Trojan.Starman.4304

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER92fd.dir00\svchost.exe.mdmp 16325836412032704

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER92fd.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#75.27.98':445
'22#.#75.21.232':445
'22#.#75.83.193':445
'22#.#75.71.179':445
'22#.#75.40.72':445
'22#.#75.194.182':445
'22#.#75.2.99':445
'22#.#75.255.190':445
'22#.#75.28.145':445
'22#.#75.218.123':445
'22#.#75.49.13':445
'22#.#75.6.154':445
'22#.#75.46.132':445
'22#.#75.91.114':445
'22#.#75.124.229':445
'22#.#75.60.138':445
'22#.#75.196.18':445
'22#.#75.150.78':445
'22#.#75.43.58':445
'22#.#75.155.36':445
'22#.#75.108.62':445
'22#.#75.65.201':139
'22#.#75.202.195':139
'22#.#75.196.149':139
'22#.#75.57.187':139
'22#.#75.79.187':139
'22#.#75.140.161':139
'22#.#75.122.234':139
'22#.#75.161.253':139
'22#.#75.205.102':139
'22#.#75.87.130':139
'22#.#75.225.101':139
'22#.#75.109.53':139
'22#.#75.68.168':139
'22#.#75.13.136':445
'22#.#75.36.210':139
'22#.#75.122.205':139
'22#.#75.187.228':139
'22#.#75.166.107':139
'22#.#75.115.29':139
'22#.#75.66.72':139
'22#.#75.141.237':445
'22#.#75.188.251':445
'22#.#75.72.94':445
'22#.#75.108.62':139
'22#.#75.13.136':139
'22#.#75.3.237':445
'22#.#75.244.153':445
'22#.#75.244.0':445
'22#.#75.172.39':445
'22#.#75.107.2':445
'22#.#75.27.98':139
'22#.#75.21.232':139
'22#.#75.83.193':139
'22#.#75.71.179':139
'22#.#75.40.72':139
'22#.#75.194.182':139
'22#.#75.2.99':139
'22#.#75.255.190':139
'22#.#75.28.145':139
'22#.#75.218.123':139
'22#.#75.8.218':445
'22#.#75.72.188':445
'22#.#75.233.112':445
'22#.#75.186.23':445
'22#.#75.245.101':445
'22#.#75.23.78':445
'22#.#75.237.40':445
'22#.#75.14.185':445
'22#.#75.235.100':445
'22#.#75.109.233':445
'22#.#75.101.109':445
'22#.#75.161.86':445
'22#.#75.247.143':445
'22#.#75.118.162':445
'22#.#75.179.158':445
'22#.#75.3.47':445
'22#.#75.180.239':445
'22#.#75.55.181':445
'22#.#75.6.201':445
'22#.#75.67.181':445
'22#.#75.28.68':445
'22#.#75.191.152':139
'22#.#75.74.197':445
'22#.#75.47.135':445
'22#.#75.42.166':445
'22#.#75.109.69':445
'22#.#75.166.104':445
'22#.#75.166.203':445
'22#.#75.26.211':445
'22#.#75.225.239':445
'22#.#75.204.133':445
'22#.#75.77.46':445
'22#.#75.202.195':445
'22#.#75.205.102':445
'22#.#75.65.201':445
'22#.#75.79.187':445
'22#.#75.196.149':445
'22#.#75.122.234':445
'22#.#75.191.152':445
'22#.#75.140.161':445
'22#.#75.87.130':445
'22#.#75.161.253':445
'22#.#75.26.11':445
'22#.#75.226.70':445
'22#.#75.155.22':445
'22#.#75.94.151':445
'22#.#75.154.194':445
'22#.#75.151.201':445
'22#.#75.71.128':445
'22#.#75.7.159':445
'22#.#75.6.71':445
'22#.#75.37.41':445
'22#.#75.30.34':445
'22#.#75.226.166':445
'22#.#75.17.179':445
'22#.#75.218.242':445
'22#.#75.120.25':445
'22#.#75.162.147':445
'22#.#75.107.250':445
'22#.#75.200.154':445
'22#.#75.56.122':445
'22#.#75.26.158':445
'22#.#75.230.183':445
'22#.#75.218.242':139
'22#.#75.226.166':139
'22#.#75.162.147':139
'22#.#75.26.11':139
'22#.#75.120.25':139
'22#.#75.56.122':139
'22#.#75.107.250':139
'22#.#75.230.183':139
'22#.#75.17.179':139
'22#.#75.26.158':139
'22#.#75.74.197':139
'22#.#75.47.135':139
'22#.#75.42.166':139
'22#.#75.109.69':139
'22#.#75.166.104':139
'22#.#75.166.203':139
'22#.#75.26.211':139
'22#.#75.225.239':139
'22#.#75.204.133':139
'22#.#75.77.46':139
'22#.#75.200.154':139
'22#.#75.109.53':445
'22#.#75.115.29':445
'22#.#75.225.101':445
'22#.#75.36.210':445
'22#.#75.68.168':445
'22#.#75.187.228':445
'22#.#75.57.187':445
'22#.#75.122.205':445
'22#.#75.66.72':445
'22#.#75.166.107':445
'22#.#75.226.70':139
'22#.#75.155.22':139
'22#.#75.94.151':139
'22#.#75.154.194':139
'22#.#75.151.201':139
'22#.#75.71.128':139
'22#.#75.7.159':139
'22#.#75.6.71':139
'22#.#75.37.41':139
'22#.#75.30.34':139
'22#.#75.212.52':445
'22#.#75.200.120':445
'22#.#75.132.177':445
'22#.#75.37.133':445
'22#.#75.202.196':445
'22#.#75.206.48':445
'22#.#75.209.205':445
'22#.#75.49.49':445
'22#.#75.22.116':445
'22#.#75.10.30':445
'22#.#75.233.18':139
'22#.#75.23.233':139
'22#.#75.18.216':139
'22#.#75.64.59':139
'22#.#75.249.63':139
'22#.#75.254.242':139
'22#.#75.82.63':139
'22#.#75.243.8':139
'22#.#75.65.24':139
'22#.#75.44.117':139
'22#.#75.4.36':445
'22#.#75.9.233':445
'22#.#75.143.188':445
'22#.#75.246.146':445
'22#.#75.103.55':445
'22#.#75.108.103':445
'22#.#75.62.59':445
'22#.#75.21.24':445
'22#.#75.56.51':445
'22#.#75.241.117':445
'22#.#75.102.140':445
'22#.#75.195.207':445
'22#.#75.12.196':445
'22#.#75.23.68':445
'22#.#75.151.173':445
'22#.#75.254.41':445
'22#.#75.135.81':445
'22#.#75.13.44':445
'22#.#75.191.165':445
'22#.#75.133.99':445
'22#.#75.68.178':445
'22#.#75.23.68':139
'22#.#75.195.207':139
'22#.#75.254.41':139
'22#.#75.4.36':139
'22#.#75.151.173':139
'22#.#75.191.165':139
'22#.#75.135.81':139
'22#.#75.68.178':139
'22#.#75.12.196':139
'22#.#75.133.99':139
'22#.#75.37.133':139
'22#.#75.200.120':139
'22#.#75.212.52':139
'22#.#75.132.177':139
'22#.#75.202.196':139
'22#.#75.206.48':139
'22#.#75.209.205':139
'22#.#75.49.49':139
'22#.#75.22.116':139
'22#.#75.10.30':139
'22#.#75.13.44':139
'22#.#75.81.73':139
'22#.#75.46.27':139
'22#.#75.170.61':139
'22#.#75.231.204':139
'22#.#75.110.232':139
'22#.#75.165.144':139
'22#.#75.155.90':139
'22#.#75.136.244':139
'22#.#75.250.27':139
'22#.#75.243.249':139
'22#.#75.9.233':139
'22#.#75.143.188':139
'22#.#75.246.146':139
'22#.#75.103.55':139
'22#.#75.108.103':139
'22#.#75.62.59':139
'22#.#75.21.24':139
'22#.#75.56.51':139
'22#.#75.241.117':139
'22#.#75.102.140':139
'22#.#75.231.204':445
'22#.#75.118.162':139
'22#.#75.161.86':139
'22#.#75.3.47':139
'22#.#75.8.218':139
'22#.#75.179.158':139
'22#.#75.6.201':139
'22#.#75.180.239':139
'22#.#75.28.68':139
'22#.#75.247.143':139
'22#.#75.67.181':139
'22#.#75.141.237':139
'22#.#75.188.251':139
'22#.#75.72.94':139
'22#.#75.165.144':9988
'22#.#75.62.59':9988
'22#.#75.3.237':139
'22#.#75.244.153':139
'22#.#75.244.0':139
'22#.#75.172.39':139
'22#.#75.107.2':139
'22#.#75.55.181':139
'22#.#75.49.13':139
'22#.#75.6.154':139
'22#.#75.46.132':139
'22#.#75.91.114':139
'22#.#75.124.229':139
'22#.#75.60.138':139
'22#.#75.196.18':139
'22#.#75.150.78':139
'22#.#75.43.58':139
'22#.#75.155.36':139
'22#.#75.72.188':139
'22#.#75.233.112':139
'22#.#75.186.23':139
'22#.#75.245.101':139
'22#.#75.23.78':139
'22#.#75.237.40':139
'22#.#75.14.185':139
'22#.#75.235.100':139
'22#.#75.109.233':139
'22#.#75.101.109':139
'22#.#75.23.233':445
'22#.#75.65.24':445
'22#.#75.233.18':445
'22#.#75.249.63':445
'22#.#75.18.216':445
'22#.#75.82.63':445
'22#.#75.49.49':9988
'22#.#75.254.242':445
'22#.#75.44.117':445
'22#.#75.243.8':445
'22#.#75.46.27':445
'22#.#75.250.27':445
'22#.#75.81.73':445
'22#.#75.110.232':445
'22#.#75.170.61':445
'22#.#75.155.90':445
'22#.#75.64.59':445
'22#.#75.165.144':445
'22#.#75.243.249':445
'22#.#75.136.244':445
'22#.#75.143.188':9988
'22#.#75.206.48':9988
'22#.#75.241.117':9988
'22#.#75.209.205':9988
'22#.#75.4.36':9988
'22#.#75.246.146':9988
'22#.#75.243.249':9988
'22#.#75.65.24':9988
'22#.#75.250.27':9988
'22#.#75.195.207':9988
'22#.#75.170.61':9988
'22#.#75.108.103':9988
'22#.#75.212.52':9988
'22#.#75.23.68':9988
'22#.#75.21.24':9988
'22#.#75.151.173':9988
'22#.#75.254.41':9988
'22#.#75.191.165':9988
'22#.#75.13.44':9988
'22#.#75.103.55':9988
'22#.#75.135.81':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней