Trojan.DownLoader10.5111

Техническая информация

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER1ed4.dir00\svchost.exe.mdmp 16325836412033020

Скрывает следующие процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\Help\bzehxvnz.exe
%WINDIR%\Help\hwexrtne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%WINDIR%\Help\jbnshhqj.exe

Сетевая активность:

Подключается к:

'22#.#32.249.1':445
'22#.#32.31.196':445
'22#.#32.135.40':445
'22#.#32.125.185':445
'22#.#32.182.70':445
'22#.#32.112.31':445
'22#.#32.47.139':139
'22#.#32.131.194':139
'22#.#32.26.41':139
'22#.#32.70.112':445
'22#.#32.41.32':445
'22#.#32.70.112':139
'22#.#32.141.90':139
'22#.#32.112.31':139
'22#.#32.249.1':139
'22#.#32.31.196':139
'22#.#32.141.90':445
'22#.#32.174.231':445
'22#.#32.76.228':445
'22#.#32.2.212':445
'22#.#32.41.32':139
'22#.#32.231.200':445
'22#.#32.131.194':445
'22#.#32.47.139':445
'22#.#32.126.231':139
'22#.#32.59.144':139
'22#.#32.176.133':139
'22#.#32.26.41':445
'22#.#32.55.70':445
'22#.#32.25.17':445
'22#.#32.173.145':445
'22#.#32.37.126':445
'22#.#32.24.38':445
'22#.#32.59.55':139
'22#.#32.137.96':445
'22#.#32.24.38':139
'22#.#32.37.126':139
'22#.#32.59.55':445
'22#.#32.137.96':139
'22#.#32.25.17':139
'22#.#32.55.70':139
'22#.#32.170.72':445
'22#.#32.170.72':139
'22#.#32.173.145':139
'22#.#32.170.60':445
'22#.#32.241.239':445
'22#.#32.4.242':445
'22#.#32.83.74':445
'22#.#32.205.191':139
'22#.#32.206.206':139
'22#.#32.88.150':445
'22#.#32.174.88':445
'22#.#32.82.19':445
'22#.#32.26.191':445
'22#.#32.21.200':445
'22#.#32.212.243':445
'22#.#32.109.101':139
'22#.#32.11.216':139
'22#.#32.109.101':445
'22#.#32.178.213':139
'22#.#32.0.173':139
'22#.#32.89.151':139
'22#.#32.85.168':445
'22#.#32.108.202':139
'22#.#32.93.225':139
'22#.#32.142.73':139
'22#.#32.142.73':445
'22#.#32.243.169':139
'22#.#32.76.228':139
'22#.#32.174.231':139
'22#.#32.2.212':139
'22#.#32.231.200':139
'22#.#32.182.70':139
'22#.#32.104.59':445
'22#.#32.104.59':139
'22#.#32.170.60':139
'22#.#32.125.185':139
'22#.#32.135.40':139
'22#.#32.20.71':445
'22#.#32.11.216':445
'22#.#32.166.41':445
'22#.#32.103.225':445
'22#.#32.126.135':445
'22#.#32.178.213':445
'22#.#32.205.191':445
'22#.#32.206.206':445
'22#.#32.108.202':445
'22#.#32.70.192':445
'22#.#32.93.225':445
'22#.#32.235.234':139
'22#.#32.250.19':445
'22#.#32.219.128':139
'22#.#32.210.114':139
'22#.#32.4.220':139
'22#.#32.90.232':139
'22#.#32.62.242':139
'22#.#32.168.38':139
'22#.#32.17.144':139
'22#.#32.17.225':139
'22#.#32.144.179':139
'22#.#32.105.30':445
'22#.#32.13.47':445
'22#.#32.26.25':139
'22#.#32.13.47':139
'22#.#32.100.122':139
'22#.#32.100.122':445
'22#.#32.97.12':139
'22#.#32.71.199':139
'22#.#32.235.234':445
'22#.#32.149.69':139
'22#.#32.4.220':445
'22#.#32.71.199':445
'22#.#32.17.225':445
'22#.#32.97.12':445
'22#.#32.149.69':445
'22#.#32.210.114':445
'22#.#32.107.16':445
'22#.#32.85.119':445
'22#.#32.82.7':445
'22#.#32.16.168':445
'22#.#32.12.203':445
'22#.#32.123.43':445
'22#.#32.12.203':139
'22#.#32.82.7':139
'22#.#32.123.43':139
'22#.#32.16.168':139
'22#.#32.107.16':139
'22#.#32.85.119':139
'22#.#32.101.157':139
'22#.#32.76.161':139
'22#.#32.193.29':139
'22#.#32.226.39':139
'22#.#32.29.226':139
'22#.#32.74.74':139
'22#.#32.218.13':139
'22#.#32.23.208':139
'22#.#32.90.169':139
'22#.#32.105.185':139
'22#.#32.180.237':139
'22#.#32.119.19':445
'22#.#32.144.200':445
'22#.#32.160.144':139
'22#.#32.144.200':139
'22#.#32.5.187':445
'22#.#32.180.237':445
'22#.#32.168.131':139
'22#.#32.0.38':139
'22#.#32.126.231':445
'22#.#32.59.144':445
'22#.#32.176.133':445
'22#.#32.189.104':139
'22#.#32.119.19':139
'22#.#32.18.219':445
'22#.#32.93.172':139
'22#.#32.62.52':139
'22#.#32.218.13':445
'22#.#32.67.160':445
'22#.#32.29.79':445
'22#.#32.90.169':445
'22#.#32.23.208':445
'22#.#32.93.172':445
'22#.#32.196.181':445
'22#.#32.146.74':139
'22#.#32.71.100':139
'22#.#32.71.100':445
'22#.#32.105.30':139
'22#.#32.146.74':445
'22#.#32.181.228':139
'22#.#32.196.181':139
'22#.#32.29.79':139
'22#.#32.5.187':139
'22#.#32.67.160':139
'22#.#32.166.41':9988
'22#.#32.189.104':445
'22#.#32.105.185':445
'22#.#32.62.52':445
'22#.#32.168.131':445
'22#.#32.0.38':445
'22#.#32.96.236':445
'22#.#32.253.218':445
'22#.#32.72.254':445
'22#.#32.131.152':445
'22#.#32.138.131':445
'22#.#32.152.223':445
'22#.#32.172.232':445
'22#.#32.101.173':445
'22#.#32.232.94':445
'22#.#32.107.137':445
'22#.#32.94.107':445
'22#.#32.53.24':139
'22#.#32.205.52':139
'22#.#32.42.250':139
'22#.#32.37.253':139
'22#.#32.132.102':139
'22#.#32.53.86':139
'22#.#32.253.220':445
'22#.#32.84.246':445
'22#.#32.136.226':445
'22#.#32.233.246':445
'22#.#32.158.194':445
'22#.#32.102.222':445
'22#.#32.116.7':445
'22#.#32.61.227':445
'22#.#32.222.151':445
'22#.#32.156.198':445
'22#.#32.183.183':445
'22#.#32.177.51':445
'22#.#32.191.176':445
'22#.#32.51.163':445
'22#.#32.88.80':445
'22#.#32.189.112':445
'22#.#32.113.28':445
'22#.#32.136.239':445
'22#.#32.209.173':445
'22#.#32.60.244':445
'22#.#32.204.160':445
'22#.#32.86.211':445
'22#.#32.75.57':445
'22#.#32.211.144':445
'22#.#32.38.95':445
'22#.#32.229.35':445
'22#.#32.74.229':445
'22#.#32.236.25':139
'22#.#32.172.232':139
'22#.#32.101.173':139
'22#.#32.232.94':139
'22#.#32.107.137':139
'22#.#32.94.107':139
'22#.#32.60.244':139
'22#.#32.136.239':139
'22#.#32.86.211':139
'22#.#32.113.28':139
'22#.#32.204.160':139
'22#.#32.209.173':139
'22#.#32.233.246':139
'22#.#32.84.246':139
'22#.#32.253.220':139
'22#.#32.136.226':139
'22#.#32.158.194':139
'22#.#32.131.152':139
'22#.#32.253.218':139
'22#.#32.152.223':139
'22#.#32.96.236':139
'22#.#32.138.131':139
'22#.#32.72.254':139
'22#.#32.177.51':139
'22#.#32.191.176':139
'22#.#32.51.163':139
'22#.#32.88.80':139
'22#.#32.189.112':139
'22#.#32.104.191':139
'22#.#32.100.148':139
'22#.#32.26.100':139
'22#.#32.77.108':139
'22#.#32.34.105':139
'22#.#32.80.98':139
'22#.#32.75.57':139
'22#.#32.211.144':139
'22#.#32.38.95':139
'22#.#32.229.35':139
'22#.#32.74.229':139
'22#.#32.222.151':139
'22#.#32.116.7':139
'22#.#32.183.183':139
'22#.#32.102.222':139
'22#.#32.156.198':139
'22#.#32.61.227':139
'22#.#32.114.72':445
'22#.#32.211.55':445
'22#.#32.219.99':445
'22#.#32.111.109':445
'22#.#32.172.35':445
'22#.#32.104.158':139
'22#.#32.38.161':139
'22#.#32.252.37':445
'22#.#32.136.252':445
'22#.#32.38.161':445
'22#.#32.252.37':139
'22#.#32.170.86':139
'22#.#32.170.86':445
'22#.#32.114.72':139
'22#.#32.36.78':139
'22#.#32.219.99':139
'22#.#32.211.55':139
'22#.#32.30.252':445
'22#.#32.170.113':445
'22#.#32.245.97':445
'22#.#32.29.131':445
'22#.#32.216.232':445
'22#.#32.82.19':139
'22#.#32.126.135':139
'22#.#32.103.225':139
'22#.#32.26.191':139
'22#.#32.174.88':139
'22#.#32.20.71':139
'22#.#32.192.166':445
'22#.#32.173.71':139
'22#.#32.70.192':139
'22#.#32.166.41':139
'22#.#32.192.166':139
'22#.#32.22.54':445
'22#.#32.83.74':139
'22#.#32.22.54':139
'22#.#32.115.231':139
'22#.#32.4.242':139
'22#.#32.21.200':139
'22#.#32.212.243':139
'22#.#32.241.239':139
'22#.#32.46.47':139
'22#.#32.235.14':139
'22#.#32.88.150':139
'22#.#32.111.109':139
'22#.#32.131.152':9988
'22#.#32.88.80':9988
'22#.#32.107.137':9988
'22#.#32.205.52':445
'22#.#32.53.86':445
'22#.#32.204.160':9988
'22#.#32.136.226':9988
'22#.#32.51.163':9988
'22#.#32.60.244':9988
'22#.#32.80.98':9988
'22#.#32.38.95':9988
'22#.#32.77.108':445
'22#.#32.100.148':445
'22#.#32.80.98':445
'22#.#32.104.191':445
'22#.#32.34.105':445
'22#.#32.26.100':445
'22#.#32.42.250':445
'22#.#32.53.24':445
'22#.#32.132.102':445
'22#.#32.236.25':445
'22#.#32.37.253':445
'22#.#32.115.142':139
'22#.#32.245.97':139
'22#.#32.216.232':139
'22#.#32.29.131':139
'22#.#32.69.229':139
'22#.#32.79.141':139
'22#.#32.170.113':139
'22#.#32.19.150':139
'22#.#32.19.150':445
'22#.#32.30.252':139
'22#.#32.172.35':139
'22#.#32.211.144':9988
'22#.#32.209.173':9988
'22#.#32.75.57':9988
'22#.#32.53.86':9988
'22#.#32.34.105':9988
'22#.#32.132.102':9988
'22#.#32.152.223':9988
'22#.#32.80.162':139
'22#.#32.113.28':9988
'22#.#32.102.222':9988
'22#.#32.229.35':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней