##2.63.135':139
'66.##2.154.202':139
'66.##2.185.52':445
'66.##2.188.63':139
'66.##2.255.45':139
'66.##2.170.159':139
'66.##2.255.63':139
'66.##2.138.44':139
'66.##2.66.48':139
'66.##2.213.207':445
'66.##2.231.22':445
'66.##2.221.93':445
'66.##2.229.133':445
'66.##2.14.16':445
'66.##2.70.96':445
'66.##2.139.48':445
'66.##2.53.129':445
'66.##2.62.209':445
'66.##2.133.163':445
'66.##2.65.32':139
'66.##2.209.143':139
'66.##2.237.22':139
'66.##2.37.147':139
'66.##2.51.244':139
'66.##2.121.207':139
'66.#02.7.87':139
'66.##2.66.95':139
'66.##2.82.140':139
'66.##2.141.11':139
'66.##2.221.31':139
'66.##2.180.36':139
'66.##2.1.235':139
'66.##2.199.81':139
'66.##2.151.174':139
'66.##2.108.67':139
'66.##2.175.142':139
'66.##2.37.190':139
'66.##2.36.176':139
'66.##2.12.64':139
'66.##2.86.145':139
'66.##2.71.228':139
'66.##2.113.78':139
'66.##2.110.217':139
'66.##2.34.254':139
'66.##2.38.84':139
'66.##2.159.149':445
'66.##2.121.220':445
'66.##2.254.17':445
'66.##2.127.186':139
'66.##2.50.101':139
'66.##2.205.78':139
'66.##2.19.44':139
'66.##2.159.151':139
'66.##2.228.36':139
'66.##2.14.55':139
'66.##2.103.134':139
'66.##2.204.238':139
'66.##2.45.103':139
'66.##2.10.138':139
'66.##2.199.69':139
'66.##2.236.211':139
'66.#02.7.87':445
'66.##2.228.36':445
'66.##2.14.55':445
'66.##2.159.151':445
'66.##2.86.145':445
'66.##2.199.69':445
'66.##2.45.103':445
'66.##2.10.138':445
'66.##2.205.78':445
'66.##2.19.44':445
'66.##2.209.143':445
'66.##2.237.22':445
'66.##2.37.147':445
'66.##2.175.142':445
'66.##2.51.244':445
'66.##2.82.140':445
'66.##2.121.207':445
'66.##2.66.95':445
'66.##2.141.11':445
'66.##2.65.32':445
'66.##2.103.134':445
'66.##2.232.149':139
'66.##2.143.224':139
'66.##2.155.204':139
'66.##2.168.254':139
'66.##2.255.27':139
'66.##2.94.43':139
'66.##2.192.236':139
'66.##2.191.154':139
'66.##2.214.203':139
'66.##2.236.181':139
'66.##2.110.217':445
'66.##2.113.78':445
'66.##2.34.254':445
'66.##2.38.84':445
'66.##2.204.238':445
'66.##2.95.84':139
'66.##2.96.238':139
'66.##2.50.101':445
'66.##2.127.186':445
'66.##2.71.228':445
'66.##2.75.95':445
'66.##2.115.157':139
'66.##2.31.156':139
'66.##2.173.69':139
'66.##2.149.204':139
'66.##2.204.210':139
'66.##2.143.62':139
'66.##2.134.245':139
'66.##2.113.211':139
'66.##2.254.17':139
'66.##2.156.143':139
'66.##2.2.189':445
'66.##2.142.2':445
'66.##2.244.157':445
'66.##2.52.40':445
'66.##2.107.141':445
'66.##2.83.222':445
'66.##2.159.149':139
'66.##2.75.95':139
'66.##2.197.204':139
'66.##2.121.220':139
'66.#02.23.5':139
'66.##2.83.222':139
'66.##2.223.53':139
'66.##2.2.170':139
'66.##2.2.100':139
'66.##2.225.214':139
'66.##2.39.36':139
'66.##2.23.90':139
'66.##2.237.226':139
'66.#02.9.40':139
'66.##2.221.206':139
'66.##2.39.113':139
'66.##2.238.36':139
'66.##2.96.163':139
'66.##2.89.122':139
'66.#02.4.75':139
'66.##2.94.54':139
'66.##2.241.145':139
'66.##2.17.12':139
'66.##2.126.125':139
'66.##2.16.191':139
'66.##2.25.146':445
'66.#02.4.75':445
'66.##2.16.191':445
'66.##2.2.100':445
'66.##2.17.12':445
'66.#02.23.5':445
'66.##2.2.170':445
'66.##2.89.122':445
'66.##2.238.36':445
'66.##2.39.113':445
'66.##2.126.125':445
'66.##2.156.143':445
'66.##2.115.157':445
'66.##2.173.69':445
'66.##2.197.204':445
'66.##2.204.210':445
'66.##2.134.245':445
'66.##2.143.62':445
'66.##2.113.211':445
'66.##2.149.204':445
'66.##2.31.156':445
'66.##2.96.163':445
'66.##2.26.56':445
'66.##2.56.114':445
'66.##2.120.102':445
'66.##2.72.105':445
'66.##2.23.90':445
'66.##2.186.121':445
'66.##2.5.253':445
'66.##2.121.76':445
'66.##2.53.23':445
'66.##2.114.32':445
'66.##2.223.53':445
'66.##2.221.206':445
'66.##2.225.214':445
'66.##2.94.54':445
'66.##2.241.145':445
'66.##2.237.226':445
'66.##2.39.36':445
'66.##2.30.247':445
'66.#02.9.40':445
'66.##2.20.163':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней