Trojan.Starman.6452

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER5603.dir00\svchost.exe.mdmp 16325836412032144

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5603.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#3.28.236':139
'21#.#3.35.219':139
'21#.#3.27.211':139
'21#.#3.11.81':139
'21#.#3.50.114':139
'21#.#3.212.65':139
'21#.#3.165.199':139
'21#.#3.125.194':139
'21#.#3.113.35':139
'21#.#3.158.212':139
'21#.#3.172.97':139
'21#.#3.132.209':139
'21#.#3.55.133':139
'21#.#3.209.201':445
'21#.83.5.45':445
'21#.#3.80.241':445
'21#.#3.209.232':139
'21#.#3.54.72':139
'21#.#3.232.182':139
'21#.#3.114.55':139
'21#.#3.182.113':139
'21#.#3.50.114':445
'21#.#3.27.211':445
'21#.#3.11.81':445
'21#.#3.54.72':445
'21#.#3.172.97':445
'21#.#3.158.212':445
'21#.#3.125.194':445
'21#.#3.113.35':445
'21#.#3.28.236':445
'21#.#3.35.219':445
'21#.#3.209.232':445
'21#.#3.54.218':139
'21#.#3.243.146':139
'21#.#3.123.141':139
'21#.#3.50.68':139
'21#.#3.117.125':139
'21#.#3.182.113':445
'21#.#3.232.182':445
'21#.#3.114.55':445
'21#.#3.132.209':445
'21#.#3.55.133':445
'21#.#3.40.246':445
'21#.#3.40.246':139
'21#.83.5.45':139
'21#.#3.196.224':139
'21#.#3.71.254':139
'21#.#3.23.50':139
'21#.#3.63.35':445
'21#.#3.207.102':445
'21#.#3.166.142':445
'21#.#3.80.241':139
'21#.#3.209.201':139
'21#.#3.70.30':139
'21#.#3.138.179':139
'21#.#3.29.31':139
'21#.#3.12.65':139
'21#.#3.19.94':139
'21#.#3.67.115':139
'21#.#3.161.19':139
'21#.#3.192.161':139
'21#.#3.72.21':139
'21#.#3.203.28':139
'21#.#3.211.202':139
'21#.#3.72.21':445
'21#.#3.161.19':445
'21#.#3.211.202':445
'21#.#3.29.31':445
'21#.#3.203.28':445
'21#.#3.23.50':445
'21#.#3.196.224':445
'21#.#3.71.254':445
'21#.#3.192.161':445
'21#.#3.70.30':445
'21#.#3.138.179':445
'21#.#3.123.75':445
'21#.#3.6.123':445
'21#.83.75.4':445
'21#.#3.14.116':445
'21#.#3.248.198':445
'21#.#3.67.115':445
'21#.#3.12.65':445
'21#.#3.19.94':445
'21#.83.53.6':445
'21#.#3.168.52':445
'21#.#3.212.65':445
'21#.#3.0.208':445
'21#.#3.199.126':445
'21#.#3.51.32':445
'21#.#3.79.116':445
'21#.#3.84.150':445
'21#.#3.22.230':139
'21#.#3.136.107':139
'21#.#3.13.161':445
'21#.#3.67.53':445
'21#.#3.9.117':445
'21#.#3.52.54':445
'21#.#3.230.35':445
'21#.#3.204.156':445
'21#.#3.54.13':445
'21#.#3.34.45':445
'21#.#3.253.194':445
'21#.#3.205.46':445
'21#.#3.195.205':445
'21#.#3.46.164':445
'21#.#3.20.174':445
'21#.#3.163.194':445
'21#.#3.45.163':139
'21#.#3.103.99':139
'21#.#3.48.27':139
'21#.#3.44.57':139
'21#.#3.200.110':139
'21#.#3.7.242':139
'21#.#3.15.48':139
'21#.#3.87.98':139
'21#.#3.128.191':139
'21#.#3.164.76':139
'21#.#3.239.60':139
'21#.#3.158.74':139
'21#.#3.169.237':139
'21#.#3.88.100':139
'21#.#3.29.95':139
'21#.#3.35.51':139
'21#.#3.24.242':139
'21#.#3.45.125':139
'21#.#3.89.32':139
'21#.#3.33.79':139
'21#.#3.19.158':139
'21#.#3.44.130':445
'21#.#3.44.130':139
'21#.#3.34.45':139
'21#.#3.130.75':139
'21#.#3.252.215':139
'21#.#3.75.252':139
'21#.#3.204.156':139
'21#.#3.20.174':139
'21#.#3.230.35':139
'21#.#3.253.194':139
'21#.#3.54.13':139
'21#.#3.216.153':139
'21#.#3.123.141':445
'21#.#3.54.218':445
'21#.#3.117.125':445
'21#.#3.165.199':445
'21#.#3.50.68':445
'21#.#3.230.179':139
'21#.#3.153.230':139
'21#.#3.118.244':139
'21#.#3.243.146':445
'21#.#3.2.203':139
'21#.#3.118.244':445
'21#.#3.230.179':445
'21#.#3.2.203':445
'21#.#3.9.117':139
'21#.#3.13.161':139
'21#.#3.75.252':445
'21#.#3.130.75':445
'21#.#3.252.215':445
'21#.#3.153.230':445
'21#.#3.216.153':445
'21#.#3.67.53':139
'21#.#3.195.205':139
'21#.#3.52.54':139
'21#.#3.205.46':139
'21#.#3.163.194':139
'21#.#3.46.164':139
'21#.#3.0.208':139
'21#.#3.199.126':139
'21#.#3.51.32':139
'21#.#3.79.116':139
'21#.#3.84.150':139
'21#.#3.168.52':139
'21#.#3.113.59':445
'21#.#3.42.148':445
'21#.#3.117.179':445
'21#.#3.206.222':445
'21#.#3.9.163':445
'21#.#3.108.183':445
'21#.#3.11.170':445
'21#.#3.185.89':445
'21#.#3.163.150':445
'21#.#3.197.155':445
'21#.#3.1.196':445
'21#.#3.204.228':139
'21#.#3.122.205':139
'21#.#3.134.59':139
'21#.#3.151.144':139
'21#.#3.161.151':139
'21#.#3.174.4':445
'21#.#3.60.251':445
'21#.#3.227.103':139
'21#.#3.97.123':139
'21#.#3.27.146':139
'21#.#3.119.43':445
'21#.#3.246.180':445
'21#.#3.163.32':445
'21#.#3.188.249':445
'21#.#3.24.97':445
'21#.#3.123.240':445
'21#.83.8.74':445
'21#.#3.64.85':445
'21#.#3.21.233':445
'21#.#3.131.57':445
'21#.#3.250.204':445
'21#.#3.25.139':445
'21#.#3.65.88':445
'21#.#3.95.77':445
'21#.#3.34.12':445
'21#.#3.190.33':445
'21#.#3.31.23':445
'21#.#3.18.232':445
'21#.#3.46.30':445
'21#.#3.247.158':445
'21#.#3.30.69':445
'21#.#3.188.88':139
'21#.#3.190.33':139
'21#.#3.95.77':139
'21#.#3.34.12':139
'21#.#3.185.89':139
'21#.#3.11.170':139
'21#.#3.30.69':139
'21#.#3.46.30':139
'21#.#3.247.158':139
'21#.#3.65.88':139
'21#.#3.25.139':139
'21#.#3.108.183':139
'21#.#3.60.251':139
'21#.#3.1.196':139
'21#.#3.206.222':139
'21#.#3.174.4':139
'21#.#3.117.179':139
'21#.#3.163.150':139
'21#.#3.197.155':139
'21#.#3.42.148':139
'21#.#3.9.163':139
'21#.#3.113.59':139
'21#.#3.183.230':139
'21#.#3.19.55':139
'21#.#3.136.80':139
'21#.#3.123.240':139
'21#.83.8.74':139
'21#.#3.252.48':139
'21#.#3.113.81':139
'21#.#3.37.84':139
'21#.#3.236.99':139
'21#.#3.57.89':139
'21#.#3.64.85':139
'21#.#3.250.204':139
'21#.#3.24.97':139
'21#.#3.188.249':139
'21#.#3.31.23':139
'21#.#3.18.232':139
'21#.#3.131.57':139
'21#.#3.21.233':139
'21#.#3.246.180':139
'21#.#3.119.43':139
'21#.#3.163.32':139
'21#.#3.136.80':445
'21#.#3.182.187':445
'21#.#3.98.103':445
'21#.#3.239.218':445
'21#.#3.255.29':445
'21#.#3.163.55':445
'21#.#3.134.34':445
'21#.#3.74.82':445
'21#.#3.118.76':445
'21#.#3.175.70':445
'21#.#3.34.40':445
'21#.#3.103.230':445
'21#.#3.183.39':139
'21#.#3.99.157':139
'21#.#3.96.25':139
'21#.#3.106.68':139
'21#.#3.255.77':139
'21#.#3.195.231':139
'21#.#3.143.27':139
'21#.#3.126.211':139
'21#.#3.37.115':139
'21#.#3.156.133':139
'21#.#3.207.102':139
'21#.#3.14.116':139
'21#.#3.63.35':139
'21#.#3.143.27':445
'21#.#3.166.142':139
'21#.#3.6.123':139
'21#.83.53.6':139
'21#.#3.123.75':139
'21#.#3.248.198':139
'21#.83.75.4':139
'21#.#3.195.231':445
'21#.#3.255.77':445
'21#.#3.96.25':445
'21#.#3.106.68':445
'21#.#3.213.176':445
'21#.#3.159.192':445
'21#.#3.156.133':445
'21#.#3.126.211':445
'21#.#3.37.115':445
'21#.#3.183.39':445
'21#.#3.99.157':445
'21#.#3.159.192':139
'21#.#3.27.146':445
'21#.#3.227.103':445
'21#.#3.97.123':445
'21#.#3.204.228':445
'21#.#3.122.205':445
'21#.#3.197.155':9988
'21#.#3.185.89':9988
'21#.#3.42.148':9988
'21#.#3.1.196':9988
'21#.#3.60.251':9988
'21#.#3.134.59':445
'21#.#3.57.89':445
'21#.#3.37.84':445
'21#.#3.236.99':445
'21#.#3.183.230':445
'21#.#3.19.55':445
'21#.#3.151.144':445
'21#.#3.161.151':445
'21#.#3.188.88':445
'21#.#3.252.48':445
'21#.#3.113.81':445
'21#.#3.98.103':139
'21#.#3.175.70':139
'21#.#3.182.187':139
'21#.#3.163.55':139
'21#.#3.239.218':139
'21#.#3.74.82':139
'21#.#3.213.176':139
'21#.#3.134.34':139
'21#.#3.34.40':139
'21#.#3.118.76':139
'21#.#3.255.29':139
'21#.#3.250.204':9988
'21#.#3.163.32':9988
'21#.#3.30.69':9988
'21#.#3.247.158':9988
'21#.#3.46.30':9988
'21#.#3.136.80':9988
'21#.#3.103.230':139
'21#.83.8.74':9988
'21#.#3.246.180':9988
'21#.#3.64.85':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней