Trojan.DownLoader9.39723

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERfd4f.dir00\svchost.exe.mdmp 16325836412032572

Изменения в файловой системе:

Создает следующие файлы:

%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%TEMP%\WERfd4f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe

Сетевая активность:

Подключается к:

'21#.#.226.104':139
'21#.#.192.241':139
'21#.#.197.240':139
'21#.#.198.141':139
'21#.8.45.28':139
'21#.#.246.31':139
'21#.#.21.129':139
'21#.8.51.51':139
'21#.#.121.158':139
'21#.#.250.168':139
'21#.8.74.62':139
'21#.8.38.30':139
'21#.#.135.78':139
'21#.#.82.234':139
'21#.#.161.163':139
'21#.#.69.161':139
'21#.8.18.58':139
'21#.8.14.36':139
'21#.#.42.147':139
'21#.#.177.29':139
'21#.8.30.43':139
'21#.#.91.148':445
'21#.8.41.39':445
'21#.8.13.0':445
'21#.8.7.219':445
'21#.#.24.138':445
'21#.#.241.139':445
'21#.#.64.173':445
'21#.8.39.6':445
'21#.#.25.186':445
'21#.#.10.113':445
'21#.#.102.61':445
'21#.#.16.176':445
'21#.#.32.144':445
'21#.8.36.20':445
'21#.8.8.238':139
'21#.#.215.82':445
'21#.#.101.228':445
'21#.#.70.134':445
'21#.#.219.234':445
'21#.8.52.79':445
'21#.8.48.89':445
'21#.#.113.40':139
'21#.#.82.234':445
'21#.#.177.29':445
'21#.#.135.78':445
'21#.8.53.60':445
'21#.#.42.147':445
'21#.8.38.30':445
'21#.8.30.43':445
'21#.#.161.163':445
'21#.#.69.161':445
'21#.#.113.40':445
'21#.#.73.153':445
'21#.#.246.80':139
'21#.#.105.66':139
'21#.#.117.246':139
'21#.#.39.114':139
'21#.#.185.251':139
'21#.#.52.154':445
'21#.8.17.72':445
'21#.#.187.52':445
'21#.#.22.132':445
'21#.#.217.108':445
'21#.#.22.132':139
'21#.#.217.108':139
'21#.8.8.238':445
'21#.#.246.31':445
'21#.#.21.129':445
'21#.#.73.153':139
'21#.8.53.60':139
'21#.8.17.72':139
'21#.#.187.52':139
'21#.#.52.154':139
'21#.8.51.51':445
'21#.8.74.62':445
'21#.#.198.141':445
'21#.8.14.36':445
'21#.8.18.58':445
'21#.8.45.28':445
'21#.#.121.158':445
'21#.#.250.168':445
'21#.#.192.241':445
'21#.#.197.240':445
'21#.#.226.104':445
'21#.#.187.179':445
'21#.#.146.193':139
'21#.#.44.251':139
'21#.#.18.199':139
'21#.#.116.103':139
'21#.8.69.19':139
'21#.#.80.214':139
'21#.#.214.67':139
'21#.#.14.238':139
'21#.#.150.205':139
'21#.#.79.125':139
'21#.#.30.220':139
'21#.#.146.246':445
'21#.#.246.52':445
'21#.#.13.196':445
'21#.#.137.85':445
'21#.#.86.188':445
'21#.#.114.160':139
'21#.8.34.63':139
'21#.#.113.125':445
'21#.8.3.250':445
'21#.#.83.218':445
'21#.8.3.250':139
'21#.#.83.218':139
'21#.#.246.52':139
'21#.#.13.196':139
'21#.#.146.246':139
'21#.#.89.107':445
'21#.#.171.48':445
'21#.#.42.220':445
'21#.#.113.125':139
'21#.#.77.213':445
'21#.#.67.121':139
'21#.#.23.190':139
'21#.#.190.104':139
'21#.8.91.24':139
'21#.#.122.45':139
'21#.#.107.175':139
'21#.#.86.188':139
'21#.#.137.85':139
'21#.#.129.34':139
'21#.#.66.114':139
'21#.#.34.137':139
'21#.#.67.121':445
'21#.#.91.148':139
'21#.#.25.186':139
'21#.8.41.39':139
'21#.#.24.138':139
'21#.8.13.0':139
'21#.#.64.173':139
'21#.#.187.179':139
'21#.#.241.139':139
'21#.#.10.113':139
'21#.8.39.6':139
'21#.8.7.219':139
'21#.#.32.144':139
'21#.8.52.79':139
'21#.#.16.176':139
'21#.#.215.82':139
'21#.8.36.20':139
'21#.#.70.134':139
'21#.#.102.61':139
'21#.#.101.228':139
'21#.8.48.89':139
'21#.#.219.234':139
'21#.#.107.175':445
'21#.8.91.24':445
'21#.#.122.45':445
'21#.#.14.238':445
'21#.#.214.67':445
'21#.#.129.34':445
'21#.#.34.137':445
'21#.#.66.114':445
'21#.#.23.190':445
'21#.#.190.104':445
'21#.#.80.214':445
'21#.#.116.103':445
'21#.8.69.19':445
'21#.#.30.220':445
'21#.#.114.160':445
'21#.8.34.63':445
'21#.#.150.205':445
'21#.#.79.125':445
'21#.#.44.251':445
'21#.#.18.199':445
'21#.#.146.193':445
'21#.#.137.70':139
'21#.#.166.61':139
'21#.#.213.151':139
'21#.#.161.238':139
'21#.#.121.142':139
'21#.8.53.1':139
'21#.8.34.35':139
'21#.#.195.237':139
'21#.#.39.207':139
'21#.#.15.149':139
'21#.8.13.55':139
'21#.#.138.24':445
'21#.#.120.246':445
'21#.#.148.120':445
'21#.8.20.81':445
'21#.#.25.218':445
'21#.8.7.103':445
'21#.8.61.92':445
'21#.#.223.97':445
'21#.#.246.132':445
'21#.#.110.48':445
'21#.#.176.166':445
'21#.#.153.245':445
'21#.#.121.248':445
'21#.8.41.78':445
'21#.#.77.122':445
'21#.#.86.185':445
'21#.#.154.97':445
'21#.8.84.10':445
'21#.8.57.83':445
'21#.#.248.56':445
'21#.8.88.78':445
'21#.#.138.24':139
'21#.#.120.246':139
'21#.#.148.120':139
'21#.8.20.81':139
'21#.#.25.218':139
'21#.8.61.92':139
'21#.8.7.103':139
'21#.#.223.97':139
'21#.#.246.132':139
'21#.#.110.48':139
'21#.8.34.35':445
'21#.#.248.225':139
'21#.#.162.97':139
'21#.#.225.138':139
'21#.#.139.188':139
'21#.#.239.118':139
'21#.8.35.31':139
'21#.#.189.233':139
'21#.#.131.11':139
'21#.#.123.36':139
'21#.#.179.172':139
'21#.#.158.180':139
'21#.8.76.36':139
'21#.#.183.45':139
'21#.#.36.183':139
'21#.#.188.148':139
'21#.#.248.126':139
'21#.8.5.101':139
'21#.#.166.135':139
'21#.8.82.92':139
'21#.#.45.138':139
'21#.#.137.180':139
'21#.8.13.55':445
'21#.#.137.70':445
'21#.#.161.238':445
'21#.#.213.151':445
'21#.#.121.142':445
'21#.#.195.237':445
'21#.8.53.1':445
'21#.#.39.207':445
'21#.#.166.61':445
'21#.#.15.149':445
'21#.#.39.150':139
'21#.#.33.244':139
'21#.#.53.120':139
'21#.8.42.24':139
'21#.#.234.96':139
'21#.#.96.150':139
'21#.#.233.108':139
'21#.#.109.146':139
'21#.#.139.105':139
'21#.#.24.155':139
'21#.#.43.252':139
'21#.8.100.5':445
'21#.#.229.68':445
'21#.#.160.147':445
'21#.#.248.82':445
'21#.#.160.61':445
'21#.#.82.115':445
'21#.8.8.218':445
'21#.#.228.31':445
'21#.#.100.201':445
'21#.#.117.190':445
'21#.#.47.141':445
'21#.#.160.115':445
'21#.8.41.36':139
'21#.#.146.181':139
'21#.#.157.47':139
'21#.#.145.246':139
'21#.#.178.86':139
'21#.#.40.200':445
'21#.8.49.2':445
'21#.#.94.115':445
'21#.8.49.55':445
'21#.8.146.2':445
'21#.#.160.147':139
'21#.#.229.68':139
'21#.#.82.115':139
'21#.#.160.61':139
'21#.#.248.82':139
'21#.#.228.31':139
'21#.8.8.218':139
'21#.#.47.141':139
'21#.#.117.190':139
'21#.#.100.201':139
'21#.#.160.115':139
'21#.#.105.66':445
'21#.#.246.80':445
'21#.#.117.246':445
'21#.#.185.251':445
'21#.#.39.114':445
'21#.8.49.55':139
'21#.8.49.2':139
'21#.8.146.2':139
'21#.#.40.200':139
'21#.#.94.115':139
'21#.#.213.107':139
'21#.#.213.107':445
'21#.#.146.181':445
'21#.#.178.86':445
'21#.#.51.219':445
'21#.#.145.246':445
'21#.8.41.78':139
'21#.#.77.122':139
'21#.8.88.78':139
'21#.#.157.47':445
'21#.8.41.36':445
'21#.#.71.193':445
'21#.#.119.59':445
'21#.#.200.74':445
'21#.#.193.46':445
'21#.#.50.193':445
'21#.#.110.234':445
'21#.#.36.192':445
'21#.#.205.62':445
'21#.8.74.37':445
'21#.8.74.74':445
'21#.8.11.36':445
'21#.#.200.74':139
'21#.8.74.74':139
'21#.8.11.36':139
'21#.#.193.46':139
'21#.#.119.59':139
'21#.#.71.193':139
'21#.#.51.219':139
'21#.#.205.62':139
'21#.8.74.37':139
'21#.#.36.192':139
'21#.#.50.193':139
'21#.8.84.10':139
'21#.#.153.245':139
'21#.8.57.83':139
'21#.#.121.248':139
'21#.#.248.56':139
'21#.8.100.5':139
'21#.#.110.234':139
'21#.#.154.97':139
'21#.#.176.166':139
'21#.#.86.185':139
'21#.#.167.121':445
'21#.#.57.124':9988
'21#.8.31.11':9988
'21#.#.180.149':9988
'21#.8.45.94':9988
'21#.#.176.199':9988
'21#.#.59.108':9988
'21#.#.213.33':9988
'21#.#.112.150':9988
'21#.8.37.49':9988
'21#.8.67.50':9988
'21#.#.128.148':9988
'21#.#.178.113':9988
'21#.#.35.221':9988
'21#.#.119.35':9988
'21#.#.152.247':9988
'21#.#.83.116':9988
'21#.#.217.20':9988
'21#.#.141.58':9988
'21#.#.23.195':9988
'21#.#.237.123':9988
'21#.#.53.240':9988
'21#.#.128.148':445
'21#.8.9.217':445
'21#.8.4.86':445
'21#.#.119.35':445
'21#.#.213.33':445
'21#.#.178.113':445
'21#.#.178.213':445
'21#.#.24.141':445
'21#.#.141.58':445
'21#.#.199.21':445
'21#.#.217.20':445
'21#.#.199.21':9988
'21#.#.141.148':9988
'21#.#.128.182':9988
'21#.#.16.152':9988
'21#.#.205.100':9988
'21#.#.141.210':445
'21#.#.83.116':445
'21#.#.193.72':445
'21#.#.35.221':445
'21#.#.88.210':445
'21#.8.9.217':9988
'21#.#.109.78':139
'21#.#.113.178':139
'21#.8.26.0':139
'21#.#.253.142':139
'21#.#.65.232':139
'21#.#.248.179':139
'21#.#.187.202':139
'21#.#.155.51':139
'21#.#.178.137':139
'21#.#.45.190':139
'21#.#.128.234':139
'21#.#.155.148':139
'21#.#.86.219':139
'21#.#.213.51':139
'21#.#.34.226':139
'21#.#.225.124':139
'21#.8.67.65':139
'21#.#.114.128':139
'21#.8.4.24':139
'21#.#.192.50':139
'21#.#.123.91':139
'21#.#.193.72':9988
'21#.#.224.89':9988
'21#.#.178.213':9988
'21#.#.74.249':9988
'21#.#.250.174':9988
'21#.#.89.147':9988
'21#.8.216.9':9988
'21#.#.141.210':9988
'21#.8.1.121':9988
'21#.#.157.239':9988
'21#.#.24.141':9988
'21#.#.117.142':139
'21#.#.230.140':9988
'21#.8.88.35':139
'21#.#.138.140':139
'21#.#.51.185':139
'21#.#.184.114':9988
'21#.#.110.236':9988
'21#.8.4.86':9988
'21#.#.144.29':9988
'21#.#.35.230':9988
'21#.#.128.182':445
'21#.#.57.124':139
'21#.#.230.140':139
'21#.#.110.236':139
'21#.#.34.125':139
'21#.#.178.213':139
'21#.8.67.50':139
'21#.#.59.108':139
'21#.#.35.230':139
'21#.#.237.123':139
'21#.#.77.224':139
'21#.#.250.174':139
'21#.#.141.148':139
'21#.#.206.247':139
'21#.#.152.247':139
'21#.#.144.29':139
'21#.8.1.121':139
'21#.#.16.152':139
'21#.#.35.221':139
'21#.#.141.58':139
'21#.#.213.33':139
'21#.#.112.150':139
'21#.8.31.11':139
'21#.#.199.21':139
'21#.#.24.141':139
'21#.#.128.182':139
'21#.#.23.195':139
'21#.#.240.111':139
'21#.#.205.100':139
'21#.#.178.113':139
'21#.#.128.148':139
'21#.#.184.114':139
'21#.8.216.9':139
'21#.8.37.49':139
'21#.#.236.152':139
'21#.#.157.239':139
'21#.#.74.249':139
'21#.8.45.94':139
'21#.#.176.199':139
'21#.#.83.116':139
'21#.#.89.147':139
'21#.8.9.217':139
'21#.#.211.239':139
'21#.#.224.89':139
'21#.#.250.174':445
'21#.#.34.125':445
'21#.#.224.89':445
'21#.#.152.247':445
'21#.#.141.148':445
'21#.#.59.108':445
'21#.8.67.50':445
'21#.#.110.236':445
'21#.#.16.152':445
'21#.#.57.124':445
'21#.#.144.29':445
'21#.#.112.150':445
'21#.#.184.114':445
'21#.#.240.111':445
'21#.#.180.149':445
'21#.#.74.249':445
'21#.#.53.240':445
'21#.8.1.121':445
'21#.#.35.230':445
'21#.#.237.123':445
'21#.#.77.224':445
'21#.#.119.35':139
'21#.#.88.210':139
'21#.#.141.210':139
'21#.8.45.94':445
'21#.#.205.100':445
'21#.#.53.240':139
'21#.#.180.149':139
'21#.8.4.86':139
'21#.#.193.72':139
'21#.#.217.20':139
'21#.#.176.199':445
'21#.#.230.140':445
'21#.8.216.9':445
'21#.#.23.195':445
'21#.#.206.247':445
'21#.#.157.239':445
'21#.#.89.147':445
'21#.#.211.239':445
'21#.#.236.152':445
'21#.8.31.11':445
'21#.8.37.49':445
'21#.#.212.180':445
'21#.#.108.171':445
'21#.8.22.60':445
'21#.#.45.212':445
'21#.8.36.1':445
'21#.#.84.126':445
'21#.#.205.15':445
'21#.8.60.84':445
'21#.#.80.155':445
'21#.8.1.46':445
'21#.#.194.186':445
'21#.#.171.43':445
'21#.#.218.207':445
'21#.#.228.66':445
'21#.#.97.254':445
'21#.#.66.218':445
'21#.#.36.141':445
'21#.#.210.220':445
'21#.#.118.166':445
'21#.#.224.231':445
'21#.#.43.181':445
'21#.#.224.231':139
'21#.#.36.141':139
'21#.#.218.207':139
'21#.#.228.66':139
'21#.#.66.218':139
'21#.#.194.186':139
'21#.8.36.1':139
'21#.#.210.220':139
'21#.#.43.181':139
'21#.#.118.166':139
'21#.#.171.43':139
'21#.#.22.185':139
'21#.#.28.148':139
'21#.#.41.235':445
'21#.#.124.80':445
'21#.#.13.151':445
'21#.#.144.98':139
'21#.#.97.254':139
'21#.#.112.144':139
'21#.#.13.150':139
'21#.#.129.112':139
'21#.#.144.98':445
'21#.#.153.244':445
'21#.#.112.171':445
'21#.#.126.24':445
'21#.#.244.55':445
'21#.8.59.26':445
'21#.#.171.48':139
'21#.#.167.121':139
'21#.#.42.220':139
'21#.#.77.213':139
'21#.#.89.107':139
'21#.#.115.69':445
'21#.#.245.220':445
'21#.#.143.122':445
'21#.#.130.89':445
'21#.#.237.207':445
'21#.#.207.223':445
'21#.#.241.17':445
'21#.#.250.45':445
'21#.#.120.93':445
'21#.#.93.114':445
'21#.8.73.65':445
'21#.#.126.24':139
'21#.#.112.171':139
'21#.#.153.244':139
'21#.#.244.55':139
'21#.8.59.26':139
'21#.#.129.112':445
'21#.#.112.144':445
'21#.#.13.150':445
'21#.#.22.185':445
'21#.#.28.148':445
'21#.#.241.17':139
'21#.#.245.220':139
'21#.#.130.89':139
'21#.#.143.122':139
'21#.#.237.207':139
'21#.#.207.223':139
'21#.#.115.69':139
'21#.#.250.45':139
'21#.#.93.114':139
'21#.8.73.65':139
'21#.#.120.93':139
'21#.8.1.46':139
'21#.#.102.238':139
'21#.8.28.49':139
'21#.8.28.49':445
'21#.#.92.251':139
'21#.#.104.173':139
'21#.#.155.148':445
'21#.#.86.219':445
'21#.#.225.124':445
'21#.#.49.224':445
'21#.#.201.20':445
'21#.#.152.154':139
'21#.8.17.66':139
'21#.#.61.187':139
'21#.#.29.242':139
'21#.#.69.192':139
'21#.#.17.216':139
'21#.#.102.238':445
'21#.8.37.10':139
'21#.#.179.41':139
'21#.8.70.12':139
'21#.8.37.10':445
'21#.#.155.51':445
'21#.#.248.179':445
'21#.#.45.190':445
'21#.#.187.202':445
'21#.#.138.140':445
'21#.#.49.224':139
'21#.#.201.20':139
'21#.#.117.142':445
'21#.#.51.185':445
'21#.8.88.35':445
'21#.#.178.137':445
'21#.8.67.65':445
'21#.#.128.234':445
'21#.#.65.232':445
'21#.#.192.50':445
'21#.#.123.91':445
'21#.8.26.0':445
'21#.#.113.178':445
'21#.#.109.78':445
'21#.#.253.142':445
'21#.8.4.24':445
'21#.#.100.241':139
'21#.#.58.233':445
'21#.#.70.212':445
'21#.#.100.241':445
'21#.#.113.32':445
'21#.#.195.190':445
'21#.#.124.80':139
'21#.#.80.155':139
'21#.#.13.151':139
'21#.8.28.39':445
'21#.#.37.211':445
'21#.#.203.159':445
'21#.8.60.84':139
'21#.#.84.126':139
'21#.8.22.60':139
'21#.#.45.212':139
'21#.#.108.171':139
'21#.8.6.149':445
'21#.#.58.228':445
'21#.#.75.203':445
'21#.#.212.180':139
'21#.#.205.15':139
'21#.#.195.190':139
'21#.#.75.203':139
'21#.#.203.159':139
'21#.8.6.149':139
'21#.#.113.32':139
'21#.#.58.228':139
'21#.#.37.211':139
'21#.#.70.212':139
'21#.8.28.39':139
'21#.#.58.233':139
'21#.#.92.251':445
'21#.#.29.242':445
'21#.8.17.66':445
'21#.#.17.216':445
'21#.#.41.235':139
'21#.#.69.192':445
'21#.#.104.173':445
'21#.#.152.154':445
'21#.#.179.41':445
'21#.#.61.187':445
'21#.8.70.12':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней