Trojan.Starman.6366

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERf31e.dir00\svchost.exe.mdmp 16325836412032564

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERf31e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#48.167.114':139
'22#.#48.81.253':139
'22#.#48.213.22':139
'22#.#48.45.95':139
'22#.#48.31.65':139
'22#.#48.53.82':139
'22#.#48.152.57':139
'22#.#48.254.152':139
'22#.#48.188.10':139
'22#.#48.213.52':139
'22#.#48.108.213':139
'22#.#48.133.18':139
'22#.#48.102.169':139
'22#.#48.91.197':139
'22#.#48.152.213':139
'22#.#48.146.202':139
'22#.#48.44.20':139
'22#.#48.134.108':139
'22#.#48.69.49':139
'22#.#48.29.45':139
'22#.#48.30.131':139
'22#.#48.163.15':139
'22#.#48.94.173':139
'22#.#48.248.86':139
'22#.#48.69.43':139
'22#.#48.74.175':445
'22#.#48.42.123':139
'22#.#48.19.131':139
'22#.#48.115.225':139
'22#.#48.16.75':445
'22#.#48.88.176':445
'22#.#48.7.225':445
'22#.#48.21.84':445
'22#.#48.39.17':445
'22#.#48.172.38':445
'22#.#48.114.136':139
'22#.#48.45.166':139
'22#.#48.112.175':139
'22#.#48.99.168':139
'22#.#48.217.127':139
'22#.#48.73.218':139
'22#.#48.28.189':139
'22#.#48.237.236':139
'22#.#48.68.169':139
'22#.#48.237.122':139
'22#.#48.38.91':139
'22#.#48.252.217':139
'22#.#48.44.146':139
'22#.#48.175.48':445
'22#.#48.14.147':445
'22#.#48.43.215':445
'22#.#48.49.159':445
'22#.#48.206.117':445
'22#.#48.151.34':445
'22#.#48.123.104':445
'22#.#48.240.0':445
'22#.#48.21.88':445
'22#.#48.0.86':445
'22#.#48.135.76':445
'22#.#48.8.251':445
'22#.#48.149.132':445
'22#.#48.164.148':445
'22#.#48.133.94':445
'22#.#48.177.59':445
'22#.#48.117.54':445
'22#.#48.218.164':445
'22#.#48.22.9':445
'22#.#48.28.237':445
'22#.#48.215.10':445
'22#.#48.122.178':445
'22#.#48.25.197':445
'22#.#48.102.4':445
'22#.#48.39.17':139
'22#.#48.172.38':139
'22#.#48.16.75':139
'22#.#48.87.66':445
'22#.#48.74.175':139
'22#.#48.21.84':139
'22#.#48.244.237':139
'22#.#48.81.172':139
'22#.#48.238.7':139
'22#.#48.88.176':139
'22#.#48.7.225':139
'22#.#48.197.151':445
'22#.#48.61.42':445
'22#.#48.232.166':445
'22#.#48.47.60':445
'22#.#48.73.87':445
'22#.#48.231.41':445
'22#.#48.39.188':445
'22#.#48.7.229':445
'22#.#48.147.186':445
'22#.#48.2.176':445
'22#.#48.74.90':445
'22#.#48.145.219':445
'22#.#48.200.49':139
'22#.#48.158.88':139
'22#.#48.10.74':139
'22#.#48.118.92':139
'22#.#48.177.48':139
'22#.#48.104.194':139
'22#.#48.20.115':139
'22#.#48.143.129':139
'22#.#48.140.120':139
'22#.#48.187.28':139
'22#.#48.54.233':139
'22#.#48.87.237':139
'22#.#48.202.17':139
'22#.#48.241.181':139
'22#.#48.241.245':139
'22#.#48.16.106':139
'22#.#48.110.246':139
'22#.#48.91.167':139
'22#.#48.105.207':139
'22#.#48.24.7':139
'22#.#48.221.9':139
'22#.#48.27.72':139
'22#.#48.10.95':139
'22#.#48.13.1':139
'22#.#48.200.143':139
'22#.#48.92.201':139
'22#.#48.177.149':139
'22#.#48.243.243':139
'22#.#48.33.69':139
'22#.#48.214.92':139
'22#.#48.194.214':139
'22#.#48.2.189':139
'22#.#48.167.198':139
'22#.#48.158.214':139
'22#.#48.71.159':139
'22#.#48.244.90':139
'22#.#48.33.54':139
'22#.#48.105.208':139
'22#.#48.20.140':139
'22#.#48.59.17':139
'22#.#48.213.217':139
'22#.#48.162.167':139
'22#.#48.84.16':139
'22#.#48.6.217':139
'22#.#48.227.81':139
'22#.#48.253.90':139
'22#.#48.74.237':139
'22#.#48.187.163':139
'22#.#48.133.18':445
'22#.#48.45.95':445
'22#.#48.29.45':445
'22#.#48.30.131':445
'22#.#48.69.49':445
'22#.#48.31.65':445
'22#.#48.53.82':445
'22#.#48.213.52':445
'22#.#48.81.253':445
'22#.#48.213.22':445
'22#.#48.167.114':445
'22#.#48.94.173':445
'22#.#48.44.146':445
'22#.#48.146.202':445
'22#.#48.81.172':445
'22#.#48.238.7':445
'22#.#48.244.237':445
'22#.#48.44.20':445
'22#.#48.134.108':445
'22#.#48.163.15':445
'22#.#48.91.197':445
'22#.#48.152.213':445
'22#.#48.102.169':445
'22#.#48.108.213':445
'22#.#48.114.136':445
'22#.#48.19.131':445
'22#.#48.68.169':445
'22#.#48.237.122':445
'22#.#48.237.236':445
'22#.#48.115.225':445
'22#.#48.214.70':139
'22#.#48.178.118':139
'22#.#48.89.188':139
'22#.#48.42.123':445
'22#.#48.69.43':445
'22#.#48.252.217':445
'22#.#48.248.86':445
'22#.#48.217.127':445
'22#.#48.254.152':445
'22#.#48.188.10':445
'22#.#48.152.57':445
'22#.#48.73.218':445
'22#.#48.28.189':445
'22#.#48.38.91':445
'22#.#48.112.175':445
'22#.#48.99.168':445
'22#.#48.45.166':445
'22#.#48.154.242':445
'22#.#48.13.224':445
'22#.#48.38.108':445
'22#.#48.96.99':445
'22#.#48.97.205':445
'22#.#48.162.98':445
'22#.#48.70.119':445
'22#.#48.22.71':445
'22#.#48.84.169':445
'22#.#48.176.34':445
'22#.#48.231.169':445
'22#.#48.205.144':445
'22#.#48.95.81':445
'22#.#48.146.153':445
'22#.#48.33.147':139
'22#.#48.52.161':139
'22#.#48.202.224':139
'22#.#48.106.2':445
'22#.#48.39.89':445
'22#.#48.136.248':445
'22#.#48.28.10':445
'22#.#48.40.106':445
'22#.#48.162.41':445
'22#.#48.250.21':445
'22#.#48.2.27':445
'22#.#48.77.46':445
'22#.#48.185.20':445
'22#.#48.186.141':445
'22#.#48.253.146':445
'22#.#48.103.248':445
'22#.#48.137.126':445
'22#.#48.175.189':445
'22#.#48.4.222':445
'22#.#48.21.57':445
'22#.#48.255.251':445
'22#.#48.60.96':445
'22#.#48.16.192':445
'22#.#48.170.52':445
'22#.#48.16.201':445
'22#.#48.121.250':445
'22#.#48.9.168':445
'22#.#48.83.55':445
'22#.#48.113.7':445
'22#.#48.120.186':445
'22#.#48.181.123':445
'22#.#48.40.82':445
'22#.#48.10.253':445
'22#.#48.176.241':139
'22#.#48.176.34':139
'22#.#48.231.169':139
'22#.#48.162.98':139
'22#.#48.154.242':139
'22#.#48.13.224':139
'22#.#48.84.169':139
'22#.#48.121.250':139
'22#.#48.9.168':139
'22#.#48.250.21':139
'22#.#48.70.119':139
'22#.#48.22.71':139
'22#.#48.38.108':139
'22#.#48.146.153':139
'22#.#48.162.41':139
'22#.#48.106.2':139
'22#.#48.95.81':139
'22#.#48.40.106':139
'22#.#48.28.10':139
'22#.#48.96.99':139
'22#.#48.97.205':139
'22#.#48.205.144':139
'22#.#48.39.89':139
'22#.#48.136.248':139
'22#.#48.16.201':139
'22#.#48.21.57':139
'22#.#48.255.251':139
'22#.#48.103.248':139
'22#.#48.2.27':139
'22#.#48.77.46':139
'22#.#48.4.222':139
'22#.#48.153.87':139
'22#.#48.30.32':139
'22#.#48.89.224':139
'22#.#48.137.126':139
'22#.#48.175.189':139
'22#.#48.185.20':139
'22#.#48.40.82':139
'22#.#48.10.253':139
'22#.#48.83.55':139
'22#.#48.16.192':139
'22#.#48.170.52':139
'22#.#48.181.123':139
'22#.#48.186.141':139
'22#.#48.253.146':139
'22#.#48.60.96':139
'22#.#48.113.7':139
'22#.#48.120.186':139
'22#.#48.135.76':139
'22#.#48.21.88':139
'22#.#48.0.86':139
'22#.#48.14.147':139
'22#.#48.151.34':139
'22#.#48.123.104':139
'22#.#48.231.41':139
'22#.#48.47.60':139
'22#.#48.73.87':139
'22#.#48.240.0':139
'22#.#48.102.4':139
'22#.#48.175.48':139
'22#.#48.25.197':139
'22#.#48.215.10':139
'22#.#48.122.178':139
'22#.#48.164.148':139
'22#.#48.218.164':139
'22#.#48.22.9':139
'22#.#48.206.117':139
'22#.#48.43.215':139
'22#.#48.49.159':139
'22#.#48.28.237':139
'22#.#48.8.251':139
'22#.#48.61.42':139
'22#.#48.187.133':445
'22#.#48.210.95':445
'22#.#48.134.87':445
'22#.#48.135.84':445
'22#.#48.68.120':445
'22#.#48.79.0':445
'22#.#48.36.161':445
'22#.#48.116.94':445
'22#.#48.122.68':445
'22#.#48.68.245':445
'22#.#48.68.69':445
'22#.#48.177.236':445
'22#.#48.145.219':139
'22#.#48.2.176':139
'22#.#48.74.90':139
'22#.#48.232.166':139
'22#.#48.39.188':139
'22#.#48.7.229':139
'22#.#48.105.4':445
'22#.#48.82.228':445
'22#.#48.87.66':139
'22#.#48.147.186':139
'22#.#48.197.151':139
'22#.#48.149.132':139
'22#.#48.106.2':9988
'22#.#48.95.81':9988
'22#.#48.96.99':9988
'22#.#48.13.224':9988
'22#.#48.146.153':9988
'22#.#48.162.98':9988
'22#.#48.70.119':9988
'22#.#48.22.71':9988
'22#.#48.84.169':9988
'22#.#48.176.34':9988
'22#.#48.231.169':9988
'22#.#48.38.108':9988
'22#.#48.176.241':445
'22#.#48.52.161':445
'22#.#48.30.32':445
'22#.#48.89.224':445
'22#.#48.153.87':445
'22#.#48.202.224':445
'22#.#48.205.144':9988
'22#.#48.97.205':9988
'22#.#48.154.242':9988
'22#.#48.33.147':445
'22#.#48.136.248':9988
'22#.#48.16.201':9988
'22#.#48.68.245':139
'22#.#48.68.69':139
'22#.#48.79.0':139
'22#.#48.187.133':139
'22#.#48.210.95':139
'22#.#48.122.68':139
'22#.#48.117.54':139
'22#.#48.133.94':139
'22#.#48.177.59':139
'22#.#48.36.161':139
'22#.#48.116.94':139
'22#.#48.134.87':139
'22#.#48.30.32':9988
'22#.#48.120.186':9988
'22#.#48.175.189':9988
'22#.#48.16.192':9988
'22#.#48.170.52':9988
'22#.#48.103.248':9988
'22#.#48.135.84':139
'22#.#48.68.120':139
'22#.#48.177.236':139
'22#.#48.105.4':139
'22#.#48.82.228':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней