Trojan.DownLoader9.40090

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1112 -dm 7 7 %TEMP%\WER0c0c.dir00\svchost.exe.mdmp 16325836412032612

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WER0c0c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'21#.#18.168.216':139
'21#.#18.148.103':139
'21#.#18.213.168':139
'21#.#18.142.37':139
'21#.#18.216.142':139
'21#.#18.254.0':445
'21#.#18.81.253':445
'21#.#18.206.82':445
'21#.#18.85.4':139
'21#.#18.129.109':139
'21#.#18.45.141':139
'21#.#18.79.248':139
'21#.#18.28.90':445
'21#.#18.161.64':445
'21#.#18.4.36':445
'21#.#18.106.51':445
'21#.#18.166.193':445
'21#.#18.202.203':445
'21#.#18.184.47':445
'21#.#18.48.7':445
'21#.#18.96.245':445
'21#.#18.20.90':445
'21#.#18.235.154':445
'21#.#18.222.20':139
'21#.#18.78.31':139
'21#.#18.223.85':445
'21#.#18.40.111':445
'21#.#18.201.86':139
'21#.#18.1.114':139
'21#.#18.51.201':139
'21#.#18.136.8':139
'21#.#18.74.82':139
'21#.#18.233.78':139
'21#.#18.200.174':139
'21#.#18.232.56':139
'21#.#18.239.172':139
'21#.#18.172.82':139
'21#.#18.51.176':139
'21#.#18.45.141':445
'21#.#18.4.66':139
'21#.#18.46.63':139
'21#.#18.255.120':139
'21#.#18.78.31':445
'21#.#18.213.168':445
'21#.#18.168.216':445
'21#.#18.158.128':139
'21#.#18.145.30':445
'21#.#18.228.246':445
'21#.#18.216.142':445
'21#.#18.195.117':139
'21#.#18.83.185':139
'21#.#18.239.173':139
'21#.#18.142.37':445
'21#.#18.148.103':445
'21#.#18.222.20':445
'21#.#18.49.232':445
'21#.#18.4.36':139
'21#.#18.106.51':139
'21#.#18.127.237':445
'21#.#18.133.224':445
'21#.#18.106.153':445
'21#.#18.161.64':139
'21#.#18.166.193':139
'21#.#18.223.85':139
'21#.#18.20.90':139
'21#.#18.40.111':139
'21#.#18.96.245':139
'21#.#18.235.154':139
'21#.#18.136.75':445
'21#.#18.61.61':139
'21#.#18.110.31':139
'21#.#18.78.100':139
'21#.#18.227.96':139
'21#.#18.242.87':139
'21#.#18.101.136':139
'21#.#18.199.16':445
'21#.#18.80.246':445
'21#.#18.3.45':445
'21#.#18.193.146':445
'21#.#18.234.96':445
'21#.#18.14.128':445
'21#.#18.105.151':445
'21#.#18.254.0':139
'21#.#18.191.40':445
'21#.#18.180.76':445
'21#.#18.150.62':445
'21#.#18.61.61':445
'21#.#18.200.148':445
'21#.#18.29.157':445
'21#.#18.72.130':445
'21#.#18.235.80':445
'21#.#18.231.49':445
'21#.#18.93.73':445
'21#.#18.66.8':445
'21#.#18.70.55':445
'21#.#18.73.203':445
'21#.#18.78.100':445
'21#.#18.145.30':139
'21#.#18.228.246':139
'21#.#18.150.190':445
'21#.#18.28.90':139
'21#.#18.81.253':139
'21#.#18.206.82':139
'21#.#18.80.160':445
'21#.#18.227.96':445
'21#.#18.101.136':445
'21#.#18.36.35':445
'21#.#18.136.184':445
'21#.#18.242.87':445
'21#.#18.110.31':445
'21#.#18.71.19':445
'21#.#18.49.160':445
'21#.#18.41.8':445
'21#.#18.222.236':445
'21#.#18.51.201':445
'21#.#18.46.63':445
'21#.#18.197.220':445
'21#.#18.207.199':139
'21#.#18.147.47':445
'21#.#18.173.34':445
'21#.#18.209.110':445
'21#.#18.34.133':139
'21#.#18.75.221':139
'21#.#18.81.137':139
'21#.#18.54.96':139
'21#.#18.227.37':139
'21#.#18.19.31':139
'21#.#18.238.211':139
'21#.#18.173.165':139
'21#.#18.211.106':139
'21#.#18.221.136':139
'21#.#18.173.34':139
'21#.#18.72.2':139
'21#.#18.142.58':139
'21#.#18.192.62':139
'21#.#18.180.104':139
'21#.#18.132.167':139
'21#.#18.227.37':445
'21#.#18.132.75':445
'21#.#18.54.96':445
'21#.#18.75.221':445
'21#.#18.36.222':445
'21#.#18.180.104':445
'21#.#18.19.31':445
'21#.#18.207.199':445
'21#.#18.4.101':139
'21#.#18.97.165':139
'21#.#18.197.4':139
'21#.#18.244.177':139
'21#.#18.109.244':139
'21#.#18.229.146':139
'21#.#18.254.196':445
'21#.#18.192.62':445
'21#.#18.238.211':445
'21#.#18.34.133':445
'21#.#18.103.162':445
'21#.#18.81.137':445
'21#.#18.211.173':445
'21#.#18.173.165':445
'21#.#18.221.136':445
'21#.#18.211.106':445
'21#.#18.153.247':445
'21#.#18.46.116':445
'21#.#18.142.58':445
'21#.#18.72.2':445
'21#.#18.81.24':139
'21#.#18.62.153':139
'21#.#18.129.109':445
'21#.#18.252.168':139
'21#.#18.49.160':139
'21#.#18.133.70':139
'21#.#18.158.128':445
'21#.#18.41.8':139
'21#.#18.172.82':445
'21#.#18.239.172':445
'21#.#18.87.201':139
'21#.#18.85.4':445
'21#.#18.197.220':139
'21#.#18.79.248':445
'21#.#18.201.86':445
'21#.#18.112.183':139
'21#.#18.252.217':139
'21#.#18.12.60':139
'21#.#18.19.136':139
'21#.#18.71.19':139
'21#.#18.11.242':139
'21#.#18.171.212':139
'21#.#18.50.157':139
'21#.#18.222.236':139
'21#.#18.19.150':139
'21#.#18.209.110':139
'21#.#18.59.246':139
'21#.#18.50.157':445
'21#.#18.239.173':445
'21#.#18.254.196':139
'21#.#18.19.136':445
'21#.#18.252.168':445
'21#.#18.87.201':445
'21#.#18.112.183':445
'21#.#18.46.116':139
'21#.#18.103.162':139
'21#.#18.211.173':139
'21#.#18.147.47':139
'21#.#18.132.75':139
'21#.#18.36.222':139
'21#.#18.153.247':139
'21#.#18.252.217':445
'21#.#18.233.78':445
'21#.#18.255.120':445
'21#.#18.1.114':445
'21#.#18.11.242':445
'21#.#18.200.174':445
'21#.#18.136.8':445
'21#.#18.59.246':445
'21#.#18.81.24':445
'21#.#18.19.150':445
'21#.#18.171.212':445
'21#.#18.4.66':445
'21#.#18.62.153':445
'21#.#18.133.70':445
'21#.#18.220.112':445
'21#.#18.239.66':445
'21#.#18.5.169':445
'21#.#18.192.43':445
'21#.#18.108.214':445
'21#.#18.21.121':445
'21#.#18.129.191':445
'21#.#18.185.205':445
'21#.#18.119.4':445
'21#.#18.146.17':445
'21#.#18.137.169':445
'21#.#18.247.179':445
'21#.#18.162.10':445
'21#.#18.232.216':445
'21#.#18.144.247':445
'21#.#18.149.5':445
'21#.#18.65.20':445
'21#.#18.122.230':445
'21#.#18.41.153':445
'21#.#18.117.68':445
'21#.#18.132.237':445
'21#.#18.13.197':445
'21#.#18.134.238':445
'21#.#18.129.224':445
'21#.#18.100.81':445
'21#.#18.149.27':445
'21#.#18.195.86':445
'21#.#18.242.219':445
'21#.#18.78.70':445
'21#.#18.23.151':445
'21#.#18.144.247':9988
'21#.#18.165.128':445
'21#.#18.35.240':445
'21#.#18.77.108':445
'21#.#18.117.68':9988
'21#.#18.99.46':9988
'21#.#18.240.25':9988
'21#.#18.23.151':9988
'21#.#18.137.169':9988
'21#.#18.136.209':9988
'21#.#18.195.86':9988
'21#.#18.240.25':445
'21#.#18.99.46':445
'21#.#18.46.222':445
'21#.#18.254.239':445
'21#.#18.93.78':445
'21#.#18.201.69':445
'21#.#18.4.112':445
'21#.#18.122.106':445
'21#.#18.52.250':445
'21#.#18.3.10':445
'21#.#18.148.232':445
'21#.#18.54.194':445
'21#.#18.135.67':445
'21#.#18.182.16':445
'21#.#18.119.4':139
'21#.#18.149.27':139
'21#.#18.93.78':139
'21#.#18.195.86':139
'21#.#18.100.81':139
'21#.#18.129.224':139
'21#.#18.185.205':139
'21#.#18.247.179':139
'21#.#18.65.20':139
'21#.#18.99.46':139
'21#.#18.162.10':139
'21#.#18.242.219':139
'21#.#18.149.5':139
'21#.#18.220.112':139
'21#.#18.136.209':139
'21#.#18.117.68':139
'21#.#18.232.216':139
'21#.#18.26.205':139
'21#.#18.2.242':139
'21#.#18.53.91':139
'21#.#18.41.153':139
'21#.#18.134.238':139
'21#.#18.122.230':139
'21#.#18.146.17':139
'21#.#18.13.197':139
'21#.#18.144.247':139
'21#.#18.132.237':139
'21#.#18.239.66':139
'21#.#18.35.240':139
'21#.#18.240.25':139
'21#.#18.148.232':139
'21#.#18.52.250':139
'21#.#18.182.16':139
'21#.#18.77.108':139
'21#.#18.165.128':139
'21#.#18.2.242':445
'21#.#18.53.91':445
'21#.#18.136.209':445
'21#.#18.23.151':139
'21#.#18.78.70':139
'21#.#18.26.205':445
'21#.#18.3.10':139
'21#.#18.108.214':139
'21#.#18.21.121':139
'21#.#18.5.169':139
'21#.#18.192.43':139
'21#.#18.46.222':139
'21#.#18.129.191':139
'21#.#18.137.169':139
'21#.#18.122.106':139
'21#.#18.54.194':139
'21#.#18.135.67':139
'21#.#18.201.69':139
'21#.#18.4.112':139
'21#.#18.254.239':139
'21#.#18.88.113':445
'21#.#18.95.228':445
'21#.#18.194.213':445
'21#.#18.7.249':445
'21#.#18.249.15':445
'21#.#18.90.216':445
'21#.#18.126.69':445
'21#.#18.14.128':139
'21#.#18.241.87':445
'21#.#18.3.45':139
'21#.#18.60.17':445
'21#.#18.199.16':139
'21#.#18.234.96':139
'21#.#18.167.138':445
'21#.#18.167.138':139
'21#.#18.194.213':139
'21#.#18.95.228':139
'21#.#18.126.69':139
'21#.#18.88.113':139
'21#.#18.249.15':139
'21#.#18.68.216':445
'21#.#18.177.129':445
'21#.#18.110.129':445
'21#.#18.90.126':445
'21#.#18.26.220':445
'21#.#18.53.102':445
'21#.#18.240.160':445
'21#.#18.80.246':139
'21#.#18.80.160':139
'21#.#18.73.203':139
'21#.#18.202.203':139
'21#.#18.150.62':139
'21#.#18.150.190':139
'21#.#18.235.80':139
'21#.#18.93.73':139
'21#.#18.36.35':139
'21#.#18.70.55':139
'21#.#18.136.184':139
'21#.#18.231.49':139
'21#.#18.48.7':139
'21#.#18.184.47':139
'21#.#18.66.8':139
'21#.#18.193.146':139
'21#.#18.127.237':139
'21#.#18.133.224':139
'21#.#18.105.151':139
'21#.#18.136.75':139
'21#.#18.106.153':139
'21#.#18.16.169':445
'21#.#18.29.157':139
'21#.#18.180.76':139
'21#.#18.72.130':139
'21#.#18.49.232':139
'21#.#18.191.40':139
'21#.#18.200.148':139
'21#.#18.182.16':9988
'21#.#18.93.78':9988
'21#.#18.119.4':9988
'21#.#18.146.17':9988
'21#.#18.242.219':9988
'21#.#18.13.197':9988
'21#.#18.185.205':9988
'21#.#18.77.108':9988
'21#.#18.135.67':9988
'21#.#18.46.222':9988
'21#.#18.53.91':9988
'21#.#18.122.230':9988
'21#.#18.232.216':9988
'21#.#18.149.27':9988
'21#.#18.5.169':9988
'21#.#18.100.81':9988
'21#.#18.108.214':9988
'21#.#18.165.128':9988
'21#.#18.220.112':9988
'21#.#18.129.224':9988
'21#.#18.247.179':9988
'21#.#18.65.20':9988
'21#.#18.149.5':9988
'21#.#18.21.121':9988
'21#.#18.41.153':9988
'21#.#18.2.242':9988
'21#.#18.129.191':9988
'21#.#18.78.70':9988
'21#.#18.68.216':139
'21#.#18.240.160':139
'21#.#18.16.169':139
'21#.#18.201.69':9988
'21#.#18.53.102':139
'21#.#18.26.220':139
'21#.#18.177.129':139
'21#.#18.90.126':139
'21#.#18.7.249':139
'21#.#18.60.17':139
'21#.#18.90.216':139
'21#.#18.241.87':139
'21#.#18.110.129':139
'21#.#18.35.240':9988
'21#.#18.132.237':9988
'21#.#18.26.205':9988
'21#.#18.54.194':9988
'21#.#18.134.238':9988
'21#.#18.239.66':9988
'21#.#18.192.43':9988
'21#.#18.3.10':9988
'21#.#18.148.232':9988
'21#.#18.52.250':9988
'21#.#18.122.106':9988
'21#.#18.4.112':9988
'21#.#18.162.10':9988
'21#.#18.254.239':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней