Trojan.Starman.6434

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER2fb8.dir00\svchost.exe.mdmp 16325836412032200

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2fb8.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'12#.#01.33.147':139
'12#.#01.56.34':139
'12#.#01.172.21':139
'12#.#01.145.111':139
'12#.#01.234.56':139
'12#.#01.93.218':139
'12#.#01.167.167':139
'12#.#01.163.206':139
'12#.#01.53.166':139
'12#.#01.64.52':139
'12#.#01.192.240':445
'12#.#01.180.192':139
'12#.#01.97.61':445
'12#.#01.137.89':445
'12#.#01.153.75':445
'12#.#01.89.227':139
'12#.#01.50.39':139
'12#.#01.169.170':139
'12#.#01.249.240':139
'12#.#01.80.112':139
'12#.#01.178.188':139
'12#.#01.53.166':445
'12#.#01.64.52':445
'12#.#01.56.34':445
'12#.#01.172.21':445
'12#.#01.33.147':445
'12#.#01.178.188':445
'12#.#01.72.30':445
'12#.#01.167.167':445
'12#.#01.163.206':445
'12#.#01.93.218':445
'12#.#01.249.240':445
'12#.#01.80.112':445
'12#.#01.180.192':445
'12#.#01.72.30':139
'12#.#01.39.133':139
'12#.#01.145.111':445
'12#.#01.234.56':445
'12#.#01.50.39':445
'12#.#01.169.170':445
'12#.#01.89.227':445
'12#.#01.75.174':445
'12#.#01.192.240':139
'12#.#01.54.201':445
'12#.#01.97.61':139
'12#.#01.137.89':139
'12#.#01.153.75':139
'12#.#01.119.227':445
'12#.#01.75.82':445
'12#.#01.61.238':445
'12#.#01.39.231':445
'12#.#01.160.42':445
'12#.#01.188.190':139
'12#.#01.24.115':139
'12#.#01.163.25':139
'12#.#01.68.139':139
'12#.#01.17.253':139
'12#.#01.125.15':139
'12#.#01.75.174':139
'12#.#01.39.215':139
'12#.#01.239.143':139
'12#.#01.99.73':139
'12#.#01.200.80':445
'12#.#01.163.25':445
'12#.#01.188.190':445
'12#.#01.17.253':445
'12#.#01.148.126':445
'12#.#01.68.139':445
'12#.#01.39.215':445
'12#.#01.125.15':445
'12#.#01.99.73':445
'12#.#01.24.115':445
'12#.#01.239.143':445
'12#.#01.138.17':445
'12#.#01.75.64':445
'12#.#01.94.214':445
'12#.#01.151.57':445
'12#.101.6.1':445
'12#.#01.66.51':445
'12#.#01.36.213':445
'12#.#01.242.229':445
'12#.#01.105.198':445
'12#.#01.94.159':445
'12#.#01.39.133':445
'12#.#01.255.221':445
'12#.#01.220.16':445
'12#.#01.97.7':445
'12#.#01.77.23':445
'12#.#01.175.189':445
'12#.#01.182.198':445
'12#.#01.53.225':445
'12#.#01.206.141':445
'12#.#01.26.109':445
'12#.#01.7.158':445
'12#.#01.105.100':445
'12#.#01.75.105':445
'12#.101.3.6':445
'12#.#01.92.185':445
'12#.#01.113.61':445
'12#.#01.39.166':445
'12#.#01.221.47':445
'12#.#01.194.61':445
'12#.#01.138.75':445
'12#.#01.42.64':445
'12#.#01.28.171':445
'12#.#01.95.22':139
'12#.#01.204.25':139
'12#.#01.91.85':139
'12#.#01.30.164':139
'12#.#01.25.131':139
'12#.#01.44.87':139
'12#.#01.177.84':139
'12#.#01.130.128':139
'12#.#01.36.241':139
'12#.#01.233.177':139
'12#.#01.136.12':139
'12#.#01.3.144':139
'12#.#01.31.65':139
'12#.#01.63.22':445
'12#.#01.132.177':139
'12#.#01.29.58':139
'12#.#01.53.130':139
'12#.#01.184.120':139
'12#.#01.132.252':139
'12#.#01.131.81':139
'12#.#01.80.76':445
'12#.#01.105.100':139
'12#.#01.75.105':139
'12#.101.3.6':139
'12#.#01.92.185':139
'12#.#01.113.61':139
'12#.#01.39.166':139
'12#.#01.221.47':139
'12#.#01.194.61':139
'12#.#01.138.75':139
'12#.#01.42.64':139
'12#.#01.82.247':139
'12#.#01.135.26':139
'12#.#01.49.112':139
'12#.#01.163.241':139
'12#.#01.156.143':139
'12#.#01.159.47':139
'12#.#01.80.76':139
'12#.#01.47.4':139
'12#.#01.171.37':139
'12#.#01.91.252':139
'12#.#01.77.23':139
'12#.#01.49.112':445
'12#.#01.82.247':445
'12#.#01.156.143':445
'12#.#01.63.22':139
'12#.#01.163.241':445
'12#.#01.47.4':445
'12#.#01.159.47':445
'12#.#01.91.252':445
'12#.#01.135.26':445
'12#.#01.171.37':445
'12#.#01.220.16':139
'12#.#01.26.109':139
'12#.#01.255.221':139
'12#.#01.175.189':139
'12#.#01.97.7':139
'12#.#01.53.225':139
'12#.#01.28.171':139
'12#.#01.182.198':139
'12#.#01.7.158':139
'12#.#01.206.141':139
'12#.#01.148.126':139
'12#.#01.222.158':445
'12#.#01.142.222':445
'12#.#01.3.152':445
'12#.#01.139.109':445
'12#.#01.116.202':445
'12#.#01.184.69':445
'12#.#01.155.184':445
'12#.#01.21.168':445
'12#.#01.158.88':445
'12#.#01.207.60':445
'12#.#01.253.182':139
'12#.#01.224.253':139
'12#.#01.172.43':139
'12#.#01.57.218':139
'12#.#01.45.50':139
'12#.#01.188.17':139
'12#.#01.17.19':445
'12#.#01.120.69':139
'12#.#01.81.252':139
'12#.#01.236.167':139
'12#.#01.238.46':445
'12#.#01.61.184':445
'12#.#01.246.61':445
'12#.#01.224.190':445
'12#.#01.86.23':445
'12#.#01.230.127':445
'12#.#01.57.240':445
'12#.#01.251.146':445
'12#.#01.183.141':445
'12#.#01.21.176':445
'12#.#01.58.7':445
'12#.#01.215.70':445
'12#.#01.18.54':445
'12#.#01.106.224':445
'12#.#01.28.250':445
'12#.#01.126.28':445
'12#.#01.149.163':445
'12#.#01.155.71':445
'12#.#01.34.64':445
'12#.#01.62.16':445
'12#.#01.64.201':445
'12#.#01.95.84':139
'12#.#01.126.28':139
'12#.#01.106.224':139
'12#.#01.28.250':139
'12#.#01.155.184':139
'12#.#01.238.46':139
'12#.#01.64.201':139
'12#.#01.34.64':139
'12#.#01.62.16':139
'12#.#01.215.70':139
'12#.#01.18.54':139
'12#.#01.3.152':139
'12#.#01.222.158':139
'12#.#01.116.202':139
'12#.#01.139.109':139
'12#.#01.17.19':139
'12#.#01.21.168':139
'12#.#01.184.69':139
'12#.#01.207.60':139
'12#.#01.142.222':139
'12#.#01.158.88':139
'12#.#01.149.163':139
'12#.#01.173.160':139
'12#.#01.36.238':139
'12#.#01.185.55':139
'12#.#01.251.146':139
'12#.#01.8.59':139
'12#.#01.11.236':139
'12#.#01.105.114':139
'12#.#01.0.120':139
'12#.#01.43.37':139
'12#.#01.12.43':139
'12#.#01.224.190':139
'12#.#01.61.184':139
'12#.#01.230.127':139
'12#.#01.155.71':139
'12#.#01.86.23':139
'12#.#01.183.141':139
'12#.#01.57.240':139
'12#.#01.58.7':139
'12#.#01.246.61':139
'12#.#01.21.176':139
'12#.#01.8.59':445
'12#.#01.102.134':445
'12#.#01.228.118':445
'12#.#01.22.247':445
'12#.#01.42.42':445
'12#.#01.17.226':445
'12#.#01.87.195':445
'12#.#01.113.241':445
'12#.#01.16.172':445
'12#.#01.238.215':445
'12#.#01.87.115':445
'12#.#01.87.195':139
'12#.#01.113.241':139
'12#.#01.16.172':139
'12#.#01.238.215':139
'12#.#01.87.115':139
'12#.#01.242.108':139
'12#.#01.157.154':445
'12#.#01.46.204':139
'12#.#01.120.136':139
'12#.#01.120.9':139
'12#.#01.120.136':445
'12#.#01.138.17':139
'12#.#01.75.64':139
'12#.#01.94.214':139
'12#.#01.151.57':139
'12#.101.6.1':139
'12#.#01.66.51':139
'12#.#01.36.213':139
'12#.#01.242.229':139
'12#.#01.105.198':139
'12#.#01.94.159':139
'12#.#01.54.201':139
'12#.#01.39.231':139
'12#.#01.242.108':445
'12#.#01.120.9':445
'12#.#01.46.204':445
'12#.#01.75.82':139
'12#.#01.200.80':139
'12#.#01.119.227':139
'12#.#01.160.42':139
'12#.#01.61.238':139
'12#.#01.228.118':139
'12#.#01.224.253':445
'12#.#01.81.252':445
'12#.#01.253.182':445
'12#.#01.45.50':445
'12#.#01.172.43':445
'12#.#01.139.109':9988
'12#.#01.17.19':9988
'12#.#01.188.17':445
'12#.#01.236.167':445
'12#.#01.120.69':445
'12#.#01.43.37':445
'12#.#01.12.43':445
'12#.#01.36.238':445
'12#.#01.185.55':445
'12#.#01.173.160':445
'12#.#01.95.84':445
'12#.#01.57.218':445
'12#.#01.105.114':445
'12#.#01.0.120':445
'12#.#01.11.236':445
'12#.#01.116.202':9988
'12#.#01.246.61':9988
'12#.#01.21.176':9988
'12#.#01.61.184':9988
'12#.#01.86.23':9988
'12#.#01.230.127':9988
'12#.#01.22.247':139
'12#.#01.102.134':139
'12#.#01.17.226':139
'12#.#01.157.154':139
'12#.#01.42.42':139
'12#.#01.155.184':9988
'12#.#01.238.46':9988
'12#.#01.184.69':9988
'12#.#01.3.152':9988
'12#.#01.222.158':9988
'12#.#01.34.64':9988
'12#.#01.155.71':9988
'12#.#01.106.224':9988
'12#.#01.28.250':9988
'12#.#01.126.28':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней