Trojan.Starman.5767

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER3833.dir00\svchost.exe.mdmp 16325836412032140

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3833.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#77.138.150':139
'22#.#77.132.107':139
'22#.#77.107.66':139
'22#.#77.59.187':139
'22#.#77.36.222':139
'22#.#77.72.145':139
'22#.#77.34.24':139
'22#.#77.145.187':139
'22#.#77.218.93':139
'22#.#77.187.218':139
'22#.#77.186.71':139
'22#.#77.125.176':445
'22#.#77.229.138':445
'22#.#77.128.175':445
'22#.#77.25.171':445
'22#.#77.174.133':445
'22#.#77.84.11':139
'22#.#77.18.44':139
'22#.#77.229.66':139
'22#.#77.96.1':445
'22#.#77.22.224':139
'22#.#77.218.93':445
'22#.#77.187.218':445
'22#.#77.132.107':445
'22#.#77.107.66':445
'22#.#77.138.150':445
'22#.#77.69.115':445
'22#.#77.239.68':445
'22#.#77.34.24':445
'22#.#77.145.187':445
'22#.#77.72.145':445
'22#.#77.36.222':445
'22#.#77.36.28':139
'22#.#77.22.224':445
'22#.#77.45.121':139
'22#.#77.69.115':139
'22#.#77.239.68':139
'22#.#77.186.71':445
'22#.#77.59.187':445
'22#.#77.18.44':445
'22#.#77.229.66':445
'22#.#77.84.11':445
'22#.#77.11.41':445
'22#.#77.125.176':139
'22#.#77.229.138':139
'22#.#77.128.175':139
'22#.#77.25.171':139
'22#.#77.174.133':139
'22#.#77.141.65':445
'22#.#77.0.141':445
'22#.#77.66.13':445
'22#.#77.96.1':139
'22#.#77.13.101':445
'22#.#77.11.41':139
'22#.#77.90.249':139
'22#.#77.217.217':139
'22#.#77.14.20':139
'22#.#77.79.238':139
'22#.#77.170.18':139
'22#.#77.245.74':139
'22#.#77.60.83':139
'22#.#77.74.231':139
'22#.#77.66.157':139
'22#.#77.231.93':139
'22#.#77.90.249':445
'22#.#77.217.217':445
'22#.#77.14.20':445
'22#.#77.79.238':445
'22#.#77.170.18':445
'22#.#77.245.74':445
'22#.#77.60.83':445
'22#.#77.74.231':445
'22#.#77.66.157':445
'22#.#77.231.93':445
'22#.#77.101.246':445
'22#.#77.174.159':445
'22#.#77.200.162':445
'22#.#77.218.150':445
'22#.#77.183.0':445
'22#.#77.186.24':445
'22#.#77.125.124':445
'22#.#77.136.125':445
'22#.#77.193.78':445
'22#.#77.64.76':445
'22#.#77.39.122':445
'22#.#77.158.158':445
'22#.#77.178.232':445
'22#.#77.114.107':445
'22#.#77.150.70':445
'22#.#77.249.73':445
'22#.#77.126.7':445
'22#.#77.152.125':445
'22#.#77.86.69':445
'22#.#77.103.74':445
'22#.#77.166.94':445
'22#.#77.197.160':445
'22#.#77.116.133':445
'22#.#77.26.117':445
'22#.#77.91.209':445
'22#.#77.53.21':445
'22#.#77.124.53':445
'22#.#77.235.205':445
'22#.#77.23.181':445
'22#.#77.124.134':445
'22#.#77.125.186':445
'22#.#77.234.204':445
'22#.#77.199.122':139
'22#.#77.41.101':139
'22#.#77.4.235':139
'22#.#77.197.10':139
'22#.#77.107.163':139
'22#.#77.97.76':139
'22#.#77.157.97':139
'22#.#77.120.28':139
'22#.#77.62.41':139
'22#.#77.110.47':139
'22#.#77.239.66':139
'22#.#77.123.13':139
'22#.#77.61.42':139
'22#.#77.12.175':139
'22#.#77.52.152':445
'22#.#77.77.210':445
'22#.#77.106.227':139
'22#.#77.42.121':139
'22#.#77.195.220':139
'22#.#77.207.60':139
'22#.#77.203.206':139
'22#.#77.104.146':445
'22#.#77.116.133':139
'22#.#77.26.117':139
'22#.#77.91.209':139
'22#.#77.53.21':139
'22#.#77.124.53':139
'22#.#77.235.205':139
'22#.#77.23.181':139
'22#.#77.124.134':139
'22#.#77.125.186':139
'22#.#77.234.204':139
'22#.#77.104.146':139
'22#.#77.49.149':139
'22#.#77.69.91':139
'22#.#77.95.240':139
'22#.#77.45.121':445
'22#.#77.36.28':445
'22#.#77.54.3':139
'22#.#77.208.96':139
'22#.#77.3.192':139
'22#.#77.27.88':139
'22#.#77.198.121':139
'22#.#77.49.149':445
'22#.#77.69.91':445
'22#.#77.95.240':445
'22#.#77.52.152':139
'22#.#77.77.210':139
'22#.#77.54.3':445
'22#.#77.208.96':445
'22#.#77.3.192':445
'22#.#77.27.88':445
'22#.#77.198.121':445
'22#.#77.152.125':139
'22#.#77.114.107':139
'22#.#77.158.158':139
'22#.#77.249.73':139
'22#.#77.197.160':139
'22#.#77.150.70':139
'22#.#77.86.69':139
'22#.#77.126.7':139
'22#.#77.166.94':139
'22#.#77.178.232':139
'22#.#77.103.74':139
'22#.#77.101.246':139
'22#.#77.19.54':445
'22#.#77.217.226':445
'22#.#77.156.99':445
'22#.#77.128.234':445
'22#.#77.115.124':445
'22#.#77.49.175':445
'22#.#77.181.160':445
'22#.#77.34.187':445
'22#.#77.42.141':445
'22#.#77.78.108':445
'22#.#77.48.24':445
'22#.#77.201.250':139
'22#.#77.160.209':139
'22#.#77.175.203':139
'22#.#77.202.119':139
'22#.#77.229.91':139
'22#.#77.66.158':445
'22#.#77.233.173':445
'22#.#77.65.0':139
'22#.#77.131.227':139
'22#.#77.178.36':139
'22#.#77.201.162':445
'22#.#77.23.226':445
'22#.#77.196.212':445
'22#.#77.141.38':445
'22#.#77.167.125':445
'22#.#77.137.254':445
'22#.#77.116.239':445
'22#.#77.9.251':445
'22#.#77.57.185':445
'22#.#77.71.242':445
'22#.#77.220.139':445
'22#.#77.6.206':445
'22#.#77.71.154':445
'22#.#77.229.151':445
'22#.#77.150.181':445
'22#.#77.175.238':445
'22#.#77.37.18':445
'22#.#77.139.36':445
'22#.#77.174.229':445
'22#.#77.223.71':445
'22#.#77.93.42':445
'22#.#77.166.126':139
'22#.#77.175.238':139
'22#.#77.229.151':139
'22#.#77.150.181':139
'22#.#77.49.175':139
'22#.#77.181.160':139
'22#.#77.93.42':139
'22#.#77.174.229':139
'22#.#77.223.71':139
'22#.#77.6.206':139
'22#.#77.71.154':139
'22#.#77.34.187':139
'22#.#77.128.234':139
'22#.#77.115.124':139
'22#.#77.66.158':139
'22#.#77.48.24':139
'22#.#77.233.173':139
'22#.#77.42.141':139
'22#.#77.78.108':139
'22#.#77.217.226':139
'22#.#77.156.99':139
'22#.#77.19.54':139
'22#.#77.105.222':139
'22#.#77.184.208':139
'22#.#77.204.6':139
'22#.#77.137.254':139
'22#.#77.116.239':139
'22#.#77.8.147':139
'22#.#77.44.6':139
'22#.#77.114.45':139
'22#.#77.64.123':139
'22#.#77.208.33':139
'22#.#77.9.251':139
'22#.#77.141.38':139
'22#.#77.167.125':139
'22#.#77.220.139':139
'22#.#77.37.18':139
'22#.#77.139.36':139
'22#.#77.57.185':139
'22#.#77.71.242':139
'22#.#77.23.226':139
'22#.#77.196.212':139
'22#.#77.201.162':139
'22#.#77.180.70':445
'22#.#77.28.90':445
'22#.#77.214.157':445
'22#.#77.76.137':445
'22#.#77.254.131':445
'22#.#77.60.121':445
'22#.#77.64.163':445
'22#.#77.193.150':445
'22#.#77.217.28':445
'22#.#77.14.119':445
'22#.#77.23.1':445
'22#.#77.147.120':139
'22#.#77.18.92':139
'22#.#77.62.54':139
'22#.#77.60.121':139
'22#.#77.64.163':139
'22#.#77.89.178':139
'22#.#77.35.25':445
'22#.#77.204.109':139
'22#.#77.146.151':139
'22#.#77.172.239':139
'22#.#77.174.159':139
'22#.#77.200.162':139
'22#.#77.218.150':139
'22#.#77.183.0':139
'22#.#77.186.24':139
'22#.#77.125.124':139
'22#.#77.136.125':139
'22#.#77.193.78':139
'22#.#77.64.76':139
'22#.#77.39.122':139
'22#.#77.0.141':139
'22#.#77.146.151':445
'22#.#77.172.239':445
'22#.#77.18.92':445
'22#.#77.62.54':445
'22#.#77.147.120':445
'22#.#77.66.13':139
'22#.#77.141.65':139
'22#.#77.13.101':139
'22#.#77.204.109':445
'22#.#77.89.178':445
'22#.#77.193.150':139
'22#.#77.131.227':445
'22#.#77.178.36':445
'22#.#77.160.209':445
'22#.#77.175.203':445
'22#.#77.201.250':445
'22#.#77.128.234':9988
'22#.#77.115.124':9988
'22#.#77.48.24':9988
'22#.#77.65.0':445
'22#.#77.233.173':9988
'22#.#77.229.91':445
'22#.#77.64.123':445
'22#.#77.208.33':445
'22#.#77.184.208':445
'22#.#77.204.6':445
'22#.#77.105.222':445
'22#.#77.166.126':445
'22#.#77.202.119':445
'22#.#77.44.6':445
'22#.#77.114.45':445
'22#.#77.8.147':445
'22#.#77.76.137':139
'22#.#77.254.131':139
'22#.#77.23.1':139
'22#.#77.220.139':9988
'22#.#77.35.25':139
'22#.#77.217.28':139
'22#.#77.14.119':139
'22#.#77.28.90':139
'22#.#77.214.157':139
'22#.#77.180.70':139
'22#.#77.37.18':9988
'22#.#77.181.160':9988
'22#.#77.150.181':9988
'22#.#77.42.141':9988
'22#.#77.156.99':9988
'22#.#77.19.54':9988
'22#.#77.93.42':9988
'22#.#77.174.229':9988
'22#.#77.6.206':9988
'22#.#77.175.238':9988
'22#.#77.229.151':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней