Trojan.DownLoader9.42092

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERcf41.dir00\svchost.exe.mdmp 16325836412030212

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\WERcf41.dir00\svchost.exe.mdmp

Сетевая активность:

Подключается к:

'80.##8.86.20':445
'80.##8.120.95':445
'80.##8.151.180':445
'80.##8.48.51':445
'80.##8.105.23':445
'80.##8.0.241':445
'80.##8.82.163':445
'80.##8.223.36':445
'80.##8.178.38':445
'80.##8.149.201':445
'80.##8.199.122':445
'80.##8.34.184':445
'80.##8.159.94':445
'80.##8.119.208':445
'80.##8.54.97':445
'80.##8.61.137':445
'80.##8.15.97':445
'80.##8.94.58':445
'80.##8.206.216':445
'80.##8.189.189':445
'80.##8.202.176':445
'80.##8.176.190':445
'80.##8.38.55':445
'80.##8.48.229':139
'80.##8.77.234':139
'80.##8.238.37':139
'80.##8.163.234':139
'80.##8.234.221':139
'80.##8.250.212':139
'80.##8.251.124':139
'80.##8.177.139':139
'80.##8.23.87':139
'80.##8.104.75':139
'80.##8.83.197':139
'80.##8.85.22':139
'80.##8.78.192':139
'80.##8.100.127':139
'80.##8.35.217':445
'80.##8.114.160':139
'80.##8.186.98':139
'80.##8.169.79':139
'80.##8.230.163':139
'80.##8.187.230':139
'80.##8.63.190':139
'80.##8.157.224':139
'80.##8.96.91':445
'80.#58.5.82':139
'80.##8.243.174':139
'80.##8.215.244':139
'80.##8.179.157':139
'80.##8.19.246':139
'80.##8.124.140':139
'80.##8.96.91':139
'80.##8.189.249':139
'80.##8.114.160':445
'80.##8.100.127':445
'80.##8.243.174':445
'80.##8.124.140':445
'80.##8.138.244':139
'80.##8.31.106':139
'80.##8.189.249':445
'80.##8.27.230':139
'80.##8.130.136':139
'80.##8.75.124':445
'80.##8.17.83':445
'80.##8.116.32':445
'80.##8.196.61':139
'80.##8.83.36':139
'80.##8.250.212':445
'80.##8.77.234':445
'80.##8.48.229':445
'80.##8.234.221':445
'80.##8.238.37':445
'80.##8.104.75':445
'80.##8.83.197':445
'80.##8.177.139':445
'80.##8.251.124':445
'80.##8.23.87':445
'80.##8.116.244':445
'80.##8.78.192':445
'80.##8.63.190':445
'80.##8.186.98':445
'80.##8.17.83':139
'80.##8.75.124':139
'80.##8.85.22':445
'80.##8.163.234':445
'80.##8.169.79':445
'80.##8.230.163':445
'80.##8.187.230':445
'80.##8.157.224':445
'80.##8.54.97':139
'80.##8.186.17':139
'80.##8.137.31':445
'80.##8.103.74':445
'80.##8.132.154':139
'80.##8.85.146':445
'80.##8.196.222':139
'80.##8.228.92':139
'80.##8.119.110':445
'80.##8.31.230':445
'80.##8.121.57':445
'80.##8.137.31':139
'80.##8.220.125':445
'80.##8.28.237':445
'80.##8.225.197':445
'80.##8.199.103':445
'80.##8.30.192':445
'80.##8.99.246':445
'80.##8.79.24':139
'80.##8.52.95':445
'80.##8.24.139':445
'80.##8.28.161':139
'80.##8.183.15':445
'80.##8.154.205':445
'80.##8.2.251':139
'80.##8.21.52':139
'80.##8.139.99':139
'80.#58.2.39':445
'80.##8.92.157':139
'80.##8.35.140':445
'80.##8.100.31':139
'80.##8.27.225':139
'80.##8.199.103':139
'80.##8.35.138':445
'80.##8.51.234':139
'80.##8.204.105':445
'80.##8.250.190':445
'80.##8.198.82':445
'80.##8.18.165':445
'80.##8.205.106':445
'80.##8.2.156':445
'80.##8.119.56':445
'80.##8.156.86':445
'80.##8.100.55':445
'80.##8.242.121':445
'80.##8.59.58':445
'80.##8.86.20':139
'80.##8.0.241':139
'80.##8.105.23':139
'80.##8.206.216':139
'80.##8.151.180':139
'80.##8.82.163':139
'80.##8.48.51':139
'80.##8.28.161':445
'80.##8.199.122':139
'80.##8.149.201':139
'80.##8.120.95':139
'80.##8.202.176':139
'80.##8.176.190':139
'80.##8.61.137':139
'80.##8.116.244':139
'80.##8.119.208':139
'80.##8.34.184':139
'80.##8.94.58':139
'80.##8.55.35':445
'80.##8.159.94':139
'80.##8.189.189':139
'80.##8.15.97':139
'80.##8.223.36':139
'80.##8.139.99':445
'80.##8.2.251':445
'80.##8.243.91':445
'80.##8.100.31':445
'80.##8.83.117':445
'80.##8.6.163':445
'80.##8.181.241':445
'80.##8.51.234':445
'80.##8.117.132':445
'80.##8.22.184':445
'80.##8.27.225':445
'80.##8.132.154':445
'80.##8.186.17':445
'80.##8.178.38':139
'80.##8.79.24':445
'80.##8.38.55':139
'80.##8.196.222':445
'80.##8.79.142':445
'80.##8.116.202':445
'80.##8.21.52':445
'80.##8.228.92':445
'80.##8.92.157':445
'80.##8.67.139':139
'80.##8.51.101':445
'80.##8.199.99':445
'80.##8.22.217':445
'80.##8.228.149':445
'80.##8.128.219':445
'80.##8.203.192':139
'80.##8.195.168':139
'80.##8.38.128':139
'80.##8.14.240':139
'80.##8.243.76':139
'80.##8.66.94':139
'80.##8.182.179':139
'80.#58.2.84':139
'80.##8.243.156':445
'80.##8.250.211':139
'80.##8.32.77':139
'80.##8.171.171':139
'80.##8.59.176':139
'80.##8.245.203':139
'80.##8.0.144':445
'80.##8.111.236':139
'80.##8.229.72':139
'80.##8.114.225':139
'80.##8.168.147':139
'80.##8.146.202':139
'80.##8.40.205':139
'80.##8.188.34':139
'80.##8.19.199':139
'80.##8.219.160':139
'80.##8.3.124':445
'80.##8.216.63':445
'80.##8.18.196':139
'80.##8.202.123':139
'80.##8.37.164':445
'80.##8.187.210':139
'80.##8.49.129':139
'80.##8.14.155':139
'80.#58.5.59':139
'80.##8.54.26':139
'80.##8.64.135':139
'80.##8.35.25':139
'80.##8.205.79':139
'80.##8.144.28':139
'80.##8.139.252':139
'80.##8.149.81':139
'80.##8.0.109':139
'80.##8.139.252':445
'80.##8.89.27':139
'80.##8.131.241':139
'80.##8.195.168':445
'80.##8.229.72':445
'80.##8.182.179':445
'80.##8.114.225':445
'80.##8.35.25':445
'80.##8.243.76':445
'80.##8.171.171':445
'80.##8.73.31':139
'80.##8.222.169':139
'80.##8.23.222':139
'80.##8.18.157':139
'80.##8.1.207':139
'80.##8.157.8':139
'80.##8.13.78':139
'80.##8.33.96':139
'80.##8.118.72':139
'80.##8.0.112':139
'80.##8.49.129':445
'80.##8.64.135':445
'80.##8.18.196':445
'80.##8.157.209':445
'80.##8.159.179':139
'80.##8.202.123':445
'80.##8.187.234':445
'80.##8.209.9':445
'80.##8.91.108':139
'80.##8.57.172':139
'80.##8.46.182':139
'80.##8.105.244':139
'80.##8.97.230':139
'80.##8.19.199':445
'80.##8.149.81':445
'80.##8.97.230':445
'80.##8.144.28':445
'80.##8.105.244':445
'80.##8.188.34':445
'80.##8.146.202':445
'80.##8.168.147':445
'80.##8.40.205':445
'80.##8.205.79':445
'80.##8.219.160':445
'80.##8.243.156':139
'80.##8.200.246':139
'80.##8.35.15':139
'80.##8.63.143':139
'80.##8.149.181':139
'80.##8.254.10':139
'80.##8.55.231':139
'80.##8.146.205':445
'80.#58.0.55':139
'80.##8.154.196':139
'80.##8.159.223':139
'80.##8.96.71':139
'80.#58.5.82':445
'80.##8.130.136':445
'80.##8.196.61':445
'80.##8.138.244':445
'80.##8.27.230':445
'80.##8.179.157':445
'80.##8.228.89':139
'80.##8.110.172':139
'80.##8.247.210':139
'80.##8.215.244':445
'80.##8.19.246':445
'80.##8.21.239':139
'80.##8.170.228':139
'80.##8.14.138':139
'80.##8.59.28':139
'80.##8.36.243':139
'80.##8.68.42':139
'80.##8.50.61':139
'80.##8.237.17':139
'80.##8.35.98':139
'80.#58.1.52':139
'80.##8.122.114':139
'80.##8.22.123':139
'80.##8.100.147':139
'80.##8.170.228':445
'80.##8.86.239':139
'80.##8.187.224':139
'80.##8.16.90':139
'80.##8.244.35':139
'80.##8.251.38':139
'80.##8.189.173':139
'80.##8.143.208':139
'80.##8.119.235':139
'80.##8.146.205':139
'80.##8.228.89':445
'80.##8.51.101':139
'80.##8.55.231':445
'80.##8.247.210':445
'80.##8.110.172':445
'80.##8.63.143':445
'80.##8.122.114':445
'80.##8.119.235':445
'80.##8.16.90':445
'80.##8.254.10':445
'80.##8.200.246':445
'80.##8.9.192':139
'80.##8.3.124':139
'80.##8.149.181':445
'80.##8.157.209':139
'80.##8.209.9':139
'80.##8.22.217':139
'80.##8.37.164':139
'80.##8.228.149':139
'80.##8.216.63':139
'80.##8.199.99':139
'80.##8.128.219':139
'80.##8.159.223':445
'80.##8.35.98':445
'80.#58.1.52':445
'80.##8.251.38':445
'80.##8.100.147':445
'80.##8.59.28':445
'80.##8.36.243':445
'80.##8.14.138':445
'80.##8.67.139':445
'80.##8.22.123':445
'80.##8.50.61':445
'80.##8.237.17':445
'80.##8.244.35':445
'80.##8.143.208':445
'80.##8.154.196':445
'80.##8.96.71':445
'80.##8.35.15':445
'80.##8.31.106':445
'80.##8.187.224':445
'80.##8.68.42':445
'80.##8.86.239':445
'80.##8.21.239':445
'80.#58.0.55':445
'80.##8.116.82':139
'80.##8.85.120':139
'80.##8.0.120':139
'80.##8.55.208':139
'80.##8.197.173':139
'80.##8.120.60':139
'80.##8.81.124':139
'80.##8.200.165':139
'80.##8.21.82':139
'80.##8.57.218':139
'80.##8.215.219':139
'80.##8.11.201':139
'80.##8.97.207':139
'80.##8.61.158':139
'80.##8.87.205':139
'80.##8.240.158':139
'80.##8.134.178':139
'80.##8.248.57':139
'80.##8.44.158':139
'80.##8.87.248':139
'80.##8.56.42':139
'80.##8.200.189':139
'80.##8.144.149':139
'80.##8.139.104':445
'80.##8.44.107':445
'80.##8.140.74':445
'80.##8.122.104':9988
'80.##8.152.225':445
'80.##8.45.203':445
'80.#58.88.9':445
'80.##8.102.74':445
'80.##8.55.51':445
'80.##8.214.138':445
'80.##8.2.225':445
'80.##8.44.107':9988
'80.##8.33.129':9988
'80.##8.139.104':9988
'80.##8.43.127':139
'80.##8.209.131':139
'80.##8.140.74':9988
'80.##8.43.53':9988
'80.##8.195.100':9988
'80.##8.233.161':9988
'80.##8.102.46':9988
'80.##8.226.168':9988
'80.##8.81.124':445
'80.##8.21.82':445
'80.##8.57.218':445
'80.##8.215.219':445
'80.##8.0.120':445
'80.##8.144.149':445
'80.##8.169.228':139
'80.##8.30.34':139
'80.##8.209.131':445
'80.##8.200.165':445
'80.##8.43.127':445
'80.##8.200.189':445
'80.##8.156.77':445
'80.##8.248.57':445
'80.##8.56.42':445
'80.##8.87.248':445
'80.##8.44.158':445
'80.##8.120.60':445
'80.##8.197.173':445
'80.##8.85.120':445
'80.##8.55.208':445
'80.##8.116.82':445
'80.##8.33.199':139
'80.##8.104.127':139
'80.##8.77.151':139
'80.##8.51.27':139
'80.##8.245.197':139
'80.##8.59.181':139
'80.##8.201.72':139
'80.##8.197.30':139
'80.##8.107.183':139
'80.##8.64.147':139
'80.##8.159.125':139
'80.##8.47.184':139
'80.##8.55.164':139
'80.##8.60.201':139
'80.##8.169.142':139
'80.##8.234.204':139
'80.##8.72.169':139
'80.##8.21.138':139
'80.##8.87.164':139
'80.##8.164.129':139
'80.##8.156.77':139
'80.##8.27.52':139
'80.##8.81.78':139
'80.##8.119.224':445
'80.##8.168.41':139
'80.##8.19.74':139
'80.##8.61.39':139
'80.##8.106.103':139
'80.##8.226.168':139
'80.##8.45.28':139
'80.##8.19.27':139
'80.##8.19.104':139
'80.##8.30.158':139
'80.##8.121.170':139
'80.##8.102.46':139
'80.#58.88.9':139
'80.##8.119.224':139
'80.##8.55.51':139
'80.##8.139.104':139
'80.##8.102.74':139
'80.##8.93.33':139
'80.##8.124.91':139
'80.##8.107.188':139
'80.##8.188.52':139
'80.##8.33.129':139
'80.##8.14.23':139
'80.##8.16.38':139
'80.##8.195.100':139
'80.##8.53.56':139
'80.##8.43.53':139
'80.##8.174.168':139
'80.##8.139.187':139
'80.##8.126.28':139
'80.##8.55.135':139
'80.##8.122.104':139
'80.##8.168.234':139
'80.##8.67.63':139
'80.##8.104.135':139
'80.##8.201.174':139
'80.##8.67.166':139
'80.##8.55.146':139
'80.##8.83.30':139
'80.##8.73.219':139
'80.##8.49.117':139
'80.#58.74.0':139
'80.##8.233.161':139
'80.##8.127.201':139
'80.##8.135.16':139
'80.##8.101.43':139
'80.##8.16.38':445
'80.##8.30.158':445
'80.##8.19.104':445
'80.##8.121.170':445
'80.##8.49.117':445
'80.#58.74.0':445
'80.##8.19.27':445
'80.##8.104.135':445
'80.##8.55.146':445
'80.##8.201.174':445
'80.##8.168.234':445
'80.##8.106.103':445
'80.##8.124.91':445
'80.##8.33.129':445
'80.##8.93.33':445
'80.##8.14.23':445
'80.##8.226.168':445
'80.##8.168.41':445
'80.##8.61.39':445
'80.##8.45.28':445
'80.##8.107.188':445
'80.##8.188.52':445
'80.##8.101.43':445
'80.##8.67.63':445
'80.##8.122.104':445
'80.##8.174.168':445
'80.##8.43.53':445
'80.##8.139.187':445
'80.##8.152.225':139
'80.##8.45.203':139
'80.##8.214.138':139
'80.##8.2.225':139
'80.##8.140.74':139
'80.##8.44.107':139
'80.##8.102.46':445
'80.##8.55.135':445
'80.##8.127.201':445
'80.##8.53.56':445
'80.##8.73.219':445
'80.##8.83.30':445
'80.##8.233.161':445
'80.##8.195.100':445
'80.##8.126.28':445
'80.##8.135.16':445
'80.##8.67.166':445
'80.##8.107.183':445
'80.##8.220.88':445
'80.##8.170.17':445
'80.##8.248.190':445
'80.##8.132.210':445
'80.##8.141.102':445
'80.##8.206.149':445
'80.##8.209.176':445
'80.##8.227.177':445
'80.##8.246.187':445
'80.##8.195.78':445
'80.##8.242.226':445
'80.##8.245.96':445
'80.##8.149.190':445
'80.##8.98.247':445
'80.#58.0.21':445
'80.##8.70.71':445
'80.##8.200.163':445
'80.##8.11.97':445
'80.##8.171.231':445
'80.##8.150.187':445
'80.#58.0.22':445
'80.##8.226.91':445
'80.##8.236.155':445
'80.##8.168.44':445
'80.##8.64.155':445
'80.##8.211.205':445
'80.##8.181.248':445
'80.##8.52.59':445
'80.##8.32.185':445
'80.##8.99.219':445
'80.##8.241.89':445
'80.##8.18.86':445
'80.#58.6.41':445
'80.##8.121.221':445
'80.##8.246.213':445
'80.##8.141.131':445
'80.##8.42.77':445
'80.##8.16.46':445
'80.##8.10.54':445
'80.##8.57.124':445
'80.##8.14.21':139
'80.##8.137.196':139
'80.##8.28.174':139
'80.##8.69.164':139
'80.##8.230.85':139
'80.#58.2.39':139
'80.##8.24.139':139
'80.##8.181.241':139
'80.##8.30.192':139
'80.##8.225.197':139
'80.##8.85.146':139
'80.##8.7.157':139
'80.##8.31.230':139
'80.##8.230.85':445
'80.##8.52.95':139
'80.##8.103.74':139
'80.##8.116.202':139
'80.##8.79.142':139
'80.##8.6.163':139
'80.##8.22.184':139
'80.##8.117.132':139
'80.##8.83.117':139
'80.##8.183.15':139
'80.##8.99.246':139
'80.##8.243.91':139
'80.##8.28.237':139
'80.##8.220.125':139
'80.##8.121.57':139
'80.##8.2.156':139
'80.##8.69.164':445
'80.##8.250.190':139
'80.##8.100.55':139
'80.##8.119.56':139
'80.##8.156.86':139
'80.##8.147.83':445
'80.##8.132.91':445
'80.##8.199.10':445
'80.##8.28.174':445
'80.##8.14.21':445
'80.##8.205.106':139
'80.##8.18.165':139
'80.##8.35.140':139
'80.##8.119.110':139
'80.##8.154.205':139
'80.##8.198.82':139
'80.##8.35.138':139
'80.##8.204.105':139
'80.##8.59.58':139
'80.##8.137.196':445
'80.##8.242.121':139
'80.##8.159.181':445
'80.##8.159.125':445
'80.##8.169.228':445
'80.##8.151.118':139
'80.##8.71.94':139
'80.##8.241.89':139
'80.##8.234.204':445
'80.##8.240.158':445
'80.##8.81.78':445
'80.##8.134.178':445
'80.##8.61.158':445
'80.##8.218.234':139
'80.##8.116.9':139
'80.##8.121.221':139
'80.#58.6.41':139
'80.##8.218.234':445
'80.##8.32.185':139
'80.##8.40.123':139
'80.##8.120.147':139
'80.##8.250.106':139
'80.##8.159.181':139
'80.##8.179.57':139
'80.##8.18.86':139
'80.##8.11.201':445
'80.##8.51.27':445
'80.##8.87.164':445
'80.##8.27.52':445
'80.##8.55.164':445
'80.##8.60.201':445
'80.##8.47.184':445
'80.##8.77.151':445
'80.##8.97.207':445
'80.##8.201.72':445
'80.##8.64.147':445
'80.##8.87.205':445
'80.##8.197.30':445
'80.##8.99.219':139
'80.##8.104.127':445
'80.##8.59.181':445
'80.##8.21.138':445
'80.##8.72.169':445
'80.##8.30.34':445
'80.##8.33.199':445
'80.##8.169.142':445
'80.##8.164.129':445
'80.##8.245.197':445
'80.##8.132.91':139
'80.##8.227.177':139
'80.##8.170.17':139
'80.##8.149.190':139
'80.#58.0.22':139
'80.##8.141.131':139
'80.##8.168.44':139
'80.##8.206.149':139
'80.##8.52.59':139
'80.##8.246.187':139
'80.##8.236.155':139
'80.##8.57.124':139
'80.##8.140.59':139
'80.##8.250.106':445
'80.##8.120.147':445
'80.##8.151.118':445
'80.##8.171.231':139
'80.##8.150.187':139
'80.##8.195.78':139
'80.##8.70.71':139
'80.#58.0.21':139
'80.##8.147.83':139
'80.##8.245.96':139
'80.##8.246.213':139
'80.##8.226.91':139
'80.##8.64.155':139
'80.##8.242.226':139
'80.##8.248.190':139
'80.##8.200.163':139
'80.##8.40.123':445
'80.##8.179.57':445
'80.##8.42.77':139
'80.##8.141.102':139
'80.##8.132.210':139
'80.##8.10.54':139
'80.##8.211.205':139
'80.##8.220.88':139
'80.##8.181.248':139
'80.##8.16.46':139
'80.##8.98.247':139
'80.##8.121.40':139
'80.##8.209.176':139
'80.##8.116.9':445
'80.##8.199.10':139
'80.##8.11.97':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней