Trojan.Starman.5884

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER2640.dir00\svchost.exe.mdmp 16325836412032272

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2640.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#6.229.100':139
'22#.#6.36.144':139
'22#.#6.39.95':139
'22#.#6.123.12':139
'22#.#6.14.173':139
'22#.#6.25.154':139
'22#.#6.27.109':139
'22#.#6.64.30':139
'22#.#6.155.69':139
'22#.#6.1.233':139
'22#.#6.155.103':139
'22#.#6.22.169':445
'22#.#6.213.75':445
'22#.#6.162.6':445
'22#.#6.170.122':445
'22#.#6.166.170':445
'22#.#6.33.48':139
'22#.#6.187.93':139
'22#.#6.36.223':139
'22#.#6.21.49':139
'22#.#6.58.132':139
'22#.#6.229.100':445
'22#.#6.36.144':445
'22#.#6.39.95':445
'22#.#6.123.12':445
'22#.#6.14.173':445
'22#.#6.25.154':445
'22#.#6.27.109':445
'22#.#6.64.30':445
'22#.#6.155.69':445
'22#.#6.1.233':445
'22#.#6.155.103':445
'22#.#6.122.127':139
'22#.#6.161.161':139
'22#.#6.69.28':139
'22#.#6.109.86':139
'22#.#6.209.113':139
'22#.#6.33.48':445
'22#.#6.187.93':445
'22#.#6.36.223':445
'22#.#6.21.49':445
'22#.#6.58.132':445
'22#.#6.68.191':445
'22#.#6.166.170':139
'22#.#6.162.6':139
'22#.#6.170.122':139
'22#.#6.104.187':139
'22#.#6.68.191':139
'22#.#6.180.90':445
'22#.#6.246.179':445
'22#.36.66.4':445
'22#.#6.22.169':139
'22#.#6.213.75':139
'22#.#6.176.13':139
'22#.#6.62.197':139
'22#.#6.109.48':139
'22#.#6.215.64':139
'22#.#6.25.160':139
'22#.#6.156.120':139
'22#.#6.229.143':139
'22#.#6.165.107':139
'22#.#6.247.135':139
'22#.#6.181.170':139
'22#.#6.119.81':139
'22#.#6.181.170':445
'22#.#6.119.81':445
'22#.#6.109.48':445
'22#.#6.215.64':445
'22#.#6.62.197':445
'22#.#6.176.13':445
'22#.#6.104.187':445
'22#.#6.165.107':445
'22#.#6.247.135':445
'22#.#6.229.143':445
'22#.#6.156.120':445
'22#.#6.138.215':445
'22#.#6.73.54':445
'22#.#6.195.174':445
'22#.#6.170.40':445
'22#.#6.196.33':445
'22#.#6.59.30':445
'22#.#6.25.160':445
'22#.#6.30.78':445
'22#.#6.174.195':445
'22#.#6.77.160':445
'22#.#6.109.86':445
'22#.#6.117.109':445
'22#.#6.203.231':445
'22#.#6.6.142':445
'22#.#6.249.155':445
'22#.#6.171.199':445
'22#.#6.148.106':445
'22#.#6.25.135':445
'22#.#6.4.187':445
'22#.#6.187.251':445
'22#.#6.5.104':445
'22#.#6.155.99':445
'22#.#6.187.242':445
'22#.#6.105.188':445
'22#.#6.242.250':445
'22#.#6.250.249':445
'22#.#6.251.17':445
'22#.#6.25.95':445
'22#.#6.100.16':445
'22#.#6.15.228':445
'22#.36.83.6':445
'22#.#6.26.109':445
'22#.#6.176.6':139
'22#.#6.198.35':139
'22#.#6.107.238':139
'22#.#6.33.15':139
'22#.#6.172.118':139
'22#.#6.170.253':139
'22#.#6.15.192':139
'22#.#6.0.150':139
'22#.#6.41.130':139
'22#.#6.126.250':139
'22#.#6.36.105':139
'22#.#6.179.26':139
'22#.#6.188.210':139
'22#.#6.14.177':139
'22#.#6.133.199':139
'22#.#6.41.98':139
'22#.#6.86.149':139
'22#.#6.139.51':139
'22#.#6.149.226':139
'22#.#6.117.223':139
'22#.#6.128.145':139
'22#.#6.103.92':445
'22#.#6.251.17':139
'22#.#6.242.250':139
'22#.#6.250.249':139
'22#.#6.22.191':139
'22#.#6.103.92':139
'22#.#6.26.109':139
'22#.#6.15.228':139
'22#.36.83.6':139
'22#.#6.187.242':139
'22#.#6.105.188':139
'22#.#6.107.11':139
'22#.#6.161.161':445
'22#.#6.108.103':139
'22#.#6.122.127':445
'22#.#6.209.113':445
'22#.#6.69.28':445
'22#.#6.198.152':139
'22#.#6.162.198':139
'22#.#6.152.95':139
'22#.#6.98.18':139
'22#.#6.128.173':139
'22#.#6.98.18':445
'22#.#6.128.173':445
'22#.#6.108.103':445
'22#.#6.148.106':139
'22#.#6.25.135':139
'22#.#6.107.11':445
'22#.#6.22.191':445
'22#.#6.162.198':445
'22#.#6.152.95':445
'22#.#6.198.152':445
'22#.#6.4.187':139
'22#.#6.249.155':139
'22#.#6.171.199':139
'22#.#6.155.99':139
'22#.#6.25.95':139
'22#.#6.100.16':139
'22#.#6.187.251':139
'22#.#6.5.104':139
'22#.#6.203.231':139
'22#.#6.6.142':139
'22#.#6.117.109':139
'22#.#6.25.141':445
'22#.#6.40.72':445
'22#.#6.141.213':445
'22#.#6.154.195':445
'22#.#6.125.157':445
'22#.36.6.84':445
'22#.#6.184.230':445
'22#.#6.154.127':445
'22#.#6.31.152':445
'22#.#6.173.164':445
'22#.#6.232.222':445
'22#.#6.162.147':139
'22#.#6.137.126':139
'22#.#6.29.126':139
'22#.#6.47.104':139
'22#.#6.36.209':139
'22#.#6.15.234':445
'22#.#6.238.15':445
'22#.#6.93.253':139
'22#.#6.6.180':139
'22#.#6.34.161':139
'22#.#6.11.122':445
'22#.#6.122.119':445
'22#.#6.193.230':445
'22#.#6.151.108':445
'22#.#6.25.151':445
'22#.#6.130.144':445
'22#.#6.68.15':445
'22#.#6.59.56':445
'22#.#6.111.24':445
'22#.#6.55.248':445
'22#.#6.108.7':445
'22#.#6.228.58':445
'22#.#6.126.176':445
'22#.#6.201.90':445
'22#.#6.189.31':445
'22#.#6.163.75':445
'22#.#6.160.196':445
'22#.#6.253.188':445
'22#.#6.244.35':445
'22#.#6.82.36':445
'22#.#6.117.169':445
'22#.#6.104.15':139
'22#.#6.163.75':139
'22#.#6.201.90':139
'22#.#6.189.31':139
'22#.36.6.84':139
'22#.#6.184.230':139
'22#.#6.117.169':139
'22#.#6.244.35':139
'22#.#6.82.36':139
'22#.#6.228.58':139
'22#.#6.126.176':139
'22#.#6.154.127':139
'22#.#6.154.195':139
'22#.#6.125.157':139
'22#.#6.232.222':139
'22#.#6.238.15':139
'22#.#6.15.234':139
'22#.#6.31.152':139
'22#.#6.173.164':139
'22#.#6.40.72':139
'22#.#6.141.213':139
'22#.#6.25.141':139
'22#.#6.196.229':139
'22#.#6.242.183':139
'22#.#6.30.225':139
'22#.#6.130.144':139
'22#.#6.68.15':139
'22#.#6.43.65':139
'22#.36.15.9':139
'22#.#6.218.167':139
'22#.#6.126.242':139
'22#.#6.193.30':139
'22#.#6.59.56':139
'22#.#6.151.108':139
'22#.#6.25.151':139
'22#.#6.108.7':139
'22#.#6.160.196':139
'22#.#6.253.188':139
'22#.#6.111.24':139
'22#.#6.55.248':139
'22#.#6.122.119':139
'22#.#6.193.230':139
'22#.#6.11.122':139
'22#.#6.30.225':445
'22#.#6.68.198':445
'22#.#6.115.57':445
'22#.#6.250.145':445
'22#.#6.163.247':445
'22#.#6.106.196':445
'22#.#6.104.1':445
'22#.#6.221.103':445
'22#.#6.43.176':445
'22#.#6.183.218':445
'22#.#6.65.102':445
'22#.#6.51.175':445
'22#.#6.239.182':139
'22#.#6.26.70':139
'22#.#6.182.239':139
'22#.#6.214.220':139
'22#.#6.87.139':139
'22#.#6.137.222':139
'22#.#6.36.183':445
'22#.#6.108.102':139
'22#.#6.31.57':139
'22#.#6.86.157':139
'22#.#6.195.174':139
'22#.#6.138.215':139
'22#.#6.196.33':139
'22#.#6.246.179':139
'22#.#6.170.40':139
'22#.#6.30.78':139
'22#.#6.59.30':139
'22#.#6.77.160':139
'22#.#6.73.54':139
'22#.#6.174.195':139
'22#.#6.180.90':139
'22#.#6.239.182':445
'22#.#6.26.70':445
'22#.#6.182.239':445
'22#.#6.214.220':445
'22#.#6.87.139':445
'22#.#6.137.222':445
'22#.36.66.4':139
'22#.#6.108.102':445
'22#.#6.31.57':445
'22#.#6.86.157':445
'22#.#6.221.103':139
'22#.#6.34.161':445
'22#.#6.93.253':445
'22#.#6.6.180':445
'22#.#6.162.147':445
'22#.#6.137.126':445
'22#.#6.15.234':9988
'22#.#6.40.72':9988
'22#.#6.238.15':9988
'22#.#6.232.222':9988
'22#.#6.154.195':9988
'22#.#6.29.126':445
'22#.#6.193.30':445
'22#.#6.218.167':445
'22#.#6.126.242':445
'22#.#6.196.229':445
'22#.#6.242.183':445
'22#.#6.47.104':445
'22#.#6.36.209':445
'22#.#6.104.15':445
'22#.#6.43.65':445
'22#.36.15.9':445
'22#.#6.250.145':139
'22#.#6.68.198':139
'22#.#6.106.196':139
'22#.#6.51.175':139
'22#.#6.163.247':139
'22#.#6.43.176':139
'22#.#6.104.1':139
'22#.#6.65.102':139
'22#.#6.115.57':139
'22#.#6.183.218':139
'22#.#6.36.183':139
'22#.#6.25.151':9988
'22#.#6.160.196':9988
'22#.#6.126.176':9988
'22#.#6.31.152':9988
'22#.#6.173.164':9988
'22#.#6.55.248':9988
'22#.#6.59.56':9988
'22#.#6.111.24':9988
'22#.#6.193.230':9988
'22#.#6.11.122':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней