Trojan.Starman.6054

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc5f1.dir00\svchost.exe.mdmp 16325836412032276

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc5f1.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#5.22.211':445
'22#.#5.73.199':445
'22#.#5.165.49':445
'22#.#5.210.223':445
'22#.#5.34.27':445
'22#.#5.104.231':445
'22#.#5.112.54':445
'22#.#5.104.231':139
'22#.#5.112.54':139
'22#.#5.125.227':445
'22#.75.1.59':445
'22#.#5.154.8':445
'22#.#5.163.44':445
'22#.#5.58.163':445
'22#.#5.105.140':445
'22#.#5.183.12':445
'22#.#5.116.183':445
'22#.#5.188.201':445
'22#.#5.203.210':445
'22#.#5.152.43':139
'22#.#5.1.109':139
'22#.#5.119.62':139
'22#.#5.193.2':139
'22#.#5.109.193':139
'22#.#5.242.199':139
'22#.#5.234.134':139
'22#.#5.247.47':139
'22#.#5.237.38':139
'22#.#5.4.232':139
'22#.75.2.0':139
'22#.#5.67.34':139
'22#.#5.199.139':139
'22#.#5.249.151':139
'22#.#5.159.249':139
'22#.#5.133.132':139
'22#.#5.179.17':139
'22#.#5.187.8':139
'22#.#5.56.246':139
'22#.75.79.5':139
'22#.#5.19.49':445
'22#.#5.90.142':445
'22#.#5.42.235':445
'22#.#5.76.28':445
'22#.#5.15.76':445
'22#.#5.212.206':445
'22#.#5.104.196':445
'22#.#5.39.104':445
'22#.#5.106.103':445
'22#.#5.196.106':445
'22#.#5.15.36':445
'22#.#5.210.223':139
'22#.#5.22.211':139
'22#.#5.125.227':139
'22#.#5.165.49':139
'22#.#5.73.199':139
'22#.#5.121.84':445
'22#.#5.140.35':445
'22#.#5.34.27':139
'22#.#5.57.177':445
'22#.#5.102.104':445
'22#.#5.145.57':445
'22#.#5.52.145':445
'22#.#5.141.132':445
'22#.#5.27.88':445
'22#.75.33.4':445
'22#.#5.13.21':445
'22#.#5.177.253':445
'22#.#5.194.116':445
'22#.#5.70.54':445
'22#.#5.130.183':445
'22#.#5.148.218':445
'22#.#5.124.113':445
'22#.#5.19.99':445
'22#.#5.22.73':445
'22#.#5.103.124':445
'22#.#5.48.109':445
'22#.#5.169.138':445
'22#.#5.132.87':445
'22#.#5.131.94':445
'22#.#5.20.247':139
'22#.#5.28.15':445
'22#.#5.230.107':445
'22#.#5.35.23':445
'22#.#5.204.18':445
'22#.#5.175.105':445
'22#.#5.212.4':445
'22#.#5.68.242':445
'22#.#5.113.32':445
'22#.#5.140.47':445
'22#.#5.227.138':445
'22#.#5.119.62':445
'22#.#5.242.199':445
'22#.#5.109.193':445
'22#.#5.1.109':445
'22#.#5.237.38':445
'22#.#5.247.47':445
'22#.#5.20.247':445
'22#.#5.4.232':445
'22#.#5.234.134':445
'22#.#5.136.63':445
'22#.#5.189.18':445
'22#.#5.218.88':445
'22#.#5.22.226':445
'22#.#5.132.56':445
'22#.#5.47.157':445
'22#.#5.171.72':139
'22#.#5.94.17':139
'22#.#5.49.62':445
'22#.#5.149.98':445
'22#.#5.113.98':445
'22#.#5.99.145':445
'22#.#5.124.210':445
'22#.#5.17.105':445
'22#.#5.50.85':445
'22#.#5.141.64':445
'22#.#5.222.155':445
'22#.#5.61.30':445
'22#.#5.32.187':445
'22#.#5.155.223':445
'22#.#5.193.2':445
'22#.#5.50.85':139
'22#.#5.99.145':139
'22#.#5.136.63':139
'22#.#5.17.105':139
'22#.#5.124.210':139
'22#.#5.155.223':139
'22#.#5.222.155':139
'22#.#5.141.64':139
'22#.#5.32.187':139
'22#.#5.68.242':139
'22#.#5.204.18':139
'22#.#5.28.15':139
'22#.#5.227.138':139
'22#.#5.35.23':139
'22#.#5.230.107':139
'22#.#5.140.47':139
'22#.#5.212.4':139
'22#.#5.175.105':139
'22#.#5.113.32':139
'22#.#5.61.30':139
'22#.#5.199.139':445
'22#.#5.133.132':445
'22#.#5.159.249':445
'22#.#5.67.34':445
'22#.#5.56.246':445
'22#.#5.187.8':445
'22#.75.2.0':445
'22#.75.79.5':445
'22#.#5.179.17':445
'22#.#5.249.151':445
'22#.#5.132.56':139
'22#.#5.189.18':139
'22#.#5.113.98':139
'22#.#5.22.226':139
'22#.#5.218.88':139
'22#.#5.149.98':139
'22#.#5.152.43':445
'22#.#5.47.157':139
'22#.#5.49.62':139
'22#.#5.116.183':139
'22#.#5.238.227':445
'22#.#5.209.132':445
'22#.#5.56.11':139
'22#.#5.69.245':445
'22#.#5.9.227':445
'22#.#5.29.188':445
'22#.#5.37.102':445
'22#.#5.151.74':445
'22#.#5.72.229':445
'22#.#5.99.29':139
'22#.#5.197.224':139
'22#.75.95.7':139
'22#.#5.150.2':139
'22#.#5.14.252':139
'22#.#5.241.151':139
'22#.#5.210.116':139
'22#.#5.86.151':139
'22#.#5.168.152':139
'22#.#5.172.218':139
'22#.#5.69.18':445
'22#.#5.225.145':445
'22#.#5.68.117':445
'22#.#5.103.93':445
'22#.#5.174.3':445
'22#.#5.133.12':445
'22#.#5.5.104':445
'22#.#5.52.117':445
'22#.#5.103.129':445
'22#.#5.39.111':445
'22#.#5.166.237':445
'22#.#5.122.209':445
'22#.#5.68.212':445
'22#.#5.132.79':445
'22#.#5.11.99':445
'22#.#5.212.82':445
'22#.#5.119.23':445
'22#.#5.5.102':445
'22#.#5.66.69':445
'22#.#5.24.246':445
'22#.#5.11.206':139
'22#.#5.212.82':139
'22#.#5.68.212':139
'22#.#5.69.18':139
'22#.#5.11.99':139
'22#.#5.66.69':139
'22#.#5.5.102':139
'22#.#5.166.237':139
'22#.#5.24.246':139
'22#.#5.119.23':139
'22#.#5.72.229':139
'22#.#5.238.227':139
'22#.#5.122.209':139
'22#.#5.132.79':139
'22#.#5.37.102':139
'22#.#5.151.74':139
'22#.#5.9.227':139
'22#.#5.29.188':139
'22#.#5.209.132':139
'22#.#5.69.245':139
'22#.#5.103.93':139
'22#.#5.52.78':139
'22#.#5.88.25':139
'22#.#5.233.112':139
'22#.#5.220.150':139
'22#.#5.252.87':139
'22#.#5.152.31':139
'22#.#5.158.51':139
'22#.#5.195.17':139
'22#.#5.247.157':139
'22#.#5.100.102':139
'22#.#5.68.117':139
'22#.#5.133.12':139
'22#.#5.174.3':139
'22#.#5.225.145':139
'22#.#5.103.129':139
'22#.#5.52.117':139
'22#.#5.139.52':139
'22#.#5.39.111':139
'22#.#5.5.104':139
'22#.#5.139.52':445
'22#.#5.22.73':139
'22#.#5.148.218':139
'22#.#5.102.104':139
'22#.#5.19.99':139
'22#.#5.124.113':139
'22#.#5.131.94':139
'22#.#5.48.109':139
'22#.#5.103.124':139
'22#.#5.132.87':139
'22#.#5.39.104':139
'22#.#5.15.76':139
'22#.#5.90.142':139
'22#.#5.15.36':139
'22#.#5.76.28':139
'22#.#5.42.235':139
'22#.#5.196.106':139
'22#.#5.104.196':139
'22#.#5.212.206':139
'22#.#5.106.103':139
'22#.#5.169.138':139
'22#.#5.58.163':139
'22#.75.1.59':139
'22#.#5.19.49':139
'22#.#5.163.44':139
'22#.#5.154.8':139
'22#.#5.203.210':139
'22#.#5.183.12':139
'22#.#5.105.140':139
'22#.#5.188.201':139
'22#.#5.177.253':139
'22#.#5.27.88':139
'22#.#5.145.57':139
'22#.#5.130.183':139
'22#.#5.141.132':139
'22#.#5.52.145':139
'22#.#5.70.54':139
'22#.#5.13.21':139
'22#.75.33.4':139
'22#.#5.194.116':139
'22#.#5.140.35':139
'22#.#5.14.252':445
'22#.#5.197.224':445
'22#.#5.11.206':445
'22#.#5.150.2':445
'22#.75.95.7':445
'22#.#5.172.218':445
'22#.#5.210.116':445
'22#.#5.241.151':445
'22#.#5.168.152':445
'22#.#5.158.51':445
'22#.#5.220.150':445
'22#.#5.52.78':445
'22#.#5.100.102':445
'22#.#5.233.112':445
'22#.#5.88.25':445
'22#.#5.247.157':445
'22#.#5.152.31':445
'22#.#5.252.87':445
'22#.#5.195.17':445
'22#.#5.86.151':445
'22#.#5.252.87':9988
'22#.#5.195.17':9988
'22#.#5.52.117':9988
'22#.#5.139.52':9988
'22#.#5.247.157':9988
'22#.#5.57.177':139
'22#.#5.121.84':139
'22#.#5.152.31':9988
'22#.#5.210.116':9988
'22#.#5.103.129':9988
'22#.#5.69.245':9988
'22#.#5.29.188':9988
'22#.#5.99.29':445
'22#.#5.56.11':445
'22#.#5.151.74':9988
'22#.#5.133.12':9988
'22#.#5.39.111':9988
'22#.#5.5.102':9988
'22#.#5.103.93':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней