Trojan.Starman.5719

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER7633.dir00\svchost.exe.mdmp 16325836412028984

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7633.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#62.111.59':445
'22#.#62.221.130':445
'22#.#62.212.151':445
'22#.#62.219.139':445
'22#.#62.50.250':445
'22#.#62.55.107':445
'22#.#62.94.69':445
'22#.#62.29.190':445
'22#.#62.73.138':445
'22#.#62.8.117':445
'22#.#62.127.24':445
'22#.#62.43.127':445
'22#.#62.136.133':445
'22#.#62.210.31':445
'22#.#62.241.179':445
'22#.#62.136.175':445
'22#.#62.115.133':445
'22#.#62.169.251':445
'22#.#62.32.26':445
'22#.#62.81.119':445
'22#.#62.83.164':445
'22#.#62.134.10':445
'22#.#62.169.136':445
'22#.#62.55.191':445
'22#.#62.216.191':445
'22#.#62.134.240':139
'22#.#62.154.239':139
'22#.#62.18.130':139
'22#.#62.80.230':139
'22#.#62.154.134':139
'22#.#62.190.168':139
'22#.#62.178.70':139
'22#.#62.52.27':139
'22#.#62.74.183':445
'22#.#62.143.41':139
'22#.#62.200.106':139
'22#.#62.70.164':139
'22#.#62.92.55':139
'22#.#62.6.213':445
'22#.#62.72.171':445
'22#.#62.183.142':445
'22#.#62.23.4':445
'22#.#62.13.85':445
'22#.#62.1.13':445
'22#.#62.129.166':139
'22#.#62.117.165':139
'22#.#62.0.189':139
'22#.#62.74.183':139
'22#.#62.50.74':139
'22#.#62.167.49':139
'22#.#62.146.131':445
'22#.#62.115.133':139
'22#.#62.146.131':139
'22#.#62.90.202':139
'22#.#62.8.223':445
'22#.#62.16.149':445
'22#.#62.193.30':445
'22#.#62.241.179':139
'22#.#62.136.175':139
'22#.#62.169.136':139
'22#.#62.169.251':139
'22#.#62.32.26':139
'22#.#62.210.31':139
'22#.#62.16.82':445
'22#.#62.236.152':445
'22#.#62.101.117':445
'22#.#62.68.246':445
'22#.#62.77.117':445
'22#.#62.205.77':445
'22#.#62.126.205':445
'22#.#62.67.190':445
'22#.#62.247.114':445
'22#.#62.140.64':445
'22#.#62.81.39':445
'22#.162.4.5':445
'22#.#62.46.233':445
'22#.#62.29.190':139
'22#.#62.73.138':139
'22#.#62.23.4':139
'22#.#62.127.24':139
'22#.#62.43.127':139
'22#.#62.94.69':139
'22#.#62.72.171':139
'22#.#62.183.142':139
'22#.#62.90.202':445
'22#.#62.13.85':139
'22#.#62.1.13':139
'22#.#62.6.213':139
'22#.#62.8.117':139
'22#.#62.83.164':139
'22#.#62.134.10':139
'22#.#62.136.133':139
'22#.#62.55.191':139
'22#.#62.216.191':139
'22#.#62.81.119':139
'22#.#62.111.59':139
'22#.#62.221.130':139
'22#.#62.212.151':139
'22#.#62.219.139':139
'22#.#62.50.250':139
'22#.#62.55.107':139
'22#.#62.114.158':445
'22#.#62.164.248':445
'22#.#62.51.164':445
'22#.#62.201.161':445
'22#.#62.127.238':445
'22#.#62.207.40':445
'22#.#62.162.79':445
'22#.#62.128.46':445
'22#.#62.46.181':445
'22#.#62.4.218':445
'22#.#62.169.34':445
'22#.#62.89.49':445
'22#.#62.162.1':445
'22#.#62.126.228':445
'22#.#62.241.57':445
'22#.#62.124.183':445
'22#.#62.129.113':445
'22#.#62.11.13':445
'22#.#62.71.83':445
'22#.#62.157.232':445
'22#.#62.68.244':445
'22#.#62.145.227':445
'22#.#62.93.124':445
'22#.#62.224.0':445
'22#.#62.232.181':445
'22#.#62.199.118':139
'22#.#62.32.199':139
'22#.#62.13.41':139
'22#.#62.153.27':139
'22#.#62.41.196':139
'22#.#62.119.0':139
'22#.#62.241.229':139
'22#.#62.56.29':139
'22#.#62.110.140':139
'22#.#62.150.133':139
'22#.#62.88.116':139
'22#.#62.229.176':139
'22#.#62.27.35':139
'22#.#62.117.128':445
'22#.#62.166.206':445
'22#.#62.13.250':445
'22#.#62.27.42':445
'22#.#62.77.8':445
'22#.#62.5.65':445
'22#.#62.66.85':139
'22#.#62.96.44':139
'22#.#62.1.193':139
'22#.#62.30.12':445
'22#.#62.40.8':139
'22#.#62.216.233':139
'22#.#62.17.131':445
'22#.#62.52.27':445
'22#.#62.17.131':139
'22#.#62.129.113':139
'22#.#62.200.106':445
'22#.#62.70.164':445
'22#.#62.178.70':445
'22#.#62.241.57':139
'22#.#62.124.183':139
'22#.#62.93.124':139
'22#.#62.11.13':139
'22#.#62.71.83':139
'22#.#62.126.228':139
'22#.#62.143.41':445
'22#.#62.117.165':445
'22#.#62.0.189':445
'22#.#62.92.55':445
'22#.#62.50.74':445
'22#.#62.167.49':445
'22#.#62.129.166':445
'22#.#62.134.240':445
'22#.#62.154.239':445
'22#.#62.18.130':445
'22#.#62.80.230':445
'22#.#62.154.134':445
'22#.#62.190.168':445
'22#.#62.128.46':139
'22#.#62.46.181':139
'22#.#62.27.42':139
'22#.#62.169.34':139
'22#.#62.89.49':139
'22#.#62.162.79':139
'22#.#62.166.206':139
'22#.#62.13.250':139
'22#.#62.30.12':139
'22#.#62.77.8':139
'22#.#62.5.65':139
'22#.#62.117.128':139
'22#.#62.4.218':139
'22#.#62.68.244':139
'22#.#62.145.227':139
'22#.#62.162.1':139
'22#.#62.224.0':139
'22#.#62.232.181':139
'22#.#62.157.232':139
'22#.#62.114.158':139
'22#.#62.164.248':139
'22#.#62.51.164':139
'22#.#62.201.161':139
'22#.#62.127.238':139
'22#.#62.207.40':139
'22#.#62.16.111':445
'22#.#62.72.200':445
'22#.#62.138.2':445
'22#.#62.228.154':445
'22#.#62.41.58':445
'22#.#62.68.80':445
'22#.#62.190.66':445
'22#.#62.97.104':445
'22#.#62.216.9':445
'22#.#62.143.173':445
'22#.#62.97.5':445
'22#.#62.114.200':445
'22#.#62.245.114':445
'22#.#62.14.45':445
'22#.#62.181.16':445
'22#.#62.115.169':445
'22#.#62.78.19':445
'22#.#62.169.98':445
'22#.#62.36.115':445
'22#.#62.153.98':445
'22#.#62.209.103':445
'22#.#62.255.3':445
'22#.#62.235.9':445
'22#.#62.254.234':445
'22#.#62.76.30':445
'22#.#62.191.198':445
'22#.#62.27.211':445
'22#.#62.7.216':445
'22#.#62.206.15':445
'22#.#62.28.231':445
'22#.#62.21.139':445
'22#.#62.162.119':445
'22#.#62.190.155':445
'22#.#62.57.87':445
'22#.#62.59.8':445
'22#.#62.234.58':445
'22#.#62.194.88':445
'22#.#62.174.15':445
'22#.#62.102.63':445
'22#.#62.66.232':445
'22#.#62.33.26':445
'22#.#62.139.216':445
'22#.#62.178.139':445
'22#.#62.55.178':445
'22#.#62.213.211':445
'22#.#62.224.236':445
'22#.#62.44.226':445
'22#.#62.183.207':445
'22#.#62.159.99':445
'22#.#62.170.183':445
'22#.#62.94.58':139
'22#.#62.16.111':139
'22#.#62.72.200':139
'22#.#62.143.173':139
'22#.#62.228.154':139
'22#.#62.68.80':139
'22#.#62.41.58':139
'22#.#62.190.66':139
'22#.#62.97.104':139
'22#.#62.216.9':139
'22#.#62.138.2':139
'22#.#62.97.5':139
'22#.#62.114.200':139
'22#.#62.245.114':139
'22#.#62.169.98':139
'22#.#62.181.16':139
'22#.#62.78.19':139
'22#.#62.115.169':139
'22#.#62.36.115':139
'22#.#62.14.45':139
'22#.#62.153.98':139
'22#.#62.209.103':139
'22#.#62.255.3':139
'22#.#62.235.9':139
'22#.#62.254.234':139
'22#.#62.76.30':139
'22#.#62.191.198':139
'22#.#62.27.211':139
'22#.#62.7.216':139
'22#.#62.206.15':139
'22#.#62.28.231':139
'22#.#62.21.139':139
'22#.#62.162.119':139
'22#.#62.190.155':139
'22#.#62.57.87':139
'22#.#62.59.8':139
'22#.#62.234.58':139
'22#.#62.194.88':139
'22#.#62.174.15':139
'22#.#62.102.63':139
'22#.#62.66.232':139
'22#.#62.33.26':139
'22#.#62.139.216':139
'22#.#62.178.139':139
'22#.#62.55.178':139
'22#.#62.213.211':139
'22#.#62.224.236':139
'22#.#62.44.226':139
'22#.#62.159.99':139
'22#.#62.183.207':139
'22#.#62.170.183':139
'22#.#62.133.116':445
'22#.#62.4.13':445
'22#.#62.82.212':445
'22#.#62.46.182':445
'22#.#62.154.83':445
'22#.#62.145.39':445
'22#.#62.74.138':445
'22#.#62.106.221':445
'22#.#62.224.89':445
'22#.#62.125.35':445
'22#.#62.245.74':445
'22#.#62.170.5':445
'22#.#62.166.154':445
'22#.#62.75.133':445
'22#.#62.117.51':445
'22#.#62.80.210':445
'22#.#62.207.134':445
'22#.#62.216.165':445
'22#.#62.21.212':445
'22#.#62.94.106':445
'22#.#62.116.89':445
'22#.#62.42.209':445
'22#.#62.147.3':445
'22#.#62.1.235':445
'22#.#62.177.67':445
'22#.#62.67.190':139
'22#.#62.247.114':139
'22#.#62.140.64':139
'22#.#62.81.39':139
'22#.162.4.5':139
'22#.#62.46.233':139
'22#.#62.193.30':139
'22#.#62.114.173':445
'22#.#62.125.78':445
'22#.#62.16.82':139
'22#.#62.8.223':139
'22#.#62.16.149':139
'22#.#62.68.246':139
'22#.#62.111.106':445
'22#.#62.166.25':445
'22#.#62.114.173':139
'22#.#62.18.196':445
'22#.#62.164.249':445
'22#.#62.246.146':445
'22#.#62.126.205':139
'22#.#62.236.152':139
'22#.#62.101.117':139
'22#.#62.125.78':139
'22#.#62.77.117':139
'22#.#62.205.77':139
'22#.#62.183.146':445
'22#.#62.100.157':139
'22#.#62.183.146':139
'22#.#62.207.134':139
'22#.#62.57.87':9988
'22#.#62.94.58':9988
'22#.#62.172.69':139
'22#.#62.117.51':139
'22#.#62.80.210':139
'22#.#62.147.3':139
'22#.#62.216.165':139
'22#.#62.21.212':139
'22#.#62.75.133':139
'22#.#62.190.155':9988
'22#.#62.14.45':9988
'22#.#62.115.169':9988
'22#.#62.228.154':9988
'22#.#62.94.58':445
'22#.#62.181.16':9988
'22#.#62.78.19':9988
'22#.#62.234.58':9988
'22#.#62.194.88':9988
'22#.#62.162.119':9988
'22#.#62.68.80':9988
'22#.#62.27.211':9988
'22#.#62.7.216':9988
'22#.#62.106.221':139
'22#.#62.224.89':139
'22#.#62.246.146':139
'22#.#62.245.74':139
'22#.#62.170.5':139
'22#.#62.74.138':139
'22#.#62.166.25':139
'22#.#62.172.69':445
'22#.#62.100.157':445
'22#.#62.111.106':139
'22#.#62.164.249':139
'22#.#62.18.196':139
'22#.#62.125.35':139
'22#.#62.116.89':139
'22#.#62.42.209':139
'22#.#62.166.154':139
'22#.#62.1.235':139
'22#.#62.177.67':139
'22#.#62.94.106':139
'22#.#62.133.116':139
'22#.#62.4.13':139
'22#.#62.82.212':139
'22#.#62.46.182':139
'22#.#62.154.83':139
'22#.#62.145.39':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней