Trojan.Starman.5986

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2c9e.dir00\svchost.exe.mdmp 16325836412032044

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2c9e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#.226.170':139
'22#.6.61.58':139
'22#.6.19.81':139
'22#.#.85.242':139
'22#.#.199.89':139
'22#.#.69.187':139
'22#.#.36.210':139
'22#.6.0.218':139
'22#.#.214.229':139
'22#.#.23.107':139
'22#.#.214.190':139
'22#.6.28.28':139
'22#.#.231.220':139
'22#.#.30.133':139
'22#.#.124.174':139
'22#.#.40.124':139
'22#.#.211.83':139
'22#.#.42.153':139
'22#.6.44.33':139
'22#.#.241.243':139
'22#.#.226.241':139
'22#.6.87.37':139
'22#.#.58.133':445
'22#.6.67.56':445
'22#.#.246.180':445
'22#.#.160.27':445
'22#.#.64.118':445
'22#.6.147.7':445
'22#.#.68.182':445
'22#.#.72.129':445
'22#.6.6.126':445
'22#.#.183.78':445
'22#.#.23.223':445
'22#.#.138.156':139
'22#.6.88.71':139
'22#.#.33.235':139
'22#.#.82.251':139
'22#.#.33.244':139
'22#.#.61.163':139
'22#.#.110.135':139
'22#.6.201.3':445
'22#.#.186.26':139
'22#.#.75.168':139
'22#.6.27.75':139
'22#.#.174.174':139
'22#.#.57.126':445
'22#.#.54.207':445
'22#.#.194.97':445
'22#.6.2.51':445
'22#.6.27.83':445
'22#.#.216.221':445
'22#.#.19.217':445
'22#.#.193.130':445
'22#.6.22.41':445
'22#.#.145.213':445
'22#.#.116.57':445
'22#.6.6.75':445
'22#.6.36.48':445
'22#.6.9.223':445
'22#.#.107.142':445
'22#.#.75.228':445
'22#.6.93.78':445
'22#.#.253.112':445
'22#.#.114.59':445
'22#.#.132.13':445
'22#.#.23.190':445
'22#.#.13.237':445
'22#.#.68.182':139
'22#.#.72.129':139
'22#.6.6.126':139
'22#.#.183.78':139
'22#.#.23.223':139
'22#.6.18.73':139
'22#.6.12.96':139
'22#.#.189.186':139
'22#.6.4.243':139
'22#.#.209.82':139
'22#.#.192.239':139
'22#.6.47.35':445
'22#.6.201.3':139
'22#.#.28.181':445
'22#.#.200.247':445
'22#.#.122.201':445
'22#.#.160.27':139
'22#.6.67.56':139
'22#.6.147.7':139
'22#.#.58.133':139
'22#.#.64.118':139
'22#.#.246.180':139
'22#.6.18.73':445
'22#.#.49.148':139
'22#.#.128.232':139
'22#.#.126.137':139
'22#.#.14.161':139
'22#.#.150.248':139
'22#.#.53.251':139
'22#.6.71.37':139
'22#.6.142.5':139
'22#.#.114.13':139
'22#.#.95.193':139
'22#.6.96.28':139
'22#.#.225.94':139
'22#.#.183.31':139
'22#.#.195.33':139
'22#.#.184.164':139
'22#.#.44.161':139
'22#.#.25.103':139
'22#.#.220.151':139
'22#.#.67.209':139
'22#.6.18.12':139
'22#.6.2.90':139
'22#.6.222.1':139
'22#.6.99.85':139
'22#.#.187.157':139
'22#.#.103.81':139
'22#.#.24.200':139
'22#.#.235.70':139
'22#.#.64.159':139
'22#.#.73.252':139
'22#.6.84.67':139
'22#.#.50.253':139
'22#.#.221.112':139
'22#.#.144.221':139
'22#.#.49.235':139
'22#.#.108.152':139
'22#.#.121.26':139
'22#.#.185.159':139
'22#.6.169.1':139
'22#.#.165.108':139
'22#.#.50.122':139
'22#.#.200.50':139
'22#.#.121.212':139
'22#.6.18.81':139
'22#.#.168.162':139
'22#.#.164.20':139
'22#.#.241.243':445
'22#.#.42.153':445
'22#.6.87.37':445
'22#.#.211.83':445
'22#.#.226.241':445
'22#.6.44.33':445
'22#.#.226.170':445
'22#.6.61.58':445
'22#.6.19.81':445
'22#.#.85.242':445
'22#.#.199.89':445
'22#.6.12.96':445
'22#.#.189.186':445
'22#.6.4.243':445
'22#.#.209.82':445
'22#.#.192.239':445
'22#.#.174.174':445
'22#.6.28.28':445
'22#.#.231.220':445
'22#.#.30.133':445
'22#.#.124.174':445
'22#.#.40.124':445
'22#.#.186.26':445
'22#.#.110.135':445
'22#.6.27.75':445
'22#.#.61.163':445
'22#.#.75.168':445
'22#.#.222.182':139
'22#.#.45.169':139
'22#.#.171.160':139
'22#.#.25.250':139
'22#.#.163.118':139
'22#.6.78.98':139
'22#.#.214.229':445
'22#.#.36.210':445
'22#.#.214.190':445
'22#.#.69.187':445
'22#.#.23.107':445
'22#.6.0.218':445
'22#.#.138.156':445
'22#.6.88.71':445
'22#.#.33.235':445
'22#.#.82.251':445
'22#.#.33.244':445
'22#.#.118.35':445
'22#.#.25.244':445
'22#.#.95.221':445
'22#.#.28.203':445
'22#.6.8.191':445
'22#.#.95.174':445
'22#.#.236.57':445
'22#.6.12.58':445
'22#.#.210.19':445
'22#.6.68.63':445
'22#.#.137.107':445
'22#.#.206.246':139
'22#.#.22.107':139
'22#.#.131.246':139
'22#.6.242.3':139
'22#.#.253.43':139
'22#.#.138.22':139
'22#.#.159.46':445
'22#.#.43.223':445
'22#.#.95.189':445
'22#.#.66.199':445
'22#.#.213.171':445
'22#.#.74.118':445
'22#.#.254.234':445
'22#.#.53.149':445
'22#.6.6.174':445
'22#.6.144.6':445
'22#.#.207.254':445
'22#.#.212.133':445
'22#.#.105.36':445
'22#.#.156.82':445
'22#.6.14.28':445
'22#.#.81.122':445
'22#.6.1.244':445
'22#.6.81.2':445
'22#.#.133.153':445
'22#.#.36.187':445
'22#.#.170.119':445
'22#.#.189.87':445
'22#.#.24.173':445
'22#.#.158.59':445
'22#.#.108.242':445
'22#.#.65.237':445
'22#.#.138.150':445
'22#.#.172.95':139
'22#.#.236.57':139
'22#.6.12.58':139
'22#.#.210.19':139
'22#.6.68.63':139
'22#.#.137.107':139
'22#.#.36.187':139
'22#.6.81.2':139
'22#.#.189.87':139
'22#.6.1.244':139
'22#.#.170.119':139
'22#.#.133.153':139
'22#.#.43.223':139
'22#.#.66.199':139
'22#.#.159.46':139
'22#.#.95.189':139
'22#.#.28.203':139
'22#.#.213.171':139
'22#.#.25.244':139
'22#.#.95.174':139
'22#.#.118.35':139
'22#.6.8.191':139
'22#.#.95.221':139
'22#.#.212.133':139
'22#.#.105.36':139
'22#.#.156.82':139
'22#.6.14.28':139
'22#.#.81.122':139
'22#.#.239.104':139
'22#.#.243.162':139
'22#.6.191.0':139
'22#.6.231.5':139
'22#.#.157.239':139
'22#.#.68.119':139
'22#.#.24.173':139
'22#.#.158.59':139
'22#.#.108.242':139
'22#.#.65.237':139
'22#.#.138.150':139
'22#.6.6.174':139
'22#.#.254.234':139
'22#.#.207.254':139
'22#.#.74.118':139
'22#.6.144.6':139
'22#.#.53.149':139
'22#.#.239.104':445
'22#.#.193.130':139
'22#.#.200.247':139
'22#.#.19.217':139
'22#.#.116.57':139
'22#.6.22.41':139
'22#.#.122.201':139
'22#.#.81.222':445
'22#.#.168.238':445
'22#.#.136.137':445
'22#.#.28.181':139
'22#.6.47.35':139
'22#.#.114.59':139
'22#.6.2.51':139
'22#.#.253.112':139
'22#.#.13.237':139
'22#.#.132.13':139
'22#.6.27.83':139
'22#.#.216.221':139
'22#.#.145.213':139
'22#.#.54.207':139
'22#.#.194.97':139
'22#.#.57.126':139
'22#.#.38.227':445
'22#.6.82.38':445
'22#.#.64.179':445
'22#.6.13.86':445
'22#.#.115.84':445
'22#.#.241.81':445
'22#.#.208.136':445
'22#.#.115.208':445
'22#.#.136.21':445
'22#.6.225.0':445
'22#.#.59.222':445
'22#.#.85.185':445
'22#.#.198.199':445
'22#.#.177.129':445
'22#.#.99.142':445
'22#.#.152.43':445
'22#.#.161.178':445
'22#.6.52.32':445
'22#.#.154.124':445
'22#.#.104.26':445
'22#.#.153.247':445
'22#.6.96.47':445
'22#.#.23.190':139
'22#.#.81.222':139
'22#.#.168.238':139
'22#.#.136.137':139
'22#.#.138.22':445
'22#.#.95.221':9988
'22#.#.99.142':139
'22#.#.198.199':139
'22#.#.161.178':139
'22#.#.85.185':139
'22#.#.152.43':139
'22#.#.177.129':139
'22#.#.243.162':445
'22#.6.191.0':445
'22#.6.231.5':445
'22#.#.157.239':445
'22#.#.68.119':445
'22#.#.172.95':445
'22#.#.206.246':445
'22#.#.22.107':445
'22#.#.131.246':445
'22#.6.242.3':445
'22#.#.253.43':445
'22#.#.208.136':139
'22#.#.115.208':139
'22#.#.136.21':139
'22#.6.225.0':139
'22#.#.59.222':139
'22#.#.107.142':139
'22#.6.36.48':139
'22#.6.93.78':139
'22#.6.6.75':139
'22#.#.75.228':139
'22#.6.9.223':139
'22#.6.52.32':139
'22#.#.154.124':139
'22#.#.104.26':139
'22#.#.153.247':139
'22#.6.96.47':139
'22#.6.13.86':139
'22#.6.82.38':139
'22#.#.241.81':139
'22#.#.38.227':139
'22#.#.115.84':139
'22#.#.64.179':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней