Trojan.Starman.4941

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER07ef.dir00\svchost.exe.mdmp 16325836412031144

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER07ef.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#18.51.230':445
'22#.#18.56.253':445
'22#.#18.214.127':445
'22#.#18.17.181':445
'22#.#18.179.88':445
'22#.#18.230.37':445
'22#.#18.160.29':445
'22#.#18.26.122':445
'22#.#18.129.26':445
'22#.#18.229.213':445
'22#.#18.40.82':445
'22#.#18.43.38':445
'22#.#18.10.194':445
'22#.#18.49.6':139
'22#.#18.44.95':139
'22#.#18.178.133':139
'22#.#18.75.30':139
'22#.#18.50.225':139
'22#.#18.239.74':139
'22#.#18.196.101':139
'22#.#18.149.202':139
'22#.#18.84.97':139
'22#.#18.72.7':139
'22#.#18.250.161':139
'22#.#18.102.168':139
'22#.#18.89.129':445
'22#.#18.26.103':445
'22#.#18.119.148':445
'22#.#18.159.52':445
'22#.#18.12.214':445
'22#.#18.29.115':445
'22#.#18.104.249':445
'22#.#18.85.79':445
'22#.#18.75.30':445
'22#.#18.50.225':445
'22#.#18.131.197':445
'22#.#18.9.132':445
'22#.#18.225.59':445
'22#.#18.238.2':445
'22#.#18.69.32':445
'22#.#18.18.198':445
'22#.#18.238.71':445
'22#.#18.62.173':445
'22#.#18.110.213':445
'22#.#18.111.191':445
'22#.#18.4.105':445
'22#.#18.225.29':445
'22#.#18.140.100':445
'22#.#18.111.254':445
'22#.#18.3.124':445
'22#.#18.127.3':445
'22#.#18.179.88':139
'22#.#18.230.37':139
'22#.#18.51.230':139
'22#.#18.29.236':445
'22#.#18.10.194':139
'22#.#18.17.181':139
'22#.#18.40.82':139
'22#.#18.43.38':139
'22#.#18.160.29':139
'22#.#18.56.253':139
'22#.#18.214.127':139
'22#.#18.229.213':139
'22#.#18.68.182':445
'22#.#18.79.114':445
'22#.#18.41.80':445
'22#.#18.210.40':445
'22#.#18.84.180':445
'22#.#18.239.234':445
'22#.#18.114.4':445
'22#.#18.183.118':445
'22#.#18.68.182':139
'22#.#18.29.236':139
'22#.#18.7.55':445
'22#.#18.144.132':445
'22#.#18.157.143':445
'22#.#18.26.122':139
'22#.#18.29.115':139
'22#.#18.104.249':139
'22#.#18.26.103':139
'22#.#18.140.100':139
'22#.#18.238.2':139
'22#.#18.12.214':139
'22#.#18.9.132':139
'22#.#18.225.59':139
'22#.#18.85.79':139
'22#.#18.119.148':139
'22#.#18.159.52':139
'22#.#18.131.197':139
'22#.#18.225.29':139
'22#.#18.110.213':139
'22#.#18.111.191':139
'22#.#18.69.32':139
'22#.#18.129.26':139
'22#.#18.89.129':139
'22#.#18.62.173':139
'22#.#18.3.124':139
'22#.#18.127.3':139
'22#.#18.4.105':139
'22#.#18.18.198':139
'22#.#18.238.71':139
'22#.#18.111.254':139
'22#.#18.239.74':445
'22#.#18.3.192':445
'22#.#18.129.56':445
'22#.#18.164.189':445
'22#.#18.81.201':445
'22#.#18.36.89':445
'22#.#18.0.187':445
'22#.#18.7.21':445
'22#.#18.103.167':445
'22#.#18.87.212':445
'22#.#18.18.53':445
'22#.#18.213.196':445
'22#.#18.167.213':445
'22#.#18.201.127':445
'22#.#18.38.42':139
'22#.#18.228.157':139
'22#.#18.138.73':139
'22#.#18.129.103':139
'22#.#18.5.231':139
'22#.#18.109.42':139
'22#.#18.127.160':139
'22#.#18.97.7':139
'22#.#18.127.147':445
'22#.#18.183.138':139
'22#.#18.108.35':139
'22#.#18.147.63':139
'22#.#18.87.137':445
'22#.#18.14.104':445
'22#.#18.114.252':445
'22#.#18.171.254':445
'22#.#18.215.90':445
'22#.#18.79.79':445
'22#.#18.77.204':445
'22#.#18.141.51':445
'22#.#18.129.103':445
'22#.#18.5.231':445
'22#.#18.207.213':445
'22#.#18.32.84':445
'22#.#18.227.57':445
'22#.#18.179.160':445
'22#.#18.75.246':445
'22#.#18.231.41':445
'22#.#18.35.111':445
'22#.#18.48.6':445
'22#.#18.81.7':445
'22#.#18.162.12':445
'22#.#18.97.186':445
'22#.#18.128.192':445
'22#.#18.38.67':445
'22#.#18.161.182':445
'22#.#18.71.161':445
'22#.#18.203.140':445
'22#.#18.36.89':139
'22#.#18.0.187':139
'22#.#18.3.192':139
'22#.#18.127.147':139
'22#.#18.201.127':139
'22#.#18.81.201':139
'22#.#18.213.196':139
'22#.#18.167.213':139
'22#.#18.103.167':139
'22#.#18.129.56':139
'22#.#18.164.189':139
'22#.#18.18.53':139
'22#.#18.114.103':445
'22#.#18.72.7':445
'22#.#18.250.161':445
'22#.#18.102.168':445
'22#.#18.49.6':445
'22#.#18.44.95':445
'22#.#18.178.133':445
'22#.#18.105.91':139
'22#.#18.114.103':139
'22#.#18.105.91':445
'22#.#18.196.101':445
'22#.#18.149.202':445
'22#.#18.84.97':445
'22#.#18.7.21':139
'22#.#18.79.79':139
'22#.#18.77.204':139
'22#.#18.14.104':139
'22#.#18.38.67':139
'22#.#18.179.160':139
'22#.#18.215.90':139
'22#.#18.32.84':139
'22#.#18.227.57':139
'22#.#18.141.51':139
'22#.#18.114.252':139
'22#.#18.171.254':139
'22#.#18.207.213':139
'22#.#18.128.192':139
'22#.#18.81.7':139
'22#.#18.162.12':139
'22#.#18.75.246':139
'22#.#18.87.212':139
'22#.#18.87.137':139
'22#.#18.48.6':139
'22#.#18.71.161':139
'22#.#18.203.140':139
'22#.#18.97.186':139
'22#.#18.231.41':139
'22#.#18.35.111':139
'22#.#18.161.182':139
'22#.#18.49.35':445
'22#.#18.16.84':445
'22#.#18.114.100':445
'22#.#18.54.97':445
'22#.#18.49.154':445
'22#.#18.2.74':445
'22#.#18.54.86':445
'22#.#18.214.211':445
'22#.#18.143.36':445
'22#.#18.138.111':445
'22#.#18.201.128':445
'22#.#18.199.198':445
'22#.#18.101.37':445
'22#.#18.140.235':445
'22#.#18.253.163':445
'22#.#18.197.158':445
'22#.#18.159.70':445
'22#.#18.172.253':445
'22#.#18.7.101':445
'22#.#18.77.28':445
'22#.#18.242.47':445
'22#.#18.50.29':445
'22#.#18.58.69':445
'22#.#18.28.17':445
'22#.#18.70.173':445
'22#.#18.222.51':445
'22#.#18.207.51':445
'22#.#18.224.194':445
'22#.#18.106.215':445
'22#.#18.90.91':445
'22#.#18.72.43':445
'22#.#18.153.124':445
'22#.#18.198.136':445
'22#.#18.216.28':445
'22#.#18.92.216':445
'22#.#18.81.112':445
'22#.#18.2.155':445
'22#.#18.145.193':445
'22#.#18.29.25':445
'22#.#18.137.246':445
'22#.#18.177.164':445
'22#.#18.179.227':445
'22#.#18.139.172':445
'22#.#18.6.86':445
'22#.#18.185.116':445
'22#.#18.164.227':445
'22#.#18.53.144':445
'22#.#18.177.171':445
'22#.#18.71.177':445
'22#.#18.237.139':445
'22#.#18.39.211':445
'22#.#18.200.137':445
'22#.#18.16.84':139
'22#.#18.114.100':139
'22#.#18.54.97':139
'22#.#18.49.154':139
'22#.#18.2.74':139
'22#.#18.54.86':139
'22#.#18.101.37':139
'22#.#18.214.211':139
'22#.#18.143.36':139
'22#.#18.201.128':139
'22#.#18.199.198':139
'22#.#18.138.111':139
'22#.#18.140.235':139
'22#.#18.28.17':139
'22#.#18.77.28':139
'22#.#18.7.101':139
'22#.#18.70.173':139
'22#.#18.172.253':139
'22#.#18.253.163':139
'22#.#18.242.47':139
'22#.#18.50.29':139
'22#.#18.58.69':139
'22#.#18.159.70':139
'22#.#18.197.158':139
'22#.#18.222.51':139
'22#.#18.207.51':139
'22#.#18.224.194':139
'22#.#18.106.215':139
'22#.#18.90.91':139
'22#.#18.72.43':139
'22#.#18.153.124':139
'22#.#18.198.136':139
'22#.#18.216.28':139
'22#.#18.92.216':139
'22#.#18.81.112':139
'22#.#18.2.155':139
'22#.#18.145.193':139
'22#.#18.29.25':139
'22#.#18.137.246':139
'22#.#18.177.164':139
'22#.#18.179.227':139
'22#.#18.139.172':139
'22#.#18.6.86':139
'22#.#18.185.116':139
'22#.#18.164.227':139
'22#.#18.53.144':139
'22#.#18.177.171':139
'22#.#18.71.177':139
'22#.#18.237.139':139
'22#.#18.39.211':139
'22#.#18.200.137':139
'22#.#18.7.101':9988
'22#.#18.102.234':445
'22#.#18.157.160':445
'22#.#18.49.191':445
'22#.#18.64.119':445
'22#.#18.27.153':445
'22#.#18.165.233':445
'22#.#18.76.42':445
'22#.#18.25.234':445
'22#.#18.102.110':445
'22#.#18.95.150':445
'22#.#18.38.125':445
'22#.#18.0.42':445
'22#.#18.183.118':139
'22#.#18.84.180':139
'22#.#18.239.234':139
'22#.#18.114.4':139
'22#.#18.77.181':139
'22#.#18.18.234':139
'22#.#18.49.35':139
'22#.#18.7.55':139
'22#.#18.144.132':139
'22#.#18.157.143':139
'22#.#18.79.114':139
'22#.#18.41.80':139
'22#.#18.210.40':139
'22#.#18.228.240':445
'22#.#18.130.222':445
'22#.#18.11.178':445
'22#.#18.204.174':445
'22#.#18.4.10':445
'22#.#18.125.163':445
'22#.#18.161.150':445
'22#.#18.172.30':445
'22#.#18.77.181':445
'22#.#18.18.234':445
'22#.#18.87.139':445
'22#.#18.154.41':445
'22#.#18.199.189':445
'22#.#18.49.42':445
'22#.#18.189.209':445
'22#.#18.243.187':445
'22#.#18.125.12':445
'22#.#18.29.44':445
'22#.#18.46.198':445
'22#.#18.152.237':445
'22#.#18.99.129':445
'22#.#18.156.219':445
'22#.#18.42.184':445
'22#.#18.242.184':445
'22#.#18.151.189':445
'22#.#18.183.126':445
'22#.#18.27.153':139
'22#.#18.165.233':139
'22#.#18.102.234':139
'22#.#18.53.144':9988
'22#.#18.106.215':9988
'22#.#18.64.119':139
'22#.#18.38.125':139
'22#.#18.0.42':139
'22#.#18.76.42':139
'22#.#18.157.160':139
'22#.#18.49.191':139
'22#.#18.95.150':139
'22#.#18.39.211':9988
'22#.#18.2.74':9988
'22#.#18.54.86':9988
'22#.#18.114.100':9988
'22#.#18.70.173':9988
'22#.#18.77.28':9988
'22#.#18.253.163':9988
'22#.#18.54.97':9988
'22#.#18.185.116':9988
'22#.#18.237.139':9988
'22#.#18.214.211':9988
'22#.#18.138.111':9988
'22#.#18.6.86':9988
'22#.#18.25.234':139
'22#.#18.125.163':139
'22#.#18.161.150':139
'22#.#18.130.222':139
'22#.#18.42.184':139
'22#.#18.49.42':139
'22#.#18.4.10':139
'22#.#18.154.41':139
'22#.#18.199.189':139
'22#.#18.172.30':139
'22#.#18.11.178':139
'22#.#18.204.174':139
'22#.#18.87.139':139
'22#.#18.156.219':139
'22#.#18.46.198':139
'22#.#18.152.237':139
'22#.#18.189.209':139
'22#.#18.102.110':139
'22#.#18.228.240':139
'22#.#18.29.44':139
'22#.#18.151.189':139
'22#.#18.183.126':139
'22#.#18.99.129':139
'22#.#18.243.187':139
'22#.#18.125.12':139
'22#.#18.242.184':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней