Trojan.Starman.5711

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER27aa.dir00\svchost.exe.mdmp 16325836412032196

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER27aa.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#88.45.52':139
'22#.#88.4.214':139
'22#.#88.73.57':139
'22#.#88.65.222':139
'22#.#88.43.65':139
'22#.#88.13.114':139
'22#.#88.129.53':139
'22#.#88.100.75':139
'22#.#88.181.245':139
'22#.#88.81.98':139
'22#.#88.195.88':139
'22#.#88.186.249':139
'22#.#88.193.134':139
'22#.#88.170.103':139
'22#.#88.216.27':139
'22#.#88.50.203':139
'22#.#88.221.231':139
'22#.#88.98.124':139
'22#.#88.93.202':139
'22#.#88.69.41':139
'22#.#88.1.64':139
'22#.#88.221.231':445
'22#.#88.65.222':445
'22#.#88.50.203':445
'22#.#88.69.41':445
'22#.#88.98.124':445
'22#.#88.4.214':445
'22#.#88.181.245':445
'22#.#88.45.52':445
'22#.#88.43.65':445
'22#.#88.73.57':445
'22#.#88.155.94':445
'22#.#88.170.103':445
'22#.#88.138.72':445
'22#.#88.0.84':139
'22#.#88.73.119':445
'22#.#88.186.249':445
'22#.#88.93.202':445
'22#.#88.195.88':445
'22#.#88.216.27':445
'22#.#88.193.134':445
'22#.#88.155.94':139
'22#.#88.131.206':445
'22#.#88.139.122':445
'22#.#88.251.50':139
'22#.#88.5.233':139
'22#.#88.178.106':139
'22#.#88.65.224':445
'22#.#88.190.195':445
'22#.#88.45.105':445
'22#.#88.44.60':445
'22#.#88.41.54':445
'22#.#88.3.169':139
'22#.#88.79.222':139
'22#.#88.169.65':139
'22#.#88.83.246':139
'22#.#88.83.6':139
'22#.#88.221.240':139
'22#.#88.66.244':139
'22#.#88.239.72':139
'22#.#88.208.49':139
'22#.#88.167.175':139
'22#.#88.230.185':445
'22#.#88.221.240':445
'22#.#88.66.244':445
'22#.#88.239.72':445
'22#.#88.208.49':445
'22#.#88.167.175':445
'22#.#88.73.119':139
'22#.#88.138.72':139
'22#.#88.251.50':445
'22#.#88.5.233':445
'22#.#88.178.106':445
'22#.#88.84.124':445
'22#.#88.8.17':445
'22#.#88.124.233':445
'22#.#88.17.20':445
'22#.#88.234.59':445
'22#.#88.3.169':445
'22#.#88.79.222':445
'22#.#88.169.65':445
'22#.#88.83.246':445
'22#.#88.83.6':445
'22#.#88.16.207':445
'22#.#88.42.70':445
'22#.#88.48.12':445
'22#.#88.70.144':445
'22#.#88.12.70':445
'22#.#88.207.81':139
'22#.#88.204.86':139
'22#.#88.187.116':139
'22#.#88.246.121':445
'22#.#88.213.245':139
'22#.#88.182.43':445
'22#.#88.136.73':445
'22#.#88.43.52':445
'22#.#88.137.30':445
'22#.#88.66.41':445
'22#.#88.87.244':445
'22#.#88.144.226':445
'22#.#88.244.81':445
'22#.#88.108.5':445
'22#.#88.9.235':445
'22#.#88.162.112':139
'22#.#88.251.120':139
'22#.#88.189.251':139
'22#.#88.136.196':139
'22#.#88.68.110':139
'22#.#88.109.70':139
'22#.#88.117.17':139
'22#.#88.6.117':139
'22#.#88.97.215':139
'22#.188.3.6':139
'22#.#88.25.243':139
'22#.#88.136.112':139
'22#.#88.252.60':139
'22#.#88.112.109':139
'22#.#88.14.74':139
'22#.#88.166.30':139
'22#.#88.32.132':139
'22#.#88.89.182':139
'22#.#88.44.204':139
'22#.#88.229.52':139
'22#.#88.25.133':139
'22#.#88.5.185':445
'22#.#88.225.248':139
'22#.#88.204.35':139
'22#.#88.1.90':139
'22#.#88.82.110':139
'22#.#88.89.1':139
'22#.#88.43.52':139
'22#.#88.182.43':139
'22#.#88.66.41':139
'22#.#88.5.185':139
'22#.#88.137.30':139
'22#.#88.129.53':445
'22#.#88.1.64':445
'22#.#88.13.114':445
'22#.#88.81.98':445
'22#.#88.100.75':445
'22#.#88.178.119':139
'22#.#88.83.47':139
'22#.#88.60.217':139
'22#.#88.0.84':445
'22#.#88.73.66':139
'22#.#88.136.73':139
'22#.#88.178.119':445
'22#.#88.83.47':445
'22#.#88.60.217':445
'22#.#88.246.121':139
'22#.#88.73.66':445
'22#.#88.225.248':445
'22#.#88.204.35':445
'22#.#88.1.90':445
'22#.#88.82.110':445
'22#.#88.89.1':445
'22#.#88.87.244':139
'22#.#88.144.226':139
'22#.#88.244.81':139
'22#.#88.108.5':139
'22#.#88.9.235':139
'22#.#88.16.207':139
'22#.#88.42.70':139
'22#.#88.48.12':139
'22#.#88.70.144':139
'22#.#88.12.70':139
'22#.#88.33.205':445
'22#.#88.205.162':445
'22#.#88.47.126':445
'22#.#88.22.52':445
'22#.#88.162.171':445
'22#.#88.133.60':445
'22#.#88.100.71':445
'22#.#88.56.223':445
'22#.#88.144.24':445
'22#.#88.102.208':445
'22#.#88.67.154':139
'22#.#88.173.67':139
'22#.#88.120.70':139
'22#.#88.59.199':139
'22#.#88.11.169':139
'22#.#88.107.163':139
'22#.#88.154.93':445
'22#.#88.130.162':139
'22#.#88.116.214':139
'22#.#88.195.191':139
'22#.#88.119.45':445
'22#.#88.183.237':445
'22#.#88.22.35':445
'22#.#88.238.22':445
'22#.#88.171.73':445
'22#.#88.28.176':445
'22#.#88.6.238':445
'22#.#88.246.209':445
'22#.#88.94.211':445
'22#.#88.149.73':445
'22#.#88.211.149':445
'22#.#88.73.228':445
'22#.#88.218.48':445
'22#.#88.152.106':445
'22#.#88.139.118':445
'22#.#88.66.139':445
'22#.#88.49.69':445
'22#.#88.108.180':445
'22#.#88.62.250':445
'22#.#88.36.218':445
'22#.#88.119.165':445
'22#.#88.83.106':139
'22#.#88.66.139':139
'22#.#88.152.106':139
'22#.#88.139.118':139
'22#.#88.100.71':139
'22#.#88.119.45':139
'22#.#88.119.165':139
'22#.#88.62.250':139
'22#.#88.36.218':139
'22#.#88.73.228':139
'22#.#88.218.48':139
'22#.#88.47.126':139
'22#.#88.33.205':139
'22#.#88.162.171':139
'22#.#88.154.93':139
'22#.#88.22.52':139
'22#.#88.56.223':139
'22#.#88.133.60':139
'22#.#88.102.208':139
'22#.#88.205.162':139
'22#.#88.144.24':139
'22#.#88.49.69':139
'22#.#88.55.150':139
'22#.#88.134.38':139
'22#.#88.159.50':139
'22#.#88.246.209':139
'22#.#88.159.246':139
'22#.#88.247.4':139
'22#.#88.57.137':139
'22#.#88.147.148':139
'22#.#88.248.133':139
'22#.#88.144.248':139
'22#.#88.238.22':139
'22#.#88.183.237':139
'22#.#88.28.176':139
'22#.#88.108.180':139
'22#.#88.171.73':139
'22#.#88.94.211':139
'22#.#88.6.238':139
'22#.#88.211.149':139
'22#.#88.22.35':139
'22#.#88.149.73':139
'22#.#88.130.234':445
'22#.#88.69.199':445
'22#.#88.92.239':445
'22#.#88.206.53':139
'22#.#88.160.27':445
'22#.#88.72.151':445
'22#.#88.199.191':445
'22#.#88.53.102':445
'22#.#88.45.50':445
'22#.#88.40.189':445
'22#.#88.15.173':139
'22#.#88.76.67':139
'22#.#88.199.191':139
'22#.#88.53.102':139
'22#.#88.72.151':139
'22#.#88.62.19':139
'22#.#88.54.62':139
'22#.#88.241.183':139
'22#.#88.172.132':139
'22#.#88.118.172':139
'22#.#88.15.173':445
'22#.#88.190.195':139
'22#.#88.230.185':139
'22#.#88.65.224':139
'22#.#88.41.54':139
'22#.#88.45.105':139
'22#.#88.84.124':139
'22#.#88.8.17':139
'22#.#88.124.233':139
'22#.#88.17.20':139
'22#.#88.234.59':139
'22#.#88.241.183':445
'22#.#88.62.19':445
'22#.#88.118.172':445
'22#.#88.76.67':445
'22#.#88.172.132':445
'22#.#88.139.122':139
'22#.#88.44.60':139
'22#.#88.131.206':139
'22#.#88.54.62':445
'22#.#88.206.53':445
'22#.#88.40.189':139
'22#.#88.67.154':445
'22#.#88.173.67':445
'22#.#88.120.70':445
'22#.#88.59.199':445
'22#.#88.11.169':445
'22#.#88.107.163':445
'22#.#88.162.171':9988
'22#.#88.130.162':445
'22#.#88.116.214':445
'22#.#88.195.191':445
'22#.#88.134.38':445
'22#.#88.248.133':445
'22#.#88.55.150':445
'22#.#88.159.246':445
'22#.#88.159.50':445
'22#.#88.57.137':445
'22#.#88.83.106':445
'22#.#88.247.4':445
'22#.#88.144.248':445
'22#.#88.147.148':445
'22#.#88.22.52':9988
'22#.#88.248.133':9988
'22#.#88.57.137':9988
'22#.#88.159.50':9988
'22#.#88.183.237':9988
'22#.#88.149.73':9988
'22#.#88.69.199':139
'22#.#88.45.50':139
'22#.#88.130.234':139
'22#.#88.160.27':139
'22#.#88.92.239':139
'22#.#88.205.162':9988
'22#.#88.144.24':9988
'22#.#88.33.205':9988
'22#.#88.47.126':9988
'22#.#88.154.93':9988
'22#.#88.62.250':9988
'22#.#88.108.180':9988
'22#.#88.119.165':9988
'22#.#88.102.208':9988
'22#.#88.218.48':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней