Trojan.DownLoader11.17624

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER5451.dir00\svchost.exe.mdmp 16325836412032544

Изменения в файловой системе:

Создает следующие файлы:

%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%WINDIR%\Help\jbnshhqj.exe
%WINDIR%\Help\bzehxvnz.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%WINDIR%\Help\Tours\htmlTour\qejnhetj.exe
%WINDIR%\Help\Tours\htmlTour\lhhjrkjk.exe
%WINDIR%\Help\Tours\htmlTour\wwvjntek.exe
%WINDIR%\Help\hwexrtne.exe
%WINDIR%\Help\jjlenkbt.exe
%WINDIR%\Help\tsbjbtvn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%TEMP%\WER5451.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe

Сетевая активность:

Подключается к:

'24.##0.81.127':139
'24.##0.38.79':139
'24.##0.106.23':139
'24.##0.116.122':139
'24.##0.182.140':139
'24.##0.226.12':139
'24.##0.13.38':445
'24.##0.132.58':139
'24.##0.204.35':139
'24.##0.136.71':139
'24.##0.109.36':139
'24.##0.83.214':139
'24.##0.85.217':139
'24.#10.4.11':445
'24.##0.218.45':445
'24.##0.15.172':139
'24.##0.105.251':139
'24.##0.101.155':139
'24.##0.26.52':139
'24.##0.116.49':139
'24.##0.6.169':139
'24.##0.79.21':139
'24.##0.231.125':139
'24.##0.221.225':139
'24.##0.207.230':139
'24.##0.60.223':139
'24.##0.175.219':139
'24.#10.59.8':139
'24.##0.210.9':139
'24.##0.141.60':139
'24.##0.29.121':139
'24.##0.83.35':139
'24.##0.90.233':139
'24.##0.38.57':139
'24.##0.98.188':139
'24.##0.99.123':139
'24.##0.197.62':139
'24.##0.207.230':445
'24.##0.169.159':139
'24.##0.97.121':139
'24.##0.38.57':445
'24.##0.226.12':445
'24.##0.136.71':445
'24.##0.251.140':139
'24.##0.147.202':139
'24.##0.83.35':445
'24.##0.90.233':445
'24.##0.98.188':445
'24.##0.29.121':445
'24.##0.132.58':445
'24.##0.58.138':139
'24.##0.33.58':139
'24.##0.30.28':139
'24.##0.106.23':445
'24.##0.47.94':139
'24.##0.177.135':139
'24.##0.200.188':139
'24.##0.17.71':139
'24.##0.236.165':139
'24.#10.3.15':139
'24.#10.59.6':445
'24.##0.193.109':445
'24.#10.84.5':445
'24.##0.141.60':445
'24.##0.30.237':445
'24.##0.11.141':445
'24.##0.75.166':445
'24.##0.27.13':445
'24.##0.19.124':445
'24.##0.115.119':445
'24.##0.99.123':445
'24.##0.221.225':445
'24.##0.197.62':445
'24.##0.169.159':445
'24.##0.97.121':445
'24.##0.210.9':445
'24.##0.175.219':445
'24.#10.59.8':445
'24.##0.6.169':445
'24.##0.231.125':445
'24.##0.27.13':139
'24.##0.20.240':445
'24.##0.225.189':445
'24.##0.113.141':445
'24.##0.141.9':445
'24.##0.46.113':445
'24.##0.15.195':445
'24.##0.69.240':445
'24.##0.160.103':445
'24.##0.84.102':445
'24.##0.51.151':445
'24.##0.148.62':139
'24.##0.88.148':139
'24.##0.212.174':139
'24.##0.51.188':445
'24.##0.72.70':445
'24.##0.123.62':445
'24.##0.240.45':445
'24.##0.29.78':445
'24.##0.63.51':139
'24.##0.57.208':445
'24.##0.55.106':445
'24.##0.74.208':445
'24.##0.22.65':445
'24.##0.68.218':445
'24.##0.163.183':445
'24.##0.105.188':139
'24.##0.55.106':139
'24.##0.34.174':445
'24.##0.207.74':445
'24.##0.100.240':445
'24.##0.152.143':445
'24.##0.127.232':445
'24.##0.126.132':445
'24.##0.217.136':445
'24.##0.69.32':445
'24.##0.153.228':445
'24.##0.216.73':445
'24.##0.35.83':445
'24.##0.14.11':445
'24.##0.56.120':445
'24.##0.148.62':445
'24.##0.214.2':445
'24.##0.244.115':445
'24.##0.123.122':139
'24.##0.200.26':445
'24.##0.63.51':445
'24.##0.159.233':445
'24.##0.193.109':139
'24.##0.147.70':445
'24.##0.215.209':445
'24.#10.5.40':139
'24.##0.161.186':445
'24.##0.105.51':445
'24.#10.84.5':139
'24.##0.62.152':445
'24.##0.30.237':139
'24.##0.19.124':139
'24.##0.115.119':139
'24.#10.59.6':139
'24.##0.145.19':445
'24.##0.105.188':445
'24.##0.200.26':139
'24.##0.214.2':139
'24.##0.147.70':139
'24.##0.105.51':139
'24.##0.247.206':445
'24.##0.175.56':445
'24.##0.13.10':445
'24.##0.219.45':445
'24.##0.140.12':445
'24.##0.225.108':445
'24.##0.159.233':139
'24.##0.248.132':445
'24.##0.76.147':445
'24.##0.166.58':445
'24.##0.76.147':139
'24.##0.166.58':139
'24.##0.225.252':139
'24.##0.244.115':139
'24.##0.215.209':139
'24.##0.116.122':445
'24.##0.80.81':445
'24.##0.82.19':139
'24.##0.76.99':445
'24.##0.187.233':445
'24.##0.69.61':445
'24.##0.37.175':445
'24.##0.222.222':445
'24.##0.143.149':139
'24.##0.192.154':139
'24.##0.152.38':139
'24.##0.191.1':445
'24.##0.88.24':445
'24.##0.231.190':445
'24.##0.76.186':445
'24.##0.63.120':445
'24.##0.211.8':445
'24.##0.159.124':445
'24.#10.65.9':445
'24.##0.154.196':445
'24.##0.210.109':445
'24.##0.93.240':445
'24.##0.232.198':445
'24.##0.83.248':445
'24.##0.249.22':445
'24.##0.31.27':445
'24.#10.1.88':445
'24.##0.212.90':445
'24.##0.181.63':445
'24.##0.122.136':445
'24.##0.139.211':445
'24.##0.98.147':445
'24.##0.20.67':445
'24.##0.86.20':445
'24.##0.7.250':445
'24.##0.10.114':445
'24.##0.28.39':445
'24.##0.45.84':445
'24.##0.74.65':445
'24.##0.64.199':445
'24.##0.190.186':445
'24.##0.116.189':139
'24.##0.250.237':139
'24.##0.217.137':139
'24.##0.55.120':139
'24.##0.203.217':139
'24.##0.126.83':139
'24.##0.208.133':139
'24.##0.91.159':139
'24.##0.158.30':139
'24.##0.123.184':139
'24.##0.11.71':139
'24.##0.26.244':139
'24.##0.46.11':445
'24.##0.34.148':139
'24.##0.49.123':139
'24.##0.184.178':139
'24.##0.46.251':139
'24.##0.56.192':139
'24.##0.135.208':139
'24.##0.70.88':139
'24.##0.36.193':445
'24.##0.110.251':445
'24.##0.37.59':445
'24.##0.200.230':445
'24.##0.250.170':445
'24.##0.61.47':445
'24.#10.2.77':445
'24.##0.106.19':445
'24.##0.60.181':445
'24.##0.48.202':445
'24.##0.53.111':139
'24.##0.201.15':139
'24.##0.57.53':139
'24.##0.155.157':139
'24.##0.87.178':139
'24.##0.152.38':445
'24.##0.143.149':445
'24.##0.192.154':445
'24.##0.49.174':139
'24.##0.82.19':445
'24.##0.102.120':445
'24.##0.93.240':139
'24.##0.232.198':139
'24.##0.249.22':139
'24.##0.83.248':139
'24.##0.31.27':139
'24.##0.17.71':445
'24.##0.139.211':139
'24.##0.122.136':139
'24.##0.44.252':139
'24.##0.47.94':445
'24.##0.74.65':139
'24.##0.7.250':139
'24.##0.249.45':139
'24.##0.190.186':139
'24.##0.64.199':139
'24.##0.39.246':445
'24.##0.21.245':445
'24.##0.69.105':445
'24.##0.28.39':139
'24.##0.45.84':139
'24.##0.105.251':445
'24.##0.81.127':445
'24.##0.116.49':445
'24.##0.101.155':445
'24.##0.85.217':445
'24.##0.204.35':445
'24.##0.38.79':445
'24.##0.182.140':445
'24.##0.26.52':445
'24.##0.15.172':445
'24.##0.200.188':445
'24.#10.3.15':445
'24.##0.147.202':445
'24.##0.30.28':445
'24.##0.58.138':445
'24.##0.109.36':445
'24.##0.83.214':445
'24.##0.177.135':445
'24.##0.33.58':445
'24.##0.236.165':445
'24.##0.231.190':139
'24.##0.181.63':139
'24.#10.2.77':139
'24.##0.212.90':139
'24.##0.63.120':139
'24.##0.191.1':139
'24.##0.69.61':139
'24.##0.200.230':139
'24.#10.1.88':139
'24.#10.65.9':139
'24.##0.61.47':139
'24.##0.250.170':139
'24.##0.106.19':139
'24.##0.81.55':445
'24.##0.60.181':139
'24.##0.37.59':139
'24.##0.110.251':139
'24.##0.36.193':139
'24.##0.76.186':139
'24.##0.48.202':139
'24.##0.20.67':139
'24.##0.7.216':445
'24.##0.86.20':139
'24.##0.44.252':445
'24.##0.37.175':139
'24.##0.59.224':445
'24.##0.98.147':139
'24.#10.79.6':139
'24.##0.33.215':445
'24.##0.10.114':139
'24.##0.211.8':139
'24.##0.80.81':139
'24.##0.210.109':139
'24.##0.154.196':139
'24.##0.88.24':139
'24.##0.249.45':445
'24.##0.222.222':139
'24.##0.159.124':139
'24.##0.76.99':139
'24.##0.187.233':139
'24.##0.222.161':9988
'24.##0.131.29':9988
'24.##0.109.231':9988
'24.##0.97.220':9988
'24.##0.143.251':9988
'24.##0.101.179':9988
'24.##0.97.220':445
'24.##0.64.96':9988
'24.##0.193.17':9988
'24.##0.230.124':9988
'24.##0.174.60':9988
'24.#10.85.4':9988
'24.##0.56.16':9988
'24.##0.127.33':9988
'24.##0.46.131':9988
'24.##0.156.192':9988
'24.##0.170.233':9988
'24.##0.240.102':9988
'24.##0.123.206':9988
'24.##0.197.141':9988
'24.##0.234.25':445
'24.##0.25.174':445
'24.##0.85.248':445
'24.##0.66.178':445
'24.##0.240.102':445
'24.##0.131.254':445
'24.##0.101.179':445
'24.##0.45.251':445
'24.##0.174.60':445
'24.##0.136.169':445
'24.##0.83.251':445
'24.##0.164.14':445
'24.##0.121.83':445
'24.##0.143.251':445
'24.##0.237.81':445
'24.##0.21.222':445
'24.##0.222.161':445
'24.#10.85.4':445
'24.##0.109.231':445
'24.##0.204.85':445
'24.##0.105.197':9988
'24.##0.21.222':9988
'24.##0.95.183':9988
'24.##0.19.153':139
'24.##0.105.49':9988
'24.##0.83.251':9988
'24.##0.164.14':9988
'24.##0.68.62':9988
'24.##0.66.178':9988
'24.##0.131.254':9988
'24.##0.26.232':445
'24.##0.19.153':445
'24.##0.80.134':445
'24.##0.252.235':445
'24.##0.236.80':445
'24.##0.80.134':139
'24.##0.26.232':139
'24.##0.236.80':139
'24.##0.202.252':139
'24.##0.252.235':139
'24.##0.226.48':9988
'24.##0.36.194':9988
'24.##0.45.251':9988
'24.##0.63.161':9988
'24.##0.29.226':9988
'24.##0.151.63':9988
'24.##0.237.81':9988
'24.##0.233.151':9988
'24.##0.226.33':9988
'24.##0.191.219':9988
'24.##0.121.83':9988
'24.##0.134.230':9988
'24.##0.129.180':9988
'24.##0.254.102':9988
'24.##0.204.85':9988
'24.##0.4.201':9988
'24.##0.98.218':9988
'24.##0.85.248':9988
'24.##0.136.169':9988
'24.##0.25.174':9988
'24.##0.123.206':445
'24.##0.191.219':139
'24.##0.95.183':139
'24.##0.156.192':139
'24.##0.123.206':139
'24.##0.4.201':139
'24.##0.131.29':139
'24.##0.29.226':139
'24.##0.68.62':139
'24.##0.63.161':139
'24.##0.254.102':139
'24.##0.234.25':139
'24.##0.25.174':139
'24.##0.85.248':139
'24.##0.66.178':139
'24.##0.240.102':139
'24.##0.131.254':139
'24.##0.101.179':139
'24.##0.45.251':139
'24.##0.174.60':139
'24.##0.136.169':139
'24.##0.36.194':139
'24.##0.76.104':139
'24.##0.230.124':139
'24.##0.103.170':139
'24.##0.134.230':139
'24.##0.193.17':139
'24.##0.226.33':139
'24.##0.127.33':139
'24.##0.98.218':139
'24.##0.105.49':139
'24.##0.197.141':139
'24.##0.56.16':139
'24.##0.105.197':139
'24.##0.226.48':139
'24.##0.46.131':139
'24.##0.64.96':139
'24.##0.129.180':139
'24.##0.151.63':139
'24.##0.170.233':139
'24.##0.233.151':139
'24.##0.170.233':445
'24.##0.76.104':445
'24.##0.105.49':445
'24.##0.226.48':445
'24.##0.103.170':445
'24.##0.230.124':445
'24.##0.134.230':445
'24.##0.98.218':445
'24.##0.129.180':445
'24.##0.151.63':445
'24.##0.95.183':445
'24.##0.63.161':445
'24.##0.191.219':445
'24.##0.4.201':445
'24.##0.156.192':445
'24.##0.193.17':445
'24.##0.29.226':445
'24.##0.131.29':445
'24.##0.254.102':445
'24.##0.68.62':445
'24.##0.83.251':139
'24.##0.164.14':139
'24.##0.121.83':139
'24.##0.143.251':139
'24.##0.237.81':139
'24.##0.21.222':139
'24.##0.222.161':139
'24.#10.85.4':139
'24.##0.109.231':139
'24.##0.204.85':139
'24.##0.56.16':445
'24.##0.233.151':445
'24.##0.197.141':445
'24.##0.36.194':445
'24.##0.127.33':445
'24.##0.226.33':445
'24.##0.97.220':139
'24.##0.64.96':445
'24.##0.105.197':445
'24.##0.46.131':445
'24.##0.202.252':445
'24.##0.214.38':445
'24.##0.223.46':445
'24.##0.230.91':445
'24.##0.84.123':445
'24.##0.210.180':445
'24.##0.14.231':445
'24.##0.98.60':445
'24.##0.232.254':445
'24.##0.92.241':445
'24.##0.158.122':445
'24.##0.153.228':139
'24.##0.14.11':139
'24.##0.35.83':139
'24.##0.216.73':139
'24.##0.127.232':139
'24.##0.142.253':445
'24.##0.44.28':445
'24.##0.163.183':139
'24.##0.56.120':139
'24.##0.68.218':139
'24.##0.213.35':445
'24.##0.132.199':445
'24.##0.27.196':445
'24.##0.219.176':445
'24.##0.185.83':445
'24.##0.86.81':445
'24.##0.81.211':445
'24.##0.94.191':445
'24.##0.202.60':445
'24.##0.131.6':445
'24.##0.51.144':445
'24.##0.11.10':445
'24.##0.39.21':445
'24.#10.9.51':445
'24.##0.212.230':445
'24.#10.0.69':445
'24.##0.13.65':445
'24.##0.136.77':445
'24.##0.45.10':445
'24.##0.123.76':445
'24.##0.248.132':139
'24.##0.123.62':139
'24.##0.219.45':139
'24.##0.74.208':139
'24.##0.207.74':139
'24.##0.84.102':139
'24.##0.69.240':139
'24.##0.126.132':139
'24.##0.28.70':445
'24.##0.94.240':139
'24.##0.175.56':139
'24.##0.255.139':445
'24.##0.72.70':139
'24.##0.246.107':139
'24.##0.247.206':139
'24.##0.13.10':139
'24.##0.140.12':139
'24.##0.12.248':139
'24.##0.205.219':445
'24.##0.51.188':139
'24.##0.225.189':139
'24.##0.15.195':139
'24.##0.217.136':139
'24.##0.57.208':139
'24.##0.160.160':445
'24.##0.47.75':139
'24.##0.22.65':139
'24.##0.135.166':139
'24.##0.29.78':139
'24.##0.160.103':139
'24.##0.20.240':139
'24.##0.240.45':139
'24.##0.94.44':139
'24.##0.152.143':139
'24.##0.143.125':139
'24.##0.69.32':139
'24.##0.51.151':139
'24.##0.141.9':139
'24.##0.46.113':139
'24.##0.113.141':139
'24.##0.39.110':445
'24.##0.185.83':139
'24.##0.213.35':139
'24.##0.27.196':139
'24.##0.219.176':139
'24.##0.44.28':139
'24.##0.94.191':139
'24.##0.86.81':139
'24.##0.131.6':139
'24.##0.202.60':139
'24.##0.132.199':139
'24.##0.39.21':139
'24.##0.144.69':139
'24.##0.45.10':139
'24.##0.142.253':139
'24.##0.143.159':139
'24.#10.0.69':139
'24.##0.13.65':139
'24.##0.98.60':139
'24.##0.123.76':139
'24.##0.136.77':139
'24.##0.175.15':139
'24.#10.94.0':139
'24.##0.22.231':139
'24.##0.32.230':139
'24.##0.230.32':139
'24.##0.134.3':139
'24.##0.103.202':139
'24.##0.182.82':139
'24.##0.60.206':139
'24.##0.130.144':139
'24.##0.53.159':139
'24.##0.91.234':139
'24.##0.99.210':139
'24.##0.39.110':139
'24.##0.81.211':139
'24.##0.244.39':139
'24.##0.11.90':139
'24.##0.220.243':139
'24.##0.162.144':139
'24.##0.190.77':139
'24.#10.94.0':445
'24.##0.22.231':445
'24.##0.60.206':445
'24.##0.230.32':445
'24.##0.130.144':445
'24.##0.78.83':445
'24.##0.91.85':445
'24.##0.103.202':445
'24.##0.175.15':445
'24.##0.134.3':445
'24.##0.162.144':445
'24.##0.91.234':445
'24.##0.99.210':445
'24.##0.53.159':445
'24.##0.244.39':445
'24.##0.220.243':445
'24.##0.32.230':445
'24.##0.182.82':445
'24.##0.190.77':445
'24.##0.11.90':445
'24.##0.158.122':139
'24.##0.212.230':139
'24.##0.78.83':139
'24.##0.91.85':139
'24.##0.223.46':139
'24.##0.11.10':139
'24.##0.210.180':139
'24.##0.224.212':139
'24.##0.92.241':139
'24.#10.9.51':139
'24.##0.22.20':445
'24.##0.84.123':139
'24.##0.144.69':445
'24.##0.224.212':445
'24.##0.143.159':445
'24.##0.14.231':139
'24.##0.51.144':139
'24.##0.232.254':139
'24.##0.230.91':139
'24.##0.214.38':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней