Trojan.Starman.6581

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER300c.dir00\svchost.exe.mdmp 16325836412032140

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER300c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#6.41.13':139
'22#.#6.137.139':139
'22#.#6.35.154':139
'22#.#6.26.141':139
'22#.#6.210.63':139
'22#.#6.14.102':139
'22#.#6.20.101':139
'22#.#6.254.81':139
'22#.#6.34.26':139
'22#.#6.13.234':139
'22#.#6.198.171':139
'22#.#6.95.206':139
'22#.#6.15.101':139
'22#.#6.166.157':139
'22#.#6.181.4':445
'22#.#6.89.128':445
'22#.#6.143.178':139
'22#.#6.172.145':139
'22#.#6.45.162':139
'22#.#6.115.75':139
'22#.#6.51.209':139
'22#.#6.99.41':139
'22#.#6.26.141':445
'22#.#6.210.63':445
'22#.#6.198.171':445
'22#.#6.143.178':445
'22#.#6.172.145':445
'22#.#6.34.26':445
'22#.#6.13.234':445
'22#.#6.137.139':445
'22#.#6.35.154':445
'22#.#6.41.13':445
'22#.#6.45.162':445
'22#.76.0.19':139
'22#.#6.112.49':139
'22#.#6.94.27':139
'22#.#6.100.91':139
'22#.#6.91.68':139
'22#.#6.115.75':445
'22#.#6.51.209':445
'22#.#6.15.101':445
'22#.#6.166.157':445
'22#.#6.95.206':445
'22#.#6.216.21':139
'22#.#6.98.216':139
'22#.#6.21.193':139
'22#.#6.152.17':139
'22#.#6.135.83':139
'22#.#6.200.141':445
'22#.#6.53.77':445
'22#.#6.89.128':139
'22#.#6.107.159':139
'22#.#6.181.4':139
'22#.#6.18.133':139
'22#.#6.205.209':139
'22#.#6.184.52':139
'22#.#6.45.87':139
'22#.#6.68.74':139
'22#.#6.30.68':139
'22#.#6.222.4':139
'22#.#6.132.222':139
'22#.#6.187.244':139
'22#.#6.180.183':139
'22#.#6.205.52':139
'22#.#6.76.134':445
'22#.#6.18.133':445
'22#.#6.152.17':445
'22#.#6.132.222':445
'22#.#6.187.244':445
'22#.#6.222.4':445
'22#.#6.98.216':445
'22#.#6.107.159':445
'22#.#6.216.21':445
'22#.#6.135.83':445
'22#.#6.21.193':445
'22#.#6.205.52':445
'22#.#6.73.222':445
'22#.#6.68.74':445
'22#.#6.142.214':445
'22#.#6.166.65':445
'22#.#6.53.38':445
'22#.#6.184.52':445
'22#.#6.180.183':445
'22#.#6.205.209':445
'22#.#6.30.68':445
'22#.#6.45.87':445
'22#.76.1.1':445
'22#.#6.158.252':445
'22#.#6.82.25':445
'22#.#6.148.26':445
'22#.#6.94.148':445
'22#.#6.26.245':139
'22#.#6.209.26':139
'22#.#6.87.93':139
'22#.#6.67.226':445
'22#.#6.32.195':445
'22#.#6.11.81':445
'22#.#6.67.135':445
'22#.#6.165.67':445
'22#.#6.135.153':445
'22#.#6.249.25':445
'22#.#6.48.183':445
'22#.#6.46.120':445
'22#.#6.113.49':445
'22#.#6.27.85':445
'22#.#6.53.165':445
'22#.#6.137.235':445
'22#.#6.198.209':139
'22#.#6.96.94':139
'22#.#6.164.85':139
'22#.#6.150.26':139
'22#.#6.143.77':139
'22#.#6.183.51':139
'22#.#6.146.100':139
'22#.#6.102.2':139
'22#.#6.2.153':139
'22#.76.0.50':139
'22#.#6.73.185':139
'22#.#6.36.199':139
'22#.#6.92.254':139
'22#.#6.151.146':139
'22#.#6.237.254':139
'22#.#6.118.79':139
'22#.#6.244.21':139
'22#.#6.223.240':139
'22#.#6.199.230':139
'22#.#6.105.138':139
'22#.#6.183.49':139
'22#.#6.57.93':139
'22#.#6.105.20':139
'22#.#6.230.146':139
'22#.#6.223.136':139
'22#.#6.187.230':139
'22#.#6.7.228':139
'22#.#6.135.153':139
'22#.#6.67.135':139
'22#.#6.48.183':139
'22#.#6.199.54':139
'22#.#6.249.25':139
'22#.#6.163.51':139
'22#.#6.99.41':445
'22#.#6.100.91':445
'22#.#6.20.101':445
'22#.#6.254.81':445
'22#.#6.14.102':445
'22#.#6.112.49':445
'22#.#6.215.167':139
'22#.76.0.19':445
'22#.#6.91.68':445
'22#.#6.94.27':445
'22#.#6.165.67':139
'22#.#6.163.51':445
'22#.#6.187.230':445
'22#.#6.215.167':445
'22#.#6.67.226':139
'22#.#6.32.195':139
'22#.#6.230.146':445
'22#.#6.199.54':445
'22#.#6.105.20':445
'22#.#6.7.228':445
'22#.#6.223.136':445
'22#.#6.158.252':139
'22#.#6.46.120':139
'22#.#6.113.49':139
'22#.#6.27.85':139
'22#.#6.53.165':139
'22#.#6.137.235':139
'22#.#6.82.25':139
'22#.76.1.1':139
'22#.#6.94.148':139
'22#.#6.11.81':139
'22#.#6.148.26':139
'22#.#6.29.89':445
'22#.#6.88.189':445
'22#.#6.155.79':445
'22#.#6.131.213':445
'22#.#6.192.93':445
'22#.#6.30.160':445
'22#.#6.137.126':445
'22#.#6.95.147':445
'22#.#6.69.218':445
'22#.#6.139.233':445
'22#.#6.89.184':445
'22#.#6.250.96':139
'22#.#6.156.186':139
'22#.#6.245.129':139
'22#.#6.67.175':139
'22#.#6.240.232':139
'22#.#6.135.84':445
'22#.#6.71.156':445
'22#.#6.81.93':139
'22#.76.7.94':139
'22#.#6.28.46':139
'22#.#6.160.55':445
'22#.#6.201.252':445
'22#.#6.188.206':445
'22#.#6.59.145':445
'22#.#6.36.63':445
'22#.#6.247.136':445
'22#.#6.202.8':445
'22#.#6.74.202':445
'22#.#6.247.172':445
'22#.#6.23.136':445
'22#.#6.135.192':445
'22#.#6.165.46':445
'22#.#6.163.113':445
'22#.#6.216.210':445
'22#.#6.249.193':445
'22#.#6.94.117':445
'22#.#6.57.95':445
'22#.#6.127.40':445
'22#.#6.214.127':445
'22#.#6.8.164':445
'22#.#6.80.76':445
'22#.#6.8.118':445
'22#.#6.94.117':139
'22#.#6.57.95':139
'22#.#6.160.55':139
'22#.#6.30.160':139
'22#.#6.137.126':139
'22#.#6.80.76':139
'22#.#6.8.118':139
'22#.#6.216.210':139
'22#.#6.249.193':139
'22#.#6.163.113':139
'22#.#6.95.147':139
'22#.#6.135.84':139
'22#.#6.155.79':139
'22#.#6.71.156':139
'22#.#6.192.93':139
'22#.#6.131.213':139
'22#.#6.69.218':139
'22#.#6.139.233':139
'22#.#6.88.189':139
'22#.#6.89.184':139
'22#.#6.29.89':139
'22#.#6.8.164':139
'22#.#6.148.212':139
'22#.#6.96.82':139
'22#.#6.194.102':139
'22#.#6.202.8':139
'22#.#6.74.202':139
'22#.#6.189.40':139
'22#.#6.10.81':139
'22#.#6.255.118':139
'22#.#6.208.55':139
'22#.#6.254.172':139
'22#.#6.247.172':139
'22#.#6.36.63':139
'22#.#6.59.145':139
'22#.#6.165.46':139
'22#.#6.127.40':139
'22#.#6.214.127':139
'22#.#6.23.136':139
'22#.#6.135.192':139
'22#.#6.188.206':139
'22#.#6.247.136':139
'22#.#6.201.252':139
'22#.#6.82.105':445
'22#.#6.101.175':445
'22#.#6.178.214':445
'22#.#6.97.98':445
'22#.#6.214.82':445
'22#.#6.34.174':445
'22#.#6.45.250':445
'22#.#6.63.114':445
'22#.#6.146.102':445
'22#.#6.73.237':445
'22#.#6.87.113':139
'22#.#6.19.13':139
'22#.#6.18.75':139
'22#.#6.19.212':139
'22#.#6.44.159':139
'22#.#6.115.45':139
'22#.#6.134.7':139
'22#.#6.197.105':139
'22#.#6.143.204':139
'22#.#6.193.231':139
'22#.#6.39.64':139
'22#.#6.151.87':445
'22#.#6.200.141':139
'22#.#6.53.77':139
'22#.#6.87.113':445
'22#.#6.134.7':445
'22#.#6.197.105':445
'22#.#6.142.214':139
'22#.#6.73.222':139
'22#.#6.53.38':139
'22#.#6.76.134':139
'22#.#6.166.65':139
'22#.#6.143.204':445
'22#.#6.44.159':445
'22#.#6.115.45':445
'22#.#6.159.38':445
'22#.#6.131.44':445
'22#.#6.202.46':445
'22#.#6.193.231':445
'22#.#6.39.64':445
'22#.#6.18.75':445
'22#.#6.19.212':445
'22#.#6.19.13':445
'22#.#6.28.46':445
'22#.#6.81.93':445
'22#.76.7.94':445
'22#.#6.250.96':445
'22#.#6.156.186':445
'22#.#6.69.218':9988
'22#.#6.30.160':9988
'22#.#6.89.184':9988
'22#.#6.29.89':9988
'22#.#6.135.84':9988
'22#.#6.245.129':445
'22#.#6.208.55':445
'22#.#6.254.172':445
'22#.#6.96.82':445
'22#.#6.194.102':445
'22#.#6.148.212':445
'22#.#6.67.175':445
'22#.#6.240.232':445
'22#.#6.10.81':445
'22#.#6.255.118':445
'22#.#6.189.40':445
'22#.#6.94.117':9988
'22#.#6.63.114':139
'22#.#6.34.174':139
'22#.#6.73.237':139
'22#.#6.101.175':139
'22#.#6.146.102':139
'22#.#6.202.46':139
'22#.#6.159.38':139
'22#.#6.131.44':139
'22#.#6.45.250':139
'22#.#6.151.87':139
'22#.#6.82.105':139
'22#.#6.8.118':9988
'22#.#6.201.252':9988
'22#.#6.8.164':9988
'22#.#6.163.113':9988
'22#.#6.80.76':9988
'22#.#6.214.82':139
'22#.#6.178.214':139
'22#.#6.97.98':139
'22#.#6.23.136':9988
'22#.#6.135.192':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней