Trojan.DownLoader11.17807

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WERdb5e.dir00\svchost.exe.mdmp 16325836412029188

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\Help\Tours\htmlTour\cxjclkkc.exe
%WINDIR%\Help\Tours\htmlTour\nleqhveh.exe
%WINDIR%\Help\Tours\htmlTour\lhhjrkjk.exe
%WINDIR%\Help\Tours\htmlTour\wwvjntek.exe
%WINDIR%\Help\Tours\htmlTour\kxkzvszq.exe
%WINDIR%\Help\Tours\htmlTour\klbvejnk.exe
%WINDIR%\Help\Tours\htmlTour\kzerbzks.exe
%WINDIR%\Help\Tours\htmlTour\hjhecvkh.exe
%WINDIR%\Help\jbnshhqj.exe
%WINDIR%\Help\bzehxvnz.exe
%TEMP%\WERdb5e.dir00\svchost.exe.mdmp
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%WINDIR%\Help\tsbjbtvn.exe
%WINDIR%\Help\Tours\htmlTour\qejnhetj.exe
%WINDIR%\Help\hwexrtne.exe
%WINDIR%\Help\jjlenkbt.exe

Сетевая активность:

Подключается к:

'89.##0.96.75':445
'89.##0.237.102':445
'89.##0.36.67':445
'89.##0.10.98':445
'89.##0.97.149':445
'89.##0.219.50':445
'89.##0.233.41':445
'89.##0.184.229':445
'89.##0.70.114':445
'89.##0.78.244':445
'89.##0.227.166':445
'89.##0.225.9':445
'89.##0.110.91':445
'89.##0.11.201':445
'89.##0.40.239':445
'89.#40.3.96':445
'89.##0.68.20':445
'89.##0.246.196':445
'89.##0.13.41':445
'89.##0.33.146':445
'89.##0.40.30':445
'89.##0.2.194':445
'89.##0.242.39':445
'89.##0.52.220':139
'89.##0.104.236':139
'89.##0.52.220':445
'89.##0.74.106':139
'89.##0.26.221':139
'89.##0.36.168':139
'89.##0.49.22':139
'89.##0.40.239':139
'89.##0.68.20':139
'89.##0.245.29':139
'89.#40.3.96':139
'89.##0.88.46':139
'89.##0.65.32':445
'89.##0.207.95':445
'89.#40.8.65':445
'89.##0.101.126':445
'89.##0.99.121':445
'89.##0.208.205':445
'89.##0.190.160':139
'89.##0.52.100':139
'89.##0.80.189':139
'89.##0.19.251':445
'89.##0.161.132':139
'89.##0.15.24':445
'89.##0.101.60':445
'89.##0.61.134':445
'89.##0.229.55':139
'89.##0.225.111':139
'89.##0.60.48':445
'89.##0.181.96':445
'89.##0.251.98':445
'89.##0.110.232':445
'89.##0.165.13':445
'89.##0.233.175':445
'89.##0.109.210':139
'89.##0.252.37':139
'89.##0.246.8':139
'89.##0.102.91':139
'89.##0.74.87':139
'89.##0.207.119':139
'89.##0.37.40':139
'89.##0.114.83':139
'89.##0.8.239':139
'89.##0.47.82':139
'89.##0.85.163':139
'89.##0.57.177':139
'89.##0.107.162':139
'89.##0.161.132':445
'89.##0.139.186':139
'89.##0.181.96':139
'89.##0.226.204':139
'89.##0.80.189':445
'89.##0.104.236':445
'89.##0.36.168':445
'89.##0.74.106':445
'89.##0.52.100':445
'89.##0.88.46':445
'89.##0.251.98':139
'89.##0.61.134':139
'89.##0.10.156':139
'89.##0.236.228':139
'89.##0.139.186':445
'89.##0.107.162':445
'89.##0.15.24':139
'89.##0.233.175':139
'89.##0.110.232':139
'89.##0.165.13':139
'89.##0.101.60':139
'89.##0.60.48':139
'89.##0.134.182':445
'89.##0.230.91':445
'89.##0.125.33':445
'89.##0.233.105':445
'89.##0.232.186':445
'89.##0.82.199':445
'89.##0.216.198':445
'89.##0.195.183':445
'89.##0.215.216':445
'89.#40.3.22':445
'89.##0.229.7':445
'89.##0.116.51':445
'89.##0.144.115':445
'89.##0.68.46':445
'89.##0.143.108':445
'89.##0.145.101':445
'89.##0.209.100':445
'89.##0.70.76':445
'89.##0.219.37':445
'89.##0.10.199':445
'89.##0.207.219':445
'89.##0.87.98':445
'89.##0.207.227':445
'89.##0.152.117':445
'89.##0.144.131':445
'89.##0.99.243':445
'89.##0.245.101':445
'89.##0.20.100':445
'89.##0.85.41':445
'89.##0.134.93':139
'89.##0.211.69':139
'89.##0.6.238':139
'89.##0.64.198':139
'89.##0.138.180':139
'89.##0.156.44':445
'89.##0.105.139':445
'89.##0.158.238':445
'89.##0.90.213':445
'89.##0.44.194':445
'89.##0.123.51':445
'89.##0.238.141':445
'89.##0.207.149':445
'89.##0.45.201':445
'89.##0.255.105':445
'89.##0.101.236':445
'89.##0.205.45':445
'89.##0.219.50':139
'89.##0.78.244':139
'89.##0.237.102':139
'89.##0.36.67':139
'89.##0.96.75':139
'89.##0.227.166':139
'89.##0.101.126':139
'89.##0.99.121':139
'89.##0.184.229':139
'89.##0.70.114':139
'89.##0.233.41':139
'89.##0.97.149':139
'89.##0.246.196':139
'89.##0.2.194':139
'89.##0.11.201':139
'89.##0.86.229':139
'89.##0.110.91':139
'89.##0.242.39':139
'89.##0.225.9':139
'89.##0.10.98':139
'89.##0.33.146':139
'89.##0.40.30':139
'89.##0.13.41':139
'89.##0.188.31':139
'89.##0.24.156':139
'89.##0.8.243':139
'89.##0.94.250':445
'89.##0.122.9':139
'89.##0.94.250':139
'89.##0.134.93':445
'89.##0.211.69':445
'89.##0.6.238':445
'89.##0.64.198':445
'89.##0.138.180':445
'89.##0.24.156':445
'89.##0.19.207':445
'89.##0.207.95':139
'89.##0.95.99':139
'89.#40.8.65':139
'89.##0.65.32':139
'89.##0.208.205':139
'89.##0.8.243':445
'89.##0.188.31':445
'89.##0.122.9':445
'89.##0.19.251':139
'89.##0.243.98':139
'89.##0.178.105':139
'89.##0.105.116':139
'89.##0.149.103':139
'89.##0.192.54':139
'89.##0.92.99':139
'89.##0.71.123':139
'89.##0.40.113':139
'89.##0.179.12':139
'89.##0.248.39':139
'89.##0.122.186':139
'89.##0.186.247':139
'89.##0.90.37':139
'89.##0.28.195':445
'89.##0.152.1':445
'89.##0.121.213':445
'89.##0.36.90':445
'89.##0.84.123':445
'89.##0.76.84':445
'89.##0.193.93':139
'89.##0.135.189':139
'89.##0.52.210':445
'89.##0.31.12':445
'89.##0.112.87':445
'89.##0.152.1':139
'89.##0.76.84':139
'89.##0.28.195':139
'89.##0.84.123':139
'89.##0.121.213':139
'89.##0.31.12':139
'89.##0.200.48':445
'89.##0.101.250':445
'89.##0.210.174':445
'89.##0.112.87':139
'89.##0.52.210':139
'89.##0.36.90':139
'89.##0.25.211':139
'89.##0.197.111':139
'89.##0.49.26':139
'89.##0.167.117':139
'89.##0.67.178':139
'89.##0.156.55':139
'89.##0.185.218':139
'89.##0.93.144':139
'89.##0.112.115':139
'89.##0.34.175':139
'89.##0.40.112':139
'89.##0.109.172':139
'89.##0.59.239':139
'89.##0.97.61':139
'89.#40.8.20':139
'89.#40.7.67':139
'89.##0.101.33':139
'89.##0.118.1':139
'89.##0.116.15':139
'89.##0.16.237':139
'89.##0.10.104':445
'89.##0.10.104':139
'89.##0.68.21':139
'89.##0.212.66':445
'89.##0.66.112':139
'89.##0.105.217':139
'89.##0.185.207':139
'89.##0.207.231':445
'89.##0.112.68':139
'89.##0.104.95':139
'89.##0.95.48':139
'89.##0.28.105':139
'89.##0.226.252':139
'89.##0.95.134':139
'89.##0.49.26':445
'89.##0.197.111':445
'89.##0.67.178':445
'89.##0.179.12':445
'89.##0.167.117':445
'89.##0.156.55':445
'89.##0.185.218':445
'89.##0.93.144':445
'89.##0.112.115':445
'89.##0.34.175':445
'89.##0.40.112':445
'89.##0.40.113':445
'89.##0.192.54':445
'89.##0.92.99':445
'89.##0.90.37':445
'89.##0.193.93':445
'89.##0.135.189':445
'89.##0.149.103':445
'89.##0.122.186':445
'89.##0.248.39':445
'89.##0.186.247':445
'89.##0.105.116':445
'89.##0.71.123':445
'89.##0.114.83':445
'89.##0.8.239':445
'89.##0.47.82':445
'89.##0.246.8':445
'89.##0.85.163':445
'89.##0.109.210':445
'89.##0.166.142':139
'89.##0.78.140':139
'89.##0.61.132':139
'89.##0.229.55':445
'89.##0.225.111':445
'89.##0.102.91':445
'89.##0.76.241':445
'89.##0.143.231':445
'89.##0.110.170':445
'89.##0.113.77':445
'89.##0.46.244':445
'89.##0.14.70':445
'89.##0.74.87':445
'89.##0.207.119':445
'89.##0.35.58':445
'89.##0.33.36':445
'89.##0.116.35':445
'89.##0.110.170':139
'89.##0.76.241':139
'89.##0.46.244':139
'89.##0.20.12':139
'89.##0.113.77':139
'89.##0.143.231':139
'89.##0.116.35':139
'89.##0.35.58':139
'89.##0.33.36':139
'89.##0.9.187':139
'89.##0.14.70':139
'89.##0.25.239':139
'89.##0.179.253':139
'89.##0.132.65':139
'89.##0.37.170':139
'89.##0.49.247':139
'89.##0.0.158':139
'89.##0.25.175':139
'89.##0.205.207':139
'89.##0.159.158':139
'89.##0.203.161':139
'89.##0.99.87':139
'89.##0.224.70':139
'89.##0.200.48':139
'89.##0.101.250':139
'89.##0.210.174':139
'89.##0.118.109':445
'89.##0.110.104':445
'89.##0.250.148':139
'89.##0.138.198':139
'89.##0.107.225':139
'89.##0.145.89':139
'89.##0.148.184':139
'89.##0.108.7':139
'89.##0.57.161':445
'89.##0.145.89':445
'89.##0.138.198':445
'89.##0.108.7':445
'89.##0.250.148':445
'89.##0.148.184':445
'89.##0.107.225':445
'89.##0.246.80':445
'89.##0.52.67':445
'89.##0.192.124':445
'89.##0.149.132':445
'89.##0.171.151':445
'89.##0.25.175':445
'89.##0.99.87':445
'89.##0.132.65':445
'89.##0.0.158':445
'89.##0.37.170':445
'89.##0.224.70':445
'89.##0.25.239':445
'89.##0.20.12':445
'89.##0.159.158':445
'89.##0.203.161':445
'89.##0.205.207':445
'89.##0.49.247':445
'89.##0.246.80':139
'89.##0.52.67':139
'89.##0.192.124':139
'89.##0.149.132':139
'89.##0.171.151':139
'89.##0.57.161':139
'89.##0.166.142':445
'89.##0.78.140':445
'89.##0.61.132':445
'89.##0.118.109':139
'89.##0.110.104':139
'89.##0.145.101':139
'89.##0.35.165':445
'89.##0.88.172':445
'89.##0.28.225':445
'89.##0.69.162':139
'89.##0.81.248':139
'89.##0.13.148':445
'89.##0.88.172':139
'89.##0.13.148':139
'89.##0.35.165':139
'89.##0.147.165':445
'89.##0.28.225':139
'89.##0.156.31':139
'89.##0.29.151':139
'89.##0.251.145':139
'89.##0.47.35':139
'89.##0.141.81':139
'89.#40.5.30':139
'89.##0.210.51':139
'89.##0.86.225':139
'89.##0.224.155':139
'89.##0.39.87':139
'89.##0.100.234':139
'89.##0.24.39':139
'89.##0.97.86':445
'89.##0.140.4':445
'89.##0.214.103':445
'89.##0.16.185':9988
'89.##0.91.19':445
'89.##0.0.179':445
'89.##0.217.218':445
'89.##0.86.175':445
'89.##0.136.60':445
'89.##0.13.170':445
'89.##0.81.19':445
'89.##0.27.210':9988
'89.##0.12.137':9988
'89.##0.71.201':9988
'89.##0.207.215':9988
'89.##0.147.165':139
'89.##0.223.110':9988
'89.##0.188.210':9988
'89.##0.173.222':9988
'89.##0.225.129':9988
'89.##0.230.90':9988
'89.##0.215.125':9988
'89.##0.15.104':9988
'89.##0.216.191':139
'89.##0.19.18':139
'89.##0.144.216':139
'89.##0.69.162':445
'89.##0.81.248':445
'89.##0.59.40':139
'89.##0.115.235':139
'89.##0.42.54':139
'89.##0.138.194':139
'89.##0.138.221':139
'89.##0.213.61':139
'89.##0.156.31':445
'89.##0.29.151':445
'89.##0.251.145':445
'89.##0.47.35':445
'89.##0.141.81':445
'89.#40.5.30':445
'89.##0.210.51':445
'89.##0.86.225':445
'89.##0.224.155':445
'89.##0.39.87':445
'89.##0.100.234':445
'89.##0.24.39':445
'89.##0.6.183':139
'89.##0.62.151':139
'89.##0.10.106':139
'89.##0.118.222':139
'89.##0.186.73':139
'89.##0.206.241':139
'89.##0.27.89':139
'89.##0.197.134':139
'89.##0.250.173':139
'89.##0.213.206':139
'89.##0.20.144':139
'89.##0.93.124':139
'89.##0.72.101':139
'89.##0.65.210':139
'89.##0.106.125':139
'89.##0.54.22':139
'89.##0.71.81':139
'89.##0.28.227':139
'89.##0.214.89':139
'89.##0.90.93':139
'89.##0.98.214':139
'89.##0.75.129':139
'89.##0.207.60':139
'89.##0.116.176':139
'89.##0.64.162':139
'89.##0.165.58':139
'89.##0.50.207':139
'89.##0.159.207':139
'89.##0.154.123':139
'89.##0.142.178':139
'89.##0.118.163':139
'89.##0.59.176':139
'89.##0.187.75':139
'89.##0.27.210':139
'89.##0.12.137':139
'89.##0.136.60':139
'89.##0.217.218':139
'89.##0.86.175':139
'89.##0.91.19':139
'89.##0.140.4':139
'89.##0.121.240':139
'89.##0.207.215':139
'89.##0.110.130':139
'89.##0.26.193':139
'89.##0.70.148':139
'89.##0.29.28':139
'89.##0.194.252':139
'89.##0.243.46':139
'89.##0.230.90':139
'89.##0.227.59':139
'89.##0.251.71':139
'89.##0.173.222':139
'89.##0.223.110':139
'89.##0.225.129':139
'89.##0.15.104':139
'89.##0.19.40':139
'89.##0.71.201':139
'89.##0.133.129':139
'89.##0.122.48':139
'89.##0.219.38':139
'89.##0.215.125':139
'89.##0.136.130':139
'89.##0.161.93':139
'89.##0.146.0':139
'89.##0.182.24':139
'89.#40.0.3':139
'89.##0.16.185':139
'89.##0.188.210':139
'89.##0.93.159':139
'89.##0.59.176':445
'89.##0.136.130':445
'89.##0.187.75':445
'89.##0.27.210':445
'89.##0.154.123':445
'89.##0.142.178':445
'89.##0.219.38':445
'89.##0.215.125':445
'89.##0.122.48':445
'89.##0.118.163':445
'89.##0.161.93':445
'89.##0.64.162':445
'89.##0.26.193':445
'89.##0.29.28':445
'89.##0.207.215':445
'89.##0.121.240':445
'89.##0.70.148':445
'89.##0.12.137':445
'89.##0.159.207':445
'89.##0.116.176':445
'89.##0.165.58':445
'89.##0.110.130':445
'89.##0.50.207':445
'89.##0.71.201':445
'89.##0.223.110':445
'89.##0.15.104':445
'89.##0.243.46':445
'89.##0.173.222':445
'89.##0.225.129':445
'89.##0.97.86':139
'89.##0.214.103':139
'89.##0.0.179':139
'89.##0.81.19':139
'89.##0.13.170':139
'89.##0.194.252':445
'89.##0.182.24':445
'89.##0.16.185':445
'89.##0.146.0':445
'89.##0.188.210':445
'89.##0.93.159':445
'89.#40.0.3':445
'89.##0.230.90':445
'89.##0.19.40':445
'89.##0.227.59':445
'89.##0.251.71':445
'89.##0.133.129':445
'89.##0.98.160':445
'89.##0.160.94':445
'89.##0.29.32':445
'89.##0.38.94':445
'89.##0.139.212':445
'89.##0.14.169':445
'89.##0.31.45':445
'89.##0.70.193':445
'89.##0.31.31':445
'89.##0.36.23':445
'89.##0.11.128':445
'89.##0.37.28':445
'89.##0.102.38':139
'89.#40.67.9':445
'89.##0.38.25':139
'89.##0.254.35':139
'89.##0.196.212':139
'89.##0.9.125':445
'89.##0.57.53':445
'89.##0.53.37':445
'89.##0.199.225':445
'89.##0.124.135':445
'89.##0.134.217':445
'89.##0.57.167':445
'89.##0.46.174':445
'89.##0.164.14':445
'89.##0.77.16':445
'89.##0.198.153':445
'89.##0.68.103':445
'89.##0.84.122':445
'89.##0.84.35':445
'89.##0.205.202':445
'89.##0.149.26':445
'89.#40.88.8':445
'89.##0.161.188':445
'89.##0.25.134':445
'89.##0.175.12':445
'89.##0.178.253':445
'89.##0.157.30':445
'89.##0.58.76':445
'89.##0.53.177':445
'89.##0.123.18':445
'89.##0.4.162':445
'89.##0.254.8':445
'89.##0.177.243':445
'89.##0.27.133':445
'89.##0.230.91':139
'89.##0.82.199':139
'89.##0.134.182':139
'89.##0.232.186':139
'89.##0.125.33':139
'89.#40.3.22':139
'89.##0.195.183':139
'89.##0.44.194':139
'89.##0.216.198':139
'89.##0.229.7':139
'89.##0.215.216':139
'89.##0.233.105':139
'89.##0.68.46':139
'89.##0.70.76':139
'89.##0.144.115':139
'89.##0.209.100':139
'89.##0.143.108':139
'89.##0.87.98':139
'89.##0.10.199':139
'89.##0.116.51':139
'89.##0.219.37':139
'89.##0.207.227':139
'89.##0.207.219':139
'89.##0.144.131':139
'89.##0.85.41':139
'89.##0.152.117':139
'89.##0.20.100':139
'89.##0.99.243':139
'89.##0.180.237':445
'89.##0.102.38':445
'89.##0.180.237':139
'89.##0.38.25':445
'89.##0.254.35':445
'89.##0.196.212':445
'89.##0.245.101':139
'89.##0.158.238':139
'89.##0.238.141':139
'89.##0.105.139':139
'89.##0.123.51':139
'89.##0.90.213':139
'89.##0.101.236':139
'89.##0.45.201':139
'89.##0.156.44':139
'89.##0.207.149':139
'89.##0.205.45':139
'89.##0.255.105':139
'89.##0.216.191':445
'89.##0.19.18':445
'89.##0.144.216':445
'89.##0.33.205':139
'89.##0.148.195':139
'89.##0.59.40':445
'89.##0.115.235':445
'89.##0.42.54':445
'89.##0.138.194':445
'89.##0.138.221':445
'89.##0.213.61':445
'89.##0.68.34':139
'89.##0.76.171':139
'89.##0.37.178':445
'89.##0.29.39':139
'89.##0.98.119':139
'89.##0.206.33':139
'89.##0.32.81':445
'89.##0.37.178':139
'89.##0.32.81':139
'89.##0.148.195':445
'89.##0.68.34':445
'89.##0.33.205':445
'89.##0.6.183':445
'89.##0.62.151':445
'89.##0.10.106':445
'89.##0.118.222':445
'89.##0.186.73':445
'89.##0.206.241':445
'89.##0.27.89':445
'89.##0.197.134':445
'89.##0.250.173':445
'89.##0.213.206':445
'89.##0.20.144':445
'89.##0.93.124':445
'89.##0.72.101':445
'89.##0.65.210':445
'89.##0.106.125':445
'89.##0.54.22':445
'89.##0.71.81':445
'89.##0.28.227':445
'89.##0.214.89':445
'89.##0.90.93':445
'89.##0.98.214':445
'89.##0.75.129':445
'89.##0.207.60':445
'89.##0.98.160':139
'89.##0.160.94':139
'89.##0.29.32':139
'89.##0.38.94':139
'89.##0.139.212':139
'89.##0.14.169':139
'89.##0.31.45':139
'89.##0.70.193':139
'89.##0.31.31':139
'89.##0.36.23':139
'89.##0.11.128':139
'89.##0.37.28':139
'89.##0.76.171':445
'89.#40.67.9':139
'89.##0.29.39':445
'89.##0.98.119':445
'89.##0.206.33':445
'89.##0.9.125':139
'89.##0.57.53':139
'89.##0.53.37':139
'89.##0.199.225':139
'89.##0.124.135':139
'89.##0.134.217':139
'89.##0.57.167':139
'89.##0.46.174':139
'89.##0.164.14':139
'89.##0.77.16':139
'89.##0.198.153':139
'89.##0.68.103':139
'89.##0.84.122':139
'89.##0.84.35':139
'89.##0.205.202':139
'89.##0.149.26':139
'89.#40.88.8':139
'89.##0.161.188':139
'89.##0.25.134':139
'89.##0.175.12':139
'89.##0.178.253':139
'89.##0.157.30':139
'89.##0.58.76':139
'89.##0.53.177':139
'89.##0.123.18':139
'89.##0.4.162':139
'89.##0.254.8':139
'89.##0.177.243':139
'89.##0.27.133':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней