Trojan.DownLoader9.39714

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER0e6c.dir00\svchost.exe.mdmp 16325836412032488

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER0e6c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'89.##4.114.76':139
'89.##4.226.64':139
'89.##4.34.48':139
'89.##4.184.203':139
'89.##4.2.141':139
'89.##4.48.113':139
'89.##4.235.235':139
'89.##4.56.161':139
'89.##4.177.193':139
'89.##4.159.167':139
'89.##4.1.250':139
'89.##4.216.41':445
'89.##4.249.68':139
'89.##4.125.111':445
'89.##4.38.59':139
'89.##4.236.168':445
'89.##4.31.197':139
'89.##4.200.69':139
'89.##4.35.143':139
'89.##4.70.187':139
'89.##4.44.114':139
'89.##4.160.223':139
'89.##4.207.9':139
'89.##4.109.185':445
'89.##4.177.138':139
'89.##4.125.111':139
'89.##4.216.41':139
'89.##4.56.156':139
'89.##4.0.235':445
'89.##4.122.103':445
'89.##4.64.97':445
'89.##4.130.203':445
'89.##4.125.119':139
'89.##4.13.78':445
'89.##4.138.220':445
'89.#04.7.40':139
'89.##4.125.119':445
'89.##4.54.185':139
'89.##4.177.138':445
'89.##4.15.237':139
'89.##4.10.214':139
'89.##4.236.168':139
'89.##4.146.251':139
'89.##4.68.169':139
'89.##4.172.246':139
'89.##4.68.169':445
'89.##4.235.235':445
'89.##4.56.161':445
'89.##4.226.64':445
'89.##4.48.113':445
'89.##4.2.141':445
'89.##4.207.9':445
'89.##4.238.147':139
'89.##4.64.23':139
'89.##4.54.185':445
'89.##4.104.149':139
'89.##4.12.141':139
'89.##4.160.223':445
'89.##4.200.69':445
'89.##4.31.197':445
'89.##4.70.187':445
'89.##4.44.114':445
'89.##4.184.203':445
'89.##4.114.76':445
'89.##4.1.250':445
'89.##4.34.48':445
'89.##4.177.193':445
'89.##4.159.167':445
'89.##4.21.232':139
'89.##4.102.130':139
'89.##4.22.252':139
'89.##4.208.156':139
'89.##4.172.246':445
'89.##4.56.156':445
'89.##4.10.214':445
'89.#04.7.40':445
'89.##4.146.251':445
'89.##4.15.237':445
'89.##4.231.189':139
'89.##4.18.49':139
'89.##4.44.44':139
'89.##4.19.163':139
'89.##4.199.122':139
'89.##4.80.156':139
'89.##4.13.43':139
'89.##4.80.241':139
'89.##4.23.142':139
'89.##4.32.103':139
'89.##4.147.135':139
'89.##4.15.142':139
'89.##4.65.29':139
'89.##4.80.198':139
'89.##4.105.6':139
'89.##4.1.182':139
'89.##4.17.61':139
'89.##4.58.213':139
'89.##4.60.138':139
'89.##4.88.83':139
'89.##4.25.205':139
'89.##4.247.251':139
'89.##4.198.72':139
'89.##4.90.84':139
'89.##4.105.51':139
'89.##4.198.104':139
'89.#04.2.50':139
'89.##4.130.203':139
'89.##4.0.235':139
'89.##4.170.1':139
'89.##4.27.191':139
'89.##4.66.80':139
'89.##4.152.112':139
'89.##4.109.185':139
'89.##4.199.124':139
'89.##4.36.124':139
'89.##4.133.122':139
'89.##4.171.114':139
'89.##4.120.190':139
'89.##4.131.205':139
'89.##4.204.131':139
'89.#04.47.9':139
'89.##4.123.205':139
'89.##4.39.155':139
'89.##4.29.172':445
'89.##4.86.30':445
'89.##4.172.162':445
'89.##4.47.231':139
'89.##4.133.42':139
'89.##4.231.132':139
'89.##4.148.148':139
'89.##4.67.57':139
'89.##4.8.246':139
'89.##4.101.139':139
'89.##4.118.204':139
'89.##4.97.193':139
'89.##4.26.177':139
'89.##4.77.173':139
'89.##4.13.78':139
'89.##4.60.138':445
'89.##4.77.173':445
'89.##4.1.182':445
'89.##4.66.80':445
'89.##4.138.220':139
'89.##4.26.177':445
'89.##4.198.72':445
'89.##4.8.246':445
'89.##4.47.231':445
'89.##4.88.83':445
'89.##4.67.57':445
'89.##4.170.1':445
'89.##4.105.51':445
'89.##4.105.6':445
'89.#04.2.50':445
'89.##4.198.104':445
'89.##4.17.61':445
'89.##4.58.213':445
'89.##4.27.191':445
'89.##4.152.112':445
'89.##4.80.198':445
'89.##4.199.124':445
'89.##4.90.84':445
'89.##4.80.28':445
'89.##4.39.155':445
'89.##4.133.122':445
'89.##4.120.190':445
'89.##4.171.114':445
'89.#04.47.9':445
'89.##4.122.103':139
'89.##4.64.97':139
'89.##4.123.205':445
'89.##4.22.221':445
'89.##4.42.59':445
'89.##4.148.148':445
'89.##4.36.124':445
'89.##4.25.205':445
'89.##4.97.193':445
'89.##4.133.42':445
'89.##4.231.132':445
'89.##4.131.205':445
'89.##4.204.131':445
'89.##4.118.204':445
'89.##4.247.251':445
'89.##4.101.139':445
'89.##4.35.143':445
'89.##4.47.69':445
'89.##4.198.250':445
'89.##4.30.76':445
'89.##4.195.53':445
'89.##4.180.127':445
'89.##4.158.91':445
'89.##4.13.75':445
'89.##4.11.44':445
'89.##4.225.211':445
'89.##4.44.139':445
'89.##4.168.235':445
'89.##4.26.71':445
'89.##4.6.199':445
'89.##4.62.46':445
'89.##4.63.116':445
'89.##4.12.119':445
'89.##4.61.49':445
'89.##4.54.39':445
'89.#04.28.7':445
'89.##4.65.61':445
'89.##4.171.149':445
'89.##4.20.58':445
'89.##4.101.98':445
'89.##4.143.150':139
'89.##4.252.105':139
'89.##4.130.13':139
'89.##4.26.71':139
'89.##4.92.208':139
'89.##4.138.63':139
'89.##4.201.115':139
'89.##4.150.145':139
'89.##4.32.108':139
'89.#04.4.12':139
'89.##4.218.142':139
'89.##4.79.109':445
'89.##4.38.234':445
'89.##4.34.234':445
'89.##4.86.191':445
'89.##4.113.41':445
'89.##4.121.145':139
'89.#04.57.3':139
'89.##4.19.193':139
'89.##4.26.193':139
'89.##4.188.212':139
'89.##4.219.179':139
'89.##4.236.36':445
'89.##4.100.77':445
'89.##4.188.212':445
'89.##4.218.142':445
'89.#04.4.12':445
'89.##4.14.225':445
'89.##4.196.232':445
'89.##4.41.220':445
'89.##4.79.227':445
'89.##4.177.10':445
'89.##4.121.145':445
'89.##4.252.105':445
'89.##4.68.244':445
'89.##4.32.236':445
'89.##4.162.199':445
'89.##4.73.162':445
'89.##4.134.11':445
'89.##4.41.141':445
'89.##4.130.13':445
'89.##4.219.179':445
'89.##4.32.108':445
'89.##4.10.174':445
'89.##4.178.44':445
'89.##4.111.101':445
'89.##4.190.184':445
'89.##4.8.202':445
'89.##4.51.110':445
'89.##4.80.100':445
'89.##4.21.188':445
'89.##4.234.106':445
'89.##4.88.43':445
'89.##4.13.201':445
'89.##4.84.132':445
'89.##4.242.176':445
'89.##4.219.44':445
'89.##4.221.181':445
'89.#04.57.3':445
'89.##4.150.145':445
'89.#04.3.48':445
'89.##4.201.115':445
'89.##4.116.60':445
'89.##4.28.146':445
'89.##4.84.179':445
'89.##4.176.65':445
'89.##4.138.63':445
'89.##4.139.207':445
'89.##4.180.127':139
'89.##4.198.250':139
'89.##4.6.199':139
'89.##4.47.69':139
'89.##4.54.39':139
'89.##4.158.91':139
'89.##4.101.98':139
'89.##4.225.211':139
'89.##4.57.162':139
'89.##4.44.139':139
'89.##4.168.235':139
'89.##4.65.61':139
'89.##4.20.58':139
'89.##4.30.76':139
'89.##4.104.149':445
'89.##4.38.234':139
'89.##4.61.49':139
'89.##4.62.46':139
'89.##4.79.109':139
'89.##4.195.53':139
'89.#04.28.7':139
'89.##4.171.149':139
'89.##4.11.44':139
'89.##4.231.189':445
'89.##4.238.147':445
'89.##4.32.103':445
'89.##4.208.156':445
'89.##4.21.232':445
'89.##4.80.241':445
'89.##4.38.59':445
'89.##4.249.68':445
'89.##4.13.43':445
'89.##4.18.49':445
'89.##4.147.135':445
'89.##4.19.163':445
'89.##4.80.156':445
'89.##4.15.142':445
'89.##4.13.75':139
'89.##4.44.44':445
'89.##4.23.142':445
'89.##4.65.29':445
'89.##4.64.23':445
'89.##4.102.130':445
'89.##4.22.252':445
'89.##4.199.122':445
'89.##4.12.141':445
'89.##4.80.100':139
'89.##4.8.202':139
'89.##4.14.225':139
'89.##4.242.176':139
'89.##4.190.184':139
'89.##4.178.44':139
'89.##4.84.179':139
'89.##4.13.201':139
'89.##4.79.227':139
'89.##4.88.43':139
'89.##4.21.188':139
'89.#04.3.48':139
'89.##4.134.11':139
'89.##4.10.174':139
'89.##4.139.207':139
'89.##4.86.191':139
'89.##4.111.101':139
'89.##4.162.199':139
'89.##4.100.77':139
'89.##4.176.65':139
'89.##4.234.106':139
'89.##4.41.220':139
'89.##4.51.110':139
'89.##4.34.234':139
'89.##4.105.151':139
'89.##4.28.146':139
'89.##4.12.119':139
'89.##4.139.142':139
'89.##4.177.10':139
'89.##4.94.238':139
'89.##4.41.141':139
'89.##4.73.162':139
'89.##4.113.41':139
'89.##4.221.181':139
'89.##4.196.232':139
'89.##4.140.85':139
'89.##4.236.36':139
'89.##4.84.132':139
'89.##4.68.244':139
'89.##4.32.236':139
'89.##4.89.233':139
'89.##4.219.44':139
'89.##4.116.60':139
'89.##4.63.116':139
'89.##4.49.143':139
'89.#04.46.6':9988
'89.##4.51.253':9988
'89.##4.52.126':9988
'89.##4.184.103':9988
'89.##4.185.124':9988
'89.##4.96.110':9988
'89.##4.72.64':9988
'89.##4.250.134':9988
'89.##4.38.222':9988
'89.##4.255.157':9988
'89.##4.182.78':9988
'89.##4.78.184':9988
'89.##4.96.135':9988
'89.##4.49.118':9988
'89.##4.211.46':9988
'89.#04.8.15':9988
'89.##4.128.237':9988
'89.##4.83.31':9988
'89.##4.65.95':9988
'89.##4.132.123':9988
'89.##4.255.234':9988
'89.##4.183.188':9988
'89.##4.70.56':9988
'89.##4.103.244':445
'89.##4.204.155':445
'89.##4.184.103':445
'89.##4.14.208':445
'89.##4.209.214':445
'89.##4.51.253':445
'89.##4.234.184':445
'89.##4.211.46':445
'89.##4.255.234':445
'89.##4.96.135':445
'89.##4.132.123':445
'89.##4.81.249':9988
'89.##4.13.178':9988
'89.##4.82.47':9988
'89.#04.51.9':9988
'89.##4.14.208':9988
'89.##4.30.239':9988
'89.##4.52.126':445
'89.##4.183.188':445
'89.##4.243.50':9988
'89.##4.250.22':9988
'89.##4.22.85':9988
'89.##4.116.82':9988
'89.##4.30.42':139
'89.##4.78.125':139
'89.##4.238.209':139
'89.##4.50.53':139
'89.##4.58.170':139
'89.##4.210.39':139
'89.##4.160.5':139
'89.##4.37.134':445
'89.##4.12.241':139
'89.##4.72.126':139
'89.##4.61.231':139
'89.##4.93.206':139
'89.##4.145.5':139
'89.##4.171.168':139
'89.##4.250.197':139
'89.##4.197.171':139
'89.##4.76.37':139
'89.##4.138.55':139
'89.##4.45.98':139
'89.##4.49.227':139
'89.##4.113.190':139
'89.##4.58.138':139
'89.##4.105.18':445
'89.##4.99.80':9988
'89.##4.45.50':9988
'89.##4.234.249':9988
'89.##4.230.160':9988
'89.##4.204.155':9988
'89.##4.209.214':9988
'89.##4.169.82':9988
'89.##4.103.244':9988
'89.##4.200.210':9988
'89.##4.234.184':9988
'89.##4.239.31':9988
'89.##4.129.143':139
'89.##4.18.237':9988
'89.##4.37.134':139
'89.##4.129.143':445
'89.##4.105.18':139
'89.##4.128.203':9988
'89.##4.90.186':9988
'89.##4.137.31':9988
'89.##4.14.202':9988
'89.##4.244.200':9988
'89.##4.71.225':9988
'89.##4.13.178':139
'89.#04.8.15':139
'89.##4.239.31':139
'89.##4.83.31':139
'89.##4.30.239':139
'89.##4.70.56':139
'89.##4.233.145':139
'89.##4.255.157':139
'89.##4.38.222':139
'89.##4.81.249':139
'89.##4.116.82':139
'89.##4.255.234':139
'89.##4.234.184':139
'89.##4.132.123':139
'89.##4.204.155':139
'89.##4.96.135':139
'89.##4.185.124':139
'89.##4.49.118':139
'89.##4.169.82':139
'89.##4.137.31':139
'89.##4.211.46':139
'89.##4.65.95':139
'89.##4.22.85':139
'89.#04.46.6':139
'89.##4.182.78':139
'89.##4.128.237':139
'89.##4.72.64':139
'89.##4.200.210':139
'89.##4.78.184':139
'89.##4.243.50':139
'89.##4.250.134':139
'89.##4.71.225':139
'89.##4.128.203':139
'89.#04.51.9':139
'89.##4.82.47':139
'89.##4.45.50':139
'89.##4.96.110':139
'89.##4.99.80':139
'89.##4.90.186':139
'89.##4.18.237':139
'89.##4.250.22':139
'89.##4.244.200':139
'89.##4.234.249':139
'89.##4.230.160':139
'89.##4.14.202':139
'89.##4.51.253':139
'89.##4.116.82':445
'89.##4.38.222':445
'89.##4.255.157':445
'89.##4.81.249':445
'89.##4.233.145':445
'89.##4.22.85':445
'89.##4.18.237':445
'89.##4.230.160':445
'89.##4.82.47':445
'89.##4.99.80':445
'89.##4.96.110':445
'89.##4.65.95':445
'89.##4.49.118':445
'89.##4.169.82':445
'89.##4.185.124':445
'89.##4.137.31':445
'89.##4.83.31':445
'89.#04.8.15':445
'89.##4.70.56':445
'89.##4.30.239':445
'89.##4.13.178':445
'89.##4.239.31':445
'89.##4.14.202':445
'89.##4.182.78':445
'89.##4.71.225':445
'89.##4.128.203':445
'89.##4.128.237':445
'89.##4.243.50':445
'89.##4.52.126':139
'89.##4.184.103':139
'89.##4.103.244':139
'89.##4.209.214':139
'89.##4.183.188':139
'89.##4.14.208':139
'89.##4.72.64':445
'89.##4.250.134':445
'89.##4.234.249':445
'89.##4.45.50':445
'89.##4.90.186':445
'89.##4.200.210':445
'89.#04.46.6':445
'89.##4.78.184':445
'89.##4.244.200':445
'89.##4.250.22':445
'89.#04.51.9':445
'89.##4.23.62':139
'89.##4.49.21':139
'89.##4.56.75':139
'89.##4.49.221':139
'89.##4.131.116':139
'89.##4.144.114':139
'89.##4.106.38':139
'89.#04.48.8':445
'89.##4.62.98':139
'89.##4.111.13':139
'89.##4.53.192':139
'89.##4.14.158':139
'89.##4.46.238':445
'89.##4.221.95':445
'89.##4.227.18':445
'89.##4.62.160':445
'89.##4.41.214':445
'89.##4.3.127':445
'89.##4.60.18':139
'89.##4.88.163':139
'89.##4.101.108':139
'89.##4.179.238':445
'89.##4.19.181':445
'89.##4.12.137':139
'89.##4.163.22':139
'89.##4.34.211':139
'89.##4.11.217':139
'89.##4.191.176':139
'89.##4.134.18':139
'89.##4.94.138':139
'89.##4.245.41':139
'89.##4.141.181':139
'89.##4.27.73':139
'89.##4.208.173':139
'89.##4.93.184':139
'89.##4.235.53':139
'89.##4.193.160':445
'89.##4.189.145':139
'89.##4.233.147':139
'89.##4.87.192':139
'89.##4.53.206':139
'89.##4.2.145':139
'89.##4.144.191':139
'89.##4.182.10':445
'89.##4.151.27':139
'89.##4.116.2':139
'89.##4.72.10':445
'89.##4.56.75':445
'89.##4.53.192':445
'89.##4.14.158':445
'89.##4.131.116':445
'89.##4.88.163':445
'89.##4.106.38':445
'89.##4.233.147':445
'89.##4.53.206':445
'89.##4.12.137':445
'89.##4.111.13':445
'89.##4.62.98':445
'89.##4.86.30':139
'89.##4.29.172':139
'89.##4.42.59':139
'89.##4.80.28':139
'89.##4.22.221':139
'89.##4.172.162':139
'89.##4.60.18':445
'89.##4.101.108':445
'89.##4.144.114':445
'89.##4.49.221':445
'89.##4.49.21':445
'89.##4.189.145':445
'89.##4.27.73':445
'89.#04.1.78':445
'89.##4.93.184':445
'89.##4.34.211':445
'89.##4.208.173':445
'89.##4.245.41':445
'89.##4.207.84':445
'89.##4.74.200':445
'89.##4.34.51':445
'89.##4.141.181':445
'89.##4.53.74':445
'89.##4.151.27':445
'89.##4.2.145':445
'89.##4.235.53':445
'89.##4.87.192':445
'89.##4.144.191':445
'89.##4.116.2':445
'89.##4.11.217':445
'89.##4.94.138':445
'89.##4.134.18':445
'89.##4.191.176':445
'89.##4.163.22':445
'89.##4.72.126':445
'89.##4.61.231':445
'89.##4.78.125':445
'89.##4.30.42':445
'89.##4.58.170':445
'89.##4.12.241':445
'89.##4.21.58':139
'89.#04.55.9':139
'89.##4.58.20':139
'89.##4.210.39':445
'89.##4.160.5':445
'89.##4.76.37':445
'89.##4.113.190':445
'89.##4.145.5':445
'89.##4.167.210':445
'89.##4.197.171':445
'89.##4.58.138':445
'89.##4.50.53':445
'89.##4.238.209':445
'89.##4.138.55':445
'89.##4.49.227':445
'89.##4.45.98':445
'89.##4.182.21':139
'89.##4.236.102':139
'89.##4.121.196':139
'89.##4.172.102':139
'89.##4.94.174':139
'89.##4.192.169':139
'89.##4.249.154':139
'89.##4.7.168':139
'89.##4.167.210':139
'89.##4.206.136':139
'89.##4.34.185':139
'89.##4.84.54':139
'89.##4.190.104':139
'89.##4.185.170':139
'89.##4.16.147':139
'89.##4.19.241':139
'89.##4.12.163':139
'89.##4.128.75':139
'89.##4.121.0':139
'89.##4.119.231':139
'89.##4.68.236':139
'89.##4.16.45':139
'89.##4.180.124':139
'89.##4.249.154':445
'89.##4.128.75':445
'89.##4.58.20':445
'89.##4.62.160':139
'89.##4.41.214':139
'89.##4.19.181':139
'89.##4.19.241':445
'89.##4.16.45':445
'89.##4.16.147':445
'89.##4.21.58':445
'89.##4.190.104':445
'89.##4.12.163':445
'89.##4.34.51':139
'89.##4.72.10':139
'89.##4.74.200':139
'89.#04.1.78':139
'89.##4.53.74':139
'89.##4.207.84':139
'89.##4.227.18':139
'89.##4.179.238':139
'89.##4.46.238':139
'89.##4.221.95':139
'89.##4.3.127':139
'89.##4.185.170':445
'89.##4.34.185':445
'89.##4.7.168':445
'89.##4.121.196':445
'89.##4.172.102':445
'89.##4.236.102':445
'89.##4.206.136':445
'89.##4.84.54':445
'89.##4.250.197':445
'89.##4.93.206':445
'89.##4.23.62':445
'89.##4.171.168':445
'89.##4.180.124':445
'89.##4.68.236':445
'89.#04.48.8':139
'89.##4.182.21':445
'89.#04.55.9':445
'89.##4.121.0':445
'89.##4.182.10':139
'89.##4.192.169':445
'89.##4.119.231':445
'89.##4.193.160':139
'89.##4.94.174':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней