Trojan.DownLoader9.42050

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1132 -dm 7 7 %TEMP%\WERe69f.dir00\svchost.exe.mdmp 16325836412032172

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
<Служебный элемент>
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%TEMP%\WERe69f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe

Сетевая активность:

Подключается к:

'22#.#43.121.75':139
'22#.#43.85.156':139
'22#.#43.156.63':139
'22#.#43.50.81':139
'22#.#43.82.99':139
'22#.#43.177.185':139
'22#.#43.22.198':139
'22#.#43.17.132':139
'22#.#43.20.198':139
'22#.#43.65.127':139
'22#.#43.16.114':139
'22#.#43.8.135':139
'22#.#43.103.175':139
'22#.#43.43.253':139
'22#.#43.23.175':139
'22#.#43.12.171':139
'22#.#43.96.193':445
'22#.#43.1.86':139
'22#.#43.96.151':139
'22#.#43.65.188':445
'22#.#43.64.133':139
'22#.#43.61.181':139
'22#.#43.34.254':139
'22#.#43.143.225':445
'22#.#43.116.66':445
'22#.#43.16.128':445
'22#.#43.31.137':445
'22#.#43.70.185':445
'22#.#43.107.165':445
'22#.#43.47.168':445
'22#.#43.85.232':445
'22#.#43.64.133':445
'22#.#43.8.42':445
'22#.#43.228.143':445
'22#.#43.169.80':445
'22#.#43.108.10':139
'22#.#43.86.25':445
'22#.#43.17.132':445
'22#.#43.89.252':445
'22#.#43.20.198':445
'22#.#43.59.29':445
'22#.#43.199.208':445
'22#.#43.1.86':445
'22#.#43.41.211':445
'22#.#43.64.77':445
'22#.#43.195.243':445
'22#.#43.211.34':139
'22#.#43.48.96':139
'22#.#43.165.221':139
'22#.#43.126.42':445
'22#.#43.96.193':139
'22#.#43.131.223':139
'22#.#43.184.48':139
'22#.#43.41.211':139
'22#.#43.47.168':139
'22#.#43.102.104':445
'22#.#43.102.104':139
'22#.#43.70.185':139
'22#.#43.30.31':445
'22#.#43.90.127':445
'22#.#43.94.84':445
'22#.#43.64.171':445
'22#.#43.89.31':445
'22#.#43.141.181':445
'22#.#43.75.185':445
'22#.#43.244.50':445
'22#.#43.196.142':445
'22#.#43.21.245':445
'22#.#43.50.151':445
'22#.#43.85.139':445
'22#.#43.228.143':139
'22#.#43.64.77':139
'22#.#43.8.42':139
'22#.#43.19.51':139
'22#.#43.16.128':139
'22#.#43.31.137':139
'22#.#43.48.96':445
'22#.#43.16.140':139
'22#.#43.85.232':139
'22#.#43.2.214':139
'22#.#43.107.165':139
'22#.#43.143.225':139
'22#.#43.59.29':139
'22#.#43.184.48':445
'22#.#43.153.225':139
'22#.#43.116.66':139
'22#.#43.169.80':139
'22#.#43.131.223':445
'22#.#43.195.243':139
'22#.#43.165.221':445
'22#.#43.86.25':139
'22#.#43.199.208':139
'22#.#43.89.252':139
'22#.#43.186.108':139
'22#.#43.24.2':139
'22#.#43.213.185':139
'22#.#43.175.8':139
'22#.#43.207.86':139
'22#.#43.141.220':139
'22#.#43.105.193':139
'22#.#43.26.172':139
'22#.#43.171.206':139
'22#.#43.97.77':139
'22#.#43.26.179':139
'22#.#43.61.78':139
'22#.#43.32.242':445
'22#.#43.33.183':445
'22#.#43.233.6':445
'22#.#43.27.127':139
'22#.#43.175.36':445
'22#.#43.202.90':445
'22#.#43.10.28':139
'22#.#43.53.10':139
'22#.#43.64.219':445
'22#.#43.3.77':445
'22#.#43.170.252':445
'22#.#43.113.246':139
'22#.#43.170.230':445
'22#.#43.74.64':139
'22#.#43.114.184':139
'22#.#43.64.146':139
'22#.#43.32.135':445
'22#.#43.70.75':445
'22#.#43.153.16':445
'22#.#43.109.139':445
'22#.#43.160.2':445
'22#.#43.111.64':445
'22#.#43.45.3':139
'22#.#43.78.174':139
'22#.#43.243.78':139
'22#.#43.236.221':139
'22#.#43.147.26':139
'22#.#43.78.157':139
'22#.#43.56.243':139
'22#.#43.93.199':139
'22#.#43.170.230':139
'22#.#43.146.106':139
'22#.#43.93.73':139
'22#.#43.63.9':139
'22#.#43.182.216':445
'22#.#43.82.99':445
'22#.#43.16.114':445
'22#.#43.177.185':445
'22#.#43.85.156':445
'22#.#43.22.198':445
'22#.#43.156.63':445
'22#.#43.48.236':139
'22#.#43.233.6':139
'22#.#43.65.127':445
'22#.#43.121.75':445
'22#.#43.8.135':445
'22#.#43.34.254':445
'22#.#43.19.51':445
'22#.#43.12.171':445
'22#.#43.2.214':445
'22#.#43.16.140':445
'22#.#43.211.34':445
'22#.#43.103.175':445
'22#.#43.43.253':445
'22#.#43.61.181':445
'22#.#43.50.81':445
'22#.#43.96.151':445
'22#.#43.23.175':445
'22#.#43.70.75':139
'22#.#43.76.199':139
'22#.#43.111.64':139
'22#.#43.153.16':139
'22#.#43.109.139':139
'22#.#43.166.116':139
'22#.#43.48.236':445
'22#.#43.25.148':445
'22#.#43.74.164':139
'22#.#43.2.135':139
'22#.#43.206.36':139
'22#.#43.32.135':139
'22#.#43.25.148':139
'22#.#43.182.216':139
'22#.#43.202.90':139
'22#.#43.33.183':139
'22#.#43.170.252':139
'22#.#43.175.36':139
'22#.#43.108.10':445
'22#.#43.160.2':139
'22#.#43.3.77':139
'22#.#43.32.242':139
'22#.#43.64.219':139
'22#.#43.12.201':445
'22#.#43.68.172':445
'22#.#43.198.207':445
'22#.#43.162.206':445
'22#.#43.139.30':445
'22#.#43.143.211':445
'22#.#43.239.251':445
'22#.#43.232.225':445
'22#.#43.186.240':445
'22#.#43.245.197':445
'22#.#43.156.139':445
'22#.#43.120.111':445
'22#.#43.148.210':139
'22#.#43.88.45':445
'22#.#43.57.23':139
'22#.#43.70.236':139
'22#.#43.255.115':139
'22#.#43.45.199':445
'22#.#43.155.254':445
'22#.#43.152.44':445
'22#.#43.16.231':445
'22#.#43.195.56':445
'22#.#43.201.198':445
'22#.#43.45.247':445
'22#.#43.10.186':445
'22#.#43.244.171':445
'22#.#43.200.166':445
'22#.#43.249.90':445
'22#.#43.141.251':445
'22#.#43.43.217':445
'22#.#43.177.51':445
'22#.#43.243.116':445
'22#.#43.129.105':445
'22#.#43.113.219':445
'22#.#43.146.176':445
'22#.#43.189.30':445
'22#.#43.35.7':445
'22#.#43.181.92':445
'22#.#43.87.64':445
'22#.#43.81.79':445
'22#.#43.210.154':445
'22#.#43.142.104':445
'22#.#43.107.252':445
'22#.#43.5.205':445
'22#.#43.201.166':445
'22#.#43.107.245':445
'22#.#43.222.175':139
'22#.#43.10.186':139
'22#.#43.200.166':139
'22#.#43.245.197':139
'22#.#43.143.211':139
'22#.#43.68.172':139
'22#.#43.239.251':139
'22#.#43.181.92':139
'22#.#43.156.139':139
'22#.#43.87.64':139
'22#.#43.45.247':139
'22#.#43.232.225':139
'22#.#43.195.56':139
'22#.#43.45.199':139
'22#.#43.16.231':139
'22#.#43.152.44':139
'22#.#43.88.45':139
'22#.#43.155.254':139
'22#.#43.198.207':139
'22#.#43.139.30':139
'22#.#43.120.111':139
'22#.#43.162.206':139
'22#.#43.201.198':139
'22#.#43.12.201':139
'22#.#43.129.105':139
'22#.#43.177.51':139
'22#.#43.94.222':139
'22#.#43.244.171':139
'22#.#43.210.154':139
'22#.#43.243.116':139
'22#.#43.43.217':139
'22#.#43.89.90':139
'22#.#43.90.201':139
'22#.#43.113.219':139
'22#.#43.82.100':139
'22#.#43.107.245':139
'22#.#43.201.166':139
'22#.#43.5.205':139
'22#.#43.141.251':139
'22#.#43.189.30':139
'22#.#43.81.79':139
'22#.#43.186.240':139
'22#.#43.146.176':139
'22#.#43.249.90':139
'22#.#43.107.252':139
'22#.#43.142.104':139
'22#.#43.35.7':139
'22#.#43.108.126':445
'22#.#43.62.108':445
'22#.#43.32.68':445
'22#.#43.126.42':139
'22#.#43.30.31':139
'22#.#43.62.206':445
'22#.#43.2.67':445
'22#.#43.175.166':445
'22#.#43.83.246':445
'22#.#43.0.233':445
'22#.#43.214.7':445
'22#.#43.196.142':139
'22#.#43.141.181':139
'22#.#43.90.127':139
'22#.#43.64.171':139
'22#.#43.23.33':139
'22#.#43.171.23':139
'22#.#43.94.84':139
'22#.#43.75.185':139
'22#.#43.85.139':139
'22#.#43.21.245':139
'22#.#43.50.151':139
'22#.#43.244.50':139
'22#.#43.70.170':445
'22#.#43.118.23':445
'22#.#43.66.29':445
'22#.#43.79.209':445
'22#.#43.35.87':445
'22#.#43.41.229':445
'22#.#43.23.33':445
'22#.#43.158.90':445
'22#.#43.12.219':445
'22#.#43.171.23':445
'22#.#43.205.59':445
'22#.#43.212.213':445
'22#.#43.79.74':445
'22#.#43.218.73':445
'22#.#43.26.237':445
'22#.#43.201.165':445
'22#.#43.116.35':445
'22#.#43.231.20':445
'22#.#43.23.80':445
'22#.#43.74.172':445
'22#.#43.228.76':445
'22#.#43.23.84':445
'22#.#43.173.162':445
'22#.#43.74.172':139
'22#.#43.89.90':9988
'22#.#43.32.68':139
'22#.#43.143.211':9988
'22#.#43.201.166':9988
'22#.#43.210.154':9988
'22#.#43.108.126':139
'22#.#43.0.233':139
'22#.#43.83.246':139
'22#.#43.2.67':139
'22#.#43.62.108':139
'22#.#43.62.206':139
'22#.#43.139.30':9988
'22#.#43.255.115':445
'22#.#43.222.175':445
'22#.#43.94.222':445
'22#.#43.82.100':445
'22#.#43.90.201':445
'22#.#43.148.210':445
'22#.#43.94.222':9988
'22#.#43.162.206':9988
'22#.#43.70.236':445
'22#.#43.57.23':445
'22#.#43.89.90':445
'22#.#43.70.170':139
'22#.#43.89.31':139
'22#.#43.118.23':139
'22#.#43.79.209':139
'22#.#43.23.80':139
'22#.#43.158.90':139
'22#.#43.41.229':139
'22#.#43.12.219':139
'22#.#43.205.59':139
'22#.#43.35.87':139
'22#.#43.66.29':139
'22#.#43.228.76':139
'22#.#43.201.165':139
'22#.#43.26.237':139
'22#.#43.116.35':139
'22#.#43.214.7':139
'22#.#43.175.166':139
'22#.#43.79.74':139
'22#.#43.173.162':139
'22#.#43.212.213':139
'22#.#43.23.84':139
'22#.#43.218.73':139
'22#.#43.231.20':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней