Trojan.Starman.6039

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER085e.dir00\svchost.exe.mdmp 16325836412032080

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER085e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'14#.#0.112.102':139
'14#.#0.0.216':139
'14#.#0.30.186':139
'14#.#0.140.140':139
'14#.#0.2.141':139
'14#.#0.136.216':139
'14#.#0.64.136':139
'14#.#0.216.38':139
'14#.#0.155.64':139
'14#.#0.10.23':139
'14#.#0.140.99':139
'14#.#0.86.59':139
'14#.#0.154.86':139
'14#.#0.68.20':139
'14#.#0.45.159':139
'14#.#0.128.174':139
'14#.#0.39.207':139
'14#.#0.99.251':139
'14#.#0.90.62':139
'14#.#0.244.218':139
'14#.#0.113.74':139
'14#.#0.176.64':139
'14#.#0.90.62':445
'14#.#0.39.207':445
'14#.#0.113.74':445
'14#.#0.154.86':445
'14#.#0.244.218':445
'14#.#0.2.141':445
'14#.#0.30.186':445
'14#.#0.140.140':445
'14#.#0.99.251':445
'14#.#0.140.99':445
'14#.#0.86.59':445
'14#.#0.55.35':139
'14#.#0.239.54':139
'14#.#0.35.166':139
'14#.#0.81.13':139
'14#.#0.165.157':139
'14#.#0.128.174':445
'14#.#0.68.20':445
'14#.#0.45.159':445
'14#.#0.225.172':139
'14#.#0.61.142':445
'14#.#0.221.225':139
'14#.70.5.5':139
'14#.#0.61.88':139
'14#.#0.103.85':139
'14#.70.9.87':139
'14#.#0.35.51':139
'14#.70.91.4':445
'14#.#0.32.35':139
'14#.#0.70.82':139
'14#.#0.214.186':139
'14#.#0.209.246':139
'14#.#0.62.194':139
'14#.#0.198.62':139
'14#.#0.106.216':139
'14#.#0.11.182':139
'14#.#0.48.31':139
'14#.#0.120.207':139
'14#.#0.126.58':139
'14#.#0.172.153':139
'14#.#0.96.117':139
'14#.#0.149.140':139
'14#.#0.225.249':445
'14#.#0.221.225':445
'14#.70.5.5':445
'14#.#0.61.88':445
'14#.#0.103.85':445
'14#.70.9.87':445
'14#.#0.35.51':445
'14#.#0.61.142':139
'14#.#0.32.35':445
'14#.#0.70.82':445
'14#.#0.214.186':445
'14#.#0.209.246':445
'14#.#0.62.194':445
'14#.#0.198.62':445
'14#.#0.106.216':445
'14#.#0.11.182':445
'14#.#0.48.31':445
'14#.#0.120.207':445
'14#.#0.126.58':445
'14#.#0.172.153':445
'14#.#0.96.117':445
'14#.#0.149.140':445
'14#.#0.112.102':445
'14#.#0.1.204':139
'14#.70.20.2':139
'14#.#0.203.156':445
'14#.#0.74.217':445
'14#.#0.156.13':445
'14#.#0.180.109':139
'14#.#0.49.53':139
'14#.#0.109.178':139
'14#.#0.201.191':139
'14#.#0.178.100':139
'14#.#0.214.12':445
'14#.#0.84.239':445
'14#.#0.198.241':445
'14#.#0.124.151':445
'14#.#0.75.106':445
'14#.#0.55.41':445
'14#.#0.68.34':445
'14#.#0.37.60':445
'14#.#0.38.81':445
'14#.#0.21.244':445
'14#.#0.81.58':445
'14#.#0.41.125':139
'14#.#0.48.33':139
'14#.#0.157.166':139
'14#.#0.115.31':139
'14#.70.3.25':139
'14#.#0.209.163':139
'14#.#0.169.193':139
'14#.#0.218.17':139
'14#.#0.149.155':139
'14#.#0.40.97':139
'14#.#0.199.216':139
'14#.#0.210.185':139
'14#.#0.96.226':139
'14#.#0.86.233':139
'14#.#0.178.89':139
'14#.#0.82.66':139
'14#.#0.214.81':139
'14#.#0.95.21':139
'14#.#0.185.95':139
'14#.#0.64.107':139
'14#.#0.187.114':139
'14#.#0.60.88':139
'14#.#0.182.115':139
'14#.#0.195.27':139
'14#.#0.123.181':139
'14#.#0.239.54':445
'14#.#0.225.172':445
'14#.#0.196.173':139
'14#.#0.211.213':139
'14#.#0.63.184':139
'14#.#0.101.225':139
'14#.#0.238.211':139
'14#.#0.55.35':445
'14#.#0.216.38':445
'14#.#0.136.216':445
'14#.#0.10.23':445
'14#.#0.0.216':445
'14#.#0.155.64':445
'14#.#0.165.157':445
'14#.#0.35.166':445
'14#.#0.81.13':445
'14#.#0.64.136':445
'14#.#0.176.64':445
'14#.#0.75.106':139
'14#.#0.182.115':445
'14#.#0.195.27':445
'14#.#0.123.181':445
'14#.#0.156.13':139
'14#.#0.203.156':139
'14#.#0.196.173':445
'14#.#0.211.213':445
'14#.#0.63.184':445
'14#.#0.101.225':445
'14#.#0.238.211':445
'14#.#0.74.217':139
'14#.#0.198.241':139
'14#.#0.21.244':139
'14#.#0.84.239':139
'14#.#0.55.41':139
'14#.#0.124.151':139
'14#.#0.37.60':139
'14#.#0.214.12':139
'14#.#0.68.34':139
'14#.#0.81.58':139
'14#.#0.38.81':139
'14#.#0.99.191':445
'14#.#0.127.99':445
'14#.#0.191.105':445
'14#.#0.179.53':445
'14#.#0.37.128':445
'14#.#0.73.240':445
'14#.#0.249.226':445
'14#.70.64.9':445
'14#.#0.109.127':445
'14#.#0.163.109':445
'14#.#0.63.180':445
'14#.#0.84.46':139
'14#.#0.255.173':139
'14#.#0.98.248':139
'14#.#0.131.74':139
'14#.#0.113.38':139
'14#.#0.105.188':445
'14#.#0.181.92':445
'14#.#0.191.38':139
'14#.#0.53.127':139
'14#.#0.133.134':139
'14#.#0.0.203':445
'14#.#0.242.92':445
'14#.#0.56.242':445
'14#.#0.206.227':445
'14#.#0.10.183':445
'14#.#0.136.152':445
'14#.#0.174.94':445
'14#.#0.147.177':445
'14#.#0.204.90':445
'14#.#0.5.110':445
'14#.#0.229.131':445
'14#.#0.62.153':445
'14#.#0.60.196':445
'14#.#0.188.92':445
'14#.#0.210.237':445
'14#.#0.154.232':445
'14#.#0.57.233':445
'14#.#0.101.234':445
'14#.#0.29.87':445
'14#.70.5.37':445
'14#.#0.55.70':445
'14#.#0.250.213':445
'14#.#0.154.232':139
'14#.#0.57.233':139
'14#.#0.0.203':139
'14#.#0.73.240':139
'14#.#0.249.226':139
'14#.#0.55.70':139
'14#.#0.250.213':139
'14#.#0.188.92':139
'14#.#0.210.237':139
'14#.#0.60.196':139
'14#.70.64.9':139
'14#.#0.179.53':139
'14#.#0.37.128':139
'14#.#0.181.92':139
'14#.#0.105.188':139
'14#.#0.63.180':139
'14#.#0.109.127':139
'14#.#0.163.109':139
'14#.#0.127.99':139
'14#.#0.191.105':139
'14#.#0.99.191':139
'14#.70.5.37':139
'14#.#0.244.169':139
'14#.#0.23.243':139
'14#.#0.112.166':139
'14#.#0.174.94':139
'14#.#0.147.177':139
'14#.#0.1.207':139
'14#.#0.27.126':139
'14#.#0.4.247':139
'14#.#0.194.40':139
'14#.#0.54.106':139
'14#.#0.204.90':139
'14#.#0.10.183':139
'14#.#0.136.152':139
'14#.#0.62.153':139
'14#.#0.101.234':139
'14#.#0.29.87':139
'14#.#0.5.110':139
'14#.#0.229.131':139
'14#.#0.56.242':139
'14#.#0.206.227':139
'14#.#0.242.92':139
'14#.#0.112.166':445
'14#.#0.140.48':445
'14#.#0.212.125':445
'14#.#0.194.87':445
'14#.#0.147.100':139
'14#.#0.202.4':445
'14#.#0.122.166':445
'14#.#0.223.115':445
'14#.#0.30.42':445
'14#.#0.76.35':445
'14#.#0.69.158':445
'14#.#0.237.105':139
'14#.#0.30.119':139
'14#.#0.60.84':139
'14#.#0.163.241':139
'14#.#0.155.239':139
'14#.#0.108.3':139
'14#.#0.198.168':139
'14#.#0.74.184':139
'14#.#0.123.195':139
'14#.#0.42.22':139
'14#.#0.30.10':139
'14#.#0.174.223':445
'14#.#0.123.195':445
'14#.#0.198.168':445
'14#.#0.30.10':445
'14#.#0.60.84':445
'14#.#0.42.22':445
'14#.70.91.4':139
'14#.#0.225.249':139
'14#.#0.147.100':445
'14#.#0.74.184':445
'14#.#0.237.105':445
'14#.#0.30.119':445
'14#.#0.39.143':445
'14#.#0.180.25':445
'14#.#0.43.217':445
'14#.#0.3.245':445
'14#.#0.67.24':445
'14#.#0.108.3':445
'14#.#0.163.241':445
'14#.#0.155.239':445
'14#.#0.54.171':445
'14#.#0.170.228':445
'14#.#0.191.38':445
'14#.#0.191.105':9988
'14#.#0.133.134':445
'14#.#0.255.173':445
'14#.#0.53.127':445
'14#.#0.163.109':9988
'14#.#0.73.240':9988
'14#.#0.109.127':9988
'14#.#0.99.191':9988
'14#.#0.127.99':9988
'14#.#0.84.46':445
'14#.#0.54.106':445
'14#.#0.4.247':445
'14#.#0.194.40':445
'14#.#0.244.169':445
'14#.#0.23.243':445
'14#.#0.113.38':445
'14#.#0.98.248':445
'14#.#0.131.74':445
'14#.#0.1.207':445
'14#.#0.27.126':445
'14#.70.64.9':9988
'14#.#0.3.245':139
'14#.#0.67.24':139
'14#.#0.174.223':139
'14#.#0.122.166':139
'14#.#0.223.115':139
'14#.#0.54.171':139
'14#.#0.170.228':139
'14#.#0.180.25':139
'14#.#0.43.217':139
'14#.#0.39.143':139
'14#.#0.30.42':139
'14#.#0.101.234':9988
'14#.#0.202.4':139
'14#.#0.60.196':9988
'14#.#0.249.226':9988
'14#.#0.210.237':9988
'14#.#0.76.35':139
'14#.#0.69.158':139
'14#.#0.212.125':139
'14#.#0.194.87':139
'14#.#0.140.48':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней