Trojan.DownLoader9.41814

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1108 -dm 7 7 %TEMP%\WER9af3.dir00\svchost.exe.mdmp 16325836412032556

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER9af3.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'83.#.108.210':139
'83.#.106.190':139
'83.#.40.85':139
'83.#.40.85':445
'83.#.80.221':445
'83.#.150.85':139
'83.#.60.37':139
'83.#.72.201':139
'83.#.232.85':139
'83.#.35.72':139
'83.#.32.158':445
'83.#.206.92':445
'83.#.201.176':445
'83.#.43.240':445
'83.#.70.234':445
'83.#.140.67':445
'83.#.157.230':445
'83.#.18.83':445
'83.#.92.128':445
'83.#.7.208':445
'83.#.38.75':139
'83.#.17.138':139
'83.#.208.71':139
'83.#.11.176':139
'83.#.250.245':139
'83.#.58.162':139
'83.#.60.64':139
'83.#.50.245':139
'83.#.176.228':139
'83.#.167.242':139
'83.#.58.120':139
'83.#.30.237':139
'83.#.29.164':139
'83.#.62.48':139
'83.#.146.230':139
'83.#.175.133':139
'83.#.64.230':139
'83.#.39.210':139
'83.#.241.144':139
'83.#.138.162':139
'83.#.75.251':139
'83.#.42.141':445
'83.#.115.24':445
'83.#.201.117':445
'83.#.175.133':445
'83.#.169.146':445
'83.#.138.96':139
'83.#.191.218':139
'83.#.177.110':445
'83.#.189.54':445
'83.#.88.34':445
'83.#.29.164':445
'83.#.146.230':445
'83.#.11.176':445
'83.#.75.251':445
'83.#.208.71':445
'83.#.56.230':445
'83.#.58.162':445
'83.#.60.37':445
'83.#.35.72':445
'83.#.138.162':445
'83.#.64.230':445
'83.#.30.237':445
'83.#.250.245':445
'83.#.58.120':445
'83.#.241.144':445
'83.#.60.64':445
'83.#.31.99':445
'83.#.85.202':445
'83.#.184.75':445
'83.#.39.210':445
'83.#.50.245':445
'83.#.106.190':445
'83.#.108.210':445
'83.#.167.242':445
'83.#.38.75':445
'83.#.150.85':445
'83.#.74.74':445
'83.#.176.228':445
'83.#.17.138':445
'83.#.62.48':445
'83.#.72.201':445
'83.#.74.74':139
'83.#.140.2':445
'83.#.53.217':445
'83.#.248.204':445
'83.#.69.208':445
'83.#.25.230':445
'83.#.222.249':445
'83.#.163.47':445
'83.#.80.118':445
'83.#.48.38':445
'83.#.80.216':445
'83.#.143.142':445
'83.#.132.148':445
'83.#.54.30':445
'83.#.4.85':445
'83.#.150.45':445
'83.#.202.90':445
'83.#.122.74':445
'83.#.166.140':445
'83.#.1.173':445
'83.#.129.113':445
'83.#.115.185':445
'83.#.126.228':139
'83.#.222.249':139
'83.#.69.7':445
'83.#.245.87':445
'83.#.83.166':445
'83.#.181.129':139
'83.#.237.15':139
'83.#.80.118':139
'83.#.113.66':139
'83.#.1.173':139
'83.#.114.178':445
'83.#.205.127':445
'83.#.64.163':445
'83.#.25.103':445
'83.#.6.135':445
'83.#.54.22':445
'83.#.243.250':445
'83.#.83.143':445
'83.#.162.189':445
'83.#.67.96':445
'83.#.70.234':139
'83.#.7.208':139
'83.#.42.141':139
'83.#.115.24':139
'83.#.201.117':139
'83.#.43.240':139
'83.#.206.92':139
'83.#.92.128':139
'83.#.140.67':139
'83.#.18.83':139
'83.#.85.202':139
'83.#.32.158':139
'83.#.184.75':139
'83.#.31.99':139
'83.#.56.230':139
'83.#.177.110':139
'83.#.189.54':139
'83.#.88.34':139
'83.#.169.146':139
'83.#.201.176':139
'83.#.157.230':139
'83.#.181.129':445
'83.#.99.179':445
'83.#.98.34':445
'83.#.101.6':445
'83.#.29.129':445
'83.#.214.119':445
'83.#.107.17':445
'83.#.74.178':445
'83.#.234.153':445
'83.#.100.167':445
'83.#.126.228':445
'83.#.44.13':445
'83.#.113.66':445
'83.#.69.174':445
'83.#.113.100':445
'83.#.237.15':445
'83.#.240.234':445
'83.#.36.224':445
'83.#.19.143':445
'83.#.42.99':445
'83.#.62.26':139
'83.#.154.77':139
'83.#.33.203':139
'83.#.194.83':139
'83.#.83.58':139
'83.#.58.139':139
'83.#.29.25':139
'83.#.213.115':139
'83.#.164.54':139
'83.#.162.56':139
'83.#.146.213':139
'83.#.212.14':139
'83.#.255.56':139
'83.#.190.39':139
'83.#.87.107':139
'83.#.76.173':139
'83.#.220.204':139
'83.#.96.251':139
'83.#.172.16':139
'83.#.139.34':139
'83.#.86.11':139
'83.#.3.88':445
'83.#.74.215':445
'83.#.247.76':445
'83.#.62.26':445
'83.#.47.153':445
'83.#.1.209':445
'83.#.147.120':445
'83.#.183.175':445
'83.#.149.238':445
'83.#.227.120':445
'83.#.114.235':445
'83.#.183.242':445
'83.#.95.3':445
'83.#.246.45':445
'83.#.111.235':445
'83.#.34.231':445
'83.#.221.69':445
'83.#.71.134':445
'83.#.213.108':445
'83.#.37.80':445
'83.#.221.179':445
'83.#.146.213':445
'83.#.29.25':445
'83.#.23.193':445
'83.#.23.234':139
'83.#.19.51':139
'83.#.212.119':139
'83.#.213.115':445
'83.#.29.2':139
'83.#.164.54':445
'83.#.59.25':139
'83.#.211.10':139
'83.#.11.212':139
'83.#.87.107':445
'83.#.19.51':445
'83.#.200.98':445
'83.#.167.31':139
'83.#.145.105':139
'83.#.71.210':139
'83.#.147.19':445
'83.#.182.188':139
'83.#.2.47':139
'83.#.33.5':139
'83.#.180.213':139
'83.#.3.238':139
'83.#.17.41':139
'83.#.243.36':139
'83.#.5.245':139
'83.#.106.203':139
'83.#.213.87':139
'83.#.207.44':139
'83.#.14.193':139
'83.#.181.203':139
'83.#.161.223':139
'83.#.141.250':139
'83.#.143.137':139
'83.#.200.98':139
'83.#.8.202':139
'83.#.61.210':139
'83.#.64.165':445
'83.#.4.243':139
'83.#.9.128':445
'83.#.47.215':445
'83.#.54.134':139
'83.#.193.54':139
'83.#.114.235':139
'83.#.11.68':139
'83.#.36.201':139
'83.#.95.3':139
'83.#.36.70':139
'83.#.213.108':139
'83.#.227.120':139
'83.#.149.238':139
'83.#.14.95':139
'83.#.211.15':139
'83.#.144.99':139
'83.#.30.30':139
'83.#.202.165':139
'83.#.217.66':139
'83.#.166.77':139
'83.#.23.3':139
'83.#.85.100':139
'83.#.37.80':139
'83.#.152.173':139
'83.#.191.218':445
'83.#.138.82':139
'83.#.221.179':139
'83.#.252.188':139
'83.#.76.136':139
'83.#.135.34':139
'83.#.1.209':139
'83.#.192.114':139
'83.#.20.170':139
'83.#.20.5':139
'83.#.28.150':139
'83.#.7.11':139
'83.#.47.153':139
'83.#.204.209':139
'83.#.12.240':139
'83.#.138.96':445
'83.#.71.134':139
'83.#.3.74':139
'83.#.54.131':139
'83.#.221.69':139
'83.#.7.11':445
'83.#.20.170':445
'83.#.166.77':445
'83.#.211.15':445
'83.#.217.66':445
'83.#.28.150':445
'83.#.152.173':445
'83.#.54.134':445
'83.#.138.82':445
'83.#.3.74':445
'83.#.204.209':445
'83.#.85.100':445
'83.#.202.165':445
'83.#.127.202':445
'83.#.176.4':445
'83.#.14.95':445
'83.#.36.70':445
'83.#.23.3':445
'83.#.30.30':445
'83.#.144.99':445
'83.#.11.68':445
'83.#.3.88':139
'83.#.183.175':139
'83.#.176.4':139
'83.#.47.215':139
'83.#.127.202':139
'83.#.247.76':139
'83.#.246.45':139
'83.#.74.215':139
'83.#.34.231':139
'83.#.111.235':139
'83.#.192.114':445
'83.#.135.34':445
'83.#.12.240':445
'83.#.36.201':445
'83.#.20.5':445
'83.#.16.184':445
'83.#.183.242':139
'83.#.147.120':139
'83.#.76.136':445
'83.#.54.131':445
'83.#.143.142':139
'83.#.224.103':9988
'83.#.65.32':9988
'83.#.84.253':9988
'83.#.168.166':9988
'83.#.186.45':9988
'83.#.148.64':9988
'83.#.122.192':9988
'83.#.94.242':9988
'83.#.92.209':9988
'83.#.28.168':9988
'83.#.166.189':9988
'83.#.236.122':9988
'83.#.41.123':9988
'83.#.232.64':9988
'83.#.93.46':9988
'83.#.224.188':9988
'83.#.96.88':9988
'83.#.180.35':9988
'83.#.190.248':9988
'83.#.189.58':9988
'83.#.63.118':9988
'83.#.201.93':445
'83.#.186.45':445
'83.#.189.58':445
'83.#.134.188':445
'83.#.208.13':445
'83.#.169.166':445
'83.#.193.108':445
'83.#.193.220':445
'83.#.92.209':445
'83.#.168.166':445
'83.#.71.185':445
'83.#.168.177':445
'83.#.81.209':445
'83.#.194.21':9988
'83.#.185.81':445
'83.#.209.99':445
'83.#.149.153':445
'83.#.177.236':445
'83.#.208.250':445
'83.#.98.49':445
'83.#.91.213':9988
'83.#.168.48':9988
'83.#.174.34':9988
'83.#.204.189':139
'83.#.189.30':139
'83.#.189.50':9988
'83.#.193.108':9988
'83.#.185.81':9988
'83.#.71.185':9988
'83.#.149.153':9988
'83.#.122.233':139
'83.#.24.177':139
'83.#.149.122':139
'83.#.238.217':139
'83.#.13.180':139
'83.#.121.21':139
'83.#.21.205':139
'83.#.141.13':139
'83.#.233.171':139
'83.#.81.37':139
'83.#.209.99':9988
'83.#.177.236':9988
'83.#.193.220':9988
'83.#.4.56':9988
'83.#.168.177':9988
'83.#.59.232':9988
'83.#.201.93':9988
'83.#.75.155':9988
'83.#.121.236':9988
'83.#.169.166':9988
'83.#.33.13':9988
'83.#.164.115':9988
'83.#.208.13':9988
'83.#.140.75':9988
'83.#.208.250':9988
'83.#.229.201':9988
'83.#.98.49':9988
'83.#.60.87':9988
'83.#.81.209':9988
'83.#.248.153':9988
'83.#.134.188':9988
'83.#.189.50':445
'83.#.248.153':139
'83.#.224.103':139
'83.#.93.46':139
'83.#.84.253':139
'83.#.193.108':139
'83.#.148.64':139
'83.#.140.75':139
'83.#.164.115':139
'83.#.224.188':139
'83.#.96.88':139
'83.#.186.45':139
'83.#.92.209':139
'83.#.201.93':139
'83.#.134.188':139
'83.#.189.58':139
'83.#.166.189':139
'83.#.189.50':139
'83.#.169.166':139
'83.#.168.166':139
'83.#.193.220':139
'83.#.229.201':139
'83.#.236.122':139
'83.#.41.123':139
'83.#.194.21':139
'83.#.75.155':139
'83.#.168.48':139
'83.#.180.35':139
'83.#.65.32':139
'83.#.4.56':139
'83.#.59.232':139
'83.#.60.87':139
'83.#.122.192':139
'83.#.121.236':139
'83.#.91.213':139
'83.#.94.242':139
'83.#.190.248':139
'83.#.28.168':139
'83.#.63.118':139
'83.#.232.64':139
'83.#.174.34':139
'83.#.33.13':139
'83.#.148.64':445
'83.#.140.75':445
'83.#.194.21':445
'83.#.174.34':445
'83.#.94.242':445
'83.#.60.87':445
'83.#.121.236':445
'83.#.33.13':445
'83.#.164.115':445
'83.#.41.123':445
'83.#.224.103':445
'83.#.224.188':445
'83.#.93.46':445
'83.#.84.253':445
'83.#.166.189':445
'83.#.59.232':445
'83.#.229.201':445
'83.#.63.118':445
'83.#.248.153':445
'83.#.96.88':445
'83.#.91.213':445
'83.#.81.209':139
'83.#.208.250':139
'83.#.185.81':139
'83.#.168.177':139
'83.#.71.185':139
'83.#.149.153':139
'83.#.208.13':139
'83.#.209.99':139
'83.#.98.49':139
'83.#.177.236':139
'83.#.122.192':445
'83.#.190.248':445
'83.#.75.155':445
'83.#.232.64':445
'83.#.28.168':445
'83.#.180.35':445
'83.#.65.32':445
'83.#.4.56':445
'83.#.168.48':445
'83.#.236.122':445
'83.#.204.189':445
'83.#.33.64':445
'83.#.69.123':445
'83.#.21.19':445
'83.#.109.107':445
'83.#.8.223':445
'83.#.121.0':139
'83.#.42.168':139
'83.#.66.23':445
'83.#.222.139':445
'83.#.28.231':445
'83.#.54.22':139
'83.#.83.143':139
'83.#.48.38':139
'83.#.162.189':139
'83.#.243.250':139
'83.#.83.166':139
'83.#.138.119':445
'83.#.80.216':139
'83.#.245.87':139
'83.#.69.7':139
'83.#.191.180':445
'83.#.147.215':445
'83.#.148.142':445
'83.#.166.162':445
'83.#.27.162':445
'83.#.94.155':445
'83.#.184.21':445
'83.#.17.166':445
'83.#.231.6':445
'83.#.255.194':139
'83.#.9.10':445
'83.#.101.35':445
'83.#.161.65':139
'83.#.97.250':445
'83.#.18.127':445
'83.#.149.242':445
'83.#.23.48':445
'83.#.99.30':445
'83.#.32.129':445
'83.#.83.48':445
'83.#.210.251':445
'83.#.74.178':139
'83.#.100.167':139
'83.#.69.174':139
'83.#.132.148':139
'83.#.113.100':139
'83.#.99.179':139
'83.#.166.140':139
'83.#.29.129':139
'83.#.150.45':139
'83.#.240.234':139
'83.#.19.143':139
'83.#.36.224':139
'83.#.214.119':139
'83.#.234.153':139
'83.#.42.99':139
'83.#.44.13':139
'83.#.54.30':139
'83.#.98.34':139
'83.#.4.85':139
'83.#.107.17':139
'83.#.129.113':139
'83.#.140.2':139
'83.#.205.127':139
'83.#.25.103':139
'83.#.255.194':445
'83.#.69.208':139
'83.#.53.217':139
'83.#.67.96':139
'83.#.114.178':139
'83.#.121.0':445
'83.#.161.65':445
'83.#.202.90':139
'83.#.163.47':139
'83.#.64.163':139
'83.#.122.74':139
'83.#.101.6':139
'83.#.248.204':139
'83.#.115.185':139
'83.#.6.135':139
'83.#.42.168':445
'83.#.25.230':139
'83.#.58.98':445
'83.#.207.225':139
'83.#.41.147':139
'83.#.169.39':139
'83.#.184.21':139
'83.#.8.153':139
'83.#.116.10':139
'83.#.47.233':139
'83.#.0.197':139
'83.#.30.241':139
'83.#.37.208':139
'83.#.27.162':139
'83.#.148.142':139
'83.#.18.127':139
'83.#.9.10':139
'83.#.231.6':139
'83.#.245.19':139
'83.#.238.55':139
'83.#.58.98':139
'83.#.99.30':139
'83.#.17.166':139
'83.#.170.153':139
'83.#.21.205':445
'83.#.149.122':445
'83.#.141.13':445
'83.#.13.180':445
'83.#.233.171':445
'83.#.81.37':445
'83.#.189.30':445
'83.#.24.177':445
'83.#.238.217':445
'83.#.121.21':445
'83.#.28.140':139
'83.#.238.227':139
'83.#.77.82':139
'83.#.161.47':139
'83.#.54.173':139
'83.#.45.182':139
'83.#.122.233':445
'83.#.34.73':139
'83.#.169.215':139
'83.#.161.188':139
'83.#.47.233':445
'83.#.161.188':445
'83.#.45.182':445
'83.#.170.153':445
'83.#.54.173':445
'83.#.77.82':445
'83.#.169.215':445
'83.#.161.47':445
'83.#.116.10':445
'83.#.238.227':445
'83.#.8.153':445
'83.#.207.225':445
'83.#.169.39':445
'83.#.238.55':445
'83.#.245.19':445
'83.#.41.147':445
'83.#.28.140':445
'83.#.37.208':445
'83.#.30.241':445
'83.#.0.197':445
'83.#.34.73':445
'83.#.109.107':139
'83.#.21.19':139
'83.#.191.180':139
'83.#.94.155':139
'83.#.28.231':139
'83.#.66.23':139
'83.#.83.48':139
'83.#.166.162':139
'83.#.222.139':139
'83.#.149.242':139
'83.#.97.250':139
'83.#.32.129':139
'83.#.23.48':139
'83.#.33.64':139
'83.#.101.35':139
'83.#.138.119':139
'83.#.210.251':139
'83.#.147.215':139
'83.#.8.223':139
'83.#.69.123':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней