Trojan.DownLoader9.41813

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER05f8.dir00\svchost.exe.mdmp 16325836412032272

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WER05f8.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'19#.#3.206.253':139
'19#.#3.223.55':139
'19#.#3.62.217':139
'19#.#3.216.206':139
'19#.#3.216.133':139
'19#.#3.103.185':445
'19#.#3.32.196':445
'19#.#3.109.196':445
'19#.#3.21.131':139
'19#.#3.124.246':139
'19#.#3.13.190':139
'19#.#3.80.248':139
'19#.#3.153.119':139
'19#.#3.246.104':139
'19#.#3.51.13':139
'19#.#3.143.62':139
'19#.#3.104.51':139
'19#.#3.97.220':139
'19#.#3.155.175':445
'19#.#3.92.138':445
'19#.#3.79.41':445
'19#.#3.36.35':445
'19#.#3.207.253':445
'19#.#3.246.150':139
'19#.#3.130.43':139
'19#.#3.213.104':445
'19#.#3.186.115':139
'19#.#3.235.19':445
'19#.#3.206.150':139
'19#.#3.214.94':139
'19#.#3.78.173':445
'19#.#3.34.29':445
'19#.#3.9.206':139
'19#.#3.112.95':445
'19#.#3.63.145':445
'19#.#3.239.35':445
'19#.#3.115.209':139
'19#.#3.71.72':139
'19#.#3.64.66':139
'19#.#3.79.89':139
'19#.#3.132.229':139
'19#.#3.19.42':139
'19#.#3.13.190':445
'19#.#3.62.217':445
'19#.#3.97.74':139
'19#.#3.124.246':445
'19#.#3.103.8':139
'19#.#3.148.243':139
'19#.#3.19.112':139
'19#.#3.154.36':139
'19#.#3.161.92':139
'19#.#3.227.127':139
'19#.#3.77.84':139
'19#.63.8.67':139
'19#.#3.67.132':139
'19#.#3.223.55':445
'19#.#3.40.167':139
'19#.#3.118.63':139
'19#.#3.206.150':445
'19#.#3.9.206':445
'19#.#3.125.114':139
'19#.#3.63.232':139
'19#.#3.237.99':139
'19#.#3.74.148':139
'19#.#3.23.28':139
'19#.#3.115.209':445
'19#.#3.186.115':445
'19#.#3.216.133':445
'19#.#3.108.58':445
'19#.#3.246.150':445
'19#.#3.130.43':445
'19#.#3.143.90':445
'19#.#3.214.94':445
'19#.#3.21.131':445
'19#.#3.93.57':445
'19#.#3.121.74':139
'19#.#3.20.93':139
'19#.#3.184.146':139
'19#.#3.213.104':139
'19#.#3.93.57':139
'19#.#3.130.55':139
'19#.#3.70.48':139
'19#.#3.112.56':445
'19#.#3.150.182':445
'19#.#3.34.29':139
'19#.#3.212.74':139
'19#.#3.50.137':445
'19#.#3.207.253':139
'19#.#3.235.19':139
'19#.#3.253.191':139
'19#.#3.203.229':139
'19#.#3.229.29':445
'19#.#3.38.200':445
'19#.#3.36.77':445
'19#.63.4.10':139
'19#.#3.222.14':139
'19#.#3.139.13':139
'19#.#3.3.100':139
'19#.#3.176.27':139
'19#.#3.95.239':139
'19#.#3.97.150':139
'19#.#3.148.17':139
'19#.#3.156.237':139
'19#.#3.34.85':445
'19#.#3.209.131':139
'19#.#3.73.209':139
'19#.#3.3.219':445
'19#.#3.210.157':445
'19#.#3.65.139':139
'19#.#3.34.117':139
'19#.#3.60.20':139
'19#.#3.3.219':139
'19#.#3.60.20':445
'19#.#3.65.139':445
'19#.#3.73.209':445
'19#.#3.209.131':445
'19#.#3.139.13':445
'19#.#3.148.17':445
'19#.#3.222.14':445
'19#.#3.34.117':445
'19#.#3.3.100':445
'19#.#3.184.146':445
'19#.#3.253.191':445
'19#.#3.108.58':139
'19#.#3.121.74':445
'19#.#3.20.93':445
'19#.#3.20.44':139
'19#.#3.70.48':445
'19#.#3.130.55':445
'19#.#3.143.90':139
'19#.63.4.10':445
'19#.#3.112.95':139
'19#.#3.239.35':139
'19#.#3.36.35':139
'19#.#3.155.175':139
'19#.#3.92.138':139
'19#.#3.79.41':139
'19#.#3.65.205':445
'19#.#3.63.145':139
'19#.#3.32.196':139
'19#.#3.97.150':445
'19#.#3.156.237':445
'19#.#3.163.179':445
'19#.#3.95.239':445
'19#.63.8.65':445
'19#.#3.31.66':139
'19#.#3.78.173':139
'19#.#3.109.196':139
'19#.#3.103.185':139
'19#.#3.206.253':445
'19#.#3.35.176':445
'19#.#3.13.116':445
'19#.#3.104.225':445
'19#.#3.167.213':445
'19#.#3.241.199':445
'19#.#3.137.131':445
'19#.#3.219.182':445
'19#.#3.34.205':445
'19#.#3.126.39':445
'19#.#3.153.105':445
'19#.#3.64.199':445
'19#.#3.253.156':445
'19#.#3.109.65':445
'19#.#3.38.43':445
'19#.63.3.93':445
'19#.#3.125.105':445
'19#.#3.210.67':445
'19#.#3.156.216':445
'19#.#3.11.120':445
'19#.#3.253.156':139
'19#.#3.216.164':139
'19#.#3.210.67':139
'19#.#3.211.154':139
'19#.#3.156.216':139
'19#.#3.64.199':139
'19#.#3.241.199':139
'19#.#3.17.60':139
'19#.#3.35.176':139
'19#.#3.125.105':139
'19#.63.3.93':139
'19#.#3.52.11':445
'19#.#3.104.225':139
'19#.#3.91.69':139
'19#.#3.153.105':139
'19#.#3.38.43':139
'19#.#3.109.65':139
'19#.#3.138.30':139
'19#.#3.200.92':139
'19#.#3.59.84':139
'19#.#3.92.104':445
'19#.#3.193.65':139
'19#.#3.126.86':139
'19#.#3.249.136':139
'19#.#3.113.38':139
'19#.#3.242.200':139
'19#.#3.104.126':139
'19#.#3.113.38':445
'19#.#3.64.167':445
'19#.#3.200.92':445
'19#.63.21.3':445
'19#.#3.27.139':139
'19#.#3.140.184':139
'19#.#3.101.248':139
'19#.#3.249.101':139
'19#.#3.85.92':139
'19#.63.86.9':139
'19#.#3.64.167':139
'19#.#3.110.154':139
'19#.#3.223.208':139
'19#.#3.222.229':139
'19#.#3.17.60':445
'19#.#3.211.154':445
'19#.#3.175.125':139
'19#.#3.138.30':445
'19#.#3.167.110':139
'19#.#3.125.160':139
'19#.#3.234.116':139
'19#.63.21.3':139
'19#.#3.160.75':139
'19#.#3.74.193':139
'19#.#3.17.83':139
'19#.#3.39.132':139
'19#.#3.80.114':139
'19#.#3.160.233':139
'19#.#3.13.116':139
'19#.#3.87.59':139
'19#.#3.246.52':139
'19#.#3.51.31':139
'19#.#3.187.146':139
'19#.#3.69.37':139
'19#.#3.23.17':139
'19#.#3.115.171':139
'19#.#3.20.192':139
'19#.#3.172.74':139
'19#.#3.13.144':139
'19#.#3.101.217':139
'19#.#3.228.101':445
'19#.#3.46.77':445
'19#.#3.13.178':139
'19#.#3.87.246':139
'19#.#3.228.101':139
'19#.#3.51.154':139
'19#.#3.172.45':139
'19#.#3.153.119':445
'19#.#3.63.232':445
'19#.#3.74.148':445
'19#.#3.104.51':445
'19#.#3.23.28':445
'19#.#3.77.95':139
'19#.#3.101.54':139
'19#.#3.216.206':445
'19#.#3.51.13':445
'19#.#3.125.114':445
'19#.#3.40.167':445
'19#.#3.133.245':139
'19#.#3.83.253':139
'19#.#3.46.77':139
'19#.#3.118.63':445
'19#.#3.143.62':445
'19#.#3.237.99':445
'19#.#3.97.220':445
'19#.#3.246.104':445
'19#.#3.77.84':445
'19#.#3.87.59':445
'19#.#3.87.246':445
'19#.#3.77.95':445
'19#.#3.69.37':445
'19#.#3.187.146':445
'19#.#3.79.89':445
'19#.#3.23.17':445
'19#.#3.20.192':445
'19#.#3.13.178':445
'19#.#3.172.45':445
'19#.#3.167.213':139
'19#.#3.13.144':445
'19#.#3.101.217':445
'19#.#3.172.74':445
'19#.#3.227.127':445
'19#.#3.51.154':445
'19#.#3.103.8':445
'19#.#3.246.52':445
'19#.#3.137.131':139
'19#.#3.11.120':139
'19#.#3.126.39':139
'19#.#3.219.182':139
'19#.#3.52.11':139
'19#.#3.97.74':445
'19#.#3.51.31':445
'19#.#3.64.66':445
'19#.#3.19.42':445
'19#.#3.83.253':445
'19#.#3.71.72':445
'19#.#3.132.229':445
'19#.#3.133.245':445
'19#.#3.67.132':445
'19#.#3.161.92':445
'19#.#3.34.205':139
'19#.#3.148.243':445
'19#.63.8.67':445
'19#.#3.24.83':445
'19#.#3.37.80':445
'19#.#3.60.108':445
'19#.#3.75.61':9988
'19#.#3.123.164':445
'19#.#3.157.16':445
'19#.#3.225.51':445
'19#.#3.177.110':445
'19#.#3.100.250':445
'19#.#3.6.211':445
'19#.#3.11.61':9988
'19#.#3.42.167':9988
'19#.#3.58.207':9988
'19#.63.8.62':9988
'19#.#3.107.121':9988
'19#.#3.33.188':9988
'19#.#3.242.167':9988
'19#.#3.83.186':9988
'19#.63.49.6':9988
'19#.#3.205.105':445
'19#.#3.22.233':445
'19#.#3.117.9':445
'19#.#3.255.107':445
'19#.#3.107.121':445
'19#.#3.164.185':445
'19#.63.8.62':445
'19#.#3.195.111':445
'19#.#3.19.30':445
'19#.#3.75.61':445
'19#.#3.146.102':445
'19#.#3.130.190':445
'19#.#3.105.203':445
'19#.#3.170.240':445
'19#.#3.58.207':445
'19#.#3.127.88':445
'19#.#3.33.87':445
'19#.#3.40.88':445
'19#.#3.92.182':445
'19#.#3.207.249':9988
'19#.#3.59.203':9988
'19#.#3.122.206':9988
'19#.#3.44.197':9988
'19#.#3.193.91':9988
'19#.#3.62.201':9988
'19#.#3.77.85':139
'19#.#3.65.128':9988
'19#.#3.195.111':9988
'19#.#3.119.157':445
'19#.#3.103.237':445
'19#.#3.225.251':445
'19#.#3.189.201':445
'19#.#3.89.192':445
'19#.#3.95.166':445
'19#.#3.109.17':445
'19#.#3.52.170':445
'19#.#3.9.133':445
'19#.#3.119.157':139
'19#.#3.146.102':9988
'19#.#3.37.80':9988
'19#.#3.109.17':139
'19#.#3.9.133':139
'19#.#3.117.9':9988
'19#.#3.164.185':9988
'19#.#3.168.184':9988
'19#.#3.130.190':9988
'19#.#3.177.110':9988
'19#.#3.241.207':139
'19#.#3.73.252':139
'19#.#3.89.192':139
'19#.#3.189.201':139
'19#.#3.103.237':139
'19#.#3.95.166':139
'19#.#3.52.170':139
'19#.#3.19.35':139
'19#.#3.225.251':139
'19#.63.49.6':445
'19#.63.8.62':139
'19#.#3.195.111':139
'19#.#3.19.30':139
'19#.#3.75.61':139
'19#.63.49.6':139
'19#.#3.168.184':139
'19#.#3.185.67':139
'19#.#3.44.197':139
'19#.#3.242.167':139
'19#.#3.127.88':139
'19#.#3.33.87':139
'19#.#3.40.88':139
'19#.#3.92.182':139
'19#.#3.255.107':139
'19#.#3.117.9':139
'19#.#3.164.185':139
'19#.#3.107.121':139
'19#.#3.22.233':139
'19#.#3.59.203':139
'19#.#3.151.2':139
'19#.#3.207.249':139
'19#.#3.188.83':139
'19#.#3.83.186':139
'19#.#3.122.206':139
'19#.#3.19.113':139
'19#.#3.186.94':139
'19#.#3.51.169':139
'19#.#3.62.201':139
'19#.#3.83.124':139
'19#.#3.225.10':139
'19#.#3.42.167':139
'19#.#3.87.104':139
'19#.#3.11.61':139
'19#.#3.136.33':139
'19#.#3.33.188':139
'19#.#3.65.128':139
'19#.#3.193.91':139
'19#.#3.83.124':445
'19#.#3.11.61':445
'19#.#3.188.83':445
'19#.#3.193.91':445
'19#.#3.207.249':445
'19#.#3.19.113':445
'19#.#3.62.201':445
'19#.#3.33.188':445
'19#.#3.83.186':445
'19#.#3.168.184':445
'19#.#3.185.67':445
'19#.#3.44.197':445
'19#.#3.242.167':445
'19#.#3.59.203':445
'19#.#3.87.104':445
'19#.#3.225.10':445
'19#.#3.42.167':445
'19#.#3.65.128':445
'19#.#3.51.169':445
'19#.#3.177.110':139
'19#.#3.105.203':139
'19#.#3.6.211':139
'19#.#3.225.51':139
'19#.#3.205.105':139
'19#.#3.130.190':139
'19#.#3.58.207':139
'19#.#3.170.240':139
'19#.#3.146.102':139
'19#.#3.186.94':445
'19#.#3.136.33':445
'19#.#3.122.206':445
'19#.#3.151.2':445
'19#.#3.123.164':139
'19#.#3.157.16':139
'19#.#3.100.250':139
'19#.#3.37.80':139
'19#.#3.60.108':139
'19#.#3.241.207':445
'19#.63.75.7':139
'19#.#3.171.156':139
'19#.#3.155.67':139
'19#.#3.156.1':139
'19#.#3.126.94':139
'19#.#3.176.230':139
'19#.63.2.51':139
'19#.#3.249.150':139
'19#.#3.72.169':139
'19#.#3.49.228':445
'19#.#3.231.96':445
'19#.#3.15.157':445
'19#.#3.103.3':445
'19#.#3.91.119':445
'19#.#3.12.180':445
'19#.#3.233.231':139
'19#.#3.179.216':445
'19#.#3.217.31':445
'19#.#3.241.193':139
'19#.#3.208.216':139
'19#.#3.103.3':139
'19#.#3.15.157':139
'19#.#3.218.111':139
'19#.#3.49.228':139
'19#.#3.166.111':139
'19#.#3.163.23':139
'19#.#3.190.100':139
'19#.#3.190.244':139
'19#.#3.135.96':139
'19#.#3.226.31':139
'19#.#3.15.135':139
'19#.63.7.17':139
'19#.#3.75.95':139
'19#.#3.21.26':139
'19#.#3.21.75':139
'19#.#3.61.154':139
'19#.#3.44.162':139
'19#.#3.233.231':445
'19#.#3.155.67':445
'19#.#3.210.157':139
'19#.#3.34.85':139
'19#.63.75.7':445
'19#.#3.21.26':445
'19#.#3.44.162':445
'19#.63.7.17':445
'19#.#3.135.96':445
'19#.#3.43.15':139
'19#.#3.50.137':139
'19#.63.8.65':139
'19#.#3.163.179':139
'19#.#3.65.205':139
'19#.#3.112.56':139
'19#.#3.38.200':139
'19#.#3.229.29':139
'19#.#3.150.182':139
'19#.#3.190.244':445
'19#.#3.62.25':445
'19#.#3.137.215':445
'19#.#3.14.218':445
'19#.#3.163.23':445
'19#.#3.11.209':445
'19#.#3.218.111':445
'19#.#3.208.216':445
'19#.#3.12.163':445
'19#.#3.193.226':445
'19#.#3.163.192':445
'19#.#3.35.30':445
'19#.#3.69.41':445
'19#.#3.164.51':445
'19#.#3.166.111':445
'19#.#3.190.100':445
'19#.#3.96.138':445
'19#.#3.62.231':445
'19#.#3.35.245':445
'19#.#3.69.41':139
'19#.#3.200.231':139
'19#.#3.93.36':139
'19#.#3.88.10':445
'19#.#3.133.147':445
'19#.#3.83.208':139
'19#.#3.174.18':139
'19#.#3.121.215':139
'19#.#3.209.37':139
'19#.#3.79.225':139
'19#.#3.191.236':445
'19#.#3.157.191':445
'19#.#3.105.180':445
'19#.#3.144.244':445
'19#.#3.177.157':445
'19#.#3.227.68':445
'19#.#3.29.162':445
'19#.#3.244.177':445
'19#.#3.1.124':445
'19#.#3.55.127':139
'19#.#3.137.1':139
'19#.#3.77.85':445
'19#.#3.29.162':139
'19#.#3.227.68':139
'19#.#3.105.180':139
'19#.#3.19.35':445
'19#.#3.73.252':445
'19#.#3.88.10':139
'19#.#3.133.147':139
'19#.#3.56.145':139
'19#.#3.144.244':139
'19#.#3.237.104':139
'19#.#3.182.56':139
'19#.#3.244.177':139
'19#.#3.191.236':139
'19#.#3.1.124':139
'19#.#3.177.157':139
'19#.#3.157.191':139
'19#.#3.11.209':139
'19#.#3.12.163':139
'19#.#3.14.218':139
'19#.#3.231.96':139
'19#.#3.193.226':139
'19#.#3.217.31':139
'19#.#3.6.222':445
'19#.#3.12.180':139
'19#.#3.179.216':139
'19#.#3.91.119':139
'19#.#3.137.215':139
'19#.#3.164.51':139
'19#.#3.163.192':139
'19#.#3.35.30':139
'19#.#3.96.138':139
'19#.#3.62.25':139
'19#.#3.35.245':139
'19#.#3.62.231':139
'19#.63.5.17':445
'19#.#3.38.222':139
'19#.#3.55.127':445
'19#.63.5.17':139
'19#.#3.141.132':139
'19#.#3.121.215':445
'19#.#3.56.145':445
'19#.#3.137.1':445
'19#.#3.237.104':445
'19#.#3.182.56':445
'19#.#3.200.231':445
'19#.#3.174.18':445
'19#.#3.141.132':445
'19#.#3.38.222':445
'19#.#3.93.36':445
'19#.#3.79.225':445
'19#.#3.6.222':139
'19#.#3.209.37':445
'19#.#3.83.208':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней