Trojan.Starman.6515

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER5472.dir00\svchost.exe.mdmp 16325836412032160

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5472.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#38.218.139':139
'22#.#38.124.103':139
'22#.#38.195.3':139
'22#.#38.79.250':139
'22#.#38.3.83':139
'22#.#38.4.189':139
'22#.#38.116.135':139
'22#.#38.214.213':139
'22#.#38.168.6':139
'22#.#38.213.167':139
'22#.#38.145.69':139
'22#.#38.144.127':139
'22#.#38.77.206':139
'22#.#38.115.186':139
'22#.#38.0.172':445
'22#.#38.31.71':445
'22#.#38.197.129':139
'22#.#38.222.179':139
'22#.#38.54.125':139
'22#.#38.38.15':139
'22#.#38.125.8':139
'22#.#38.252.65':139
'22#.#38.79.250':445
'22#.#38.3.83':445
'22#.#38.145.69':445
'22#.#38.197.129':445
'22#.#38.222.179':445
'22#.#38.168.6':445
'22#.#38.213.167':445
'22#.#38.124.103':445
'22#.#38.195.3':445
'22#.#38.218.139':445
'22#.#38.54.125':445
'22#.#38.46.79':139
'22#.#38.33.42':139
'22#.#38.52.81':139
'22#.#38.39.114':139
'22#.#38.102.33':139
'22#.#38.38.15':445
'22#.#38.125.8':445
'22#.#38.77.206':445
'22#.#38.115.186':445
'22#.#38.144.127':445
'22#.#38.117.8':139
'22#.#38.255.198':139
'22#.#38.246.20':139
'22#.#38.46.237':139
'22#.#38.21.97':139
'22#.#38.48.83':445
'22#.#38.121.83':445
'22#.#38.31.71':139
'22#.#38.252.220':139
'22#.#38.0.172':139
'22#.#38.5.148':139
'22#.#38.84.186':139
'22#.#38.130.66':139
'22#.#38.121.59':139
'22#.#38.7.220':139
'22#.#38.83.94':139
'22#.#38.13.107':139
'22#.#38.157.51':139
'22#.#38.52.251':139
'22#.#38.85.71':139
'22#.#38.121.210':139
'22#.#38.137.70':445
'22#.#38.5.148':445
'22#.#38.46.237':445
'22#.#38.157.51':445
'22#.#38.52.251':445
'22#.#38.13.107':445
'22#.#38.255.198':445
'22#.#38.252.220':445
'22#.#38.117.8':445
'22#.#38.21.97':445
'22#.#38.246.20':445
'22#.#38.121.210':445
'22#.#38.219.163':445
'22#.#38.7.220':445
'22#.#38.32.172':445
'22#.#38.89.44':445
'22#.#38.21.108':445
'22#.#38.130.66':445
'22#.#38.85.71':445
'22#.#38.84.186':445
'22#.#38.83.94':445
'22#.#38.121.59':445
'22#.#38.92.85':445
'22#.#38.67.131':445
'22#.#38.8.43':445
'22#.#38.160.12':445
'22#.#38.185.27':445
'22#.#38.36.55':139
'22#.#38.93.35':139
'22#.#38.46.114':139
'22#.#38.10.34':445
'22#.#38.66.102':445
'22#.#38.176.174':445
'22#.#38.166.10':445
'22#.#38.30.178':445
'22#.#38.208.17':445
'22#.#38.174.123':445
'22#.#38.121.211':445
'22#.#38.137.225':445
'22#.#38.174.217':445
'22#.#38.240.93':445
'22#.#38.24.104':445
'22#.#38.83.35':445
'22#.#38.244.93':139
'22#.#38.62.118':139
'22#.#38.204.5':139
'22#.#38.155.86':139
'22#.#38.183.97':139
'22#.#38.157.91':139
'22#.#38.36.136':139
'22#.#38.16.56':139
'22#.#38.106.56':139
'22#.#38.8.241':139
'22#.#38.26.74':139
'22#.#38.93.247':139
'22#.#38.249.240':139
'22#.#38.74.90':139
'22#.#38.101.41':139
'22#.#38.43.7':139
'22#.#38.154.3':139
'22#.#38.90.2':139
'22#.#38.195.148':139
'22#.#38.156.115':139
'22#.#38.5.213':139
'22#.#38.115.225':139
'22#.#38.133.197':139
'22#.#38.102.176':139
'22#.#38.50.243':139
'22#.#38.58.136':139
'22#.#38.88.158':139
'22#.#38.208.17':139
'22#.#38.166.10':139
'22#.#38.121.211':139
'22#.#38.59.49':139
'22#.#38.174.123':139
'22#.#38.135.247':139
'22#.#38.252.65':445
'22#.#38.39.114':445
'22#.#38.116.135':445
'22#.#38.214.213':445
'22#.#38.4.189':445
'22#.#38.33.42':445
'22#.#38.148.41':139
'22#.#38.46.79':445
'22#.#38.102.33':445
'22#.#38.52.81':445
'22#.#38.30.178':139
'22#.#38.135.247':445
'22#.#38.58.136':445
'22#.#38.148.41':445
'22#.#38.10.34':139
'22#.#38.66.102':139
'22#.#38.102.176':445
'22#.#38.59.49':445
'22#.#38.133.197':445
'22#.#38.88.158':445
'22#.#38.50.243':445
'22#.#38.67.131':139
'22#.#38.137.225':139
'22#.#38.174.217':139
'22#.#38.240.93':139
'22#.#38.24.104':139
'22#.#38.83.35':139
'22#.#38.8.43':139
'22#.#38.92.85':139
'22#.#38.185.27':139
'22#.#38.176.174':139
'22#.#38.160.12':139
'22#.#38.66.241':445
'22#.#38.218.37':445
'22#.#38.147.39':445
'22#.#38.103.146':445
'22#.#38.242.189':445
'22#.#38.63.190':445
'22#.#38.20.63':445
'22#.#38.190.181':445
'22#.#38.72.27':445
'22#.#38.181.71':445
'22#.#38.48.130':445
'22#.#38.28.207':139
'22#.#38.13.214':139
'22#.#38.206.105':139
'22#.#38.205.119':139
'22#.#38.192.138':139
'22#.#38.150.130':445
'22#.#38.17.91':445
'22#.#38.9.54':139
'22#.#38.85.11':139
'22#.#38.54.177':139
'22#.#38.47.20':445
'22#.#38.60.0':445
'22#.#38.170.139':445
'22#.#38.96.43':445
'22#.#38.239.209':445
'22#.#38.123.127':445
'22#.#38.210.150':445
'22#.#38.230.116':445
'22#.#38.151.1':445
'22#.#38.140.114':445
'22#.#38.29.4':445
'22#.#38.91.130':445
'22#.#38.112.171':445
'22#.#38.2.147':445
'22#.#38.130.156':445
'22#.#38.213.17':445
'22#.#38.144.157':445
'22#.#38.198.3':445
'22#.#38.37.229':445
'22#.#38.38.118':445
'22#.#38.184.196':445
'22#.#38.43.183':445
'22#.#38.213.17':139
'22#.#38.144.157':139
'22#.#38.47.20':139
'22#.#38.63.190':139
'22#.#38.20.63':139
'22#.#38.184.196':139
'22#.#38.43.183':139
'22#.#38.112.171':139
'22#.#38.130.156':139
'22#.#38.2.147':139
'22#.#38.190.181':139
'22#.#38.103.146':139
'22#.#38.17.91':139
'22#.#38.150.130':139
'22#.#38.48.130':139
'22#.#38.242.189':139
'22#.#38.72.27':139
'22#.#38.181.71':139
'22#.#38.218.37':139
'22#.#38.147.39':139
'22#.#38.66.241':139
'22#.#38.38.118':139
'22#.#38.174.104':139
'22#.#38.170.29':139
'22#.#38.253.49':139
'22#.#38.210.150':139
'22#.#38.230.116':139
'22#.#38.90.141':139
'22#.#38.10.28':139
'22#.#38.7.95':139
'22#.#38.93.114':139
'22#.#38.126.198':139
'22#.#38.151.1':139
'22#.#38.239.209':139
'22#.#38.96.43':139
'22#.#38.91.130':139
'22#.#38.198.3':139
'22#.#38.37.229':139
'22#.#38.140.114':139
'22#.#38.29.4':139
'22#.#38.170.139':139
'22#.#38.123.127':139
'22#.#38.60.0':139
'22#.#38.79.204':445
'22#.#38.71.146':445
'22#.#38.30.83':445
'22#.#38.202.9':445
'22#.#38.191.60':445
'22#.#38.193.252':445
'22#.#38.166.193':445
'22#.#38.252.124':445
'22#.#38.183.88':445
'22#.#38.54.245':445
'22#.#38.160.53':139
'22#.#38.64.118':139
'22#.#38.59.64':139
'22#.#38.53.55':139
'22#.#38.36.181':139
'22#.#38.202.13':139
'22#.#38.103.72':139
'22#.#38.218.95':139
'22#.#38.103.78':139
'22#.#38.5.107':139
'22#.#38.254.54':139
'22#.#38.179.241':445
'22#.#38.48.83':139
'22#.#38.121.83':139
'22#.#38.160.53':445
'22#.#38.103.72':445
'22#.#38.218.95':445
'22#.#38.32.172':139
'22#.#38.219.163':139
'22#.#38.21.108':139
'22#.#38.137.70':139
'22#.#38.89.44':139
'22#.#38.103.78':445
'22#.#38.36.181':445
'22#.#38.202.13':445
'22#.#38.181.62':445
'22#.#38.213.34':445
'22#.#38.62.110':445
'22#.#38.5.107':445
'22#.#38.254.54':445
'22#.#38.59.64':445
'22#.#38.53.55':445
'22#.#38.64.118':445
'22#.#38.54.177':445
'22#.#38.9.54':445
'22#.#38.85.11':445
'22#.#38.28.207':445
'22#.#38.13.214':445
'22#.#38.17.91':9988
'22#.#38.218.37':9988
'22#.#38.48.130':9988
'22#.#38.103.146':9988
'22#.#38.150.130':9988
'22#.#38.206.105':445
'22#.#38.93.114':445
'22#.#38.126.198':445
'22#.#38.170.29':445
'22#.#38.253.49':445
'22#.#38.174.104':445
'22#.#38.205.119':445
'22#.#38.192.138':445
'22#.#38.10.28':445
'22#.#38.7.95':445
'22#.#38.90.141':445
'22#.#38.190.181':9988
'22#.#38.252.124':139
'22#.#38.193.252':139
'22#.#38.54.245':139
'22#.#38.71.146':139
'22#.#38.183.88':139
'22#.#38.62.110':139
'22#.#38.181.62':139
'22#.#38.213.34':139
'22#.#38.166.193':139
'22#.#38.179.241':139
'22#.#38.79.204':139
'22#.#38.37.229':9988
'22#.#38.60.0':9988
'22#.#38.38.118':9988
'22#.#38.213.17':9988
'22#.#38.184.196':9988
'22#.#38.191.60':139
'22#.#38.30.83':139
'22#.#38.202.9':139
'22#.#38.210.150':9988
'22#.#38.239.209':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней