Trojan.Starman.5720

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER48fc.dir00\svchost.exe.mdmp 16325836412032220

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER48fc.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#22.250.147':139
'22#.#22.46.239':139
'22#.#22.89.66':139
'22#.#22.28.18':139
'22#.#22.62.101':139
'22#.#22.98.54':139
'22#.#22.111.98':139
'22#.#22.53.177':139
'22#.#22.209.89':139
'22#.#22.12.17':139
'22#.#22.173.38':139
'22#.#22.209.210':139
'22#.#22.97.53':139
'22#.#22.211.22':139
'22#.#22.27.112':139
'22#.#22.24.80':139
'22#.#22.14.105':139
'22#.#22.207.8':139
'22#.#22.61.33':139
'22#.#22.173.48':139
'22#.#22.33.173':139
'22#.#22.133.252':445
'22#.#22.190.250':445
'22#.#22.215.133':445
'22#.#22.49.115':445
'22#.#22.125.49':445
'22#.#22.122.83':445
'22#.#22.237.121':445
'22#.#22.82.229':445
'22#.#22.50.207':445
'22#.#22.199.22':445
'22#.#22.114.197':445
'22#.#22.39.55':139
'22#.#22.43.32':445
'22#.#22.117.72':139
'22#.#22.243.78':139
'22#.#22.28.240':139
'22#.#22.32.205':445
'22#.#22.123.182':445
'22#.#22.204.230':445
'22#.#22.20.237':445
'22#.#22.232.106':445
'22#.#22.109.115':139
'22#.#22.126.79':139
'22#.#22.175.64':139
'22#.#22.39.194':139
'22#.#22.74.130':139
'22#.#22.39.194':445
'22#.#22.74.130':445
'22#.#22.239.138':445
'22#.#22.54.139':445
'22#.#22.151.81':445
'22#.#22.239.138':139
'22#.#22.159.108':445
'22#.#22.33.244':445
'22#.#22.94.47':445
'22#.#22.167.252':445
'22#.#22.96.96':445
'22#.#22.54.139':139
'22#.#22.151.81':139
'22#.#22.8.131':445
'22#.#22.53.219':445
'22#.#22.131.116':445
'22#.#22.190.250':139
'22#.#22.50.207':139
'22#.#22.133.252':139
'22#.#22.125.49':139
'22#.#22.215.133':139
'22#.#22.237.121':139
'22#.#22.187.170':139
'22#.#22.122.83':139
'22#.#22.199.22':139
'22#.#22.82.229':139
'22#.#22.49.115':139
'22#.#22.43.32':139
'22#.#22.20.237':139
'22#.#22.126.79':445
'22#.#22.175.64':445
'22#.#22.109.115':445
'22#.#22.123.182':139
'22#.#22.114.197':139
'22#.#22.32.205':139
'22#.#22.232.106':139
'22#.#22.204.230':139
'22#.#22.187.170':445
'22#.#22.93.203':139
'22#.#22.137.39':139
'22#.#22.198.211':139
'22#.#22.21.123':139
'22#.#22.212.21':139
'22#.#22.190.118':139
'22#.#22.105.190':139
'22#.#22.81.220':139
'22#.#22.66.181':139
'22#.#22.91.125':139
'22#.#22.122.243':139
'22#.#22.76.199':139
'22#.#22.94.43':139
'22#.#22.30.253':139
'22#.#22.41.103':139
'22#.#22.209.40':139
'22#.#22.215.233':139
'22#.#22.243.168':139
'22#.#22.56.23':139
'22#.#22.39.254':139
'22#.#22.23.188':139
'22#.#22.228.144':139
'22#.#22.3.103':139
'22#.#22.49.119':139
'22#.#22.254.123':139
'22#.#22.232.221':139
'22#.#22.30.186':139
'22#.#22.93.254':139
'22#.#22.234.136':139
'22#.#22.2.88':139
'22#.#22.9.253':139
'22#.#22.220.182':139
'22#.#22.128.40':139
'22#.#22.49.128':139
'22#.#22.40.207':139
'22#.#22.156.106':139
'22#.#22.152.214':139
'22#.#22.133.156':139
'22#.#22.79.228':139
'22#.#22.90.25':139
'22#.#22.198.49':139
'22#.#22.238.24':139
'22#.#22.250.147':445
'22#.#22.46.239':445
'22#.#22.89.66':445
'22#.#22.28.18':445
'22#.#22.62.101':445
'22#.#22.98.54':445
'22#.#22.111.98':445
'22#.#22.53.177':445
'22#.#22.209.89':445
'22#.#22.12.17':445
'22#.#22.173.38':445
'22#.#22.209.210':445
'22#.#22.97.53':445
'22#.#22.211.22':445
'22#.#22.27.112':445
'22#.#22.24.80':445
'22#.#22.14.105':445
'22#.#22.207.8':445
'22#.#22.61.33':445
'22#.#22.173.48':445
'22#.#22.33.173':445
'22#.#22.132.55':445
'22#.#22.42.107':445
'22#.#22.4.214':445
'22#.#22.62.37':139
'22#.#22.213.142':445
'22#.#22.62.37':445
'22#.#22.141.75':139
'22#.#22.71.186':445
'22#.#22.159.145':445
'22#.#22.129.82':445
'22#.#22.71.186':139
'22#.#22.39.55':445
'22#.#22.213.142':139
'22#.#22.117.72':445
'22#.#22.243.78':445
'22#.#22.28.240':445
'22#.#22.159.145':139
'22#.#22.129.82':139
'22#.#22.42.107':139
'22#.#22.4.214':139
'22#.#22.132.55':139
'22#.#22.148.220':445
'22#.#22.175.148':445
'22#.#22.97.173':445
'22#.#22.78.113':445
'22#.#22.103.132':445
'22#.#22.32.173':445
'22#.#22.50.69':445
'22#.#22.13.192':445
'22#.#22.244.175':445
'22#.#22.202.244':445
'22#.#22.207.78':445
'22#.#22.163.18':139
'22#.#22.253.162':139
'22#.#22.19.0':139
'22#.#22.68.251':139
'22#.#22.122.44':139
'22#.#22.19.162':139
'22#.#22.57.84':445
'22#.#22.34.249':139
'22#.#22.32.136':139
'22#.#22.218.29':139
'22#.#22.46.89':445
'22#.#22.82.60':445
'22#.#22.89.59':445
'22#.#22.115.99':445
'22#.#22.252.219':445
'22#.#22.114.186':445
'22#.#22.250.230':445
'22#.#22.181.62':445
'22#.#22.21.238':445
'22#.#22.63.21':445
'22#.#22.73.234':445
'22#.#22.38.202':445
'22#.#22.68.52':445
'22#.#22.96.184':445
'22#.#22.138.133':445
'22#.#22.184.211':445
'22#.#22.10.254':445
'22#.#22.12.67':445
'22#.#22.184.32':445
'22#.#22.1.204':445
'22#.#22.233.236':445
'22#.#22.96.184':139
'22#.#22.38.202':139
'22#.#22.184.211':139
'22#.#22.50.69':139
'22#.#22.138.133':139
'22#.#22.184.32':139
'22#.#22.10.254':139
'22#.#22.233.236':139
'22#.#22.68.52':139
'22#.#22.1.204':139
'22#.#22.32.173':139
'22#.#22.57.84':139
'22#.#22.103.132':139
'22#.#22.97.173':139
'22#.#22.78.113':139
'22#.#22.207.78':139
'22#.#22.202.244':139
'22#.#22.13.192':139
'22#.#22.244.175':139
'22#.#22.148.220':139
'22#.#22.175.148':139
'22#.#22.16.241':139
'22#.#22.217.242':139
'22#.#22.120.54':139
'22#.#22.250.230':139
'22#.#22.58.252':139
'22#.#22.234.10':139
'22#.#22.226.30':139
'22#.#22.224.227':139
'22#.#22.160.191':139
'22#.#22.182.48':139
'22#.#22.114.186':139
'22#.#22.252.219':139
'22#.#22.89.59':139
'22#.#22.115.99':139
'22#.#22.12.67':139
'22#.#22.73.234':139
'22#.#22.63.21':139
'22#.#22.181.62':139
'22#.#22.21.238':139
'22#.#22.46.89':139
'22#.#22.82.60':139
'22#.#22.58.252':445
'22#.#22.53.219':139
'22#.#22.131.116':139
'22#.#22.33.244':139
'22#.#22.94.47':139
'22#.#22.159.108':139
'22#.#22.53.211':445
'22#.#22.70.64':445
'22#.#22.213.114':445
'22#.#22.8.131':139
'22#.#22.48.173':445
'22#.#22.96.96':139
'22#.#22.197.235':139
'22#.#22.240.106':139
'22#.#22.211.233':139
'22#.#22.64.173':139
'22#.#22.149.233':139
'22#.#22.181.71':139
'22#.#22.167.252':139
'22#.#22.14.222':139
'22#.#22.144.10':139
'22#.#22.68.144':139
'22#.#22.211.233':445
'22#.#22.197.235':445
'22#.#22.149.233':445
'22#.#22.12.33':445
'22#.#22.64.173':445
'22#.#22.14.222':445
'22#.#22.181.71':445
'22#.#22.68.144':445
'22#.#22.240.106':445
'22#.#22.144.10':445
'22#.#22.51.75':445
'22#.#22.115.216':445
'22#.#22.113.37':445
'22#.#22.51.28':445
'22#.#22.204.70':445
'22#.#22.28.204':445
'22#.#22.43.210':445
'22#.#22.64.44':445
'22#.#22.96.77':445
'22#.#22.76.236':445
'22#.#22.89.42':445
'22#.#22.218.29':445
'22#.#22.34.249':445
'22#.#22.32.136':445
'22#.#22.163.18':445
'22#.#22.253.162':445
'22#.#22.10.254':9988
'22#.#22.73.234':9988
'22#.#22.184.32':9988
'22#.#22.19.162':445
'22#.#22.57.84':9988
'22#.#22.19.0':445
'22#.#22.160.191':445
'22#.#22.182.48':445
'22#.#22.217.242':445
'22#.#22.120.54':445
'22#.#22.16.241':445
'22#.#22.68.251':445
'22#.#22.122.44':445
'22#.#22.226.30':445
'22#.#22.224.227':445
'22#.#22.234.10':445
'22#.#22.76.236':139
'22#.#22.89.42':139
'22#.#22.113.37':139
'22#.#22.51.28':139
'22#.#22.115.216':139
'22#.#22.51.75':139
'22#.#22.12.33':139
'22#.#22.64.44':139
'22#.#22.96.77':139
'22#.#22.43.210':139
'22#.#22.28.204':139
'22#.#22.58.252':9988
'22#.#22.16.241':9988
'22#.#22.250.230':9988
'22#.#22.21.238':9988
'22#.#22.114.186':9988
'22#.#22.70.64':139
'22#.#22.204.70':139
'22#.#22.53.211':139
'22#.#22.48.173':139
'22#.#22.213.114':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней