Trojan.Starman.5969

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER725b.dir00\svchost.exe.mdmp 16325836412030152

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER725b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#8.252.223':139
'21#.#8.96.205':139
'21#.#8.223.248':139
'21#.#8.1.134':139
'21#.#8.249.93':139
'21#.#8.137.240':139
'21#.#8.86.138':139
'21#.#8.34.247':139
'21#.#8.158.213':139
'21#.#8.36.57':139
'21#.#8.121.224':139
'21#.#8.82.154':139
'21#.#8.136.216':139
'21#.#8.201.231':139
'21#.#8.34.69':139
'21#.#8.44.174':139
'21#.#8.75.77':139
'21#.#8.224.125':139
'21#.#8.88.206':139
'21#.#8.116.220':139
'21#.#8.80.114':139
'21#.#8.109.16':139
'21#.#8.138.44':139
'21#.#8.22.188':445
'21#.#8.45.69':139
'21#.#8.108.4':139
'21#.#8.72.17':139
'21#.#8.170.105':445
'21#.#8.82.150':445
'21#.#8.75.130':445
'21#.#8.146.36':445
'21#.#8.237.199':445
'21#.#8.107.21':139
'21#.#8.93.220':139
'21#.#8.198.56':139
'21#.#8.154.15':139
'21#.#8.41.111':139
'21#.#8.255.41':139
'21#.#8.135.1':139
'21#.#8.192.128':139
'21#.68.2.33':139
'21#.#8.186.197':139
'21#.#8.57.144':139
'21#.#8.125.49':139
'21#.#8.96.142':445
'21#.#8.127.192':445
'21#.#8.53.203':445
'21#.#8.13.203':445
'21#.#8.251.139':445
'21#.#8.20.107':445
'21#.#8.51.182':445
'21#.#8.91.192':445
'21#.#8.7.132':445
'21#.#8.191.224':445
'21#.#8.131.52':445
'21#.#8.50.117':445
'21#.#8.108.96':445
'21#.#8.0.148':445
'21#.#8.148.234':445
'21#.#8.147.148':445
'21#.#8.40.142':445
'21#.#8.106.101':445
'21#.#8.142.188':445
'21#.#8.18.64':445
'21#.#8.137.191':445
'21#.#8.38.52':445
'21#.#8.170.105':139
'21#.#8.82.150':139
'21#.#8.75.130':139
'21#.#8.146.36':139
'21#.#8.237.199':139
'21#.#8.12.233':139
'21#.#8.18.102':139
'21#.#8.235.192':139
'21#.#8.175.114':139
'21#.#8.223.36':139
'21#.#8.22.188':139
'21#.#8.57.153':445
'21#.#8.106.91':445
'21#.#8.238.120':445
'21#.#8.44.166':445
'21#.#8.163.63':445
'21#.#8.54.34':445
'21#.#8.3.188':445
'21#.#8.3.188':139
'21#.#8.133.198':445
'21#.#8.54.34':139
'21#.#8.234.206':139
'21#.#8.167.163':139
'21#.#8.91.45':139
'21#.#8.235.234':139
'21#.#8.46.188':139
'21#.#8.109.26':139
'21#.#8.75.144':139
'21#.#8.43.10':139
'21#.#8.104.26':139
'21#.#8.163.60':139
'21#.#8.6.123':139
'21#.#8.93.93':139
'21#.#8.28.157':139
'21#.#8.93.197':445
'21#.#8.93.197':139
'21#.#8.197.137':445
'21#.#8.135.196':139
'21#.#8.190.121':139
'21#.#8.197.19':139
'21#.#8.231.48':139
'21#.#8.19.231':139
'21#.#8.206.169':139
'21#.#8.88.155':139
'21#.#8.51.68':139
'21#.#8.179.16':139
'21#.#8.194.192':139
'21#.#8.16.195':139
'21#.#8.144.198':139
'21#.#8.97.249':139
'21#.#8.250.121':139
'21#.#8.124.9':139
'21#.#8.46.123':139
'21#.#8.192.214':139
'21#.#8.81.160':139
'21#.#8.173.191':139
'21#.#8.61.185':139
'21#.#8.211.155':139
'21#.#8.178.76':139
'21#.#8.51.230':139
'21#.#8.100.50':139
'21#.#8.74.155':139
'21#.#8.32.160':139
'21#.#8.227.80':139
'21#.#8.197.137':139
'21#.#8.75.77':445
'21#.#8.224.125':445
'21#.#8.88.206':445
'21#.#8.116.220':445
'21#.#8.80.114':445
'21#.#8.223.248':445
'21#.#8.252.223':445
'21#.#8.249.93':445
'21#.#8.121.224':445
'21#.#8.1.134':445
'21#.#8.136.216':445
'21#.#8.12.233':445
'21#.#8.18.102':445
'21#.#8.235.192':445
'21#.#8.175.114':445
'21#.#8.223.36':445
'21#.#8.201.231':445
'21#.#8.82.154':445
'21#.#8.44.174':445
'21#.#8.125.49':445
'21#.#8.34.69':445
'21#.#8.96.205':445
'21#.#8.135.1':445
'21#.#8.192.128':445
'21#.68.2.33':445
'21#.#8.186.197':445
'21#.#8.57.144':445
'21#.#8.45.69':445
'21#.#8.138.44':445
'21#.#8.72.17':445
'21#.#8.107.21':445
'21#.#8.108.4':445
'21#.#8.198.56':445
'21#.#8.137.240':445
'21#.#8.86.138':445
'21#.#8.34.247':445
'21#.#8.158.213':445
'21#.#8.36.57':445
'21#.#8.154.15':445
'21#.#8.93.220':445
'21#.#8.255.41':445
'21#.#8.109.16':445
'21#.#8.41.111':445
'21#.#8.235.31':445
'21#.#8.227.57':445
'21#.#8.96.231':445
'21#.#8.57.82':445
'21#.#8.228.254':445
'21#.#8.90.45':445
'21#.#8.48.235':445
'21#.68.8.80':445
'21#.#8.234.234':445
'21#.#8.38.217':445
'21#.#8.6.196':445
'21#.#8.34.82':445
'21#.#8.86.81':139
'21#.#8.218.45':139
'21#.#8.38.136':139
'21#.#8.66.62':139
'21#.#8.145.34':139
'21#.#8.44.229':445
'21#.#8.68.67':445
'21#.#8.101.8':445
'21#.#8.11.213':139
'21#.#8.62.52':139
'21#.#8.245.212':445
'21#.#8.200.73':445
'21#.#8.28.81':445
'21#.#8.23.240':445
'21#.#8.105.126':445
'21#.#8.30.66':445
'21#.#8.57.24':445
'21#.#8.93.226':445
'21#.#8.222.253':445
'21#.#8.235.186':445
'21#.#8.144.235':445
'21#.#8.121.223':445
'21#.#8.212.59':445
'21#.#8.68.176':445
'21#.#8.4.118':445
'21#.#8.113.189':445
'21#.#8.227.24':445
'21#.#8.134.251':445
'21#.#8.99.77':445
'21#.#8.110.177':445
'21#.#8.68.69':445
'21#.#8.1.102':445
'21#.#8.47.100':139
'21#.#8.245.212':139
'21#.#8.113.189':139
'21#.68.8.80':139
'21#.#8.234.234':139
'21#.#8.48.235':139
'21#.#8.68.176':139
'21#.#8.68.69':139
'21#.#8.212.59':139
'21#.#8.227.24':139
'21#.#8.4.118':139
'21#.#8.6.196':139
'21#.#8.101.8':139
'21#.#8.228.254':139
'21#.#8.34.82':139
'21#.#8.90.45':139
'21#.#8.44.229':139
'21#.#8.96.231':139
'21#.#8.38.217':139
'21#.#8.227.57':139
'21#.#8.68.67':139
'21#.#8.57.82':139
'21#.#8.1.102':139
'21#.#8.184.78':139
'21#.#8.87.184':139
'21#.#8.93.226':139
'21#.#8.222.253':139
'21#.#8.57.24':139
'21#.#8.67.86':139
'21#.#8.246.7':139
'21#.#8.86.71':139
'21#.#8.129.88':139
'21#.#8.158.17':139
'21#.#8.144.235':139
'21#.#8.121.223':139
'21#.#8.105.126':139
'21#.#8.99.77':139
'21#.#8.110.177':139
'21#.#8.134.251':139
'21#.#8.28.81':139
'21#.#8.235.186':139
'21#.#8.200.73':139
'21#.#8.30.66':139
'21#.#8.23.240':139
'21#.#8.20.107':139
'21#.#8.51.182':139
'21#.#8.91.192':139
'21#.#8.7.132':139
'21#.#8.191.224':139
'21#.#8.238.120':139
'21#.#8.57.153':139
'21#.#8.163.63':139
'21#.#8.38.52':139
'21#.#8.44.166':139
'21#.#8.127.192':139
'21#.#8.40.142':139
'21#.#8.106.101':139
'21#.#8.142.188':139
'21#.#8.18.64':139
'21#.#8.137.191':139
'21#.#8.53.203':139
'21#.#8.96.142':139
'21#.#8.251.139':139
'21#.#8.131.52':139
'21#.#8.13.203':139
'21#.#8.106.91':139
'21#.#8.17.190':445
'21#.#8.180.83':445
'21#.#8.225.124':445
'21#.#8.186.231':445
'21#.#8.55.153':445
'21#.#8.27.56':445
'21#.#8.32.27':445
'21#.#8.220.97':445
'21#.#8.231.52':445
'21#.#8.77.51':445
'21#.#8.18.13':445
'21#.#8.29.107':445
'21#.#8.103.131':445
'21#.#8.53.10':445
'21#.#8.133.198':139
'21#.#8.119.234':445
'21#.#8.126.29':445
'21#.#8.9.126':445
'21#.#8.160.214':445
'21#.#8.239.80':445
'21#.#8.202.212':445
'21#.#8.108.96':139
'21#.#8.62.52':445
'21#.#8.101.8':9988
'21#.#8.11.213':445
'21#.#8.86.81':445
'21#.#8.218.45':445
'21#.#8.53.10':139
'21#.#8.29.107':139
'21#.#8.119.234':139
'21#.#8.6.196':9988
'21#.#8.235.186':9988
'21#.#8.38.136':445
'21#.#8.158.17':445
'21#.#8.86.71':445
'21#.#8.129.88':445
'21#.#8.184.78':445
'21#.#8.87.184':445
'21#.#8.66.62':445
'21#.#8.145.34':445
'21#.#8.47.100':445
'21#.#8.67.86':445
'21#.#8.246.7':445
'21#.#8.103.131':139
'21#.#8.27.56':139
'21#.#8.32.27':139
'21#.#8.220.97':139
'21#.#8.231.52':139
'21#.#8.77.51':139
'21#.#8.0.148':139
'21#.#8.50.117':139
'21#.#8.147.148':139
'21#.#8.235.31':139
'21#.#8.148.234':139
'21#.#8.180.83':139
'21#.#8.126.29':139
'21#.#8.9.126':139
'21#.#8.160.214':139
'21#.#8.239.80':139
'21#.#8.202.212':139
'21#.#8.225.124':139
'21#.#8.17.190':139
'21#.#8.55.153':139
'21#.#8.18.13':139
'21#.#8.186.231':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней