Trojan.Starman.6404

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER2ae8.dir00\svchost.exe.mdmp 16325836412032440

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2ae8.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#3.137.143':445
'21#.#3.18.78':445
'21#.#3.75.233':445
'21#.#3.82.42':445
'21#.#3.62.66':445
'21#.#3.216.4':445
'21#.#3.20.16':445
'21#.#3.159.64':445
'21#.#3.58.49':445
'21#.#3.29.57':445
'21#.#3.156.29':445
'21#.33.16.3':445
'21#.#3.25.187':445
'21#.#3.23.184':445
'21#.#3.126.23':445
'21#.#3.120.126':445
'21#.#3.210.183':445
'21#.#3.139.120':445
'21#.#3.183.242':445
'21#.#3.117.103':445
'21#.#3.210.73':445
'21#.#3.108.248':445
'21#.#3.231.38':445
'21#.#3.124.38':445
'21#.#3.119.16':445
'21#.#3.165.58':139
'21#.#3.14.207':139
'21#.#3.90.95':139
'21#.#3.24.175':139
'21#.#3.177.249':139
'21#.#3.72.18':139
'21#.#3.61.85':139
'21#.#3.193.60':139
'21#.#3.227.234':139
'21#.33.0.10':139
'21#.#3.157.254':139
'21#.#3.42.232':139
'21#.#3.16.128':445
'21#.#3.130.66':445
'21#.#3.70.51':445
'21#.#3.224.23':445
'21#.33.7.81':445
'21#.#3.66.53':445
'21#.#3.140.154':445
'21#.#3.167.178':445
'21#.#3.30.35':445
'21#.#3.194.238':445
'21#.#3.11.251':445
'21#.#3.70.190':445
'21#.#3.178.70':445
'21#.#3.31.93':445
'21#.#3.126.23':139
'21#.#3.120.126':139
'21#.#3.231.38':139
'21#.#3.139.120':139
'21#.#3.183.242':139
'21#.#3.23.184':139
'21#.#3.210.73':139
'21#.#3.108.248':139
'21#.#3.25.187':139
'21#.#3.124.38':139
'21#.#3.119.16':139
'21#.#3.117.103':139
'21#.#3.210.183':139
'21#.#3.79.196':445
'21#.#3.113.233':445
'21#.#3.187.198':445
'21#.#3.161.6':445
'21#.#3.97.139':445
'21#.#3.161.117':445
'21#.#3.188.136':445
'21#.#3.46.11':445
'21#.#3.31.93':139
'21#.#3.73.196':445
'21#.33.8.73':445
'21#.#3.25.103':445
'21#.#3.70.51':139
'21#.#3.224.23':139
'21#.#3.11.251':139
'21#.#3.66.53':139
'21#.#3.140.154':139
'21#.#3.130.66':139
'21#.#3.30.35':139
'21#.#3.194.238':139
'21#.#3.16.128':139
'21#.#3.70.190':139
'21#.#3.178.70':139
'21#.#3.167.178':139
'21#.33.7.81':139
'21#.#3.137.143':139
'21#.#3.18.78':139
'21#.#3.75.233':139
'21#.#3.82.42':139
'21#.#3.62.66':139
'21#.#3.216.4':139
'21#.#3.20.16':139
'21#.#3.159.64':139
'21#.#3.58.49':139
'21#.#3.29.57':139
'21#.#3.156.29':139
'21#.33.16.3':139
'21#.#3.24.175':445
'21#.#3.46.27':445
'21#.#3.4.221':445
'21#.#3.181.217':445
'21#.#3.113.249':445
'21#.#3.176.10':445
'21#.#3.74.154':445
'21#.#3.85.32':445
'21#.#3.187.248':445
'21#.#3.18.235':445
'21#.#3.40.185':445
'21#.#3.5.179':445
'21#.#3.60.131':445
'21#.#3.181.123':445
'21#.#3.188.48':445
'21#.#3.154.212':445
'21#.#3.48.21':445
'21#.#3.168.109':445
'21#.#3.67.185':445
'21#.#3.97.67':445
'21#.#3.125.12':445
'21#.#3.69.18':445
'21#.#3.212.96':445
'21#.#3.151.128':445
'21#.#3.136.86':445
'21#.#3.10.212':445
'21#.#3.238.223':139
'21#.#3.108.239':139
'21#.#3.48.108':139
'21#.#3.66.241':139
'21#.#3.119.244':139
'21#.#3.116.94':139
'21#.33.2.75':139
'21#.#3.46.48':139
'21#.#3.190.112':139
'21#.#3.148.170':139
'21#.#3.123.224':139
'21#.#3.167.94':139
'21#.#3.226.196':445
'21#.#3.247.137':445
'21#.#3.87.247':445
'21#.#3.34.59':445
'21#.#3.12.216':445
'21#.#3.183.186':445
'21#.#3.137.128':445
'21#.#3.16.105':445
'21#.#3.168.162':445
'21#.#3.71.218':445
'21#.#3.52.252':445
'21#.#3.147.110':445
'21#.#3.98.234':445
'21#.#3.60.233':445
'21#.#3.154.212':139
'21#.#3.48.21':139
'21#.#3.151.128':139
'21#.#3.67.185':139
'21#.#3.97.67':139
'21#.#3.188.48':139
'21#.#3.69.18':139
'21#.#3.212.96':139
'21#.#3.181.123':139
'21#.#3.136.86':139
'21#.#3.10.212':139
'21#.#3.125.12':139
'21#.#3.168.109':139
'21#.#3.14.207':445
'21#.#3.90.95':445
'21#.33.0.10':445
'21#.#3.177.249':445
'21#.#3.72.18':445
'21#.#3.165.58':445
'21#.#3.193.60':445
'21#.#3.227.234':445
'21#.#3.60.233':139
'21#.#3.157.254':445
'21#.#3.42.232':445
'21#.#3.61.85':445
'21#.#3.87.247':139
'21#.#3.34.59':139
'21#.#3.52.252':139
'21#.#3.183.186':139
'21#.#3.137.128':139
'21#.#3.247.137':139
'21#.#3.168.162':139
'21#.#3.71.218':139
'21#.#3.226.196':139
'21#.#3.147.110':139
'21#.#3.98.234':139
'21#.#3.16.105':139
'21#.#3.12.216':139
'21#.#3.46.27':139
'21#.#3.4.221':139
'21#.#3.181.217':139
'21#.#3.113.249':139
'21#.#3.176.10':139
'21#.#3.74.154':139
'21#.#3.85.32':139
'21#.#3.187.248':139
'21#.#3.18.235':139
'21#.#3.40.185':139
'21#.#3.5.179':139
'21#.#3.60.131':139
'21#.#3.212.48':445
'21#.#3.38.155':445
'21#.#3.22.238':445
'21#.#3.236.46':445
'21#.#3.138.52':445
'21#.#3.47.172':445
'21#.#3.157.236':445
'21#.#3.103.183':445
'21#.#3.33.176':445
'21#.#3.163.220':445
'21#.#3.56.249':445
'21#.#3.127.227':445
'21#.#3.183.22':445
'21#.#3.115.220':445
'21#.#3.246.204':445
'21#.#3.35.81':445
'21#.#3.48.36':445
'21#.#3.204.140':445
'21#.#3.62.220':445
'21#.#3.137.199':445
'21#.#3.65.142':445
'21#.#3.134.120':445
'21#.#3.90.226':445
'21#.#3.113.126':445
'21#.#3.101.54':445
'21#.#3.42.150':445
'21#.33.9.43':445
'21#.#3.66.106':445
'21#.#3.157.223':445
'21#.#3.173.95':445
'21#.#3.91.101':445
'21#.#3.51.51':445
'21#.#3.15.79':445
'21#.#3.99.125':445
'21#.#3.0.213':445
'21#.#3.193.201':445
'21#.#3.51.193':445
'21#.#3.28.47':445
'21#.#3.85.151':445
'21#.#3.151.163':445
'21#.#3.108.16':445
'21#.#3.237.32':445
'21#.#3.241.236':445
'21#.#3.149.231':445
'21#.#3.9.177':445
'21#.#3.221.233':445
'21#.#3.75.112':445
'21#.#3.112.157':445
'21#.33.8.87':445
'21#.#3.155.239':445
'21#.#3.93.75':139
'21#.#3.212.48':139
'21#.#3.38.155':139
'21#.#3.22.238':139
'21#.#3.236.46':139
'21#.#3.138.52':139
'21#.#3.47.172':139
'21#.#3.157.236':139
'21#.#3.103.183':139
'21#.#3.33.176':139
'21#.#3.163.220':139
'21#.#3.56.249':139
'21#.#3.127.227':139
'21#.#3.183.22':139
'21#.#3.35.81':139
'21#.#3.204.140':139
'21#.#3.246.204':139
'21#.#3.115.220':139
'21#.#3.62.220':139
'21#.#3.48.36':139
'21#.#3.137.199':139
'21#.#3.65.142':139
'21#.#3.134.120':139
'21#.#3.90.226':139
'21#.#3.113.126':139
'21#.#3.101.54':139
'21#.#3.42.150':139
'21#.33.9.43':139
'21#.#3.66.106':139
'21#.#3.157.223':139
'21#.#3.173.95':139
'21#.#3.91.101':139
'21#.#3.51.51':139
'21#.#3.15.79':139
'21#.#3.99.125':139
'21#.#3.0.213':139
'21#.#3.193.201':139
'21#.#3.51.193':139
'21#.#3.28.47':139
'21#.#3.85.151':139
'21#.#3.151.163':139
'21#.#3.108.16':139
'21#.#3.237.32':139
'21#.#3.241.236':139
'21#.#3.149.231':139
'21#.#3.9.177':139
'21#.#3.221.233':139
'21#.#3.75.112':139
'21#.#3.112.157':139
'21#.33.8.87':139
'21#.#3.155.239':139
'21#.#3.93.75':445
'21#.#3.46.218':445
'21#.#3.51.180':445
'21#.#3.47.128':445
'21#.#3.216.213':445
'21#.#3.33.113':445
'21#.#3.253.198':445
'21#.#3.78.195':445
'21#.#3.176.74':445
'21#.#3.46.65':445
'21#.#3.23.47':445
'21#.#3.176.145':445
'21#.#3.107.115':445
'21#.#3.165.41':445
'21#.#3.211.0':445
'21#.#3.155.211':445
'21#.#3.150.96':445
'21#.#3.207.27':445
'21#.#3.153.62':445
'21#.#3.78.184':445
'21#.#3.140.50':445
'21#.#3.34.236':445
'21#.#3.125.30':445
'21#.33.6.75':445
'21#.#3.8.218':445
'21#.#3.50.155':445
'21#.#3.79.196':139
'21#.#3.113.233':139
'21#.#3.187.198':139
'21#.#3.161.6':139
'21#.#3.97.139':139
'21#.#3.161.117':139
'21#.#3.188.136':139
'21#.#3.46.11':139
'21#.#3.144.105':445
'21#.#3.73.196':139
'21#.33.8.73':139
'21#.#3.25.103':139
'21#.#3.144.105':139
'21#.#3.236.252':445
'21#.#3.33.23':445
'21#.#3.2.164':445
'21#.#3.200.158':445
'21#.#3.196.179':445
'21#.#3.252.200':445
'21#.#3.139.34':445
'21#.#3.158.99':445
'21#.#3.197.157':445
'21#.#3.202.254':445
'21#.#3.132.203':445
'21#.#3.226.132':445
'21#.#3.254.145':445
'21#.#3.155.211':139
'21#.#3.150.96':139
'21#.33.6.75':139
'21#.#3.153.62':139
'21#.#3.78.184':139
'21#.#3.211.0':139
'21#.#3.34.236':139
'21#.#3.125.30':139
'21#.#3.165.41':139
'21#.#3.8.218':139
'21#.#3.50.155':139
'21#.#3.140.50':139
'21#.#3.207.27':139
'21#.#3.48.36':9988
'21#.#3.134.120':9988
'21#.#3.56.249':9988
'21#.#3.35.81':9988
'21#.#3.115.220':9988
'21#.#3.90.226':9988
'21#.#3.51.193':9988
'21#.#3.145.235':139
'21#.#3.254.145':139
'21#.#3.237.32':9988
'21#.33.8.87':9988
'21#.#3.0.213':9988
'21#.#3.33.23':139
'21#.#3.2.164':139
'21#.#3.202.254':139
'21#.#3.196.179':139
'21#.#3.252.200':139
'21#.#3.236.252':139
'21#.#3.158.99':139
'21#.#3.197.157':139
'21#.#3.145.235':445
'21#.#3.132.203':139
'21#.#3.226.132':139
'21#.#3.139.34':139
'21#.#3.200.158':139
'21#.#3.46.218':139
'21#.#3.51.180':139
'21#.#3.47.128':139
'21#.#3.216.213':139
'21#.#3.33.113':139
'21#.#3.253.198':139
'21#.#3.78.195':139
'21#.#3.176.74':139
'21#.#3.46.65':139
'21#.#3.23.47':139
'21#.#3.176.145':139
'21#.#3.107.115':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней