Trojan.Starman.5255

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd64e.dir00\svchost.exe.mdmp 16325836412032132

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERd64e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#54.115.73':139
'22#.#54.217.67':139
'22#.#54.55.58':139
'22#.#54.3.117':139
'22#.#54.190.202':139
'22#.#54.72.116':139
'22#.#54.193.32':139
'22#.#54.61.51':139
'22#.#54.216.165':139
'22#.#54.237.240':139
'22#.#54.165.206':139
'22#.#54.47.218':139
'22#.#54.168.48':139
'22#.#54.52.222':139
'22#.#54.206.129':139
'22#.#54.48.120':139
'22#.#54.27.54':139
'22#.#54.90.20':139
'22#.#54.106.131':139
'22#.#54.3.67':139
'22#.#54.146.233':139
'22#.#54.212.64':139
'22#.#54.223.155':139
'22#.#54.227.69':445
'22#.#54.78.230':445
'22#.#54.105.179':445
'22#.#54.123.67':139
'22#.#54.97.69':445
'22#.#54.170.49':445
'22#.#54.231.192':445
'22#.#54.221.80':445
'22#.#54.64.58':445
'22#.#54.191.106':445
'22#.#54.45.119':445
'22#.#54.13.27':139
'22#.#54.129.136':139
'22#.#54.255.45':139
'22#.#54.50.11':139
'22#.#54.98.187':139
'22#.#54.119.134':139
'22#.#54.50.203':139
'22#.#54.29.111':139
'22#.#54.123.28':139
'22#.#54.77.30':139
'22#.#54.51.70':139
'22#.#54.224.52':139
'22#.#54.2.41':445
'22#.#54.176.200':445
'22#.#54.10.217':445
'22#.#54.13.227':445
'22#.#54.69.14':445
'22#.#54.145.95':445
'22#.#54.18.100':445
'22#.#54.3.170':445
'22#.#54.250.211':445
'22#.#54.38.71':445
'22#.#54.211.38':445
'22#.#54.68.152':445
'22#.#54.224.185':445
'22#.#54.72.158':445
'22#.#54.84.74':445
'22#.#54.93.131':445
'22#.#54.25.196':445
'22#.#54.242.136':445
'22#.#54.247.51':445
'22#.#54.173.197':445
'22#.#54.174.233':445
'22#.#54.197.174':445
'22#.#54.55.3':445
'22#.#54.64.58':139
'22#.#54.231.192':139
'22#.#54.45.119':139
'22#.#54.170.49':139
'22#.#54.191.106':139
'22#.#54.221.80':139
'22#.#54.106.205':139
'22#.#54.114.107':139
'22#.#54.147.64':139
'22#.#54.192.220':139
'22#.#54.52.184':139
'22#.#54.226.182':445
'22#.#54.101.118':445
'22#.#54.110.234':445
'22#.#54.31.13':445
'22#.#54.63.156':445
'22#.#54.69.128':445
'22#.#54.227.69':139
'22#.#54.78.230':139
'22#.#54.105.179':139
'22#.#54.55.121':445
'22#.#54.97.69':139
'22#.#54.192.220':445
'22#.#54.116.119':139
'22#.#54.35.185':139
'22#.#54.189.138':139
'22#.#54.80.2':139
'22#.#54.121.229':139
'22#.#54.178.2':139
'22#.#54.87.155':139
'22#.#54.251.86':139
'22#.#54.154.165':139
'22#.#54.59.181':139
'22#.#54.165.188':139
'22#.#54.196.173':139
'22#.#54.14.151':139
'22#.#54.248.83':139
'22#.254.2.8':139
'22#.#54.167.147':139
'22#.#54.73.226':139
'22#.#54.123.196':139
'22#.#54.188.58':139
'22#.#54.104.79':139
'22#.#54.185.189':139
'22#.#54.37.58':139
'22#.#54.121.251':139
'22#.#54.49.215':139
'22#.#54.39.132':139
'22#.#54.214.220':139
'22#.#54.212.158':139
'22#.#54.249.138':139
'22#.#54.252.150':139
'22#.#54.57.8':139
'22#.#54.92.167':139
'22#.#54.172.159':139
'22#.#54.101.252':139
'22#.#54.170.219':139
'22#.#54.169.67':139
'22#.#54.166.41':139
'22#.#54.54.11':139
'22#.#54.33.122':139
'22#.#54.91.200':139
'22#.#54.90.36':139
'22#.#54.104.173':139
'22#.#54.68.176':139
'22#.#54.229.245':139
'22#.#54.133.191':139
'22#.#54.144.145':139
'22#.#54.53.157':139
'22#.#54.90.20':445
'22#.#54.106.131':445
'22#.#54.3.67':445
'22#.#54.146.233':445
'22#.#54.212.64':445
'22#.#54.3.117':445
'22#.#54.217.67':445
'22#.#54.72.116':445
'22#.#54.115.73':445
'22#.#54.190.202':445
'22#.#54.55.58':445
'22#.#54.114.107':445
'22#.#54.224.52':445
'22#.#54.106.205':445
'22#.#54.52.184':445
'22#.#54.147.64':445
'22#.#54.206.129':445
'22#.#54.168.48':445
'22#.#54.27.54':445
'22#.#54.47.218':445
'22#.#54.48.120':445
'22#.#54.52.222':445
'22#.#54.237.240':445
'22#.#54.50.203':445
'22#.#54.29.111':445
'22#.#54.123.28':445
'22#.#54.77.30':445
'22#.#54.51.70':445
'22#.#54.123.67':445
'22#.#54.65.188':139
'22#.#54.107.150':139
'22#.#54.191.78':139
'22#.#54.26.49':139
'22#.#54.150.62':139
'22#.#54.61.51':445
'22#.#54.223.155':445
'22#.#54.193.32':445
'22#.#54.165.206':445
'22#.#54.216.165':445
'22#.#54.50.11':445
'22#.#54.129.136':445
'22#.#54.119.134':445
'22#.#54.13.27':445
'22#.#54.98.187':445
'22#.#54.255.45':445
'22#.#54.168.34':445
'22#.#54.47.169':445
'22#.#54.71.54':445
'22#.#54.13.225':445
'22#.#54.90.153':445
'22#.#54.43.70':445
'22#.#54.32.107':445
'22#.#54.139.124':445
'22#.#54.94.77':445
'22#.#54.163.58':445
'22#.#54.72.13':445
'22#.#54.92.105':139
'22#.#54.17.171':139
'22#.#54.38.208':139
'22#.#54.64.190':139
'22#.#54.151.215':139
'22#.#54.162.197':445
'22#.#54.35.95':445
'22#.#54.34.84':445
'22#.#54.160.77':445
'22#.#54.15.14':445
'22#.#54.145.122':445
'22#.#54.39.243':445
'22#.#54.28.245':445
'22#.#54.42.196':445
'22#.#54.245.14':445
'22#.#54.242.11':445
'22#.#54.14.107':445
'22#.#54.119.170':445
'22#.#54.11.195':445
'22#.#54.91.66':445
'22#.#54.41.47':445
'22#.#54.206.157':445
'22#.#54.50.207':445
'22#.#54.178.34':445
'22#.#54.167.177':445
'22#.#54.209.93':445
'22#.#54.24.81':445
'22#.#54.208.54':445
'22#.#54.107.94':445
'22#.#54.103.35':445
'22#.#54.157.220':445
'22#.#54.50.28':445
'22#.#54.195.209':445
'22#.#54.9.175':445
'22#.#54.149.175':139
'22#.#54.94.77':139
'22#.#54.32.107':139
'22#.#54.72.13':139
'22#.#54.43.70':139
'22#.#54.163.58':139
'22#.#54.139.124':139
'22#.#54.209.93':139
'22#.#54.178.34':139
'22#.#54.208.54':139
'22#.#54.39.243':139
'22#.#54.24.81':139
'22#.#54.145.122':139
'22#.#54.160.77':139
'22#.#54.15.14':139
'22#.#54.35.95':139
'22#.#54.162.197':139
'22#.#54.34.84':139
'22#.#54.168.34':139
'22#.#54.47.169':139
'22#.#54.71.54':139
'22#.#54.13.225':139
'22#.#54.90.153':139
'22#.#54.167.177':139
'22#.#54.41.47':139
'22#.#54.11.195':139
'22#.#54.50.207':139
'22#.#54.119.170':139
'22#.#54.206.157':139
'22#.#54.91.66':139
'22#.#54.138.23':139
'22#.#54.83.99':139
'22#.#54.192.248':139
'22#.#54.163.15':139
'22#.#54.131.157':139
'22#.#54.50.28':139
'22#.#54.103.35':139
'22#.#54.9.175':139
'22#.#54.107.94':139
'22#.#54.195.209':139
'22#.#54.157.220':139
'22#.#54.28.245':139
'22#.#54.42.196':139
'22#.#54.245.14':139
'22#.#54.242.11':139
'22#.#54.14.107':139
'22#.#54.163.15':445
'22#.#54.18.100':139
'22#.#54.3.170':139
'22#.#54.250.211':139
'22#.#54.38.71':139
'22#.#54.211.38':139
'22#.#54.55.3':139
'22#.#54.101.118':139
'22#.#54.55.121':139
'22#.#54.110.234':139
'22#.#54.31.13':139
'22#.#54.63.156':139
'22#.#54.242.136':139
'22#.#54.247.51':139
'22#.#54.173.197':139
'22#.#54.174.233':139
'22#.#54.197.174':139
'22#.#54.13.227':139
'22#.#54.176.200':139
'22#.#54.145.95':139
'22#.#54.2.41':139
'22#.#54.69.14':139
'22#.#54.10.217':139
'22#.#54.226.182':139
'22#.#54.75.206':445
'22#.#54.113.0':445
'22#.#54.206.103':445
'22#.#54.44.150':445
'22#.#54.198.173':445
'22#.#54.135.19':445
'22#.#54.37.53':445
'22#.#54.152.219':445
'22#.#54.123.75':445
'22#.#54.120.93':445
'22#.#54.74.83':445
'22#.#54.48.229':445
'22#.#54.64.184':445
'22#.#54.159.111':445
'22#.#54.69.128':139
'22#.#54.249.64':445
'22#.#54.18.64':445
'22#.#54.21.1':445
'22#.#54.32.203':445
'22#.#54.227.147':445
'22#.#54.111.18':445
'22#.#54.183.77':445
'22#.#54.25.196':139
'22#.#54.42.196':9988
'22#.#54.41.47':9988
'22#.#54.107.94':9988
'22#.#54.178.34':9988
'22#.#54.39.243':9988
'22#.#54.138.23':9988
'22#.#54.159.111':139
'22#.#54.48.229':139
'22#.#54.249.64':139
'22#.#54.83.99':9988
'22#.#54.17.171':9988
'22#.#54.83.99':445
'22#.#54.149.175':445
'22#.#54.138.23':445
'22#.#54.131.157':445
'22#.#54.192.248':445
'22#.#54.64.190':445
'22#.#54.17.171':445
'22#.#54.242.11':9988
'22#.#54.92.105':445
'22#.#54.151.215':445
'22#.#54.38.208':445
'22#.#54.64.184':139
'22#.#54.123.75':139
'22#.#54.37.53':139
'22#.#54.74.83':139
'22#.#54.135.19':139
'22#.#54.120.93':139
'22#.#54.152.219':139
'22#.#54.68.152':139
'22#.#54.224.185':139
'22#.#54.72.158':139
'22#.#54.84.74':139
'22#.#54.93.131':139
'22#.#54.227.147':139
'22#.#54.21.1':139
'22#.#54.183.77':139
'22#.#54.18.64':139
'22#.#54.111.18':139
'22#.#54.32.203':139
'22#.#54.75.206':139
'22#.#54.113.0':139
'22#.#54.206.103':139
'22#.#54.44.150':139
'22#.#54.198.173':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней