Trojan.DownLoader10.16586

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERe83e.dir00\svchost.exe.mdmp 16325836412032312

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WERe83e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#16.104.242':445
'19#.#16.92.137':445
'19#.#16.213.110':445
'19#.#16.57.220':445
'19#.#16.106.159':445
'19#.#16.208.104':445
'19#.#16.77.84':445
'19#.#16.147.239':445
'19#.#16.159.147':445
'19#.#16.189.58':445
'19#.#16.93.149':445
'19#.#16.141.207':445
'19#.#16.142.227':445
'19#.#16.206.225':445
'19#.#16.24.250':445
'19#.#16.74.249':445
'19#.#16.23.237':445
'19#.#16.20.97':445
'19#.#16.36.100':445
'19#.#16.113.183':445
'19#.#16.151.151':445
'19#.#16.45.21':445
'19#.#16.122.228':445
'19#.#16.200.129':139
'19#.#16.102.71':139
'19#.#16.129.133':139
'19#.#16.133.87':139
'19#.#16.148.128':139
'19#.#16.163.119':139
'19#.#16.148.72':139
'19#.#16.195.214':139
'19#.#16.191.214':139
'19#.#16.80.94':139
'19#.#16.214.74':139
'19#.#16.2.72':139
'19#.#16.217.62':139
'19#.#16.192.76':139
'19#.#16.114.145':139
'19#.#16.206.159':139
'19#.#16.99.102':139
'19#.#16.166.61':139
'19#.#16.80.129':139
'19#.#16.156.208':139
'19#.#16.48.19':139
'19#.#16.174.249':139
'19#.#16.18.162':139
'19#.#16.159.147':139
'19#.#16.147.239':139
'19#.#16.93.149':139
'19#.#16.189.58':139
'19#.#16.92.137':139
'19#.#16.77.84':139
'19#.#16.90.51':445
'19#.#16.31.6':445
'19#.#16.181.16':445
'19#.#16.125.94':445
'19#.#16.168.125':445
'19#.#16.208.104':139
'19#.#16.45.21':139
'19#.#16.106.159':139
'19#.#16.206.225':139
'19#.#16.36.100':139
'19#.#16.141.207':139
'19#.#16.20.97':139
'19#.#16.142.227':139
'19#.#16.104.242':139
'19#.#16.122.228':139
'19#.#16.213.110':139
'19#.#16.151.151':139
'19#.#16.98.195':445
'19#.#16.58.109':445
'19#.#16.232.65':445
'19#.#16.224.10':445
'19#.#16.146.173':445
'19#.#16.180.232':445
'19#.#16.15.56':445
'19#.#16.56.251':445
'19#.#16.115.15':445
'19#.#16.90.49':445
'19#.#16.139.19':445
'19#.#16.104.31':445
'19#.#16.27.225':445
'19#.#16.61.237':445
'19#.#16.192.102':445
'19#.#16.51.208':445
'19#.#16.208.21':445
'19#.#16.102.83':445
'19#.#16.170.9':445
'19#.#16.126.102':445
'19#.#16.249.207':445
'19#.#16.192.164':445
'19#.#16.42.205':445
'19#.#16.55.63':139
'19#.#16.172.19':445
'19#.#16.104.200':445
'19#.#16.152.48':445
'19#.#16.16.108':445
'19#.#16.37.144':445
'19#.#16.158.226':445
'19#.#16.2.77':445
'19#.#16.179.178':445
'19#.#16.186.221':445
'19#.#16.81.225':445
'19#.#16.19.168':445
'19#.#16.50.105':445
'19#.#16.195.214':445
'19#.#16.55.63':445
'19#.#16.191.214':445
'19#.#16.214.74':445
'19#.#16.148.72':445
'19#.#16.222.57':445
'19#.#16.167.134':445
'19#.#16.159.172':445
'19#.#16.167.231':445
'19#.#16.225.223':445
'19#.#16.156.54':445
'19#.#16.114.28':139
'19#.#16.79.155':139
'19#.#16.164.165':139
'19#.#16.100.69':139
'19#.#16.198.58':139
'19#.#16.246.78':139
'19#.#16.213.184':139
'19#.#16.91.240':139
'19#.#16.32.185':139
'19#.#16.87.158':139
'19#.#16.57.101':139
'19#.#16.0.136':139
'19#.#16.151.110':445
'19#.#16.142.153':445
'19#.#16.230.217':445
'19#.#16.27.151':445
'19#.#16.225.91':445
'19#.#16.110.103':445
'19#.#16.74.129':445
'19#.#16.81.171':139
'19#.#16.82.251':445
'19#.#16.195.3':445
'19#.#16.248.240':445
'19#.#16.19.168':139
'19#.#16.179.178':139
'19#.#16.27.151':139
'19#.#16.167.134':139
'19#.#16.158.226':139
'19#.#16.2.77':139
'19#.#16.248.240':139
'19#.#16.230.217':139
'19#.#16.151.110':139
'19#.#16.225.91':139
'19#.#16.186.221':139
'19#.#16.167.231':139
'19#.#16.16.108':139
'19#.#16.172.19':139
'19#.#16.225.223':139
'19#.#16.81.225':139
'19#.#16.104.200':139
'19#.#16.50.105':139
'19#.#16.222.57':139
'19#.#16.156.54':139
'19#.#16.37.144':139
'19#.#16.152.48':139
'19#.#16.159.172':139
'19#.#16.48.19':445
'19#.#16.2.72':445
'19#.#16.80.129':445
'19#.#16.174.249':445
'19#.#16.18.162':445
'19#.#16.156.208':445
'19#.#16.102.71':445
'19#.#16.80.94':445
'19#.#16.200.129':445
'19#.#16.129.133':445
'19#.#16.148.128':445
'19#.#16.166.61':445
'19#.#16.110.103':139
'19#.#16.217.62':445
'19#.#16.195.3':139
'19#.#16.142.153':139
'19#.#16.82.251':139
'19#.#16.74.129':139
'19#.#16.133.87':445
'19#.#16.192.76':445
'19#.#16.206.159':445
'19#.#16.99.102':445
'19#.#16.114.145':445
'19#.#16.113.183':139
'19#.#16.213.11':445
'19#.#16.19.22':445
'19#.#16.0.146':445
'19#.#16.206.27':445
'19#.#16.218.14':445
'19#.#16.160.155':445
'19#.#16.221.140':445
'19#.#16.98.238':445
'19#.#16.105.120':445
'19#.#16.77.222':445
'19#.#16.37.185':445
'19#.#16.173.217':445
'19#.#16.197.187':139
'19#.#16.94.149':139
'19#.#16.81.72':139
'19#.#16.124.33':139
'19#.#16.82.124':139
'19#.#16.31.7':445
'19#.#16.156.19':445
'19#.#16.37.210':445
'19#.#16.155.160':445
'19#.#16.9.49':445
'19#.#16.21.245':445
'19#.#16.57.125':445
'19#.#16.206.74':445
'19#.#16.74.75':445
'19#.#16.167.97':445
'19#.#16.12.23':445
'19#.#16.119.245':445
'19#.#16.249.254':445
'19#.#16.156.249':445
'19#.#16.255.7':445
'19#.#16.244.205':445
'19#.#16.8.120':445
'19#.#16.88.149':445
'19#.#16.141.125':445
'19#.#16.134.132':445
'19#.#16.163.150':445
'19#.#16.145.49':445
'19#.#16.125.163':445
'19#.#16.185.135':445
'19#.#16.125.136':445
'19#.#16.143.105':445
'19#.#16.113.212':445
'19#.#16.155.194':445
'19#.#16.234.170':445
'19#.#16.221.140':139
'19#.#16.77.222':139
'19#.#16.105.120':139
'19#.#16.155.160':139
'19#.#16.37.210':139
'19#.#16.98.238':139
'19#.#16.141.125':139
'19#.#16.134.132':139
'19#.#16.125.163':139
'19#.#16.145.49':139
'19#.#16.163.150':139
'19#.#16.160.155':139
'19#.#16.206.27':139
'19#.#16.213.11':139
'19#.#16.37.185':139
'19#.#16.31.7':139
'19#.#16.0.146':139
'19#.#16.218.14':139
'19#.#16.19.22':139
'19#.#16.156.19':139
'19#.#16.21.245':139
'19#.#16.173.217':139
'19#.#16.9.49':139
'19#.#16.255.7':139
'19#.#16.249.254':139
'19#.#16.8.120':139
'19#.#16.244.205':139
'19#.#16.119.245':139
'19#.#16.156.249':139
'19#.#16.204.144':139
'19#.#16.33.69':139
'19#.#16.148.120':139
'19#.#16.24.157':139
'19#.#16.172.222':139
'19#.#16.206.74':139
'19#.#16.234.170':139
'19#.#16.125.136':139
'19#.#16.113.212':139
'19#.#16.185.135':139
'19#.#16.155.194':139
'19#.#16.143.105':139
'19#.#16.57.125':139
'19#.#16.74.75':139
'19#.#16.167.97':139
'19#.#16.88.149':139
'19#.#16.12.23':139
'19#.#16.24.157':445
'19#.#16.168.125':139
'19#.#16.192.102':139
'19#.#16.125.94':139
'19#.#16.206.74':9988
'19#.#16.148.120':9988
'19#.#16.31.6':139
'19#.#16.51.208':139
'19#.#16.90.51':139
'19#.#16.208.21':139
'19#.#16.181.16':139
'19#.#16.102.83':139
'19#.#16.218.14':9988
'19#.#16.57.125':9988
'19#.#16.125.136':9988
'19#.#16.37.185':9988
'19#.#16.145.49':9988
'19#.#16.74.75':9988
'19#.#16.124.33':9988
'19#.#16.77.222':9988
'19#.#16.163.150':9988
'19#.#16.19.22':9988
'19#.#16.172.222':9988
'19#.#16.9.49':9988
'19#.#16.15.56':139
'19#.#16.56.251':139
'19#.#16.90.49':139
'19#.#16.232.65':139
'19#.#16.180.232':139
'19#.#16.23.237':139
'19#.#16.24.250':139
'19#.#16.57.220':139
'19#.#16.74.249':139
'19#.#16.139.19':139
'19#.#16.115.15':139
'19#.#16.98.195':139
'19#.#16.27.225':139
'19#.#16.42.205':139
'19#.#16.61.237':139
'19#.#16.192.164':139
'19#.#16.249.207':139
'19#.#16.170.9':139
'19#.#16.104.31':139
'19#.#16.224.10':139
'19#.#16.58.109':139
'19#.#16.146.173':139
'19#.#16.126.102':139
'19#.#16.0.146':9988
'19#.#16.221.140':9988
'19#.#16.31.7':9988
'19#.#16.105.120':9988
'19#.#16.173.217':9988
'19#.#16.141.125':9988
'19#.#16.88.149':9988
'19#.#16.8.120':9988
'19#.#16.134.132':9988
'19#.#16.37.210':9988
'19#.#16.155.160':9988
'19#.#16.206.27':9988
'19#.#16.124.33':445
'19#.#16.33.69':445
'19#.#16.204.144':445
'19#.#16.172.222':445
'19#.#16.148.120':445
'19#.#16.82.124':445
'19#.#16.244.205':9988
'19#.#16.213.11':9988
'19#.#16.94.149':445
'19#.#16.81.72':445
'19#.#16.197.187':445
'19#.#16.143.105':9988
'19#.#16.21.245':9988
'19#.#16.156.19':9988
'19#.#16.249.254':9988
'19#.#16.81.72':9988
'19#.#16.12.23':9988
'19#.#16.234.170':9988
'19#.#16.125.163':9988
'19#.#16.156.249':9988
'19#.#16.94.149':9988
'19#.#16.167.97':9988
'19#.#16.82.124':9988
'19#.#16.155.194':9988
'19#.#16.197.187':9988
'19#.#16.204.144':9988
'19#.#16.185.135':9988
'19#.#16.33.69':9988
'19#.#16.98.238':9988
'19#.#16.24.157':9988
'19#.#16.113.212':9988
'19#.#16.119.245':9988
'19#.#16.160.155':9988
'19#.#16.255.7':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней