Trojan.Starman.5769

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER0abe.dir00\svchost.exe.mdmp 16325836412032048

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER0abe.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#52.114.154':139
'22#.#52.208.206':139
'22#.#52.1.177':139
'22#.#52.45.20':139
'22#.#52.239.104':139
'22#.#52.217.36':139
'22#.#52.37.82':139
'22#.#52.218.101':139
'22#.#52.50.68':445
'22#.#52.115.115':445
'22#.#52.8.94':139
'22#.#52.190.19':139
'22#.#52.49.25':139
'22#.#52.178.97':139
'22#.#52.15.4':445
'22#.#52.233.5':445
'22#.#52.94.1':445
'22#.#52.16.245':445
'22#.#52.192.210':445
'22#.#52.153.208':445
'22#.#52.146.104':445
'22#.#52.100.86':139
'22#.#52.252.150':139
'22#.#52.169.40':139
'22#.#52.50.68':139
'22#.#52.115.115':139
'22#.#52.215.114':139
'22#.#52.118.159':139
'22#.#52.97.248':139
'22#.#52.59.41':139
'22#.#52.49.25':445
'22#.#52.218.101':445
'22#.#52.116.8':139
'22#.#52.72.39':139
'22#.#52.124.136':139
'22#.#52.59.213':139
'22#.#52.233.232':139
'22#.#52.28.166':139
'22#.#52.182.247':139
'22#.#52.210.60':139
'22#.#52.190.19':445
'22#.#52.169.40':445
'22#.#52.178.97':445
'22#.#52.45.20':445
'22#.#52.215.114':445
'22#.#52.100.86':445
'22#.#52.252.150':445
'22#.#52.239.104':445
'22#.#52.1.177':445
'22#.#52.37.82':445
'22#.#52.8.94':445
'22#.#52.217.36':445
'22#.#52.114.154':445
'22#.#52.208.206':445
'22#.#52.165.205':139
'22#.#52.26.25':139
'22#.#52.130.4':139
'22#.#52.82.174':139
'22#.#52.180.59':139
'22#.#52.168.139':139
'22#.#52.253.129':139
'22#.#52.15.4':139
'22#.#52.233.5':139
'22#.#52.94.1':139
'22#.#52.16.245':139
'22#.#52.192.210':139
'22#.#52.153.208':139
'22#.#52.3.120':139
'22#.#52.146.223':139
'22#.#52.121.146':139
'22#.#52.117.135':139
'22#.#52.245.14':139
'22#.#52.76.236':139
'22#.#52.223.248':139
'22#.#52.64.138':139
'22#.#52.71.1':139
'22#.#52.194.4':139
'22#.#52.177.91':139
'22#.#52.206.64':139
'22#.#52.249.205':139
'22#.#52.1.250':139
'22#.#52.194.4':445
'22#.#52.177.91':445
'22#.#52.3.120':445
'22#.#52.249.205':445
'22#.#52.1.250':445
'22#.#52.71.1':445
'22#.#52.82.174':445
'22#.#52.26.25':445
'22#.#52.130.4':445
'22#.#52.253.129':445
'22#.#52.180.59':445
'22#.#52.168.139':445
'22#.#52.165.205':445
'22#.#52.206.64':445
'22#.#52.237.233':445
'22#.#52.46.247':445
'22#.#52.212.100':445
'22#.#52.146.104':139
'22#.#52.5.135':445
'22#.#52.1.87':445
'22#.#52.245.14':445
'22#.#52.121.146':445
'22#.#52.117.135':445
'22#.#52.64.138':445
'22#.#52.76.236':445
'22#.#52.223.248':445
'22#.#52.146.223':445
'22#.#52.158.200':139
'22#.#52.151.134':139
'22#.#52.237.26':445
'22#.#52.200.49':445
'22#.#52.83.73':139
'22#.#52.9.43':139
'22#.#52.134.173':139
'22#.#52.58.122':445
'22#.#52.44.207':445
'22#.#52.212.44':445
'22#.#52.198.211':445
'22#.#52.10.231':445
'22#.#52.243.123':445
'22#.#52.206.243':445
'22#.#52.251.48':139
'22#.#52.10.231':139
'22#.#52.243.123':139
'22#.#52.206.243':139
'22#.#52.237.26':139
'22#.#52.200.49':139
'22#.#52.58.122':139
'22#.#52.44.207':139
'22#.#52.109.170':139
'22#.#52.244.152':139
'22#.#52.90.21':139
'22#.#52.212.44':139
'22#.#52.198.211':139
'22#.#52.78.250':139
'22#.#52.92.42':139
'22#.#52.233.91':139
'22#.#52.133.97':139
'22#.#52.248.92':139
'22#.#52.23.249':139
'22#.#52.37.33':139
'22#.#52.92.0':139
'22#.#52.95.5':139
'22#.#52.124.102':139
'22#.#52.122.111':139
'22#.#52.127.161':139
'22#.#52.14.76':139
'22#.#52.174.32':139
'22#.#52.106.253':139
'22#.#52.90.21':445
'22#.#52.251.48':445
'22#.#52.83.73':445
'22#.#52.78.250':445
'22#.#52.109.170':445
'22#.#52.244.152':445
'22#.#52.9.43':445
'22#.#52.111.52':139
'22#.#52.20.111':139
'22#.#52.141.149':139
'22#.#52.134.173':445
'22#.#52.151.134':445
'22#.#52.249.70':139
'22#.#52.209.80':139
'22#.#52.55.209':139
'22#.#52.86.122':139
'22#.#52.51.205':139
'22#.#52.126.141':139
'22#.#52.113.156':139
'22#.#52.158.250':139
'22#.#52.59.41':445
'22#.#52.72.39':445
'22#.#52.28.166':445
'22#.#52.116.8':445
'22#.#52.118.159':445
'22#.#52.97.248':445
'22#.#52.39.195':139
'22#.#52.43.241':139
'22#.#52.102.21':139
'22#.#52.130.194':139
'22#.#52.208.112':139
'22#.#52.107.156':139
'22#.#52.40.1':139
'22#.#52.254.158':139
'22#.#52.90.71':139
'22#.#52.173.11':139
'22#.#52.246.40':139
'22#.#52.24.245':139
'22#.#52.149.106':139
'22#.#52.16.34':139
'22#.#52.173.11':445
'22#.#52.246.40':445
'22#.#52.39.195':445
'22#.#52.149.106':445
'22#.#52.16.34':445
'22#.#52.90.71':445
'22#.#52.51.205':445
'22#.#52.55.209':445
'22#.#52.86.122':445
'22#.#52.158.250':445
'22#.#52.126.141':445
'22#.#52.113.156':445
'22#.#52.209.80':445
'22#.#52.24.245':445
'22#.#52.59.213':445
'22#.#52.233.232':445
'22#.#52.158.200':445
'22#.#52.182.247':445
'22#.#52.210.60':445
'22#.#52.124.136':445
'22#.#52.208.112':445
'22#.#52.102.21':445
'22#.#52.130.194':445
'22#.#52.254.158':445
'22#.#52.40.1':445
'22#.#52.107.156':445
'22#.#52.43.241':445
'22#.#52.212.100':139
'22#.#52.26.151':445
'22#.#52.64.117':445
'22#.#52.52.15':445
'22#.#52.59.69':445
'22#.#52.114.241':445
'22#.#52.232.45':445
'22#.#52.95.86':445
'22#.#52.227.180':445
'22#.#52.160.243':445
'22#.#52.22.101':445
'22#.#52.105.84':445
'22#.#52.7.192':445
'22#.#52.232.7':445
'22#.#52.68.234':445
'22#.#52.5.19':445
'22#.#52.76.138':445
'22#.#52.251.172':445
'22#.#52.217.96':445
'22#.#52.2.217':445
'22#.#52.136.227':445
'22#.#52.251.134':445
'22#.#52.121.95':445
'22#.#52.183.35':445
'22#.#52.230.134':445
'22#.#52.130.192':445
'22#.#52.79.232':445
'22#.#52.26.23':445
'22#.#52.110.129':445
'22#.#52.207.162':445
'22#.#52.219.205':445
'22#.#52.186.150':445
'22#.#52.87.186':445
'22#.#52.156.250':445
'22#.#52.165.228':445
'22#.#52.230.134':9988
'22#.#52.68.234':9988
'22#.#52.59.69':9988
'22#.#52.136.227':9988
'22#.#52.56.254':9988
'22#.#52.5.19':9988
'22#.#52.48.13':445
'22#.#52.48.204':445
'22#.#52.193.24':445
'22#.#52.1.193':445
'22#.#52.79.189':445
'22#.#52.216.182':445
'22#.#52.196.191':445
'22#.#52.247.63':445
'22#.#52.158.224':445
'22#.#52.33.133':445
'22#.#52.167.91':445
'22#.#52.243.208':445
'22#.#52.117.244':445
'22#.#52.52.192':445
'22#.#52.59.69':139
'22#.#52.232.45':139
'22#.#52.114.241':139
'22#.#52.183.35':139
'22#.#52.230.134':139
'22#.#52.68.234':139
'22#.#52.26.151':139
'22#.#52.105.84':139
'22#.#52.7.192':139
'22#.#52.232.7':139
'22#.#52.64.117':139
'22#.#52.95.86':139
'22#.#52.52.15':139
'22#.#52.121.95':139
'22#.#52.121.191':139
'22#.#52.130.192':139
'22#.#52.251.134':139
'22#.#52.5.19':139
'22#.#52.192.142':139
'22#.#52.76.138':139
'22#.#52.2.217':139
'22#.#52.251.172':139
'22#.#52.79.232':139
'22#.#52.26.23':139
'22#.#52.56.254':139
'22#.#52.217.96':139
'22#.#52.136.227':139
'22#.#52.186.150':139
'22#.#52.87.186':139
'22#.#52.156.250':139
'22#.#52.33.133':139
'22#.#52.167.91':139
'22#.#52.48.13':139
'22#.#52.110.129':139
'22#.#52.56.254':445
'22#.#52.121.191':445
'22#.#52.192.142':445
'22#.#52.207.162':139
'22#.#52.219.205':139
'22#.#52.165.228':139
'22#.#52.52.192':139
'22#.#52.79.189':139
'22#.#52.216.182':139
'22#.#52.196.191':139
'22#.#52.227.180':139
'22#.#52.160.243':139
'22#.#52.22.101':139
'22#.#52.48.204':139
'22#.#52.243.208':139
'22#.#52.117.244':139
'22#.#52.158.224':139
'22#.#52.193.24':139
'22#.#52.1.193':139
'22#.#52.247.63':139
'22#.#52.64.117':9988
'22#.#52.148.34':139
'22#.#52.43.11':139
'22#.#52.135.42':139
'22#.#52.130.22':139
'22#.#52.141.250':139
'22#.#52.37.142':139
'22#.#52.252.226':139
'22#.#52.245.61':139
'22#.#52.66.245':139
'22#.#52.31.67':139
'22#.#52.225.112':139
'22#.#52.134.55':139
'22#.#52.73.106':139
'22#.#52.81.212':445
'22#.#52.93.198':445
'22#.#52.210.93':445
'22#.#52.39.210':445
'22#.#52.58.35':445
'22#.#52.158.58':445
'22#.#52.156.161':445
'22#.#52.6.67':445
'22#.#52.87.45':445
'22#.#52.186.211':445
'22#.#52.177.42':445
'22#.#52.65.150':445
'22#.#52.31.147':445
'22#.#52.27.160':445
'22#.#52.31.67':445
'22#.#52.255.31':445
'22#.#52.51.167':445
'22#.#52.73.106':445
'22#.#52.245.61':445
'22#.#52.66.245':445
'22#.#52.71.202':445
'22#.#52.1.87':139
'22#.#52.237.233':139
'22#.#52.46.247':139
'22#.#52.27.231':445
'22#.#52.213.241':445
'22#.#52.5.135':139
'22#.#52.134.55':445
'22#.#52.27.231':139
'22#.#52.213.241':139
'22#.#52.130.22':445
'22#.#52.255.31':139
'22#.#52.51.167':139
'22#.#52.71.202':139
'22#.#52.141.250':445
'22#.#52.135.42':445
'22#.#52.252.226':445
'22#.#52.225.112':445
'22#.#52.37.142':445
'22#.#52.148.34':445
'22#.#52.43.11':445
'22#.#52.231.121':139
'22#.#52.155.231':139
'22#.#52.99.42':139
'22#.#52.27.91':139
'22#.#52.176.26':139
'22#.#52.121.175':139
'22#.#52.35.145':139
'22#.#52.93.198':139
'22#.#52.210.93':139
'22#.#52.39.210':139
'22#.#52.58.35':139
'22#.#52.158.58':139
'22#.#52.156.161':139
'22#.#52.186.187':139
'22#.#52.181.46':139
'22#.#52.78.127':139
'22#.#52.122.217':139
'22#.#52.95.86':9988
'22#.#52.7.192':9988
'22#.#52.121.132':139
'22#.#52.80.122':139
'22#.#52.1.44':139
'22#.#52.72.244':139
'22#.#52.119.0':139
'22#.#52.220.80':139
'22#.#52.238.220':139
'22#.#52.198.79':139
'22#.#52.72.244':445
'22#.#52.119.0':445
'22#.#52.186.187':445
'22#.#52.238.220':445
'22#.#52.198.79':445
'22#.#52.1.44':445
'22#.#52.27.91':445
'22#.#52.155.231':445
'22#.#52.99.42':445
'22#.#52.35.145':445
'22#.#52.176.26':445
'22#.#52.121.175':445
'22#.#52.231.121':445
'22#.#52.220.80':445
'22#.#52.27.160':139
'22#.#52.87.45':139
'22#.#52.186.211':139
'22#.#52.6.67':139
'22#.#52.65.150':139
'22#.#52.31.147':139
'22#.#52.177.42':139
'22#.#52.78.127':445
'22#.#52.122.217':445
'22#.#52.80.122':445
'22#.#52.81.212':139
'22#.#52.121.132':445
'22#.#52.181.46':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней