Trojan.Starman.5692

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER3f1d.dir00\svchost.exe.mdmp 16325836412032224

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3f1d.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#6.123.41':139
'21#.#6.138.75':139
'21#.#6.248.160':139
'21#.#6.193.62':139
'21#.#6.116.19':139
'21#.36.5.68':139
'21#.#6.11.237':139
'21#.#6.176.223':139
'21#.#6.221.135':139
'21#.36.0.10':139
'21#.#6.60.160':139
'21#.#6.106.88':139
'21#.#6.89.147':139
'21#.#6.15.34':139
'21#.#6.46.223':445
'21#.#6.163.218':445
'21#.#6.104.100':139
'21#.#6.68.134':139
'21#.#6.57.237':139
'21#.36.9.15':139
'21#.36.64.9':139
'21#.#6.212.83':139
'21#.#6.193.62':445
'21#.#6.116.19':445
'21#.#6.60.160':445
'21#.#6.104.100':445
'21#.#6.68.134':445
'21#.#6.221.135':445
'21#.36.0.10':445
'21#.#6.138.75':445
'21#.#6.248.160':445
'21#.#6.123.41':445
'21#.#6.57.237':445
'21#.#6.12.83':139
'21#.#6.1.134':139
'21#.#6.182.57':139
'21#.#6.73.26':139
'21#.#6.142.163':139
'21#.36.9.15':445
'21#.36.64.9':445
'21#.#6.89.147':445
'21#.#6.15.34':445
'21#.#6.106.88':445
'21#.#6.49.166':139
'21#.#6.95.108':139
'21#.#6.176.32':139
'21#.#6.243.0':139
'21#.#6.245.222':139
'21#.#6.17.20':445
'21#.#6.180.94':445
'21#.#6.163.218':139
'21#.#6.58.227':139
'21#.#6.46.223':139
'21#.#6.190.8':139
'21#.#6.70.102':139
'21#.#6.150.114':139
'21#.#6.93.77':139
'21#.#6.24.161':139
'21#.#6.133.167':139
'21#.#6.10.147':139
'21#.36.9.10':139
'21#.#6.147.155':139
'21#.#6.226.222':139
'21#.#6.111.15':139
'21#.#6.249.41':445
'21#.#6.190.8':445
'21#.#6.243.0':445
'21#.36.9.10':445
'21#.#6.147.155':445
'21#.#6.10.147':445
'21#.#6.95.108':445
'21#.#6.58.227':445
'21#.#6.49.166':445
'21#.#6.245.222':445
'21#.#6.176.32':445
'21#.#6.111.15':445
'21#.36.60.0':445
'21#.#6.24.161':445
'21#.#6.0.187':445
'21#.#6.51.218':445
'21#.#6.61.40':445
'21#.#6.150.114':445
'21#.#6.226.222':445
'21#.#6.70.102':445
'21#.#6.133.167':445
'21#.#6.93.77':445
'21#.#6.232.209':445
'21#.#6.187.56':445
'21#.#6.66.59':445
'21#.#6.93.232':445
'21#.#6.64.94':445
'21#.#6.87.127':139
'21#.#6.33.167':139
'21#.#6.252.227':139
'21#.#6.190.63':445
'21#.36.57.7':445
'21#.#6.193.180':445
'21#.#6.117.215':445
'21#.#6.157.37':445
'21#.#6.92.178':445
'21#.#6.255.56':445
'21#.#6.161.188':445
'21#.#6.196.213':445
'21#.#6.251.4':445
'21#.#6.92.19':445
'21#.#6.38.37':445
'21#.#6.41.73':445
'21#.#6.49.82':139
'21#.#6.254.13':139
'21#.#6.238.208':139
'21#.#6.14.198':139
'21#.#6.26.248':139
'21#.#6.197.87':139
'21#.#6.20.238':139
'21#.#6.221.41':139
'21#.#6.224.205':139
'21#.#6.125.187':139
'21#.#6.80.222':139
'21#.#6.142.133':139
'21#.#6.43.105':139
'21#.#6.112.234':139
'21#.#6.67.50':139
'21#.#6.146.213':139
'21#.#6.8.238':139
'21#.#6.73.254':139
'21#.#6.132.235':139
'21#.#6.163.36':139
'21#.#6.90.71':139
'21#.#6.231.11':139
'21#.#6.203.204':139
'21#.#6.114.4':139
'21#.#6.20.165':139
'21#.#6.33.240':139
'21#.#6.137.173':139
'21#.#6.92.178':139
'21#.#6.117.215':139
'21#.#6.161.188':139
'21#.#6.57.119':139
'21#.#6.255.56':139
'21#.#6.34.26':139
'21#.#6.212.83':445
'21#.#6.73.26':445
'21#.#6.11.237':445
'21#.#6.176.223':445
'21#.36.5.68':445
'21#.#6.1.134':445
'21#.#6.82.226':139
'21#.#6.12.83':445
'21#.#6.142.163':445
'21#.#6.182.57':445
'21#.#6.157.37':139
'21#.#6.34.26':445
'21#.#6.33.240':445
'21#.#6.82.226':445
'21#.#6.190.63':139
'21#.36.57.7':139
'21#.#6.114.4':445
'21#.#6.57.119':445
'21#.#6.203.204':445
'21#.#6.137.173':445
'21#.#6.20.165':445
'21#.#6.187.56':139
'21#.#6.196.213':139
'21#.#6.251.4':139
'21#.#6.92.19':139
'21#.#6.38.37':139
'21#.#6.41.73':139
'21#.#6.66.59':139
'21#.#6.232.209':139
'21#.#6.64.94':139
'21#.#6.193.180':139
'21#.#6.93.232':139
'21#.#6.173.184':445
'21#.#6.56.232':445
'21#.#6.58.206':445
'21#.#6.121.176':445
'21#.36.1.41':445
'21#.#6.69.223':445
'21#.#6.176.192':445
'21#.#6.75.129':445
'21#.#6.155.103':445
'21#.#6.92.155':445
'21#.#6.140.251':445
'21#.36.8.67':139
'21#.36.20.8':139
'21#.#6.91.120':139
'21#.#6.198.66':139
'21#.#6.171.17':139
'21#.#6.174.67':445
'21#.#6.65.100':445
'21#.#6.42.193':139
'21#.#6.222.19':139
'21#.#6.51.222':139
'21#.#6.190.210':445
'21#.#6.122.41':445
'21#.#6.15.119':445
'21#.#6.101.135':445
'21#.#6.254.200':445
'21#.#6.62.12':445
'21#.36.3.1':445
'21#.#6.20.240':445
'21#.#6.138.179':445
'21#.#6.43.46':445
'21#.36.21.7':445
'21#.#6.179.17':445
'21#.#6.102.205':445
'21#.#6.25.117':445
'21#.#6.113.54':445
'21#.#6.169.225':445
'21#.#6.0.240':445
'21#.#6.123.61':445
'21#.#6.15.61':445
'21#.#6.44.227':445
'21#.#6.223.152':445
'21#.#6.81.47':445
'21#.#6.0.240':139
'21#.#6.169.225':139
'21#.#6.190.210':139
'21#.#6.69.223':139
'21#.#6.176.192':139
'21#.#6.223.152':139
'21#.#6.81.47':139
'21#.#6.25.117':139
'21#.#6.113.54':139
'21#.#6.102.205':139
'21#.#6.75.129':139
'21#.#6.121.176':139
'21#.36.1.41':139
'21#.#6.140.251':139
'21#.#6.65.100':139
'21#.#6.174.67':139
'21#.#6.155.103':139
'21#.#6.92.155':139
'21#.#6.56.232':139
'21#.#6.58.206':139
'21#.#6.173.184':139
'21#.#6.44.227':139
'21#.#6.19.231':139
'21#.#6.80.130':139
'21#.#6.205.151':139
'21#.36.3.1':139
'21#.#6.20.240':139
'21#.#6.73.137':139
'21#.#6.112.125':139
'21#.#6.147.86':139
'21#.#6.41.135':139
'21#.#6.162.52':139
'21#.#6.138.179':139
'21#.#6.254.200':139
'21#.#6.62.12':139
'21#.#6.179.17':139
'21#.#6.123.61':139
'21#.#6.15.61':139
'21#.#6.43.46':139
'21#.36.21.7':139
'21#.#6.15.119':139
'21#.#6.101.135':139
'21#.#6.122.41':139
'21#.#6.70.233':445
'21#.#6.25.177':445
'21#.#6.197.97':445
'21#.#6.4.129':445
'21#.#6.158.239':445
'21#.#6.247.107':445
'21#.#6.232.246':445
'21#.#6.134.8':445
'21#.#6.82.50':445
'21#.#6.2.239':445
'21#.#6.208.222':139
'21#.#6.7.194':139
'21#.#6.44.28':139
'21#.#6.44.174':139
'21#.#6.90.231':139
'21#.#6.229.90':139
'21#.#6.56.195':139
'21#.#6.123.253':139
'21#.36.11.6':139
'21#.#6.222.27':139
'21#.#6.87.137':139
'21#.#6.141.233':445
'21#.#6.17.20':139
'21#.#6.180.94':139
'21#.#6.208.222':445
'21#.#6.56.195':445
'21#.#6.123.253':445
'21#.#6.0.187':139
'21#.36.60.0':139
'21#.#6.61.40':139
'21#.#6.249.41':139
'21#.#6.51.218':139
'21#.36.11.6':445
'21#.#6.90.231':445
'21#.#6.229.90':445
'21#.#6.232.27':445
'21#.#6.221.141':445
'21#.#6.196.12':445
'21#.#6.222.27':445
'21#.#6.87.137':445
'21#.#6.44.28':445
'21#.#6.44.174':445
'21#.#6.7.194':445
'21#.#6.51.222':445
'21#.#6.42.193':445
'21#.#6.222.19':445
'21#.36.8.67':445
'21#.36.20.8':445
'21#.#6.58.206':9988
'21#.#6.56.232':9988
'21#.#6.140.251':9988
'21#.#6.65.100':9988
'21#.#6.174.67':9988
'21#.#6.91.120':445
'21#.#6.41.135':445
'21#.#6.162.52':445
'21#.#6.80.130':445
'21#.#6.205.151':445
'21#.#6.19.231':445
'21#.#6.198.66':445
'21#.#6.171.17':445
'21#.#6.112.125':445
'21#.#6.147.86':445
'21#.#6.73.137':445
'21#.#6.69.223':9988
'21#.#6.134.8':139
'21#.#6.247.107':139
'21#.#6.2.239':139
'21#.#6.25.177':139
'21#.#6.82.50':139
'21#.#6.196.12':139
'21#.#6.232.27':139
'21#.#6.221.141':139
'21#.#6.232.246':139
'21#.#6.141.233':139
'21#.#6.70.233':139
'21#.#6.81.47':9988
'21#.#6.123.61':9988
'21#.#6.102.205':9988
'21#.#6.0.240':9988
'21#.#6.113.54':9988
'21#.#6.158.239':139
'21#.#6.197.97':139
'21#.#6.4.129':139
'21#.#6.101.135':9988
'21#.#6.43.46':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней