Trojan.Starman.4973

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER7e06.dir00\svchost.exe.mdmp 16325836412029228

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7e06.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#9.33.158':445
'22#.#9.34.37':445
'22#.#9.181.83':445
'22#.#9.108.9':445
'22#.#9.42.128':445
'22#.#9.116.199':139
'22#.#9.3.184':139
'22#.#9.37.45':139
'22#.#9.75.178':139
'22#.#9.58.244':445
'22#.#9.33.158':139
'22#.#9.34.37':139
'22#.#9.181.83':139
'22#.#9.108.9':139
'22#.#9.42.128':139
'22#.#9.211.177':445
'22#.#9.31.154':445
'22#.69.9.34':445
'22#.#9.23.205':445
'22#.#9.168.235':139
'22#.#9.30.120':139
'22#.#9.20.103':139
'22#.#9.231.44':139
'22#.#9.103.97':139
'22#.#9.117.72':139
'22#.#9.67.109':139
'22#.#9.225.199':139
'22#.#9.180.57':139
'22#.#9.54.118':139
'22#.#9.194.88':139
'22#.#9.34.226':139
'22#.#9.203.143':139
'22#.#9.34.168':139
'22#.69.12.5':139
'22#.#9.233.59':139
'22#.#9.207.162':139
'22#.#9.229.134':139
'22#.#9.98.249':139
'22#.#9.162.106':139
'22#.#9.185.73':445
'22#.#9.196.184':445
'22#.#9.156.34':445
'22#.#9.111.219':445
'22#.#9.133.196':445
'22#.#9.1.157':445
'22#.#9.253.120':445
'22#.#9.142.97':445
'22#.#9.184.50':445
'22#.#9.49.173':445
'22#.#9.165.54':445
'22#.#9.219.117':445
'22#.#9.150.94':445
'22#.#9.56.181':445
'22#.#9.64.128':445
'22#.#9.92.127':445
'22#.#9.47.30':445
'22#.#9.213.90':445
'22#.#9.148.225':445
'22#.#9.223.111':445
'22#.#9.89.19':445
'22#.#9.186.104':445
'22#.#9.110.139':445
'22#.#9.18.181':445
'22#.69.9.34':139
'22#.#9.31.154':139
'22#.#9.58.244':139
'22#.#9.23.205':139
'22#.#9.211.177':139
'22#.#9.109.222':445
'22#.#9.229.50':445
'22#.#9.10.145':445
'22#.#9.182.164':445
'22#.#9.94.182':445
'22#.#9.78.88':445
'22#.#9.27.112':445
'22#.#9.32.101':445
'22#.#9.156.15':445
'22#.#9.234.208':445
'22#.#9.113.49':445
'22#.#9.78.224':445
'22#.#9.82.109':445
'22#.#9.49.196':445
'22#.#9.204.220':445
'22#.#9.77.235':445
'22#.#9.175.77':445
'22#.#9.51.78':445
'22#.#9.63.218':445
'22#.#9.213.67':445
'22#.#9.210.140':445
'22#.#9.192.11':445
'22#.#9.67.109':445
'22#.#9.225.199':445
'22#.#9.111.76':445
'22#.#9.170.125':445
'22#.#9.25.156':445
'22#.#9.125.155':445
'22#.#9.12.39':445
'22#.#9.182.175':139
'22#.#9.82.106':445
'22#.69.10.5':445
'22#.#9.172.182':445
'22#.#9.243.168':445
'22#.#9.27.82':445
'22#.#9.142.192':445
'22#.#9.162.7':445
'22#.#9.6.152':445
'22#.#9.61.79':445
'22#.#9.182.175':445
'22#.#9.82.106':139
'22#.69.10.5':139
'22#.#9.172.182':139
'22#.#9.243.168':139
'22#.#9.27.82':139
'22#.#9.142.192':139
'22#.#9.162.7':139
'22#.#9.6.152':139
'22#.#9.61.79':139
'22#.#9.204.220':139
'22#.#9.51.78':139
'22#.#9.113.49':139
'22#.#9.78.224':139
'22#.#9.63.218':139
'22#.#9.37.45':445
'22#.#9.75.178':445
'22#.#9.77.235':139
'22#.#9.175.77':139
'22#.#9.49.196':139
'22#.#9.111.76':139
'22#.#9.125.155':139
'22#.#9.210.140':139
'22#.#9.192.11':139
'22#.#9.12.39':139
'22#.#9.213.67':139
'22#.#9.82.109':139
'22#.#9.170.125':139
'22#.#9.25.156':139
'22#.#9.116.199':445
'22#.#9.231.44':445
'22#.#9.103.97':445
'22#.#9.229.134':445
'22#.#9.194.88':445
'22#.#9.30.120':445
'22#.#9.180.57':445
'22#.#9.54.118':445
'22#.#9.20.103':445
'22#.#9.117.72':445
'22#.#9.207.162':445
'22#.#9.34.168':445
'22#.69.12.5':445
'22#.#9.3.184':445
'22#.#9.168.235':445
'22#.#9.34.226':445
'22#.#9.98.249':445
'22#.#9.162.106':445
'22#.#9.203.143':445
'22#.#9.233.59':445
'22#.#9.196.18':445
'22#.#9.131.37':445
'22#.#9.120.186':445
'22#.#9.184.254':139
'22#.#9.16.185':139
'22#.#9.250.156':445
'22#.#9.118.224':445
'22#.#9.226.249':445
'22#.#9.22.155':445
'22#.#9.190.190':445
'22#.#9.254.53':139
'22#.#9.238.160':139
'22#.#9.177.105':139
'22#.#9.201.137':139
'22#.#9.8.216':139
'22#.#9.29.35':139
'22#.#9.6.193':139
'22#.#9.237.91':139
'22#.#9.108.64':139
'22#.#9.103.108':139
'22#.#9.109.92':445
'22#.#9.194.114':445
'22#.#9.56.177':445
'22#.#9.100.45':445
'22#.#9.115.100':445
'22#.#9.135.61':445
'22#.#9.180.87':445
'22#.#9.224.99':445
'22#.#9.125.134':445
'22#.#9.51.184':445
'22#.#9.39.100':445
'22#.#9.46.66':445
'22#.#9.215.45':445
'22#.#9.76.144':445
'22#.#9.214.187':445
'22#.69.5.8':445
'22#.#9.73.112':445
'22#.#9.54.191':445
'22#.#9.176.155':445
'22#.#9.52.50':445
'22#.69.5.8':139
'22#.#9.176.155':139
'22#.#9.46.66':139
'22#.#9.215.45':139
'22#.#9.52.50':139
'22#.#9.39.100':139
'22#.#9.100.45':139
'22#.#9.73.112':139
'22#.#9.54.191':139
'22#.#9.214.187':139
'22#.#9.120.186':139
'22#.#9.118.224':139
'22#.#9.22.155':139
'22#.#9.190.190':139
'22#.#9.131.37':139
'22#.#9.109.92':139
'22#.#9.76.144':139
'22#.#9.250.156':139
'22#.#9.226.249':139
'22#.#9.115.100':139
'22#.69.2.51':139
'22#.#9.59.235':139
'22#.#9.58.116':139
'22#.#9.189.79':139
'22#.#9.167.119':139
'22#.#9.84.68':139
'22#.#9.77.178':139
'22#.#9.174.167':139
'22#.#9.147.174':139
'22#.#9.116.216':139
'22#.#9.135.61':139
'22#.#9.125.134':139
'22#.#9.194.114':139
'22#.#9.56.177':139
'22#.#9.51.184':139
'22#.#9.224.99':139
'22#.#9.71.209':139
'22#.#9.180.87':139
'22#.#9.229.160':139
'22#.#9.196.184':139
'22#.#9.133.196':139
'22#.#9.111.219':139
'22#.#9.185.73':139
'22#.#9.142.97':139
'22#.#9.253.120':139
'22#.#9.223.111':139
'22#.#9.184.50':139
'22#.#9.1.157':139
'22#.#9.156.34':139
'22#.#9.219.117':139
'22#.#9.64.128':139
'22#.#9.56.181':139
'22#.#9.165.54':139
'22#.#9.213.90':139
'22#.#9.47.30':139
'22#.#9.49.173':139
'22#.#9.148.225':139
'22#.#9.92.127':139
'22#.#9.182.164':139
'22#.#9.186.104':139
'22#.#9.201.240':445
'22#.#9.18.181':139
'22#.#9.89.19':139
'22#.#9.158.103':445
'22#.#9.58.104':445
'22#.#9.29.24':445
'22#.#9.54.208':445
'22#.#9.5.136':445
'22#.#9.110.139':139
'22#.#9.10.145':139
'22#.#9.78.88':139
'22#.#9.94.182':139
'22#.#9.229.50':139
'22#.#9.156.15':139
'22#.#9.32.101':139
'22#.#9.109.222':139
'22#.#9.234.208':139
'22#.#9.27.112':139
'22#.#9.201.137':445
'22#.#9.8.216':445
'22#.#9.84.68':445
'22#.#9.77.178':445
'22#.#9.238.160':445
'22#.#9.108.64':445
'22#.#9.103.108':445
'22#.#9.177.105':445
'22#.#9.29.35':445
'22#.#9.147.174':445
'22#.#9.71.209':445
'22#.#9.58.116':445
'22#.#9.229.160':445
'22#.#9.116.216':445
'22#.#9.189.79':445
'22#.#9.167.119':445
'22#.#9.174.167':445
'22#.69.2.51':445
'22#.#9.59.235':445
'22#.#9.6.193':445
'22#.#9.158.103':139
'22#.#9.54.208':139
'22#.#9.16.185':9988
'22#.#9.201.240':139
'22#.#9.5.136':139
'22#.#9.196.18':139
'22#.#9.150.94':139
'22#.#9.58.104':139
'22#.#9.29.24':139
'22#.#9.184.254':9988
'22#.#9.184.254':445
'22#.#9.16.185':445
'22#.#9.237.91':445
'22#.#9.254.53':445
'22#.#9.118.224':9988
'22#.#9.6.193':9988
'22#.#9.237.91':9988
'22#.#9.100.45':9988
'22#.#9.58.116':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней