Trojan.Starman.5659

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERcd35.dir00\svchost.exe.mdmp 16325836412032112

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERcd35.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#27.183.107':139
'21#.#27.244.69':139
'21#.#27.13.142':139
'21#.#27.190.65':139
'21#.#27.254.149':139
'21#.#27.163.69':139
'21#.#27.150.130':139
'21#.#27.0.149':139
'21#.#27.126.65':139
'21#.#27.218.128':139
'21#.#27.183.207':139
'21#.#27.90.175':139
'21#.#27.211.11':139
'21#.#27.246.213':139
'21#.#27.192.113':139
'21#.#27.164.28':139
'21#.#27.90.11':139
'21#.#27.5.222':139
'21#.#27.186.38':139
'21#.#27.175.126':139
'21#.#27.132.84':139
'21#.#27.136.186':139
'21#.#27.6.199':139
'21#.#27.36.37':445
'21#.#27.102.130':445
'21#.#27.70.161':445
'21#.#27.21.217':139
'21#.#27.157.118':139
'21#.#27.78.75':445
'21#.#27.147.32':445
'21#.#27.244.147':445
'21#.#27.123.83':445
'21#.#27.161.62':445
'21#.#27.89.19':445
'21#.#27.87.55':139
'21#.#27.252.27':139
'21#.#27.169.251':139
'21#.#27.222.237':139
'21#.#27.124.124':139
'21#.#27.244.80':139
'21#.#27.222.170':139
'21#.#27.109.87':139
'21#.#27.55.1':139
'21#.#27.139.74':139
'21#.#27.217.126':139
'21#.#27.25.130':139
'21#.#27.83.64':139
'21#.#27.232.101':445
'21#.#27.10.229':445
'21#.#27.208.249':445
'21#.#27.221.197':445
'21#.#27.249.220':445
'21#.#27.250.197':445
'21#.#27.194.195':445
'21#.#27.220.157':445
'21#.#27.224.237':445
'21#.#27.233.250':445
'21#.#27.114.234':445
'21#.#27.198.132':445
'21#.#27.47.222':445
'21#.#27.8.71':445
'21#.#27.252.40':445
'21#.#27.194.131':445
'21#.#27.158.150':445
'21#.#27.0.204':445
'21#.#27.84.146':445
'21#.#27.31.140':445
'21#.#27.98.182':445
'21#.#27.33.246':445
'21#.#27.198.252':445
'21#.#27.89.19':139
'21#.#27.123.83':139
'21#.#27.161.62':139
'21#.#27.102.130':139
'21#.#27.78.75':139
'21#.#27.147.32':139
'21#.#27.100.82':139
'21#.#27.180.32':139
'21#.#27.81.204':139
'21#.#27.244.147':139
'21#.#27.203.244':139
'21#.#27.70.161':139
'21#.#27.112.117':445
'21#.#27.19.202':445
'21#.#27.4.63':445
'21#.#27.98.62':445
'21#.#27.169.110':445
'21#.#27.136.206':445
'21#.#27.24.194':445
'21#.#27.36.37':139
'21#.#27.13.22':445
'21#.#27.28.1':445
'21#.#27.240.71':445
'21#.#27.62.202':139
'21#.#27.162.62':139
'21#.#27.153.66':139
'21#.#27.58.22':139
'21#.#27.222.186':139
'21#.#27.14.224':139
'21#.#27.242.154':139
'21#.#27.7.242':139
'21#.#27.155.34':139
'21#.#27.162.19':139
'21#.#27.12.116':139
'21#.#27.224.151':139
'21#.#27.178.119':139
'21#.#27.144.17':139
'21#.#27.204.218':139
'21#.#27.223.103':139
'21#.#27.127.62':139
'21#.#27.161.143':139
'21#.#27.97.126':139
'21#.#27.102.4':139
'21#.#27.156.104':139
'21#.#27.173.161':139
'21#.#27.154.173':139
'21#.#27.102.160':139
'21#.#27.103.219':139
'21#.#27.193.0':139
'21#.#27.124.190':139
'21#.#27.248.33':139
'21#.#27.221.29':139
'21#.#27.75.125':139
'21#.#27.17.147':139
'21#.#27.54.23':139
'21#.#27.182.215':139
'21#.#27.124.130':139
'21#.#27.49.119':139
'21#.#27.23.9':139
'21#.#27.181.152':139
'21#.#27.38.92':139
'21#.#27.224.72':139
'21#.#27.76.118':139
'21#.#27.115.1':139
'21#.#27.43.250':139
'21#.#27.26.105':139
'21#.#27.198.7':139
'21#.#27.79.115':139
'21#.#27.116.169':139
'21#.#27.221.12':139
'21#.#27.175.126':445
'21#.#27.90.175':445
'21#.#27.186.38':445
'21#.#27.6.199':445
'21#.#27.132.84':445
'21#.#27.190.65':445
'21#.#27.244.69':445
'21#.#27.163.69':445
'21#.#27.183.107':445
'21#.#27.254.149':445
'21#.#27.13.142':445
'21#.#27.136.186':445
'21#.#27.180.32':445
'21#.#27.83.64':445
'21#.#27.100.82':445
'21#.#27.203.244':445
'21#.#27.81.204':445
'21#.#27.164.28':445
'21#.#27.246.213':445
'21#.#27.5.222':445
'21#.#27.211.11':445
'21#.#27.90.11':445
'21#.#27.192.113':445
'21#.#27.55.1':445
'21#.#27.87.55':445
'21#.#27.109.87':445
'21#.#27.25.130':445
'21#.#27.139.74':445
'21#.#27.21.217':445
'21#.#27.97.33':139
'21#.#27.13.90':139
'21#.#27.110.24':139
'21#.#27.157.118':445
'21#.#27.24.85':139
'21#.#27.217.126':445
'21#.#27.150.130':445
'21#.#27.0.149':445
'21#.#27.126.65':445
'21#.#27.218.128':445
'21#.#27.183.207':445
'21#.#27.124.124':445
'21#.#27.169.251':445
'21#.#27.222.170':445
'21#.#27.252.27':445
'21#.#27.244.80':445
'21#.#27.222.237':445
'21#.#27.123.153':445
'21#.#27.214.188':445
'21#.#27.124.231':445
'21#.#27.59.251':445
'21#.#27.140.46':445
'21#.#27.14.193':445
'21#.#27.165.122':445
'21#.#27.76.165':445
'21#.#27.194.117':445
'21#.#27.130.55':445
'21#.#27.178.117':445
'21#.#27.220.155':445
'21#.#27.2.20':139
'21#.#27.247.82':445
'21#.#27.52.207':139
'21#.#27.202.232':139
'21#.#27.64.246':139
'21#.#27.60.10':445
'21#.#27.86.247':445
'21#.#27.180.210':445
'21#.#27.10.2':445
'21#.#27.110.66':445
'21#.#27.23.23':445
'21#.#27.250.198':445
'21#.#27.58.251':445
'21#.#27.37.71':445
'21#.#27.185.86':445
'21#.#27.179.203':445
'21#.#27.209.58':445
'21#.#27.242.178':445
'21#.#27.162.242':445
'21#.#27.136.44':445
'21#.#27.251.208':445
'21#.#27.159.218':445
'21#.#27.164.136':445
'21#.#27.103.107':445
'21#.#27.121.103':445
'21#.#27.107.157':445
'21#.#27.64.44':445
'21#.#27.245.148':445
'21#.#27.41.190':445
'21#.#27.36.195':445
'21#.#27.194.143':445
'21#.#27.6.90':445
'21#.#27.183.174':445
'21#.#27.243.246':445
'21#.#27.83.100':139
'21#.#27.178.117':139
'21#.#27.194.117':139
'21#.#27.130.55':139
'21#.#27.214.188':139
'21#.#27.14.193':139
'21#.#27.165.122':139
'21#.#27.107.157':139
'21#.#27.103.107':139
'21#.#27.245.148':139
'21#.#27.76.165':139
'21#.#27.64.44':139
'21#.#27.123.153':139
'21#.#27.60.10':139
'21#.#27.23.23':139
'21#.#27.86.247':139
'21#.#27.59.251':139
'21#.#27.10.2':139
'21#.#27.180.210':139
'21#.#27.140.46':139
'21#.#27.124.231':139
'21#.#27.220.155':139
'21#.#27.247.82':139
'21#.#27.110.66':139
'21#.#27.159.218':139
'21#.#27.136.44':139
'21#.#27.251.208':139
'21#.#27.58.251':139
'21#.#27.209.58':139
'21#.#27.242.178':139
'21#.#27.238.219':139
'21#.#27.100.228':139
'21#.#27.108.136':139
'21#.#27.162.242':139
'21#.#27.165.49':139
'21#.#27.250.198':139
'21#.#27.243.246':139
'21#.#27.6.90':139
'21#.#27.183.174':139
'21#.#27.121.103':139
'21#.#27.41.190':139
'21#.#27.36.195':139
'21#.#27.179.203':139
'21#.#27.37.71':139
'21#.#27.185.86':139
'21#.#27.194.143':139
'21#.#27.164.136':139
'21#.#27.224.237':139
'21#.#27.194.195':139
'21#.#27.114.234':139
'21#.#27.250.197':139
'21#.#27.233.250':139
'21#.#27.220.157':139
'21#.#27.112.117':139
'21#.#27.19.202':139
'21#.#27.4.63':139
'21#.#27.98.62':139
'21#.#27.169.110':139
'21#.#27.10.229':139
'21#.#27.98.182':139
'21#.#27.84.146':139
'21#.#27.198.252':139
'21#.#27.0.204':139
'21#.#27.33.246':139
'21#.#27.31.140':139
'21#.#27.208.249':139
'21#.#27.232.101':139
'21#.#27.249.220':139
'21#.#27.198.132':139
'21#.#27.221.197':139
'21#.#27.121.157':445
'21#.#27.193.205':445
'21#.#27.172.92':445
'21#.#27.38.218':445
'21#.#27.42.122':445
'21#.#27.116.127':445
'21#.#27.144.158':445
'21#.#27.66.186':445
'21#.#27.177.186':445
'21#.#27.6.64':445
'21#.#27.28.96':445
'21#.#27.2.59':445
'21#.#27.13.22':139
'21#.#27.24.194':139
'21#.#27.240.71':139
'21#.#27.136.206':139
'21#.#27.28.1':139
'21#.#27.93.124':445
'21#.#27.255.110':445
'21#.#27.198.20':445
'21#.#27.212.249':445
'21#.#27.74.130':445
'21#.#27.2.248':445
'21#.#27.8.71':139
'21#.#27.194.117':9988
'21#.#27.165.122':9988
'21#.#27.178.117':9988
'21#.#27.14.193':9988
'21#.#27.130.55':9988
'21#.#27.76.165':9988
'21#.#27.185.86':9988
'21#.#27.209.58':9988
'21#.#27.194.143':9988
'21#.#27.243.246':9988
'21#.#27.6.90':9988
'21#.#27.123.153':9988
'21#.#27.100.228':445
'21#.#27.83.100':445
'21#.#27.238.219':445
'21#.#27.165.49':445
'21#.#27.108.136':445
'21#.#27.202.232':445
'21#.#27.214.188':9988
'21#.#27.86.247':9988
'21#.#27.2.20':445
'21#.#27.64.246':445
'21#.#27.52.207':445
'21#.#27.28.96':139
'21#.#27.177.186':139
'21#.#27.6.64':139
'21#.#27.193.205':139
'21#.#27.116.127':139
'21#.#27.144.158':139
'21#.#27.252.40':139
'21#.#27.47.222':139
'21#.#27.158.150':139
'21#.#27.66.186':139
'21#.#27.194.131':139
'21#.#27.121.157':139
'21#.#27.2.248':139
'21#.#27.212.249':139
'21#.#27.93.124':139
'21#.#27.242.178':9988
'21#.#27.74.130':139
'21#.#27.255.110':139
'21#.#27.42.122':139
'21#.#27.172.92':139
'21#.#27.38.218':139
'21#.#27.198.20':139
'21#.#27.2.59':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней