Trojan.Starman.5342

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERa962.dir00\svchost.exe.mdmp 16325836412032228

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa962.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#8.178.226':139
'21#.#8.111.73':139
'21#.#8.92.197':139
'21#.#8.23.95':139
'21#.#8.147.119':139
'21#.#8.38.134':139
'21#.#8.80.92':139
'21#.#8.127.150':139
'21#.#8.71.235':445
'21#.#8.11.27':445
'21#.#8.41.53':139
'21#.#8.203.36':139
'21#.#8.149.202':139
'21#.#8.55.99':139
'21#.#8.51.152':445
'21#.#8.16.51':445
'21#.#8.61.93':445
'21#.#8.90.11':445
'21#.#8.33.68':445
'21#.#8.29.252':445
'21#.#8.88.230':445
'21#.#8.11.27':139
'21#.#8.124.53':139
'21#.#8.55.127':139
'21#.#8.37.91':445
'21#.#8.178.215':445
'21#.#8.71.235':139
'21#.#8.67.162':139
'21#.#8.52.40':139
'21#.#8.40.116':139
'21#.#8.32.191':139
'21#.#8.63.49':139
'21#.18.67.4':139
'21#.#8.177.204':139
'21#.#8.69.230':139
'21#.#8.22.207':139
'21#.#8.121.243':139
'21#.#8.123.57':139
'21#.#8.63.163':139
'21#.#8.230.70':139
'21#.#8.127.150':445
'21#.#8.23.95':445
'21#.#8.147.119':445
'21#.#8.38.134':445
'21#.#8.124.53':445
'21#.#8.55.127':445
'21#.#8.55.99':445
'21#.#8.178.226':445
'21#.#8.41.53':445
'21#.#8.203.36':445
'21#.#8.149.202':445
'21#.#8.111.73':445
'21#.#8.92.197':445
'21#.#8.80.92':445
'21#.#8.214.148':445
'21#.#8.201.142':139
'21#.#8.16.205':139
'21#.#8.214.148':139
'21#.#8.202.93':139
'21#.#8.36.222':139
'21#.#8.186.254':139
'21#.#8.90.11':139
'21#.#8.16.51':139
'21#.#8.61.93':139
'21#.#8.88.230':139
'21#.#8.33.68':139
'21#.#8.29.252':139
'21#.#8.51.152':139
'21#.#8.228.175':139
'21#.#8.106.2':139
'21#.#8.125.106':139
'21#.#8.202.125':139
'21#.#8.222.134':139
'21#.#8.218.199':139
'21#.#8.1.219':139
'21#.#8.84.192':139
'21#.#8.223.186':139
'21#.#8.77.159':139
'21#.#8.89.77':139
'21#.#8.170.153':139
'21#.#8.131.239':139
'21#.#8.70.181':139
'21#.#8.70.181':445
'21#.#8.223.186':445
'21#.#8.77.159':445
'21#.#8.84.192':445
'21#.#8.170.153':445
'21#.#8.131.239':445
'21#.#8.89.77':445
'21#.#8.186.254':445
'21#.#8.201.142':445
'21#.#8.16.205':445
'21#.#8.228.175':445
'21#.#8.202.93':445
'21#.#8.36.222':445
'21#.#8.202.125':445
'21#.#8.132.67':445
'21#.#8.95.14':445
'21#.18.3.31':445
'21#.#8.37.91':139
'21#.#8.178.215':139
'21#.#8.172.204':445
'21#.#8.253.25':445
'21#.#8.1.219':445
'21#.#8.106.2':445
'21#.#8.125.106':445
'21#.18.7.2':445
'21#.#8.222.134':445
'21#.#8.218.199':445
'21#.#8.122.120':139
'21#.#8.65.249':445
'21#.#8.123.130':445
'21#.#8.158.184':139
'21#.#8.233.155':139
'21#.#8.99.114':139
'21#.#8.56.140':445
'21#.#8.178.236':445
'21#.#8.27.226':445
'21#.#8.221.76':445
'21#.18.99.1':445
'21#.#8.204.62':445
'21#.#8.236.73':445
'21#.#8.53.86':139
'21#.#8.123.130':139
'21#.#8.56.140':139
'21#.18.99.1':139
'21#.#8.214.111':445
'21#.#8.204.197':445
'21#.#8.65.249':139
'21#.#8.204.62':139
'21#.#8.221.76':139
'21#.#8.28.71':139
'21#.#8.14.122':139
'21#.#8.236.73':139
'21#.#8.178.236':139
'21#.#8.27.226':139
'21#.#8.62.233':139
'21#.#8.149.213':139
'21#.#8.11.247':139
'21#.#8.119.103':139
'21#.#8.173.106':139
'21#.#8.49.13':139
'21#.#8.252.240':139
'21#.#8.62.153':139
'21#.#8.32.18':139
'21#.#8.73.245':139
'21#.#8.169.116':139
'21#.#8.50.16':139
'21#.#8.197.116':139
'21#.#8.72.15':139
'21#.#8.158.184':445
'21#.#8.233.155':445
'21#.#8.99.114':445
'21#.#8.28.71':445
'21#.#8.14.122':445
'21#.#8.53.86':445
'21#.#8.122.120':445
'21#.#8.31.16':139
'21#.#8.249.40':139
'21#.#8.135.246':139
'21#.#8.161.184':139
'21#.#8.96.116':139
'21#.#8.149.96':139
'21#.#8.43.156':445
'21#.#8.235.192':139
'21#.#8.97.251':139
'21#.#8.43.156':139
'21#.#8.228.73':139
'21#.#8.106.228':139
'21#.#8.141.88':139
'21#.#8.214.111':139
'21#.18.67.4':445
'21#.#8.67.162':445
'21#.#8.52.40':445
'21#.#8.204.197':139
'21#.#8.32.191':445
'21#.#8.63.49':445
'21#.#8.73.224':139
'21#.#8.13.227':139
'21#.#8.198.224':139
'21#.#8.120.191':139
'21#.18.9.91':139
'21#.#8.192.70':139
'21#.#8.227.99':139
'21#.#8.30.39':139
'21#.#8.111.214':139
'21#.#8.106.111':139
'21#.#8.223.106':139
'21#.#8.33.99':139
'21#.#8.250.245':139
'21#.#8.200.238':139
'21#.#8.200.238':445
'21#.#8.111.214':445
'21#.#8.106.111':445
'21#.#8.30.39':445
'21#.#8.33.99':445
'21#.#8.250.245':445
'21#.#8.223.106':445
'21#.#8.141.88':445
'21#.#8.235.192':445
'21#.#8.97.251':445
'21#.#8.73.224':445
'21#.#8.228.73':445
'21#.#8.106.228':445
'21#.#8.120.191':445
'21#.#8.63.163':445
'21#.#8.230.70':445
'21#.#8.69.230':445
'21#.#8.40.116':445
'21#.#8.177.204':445
'21#.#8.123.57':445
'21#.#8.22.207':445
'21#.#8.227.99':445
'21#.#8.13.227':445
'21#.#8.198.224':445
'21#.#8.121.243':445
'21#.18.9.91':445
'21#.#8.192.70':445
'21#.#8.192.229':445
'21#.#8.233.72':445
'21#.#8.203.38':445
'21#.#8.206.140':445
'21#.#8.0.217':445
'21#.#8.25.57':445
'21#.#8.163.153':445
'21#.#8.240.142':445
'21#.#8.14.83':445
'21#.#8.62.139':445
'21#.#8.95.177':445
'21#.#8.236.96':445
'21#.#8.240.175':445
'21#.#8.160.83':445
'21#.#8.91.121':445
'21#.#8.33.121':445
'21#.#8.30.167':445
'21#.#8.15.63':445
'21#.#8.10.115':445
'21#.#8.214.220':445
'21#.#8.43.193':445
'21#.#8.219.247':445
'21#.#8.243.219':445
'21#.#8.192.130':445
'21#.#8.210.112':445
'21#.#8.243.111':445
'21#.#8.247.158':445
'21#.#8.32.147':445
'21#.18.5.33':445
'21#.#8.138.5':445
'21#.18.56.2':445
'21#.#8.151.220':445
'21#.#8.147.106':445
'21#.#8.229.164':9988
'21#.#8.243.111':9988
'21#.#8.160.83':9988
'21#.#8.163.153':9988
'21#.#8.91.121':9988
'21#.#8.210.112':9988
'21#.#8.247.158':9988
'21#.#8.123.4':445
'21#.#8.177.1':445
'21#.#8.116.111':445
'21#.#8.92.19':445
'21#.#8.153.40':445
'21#.#8.230.107':445
'21#.#8.145.160':445
'21#.#8.188.67':445
'21#.#8.93.190':445
'21#.#8.102.92':445
'21#.#8.78.102':445
'21#.#8.114.188':445
'21#.#8.15.128':445
'21#.#8.61.155':445
'21#.#8.89.155':445
'21#.#8.160.83':139
'21#.#8.0.217':139
'21#.#8.206.140':139
'21#.#8.219.247':139
'21#.#8.243.219':139
'21#.#8.192.130':139
'21#.#8.25.57':139
'21#.#8.163.153':139
'21#.#8.95.177':139
'21#.#8.236.96':139
'21#.#8.192.229':139
'21#.#8.233.72':139
'21#.#8.203.38':139
'21#.#8.247.158':139
'21#.#8.89.155':139
'21#.#8.229.164':139
'21#.#8.10.115':139
'21#.#8.15.63':139
'21#.#8.10.167':139
'21#.#8.88.166':139
'21#.#8.91.121':139
'21#.#8.43.193':139
'21#.#8.210.112':139
'21#.#8.243.111':139
'21#.#8.214.220':139
'21#.#8.33.121':139
'21#.#8.30.167':139
'21#.#8.123.4':139
'21#.18.56.2':139
'21#.#8.151.220':139
'21#.#8.93.190':139
'21#.#8.102.92':139
'21#.#8.78.102':139
'21#.#8.147.106':139
'21#.#8.10.167':445
'21#.#8.88.166':445
'21#.#8.229.164':445
'21#.#8.32.147':139
'21#.18.5.33':139
'21#.#8.138.5':139
'21#.#8.61.155':139
'21#.#8.62.139':139
'21#.#8.153.40':139
'21#.#8.230.107':139
'21#.#8.240.175':139
'21#.#8.240.142':139
'21#.#8.14.83':139
'21#.#8.145.160':139
'21#.#8.188.67':139
'21#.#8.114.188':139
'21#.#8.15.128':139
'21#.#8.177.1':139
'21#.#8.116.111':139
'21#.#8.92.19':139
'21#.#8.126.234':139
'21#.#8.156.121':139
'21#.#8.143.100':139
'21#.#8.110.71':445
'21#.#8.122.194':445
'21#.#8.234.31':139
'21#.#8.37.197':139
'21#.#8.74.143':139
'21#.#8.172.240':139
'21#.#8.158.172':139
'21#.#8.249.142':139
'21#.#8.20.10':139
'21#.#8.91.217':139
'21#.#8.135.252':445
'21#.#8.21.77':445
'21#.#8.250.106':445
'21#.#8.57.195':445
'21#.18.67.3':445
'21#.#8.181.200':445
'21#.#8.218.75':445
'21#.#8.15.11':445
'21#.#8.174.220':445
'21#.#8.40.165':445
'21#.#8.28.192':445
'21#.#8.24.231':445
'21#.#8.173.251':445
'21#.#8.39.236':445
'21#.#8.125.169':445
'21#.#8.18.122':445
'21#.#8.32.152':445
'21#.#8.172.240':445
'21#.#8.158.172':445
'21#.#8.1.189':445
'21#.#8.38.167':445
'21#.18.3.31':139
'21#.#8.253.25':139
'21#.18.7.2':139
'21#.#8.172.204':139
'21#.#8.132.67':139
'21#.#8.95.14':139
'21#.#8.74.143':445
'21#.#8.32.152':139
'21#.#8.38.167':139
'21#.#8.234.31':445
'21#.#8.1.189':139
'21#.#8.125.169':139
'21#.#8.18.122':139
'21#.#8.126.234':445
'21#.#8.249.142':445
'21#.#8.20.10':445
'21#.#8.91.217':445
'21#.#8.156.121':445
'21#.#8.143.100':445
'21#.#8.37.197':445
'21#.#8.180.235':445
'21#.#8.49.253':139
'21#.#8.236.100':139
'21#.#8.180.235':139
'21#.#8.48.222':139
'21#.#8.162.122':139
'21#.#8.5.135':139
'21#.18.67.3':139
'21#.#8.250.106':139
'21#.#8.57.195':139
'21#.#8.15.11':139
'21#.#8.181.200':139
'21#.#8.218.75':139
'21#.#8.21.77':139
'21#.#8.172.120':139
'21#.#8.166.20':139
'21#.18.27.4':139
'21#.#8.83.152':139
'21#.#8.236.96':9988
'21#.#8.75.124':139
'21#.#8.224.194':139
'21#.#8.31.10':139
'21#.#8.142.207':139
'21#.#8.81.156':139
'21#.#8.98.108':139
'21#.#8.37.35':139
'21#.#8.59.72':139
'21#.#8.76.163':139
'21#.#8.76.163':445
'21#.#8.142.207':445
'21#.#8.81.156':445
'21#.#8.31.10':445
'21#.#8.37.35':445
'21#.#8.59.72':445
'21#.#8.98.108':445
'21#.#8.5.135':445
'21#.#8.49.253':445
'21#.#8.236.100':445
'21#.#8.172.120':445
'21#.#8.48.222':445
'21#.#8.162.122':445
'21#.#8.83.152':445
'21#.#8.174.220':139
'21#.#8.40.165':139
'21#.#8.28.192':139
'21#.#8.24.231':139
'21#.#8.173.251':139
'21#.#8.39.236':139
'21#.#8.135.252':139
'21#.#8.224.194':445
'21#.#8.166.20':445
'21#.18.27.4':445
'21#.#8.110.71':139
'21#.#8.122.194':139
'21#.#8.75.124':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней