Trojan.Starman.6393

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1cce.dir00\svchost.exe.mdmp 16325836412032260

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1cce.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#85.36.148':139
'22#.#85.27.116':139
'22#.#85.148.98':139
'22#.#85.22.152':139
'22#.#85.5.10':139
'22#.#85.224.244':139
'22#.#85.6.185':139
'22#.#85.67.71':139
'22#.#85.78.80':139
'22#.#85.4.150':139
'22#.#85.158.186':139
'22#.#85.22.31':445
'22#.#85.97.12':445
'22#.#85.75.248':445
'22#.#85.130.120':445
'22#.#85.22.0':445
'22#.#85.84.229':139
'22#.#85.41.30':139
'22#.#85.52.240':139
'22#.#85.131.158':445
'22#.#85.112.131':139
'22#.#85.78.80':445
'22#.#85.4.150':445
'22#.#85.27.116':445
'22#.#85.148.98':445
'22#.#85.36.148':445
'22#.#85.8.172':445
'22#.#85.100.171':445
'22#.#85.6.185':445
'22#.#85.67.71':445
'22#.#85.224.244':445
'22#.#85.5.10':445
'22#.#85.90.19':139
'22#.#85.112.131':445
'22#.#85.194.245':139
'22#.#85.8.172':139
'22#.#85.100.171':139
'22#.#85.158.186':445
'22#.#85.22.152':445
'22#.#85.41.30':445
'22#.#85.52.240':445
'22#.#85.84.229':445
'22#.#85.120.206':445
'22#.#85.22.31':139
'22#.#85.97.12':139
'22#.#85.75.248':139
'22#.#85.130.120':139
'22#.#85.22.0':139
'22#.#85.46.72':445
'22#.#85.206.37':445
'22#.#85.204.32':445
'22#.#85.131.158':139
'22#.#85.115.239':445
'22#.#85.120.206':139
'22#.#85.107.193':139
'22#.#85.131.169':139
'22#.#85.62.232':139
'22#.#85.225.16':139
'22#.#85.138.21':139
'22#.#85.119.102':139
'22#.#85.206.157':139
'22#.#85.80.8':139
'22#.#85.136.176':139
'22#.#85.119.143':139
'22#.#85.107.193':445
'22#.#85.131.169':445
'22#.#85.62.232':445
'22#.#85.225.16':445
'22#.#85.138.21':445
'22#.#85.119.102':445
'22#.#85.206.157':445
'22#.#85.80.8':445
'22#.#85.136.176':445
'22#.#85.119.143':445
'22#.#85.17.146':445
'22#.#85.61.44':445
'22#.#85.237.109':445
'22#.#85.61.22':445
'22#.#85.100.93':445
'22#.#85.33.173':445
'22#.#85.52.119':445
'22#.#85.210.4':445
'22#.#85.35.90':445
'22#.#85.143.136':445
'22#.#85.104.166':445
'22#.#85.212.38':445
'22#.#85.41.53':445
'22#.#85.38.69':445
'22#.#85.212.149':445
'22#.#85.18.26':445
'22#.#85.198.170':445
'22#.#85.158.101':445
'22#.#85.170.253':445
'22#.#85.92.88':445
'22#.#85.79.94':445
'22#.#85.11.136':445
'22#.#85.224.140':445
'22#.#85.138.205':445
'22#.#85.57.249':445
'22#.#85.248.111':445
'22#.#85.127.8':445
'22#.#85.76.171':445
'22#.#85.96.190':445
'22#.#85.19.160':445
'22#.#85.18.217':445
'22#.#85.161.18':445
'22#.#85.142.165':139
'22#.#85.231.13':139
'22#.#85.139.40':139
'22#.#85.83.6':139
'22#.#85.180.106':139
'22#.#85.144.84':139
'22#.#85.79.35':139
'22#.#85.16.104':139
'22#.#85.45.145':139
'22#.#85.158.219':139
'22#.#85.71.157':139
'22#.#85.19.173':139
'22#.#85.139.91':139
'22#.#85.18.25':139
'22#.#85.34.115':445
'22#.#85.197.119':445
'22#.#85.171.24':139
'22#.#85.9.163':139
'22#.#85.71.96':139
'22#.#85.225.191':139
'22#.#85.84.103':139
'22#.#85.45.45':445
'22#.#85.224.140':139
'22#.#85.138.205':139
'22#.#85.57.249':139
'22#.#85.248.111':139
'22#.#85.127.8':139
'22#.#85.76.171':139
'22#.#85.96.190':139
'22#.#85.19.160':139
'22#.#85.18.217':139
'22#.#85.161.18':139
'22#.#85.45.45':139
'22#.#85.61.167':139
'22#.#85.62.166':139
'22#.#85.167.24':139
'22#.#85.194.245':445
'22#.#85.90.19':445
'22#.#85.51.7':139
'22#.#85.18.145':139
'22#.#85.224.186':139
'22#.#85.136.62':139
'22#.#85.149.214':139
'22#.#85.61.167':445
'22#.#85.62.166':445
'22#.#85.167.24':445
'22#.#85.34.115':139
'22#.#85.197.119':139
'22#.#85.51.7':445
'22#.#85.18.145':445
'22#.#85.224.186':445
'22#.#85.136.62':445
'22#.#85.149.214':445
'22#.#85.158.101':139
'22#.#85.38.69':139
'22#.#85.212.38':139
'22#.#85.18.26':139
'22#.#85.11.136':139
'22#.#85.212.149':139
'22#.#85.170.253':139
'22#.#85.198.170':139
'22#.#85.79.94':139
'22#.#85.41.53':139
'22#.#85.92.88':139
'22#.#85.17.146':139
'22#.#85.54.247':445
'22#.#85.149.142':445
'22#.#85.46.87':445
'22#.#85.158.239':445
'22#.#85.246.172':445
'22#.#85.58.239':445
'22#.#85.54.59':445
'22#.#85.239.25':445
'22#.#85.159.214':445
'22#.#85.135.139':445
'22#.#85.210.234':445
'22#.#85.111.193':139
'22#.#85.153.23':139
'22#.#85.221.249':139
'22#.#85.178.82':139
'22#.#85.194.174':139
'22#.#85.79.213':445
'22#.#85.177.84':445
'22#.#85.89.253':139
'22#.#85.169.119':139
'22#.#85.107.54':139
'22#.#85.132.217':445
'22#.#85.202.233':445
'22#.#85.218.107':445
'22#.#85.117.169':445
'22#.#85.107.21':445
'22#.#85.176.175':445
'22#.#85.201.74':445
'22#.#85.234.114':445
'22#.#85.201.182':445
'22#.#85.49.40':445
'22#.#85.139.72':445
'22#.#85.106.63':445
'22#.#85.142.31':445
'22#.#85.239.116':445
'22#.#85.138.6':445
'22#.#85.1.12':445
'22#.#85.232.16':445
'22#.#85.232.170':445
'22#.#85.9.43':445
'22#.#85.117.114':445
'22#.#85.107.117':445
'22#.#85.22.147':139
'22#.#85.1.12':139
'22#.#85.239.116':139
'22#.#85.138.6':139
'22#.#85.58.239':139
'22#.#85.54.59':139
'22#.#85.107.117':139
'22#.#85.9.43':139
'22#.#85.117.114':139
'22#.#85.106.63':139
'22#.#85.142.31':139
'22#.#85.239.25':139
'22#.#85.158.239':139
'22#.#85.210.234':139
'22#.#85.79.213':139
'22#.#85.177.84':139
'22#.#85.246.172':139
'22#.#85.159.214':139
'22#.#85.135.139':139
'22#.#85.149.142':139
'22#.#85.46.87':139
'22#.#85.54.247':139
'22#.#85.123.180':139
'22#.#85.163.64':139
'22#.#85.180.138':139
'22#.#85.176.175':139
'22#.#85.201.74':139
'22#.#85.185.162':139
'22#.#85.95.213':139
'22#.#85.27.64':139
'22#.#85.98.251':139
'22#.#85.64.113':139
'22#.#85.234.114':139
'22#.#85.117.169':139
'22#.#85.107.21':139
'22#.#85.139.72':139
'22#.#85.232.16':139
'22#.#85.232.170':139
'22#.#85.201.182':139
'22#.#85.49.40':139
'22#.#85.202.233':139
'22#.#85.218.107':139
'22#.#85.132.217':139
'22#.#85.152.221':445
'22#.#85.82.206':445
'22#.#85.57.61':445
'22#.#85.44.91':445
'22#.#85.191.44':445
'22#.#85.100.234':445
'22#.#85.165.140':445
'22#.#85.233.253':445
'22#.#85.80.19':445
'22#.#85.253.228':445
'22#.#85.202.99':445
'22#.#85.199.108':139
'22#.#85.82.65':139
'22#.#85.166.156':139
'22#.#85.100.234':139
'22#.#85.165.140':139
'22#.#85.12.168':139
'22#.#85.3.129':445
'22#.#85.118.241':139
'22#.#85.56.241':139
'22#.#85.194.79':139
'22#.#85.61.44':139
'22#.#85.237.109':139
'22#.#85.61.22':139
'22#.#85.100.93':139
'22#.#85.33.173':139
'22#.#85.52.119':139
'22#.#85.210.4':139
'22#.#85.35.90':139
'22#.#85.143.136':139
'22#.#85.104.166':139
'22#.#85.206.37':139
'22#.#85.56.241':445
'22#.#85.194.79':445
'22#.#85.82.65':445
'22#.#85.166.156':445
'22#.#85.199.108':445
'22#.#85.204.32':139
'22#.#85.46.72':139
'22#.#85.115.239':139
'22#.#85.118.241':445
'22#.#85.12.168':445
'22#.#85.233.253':139
'22#.#85.169.119':445
'22#.#85.107.54':445
'22#.#85.153.23':445
'22#.#85.221.249':445
'22#.#85.111.193':445
'22#.#85.177.84':9988
'22#.#85.210.234':9988
'22#.#85.46.87':9988
'22#.#85.89.253':445
'22#.#85.158.239':9988
'22#.#85.194.174':445
'22#.#85.98.251':445
'22#.#85.64.113':445
'22#.#85.163.64':445
'22#.#85.180.138':445
'22#.#85.123.180':445
'22#.#85.22.147':445
'22#.#85.178.82':445
'22#.#85.95.213':445
'22#.#85.27.64':445
'22#.#85.185.162':445
'22#.#85.44.91':139
'22#.#85.191.44':139
'22#.#85.202.99':139
'22#.#85.218.107':9988
'22#.#85.3.129':139
'22#.#85.80.19':139
'22#.#85.253.228':139
'22#.#85.82.206':139
'22#.#85.57.61':139
'22#.#85.152.221':139
'22#.#85.232.16':9988
'22#.#85.159.214':9988
'22#.#85.135.139':9988
'22#.#85.149.142':9988
'22#.#85.79.213':9988
'22#.#85.54.247':9988
'22#.#85.107.117':9988
'22#.#85.9.43':9988
'22#.#85.117.114':9988
'22#.#85.106.63':9988
'22#.#85.142.31':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней