Trojan.Starman.5631

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERb3f6.dir00\svchost.exe.mdmp 16325836412029900

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb3f6.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#0.93.21':139
'13#.#0.41.93':139
'13#.#0.21.48':139
'13#.#0.41.217':139
'13#.#0.22.130':139
'13#.#0.17.253':139
'13#.#0.76.240':139
'13#.#0.36.80':139
'13#.30.20.9':139
'13#.#0.124.194':139
'13#.#0.204.161':139
'13#.#0.146.195':139
'13#.#0.221.57':139
'13#.#0.148.18':139
'13#.#0.87.203':445
'13#.#0.198.96':139
'13#.#0.64.198':139
'13#.#0.109.241':139
'13#.#0.190.191':139
'13#.#0.111.200':139
'13#.#0.191.111':139
'13#.#0.55.74':139
'13#.#0.6.190':139
'13#.#0.103.55':139
'13#.#0.89.249':139
'13#.#0.100.133':139
'13#.#0.239.70':139
'13#.#0.158.1':139
'13#.#0.31.132':139
'13#.#0.190.138':139
'13#.#0.149.132':139
'13#.#0.168.186':139
'13#.#0.94.29':139
'13#.#0.145.94':139
'13#.#0.16.221':139
'13#.#0.34.202':139
'13#.#0.168.13':139
'13#.#0.178.143':139
'13#.#0.237.177':139
'13#.#0.153.75':139
'13#.#0.40.248':139
'13#.#0.25.191':139
'13#.#0.53.14':445
'13#.#0.183.49':445
'13#.#0.182.103':445
'13#.#0.174.228':445
'13#.#0.100.59':445
'13#.#0.53.206':445
'13#.#0.42.81':445
'13#.#0.31.21':445
'13#.#0.220.182':445
'13#.#0.62.220':445
'13#.#0.228.117':445
'13#.#0.20.29':445
'13#.#0.205.245':445
'13#.#0.183.207':445
'13#.#0.22.235':445
'13#.#0.207.32':445
'13#.#0.237.22':445
'13#.#0.233.30':445
'13#.#0.22.254':445
'13#.#0.241.205':445
'13#.#0.253.240':445
'13#.#0.11.108':445
'13#.#0.186.118':445
'13#.#0.37.161':445
'13#.#0.6.113':445
'13#.30.36.3':445
'13#.#0.89.157':445
'13#.#0.17.200':445
'13#.#0.7.146':445
'13#.#0.123.149':445
'13#.30.95.2':445
'13#.#0.124.214':445
'13#.#0.87.40':445
'13#.#0.32.108':445
'13#.#0.21.97':445
'13#.#0.112.22':445
'13#.#0.157.111':445
'13#.#0.5.209':445
'13#.#0.104.7':445
'13#.#0.204.113':445
'13#.#0.160.32':445
'13#.#0.123.33':445
'13#.#0.200.157':139
'13#.#0.125.94':445
'13#.#0.239.240':445
'13#.#0.94.178':445
'13#.#0.61.102':445
'13#.#0.178.61':445
'13#.#0.208.163':139
'13#.#0.54.149':139
'13#.#0.72.190':139
'13#.#0.84.231':445
'13#.#0.68.17':445
'13#.#0.198.135':445
'13#.#0.190.138':445
'13#.#0.149.132':445
'13#.#0.6.190':445
'13#.#0.103.55':445
'13#.#0.55.74':445
'13#.#0.200.157':445
'13#.#0.162.200':445
'13#.#0.158.1':445
'13#.#0.31.132':445
'13#.#0.239.70':445
'13#.#0.230.130':139
'13#.#0.63.230':139
'13#.#0.42.83':139
'13#.#0.209.181':139
'13#.#0.64.11':139
'13#.#0.103.21':139
'13#.#0.48.103':139
'13#.#0.58.34':139
'13#.#0.3.185':139
'13#.#0.3.124':139
'13#.#0.59.194':139
'13#.#0.27.38':139
'13#.#0.81.193':139
'13#.#0.95.233':139
'13#.#0.182.227':139
'13#.#0.162.188':139
'13#.#0.211.50':139
'13#.#0.188.49':139
'13#.#0.118.196':139
'13#.#0.4.148':139
'13#.#0.100.203':139
'13#.#0.191.111':445
'13#.#0.190.191':445
'13#.#0.111.200':445
'13#.#0.146.195':445
'13#.#0.221.57':445
'13#.#0.41.217':445
'13#.#0.22.130':445
'13#.#0.204.161':445
'13#.#0.64.198':445
'13#.#0.109.241':445
'13#.#0.148.18':445
'13#.#0.178.61':139
'13#.#0.94.178':139
'13#.#0.61.102':139
'13#.#0.162.200':139
'13#.#0.198.135':139
'13#.#0.68.17':139
'13#.#0.198.96':445
'13#.#0.84.231':139
'13#.#0.125.94':139
'13#.#0.239.240':139
'13#.#0.25.191':445
'13#.#0.153.75':445
'13#.#0.40.248':445
'13#.#0.94.29':445
'13#.#0.145.94':445
'13#.#0.89.249':445
'13#.#0.100.133':445
'13#.#0.168.186':445
'13#.#0.178.143':445
'13#.#0.237.177':445
'13#.#0.16.221':445
'13#.30.20.9':445
'13#.#0.124.194':445
'13#.#0.41.93':445
'13#.#0.21.48':445
'13#.#0.93.21':445
'13#.#0.34.202':445
'13#.#0.168.13':445
'13#.#0.76.240':445
'13#.#0.36.80':445
'13#.#0.17.253':445
'13#.#0.116.31':445
'13#.#0.104.252':445
'13#.#0.65.65':445
'13#.#0.56.153':445
'13#.#0.21.200':445
'13#.#0.178.87':445
'13#.#0.130.254':445
'13#.#0.168.55':445
'13#.#0.251.104':445
'13#.#0.55.238':445
'13#.#0.142.156':445
'13#.#0.13.49':139
'13#.#0.42.82':139
'13#.#0.184.120':139
'13#.#0.190.167':139
'13#.#0.203.190':139
'13#.#0.133.126':139
'13#.#0.62.134':445
'13#.#0.60.54':139
'13#.#0.102.48':139
'13#.#0.51.25':139
'13#.#0.101.170':445
'13#.#0.137.154':445
'13#.#0.228.212':445
'13#.30.41.5':445
'13#.#0.123.127':445
'13#.#0.161.234':445
'13#.#0.18.56':445
'13#.#0.79.57':445
'13#.#0.30.101':445
'13#.30.78.6':445
'13#.#0.127.41':445
'13#.#0.39.105':445
'13#.#0.61.185':445
'13#.#0.114.218':445
'13#.#0.56.136':445
'13#.#0.228.26':445
'13#.#0.94.24':445
'13#.#0.219.130':445
'13#.#0.27.237':445
'13#.#0.37.180':445
'13#.#0.247.211':445
'13#.#0.114.218':139
'13#.#0.39.105':139
'13#.#0.228.26':139
'13#.#0.130.254':139
'13#.#0.56.136':139
'13#.#0.27.237':139
'13#.#0.94.24':139
'13#.#0.247.211':139
'13#.#0.61.185':139
'13#.#0.37.180':139
'13#.#0.178.87':139
'13#.#0.104.252':139
'13#.#0.56.153':139
'13#.#0.116.31':139
'13#.#0.142.156':139
'13#.#0.62.134':139
'13#.#0.55.238':139
'13#.#0.168.55':139
'13#.#0.251.104':139
'13#.#0.21.200':139
'13#.#0.65.65':139
'13#.#0.179.78':139
'13#.#0.163.179':139
'13#.#0.79.57':139
'13#.#0.18.56':139
'13#.#0.56.221':139
'13#.#0.72.33':139
'13#.30.0.32':139
'13#.#0.112.52':139
'13#.#0.101.223':139
'13#.30.59.1':139
'13#.#0.91.127':139
'13#.#0.123.127':139
'13#.#0.228.212':139
'13#.30.41.5':139
'13#.#0.219.130':139
'13#.#0.127.41':139
'13#.#0.161.234':139
'13#.30.78.6':139
'13#.#0.30.101':139
'13#.#0.137.154':139
'13#.#0.101.170':139
'13#.#0.91.127':445
'13#.#0.21.97':139
'13#.#0.87.40':139
'13#.#0.157.111':139
'13#.#0.42.81':139
'13#.#0.112.22':139
'13#.#0.204.113':139
'13#.#0.5.209':139
'13#.#0.123.33':139
'13#.#0.32.108':139
'13#.#0.160.32':139
'13#.#0.53.206':139
'13#.#0.100.59':139
'13#.#0.182.103':139
'13#.#0.174.228':139
'13#.#0.233.30':139
'13#.#0.228.117':139
'13#.#0.62.220':139
'13#.#0.31.21':139
'13#.#0.220.182':139
'13#.#0.53.14':139
'13#.#0.183.49':139
'13#.#0.123.83':445
'13#.#0.87.201':445
'13#.#0.97.187':445
'13#.#0.17.200':139
'13#.#0.87.203':139
'13#.#0.91.106':445
'13#.#0.185.90':445
'13#.#0.46.121':445
'13#.#0.51.251':445
'13#.#0.71.163':445
'13#.#0.89.157':139
'13#.30.36.3':139
'13#.#0.37.161':139
'13#.#0.6.113':139
'13#.#0.104.7':139
'13#.#0.124.214':139
'13#.30.95.2':139
'13#.#0.7.146':139
'13#.#0.123.149':139
'13#.#0.11.108':139
'13#.#0.186.118':139
'13#.#0.51.25':445
'13#.#0.60.54':445
'13#.#0.102.48':445
'13#.#0.13.49':445
'13#.#0.42.82':445
'13#.#0.65.65':9988
'13#.#0.104.252':9988
'13#.#0.62.134':9988
'13#.#0.133.126':445
'13#.#0.56.153':9988
'13#.#0.184.120':445
'13#.#0.101.223':445
'13#.30.59.1':445
'13#.#0.163.179':445
'13#.#0.179.78':445
'13#.#0.56.221':445
'13#.#0.190.167':445
'13#.#0.203.190':445
'13#.30.0.32':445
'13#.#0.112.52':445
'13#.#0.72.33':445
'13#.#0.183.207':139
'13#.#0.20.29':139
'13#.#0.207.32':139
'13#.#0.185.90':139
'13#.#0.22.235':139
'13#.#0.22.254':139
'13#.#0.237.22':139
'13#.#0.253.240':139
'13#.#0.205.245':139
'13#.#0.241.205':139
'13#.#0.91.106':139
'13#.#0.18.56':9988
'13#.#0.97.187':139
'13#.#0.30.101':9988
'13#.#0.37.180':9988
'13#.#0.137.154':9988
'13#.#0.71.163':139
'13#.#0.46.121':139
'13#.#0.51.251':139
'13#.#0.123.83':139
'13#.#0.87.201':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней