Trojan.Starman.5919

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER5392.dir00\svchost.exe.mdmp 16325836412032312

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5392.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#2.56.208':445
'22#.#2.146.247':445
'22#.#2.71.239':445
'22#.#2.207.115':445
'22#.#2.163.88':139
'22#.#2.202.104':445
'22#.#2.7.178':139
'22#.#2.202.104':139
'22#.#2.163.88':445
'22#.#2.239.28':445
'22#.#2.211.198':445
'22#.#2.75.86':445
'22#.#2.154.146':445
'22#.#2.105.254':445
'22#.#2.8.195':445
'22#.#2.205.36':445
'22#.#2.71.93':445
'22#.52.43.9':445
'22#.#2.63.35':445
'22#.#2.80.248':139
'22#.52.9.65':139
'22#.#2.90.151':139
'22#.#2.40.103':139
'22#.#2.54.140':139
'22#.#2.168.184':139
'22#.#2.103.130':139
'22#.#2.133.211':139
'22#.#2.174.103':139
'22#.#2.151.174':139
'22#.#2.173.241':139
'22#.#2.77.248':139
'22#.#2.110.215':139
'22#.#2.252.192':139
'22#.#2.232.128':139
'22#.#2.243.171':139
'22#.#2.171.62':139
'22#.#2.112.171':139
'22#.#2.17.166':139
'22#.#2.94.15':139
'22#.#2.46.36':445
'22#.#2.7.103':445
'22#.#2.143.245':445
'22#.#2.41.123':445
'22#.#2.8.219':445
'22#.52.9.6':445
'22#.#2.81.159':445
'22#.#2.220.4':445
'22#.#2.20.212':445
'22#.#2.159.20':445
'22#.#2.43.91':445
'22#.#2.207.115':139
'22#.#2.56.208':139
'22#.#2.239.28':139
'22#.#2.71.239':139
'22#.#2.146.247':139
'22#.#2.145.237':445
'22#.#2.153.39':445
'22#.#2.126.107':445
'22#.#2.16.220':445
'22#.#2.111.171':445
'22#.#2.28.21':445
'22#.#2.227.12':445
'22#.#2.90.175':445
'22#.52.37.1':445
'22#.#2.159.104':445
'22#.#2.224.247':445
'22#.#2.75.115':445
'22#.#2.145.14':445
'22#.#2.120.91':445
'22#.#2.67.50':445
'22#.#2.127.66':445
'22#.#2.227.139':445
'22#.#2.161.247':445
'22#.52.5.5':445
'22#.#2.74.78':445
'22#.#2.9.206':445
'22#.#2.221.58':445
'22#.#2.179.117':445
'22#.#2.182.115':445
'22#.#2.163.80':445
'22#.#2.73.69':445
'22#.#2.39.161':445
'22#.#2.12.91':445
'22#.#2.152.219':445
'22#.#2.13.34':445
'22#.#2.31.31':445
'22#.#2.207.227':445
'22#.#2.130.0':445
'22#.#2.87.148':445
'22#.52.9.65':445
'22#.#2.90.151':445
'22#.#2.40.103':445
'22#.#2.54.140':445
'22#.#2.168.184':445
'22#.#2.103.130':445
'22#.#2.133.211':445
'22#.#2.174.103':445
'22#.#2.151.174':445
'22#.#2.49.65':445
'22#.#2.125.168':445
'22#.#2.243.124':445
'22#.#2.128.61':445
'22#.#2.150.151':445
'22#.52.9.30':445
'22#.#2.2.155':139
'22#.#2.65.114':139
'22#.#2.215.23':445
'22#.#2.18.245':445
'22#.#2.96.168':445
'22#.#2.48.183':445
'22#.#2.72.63':445
'22#.#2.39.106':445
'22#.#2.183.38':445
'22#.#2.131.97':445
'22#.#2.194.117':445
'22#.#2.181.246':445
'22#.#2.172.62':445
'22#.#2.118.36':445
'22#.#2.173.241':445
'22#.#2.183.38':139
'22#.#2.48.183':139
'22#.#2.49.65':139
'22#.#2.39.106':139
'22#.#2.72.63':139
'22#.#2.118.36':139
'22#.#2.194.117':139
'22#.#2.131.97':139
'22#.#2.172.62':139
'22#.#2.31.31':139
'22#.#2.12.91':139
'22#.#2.163.80':139
'22#.#2.87.148':139
'22#.#2.39.161':139
'22#.#2.73.69':139
'22#.#2.130.0':139
'22#.#2.13.34':139
'22#.#2.152.219':139
'22#.#2.207.227':139
'22#.#2.181.246':139
'22#.#2.77.248':445
'22#.#2.110.215':445
'22#.#2.252.192':445
'22#.#2.232.128':445
'22#.#2.243.171':445
'22#.#2.171.62':445
'22#.#2.112.171':445
'22#.#2.17.166':445
'22#.#2.94.15':445
'22#.#2.80.248':445
'22#.#2.150.151':139
'22#.#2.125.168':139
'22#.#2.96.168':139
'22#.#2.128.61':139
'22#.#2.243.124':139
'22#.#2.18.245':139
'22#.#2.7.178':445
'22#.52.9.30':139
'22#.#2.215.23':139
'22#.#2.0.208':445
'22#.#2.129.228':445
'22#.#2.5.236':139
'22#.#2.143.18':445
'22#.#2.100.175':445
'22#.#2.62.112':445
'22#.#2.46.83':445
'22#.#2.176.45':445
'22#.#2.133.170':445
'22#.#2.102.242':139
'22#.#2.141.34':139
'22#.#2.152.224':139
'22#.#2.172.160':139
'22#.#2.28.86':139
'22#.#2.188.152':139
'22#.#2.155.73':139
'22#.#2.229.46':139
'22#.#2.59.189':139
'22#.#2.214.253':139
'22#.#2.111.127':445
'22#.#2.38.134':445
'22#.#2.193.67':445
'22#.#2.11.64':445
'22#.#2.47.157':445
'22#.#2.109.219':445
'22#.#2.185.96':445
'22#.#2.204.168':445
'22#.#2.40.151':445
'22#.#2.223.187':445
'22#.#2.152.58':445
'22#.#2.148.181':445
'22#.#2.152.37':445
'22#.#2.67.248':445
'22#.#2.87.205':445
'22#.#2.137.83':445
'22#.#2.92.38':445
'22#.#2.17.158':445
'22#.#2.101.18':445
'22#.#2.91.26':445
'22#.#2.27.38':139
'22#.#2.152.37':139
'22#.#2.137.83':139
'22#.#2.87.205':139
'22#.#2.148.181':139
'22#.#2.101.18':139
'22#.#2.17.158':139
'22#.#2.152.58':139
'22#.#2.91.26':139
'22#.#2.92.38':139
'22#.#2.67.248':139
'22#.#2.143.18':139
'22#.#2.0.208':139
'22#.#2.129.228':139
'22#.#2.176.45':139
'22#.#2.100.175':139
'22#.#2.46.83':139
'22#.#2.111.127':139
'22#.#2.133.170':139
'22#.#2.62.112':139
'22#.#2.11.64':139
'22#.#2.33.37':139
'22#.#2.77.129':139
'22#.#2.130.245':139
'22#.#2.167.131':139
'22#.#2.68.165':139
'22#.#2.253.213':139
'22#.#2.209.116':139
'22#.#2.167.187':139
'22#.#2.214.76':139
'22#.#2.234.116':139
'22#.#2.193.67':139
'22#.#2.109.219':139
'22#.#2.47.157':139
'22#.#2.38.134':139
'22#.#2.40.151':139
'22#.#2.204.168':139
'22#.#2.40.205':139
'22#.#2.223.187':139
'22#.#2.185.96':139
'22#.#2.127.66':139
'22#.#2.227.139':139
'22#.#2.161.247':139
'22#.52.5.5':139
'22#.#2.74.78':139
'22#.#2.9.206':139
'22#.#2.221.58':139
'22#.#2.179.117':139
'22#.#2.182.115':139
'22#.#2.111.171':139
'22#.#2.7.103':139
'22#.#2.143.245':139
'22#.#2.41.123':139
'22#.#2.8.219':139
'22#.52.9.6':139
'22#.#2.81.159':139
'22#.#2.220.4':139
'22#.#2.20.212':139
'22#.#2.159.20':139
'22#.#2.67.50':139
'22#.#2.211.198':139
'22#.#2.75.86':139
'22#.#2.154.146':139
'22#.#2.105.254':139
'22#.#2.8.195':139
'22#.#2.205.36':139
'22#.#2.71.93':139
'22#.52.43.9':139
'22#.#2.63.35':139
'22#.#2.46.36':139
'22#.#2.28.21':139
'22#.#2.227.12':139
'22#.#2.90.175':139
'22#.52.37.1':139
'22#.#2.159.104':139
'22#.#2.224.247':139
'22#.#2.75.115':139
'22#.#2.145.14':139
'22#.#2.120.91':139
'22#.#2.43.91':139
'22#.#2.172.160':445
'22#.#2.28.86':445
'22#.#2.209.116':445
'22#.#2.27.38':445
'22#.#2.141.34':445
'22#.#2.59.189':445
'22#.#2.214.253':445
'22#.#2.152.224':445
'22#.#2.188.152':445
'22#.#2.253.213':445
'22#.#2.130.245':445
'22#.#2.167.131':445
'22#.#2.40.205':445
'22#.#2.234.116':445
'22#.#2.33.37':445
'22#.#2.167.187':445
'22#.#2.214.76':445
'22#.#2.77.129':445
'22#.#2.68.165':445
'22#.#2.155.73':445
'22#.#2.152.58':9988
'22#.#2.40.151':9988
'22#.#2.38.134':9988
'22#.#2.193.67':9988
'22#.#2.40.205':9988
'22#.#2.145.237':139
'22#.#2.153.39':139
'22#.#2.126.107':139
'22#.#2.16.220':139
'22#.#2.137.83':9988
'22#.#2.5.236':445
'22#.#2.148.181':9988
'22#.#2.229.46':445
'22#.#2.102.242':445
'22#.#2.129.228':9988
'22#.#2.87.205':9988
'22#.#2.152.37':9988
'22#.#2.67.248':9988
'22#.#2.143.18':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней