Trojan.Starman.6557

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERcebc.dir00\svchost.exe.mdmp 16325836412032060

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERcebc.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#17.226.141':445
'13#.#17.16.164':445
'13#.#17.108.54':445
'13#.#17.163.8':445
'13#.#17.56.124':445
'13#.#17.188.94':445
'13#.#17.129.26':445
'13#.#17.169.185':445
'13#.#17.36.170':445
'13#.#17.235.141':445
'13#.#17.116.203':445
'13#.#17.176.116':445
'13#.#17.185.176':445
'13#.#17.161.156':139
'13#.#17.118.158':445
'13#.#17.149.208':445
'13#.#17.179.165':139
'13#.#17.193.179':139
'13#.#17.176.194':139
'13#.#17.206.207':445
'13#.#17.171.134':445
'13#.#17.106.46':445
'13#.#17.100.115':445
'13#.#17.104.103':445
'13#.#17.4.217':445
'13#.#17.72.227':445
'13#.#17.169.110':445
'13#.#17.38.14':445
'13#.#17.36.252':445
'13#.#17.115.180':445
'13#.#17.124.111':445
'13#.#17.49.10':445
'13#.#17.222.185':445
'13#.#17.30.190':445
'13#.#17.134.23':445
'13#.#17.179.165':445
'13#.#17.127.83':445
'13#.#17.41.81':445
'13#.#17.252.200':445
'13#.#17.234.251':445
'13#.#17.42.235':445
'13#.#17.158.171':445
'13#.#17.169.23':445
'13#.#17.141.95':445
'13#.#17.46.26':445
'13#.#17.159.217':445
'13#.#17.159.26':445
'13#.#17.36.220':445
'13#.#17.180.36':445
'13#.#17.180.89':445
'13#.#17.107.245':445
'13#.#17.58.108':445
'13#.#17.134.23':139
'13#.#17.56.124':139
'13#.#17.188.94':139
'13#.#17.226.141':139
'13#.#17.106.46':139
'13#.#17.100.115':139
'13#.#17.163.8':139
'13#.#17.16.164':139
'13#.#17.176.116':139
'13#.#17.185.176':139
'13#.#17.169.185':139
'13#.#17.108.54':139
'13#.#17.129.26':139
'13#.#17.116.203':139
'13#.#17.8.31':445
'13#.#17.134.52':445
'13#.#17.30.228':445
'13#.#17.104.166':445
'13#.#17.89.213':445
'13#.#17.140.83':445
'13#.#17.118.158':139
'13#.#17.4.217':139
'13#.#17.72.227':139
'13#.#17.171.134':139
'13#.#17.149.208':139
'13#.#17.206.207':139
'13#.#17.104.103':139
'13#.#17.124.111':139
'13#.#17.49.10':139
'13#.#17.169.110':139
'13#.#17.36.220':139
'13#.#17.180.36':139
'13#.#17.115.180':139
'13#.#17.38.14':139
'13#.#17.41.81':139
'13#.#17.252.200':139
'13#.#17.30.190':139
'13#.#17.36.252':139
'13#.#17.222.185':139
'13#.#17.127.83':139
'13#.#17.141.95':139
'13#.#17.46.26':139
'13#.#17.234.251':139
'13#.#17.36.170':139
'13#.#17.235.141':139
'13#.#17.169.23':139
'13#.#17.42.235':139
'13#.#17.107.245':139
'13#.#17.58.108':139
'13#.#17.159.26':139
'13#.#17.158.171':139
'13#.#17.159.217':139
'13#.#17.180.89':139
'13#.#17.90.66':445
'13#.#17.157.34':445
'13#.#17.241.156':445
'13#.#17.51.215':445
'13#.#17.106.220':445
'13#.#17.7.139':445
'13#.#17.85.241':445
'13#.#17.138.187':445
'13#.#17.230.178':445
'13#.#17.77.75':445
'13#.#17.7.49':445
'13#.#17.187.100':445
'13#.#17.43.109':445
'13#.#17.241.11':445
'13#.#17.15.41':445
'13#.#17.44.217':445
'13#.#17.119.44':139
'13#.#17.137.161':445
'13#.#17.42.180':445
'13#.#17.113.253':445
'13#.#17.86.101':445
'13#.#17.244.10':445
'13#.#17.45.168':445
'13#.#17.82.115':445
'13#.#17.174.116':445
'13#.#17.120.15':445
'13#.#17.174.8':445
'13#.#17.8.131':445
'13#.#17.58.39':445
'13#.#17.95.168':445
'13#.#17.57.240':445
'13#.#17.49.217':445
'13#.#17.129.57':445
'13#.#17.154.102':445
'13#.#17.196.89':445
'13#.#17.119.44':445
'13#.#17.84.163':445
'13#.#17.190.101':445
'13#.#17.132.49':445
'13#.#17.245.23':445
'13#.#17.18.14':445
'13#.#17.32.0':445
'13#.#17.166.67':445
'13#.#17.117.89':445
'13#.#17.233.231':445
'13#.#17.69.209':445
'13#.#17.41.164':445
'13#.#17.62.41':445
'13#.#17.193.105':445
'13#.#17.240.121':445
'13#.#17.129.98':445
'13#.#17.164.128':445
'13#.#17.196.89':139
'13#.#17.106.220':139
'13#.#17.7.139':139
'13#.#17.90.66':139
'13#.#17.244.10':139
'13#.#17.45.168':139
'13#.#17.51.215':139
'13#.#17.157.34':139
'13#.#17.187.100':139
'13#.#17.43.109':139
'13#.#17.138.187':139
'13#.#17.241.156':139
'13#.#17.85.241':139
'13#.#17.7.49':139
'13#.#17.137.161':139
'13#.#17.42.180':139
'13#.#17.241.11':139
'13#.#17.193.179':445
'13#.#17.176.194':445
'13#.#17.161.156':445
'13#.#17.15.41':139
'13#.#17.174.116':139
'13#.#17.120.15':139
'13#.#17.86.101':139
'13#.#17.44.217':139
'13#.#17.113.253':139
'13#.#17.82.115':139
'13#.#17.57.240':139
'13#.#17.49.217':139
'13#.#17.174.8':139
'13#.#17.62.41':139
'13#.#17.193.105':139
'13#.#17.95.168':139
'13#.#17.8.131':139
'13#.#17.190.101':139
'13#.#17.132.49':139
'13#.#17.154.102':139
'13#.#17.58.39':139
'13#.#17.129.57':139
'13#.#17.84.163':139
'13#.#17.117.89':139
'13#.#17.233.231':139
'13#.#17.245.23':139
'13#.#17.230.178':139
'13#.#17.77.75':139
'13#.#17.166.67':139
'13#.#17.18.14':139
'13#.#17.129.98':139
'13#.#17.164.128':139
'13#.#17.41.164':139
'13#.#17.32.0':139
'13#.#17.69.209':139
'13#.#17.240.121':139
'13#.#17.196.109':445
'13#.#17.236.174':445
'13#.#17.174.13':445
'13#.#17.107.197':445
'13#.#17.210.42':445
'13#.#17.174.181':445
'13#.#17.203.130':445
'13#.#17.81.222':445
'13#.#17.152.187':445
'13#.#17.219.81':445
'13#.#17.234.245':445
'13#.#17.224.90':445
'13#.#17.222.109':445
'13#.#17.14.221':445
'13#.#17.101.88':445
'13#.#17.204.130':445
'13#.#17.220.230':445
'13#.#17.6.254':445
'13#.#17.230.88':445
'13#.#17.177.49':445
'13#.#17.84.201':445
'13#.#17.153.230':445
'13#.#17.163.152':445
'13#.#17.145.190':445
'13#.#17.130.79':445
'13#.#17.199.98':445
'13#.#17.190.126':445
'13#.#17.100.163':445
'13#.#17.121.115':445
'13#.#17.107.116':445
'13#.#17.114.15':445
'13#.#17.97.39':445
'13#.#17.7.187':445
'13#.#17.230.179':9988
'13#.#17.230.88':9988
'13#.#17.14.221':9988
'13#.#17.106.228':445
'13#.#17.78.211':445
'13#.#17.60.79':445
'13#.#17.52.218':445
'13#.#17.212.93':445
'13#.#17.72.159':445
'13#.#17.121.125':445
'13#.#17.172.97':445
'13#.#17.217.224':445
'13#.#17.87.25':445
'13#.#17.22.55':445
'13#.#17.70.57':445
'13#.#17.192.230':445
'13#.#17.216.22':445
'13#.#17.35.205':445
'13#.#17.17.37':445
'13#.#17.230.179':445
'13#.#17.210.42':139
'13#.#17.196.109':139
'13#.#17.174.181':139
'13#.#17.153.230':139
'13#.#17.163.152':139
'13#.#17.107.197':139
'13#.#17.236.174':139
'13#.#17.224.90':139
'13#.#17.222.109':139
'13#.#17.81.222':139
'13#.#17.174.13':139
'13#.#17.203.130':139
'13#.#17.234.245':139
'13#.#17.230.88':139
'13#.#17.220.230':139
'13#.#17.14.221':139
'13#.#17.6.254':139
'13#.#17.89.64':139
'13#.#17.230.179':139
'13#.#17.101.88':139
'13#.#17.130.79':139
'13#.#17.199.98':139
'13#.#17.84.201':139
'13#.#17.204.130':139
'13#.#17.177.49':139
'13#.#17.145.190':139
'13#.#17.114.15':139
'13#.#17.97.39':139
'13#.#17.190.126':139
'13#.#17.70.57':139
'13#.#17.192.230':139
'13#.#17.107.116':139
'13#.#17.100.163':139
'13#.#17.78.211':139
'13#.#17.60.79':139
'13#.#17.89.64':445
'13#.#17.121.115':139
'13#.#17.7.187':139
'13#.#17.106.228':139
'13#.#17.172.97':139
'13#.#17.217.224':139
'13#.#17.52.218':139
'13#.#17.219.81':139
'13#.#17.152.187':139
'13#.#17.121.125':139
'13#.#17.212.93':139
'13#.#17.35.205':139
'13#.#17.17.37':139
'13#.#17.22.55':139
'13#.#17.72.159':139
'13#.#17.87.25':139
'13#.#17.216.22':139
'13#.#17.206.52':445
'13#.#17.75.147':445
'13#.#17.184.10':445
'13#.#17.236.149':445
'13#.#17.192.38':445
'13#.#17.205.191':445
'13#.#17.5.45':445
'13#.#17.159.50':445
'13#.#17.173.5':445
'13#.#17.215.151':445
'13#.#17.84.54':445
'13#.#17.246.237':445
'13#.#17.35.173':445
'13#.#17.140.83':139
'13#.#17.8.31':139
'13#.#17.134.52':139
'13#.#17.36.11':139
'13#.#17.104.166':139
'13#.#17.89.213':139
'13#.#17.30.228':139
'13#.#17.80.40':445
'13#.#17.234.13':445
'13#.#17.34.135':445
'13#.#17.210.60':445
'13#.#17.89.210':445
'13#.#17.204.89':445
'13#.#17.3.21':445
'13#.#17.217.3':445
'13#.#17.17.52':445
'13#.#17.92.127':445
'13#.#17.67.156':445
'13#.#17.116.43':445
'13#.#17.169.218':445
'13#.#17.208.200':445
'13#.#17.227.211':445
'13#.#17.36.11':445
'13#.#17.214.178':445
'13#.#17.96.214':445
'13#.#17.201.96':445
'13#.#17.136.180':445
'13#.#17.81.136':445
'13#.#17.17.202':445
'13#.#17.110.11':445
'13#.#17.80.6':445
'13#.#17.188.56':445
'13#.#17.209.142':445
'13#.#17.11.241':445
'13#.#17.220.94':445
'13#.#17.218.239':445
'13#.#17.68.68':445
'13#.#17.68.227':445
'13#.#17.160.164':445
'13#.#17.227.211':139
'13#.#17.192.38':139
'13#.#17.205.191':139
'13#.#17.206.52':139
'13#.#17.234.13':139
'13#.#17.34.135':139
'13#.#17.236.149':139
'13#.#17.75.147':139
'13#.#17.246.237':139
'13#.#17.35.173':139
'13#.#17.159.50':139
'13#.#17.184.10':139
'13#.#17.5.45':139
'13#.#17.84.54':139
'13#.#17.236.174':9988
'13#.#17.174.13':9988
'13#.#17.203.130':9988
'13#.#17.145.190':9988
'13#.#17.153.230':9988
'13#.#17.210.42':9988
'13#.#17.152.187':9988
'13#.#17.89.210':139
'13#.#17.204.89':139
'13#.#17.80.40':139
'13#.#17.121.125':9988
'13#.#17.217.224':9988
'13#.#17.210.60':139
'13#.#17.67.156':139
'13#.#17.116.43':139
'13#.#17.3.21':139
'13#.#17.220.94':139
'13#.#17.218.239':139
'13#.#17.92.127':139
'13#.#17.217.3':139
'13#.#17.96.214':139
'13#.#17.201.96':139
'13#.#17.208.200':139
'13#.#17.17.52':139
'13#.#17.169.218':139
'13#.#17.214.178':139
'13#.#17.80.6':139
'13#.#17.188.56':139
'13#.#17.136.180':139
'13#.#17.173.5':139
'13#.#17.215.151':139
'13#.#17.110.11':139
'13#.#17.81.136':139
'13#.#17.68.227':139
'13#.#17.160.164':139
'13#.#17.11.241':139
'13#.#17.17.202':139
'13#.#17.209.142':139
'13#.#17.68.68':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней