Trojan.Starman.6334

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERf392.dir00\svchost.exe.mdmp 16325836412028204

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERf392.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#55.98.254':445
'21#.#55.115.57':445
'21#.#55.55.39':445
'21#.#55.181.11':445
'21#.#55.115.203':445
'21#.#55.142.81':445
'21#.#55.133.115':445
'21#.#55.206.110':445
'21#.#55.48.15':445
'21#.#55.251.164':445
'21#.#55.25.251':445
'21#.#55.49.158':445
'21#.#55.143.192':445
'21#.#55.160.52':445
'21#.#55.220.237':445
'21#.#55.38.182':445
'21#.#55.251.126':445
'21#.#55.145.206':445
'21#.#55.64.84':445
'21#.#55.191.18':445
'21#.#55.242.88':445
'21#.#55.162.65':445
'21#.#55.18.62':445
'21#.#55.81.22':445
'21#.#55.41.47':139
'21#.#55.144.8':445
'21#.#55.60.181':445
'21#.#55.172.104':445
'21#.#55.91.111':445
'21#.#55.114.246':445
'21#.#55.224.147':445
'21#.#55.111.178':445
'21#.#55.40.76':445
'21#.#55.127.0':445
'21#.#55.47.154':445
'21#.#55.122.216':445
'21#.#55.51.72':139
'21#.#55.206.182':139
'21#.#55.7.133':139
'21#.#55.167.238':139
'21#.#55.199.137':139
'21#.#55.16.217':139
'21#.#55.250.152':139
'21#.#55.11.191':139
'21#.#55.121.205':139
'21#.#55.118.254':139
'21#.#55.127.34':139
'21#.#55.41.247':139
'21#.#55.4.108':139
'21#.#55.134.32':139
'21#.#55.154.144':139
'21#.#55.10.71':139
'21#.#55.121.120':139
'21#.#55.120.11':139
'21#.#55.55.242':445
'21#.#55.132.241':445
'21#.#55.158.114':445
'21#.#55.114.109':445
'21#.#55.221.106':445
'21#.#55.127.232':445
'21#.#55.216.245':445
'21#.#55.107.205':445
'21#.#55.72.229':445
'21#.#55.253.147':139
'21#.#55.41.47':445
'21#.#55.30.148':139
'21#.#55.253.147':445
'21#.#55.97.105':445
'21#.#55.178.206':445
'21#.#55.194.102':445
'21#.#55.90.172':445
'21#.#55.235.10':445
'21#.#55.97.105':139
'21#.#55.81.22':139
'21#.#55.58.110':445
'21#.#55.144.8':139
'21#.#55.60.181':139
'21#.#55.58.110':139
'21#.#55.55.197':445
'21#.#55.243.233':445
'21#.#55.173.97':445
'21#.#55.139.44':445
'21#.#55.40.76':139
'21#.#55.127.0':139
'21#.#55.47.154':139
'21#.#55.122.216':139
'21#.#55.162.65':139
'21#.#55.191.18':139
'21#.#55.18.62':139
'21#.#55.242.88':139
'21#.#55.64.84':139
'21#.#55.91.5':445
'21#.#55.132.202':445
'21#.#55.100.137':445
'21#.#55.155.21':445
'21#.#55.112.101':445
'21#.#55.55.128':445
'21#.#55.59.208':445
'21#.#55.160.144':445
'21#.#55.184.132':445
'21#.#55.163.154':445
'21#.#55.78.254':445
'21#.#55.26.31':445
'21#.#55.3.164':445
'21#.#55.191.204':445
'21#.#55.163.118':445
'21#.#55.91.82':445
'21#.#55.204.232':445
'21#.#55.86.228':445
'21#.#55.127.232':139
'21#.#55.216.245':139
'21#.#55.107.205':139
'21#.#55.72.229':139
'21#.#55.49.158':139
'21#.#55.25.251':139
'21#.#55.251.126':139
'21#.#55.143.192':139
'21#.#55.251.164':139
'21#.#55.90.172':139
'21#.#55.194.102':139
'21#.#55.178.206':139
'21#.#55.235.10':139
'21#.#55.158.114':139
'21#.#55.132.241':139
'21#.#55.221.106':139
'21#.#55.114.109':139
'21#.#55.55.242':139
'21#.#55.142.81':139
'21#.#55.133.115':139
'21#.#55.206.110':139
'21#.#55.48.15':139
'21#.#55.114.246':139
'21#.#55.91.111':139
'21#.#55.111.178':139
'21#.#55.224.147':139
'21#.#55.172.104':139
'21#.#55.220.237':139
'21#.#55.55.39':139
'21#.#55.160.52':139
'21#.#55.145.206':139
'21#.#55.38.182':139
'21#.#55.115.57':139
'21#.#55.115.203':139
'21#.#55.181.11':139
'21#.#55.98.254':139
'21#.#55.181.102':139
'21#.#55.232.132':139
'21#.#55.169.184':139
'21#.#55.27.210':139
'21#.#55.41.160':139
'21#.#55.16.211':139
'21#.#55.21.243':139
'21#.#55.28.242':139
'21#.#55.135.155':139
'21#.#55.203.161':139
'21#.#55.161.252':139
'21#.#55.8.213':139
'21#.#55.57.204':139
'21#.#55.180.99':139
'21#.#55.9.171':139
'21#.#55.79.187':139
'21#.#55.70.5':139
'21#.#55.13.45':139
'21#.#55.93.143':445
'21#.#55.181.47':445
'21#.#55.191.19':445
'21#.#55.160.101':445
'21#.#55.101.181':445
'21#.#55.177.193':445
'21#.#55.224.167':445
'21#.#55.42.152':445
'21#.#55.199.94':445
'21#.#55.95.52':139
'21#.#55.112.248':139
'21#.#55.69.241':139
'21#.#55.168.33':139
'21#.#55.56.128':139
'21#.#55.137.112':139
'21#.#55.112.89':445
'21#.#55.48.113':139
'21#.#55.113.137':139
'21#.#55.69.241':445
'21#.#55.112.248':445
'21#.#55.56.128':445
'21#.#55.95.52':445
'21#.#55.113.137':445
'21#.#55.167.161':139
'21#.#55.112.126':139
'21#.#55.137.112':445
'21#.#55.14.162':139
'21#.#55.232.132':445
'21#.#55.28.242':445
'21#.#55.181.102':445
'21#.#55.41.160':445
'21#.#55.135.155':445
'21#.#55.168.33':445
'21#.#55.48.113':445
'21#.#55.16.211':445
'21#.#55.21.243':445
'21#.#55.62.158':139
'21#.#55.158.104':139
'21#.#55.19.169':139
'21#.#55.169.62':139
'21#.#55.176.47':139
'21#.#55.134.108':139
'21#.#55.8.205':139
'21#.#55.224.33':139
'21#.#55.100.60':139
'21#.#55.86.171':139
'21#.#55.133.100':139
'21#.#55.53.138':139
'21#.#55.200.249':139
'21#.#55.106.235':139
'21#.#55.96.244':139
'21#.#55.39.42':139
'21#.#55.131.49':139
'21#.#55.87.96':139
'21#.#55.167.244':445
'21#.#55.199.94':139
'21#.#55.177.193':139
'21#.#55.121.205':445
'21#.#55.42.152':139
'21#.#55.224.167':139
'21#.#55.132.88':139
'21#.#55.131.104':139
'21#.#55.167.244':139
'21#.#55.29.139':139
'21#.#55.167.238':445
'21#.#55.11.191':445
'21#.#55.206.182':445
'21#.#55.199.137':445
'21#.#55.101.181':139
'21#.#55.250.152':445
'21#.#55.30.148':445
'21#.#55.16.217':445
'21#.#55.181.47':139
'21#.#55.123.121':139
'21#.#55.122.15':139
'21#.#55.46.198':139
'21#.#55.249.57':139
'21#.#55.29.211':139
'21#.#55.62.162':139
'21#.#55.157.110':139
'21#.#55.195.198':139
'21#.#55.58.133':139
'21#.#55.54.25':139
'21#.#55.25.128':139
'21#.#55.234.165':139
'21#.#55.166.157':139
'21#.#55.6.158':139
'21#.#55.24.111':139
'21#.#55.197.9':139
'21#.#55.42.154':139
'21#.#55.46.88':139
'21#.#55.197.9':445
'21#.#55.46.198':445
'21#.#55.46.88':445
'21#.#55.24.111':445
'21#.#55.123.121':445
'21#.#55.195.198':445
'21#.#55.29.211':445
'21#.#55.249.57':445
'21#.#55.122.15':445
'21#.#55.131.104':445
'21#.#55.166.157':445
'21#.#55.29.139':445
'21#.#55.132.88':445
'21#.#55.234.165':445
'21#.#55.6.158':445
'21#.#55.42.154':445
'21#.#55.54.25':445
'21#.#55.25.128':445
'21#.#55.154.144':445
'21#.#55.191.19':139
'21#.#55.120.11':445
'21#.#55.112.89':139
'21#.#55.7.133':445
'21#.#55.160.101':139
'21#.#55.51.72':445
'21#.#55.10.71':445
'21#.#55.93.143':139
'21#.#55.62.162':445
'21#.#55.4.108':445
'21#.#55.157.110':445
'21#.#55.58.133':445
'21#.#55.118.254':445
'21#.#55.134.32':445
'21#.#55.121.120':445
'21#.#55.41.247':445
'21#.#55.127.34':445
'21#.#55.5.211':445
'21#.#55.210.191':445
'21#.#55.252.176':445
'21#.#55.109.72':445
'21#.#55.29.96':445
'21#.#55.113.80':445
'21#.#55.242.64':445
'21#.#55.202.87':445
'21#.#55.216.149':445
'21#.#55.254.7':445
'21#.#55.150.40':9988
'21#.#55.143.77':9988
'21#.#55.249.194':9988
'21#.#55.156.20':9988
'21#.#55.51.186':9988
'21#.#55.89.37':445
'21#.#55.146.172':445
'21#.#55.187.170':445
'21#.#55.83.38':445
'21#.#55.215.228':445
'21#.#55.148.16':445
'21#.#55.139.0':445
'21#.#55.98.76':445
'21#.#55.0.161':445
'21#.#55.61.202':445
'21#.#55.150.11':445
'21#.155.8.0':445
'21#.#55.122.151':445
'21#.#55.93.130':445
'21#.#55.134.3':445
'21#.#55.14.43':445
'21#.#55.107.231':445
'21#.#55.103.10':445
'21#.#55.114.89':445
'21#.#55.0.98':445
'21#.#55.75.164':445
'21#.#55.158.174':445
'21#.#55.45.3':139
'21#.#55.23.205':139
'21#.#55.183.152':139
'21#.#55.117.92':139
'21#.#55.35.124':139
'21#.#55.67.206':139
'21#.#55.204.42':139
'21#.#55.195.196':139
'21#.#55.35.102':139
'21#.#55.149.104':139
'21#.#55.217.19':139
'21#.#55.177.45':139
'21#.#55.112.98':139
'21#.#55.150.130':139
'21#.#55.101.163':139
'21#.#55.216.183':139
'21#.#55.19.120':139
'21#.#55.68.229':139
'21#.#55.205.167':139
'21#.#55.203.119':139
'21#.#55.68.131':139
'21#.#55.30.206':139
'21#.#55.38.212':139
'21#.#55.124.135':139
'21#.#55.43.2':139
'21#.#55.212.131':139
'21#.#55.178.233':139
'21#.#55.45.201':139
'21#.#55.201.209':139
'21#.#55.218.237':139
'21#.#55.152.133':139
'21#.#55.208.213':139
'21#.#55.252.134':139
'21#.#55.1.103':139
'21#.#55.78.85':139
'21#.#55.158.116':139
'21#.#55.41.110':445
'21#.#55.41.110':139
'21#.#55.158.174':139
'21#.#55.0.161':139
'21#.#55.150.11':139
'21#.#55.252.176':139
'21#.#55.254.7':139
'21#.#55.29.96':139
'21#.#55.213.135':139
'21#.#55.134.253':139
'21#.#55.148.16':139
'21#.#55.93.130':139
'21#.#55.98.76':139
'21#.#55.75.164':139
'21#.#55.134.3':139
'21#.#55.242.64':139
'21#.#55.139.0':139
'21#.#55.107.231':139
'21#.#55.103.10':139
'21#.#55.240.205':139
'21#.#55.199.177':139
'21#.#55.223.197':139
'21#.#55.9.71':139
'21#.#55.36.51':139
'21#.#55.67.230':139
'21#.#55.128.103':139
'21#.#55.51.186':139
'21#.#55.143.77':139
'21#.#55.78.150':139
'21#.#55.156.20':139
'21#.#55.135.34':139
'21#.#55.142.121':139
'21#.#55.9.145':139
'21#.#55.150.40':139
'21#.#55.128.129':139
'21#.#55.249.194':139
'21#.#55.189.96':139
'21#.#55.128.129':445
'21#.#55.150.40':445
'21#.#55.240.205':445
'21#.#55.223.197':445
'21#.#55.9.71':445
'21#.#55.67.230':445
'21#.#55.128.103':445
'21#.#55.199.177':445
'21#.#55.36.51':445
'21#.#55.78.150':445
'21#.#55.135.34':445
'21#.#55.213.135':445
'21#.#55.134.253':445
'21#.#55.142.121':445
'21#.#55.9.145':445
'21#.#55.156.20':445
'21#.#55.249.194':445
'21#.#55.189.96':445
'21#.#55.215.228':139
'21#.#55.61.202':139
'21#.#55.210.191':139
'21#.#55.114.89':139
'21#.#55.202.87':139
'21#.155.8.0':139
'21#.#55.0.98':139
'21#.#55.122.151':139
'21#.#55.14.43':139
'21#.#55.187.170':139
'21#.#55.83.38':139
'21#.#55.51.186':445
'21#.#55.143.77':445
'21#.#55.89.37':139
'21#.#55.216.149':139
'21#.#55.113.80':139
'21#.#55.109.72':139
'21#.#55.146.172':139
'21#.#55.55.128':139
'21#.#55.59.208':139
'21#.#55.160.144':139
'21#.#55.184.132':139
'21#.#55.5.211':139
'21#.#55.147.12':139
'21#.#55.226.26':139
'21#.#55.182.76':139
'21#.#55.84.118':139
'21#.#55.163.118':139
'21#.#55.91.82':139
'21#.#55.204.232':139
'21#.#55.86.228':139
'21#.#55.155.21':139
'21#.#55.132.202':139
'21#.#55.112.101':139
'21#.#55.100.137':139
'21#.#55.91.5':139
'21#.#55.175.173':139
'21#.#55.16.89':139
'21#.#55.20.137':139
'21#.#55.23.13':139
'21#.#55.86.119':139
'21#.#55.153.106':139
'21#.#55.59.254':139
'21#.#55.170.163':139
'21#.#55.61.207':139
'21#.#55.158.58':139
'21#.#55.58.154':139
'21#.#55.243.54':139
'21#.#55.248.236':139
'21#.#55.142.166':139
'21#.#55.78.209':139
'21#.#55.202.138':139
'21#.#55.207.244':139
'21#.#55.72.155':139
'21#.#55.78.209':445
'21#.#55.202.138':445
'21#.#55.207.244':445
'21#.#55.72.155':445
'21#.#55.20.137':445
'21#.#55.16.89':445
'21#.#55.86.119':445
'21#.#55.23.13':445
'21#.#55.175.173':445
'21#.#55.147.12':445
'21#.#55.226.26':445
'21#.#55.182.76':445
'21#.#55.84.118':445
'21#.#55.243.54':445
'21#.#55.58.154':445
'21#.#55.142.166':445
'21#.#55.248.236':445
'21#.#55.158.58':445
'21#.#55.55.197':139
'21#.#55.243.233':139
'21#.#55.173.97':139
'21#.#55.139.44':139
'21#.#55.26.31':139
'21#.#55.78.254':139
'21#.#55.191.204':139
'21#.#55.3.164':139
'21#.#55.163.154':139
'21#.#55.153.106':445
'21#.#55.59.254':445
'21#.#55.170.163':445
'21#.#55.61.207':445
'21#.#55.10.99':445
'21#.#55.94.51':445
'21#.#55.147.20':445
'21#.#55.85.96':445
'21#.#55.21.127':445
'21#.#55.10.99':139
'21#.#55.1.103':445
'21#.#55.205.167':445
'21#.#55.158.116':445
'21#.#55.252.134':445
'21#.#55.68.131':445
'21#.#55.38.212':445
'21#.#55.212.131':445
'21#.#55.30.206':445
'21#.#55.203.119':445
'21#.#55.204.42':445
'21#.#55.218.237':445
'21#.#55.195.196':445
'21#.#55.67.206':445
'21#.#55.152.133':445
'21#.#55.78.85':445
'21#.#55.208.213':445
'21#.#55.201.209':445
'21#.#55.45.201':445
'21#.#55.167.248':139
'21#.#55.7.151':139
'21#.#55.121.194':139
'21#.#55.178.102':139
'21#.#55.7.80':139
'21#.#55.136.244':139
'21#.#55.74.207':139
'21#.#55.80.16':139
'21#.#55.36.55':139
'21#.#55.72.173':139
'21#.#55.43.2':445
'21#.#55.178.233':445
'21#.#55.124.135':445
'21#.#55.173.180':139
'21#.#55.205.210':139
'21#.#55.210.121':139
'21#.#55.133.235':139
'21#.#55.190.205':139
'21#.#55.210.121':445
'21#.#55.121.194':445
'21#.#55.190.205':445
'21#.#55.205.210':445
'21#.#55.178.102':445
'21#.#55.7.151':445
'21#.#55.80.16':445
'21#.#55.167.248':445
'21#.#55.7.80':445
'21#.#55.94.51':139
'21#.#55.147.20':139
'21#.#55.85.96':139
'21#.#55.21.127':139
'21#.#55.20.72':445
'21#.#55.173.180':445
'21#.#55.133.235':445
'21#.#55.20.72':139
'21#.#55.72.173':445
'21#.#55.101.163':445
'21#.#55.183.152':445
'21#.#55.68.229':445
'21#.#55.216.183':445
'21#.#55.117.92':445
'21#.#55.35.124':445
'21#.#55.35.102':445
'21#.#55.45.3':445
'21#.#55.23.205':445
'21#.#55.136.244':445
'21#.#55.177.45':445
'21#.#55.36.55':445
'21#.#55.74.207':445
'21#.#55.112.98':445
'21#.#55.150.130':445
'21#.#55.19.120':445
'21#.#55.149.104':445
'21#.#55.217.19':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней