Trojan.Starman.6446

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1ac9.dir00\svchost.exe.mdmp 16325836412032308

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#86.1.16':139
'21#.#86.126.108':139
'21#.#86.196.169':139
'21#.#86.143.38':139
'21#.#86.135.108':139
'21#.#86.141.46':139
'21#.#86.68.12':139
'21#.#86.46.42':139
'21#.#86.29.59':139
'21#.#86.43.39':139
'21#.#86.247.215':139
'21#.#86.112.100':445
'21#.#86.33.202':445
'21#.#86.187.156':445
'21#.#86.250.191':445
'21#.#86.212.103':445
'21#.#86.152.249':445
'21#.#86.35.235':445
'21#.#86.204.144':445
'21#.#86.239.171':445
'21#.#86.227.216':445
'21#.#86.68.12':445
'21#.#86.75.120':445
'21#.#86.141.46':445
'21#.#86.43.39':445
'21#.#86.46.42':445
'21#.#86.104.125':139
'21#.#86.231.248':139
'21#.#86.125.25':445
'21#.#86.93.70':445
'21#.#86.23.243':445
'21#.#86.29.59':445
'21#.#86.125.25':139
'21#.#86.247.215':445
'21#.#86.23.243':139
'21#.#86.75.120':139
'21#.#86.93.70':139
'21#.#86.1.16':445
'21#.#86.126.108':445
'21#.#86.196.169':445
'21#.#86.143.38':445
'21#.#86.135.108':445
'21#.#86.152.249':139
'21#.#86.35.235':139
'21#.#86.204.144':139
'21#.#86.239.171':139
'21#.#86.227.216':139
'21#.#86.6.26':445
'21#.#86.255.5':445
'21#.#86.26.146':445
'21#.#86.108.248':445
'21#.#86.58.99':445
'21#.#86.33.202':139
'21#.#86.27.44':139
'21#.#86.239.26':139
'21#.#86.136.15':139
'21#.#86.149.232':139
'21#.#86.11.18':139
'21#.#86.187.156':139
'21#.#86.112.100':139
'21#.#86.212.103':139
'21#.#86.231.239':139
'21#.#86.250.191':139
'21#.#86.232.198':445
'21#.#86.149.232':445
'21#.#86.34.10':445
'21#.#86.134.222':445
'21#.#86.82.135':445
'21#.#86.239.26':445
'21#.#86.231.239':445
'21#.#86.27.44':445
'21#.#86.11.18':445
'21#.#86.136.15':445
'21#.#86.113.8':445
'21#.#86.20.157':445
'21#.#86.118.24':445
'21#.#86.40.151':445
'21#.#86.206.127':445
'21#.#86.245.13':445
'21#.#86.9.85':445
'21#.#86.102.119':445
'21#.#86.147.202':445
'21#.#86.222.29':445
'21#.#86.66.209':445
'21#.#86.157.2':139
'21#.#86.7.215':445
'21#.#86.35.105':445
'21#.#86.214.148':445
'21#.#86.179.156':445
'21#.#86.2.40':445
'21#.#86.198.53':445
'21#.#86.75.241':445
'21#.#86.217.103':445
'21#.#86.185.108':445
'21#.#86.57.150':445
'21#.#86.157.121':445
'21#.#86.136.28':445
'21#.#86.80.24':445
'21#.#86.28.92':445
'21#.#86.55.54':445
'21#.#86.239.245':445
'21#.#86.76.4':445
'21#.#86.121.174':445
'21#.#86.144.105':445
'21#.#86.121.114':445
'21#.#86.244.83':445
'21#.#86.216.54':139
'21#.#86.122.163':139
'21#.#86.117.175':139
'21#.#86.127.149':139
'21#.#86.36.43':139
'21#.#86.60.15':139
'21#.#86.157.25':139
'21#.#86.15.147':139
'21#.#86.80.122':139
'21#.#86.146.80':139
'21#.#86.19.114':139
'21#.#86.243.50':445
'21#.#86.56.243':445
'21#.#86.200.95':445
'21#.#86.0.62':445
'21#.#86.101.202':445
'21#.#86.246.96':139
'21#.#86.140.97':139
'21#.#86.17.6':139
'21#.#86.61.211':445
'21#.#86.255.154':139
'21#.#86.76.4':139
'21#.#86.121.174':139
'21#.#86.144.105':139
'21#.#86.121.114':139
'21#.#86.244.83':139
'21#.#86.214.148':139
'21#.#86.7.215':139
'21#.#86.2.40':139
'21#.#86.157.121':139
'21#.#86.179.156':139
'21#.#86.80.24':139
'21#.#86.76.160':139
'21#.#86.6.159':139
'21#.#86.253.105':139
'21#.#86.64.26':139
'21#.#86.134.27':139
'21#.#86.28.92':139
'21#.#86.136.28':139
'21#.#86.239.245':139
'21#.#86.0.46':139
'21#.#86.55.54':139
'21#.#86.157.2':445
'21#.#86.64.26':445
'21#.#86.231.248':445
'21#.#86.61.211':139
'21#.#86.104.125':445
'21#.#86.6.159':445
'21#.#86.0.46':445
'21#.#86.76.160':445
'21#.#86.134.27':445
'21#.#86.253.105':445
'21#.#86.56.243':139
'21#.#86.217.103':139
'21#.#86.198.53':139
'21#.#86.57.150':139
'21#.#86.35.105':139
'21#.#86.185.108':139
'21#.#86.200.95':139
'21#.#86.243.50':139
'21#.#86.101.202':139
'21#.#86.75.241':139
'21#.#86.0.62':139
'21#.#86.232.198':139
'21#.#86.65.242':445
'21#.#86.163.252':445
'21#.#86.188.11':445
'21#.#86.10.66':445
'21#.#86.51.134':445
'21#.#86.123.144':445
'21#.#86.74.22':445
'21#.#86.5.49':445
'21#.#86.249.105':445
'21#.#86.31.59':445
'21#.#86.57.51':445
'21#.#86.41.14':139
'21#.#86.97.222':139
'21#.#86.17.127':139
'21#.#86.85.68':139
'21#.#86.9.97':139
'21#.#86.120.206':139
'21#.#86.96.30':445
'21#.#86.83.151':139
'21#.#86.192.151':139
'21#.#86.188.169':139
'21#.#86.42.36':445
'21#.#86.24.237':445
'21#.#86.147.159':445
'21#.#86.26.108':445
'21#.#86.197.242':445
'21#.#86.229.137':445
'21#.#86.84.26':445
'21#.#86.12.198':445
'21#.#86.2.245':445
'21#.#86.76.168':445
'21#.#86.232.81':445
'21#.#86.80.83':445
'21#.#86.159.207':445
'21#.#86.82.145':445
'21#.#86.32.162':445
'21#.#86.177.74':445
'21#.#86.120.254':445
'21#.#86.135.120':445
'21#.#86.62.200':445
'21#.#86.6.214':445
'21#.#86.120.119':445
'21#.#86.82.145':139
'21#.#86.80.83':139
'21#.#86.177.74':139
'21#.#86.74.22':139
'21#.#86.32.162':139
'21#.#86.62.200':139
'21#.#86.120.254':139
'21#.#86.120.119':139
'21#.#86.159.207':139
'21#.#86.6.214':139
'21#.#86.123.144':139
'21#.#86.57.51':139
'21#.#86.188.11':139
'21#.#86.10.66':139
'21#.#86.96.30':139
'21#.#86.51.134':139
'21#.#86.31.59':139
'21#.#86.5.49':139
'21#.#86.249.105':139
'21#.#86.65.242':139
'21#.#86.163.252':139
'21#.#86.83.69':139
'21#.#86.38.215':139
'21#.#86.71.153':139
'21#.#86.84.26':139
'21#.#86.233.254':139
'21#.#86.220.136':139
'21#.#86.14.221':139
'21#.#86.136.61':139
'21#.#86.44.17':139
'21#.#86.252.84':139
'21#.#86.229.137':139
'21#.#86.197.242':139
'21#.#86.147.159':139
'21#.#86.26.108':139
'21#.#86.135.120':139
'21#.#86.232.81':139
'21#.#86.76.168':139
'21#.#86.12.198':139
'21#.#86.2.245':139
'21#.#86.42.36':139
'21#.#86.24.237':139
'21#.#86.233.254':445
'21#.#86.137.177':445
'21#.#86.147.172':445
'21#.#86.33.7':445
'21#.#86.229.89':445
'21#.#86.62.198':445
'21#.#86.13.76':445
'21#.#86.91.80':445
'21#.#86.21.175':445
'21#.#86.76.19':445
'21#.#86.197.75':445
'21#.#86.167.61':445
'21#.#86.21.175':139
'21#.#86.13.76':139
'21#.#86.197.75':139
'21#.#86.147.172':139
'21#.#86.76.19':139
'21#.#86.88.213':445
'21#.#86.125.156':445
'21#.#86.249.160':139
'21#.#86.91.80':139
'21#.#86.128.158':139
'21#.#86.147.202':139
'21#.#86.9.85':139
'21#.#86.66.209':139
'21#.#86.118.24':139
'21#.#86.222.29':139
'21#.#86.82.135':139
'21#.#86.34.10':139
'21#.#86.134.222':139
'21#.#86.102.119':139
'21#.#86.113.8':139
'21#.#86.20.157':139
'21#.#86.58.99':139
'21#.#86.26.146':139
'21#.#86.108.248':139
'21#.#86.128.158':445
'21#.#86.249.160':445
'21#.#86.245.13':139
'21#.#86.40.151':139
'21#.#86.206.127':139
'21#.#86.6.26':139
'21#.#86.255.5':139
'21#.#86.188.169':445
'21#.#86.83.151':445
'21#.#86.192.151':445
'21#.#86.41.14':445
'21#.#86.97.222':445
'21#.#86.51.134':9988
'21#.#86.188.11':9988
'21#.#86.57.51':9988
'21#.#86.120.206':445
'21#.#86.96.30':9988
'21#.#86.17.127':445
'21#.#86.44.17':445
'21#.#86.252.84':445
'21#.#86.38.215':445
'21#.#86.71.153':445
'21#.#86.83.69':445
'21#.#86.85.68':445
'21#.#86.9.97':445
'21#.#86.14.221':445
'21#.#86.136.61':445
'21#.#86.220.136':445
'21#.#86.88.213':139
'21#.#86.125.156':139
'21#.#86.120.254':9988
'21#.#86.80.83':9988
'21#.#86.159.207':9988
'21#.#86.33.7':139
'21#.#86.137.177':139
'21#.#86.62.198':139
'21#.#86.167.61':139
'21#.#86.229.89':139
'21#.#86.232.81':9988
'21#.#86.74.22':9988
'21#.#86.147.159':9988
'21#.#86.123.144':9988
'21#.#86.10.66':9988
'21#.#86.163.252':9988
'21#.#86.135.120':9988
'21#.#86.197.242':9988
'21#.#86.120.119':9988
'21#.#86.26.108':9988
'21#.#86.6.214':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней