Trojan.Starman.6528

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER366e.dir00\svchost.exe.mdmp 16325836412032316

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER366e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#70.203.98':139
'22#.#70.194.84':139
'22#.#70.1.126':139
'22#.#70.92.61':445
'22#.#70.127.89':139
'22#.#70.81.0':139
'22#.#70.134.20':139
'22#.#70.176.14':139
'22#.#70.237.193':139
'22#.#70.182.166':139
'22#.#70.139.19':445
'22#.#70.182.130':445
'22#.#70.87.93':445
'22#.#70.117.13':445
'22#.#70.112.205':445
'22#.#70.115.177':445
'22#.#70.167.75':445
'22#.#70.228.46':445
'22#.#70.145.49':445
'22#.#70.127.70':445
'22#.#70.200.0':445
'22#.#70.50.134':445
'22#.#70.234.58':445
'22#.#70.136.104':445
'22#.#70.81.0':445
'22#.#70.134.20':445
'22#.#70.183.39':139
'22#.#70.224.77':139
'22#.#70.233.229':139
'22#.170.5.0':445
'22#.#70.54.68':139
'22#.#70.176.14':445
'22#.170.5.0':139
'22#.#70.127.89':445
'22#.#70.234.58':139
'22#.#70.136.104':139
'22#.#70.50.134':139
'22#.#70.237.193':445
'22#.#70.182.166':445
'22#.#70.194.84':445
'22#.#70.1.126':445
'22#.#70.203.98':445
'22#.#70.139.19':139
'22#.#70.92.61':139
'22#.#70.228.46':139
'22#.#70.145.49':139
'22#.#70.167.75':139
'22#.#70.55.168':445
'22#.#70.146.233':445
'22#.#70.252.220':445
'22#.#70.228.70':445
'22#.#70.177.170':445
'22#.#70.200.0':139
'22#.#70.205.103':139
'22#.#70.112.205':139
'22#.#70.163.139':139
'22#.#70.222.2':139
'22#.#70.127.146':139
'22#.#70.87.93':139
'22#.#70.127.70':139
'22#.#70.182.130':139
'22#.#70.115.177':139
'22#.#70.117.13':139
'22#.#70.28.173':445
'22#.#70.29.137':445
'22#.#70.200.190':445
'22#.#70.202.116':445
'22#.#70.190.201':445
'22#.#70.163.139':445
'22#.#70.205.103':445
'22#.#70.127.146':445
'22#.#70.214.59':445
'22#.#70.222.2':445
'22#.#70.116.176':445
'22#.#70.10.238':445
'22#.#70.159.222':445
'22#.#70.93.125':445
'22#.#70.132.167':445
'22#.#70.39.166':445
'22#.#70.52.222':445
'22#.#70.176.113':445
'22#.#70.158.122':445
'22#.#70.190.159':445
'22#.#70.122.190':445
'22#.#70.30.72':139
'22#.#70.51.133':445
'22#.#70.46.1':445
'22#.#70.200.201':445
'22#.#70.216.29':445
'22#.#70.201.234':445
'22#.#70.60.109':445
'22#.#70.125.60':445
'22#.#70.73.60':445
'22#.#70.74.45':445
'22#.#70.40.21':445
'22#.#70.120.77':445
'22#.#70.2.166':445
'22#.#70.75.3':445
'22#.#70.165.150':445
'22#.#70.49.125':445
'22#.#70.9.239':445
'22#.#70.3.94':445
'22#.#70.199.84':445
'22#.#70.57.26':445
'22#.#70.30.79':445
'22#.#70.88.174':445
'22#.#70.179.184':139
'22#.#70.137.72':139
'22#.#70.45.121':139
'22#.#70.19.208':139
'22#.#70.121.20':139
'22#.#70.181.186':139
'22#.#70.193.221':139
'22#.#70.196.133':139
'22#.#70.1.234':139
'22#.#70.133.2':139
'22#.#70.99.240':139
'22#.#70.244.211':445
'22#.#70.213.7':445
'22#.#70.84.99':445
'22#.#70.22.125':445
'22#.#70.135.16':445
'22#.#70.122.53':139
'22#.#70.81.40':139
'22#.#70.145.53':445
'22#.#70.22.242':445
'22#.#70.9.207':445
'22#.#70.120.77':139
'22#.#70.216.29':139
'22#.#70.199.84':139
'22#.#70.57.26':139
'22#.#70.3.94':139
'22#.#70.46.1':139
'22#.#70.74.45':139
'22#.#70.51.133':139
'22#.#70.201.234':139
'22#.#70.200.201':139
'22#.#70.88.174':139
'22#.#70.111.140':139
'22#.#70.49.125':139
'22#.#70.6.236':139
'22#.#70.126.15':139
'22#.#70.10.237':139
'22#.#70.75.3':139
'22#.#70.30.79':139
'22#.#70.2.166':139
'22#.#70.9.239':139
'22#.#70.165.150':139
'22#.#70.183.39':445
'22#.#70.224.77':445
'22#.#70.233.229':445
'22#.#70.145.53':139
'22#.#70.54.68':445
'22#.#70.6.236':445
'22#.#70.111.140':445
'22#.#70.10.237':445
'22#.#70.30.72':445
'22#.#70.126.15':445
'22#.#70.9.207':139
'22#.#70.125.60':139
'22#.#70.22.125':139
'22#.#70.60.109':139
'22#.#70.40.21':139
'22#.#70.73.60':139
'22#.#70.213.7':139
'22#.#70.22.242':139
'22#.#70.244.211':139
'22#.#70.135.16':139
'22#.#70.84.99':139
'22#.#70.129.214':445
'22#.#70.41.111':445
'22#.#70.207.20':445
'22#.#70.128.13':445
'22#.#70.0.113':445
'22#.#70.135.135':445
'22#.#70.156.193':445
'22#.#70.15.23':445
'22#.#70.90.210':445
'22#.#70.96.2':445
'22#.#70.58.172':445
'22#.#70.190.160':139
'22#.#70.227.238':139
'22#.#70.14.211':139
'22#.#70.243.100':139
'22#.#70.51.75':139
'22#.#70.168.104':139
'22#.#70.1.142':445
'22#.#70.161.67':139
'22#.#70.39.15':139
'22#.#70.60.31':139
'22#.#70.173.235':445
'22#.#70.155.100':445
'22#.#70.18.22':445
'22#.#70.164.104':445
'22#.#70.170.203':445
'22#.#70.86.230':445
'22#.#70.24.87':445
'22#.#70.81.204':445
'22#.#70.148.154':445
'22#.#70.60.169':445
'22#.#70.100.9':445
'22#.#70.101.133':445
'22#.#70.103.111':445
'22#.#70.115.208':445
'22#.#70.17.166':445
'22#.#70.98.17':445
'22#.#70.50.223':445
'22#.#70.140.39':445
'22#.#70.223.139':445
'22#.#70.39.190':445
'22#.#70.140.203':445
'22#.#70.115.208':139
'22#.#70.101.133':139
'22#.#70.98.17':139
'22#.#70.156.193':139
'22#.#70.17.166':139
'22#.#70.223.139':139
'22#.#70.50.223':139
'22#.#70.140.203':139
'22#.#70.103.111':139
'22#.#70.39.190':139
'22#.#70.135.135':139
'22#.#70.58.172':139
'22#.#70.0.113':139
'22#.#70.1.142':139
'22#.#70.128.13':139
'22#.#70.207.20':139
'22#.#70.96.2':139
'22#.#70.15.23':139
'22#.#70.90.210':139
'22#.#70.129.214':139
'22#.#70.41.111':139
'22#.#70.235.24':139
'22#.#70.9.235':139
'22#.#70.181.46':139
'22#.#70.24.87':139
'22#.#70.230.186':139
'22#.#70.116.142':139
'22#.#70.139.89':139
'22#.#70.161.230':139
'22#.#70.19.224':139
'22#.#70.120.7':139
'22#.#70.86.230':139
'22#.#70.170.203':139
'22#.#70.18.22':139
'22#.#70.164.104':139
'22#.#70.140.39':139
'22#.#70.100.9':139
'22#.#70.60.169':139
'22#.#70.81.204':139
'22#.#70.148.154':139
'22#.#70.173.235':139
'22#.#70.155.100':139
'22#.#70.230.186':445
'22#.#70.153.224':445
'22#.#70.230.153':445
'22#.#70.224.166':445
'22#.#70.9.99':445
'22#.#70.93.244':445
'22#.#70.22.71':445
'22#.#70.228.70':139
'22#.#70.196.37':445
'22#.#70.165.105':445
'22#.#70.68.21':445
'22#.#70.141.221':445
'22#.#70.165.105':139
'22#.#70.68.21':139
'22#.#70.230.153':139
'22#.#70.224.166':139
'22#.#70.153.224':139
'22#.#70.113.171':445
'22#.#70.154.116':445
'22#.#70.100.158':445
'22#.#70.196.37':139
'22#.#70.22.71':139
'22#.#70.116.176':139
'22#.#70.202.116':139
'22#.#70.176.113':139
'22#.#70.158.122':139
'22#.#70.52.222':139
'22#.#70.29.137':139
'22#.#70.214.59':139
'22#.#70.28.173':139
'22#.#70.190.201':139
'22#.#70.200.190':139
'22#.#70.122.190':139
'22#.#70.146.233':139
'22#.#70.132.167':139
'22#.#70.55.168':139
'22#.#70.177.170':139
'22#.#70.252.220':139
'22#.#70.159.222':139
'22#.#70.190.159':139
'22#.#70.10.238':139
'22#.#70.39.166':139
'22#.#70.93.125':139
'22#.#70.60.31':445
'22#.#70.161.67':445
'22#.#70.39.15':445
'22#.#70.190.160':445
'22#.#70.227.238':445
'22#.#70.128.13':9988
'22#.#70.1.142':9988
'22#.#70.41.111':9988
'22#.#70.168.104':445
'22#.#70.207.20':9988
'22#.#70.14.211':445
'22#.#70.19.224':445
'22#.#70.120.7':445
'22#.#70.9.235':445
'22#.#70.181.46':445
'22#.#70.235.24':445
'22#.#70.243.100':445
'22#.#70.51.75':445
'22#.#70.116.142':445
'22#.#70.161.230':445
'22#.#70.139.89':445
'22#.#70.155.100':9988
'22#.#70.100.158':139
'22#.#70.164.104':9988
'22#.#70.140.39':9988
'22#.#70.100.9':9988
'22#.#70.9.99':139
'22#.#70.93.244':139
'22#.#70.141.221':139
'22#.#70.113.171':139
'22#.#70.154.116':139
'22#.#70.50.223':9988
'22#.#70.135.135':9988
'22#.#70.156.193':9988
'22#.#70.15.23':9988
'22#.#70.90.210':9988
'22#.#70.96.2':9988
'22#.#70.140.203':9988
'22#.#70.223.139':9988
'22#.#70.39.190':9988
'22#.#70.17.166':9988
'22#.#70.103.111':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней