Trojan.DownLoader10.21126

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1132 -dm 7 7 %TEMP%\WER8cf9.dir00\svchost.exe.mdmp 16325836412032416

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\Help\Tours\htmlTour\kzerbzks.exe
%WINDIR%\Help\Tours\htmlTour\hjhecvkh.exe
%WINDIR%\Help\Tours\htmlTour\cxjclkkc.exe
%WINDIR%\Help\Tours\htmlTour\nleqhveh.exe
%WINDIR%\Help\Tours\htmlTour\kxkzvszq.exe
%WINDIR%\Help\Tours\htmlTour\klbvejnk.exe
%WINDIR%\Help\Tours\htmlTour\tjxhsker.exe
%WINDIR%\Help\Tours\htmlTour\lrhwxcwk.exe
%WINDIR%\Help\Tours\htmlTour\wwvjntek.exe
%WINDIR%\Help\bzehxvnz.exe
%WINDIR%\Help\hwexrtne.exe
%TEMP%\WER8cf9.dir00\svchost.exe.mdmp
%WINDIR%\Help\jbnshhqj.exe
%WINDIR%\Help\Tours\htmlTour\qejnhetj.exe
%WINDIR%\Help\Tours\htmlTour\lhhjrkjk.exe
%WINDIR%\Help\jjlenkbt.exe
%WINDIR%\Help\tsbjbtvn.exe

Сетевая активность:

Подключается к:

'14#.#43.224.195':445
'14#.#43.66.225':445
'14#.#43.128.247':445
'14#.#43.37.253':445
'14#.#43.0.105':445
'14#.#43.29.76':445
'14#.#43.120.208':445
'14#.#43.73.53':445
'14#.#43.229.149':445
'14#.#43.36.250':445
'14#.#43.181.167':445
'14#.#43.121.241':445
'14#.#43.110.54':445
'14#.#43.133.130':139
'14#.#43.126.133':139
'14#.#43.52.118':139
'14#.#43.81.138':139
'14#.#43.59.217':139
'14#.#43.59.217':445
'14#.#43.132.150':139
'14#.#43.205.213':445
'14#.#43.89.206':445
'14#.#43.61.172':445
'14#.#43.24.58':445
'14#.#43.116.91':445
'14#.#43.35.88':445
'14#.#43.74.115':445
'14#.#43.52.253':139
'14#.#43.129.199':139
'14#.#43.112.207':139
'14#.#43.126.133':445
'14#.#43.52.118':445
'14#.#43.132.150':445
'14#.#43.147.139':139
'14#.#43.144.246':139
'14#.#43.180.21':139
'14#.#43.56.22':139
'14#.#43.144.72':139
'14#.#43.121.108':139
'14#.#43.239.212':139
'14#.#43.61.49':445
'14#.#43.225.66':445
'14#.#43.81.25':445
'14#.#43.49.155':445
'14#.#43.78.137':445
'14#.#43.26.118':445
'14#.#43.139.182':445
'14#.#43.141.66':445
'14#.#43.81.138':445
'14#.#43.133.130':445
'14#.#43.64.74':445
'14#.#43.104.13':445
'14#.#43.250.159':445
'14#.#43.25.90':445
'14#.#43.99.131':445
'14#.#43.183.185':445
'14#.#43.16.184':445
'14#.#43.203.245':445
'14#.#43.219.157':445
'14#.#43.37.64':445
'14#.#43.91.69':445
'14#.#43.116.91':139
'14#.#43.35.88':139
'14#.#43.205.213':139
'14#.#43.183.122':445
'14#.#43.55.19':445
'14#.#43.24.58':139
'14#.#43.16.184':139
'14#.#43.91.69':139
'14#.#43.23.212':139
'14#.#43.37.64':139
'14#.#43.99.131':139
'14#.#43.183.185':139
'14#.#43.23.212':445
'14#.#43.19.190':445
'14#.#43.16.58':445
'14#.#43.72.92':445
'14#.#43.183.122':139
'14#.#43.55.19':139
'14#.#43.212.132':445
'14#.#43.89.206':139
'14#.#43.78.137':139
'14#.#43.26.118':139
'14#.#43.61.49':139
'14#.#43.36.250':139
'14#.#43.74.115':139
'14#.#43.49.155':139
'14#.#43.225.66':139
'14#.#43.104.13':139
'14#.#43.250.159':139
'14#.#43.141.66':139
'14#.#43.81.25':139
'14#.#43.139.182':139
'14#.#43.64.74':139
'14#.#43.29.76':139
'14#.#43.224.195':139
'14#.#43.66.225':139
'14#.#43.61.172':139
'14#.#43.37.253':139
'14#.#43.0.105':139
'14#.#43.128.247':139
'14#.#43.110.54':139
'14#.#43.73.53':139
'14#.#43.229.149':139
'14#.#43.120.208':139
'14#.#43.181.167':139
'14#.#43.121.241':139
'14#.#43.108.145':445
'14#.#43.145.54':445
'14#.#43.39.117':445
'14#.#43.183.157':445
'14#.#43.183.37':445
'14#.#43.12.249':445
'14#.#43.84.237':445
'14#.#43.108.140':445
'14#.#43.4.108':445
'14#.#43.129.18':445
'14#.#43.223.219':445
'14#.#43.239.223':445
'14#.#43.110.224':445
'14#.#43.181.161':445
'14#.#43.72.145':445
'14#.#43.205.122':445
'14#.#43.129.18':139
'14#.#43.176.137':139
'14#.#43.150.178':445
'14#.#43.56.212':445
'14#.#43.67.131':445
'14#.#43.56.42':445
'14#.#43.52.122':445
'14#.#43.36.61':445
'14#.#43.54.93':445
'14#.#43.1.236':445
'14#.#43.176.137':445
'14#.#43.2.63':139
'14#.#43.187.2':139
'14#.#43.141.186':139
'14#.#43.251.72':139
'14#.#43.97.122':139
'14#.#43.209.129':139
'14#.#43.169.141':139
'14#.#43.255.201':139
'14#.#43.60.0':139
'14#.#43.74.60':139
'14#.#43.253.96':139
'14#.#43.135.79':139
'14#.#43.55.100':139
'14#.#43.5.34':139
'14#.#43.127.182':139
'14#.#43.151.127':139
'14#.#43.232.80':139
'14#.#43.71.70':139
'14#.#43.27.144':139
'14#.#43.138.151':139
'14#.#43.0.93':139
'14#.#43.7.67':139
'14#.#43.118.228':139
'14#.#43.139.138':139
'14#.#43.39.198':139
'14#.#43.7.180':139
'14#.#43.198.28':139
'14#.#43.220.70':445
'14#.#43.240.40':445
'14#.#43.150.178':139
'14#.#43.56.22':445
'14#.#43.65.209':445
'14#.#43.84.130':445
'14#.#43.181.161':139
'14#.#43.56.212':139
'14#.#43.50.11':139
'14#.#43.36.61':139
'14#.#43.158.202':139
'14#.#43.72.145':139
'14#.#43.205.122':139
'14#.#43.119.220':139
'14#.#43.240.40':139
'14#.#43.52.253':445
'14#.#43.65.209':139
'14#.#43.84.130':139
'14#.#43.220.70':139
'14#.#43.129.199':445
'14#.#43.121.108':445
'14#.#43.239.212':445
'14#.#43.180.21':445
'14#.#43.112.207':445
'14#.#43.147.139':445
'14#.#43.144.72':445
'14#.#43.66.46':139
'14#.#43.205.112':139
'14#.#43.39.117':139
'14#.#43.84.237':139
'14#.#43.113.134':139
'14#.#43.17.45':139
'14#.#43.145.54':139
'14#.#43.79.2':139
'14#.#43.55.87':139
'14#.#43.108.140':139
'14#.#43.4.108':139
'14#.#43.223.219':139
'14#.#43.239.223':139
'14#.#43.110.224':139
'14#.#43.21.2':139
'14#.#43.67.131':139
'14#.#43.145.157':139
'14#.#43.54.93':139
'14#.#43.75.248':139
'14#.#43.1.236':139
'14#.#43.56.42':139
'14#.#43.183.37':139
'14#.#43.12.249':139
'14#.#43.108.145':139
'14#.#43.52.122':139
'14#.#43.183.157':139
'14#.#43.71.22':139
'14#.#43.219.157':139
'14#.#43.152.253':445
'14#.#43.15.206':445
'14#.#43.162.57':445
'14#.#43.164.37':445
'14#.#43.40.216':445
'14#.#43.185.170':445
'14#.#43.20.162':445
'14#.#43.102.163':445
'14#.#43.255.24':445
'14#.#43.231.254':445
'14#.#43.66.138':445
'14#.#43.242.244':445
'14#.#43.57.92':445
'14#.#43.23.98':445
'14#.#43.69.40':445
'14#.#43.70.248':445
'14#.#43.210.56':445
'14#.#43.29.51':445
'14#.#43.75.152':445
'14#.#43.132.71':445
'14#.#43.189.238':445
'14#.#43.158.19':445
'14#.#43.114.158':445
'14#.#43.171.132':445
'14#.#43.82.208':445
'14#.#43.101.147':445
'14#.#43.31.225':445
'14#.#43.77.241':445
'14#.#43.237.77':445
'14#.#43.120.99':445
'14#.#43.81.77':445
'14#.#43.147.179':445
'14#.#43.241.126':445
'14#.#43.244.85':445
'14#.#43.132.71':9988
'14#.#43.189.238':9988
'14#.#43.152.253':9988
'14#.#43.20.244':445
'14#.#43.20.244':9988
'14#.#43.13.171':9988
'14#.#43.118.71':445
'14#.#43.236.218':445
'14#.#43.209.168':445
'14#.#43.239.160':445
'14#.#43.87.99':445
'14#.#43.221.87':445
'14#.#43.23.79':445
'14#.#43.150.138':445
'14#.#43.111.61':445
'14#.#43.77.111':445
'14#.143.2.7':445
'14#.#43.137.208':445
'14#.#43.130.253':445
'14#.#43.225.38':445
'14#.#43.164.37':139
'14#.#43.40.216':139
'14#.#43.185.170':139
'14#.#43.189.238':139
'14#.#43.158.19':139
'14#.#43.114.158':139
'14#.#43.152.253':139
'14#.#43.66.138':139
'14#.#43.242.244':139
'14#.#43.57.92':139
'14#.#43.15.206':139
'14#.#43.162.57':139
'14#.#43.20.162':139
'14#.#43.210.56':139
'14#.#43.29.51':139
'14#.#43.75.152':139
'14#.#43.13.171':139
'14#.#43.52.146':139
'14#.#43.225.38':139
'14#.#43.23.98':139
'14#.#43.171.132':139
'14#.#43.82.208':139
'14#.#43.101.147':139
'14#.#43.69.40':139
'14#.#43.70.248':139
'14#.#43.132.71':139
'14#.#43.102.163':139
'14#.#43.81.77':139
'14#.#43.147.179':139
'14#.#43.241.126':139
'14#.#43.150.138':139
'14#.#43.111.61':139
'14#.#43.77.111':139
'14#.#43.77.241':139
'14#.#43.20.244':139
'14#.#43.13.171':445
'14#.#43.52.146':445
'14#.#43.237.77':139
'14#.#43.120.99':139
'14#.#43.244.85':139
'14#.#43.239.160':139
'14#.#43.87.99':139
'14#.#43.221.87':139
'14#.#43.255.24':139
'14#.#43.231.254':139
'14#.#43.31.225':139
'14#.#43.118.71':139
'14#.143.2.7':139
'14#.#43.137.208':139
'14#.#43.130.253':139
'14#.#43.236.218':139
'14#.#43.209.168':139
'14#.#43.23.79':139
'14#.#43.212.160':445
'14#.#43.66.229':445
'14#.#43.130.153':445
'14#.#43.76.62':445
'14#.#43.99.76':445
'14#.#43.161.99':445
'14#.#43.31.17':445
'14#.#43.46.76':445
'14#.#43.47.151':445
'14#.#43.178.163':445
'14#.#43.9.34':445
'14#.#43.147.76':445
'14#.#43.15.132':445
'14#.#43.34.12':139
'14#.#43.98.197':139
'14#.#43.128.33':139
'14#.#43.80.13':139
'14#.#43.55.148':139
'14#.#43.9.123':139
'14#.#43.173.114':139
'14#.#43.167.4':139
'14#.#43.42.54':445
'14#.#43.61.205':445
'14#.#43.128.209':139
'14#.#43.37.170':139
'14#.#43.10.92':139
'14#.#43.97.172':445
'14#.#43.173.114':445
'14#.#43.128.209':445
'14#.#43.37.170':445
'14#.#43.34.12':445
'14#.#43.98.197':445
'14#.#43.128.33':445
'14#.#43.10.92':445
'14#.#43.16.58':139
'14#.#43.72.92':139
'14#.#43.203.245':139
'14#.#43.167.4':445
'14#.#43.212.132':139
'14#.#43.19.190':139
'14#.#43.45.54':445
'14#.#43.213.247':445
'14#.#43.246.213':445
'14#.#43.129.58':445
'14#.#43.165.0':445
'14#.#43.158.209':445
'14#.#43.38.13':445
'14#.#43.80.13':445
'14#.#43.55.148':445
'14#.#43.9.123':445
'14#.#43.92.212':445
'14#.#43.90.109':445
'14#.#43.142.20':445
'14#.#43.142.20':139
'14#.#43.78.21':445
'14#.#43.169.216':445
'14#.#43.80.60':445
'14#.#43.70.221':139
'14#.#43.70.221':445
'14#.#43.115.1':139
'14#.#43.117.234':445
'14#.#43.227.59':445
'14#.#43.145.122':445
'14#.#43.89.173':445
'14#.#43.185.36':445
'14#.#43.6.42':445
'14#.#43.28.77':445
'14#.#43.80.60':139
'14#.#43.117.234':139
'14#.#43.4.76':139
'14#.#43.78.21':139
'14#.#43.169.216':139
'14#.#43.219.169':139
'14#.#43.185.36':139
'14#.#43.145.122':139
'14#.#43.89.173':139
'14#.#43.90.185':139
'14#.#43.6.42':139
'14#.#43.28.77':139
'14#.#43.227.59':139
'14#.#43.90.185':445
'14#.#43.97.172':139
'14#.#43.129.58':139
'14#.#43.165.0':139
'14#.#43.46.76':139
'14#.#43.47.151':139
'14#.#43.178.163':139
'14#.#43.158.209':139
'14#.#43.38.13':139
'14#.#43.92.212':139
'14#.#43.90.109':139
'14#.#43.45.54':139
'14#.#43.213.247':139
'14#.#43.246.213':139
'14#.#43.76.62':139
'14#.#43.99.76':139
'14#.#43.161.99':139
'14#.#43.115.1':445
'14#.#43.42.54':139
'14#.#43.61.205':139
'14#.#43.212.160':139
'14#.#43.9.34':139
'14#.#43.147.76':139
'14#.#43.15.132':139
'14#.#43.66.229':139
'14#.#43.130.153':139
'14#.#43.31.17':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней