Trojan.DownLoader9.63424

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER6e44.dir00\svchost.exe.mdmp 16325836412029564

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%TEMP%\WER6e44.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe

Сетевая активность:

Подключается к:

'80.##0.27.88':139
'80.##0.180.243':445
'80.##0.107.27':139
'80.##0.230.22':139
'80.##0.118.53':139
'80.##0.68.103':139
'80.#00.5.60':445
'80.##0.43.200':445
'80.##0.180.243':139
'80.##0.88.68':139
'80.##0.23.133':139
'80.##0.223.139':139
'80.##0.175.96':139
'80.##0.125.97':139
'80.##0.161.196':139
'80.##0.204.41':139
'80.##0.100.143':139
'80.##0.12.87':139
'80.##0.42.211':139
'80.##0.120.24':139
'80.##0.134.124':139
'80.##0.46.69':139
'80.##0.157.155':139
'80.##0.138.110':445
'80.##0.196.48':445
'80.##0.43.183':445
'80.##0.140.243':445
'80.##0.68.253':445
'80.##0.253.157':445
'80.##0.156.9':445
'80.##0.249.78':445
'80.##0.68.77':445
'80.##0.9.173':445
'80.##0.93.222':445
'80.##0.45.252':445
'80.##0.175.180':445
'80.##0.235.20':445
'80.##0.79.249':445
'80.##0.138.216':445
'80.##0.50.196':445
'80.##0.127.55':445
'80.##0.27.168':445
'80.##0.106.165':445
'80.##0.234.86':445
'80.##0.20.146':445
'80.##0.149.224':445
'80.##0.150.238':445
'80.##0.205.107':139
'80.##0.238.142':139
'80.##0.21.153':139
'80.##0.149.62':139
'80.##0.129.33':445
'80.##0.129.33':139
'80.##0.202.78':139
'80.##0.100.244':139
'80.##0.243.234':139
'80.##0.75.217':139
'80.##0.75.217':445
'80.##0.96.76':139
'80.##0.48.129':139
'80.##0.252.188':139
'80.##0.13.71':139
'80.##0.66.87':139
'80.##0.87.91':139
'80.##0.122.154':139
'80.##0.161.0':445
'80.##0.131.67':139
'80.##0.68.48':139
'80.##0.50.30':139
'80.##0.161.0':139
'80.#00.6.8':139
'80.##0.139.174':139
'80.##0.230.22':445
'80.##0.157.155':445
'80.##0.46.69':445
'80.##0.12.87':445
'80.##0.125.97':445
'80.##0.120.24':445
'80.##0.88.68':445
'80.##0.23.133':445
'80.##0.68.103':445
'80.##0.223.139':445
'80.##0.118.53':445
'80.##0.175.96':445
'80.##0.208.187':139
'80.##0.231.75':139
'80.##0.57.198':139
'80.##0.174.210':445
'80.##0.118.253':139
'80.##0.33.206':139
'80.##0.100.143':445
'80.##0.161.196':445
'80.##0.118.83':139
'80.##0.204.41':445
'80.##0.205.107':445
'80.##0.85.240':445
'80.##0.227.135':139
'80.##0.104.135':445
'80.##0.139.227':139
'80.##0.101.74':139
'80.##0.77.140':139
'80.##0.135.2':139
'80.##0.149.121':139
'80.##0.134.219':139
'80.##0.189.152':139
'80.##0.40.236':139
'80.##0.89.41':445
'80.##0.125.161':445
'80.##0.4.206':445
'80.##0.134.219':445
'80.##0.13.178':445
'80.##0.189.152':445
'80.##0.157.63':445
'80.##0.149.121':445
'80.##0.123.32':445
'80.##0.158.182':445
'80.##0.145.141':445
'80.##0.179.228':445
'80.##0.40.33':445
'80.##0.40.33':139
'80.##0.230.207':445
'80.##0.129.160':445
'80.##0.53.43':445
'80.##0.123.32':139
'80.#00.66.1':445
'80.##0.1.195':445
'80.##0.136.3':445
'80.##0.75.20':445
'80.##0.241.135':445
'80.##0.119.209':445
'80.##0.236.240':445
'80.##0.246.4':445
'80.##0.145.141':139
'80.##0.179.228':139
'80.##0.4.206':139
'80.##0.89.41':139
'80.##0.136.47':139
'80.##0.63.96':139
'80.##0.125.161':139
'80.##0.158.182':139
'80.##0.68.75':139
'80.##0.157.63':139
'80.##0.13.178':139
'80.##0.68.75':445
'80.##0.150.238':139
'80.##0.234.86':139
'80.##0.149.224':139
'80.##0.138.216':139
'80.##0.27.168':139
'80.##0.20.146':139
'80.##0.253.157':139
'80.##0.140.243':139
'80.##0.68.253':139
'80.##0.106.165':139
'80.##0.175.180':139
'80.##0.127.55':139
'80.#00.80.9':445
'80.#00.5.60':139
'80.#00.66.3':445
'80.##0.186.34':445
'80.##0.159.127':445
'80.##0.43.200':139
'80.##0.5.246':139
'80.##0.138.110':139
'80.##0.50.196':139
'80.##0.79.249':139
'80.##0.235.20':139
'80.##0.196.48':139
'80.##0.106.108':139
'80.##0.45.252':139
'80.##0.106.108':445
'80.##0.91.171':139
'80.##0.85.240':139
'80.##0.186.34':139
'80.##0.135.2':445
'80.##0.101.74':445
'80.##0.227.135':445
'80.##0.77.140':445
'80.##0.40.236':445
'80.##0.249.78':139
'80.##0.93.222':139
'80.#00.66.3':139
'80.##0.68.77':139
'80.##0.43.183':139
'80.##0.159.127':139
'80.##0.66.109':445
'80.#00.80.9':139
'80.##0.9.173':139
'80.##0.150.243':139
'80.##0.66.109':139
'80.##0.156.9':139
'80.##0.213.116':139
'80.##0.179.10':445
'80.##0.190.229':445
'80.##0.35.247':139
'80.##0.15.172':445
'80.##0.33.122':445
'80.##0.236.77':445
'80.##0.143.176':445
'80.##0.139.143':445
'80.##0.177.9':445
'80.##0.105.96':445
'80.##0.39.76':445
'80.##0.78.68':139
'80.##0.118.201':139
'80.##0.43.168':139
'80.##0.41.119':139
'80.##0.75.215':139
'80.##0.215.77':139
'80.##0.50.79':139
'80.#00.80.1':139
'80.##0.210.184':139
'80.##0.106.102':139
'80.##0.75.237':139
'80.##0.56.125':139
'80.##0.68.34':445
'80.#00.2.13':445
'80.##0.139.143':139
'80.##0.236.77':139
'80.##0.179.10':139
'80.##0.190.229':139
'80.##0.177.9':139
'80.##0.39.76':139
'80.##0.166.2':139
'80.##0.198.160':139
'80.##0.143.176':139
'80.##0.105.96':139
'80.##0.45.141':445
'80.##0.161.232':445
'80.##0.79.167':445
'80.##0.7.145':445
'80.##0.128.235':445
'80.##0.183.75':445
'80.##0.43.49':445
'80.##0.15.172':139
'80.##0.33.122':139
'80.##0.148.38':445
'80.##0.133.138':445
'80.##0.197.224':445
'80.##0.14.76':139
'80.##0.132.46':139
'80.##0.204.68':139
'80.##0.242.176':139
'80.##0.124.182':139
'80.##0.18.243':445
'80.##0.97.31':139
'80.##0.141.174':139
'80.##0.135.74':139
'80.##0.252.45':139
'80.##0.60.236':139
'80.##0.31.181':139
'80.##0.245.18':139
'80.##0.75.237':445
'80.##0.106.102':445
'80.##0.43.168':445
'80.##0.41.119':445
'80.##0.118.201':445
'80.##0.50.79':445
'80.##0.78.68':445
'80.##0.222.9':139
'80.##0.35.247':445
'80.#00.80.1':445
'80.##0.210.184':445
'80.##0.120.59':139
'80.##0.140.52':139
'80.##0.4.127':139
'80.##0.217.139':445
'80.##0.43.180':139
'80.##0.218.216':139
'80.##0.151.242':139
'80.##0.147.97':139
'80.##0.176.57':139
'80.##0.95.230':139
'80.##0.59.106':139
'80.##0.251.179':139
'80.##0.212.162':139
'80.##0.0.127':445
'80.##0.0.127':139
'80.##0.28.215':139
'80.##0.55.224':139
'80.##0.79.212':139
'80.##0.184.44':139
'80.##0.71.187':139
'80.##0.194.235':139
'80.##0.207.33':139
'80.##0.44.19':139
'80.##0.141.143':139
'80.##0.68.34':139
'80.##0.96.76':445
'80.##0.87.91':445
'80.#00.6.8':445
'80.##0.66.87':445
'80.##0.31.125':445
'80.##0.70.54':445
'80.##0.68.48':445
'80.##0.48.129':445
'80.##0.155.4':445
'80.##0.149.62':445
'80.##0.243.234':445
'80.##0.84.12':139
'80.##0.125.126':139
'80.##0.68.63':139
'80.##0.13.245':445
'80.##0.103.208':139
'80.##0.82.78':139
'80.#00.60.9':139
'80.##0.227.230':139
'80.##0.96.231':139
'80.##0.163.7':139
'80.##0.74.165':139
'80.##0.62.103':139
'80.##0.13.71':445
'80.##0.231.75':445
'80.##0.118.83':445
'80.##0.33.206':445
'80.##0.139.174':445
'80.##0.57.198':445
'80.##0.31.125':139
'80.##0.70.54':139
'80.##0.1.127':139
'80.##0.155.4':139
'80.##0.116.250':139
'80.##0.158.28':139
'80.##0.118.253':445
'80.##0.158.28':445
'80.##0.122.154':445
'80.##0.252.188':445
'80.##0.116.250':445
'80.##0.1.127':445
'80.##0.213.116':445
'80.##0.100.244':445
'80.##0.21.153':445
'80.##0.238.142':445
'80.##0.50.30':445
'80.##0.131.67':445
'80.##0.22.54':139
'80.##0.148.38':139
'80.##0.224.149':445
'80.##0.45.141':139
'80.##0.43.49':139
'80.##0.197.224':139
'80.##0.40.154':445
'80.##0.84.12':445
'80.##0.103.208':445
'80.##0.10.53':445
'80.##0.22.54':445
'80.##0.125.126':445
'80.##0.133.138':139
'80.##0.233.6':445
'80.##0.45.174':139
'80.##0.183.75':139
'80.##0.128.235':139
'80.##0.141.35':139
'80.##0.79.167':139
'80.##0.145.132':139
'80.##0.157.85':139
'80.##0.7.145':139
'80.##0.25.102':139
'80.##0.161.232':139
'80.##0.61.50':445
'80.##0.40.154':139
'80.##0.48.146':139
'80.##0.61.50':139
'80.##0.86.245':445
'80.##0.224.149':139
'80.##0.50.48':139
'80.##0.10.53':139
'80.##0.86.245':139
'80.##0.245.125':139
'80.##0.165.111':139
'80.##0.146.31':139
'80.##0.96.231':445
'80.##0.48.146':445
'80.##0.50.48':445
'80.##0.165.111':445
'80.#00.60.9':445
'80.##0.74.165':445
'80.##0.146.31':445
'80.##0.163.7':445
'80.##0.227.230':445
'80.##0.82.78':445
'80.##0.245.125':445
'80.##0.68.63':445
'80.##0.20.161':445
'80.##0.124.211':9988
'80.##0.189.84':9988
'80.##0.213.131':9988
'80.##0.113.95':9988
'80.##0.39.27':9988
'80.##0.177.241':9988
'80.##0.189.197':445
'80.##0.32.59':445
'80.##0.59.129':445
'80.##0.88.120':9988
'80.##0.57.16':445
'80.##0.33.118':9988
'80.##0.191.192':9988
'80.##0.14.188':9988
'80.##0.162.215':9988
'80.##0.186.72':9988
'80.##0.158.95':9988
'80.##0.149.146':9988
'80.##0.153.232':9988
'80.##0.94.162':9988
'80.##0.92.50':9988
'80.##0.36.40':9988
'80.##0.190.102':9988
'80.##0.129.20':445
'80.##0.107.186':9988
'80.##0.113.223':9988
'80.##0.71.47':9988
'80.##0.171.71':9988
'80.##0.31.107':9988
'80.##0.186.72':445
'80.##0.165.196':445
'80.##0.101.216':445
'80.##0.225.114':445
'80.##0.24.238':445
'80.##0.59.167':445
'80.##0.62.253':9988
'80.##0.129.20':139
'80.##0.32.59':139
'80.##0.189.197':139
'80.##0.57.16':139
'80.##0.59.129':139
'80.##0.101.216':9988
'80.##0.150.124':9988
'80.##0.174.59':9988
'80.##0.165.196':9988
'80.##0.59.167':9988
'80.##0.225.114':9988
'80.##0.59.87':139
'80.##0.1.124':445
'80.##0.250.245':445
'80.##0.236.102':445
'80.##0.25.199':445
'80.##0.144.25':445
'80.##0.222.230':445
'80.##0.109.160':445
'80.##0.30.33':445
'80.##0.117.193':445
'80.##0.246.200':445
'80.##0.94.219':445
'80.##0.251.143':445
'80.##0.188.78':139
'80.##0.23.55':139
'80.##0.67.168':139
'80.##0.124.72':139
'80.##0.109.4':139
'80.##0.102.105':445
'80.##0.14.125':445
'80.##0.90.251':445
'80.##0.108.129':445
'80.#00.31.6':139
'80.##0.225.62':445
'80.##0.184.103':445
'80.##0.94.219':139
'80.##0.109.160':139
'80.##0.246.200':139
'80.##0.222.230':139
'80.##0.250.245':139
'80.##0.117.193':139
'80.##0.23.143':139
'80.##0.186.233':139
'80.##0.30.33':139
'80.##0.184.103':139
'80.##0.186.233':445
'80.##0.236.102':139
'80.##0.108.129':139
'80.##0.225.62':139
'80.##0.102.105':139
'80.##0.23.143':445
'80.##0.59.87':445
'80.##0.14.125':139
'80.##0.25.199':139
'80.##0.1.124':139
'80.##0.144.25':139
'80.##0.90.251':139
'80.##0.251.143':139
'80.##0.65.195':445
'80.##0.139.62':139
'80.##0.158.95':139
'80.##0.94.162':139
'80.##0.162.215':139
'80.##0.127.26':139
'80.##0.6.249':139
'80.##0.125.120':139
'80.##0.31.107':139
'80.##0.213.131':139
'80.##0.14.188':139
'80.##0.36.40':139
'80.##0.149.146':139
'80.##0.65.195':139
'80.##0.156.202':139
'80.##0.14.61':139
'80.##0.225.114':139
'80.##0.101.216':139
'80.##0.191.192':139
'80.##0.39.27':139
'80.##0.19.38':139
'80.##0.113.95':139
'80.##0.33.118':139
'80.##0.174.59':139
'80.##0.90.88':139
'80.##0.249.13':139
'80.##0.113.223':139
'80.##0.23.140':139
'80.##0.62.253':139
'80.##0.188.189':139
'80.##0.46.167':139
'80.##0.124.211':139
'80.##0.71.47':139
'80.##0.189.84':139
'80.##0.52.152':139
'80.##0.92.219':139
'80.##0.228.128':139
'80.##0.32.137':139
'80.##0.171.71':139
'80.##0.150.124':139
'80.##0.88.120':139
'80.##0.226.225':139
'80.##0.177.241':139
'80.##0.153.232':139
'80.##0.190.102':139
'80.##0.131.40':139
'80.##0.92.50':139
'80.##0.107.186':139
'80.##0.165.196':139
'80.##0.14.188':445
'80.##0.213.131':445
'80.##0.6.249':445
'80.##0.158.95':445
'80.##0.139.62':445
'80.##0.31.107':445
'80.##0.90.88':445
'80.##0.88.120':445
'80.##0.226.225':445
'80.##0.125.120':445
'80.##0.36.40':445
'80.##0.94.162':445
'80.##0.174.59':445
'80.##0.33.118':445
'80.##0.191.192':445
'80.##0.14.61':445
'80.##0.156.202':445
'80.##0.39.27':445
'80.##0.149.146':445
'80.##0.127.26':445
'80.##0.162.215':445
'80.##0.113.95':445
'80.##0.19.38':445
'80.##0.150.124':445
'80.##0.52.152':445
'80.##0.92.219':445
'80.##0.23.140':445
'80.##0.249.13':445
'80.##0.113.223':445
'80.##0.71.47':445
'80.##0.59.167':139
'80.##0.24.238':139
'80.##0.186.72':139
'80.##0.62.253':445
'80.##0.124.211':445
'80.##0.46.167':445
'80.##0.92.50':445
'80.##0.107.186':445
'80.##0.177.241':445
'80.##0.32.137':445
'80.##0.171.71':445
'80.##0.131.40':445
'80.##0.188.189':445
'80.##0.189.84':445
'80.##0.228.128':445
'80.##0.153.232':445
'80.##0.190.102':445
'80.##0.184.191':139
'80.##0.128.54':445
'80.##0.107.248':445
'80.##0.7.228':445
'80.##0.175.157':445
'80.##0.48.243':445
'80.##0.222.158':445
'80.#00.3.76':139
'80.##0.56.68':139
'80.##0.168.215':139
'80.##0.248.152':445
'80.##0.168.215':445
'80.##0.64.109':445
'80.##0.36.120':445
'80.##0.208.86':445
'80.##0.167.241':445
'80.##0.56.68':445
'80.##0.62.147':445
'80.##0.86.147':445
'80.##0.148.2':445
'80.##0.14.239':445
'80.##0.190.171':445
'80.##0.171.112':445
'80.##0.65.86':445
'80.##0.98.176':139
'80.##0.228.70':139
'80.##0.222.158':139
'80.##0.228.70':445
'80.##0.48.243':139
'80.##0.7.228':139
'80.##0.107.248':139
'80.##0.248.152':139
'80.##0.145.13':445
'80.##0.74.130':445
'80.##0.128.54':139
'80.##0.73.182':445
'80.##0.14.239':139
'80.##0.208.86':139
'80.##0.86.147':139
'80.##0.36.120':139
'80.##0.62.147':139
'80.##0.167.241':139
'80.##0.148.2':139
'80.##0.175.157':139
'80.##0.65.86':139
'80.##0.171.112':139
'80.##0.190.171':139
'80.##0.64.109':139
'80.##0.98.176':445
'80.#00.0.16':445
'80.##0.21.110':139
'80.##0.31.104':445
'80.##0.7.188':445
'80.##0.169.77':445
'80.##0.129.160':139
'80.##0.159.99':139
'80.##0.230.207':139
'80.##0.1.195':139
'80.##0.53.43':139
'80.#00.66.1':139
'80.##0.6.252':445
'80.##0.112.101':445
'80.##0.92.128':445
'80.##0.240.92':445
'80.##0.161.58':445
'80.##0.132.97':445
'80.##0.65.181':445
'80.##0.37.189':445
'80.##0.4.132':445
'80.##0.20.42':445
'80.##0.18.113':445
'80.##0.76.237':445
'80.##0.246.4':139
'80.##0.20.42':139
'80.##0.4.132':139
'80.##0.37.189':139
'80.##0.18.113':139
'80.##0.76.237':139
'80.##0.7.188':139
'80.#00.0.16':139
'80.#00.3.76':445
'80.##0.31.104':139
'80.##0.6.252':139
'80.##0.169.77':139
'80.##0.65.181':139
'80.##0.241.135':139
'80.##0.75.20':139
'80.##0.136.3':139
'80.##0.119.209':139
'80.##0.236.240':139
'80.##0.20.161':139
'80.##0.112.101':139
'80.##0.92.128':139
'80.##0.240.92':139
'80.##0.161.58':139
'80.##0.132.97':139
'80.##0.39.134':445
'80.##0.45.124':445
'80.##0.55.201':445
'80.##0.22.25':445
'80.##0.226.221':445
'80.##0.233.7':445
'80.##0.191.182':445
'80.##0.98.102':445
'80.##0.184.191':445
'80.##0.37.182':445
'80.##0.13.50':445
'80.##0.124.72':445
'80.##0.116.120':445
'80.##0.72.220':139
'80.##0.87.201':139
'80.##0.129.186':139
'80.##0.137.25':139
'80.##0.146.88':139
'80.##0.174.245':139
'80.##0.178.247':445
'80.##0.63.46':445
'80.##0.145.138':445
'80.##0.110.110':139
'80.##0.194.201':445
'80.##0.23.55':445
'80.##0.232.185':139
'80.##0.45.124':139
'80.##0.232.185':445
'80.##0.233.7':139
'80.##0.22.25':139
'80.##0.55.201':139
'80.##0.37.182':139
'80.##0.13.50':139
'80.##0.98.102':139
'80.##0.191.182':139
'80.##0.0.128':139
'80.##0.226.221':139
'80.##0.188.78':445
'80.##0.23.20':139
'80.##0.109.4':445
'80.#00.31.6':445
'80.##0.67.168':445
'80.##0.194.201':139
'80.##0.178.247':139
'80.##0.116.120':139
'80.##0.32.78':139
'80.##0.145.138':139
'80.##0.63.46':139
'80.##0.20.236':139
'80.##0.20.236':445
'80.##0.145.11':445
'80.##0.92.93':445
'80.##0.129.194':445
'80.##0.170.195':445
'80.##0.31.102':445
'80.##0.129.186':445
'80.##0.87.201':445
'80.##0.72.220':445
'80.##0.137.25':445
'80.##0.146.88':445
'80.##0.14.164':445
'80.##0.238.131':445
'80.##0.85.57':445
'80.##0.22.67':445
'80.##0.145.135':445
'80.#00.0.35':445
'80.##0.52.235':445
'80.##0.168.134':445
'80.##0.145.236':445
'80.#00.17.0':445
'80.##0.81.77':445
'80.##0.78.97':445
'80.##0.174.245':445
'80.##0.145.236':139
'80.##0.85.57':139
'80.#00.17.0':139
'80.##0.176.190':139
'80.#00.0.35':139
'80.##0.22.67':139
'80.##0.31.102':139
'80.##0.145.11':139
'80.##0.92.93':139
'80.##0.170.195':139
'80.##0.129.194':139
'80.##0.145.135':139
'80.##0.145.13':139
'80.##0.52.235':139
'80.##0.74.130':139
'80.##0.110.110':445
'80.##0.73.182':139
'80.##0.168.134':139
'80.##0.14.164':139
'80.##0.238.131':139
'80.##0.78.97':139
'80.##0.81.77':139
'80.##0.39.134':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней