Trojan.Starman.5992

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER2c4b.dir00\svchost.exe.mdmp 16325836412032236

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2c4b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#20.23.169':445
'21#.#20.242.203':445
'21#.#20.53.66':445
'21#.#20.40.143':445
'21#.#20.0.106':445
'21#.#20.47.143':445
'21#.#20.201.229':445
'21#.#20.192.202':445
'21#.#20.191.165':445
'21#.#20.181.69':445
'21#.#20.29.0':445
'21#.#20.229.126':445
'21#.#20.126.215':445
'21#.#20.191.149':445
'21#.#20.36.162':445
'21#.#20.239.122':445
'21#.#20.123.42':445
'21#.#20.26.144':445
'21#.#20.106.254':445
'21#.#20.36.223':445
'21#.#20.64.190':445
'21#.#20.17.83':445
'21#.#20.245.136':445
'21#.#20.25.115':445
'21#.#20.101.196':445
'21#.#20.135.246':139
'21#.#20.81.58':139
'21#.#20.215.32':139
'21#.#20.110.60':139
'21#.#20.79.240':139
'21#.#20.175.79':139
'21#.#20.68.116':139
'21#.#20.13.102':139
'21#.#20.34.222':445
'21#.#20.112.20':139
'21#.#20.4.176':139
'21#.#20.116.81':139
'21#.#20.34.222':139
'21#.#20.109.9':445
'21#.#20.56.227':445
'21#.#20.102.174':445
'21#.#20.55.80':445
'21#.#20.148.55':445
'21#.#20.75.229':445
'21#.#20.10.87':445
'21#.#20.34.37':445
'21#.#20.22.249':445
'21#.#20.35.76':445
'21#.#20.30.184':445
'21#.#20.22.31':445
'21#.#20.239.122':139
'21#.#20.245.136':139
'21#.#20.25.115':139
'21#.#20.106.254':139
'21#.#20.191.149':139
'21#.#20.36.162':139
'21#.#20.17.83':139
'21#.#20.126.215':139
'21#.#20.40.143':139
'21#.#20.101.196':139
'21#.#20.36.223':139
'21#.#20.64.190':139
'21#.#20.26.144':139
'21#.#20.250.116':445
'21#.#20.50.195':445
'21#.#20.95.245':445
'21#.#20.28.119':445
'21#.#20.202.28':445
'21#.#20.11.113':445
'21#.#20.131.220':139
'21#.#20.12.28':139
'21#.#20.123.42':139
'21#.#20.11.175':445
'21#.#20.184.232':445
'21#.#20.60.59':445
'21#.#20.102.174':139
'21#.#20.35.76':139
'21#.#20.30.184':139
'21#.#20.75.229':139
'21#.#20.109.9':139
'21#.#20.56.227':139
'21#.#20.22.249':139
'21#.#20.131.220':445
'21#.#20.12.28':445
'21#.#20.22.31':139
'21#.#20.10.87':139
'21#.#20.34.37':139
'21#.#20.148.55':139
'21#.#20.242.203':139
'21#.#20.53.66':139
'21#.#20.181.69':139
'21#.#20.0.106':139
'21#.#20.47.143':139
'21#.#20.23.169':139
'21#.#20.192.202':139
'21#.#20.191.165':139
'21#.#20.55.80':139
'21#.#20.29.0':139
'21#.#20.229.126':139
'21#.#20.201.229':139
'21#.#20.110.60':445
'21#.#20.211.92':445
'21#.#20.114.53':445
'21#.#20.237.9':445
'21#.#20.229.127':445
'21#.#20.176.53':445
'21#.#20.98.253':445
'21#.#20.11.101':445
'21#.#20.79.45':445
'21#.#20.167.78':445
'21#.#20.40.145':445
'21#.#20.115.194':445
'21#.#20.244.6':445
'21#.#20.201.119':445
'21#.#20.119.190':445
'21#.#20.239.119':445
'21#.#20.173.182':445
'21#.#20.90.48':445
'21#.#20.33.245':445
'21#.#20.201.207':445
'21#.#20.87.127':445
'21#.#20.121.184':445
'21#.#20.179.43':445
'21#.#20.128.21':445
'21#.#20.223.44':445
'21#.#20.250.222':445
'21#.#20.79.59':139
'21#.#20.158.122':139
'21#.#20.153.158':139
'21#.#20.137.224':139
'21#.#20.212.227':139
'21#.#20.119.7':139
'21#.#20.134.75':139
'21#.#20.55.249':139
'21#.#20.155.122':139
'21#.#20.35.153':139
'21#.#20.145.179':139
'21#.#20.233.29':139
'21#.#20.79.179':445
'21#.#20.174.65':445
'21#.#20.25.49':445
'21#.#20.53.64':445
'21#.#20.46.167':445
'21#.#20.81.46':445
'21#.#20.206.80':445
'21#.#20.14.49':445
'21#.#20.122.248':445
'21#.#20.43.94':445
'21#.#20.40.63':445
'21#.#20.183.58':445
'21#.#20.152.83':445
'21#.#20.173.182':139
'21#.#20.128.21':139
'21#.#20.223.44':139
'21#.#20.201.207':139
'21#.#20.119.190':139
'21#.#20.239.119':139
'21#.#20.179.43':139
'21#.#20.201.119':139
'21#.#20.229.127':139
'21#.#20.250.222':139
'21#.#20.87.127':139
'21#.#20.121.184':139
'21#.#20.33.245':139
'21#.#20.81.58':445
'21#.#20.215.32':445
'21#.#20.112.20':445
'21#.#20.79.240':445
'21#.#20.175.79':445
'21#.#20.135.246':445
'21#.#20.13.102':445
'21#.#20.212.219':139
'21#.#20.90.48':139
'21#.#20.4.176':445
'21#.#20.116.81':445
'21#.#20.68.116':445
'21#.#20.53.64':139
'21#.#20.40.63':139
'21#.#20.183.58':139
'21#.#20.206.80':139
'21#.#20.174.65':139
'21#.#20.25.49':139
'21#.#20.43.94':139
'21#.#20.79.179':139
'21#.#20.212.219':445
'21#.#20.152.83':139
'21#.#20.14.49':139
'21#.#20.122.248':139
'21#.#20.81.46':139
'21#.#20.114.53':139
'21#.#20.237.9':139
'21#.#20.40.145':139
'21#.#20.176.53':139
'21#.#20.98.253':139
'21#.#20.211.92':139
'21#.#20.79.45':139
'21#.#20.167.78':139
'21#.#20.46.167':139
'21#.#20.115.194':139
'21#.#20.244.6':139
'21#.#20.11.101':139
'21#.#20.41.27':445
'21#.#20.102.130':445
'21#.#20.137.228':445
'21#.#20.47.210':445
'21#.#20.205.43':445
'21#.#20.210.82':445
'21#.#20.254.104':445
'21#.#20.215.95':445
'21#.#20.64.44':445
'21#.#20.8.109':445
'21#.#20.166.132':445
'21#.#20.63.235':445
'21#.#20.95.64':445
'21#.#20.137.93':445
'21#.#20.220.104':445
'21#.#20.203.231':445
'21#.#20.106.90':445
'21#.#20.205.28':139
'21#.#20.88.231':445
'21#.#20.122.141':445
'21#.#20.68.54':445
'21#.#20.214.94':445
'21#.#20.93.19':445
'21#.#20.178.107':445
'21#.#20.118.24':445
'21#.#20.129.4':445
'21#.#20.202.147':445
'21#.#20.53.68':445
'21#.#20.104.163':445
'21#.#20.193.66':445
'21#.#20.157.13':445
'21#.#20.124.184':445
'21#.#20.151.144':445
'21#.#20.71.201':445
'21#.#20.120.176':445
'21#.#20.21.244':445
'21#.#20.244.26':445
'21#.#20.109.80':445
'21#.#20.230.43':445
'21#.#20.226.171':445
'21#.#20.116.58':445
'21#.#20.175.83':445
'21#.#20.133.152':445
'21#.#20.250.132':445
'21#.#20.120.250':445
'21#.#20.34.26':445
'21#.#20.65.248':445
'21#.#20.44.66':445
'21#.#20.124.92':445
'21#.#20.209.152':445
'21#.#20.178.106':445
'21#.#20.137.228':139
'21#.#20.47.210':139
'21#.#20.166.132':139
'21#.#20.210.82':139
'21#.#20.254.104':139
'21#.#20.102.130':139
'21#.#20.64.44':139
'21#.#20.8.109':139
'21#.#20.133.152':139
'21#.#20.63.235':139
'21#.#20.95.64':139
'21#.#20.215.95':139
'21#.#20.205.43':139
'21#.#20.106.90':139
'21#.#20.88.231':139
'21#.#20.122.141':139
'21#.#20.203.231':139
'21#.#20.178.107':139
'21#.#20.220.104':139
'21#.#20.68.54':139
'21#.#20.93.19':139
'21#.#20.137.93':139
'21#.#20.129.4':139
'21#.#20.118.24':139
'21#.#20.214.94':139
'21#.#20.53.68':139
'21#.#20.104.163':139
'21#.#20.244.26':139
'21#.#20.157.13':139
'21#.#20.124.184':139
'21#.#20.202.147':139
'21#.#20.71.201':139
'21#.#20.120.176':139
'21#.#20.4.209':139
'21#.#20.21.244':139
'21#.#20.109.80':139
'21#.#20.151.144':139
'21#.#20.193.66':139
'21#.#20.116.58':139
'21#.#20.175.83':139
'21#.#20.124.92':139
'21#.#20.250.132':139
'21#.#20.120.250':139
'21#.#20.226.171':139
'21#.#20.65.248':139
'21#.#20.44.66':139
'21#.#20.230.43':139
'21#.#20.209.152':139
'21#.#20.178.106':139
'21#.#20.34.26':139
'21#.#20.4.209':445
'21#.#20.55.57':445
'21#.#20.56.173':445
'21#.#20.115.43':445
'21#.#20.169.162':445
'21#.#20.24.149':445
'21#.#20.137.177':445
'21#.#20.54.245':445
'21#.#20.52.137':445
'21#.#20.66.14':445
'21#.#20.38.239':445
'21#.#20.206.193':445
'21#.#20.231.12':445
'21#.#20.55.212':445
'21#.#20.132.215':445
'21#.#20.29.47':445
'21#.#20.133.253':445
'21#.#20.166.187':445
'21#.#20.71.180':445
'21#.#20.4.166':445
'21#.#20.22.242':445
'21#.#20.248.22':445
'21#.#20.169.247':445
'21#.#20.46.24':445
'21#.#20.82.46':445
'21#.#20.242.81':445
'21#.#20.11.113':139
'21#.#20.250.116':139
'21#.#20.50.195':139
'21#.#20.41.27':139
'21#.#20.28.119':139
'21#.#20.202.28':139
'21#.#20.60.59':139
'21#.#20.29.222':445
'21#.#20.28.54':445
'21#.#20.95.245':139
'21#.#20.11.175':139
'21#.#20.184.232':139
'21#.#20.28.54':139
'21#.#20.162.175':445
'21#.#20.81.157':445
'21#.#20.229.35':445
'21#.#20.146.179':445
'21#.#20.28.117':445
'21#.#20.4.141':445
'21#.#20.22.21':445
'21#.#20.145.185':445
'21#.#20.29.222':139
'21#.#20.85.217':445
'21#.#20.179.135':445
'21#.#20.82.86':445
'21#.#20.133.253':139
'21#.#20.46.24':139
'21#.#20.82.46':139
'21#.#20.4.166':139
'21#.#20.132.215':139
'21#.#20.29.47':139
'21#.#20.169.247':139
'21#.#20.55.212':139
'21#.#20.169.162':139
'21#.#20.242.81':139
'21#.#20.22.242':139
'21#.#20.248.22':139
'21#.#20.71.180':139
'21#.#20.34.26':9988
'21#.#20.44.66':9988
'21#.#20.65.248':9988
'21#.#20.205.28':445
'21#.#20.178.107':9988
'21#.#20.118.24':9988
'21#.#20.233.169':139
'21#.#20.150.236':139
'21#.#20.166.187':139
'21#.#20.244.26':9988
'21#.#20.71.201':9988
'21#.#20.46.163':139
'21#.#20.229.35':139
'21#.#20.85.217':139
'21#.#20.179.135':139
'21#.#20.4.141':139
'21#.#20.162.175':139
'21#.#20.81.157':139
'21#.#20.46.163':445
'21#.#20.233.169':445
'21#.#20.150.236':445
'21#.#20.82.86':139
'21#.#20.22.21':139
'21#.#20.145.185':139
'21#.#20.28.117':139
'21#.#20.56.173':139
'21#.#20.115.43':139
'21#.#20.38.239':139
'21#.#20.24.149':139
'21#.#20.137.177':139
'21#.#20.55.57':139
'21#.#20.52.137':139
'21#.#20.66.14':139
'21#.#20.146.179':139
'21#.#20.206.193':139
'21#.#20.231.12':139
'21#.#20.54.245':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней