Trojan.Starman.6466

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER086a.dir00\svchost.exe.mdmp 16325836412032032

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER086a.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.#.6.219':445
'72.#.239.14':445
'72.#.104.245':139
'72.#.8.59':445
'72.#.208.178':445
'72.#.76.10':445
'72.#.7.99':445
'72.#.220.191':445
'72.#.162.41':445
'72.#.128.208':139
'72.#.230.75':139
'72.#.75.181':139
'72.#.63.120':139
'72.#.119.230':139
'72.#.36.187':139
'72.#.81.8':139
'72.#.104.239':139
'72.#.128.33':139
'72.#.165.154':139
'72.#.30.130':445
'72.#.146.160':445
'72.#.120.88':445
'72.#.88.80':445
'72.#.84.103':445
'72.#.132.60':445
'72.#.29.146':445
'72.#.236.5':445
'72.#.5.182':445
'72.#.201.229':445
'72.#.46.170':445
'72.#.43.122':445
'72.#.93.194':445
'72.#.194.59':445
'72.#.227.60':445
'72.#.209.163':445
'72.#.38.125':445
'72.#.60.191':445
'72.#.67.193':445
'72.#.170.63':139
'72.#.159.201':139
'72.#.240.80':139
'72.#.7.193':139
'72.#.127.84':139
'72.#.80.231':139
'72.#.70.249':139
'72.#.171.104':139
'72.#.231.233':139
'72.#.31.47':139
'72.#.56.50':139
'72.#.5.130':139
'72.#.113.238':139
'72.#.184.252':139
'72.#.124.5':139
'72.#.82.7':139
'72.#.120.177':139
'72.#.183.115':139
'72.#.7.58':139
'72.#.57.179':139
'72.#.165.114':139
'72.#.187.48':139
'72.#.167.141':139
'72.#.81.82':139
'72.#.57.175':139
'72.#.82.106':139
'72.#.106.170':139
'72.#.175.56':139
'72.#.183.241':139
'72.#.248.202':139
'72.#.56.216':139
'72.#.93.0':139
'72.#.191.248':139
'72.#.248.55':139
'72.#.233.211':139
'72.#.246.105':139
'72.#.5.134':139
'72.#.89.112':139
'72.#.129.118':139
'72.#.224.138':139
'72.#.15.155':139
'72.#.132.60':139
'72.#.29.146':139
'72.#.164.36':139
'72.#.230.64':139
'72.#.65.50':139
'72.#.110.159':139
'72.#.122.16':139
'72.#.5.182':139
'72.#.201.229':139
'72.#.120.88':139
'72.#.209.163':139
'72.#.38.125':139
'72.#.88.80':139
'72.#.84.103':139
'72.#.236.5':139
'72.#.30.130':139
'72.#.146.160':139
'72.#.129.173':139
'72.#.74.251':139
'72.#.68.26':139
'72.#.113.166':139
'72.#.203.226':139
'72.#.112.250':445
'72.#.112.106':445
'72.#.147.200':139
'72.#.156.146':139
'72.#.156.184':139
'72.#.135.185':139
'72.#.77.174':139
'72.#.35.168':139
'72.#.141.140':139
'72.#.131.102':139
'72.#.64.180':139
'72.#.10.185':139
'72.#.246.238':139
'72.#.238.222':139
'72.#.67.193':139
'72.#.246.238':445
'72.#.238.222':445
'72.#.77.174':445
'72.#.131.102':445
'72.#.64.180':445
'72.#.68.26':445
'72.#.113.166':445
'72.#.10.185':445
'72.#.156.184':445
'72.#.135.185':445
'72.#.164.36':445
'72.#.110.159':445
'72.#.224.138':445
'72.#.15.155':445
'72.#.122.16':445
'72.#.35.168':445
'72.#.141.140':445
'72.#.230.64':445
'72.#.65.50':445
'72.#.7.99':139
'72.#.93.194':139
'72.#.162.41':139
'72.#.76.10':139
'72.#.194.59':139
'72.#.227.60':139
'72.#.60.191':139
'72.#.46.170':139
'72.#.43.122':139
'72.#.239.14':139
'72.#.203.226':445
'72.#.147.200':445
'72.#.129.173':445
'72.#.74.251':445
'72.#.156.146':445
'72.#.220.191':139
'72.#.208.178':139
'72.#.8.59':139
'72.#.6.219':139
'72.#.5.142':139
'72.#.11.171':139
'72.#.56.59':445
'72.#.159.129':445
'72.#.52.251':139
'72.#.213.170':139
'72.#.65.240':139
'72.#.212.119':139
'72.#.104.186':139
'72.#.232.107':445
'72.#.205.141':445
'72.#.25.185':445
'72.#.200.211':445
'72.#.17.215':445
'72.#.188.0':445
'72.#.17.76':445
'72.#.207.168':445
'72.#.92.194':445
'72.#.74.112':445
'72.#.84.180':139
'72.#.73.121':139
'72.#.223.177':139
'72.#.21.46':139
'72.#.159.247':139
'72.#.66.58':139
'72.#.205.194':139
'72.#.246.208':139
'72.#.128.211':139
'72.#.122.202':139
'72.#.201.224':139
'72.#.88.147':139
'72.#.21.163':139
'72.#.163.173':139
'72.#.147.51':139
'72.#.50.163':139
'72.#.40.17':139
'72.#.199.142':139
'72.#.114.254':139
'72.#.5.235':445
'72.#.199.142':445
'72.#.114.254':445
'72.#.88.147':445
'72.#.147.51':445
'72.#.50.163':445
'72.#.223.177':445
'72.#.21.46':445
'72.#.40.17':445
'72.#.122.202':445
'72.#.201.224':445
'72.#.52.251':445
'72.#.212.119':445
'72.#.5.142':445
'72.#.11.171':445
'72.#.104.186':445
'72.#.21.163':445
'72.#.163.173':445
'72.#.65.240':445
'72.#.213.170':445
'72.#.151.92':445
'72.#.152.193':445
'72.#.150.224':445
'72.#.238.245':445
'72.#.174.52':445
'72.#.226.218':445
'72.#.159.57':445
'72.#.59.211':445
'72.#.153.104':445
'72.#.149.198':445
'72.#.73.121':445
'72.#.159.247':445
'72.#.84.180':445
'72.#.246.208':445
'72.#.128.211':445
'72.#.125.98':445
'72.#.126.221':445
'72.#.66.58':445
'72.#.205.194':445
'72.#.129.118':445
'72.#.246.105':445
'72.#.233.211':445
'72.#.89.112':445
'72.#.5.134':445
'72.#.81.82':445
'72.#.165.114':445
'72.#.248.202':445
'72.#.167.141':445
'72.#.93.0':445
'72.#.231.233':445
'72.#.31.47':445
'72.#.240.80':445
'72.#.159.201':445
'72.#.70.249':445
'72.#.248.55':445
'72.#.56.216':445
'72.#.171.104':445
'72.#.191.248':445
'72.#.36.187':445
'72.#.128.33':445
'72.#.75.181':445
'72.#.165.154':445
'72.#.81.8':445
'72.#.104.245':445
'72.#.64.123':139
'72.#.104.239':445
'72.#.128.208':445
'72.#.230.75':445
'72.#.175.56':445
'72.#.183.241':445
'72.#.187.48':445
'72.#.57.175':445
'72.#.82.106':445
'72.#.63.120':445
'72.#.119.230':445
'72.#.106.170':445
'72.#.170.63':445
'72.#.80.231':445
'72.#.5.235':139
'72.#.200.211':139
'72.#.159.57':139
'72.#.226.218':139
'72.#.17.215':139
'72.#.25.185':139
'72.#.92.194':139
'72.#.205.141':139
'72.#.188.0':139
'72.#.153.104':139
'72.#.150.224':139
'72.#.149.198':139
'72.#.125.98':139
'72.#.126.221':139
'72.#.238.245':139
'72.#.59.211':139
'72.#.174.52':139
'72.#.151.92':139
'72.#.152.193':139
'72.#.124.5':445
'72.#.5.130':445
'72.#.64.123':445
'72.#.183.115':445
'72.#.7.193':445
'72.#.120.177':445
'72.#.56.50':445
'72.#.82.7':445
'72.#.7.58':445
'72.#.113.238':445
'72.#.207.168':139
'72.#.232.107':139
'72.#.74.112':139
'72.#.17.76':139
'72.#.56.59':139
'72.#.184.252':445
'72.#.57.179':445
'72.#.159.129':139
'72.#.127.84':445
'72.#.85.194':9988
'72.#.186.93':445
'72.#.53.135':9988
'72.#.93.161':9988
'72.#.15.82':445
'72.#.116.96':445
'72.#.120.8':445
'72.#.26.180':445
'72.#.101.219':445
'72.#.248.128':9988
'72.#.181.124':139
'72.#.132.12':139
'72.#.45.173':139
'72.#.51.243':139
'72.#.193.68':139
'72.#.167.195':139
'72.#.106.179':139
'72.#.3.73':139
'72.#.72.167':139
'72.#.27.81':445
'72.#.179.200':445
'72.#.191.102':445
'72.#.53.135':445
'72.#.71.219':445
'72.#.155.250':445
'72.#.30.181':445
'72.#.123.210':445
'72.#.112.112':445
'72.#.187.22':445
'72.#.97.98':445
'72.#.8.139':445
'72.#.189.110':445
'72.#.102.5':445
'72.#.22.212':445
'72.#.153.10':445
'72.#.195.208':445
'72.#.211.101':445
'72.#.60.177':445
'72.#.169.51':139
'72.#.110.106':139
'72.#.31.246':139
'72.#.81.187':139
'72.#.74.176':139
'72.#.91.250':139
'72.#.162.69':139
'72.#.247.142':139
'72.#.86.204':139
'72.#.38.71':139
'72.#.180.81':139
'72.#.153.85':139
'72.#.17.167':139
'72.#.185.16':139
'72.#.102.1':139
'72.#.116.242':139
'72.#.119.207':139
'72.#.26.188':139
'72.#.69.54':139
'72.#.170.199':139
'72.#.52.66':139
'72.#.193.117':139
'72.#.99.96':139
'72.#.74.143':139
'72.#.220.148':139
'72.#.97.86':139
'72.#.153.102':139
'72.#.139.40':139
'72.#.154.138':139
'72.#.129.102':139
'72.#.95.240':139
'72.#.170.200':139
'72.#.80.198':139
'72.#.9.161':139
'72.#.101.87':139
'72.#.236.103':139
'72.#.0.236':139
'72.#.20.3':139
'72.#.3.53':139
'72.#.248.128':139
'72.#.129.37':139
'72.#.155.250':139
'72.#.30.181':139
'72.#.107.128':139
'72.#.46.108':139
'72.#.136.54':139
'72.#.101.155':139
'72.#.187.6':139
'72.#.112.112':139
'72.#.187.22':139
'72.#.27.81':139
'72.#.189.110':139
'72.#.195.208':139
'72.#.179.200':139
'72.#.191.102':139
'72.#.123.210':139
'72.#.71.219':139
'72.#.53.135':139
'72.#.164.0':139
'72.#.189.234':139
'72.#.93.161':139
'72.#.71.153':139
'72.#.194.61':139
'72.#.136.125':139
'72.#.85.194':139
'72.#.32.240':139
'72.#.9.9':139
'72.#.73.215':139
'72.#.154.19':139
'72.#.74.196':139
'72.#.163.110':139
'72.#.111.1':139
'72.#.39.200':139
'72.#.199.185':139
'72.#.217.108':139
'72.#.47.88':139
'72.#.54.67':139
'72.#.8.139':139
'72.#.47.88':445
'72.#.54.67':445
'72.#.163.110':445
'72.#.74.196':445
'72.#.217.108':445
'72.#.93.161':445
'72.#.136.125':445
'72.#.199.185':445
'72.#.73.215':445
'72.#.136.54':445
'72.#.107.128':445
'72.#.101.155':445
'72.#.248.128':445
'72.#.129.37':445
'72.#.187.6':445
'72.#.39.200':445
'72.#.154.19':445
'72.#.46.108':445
'72.#.111.1':445
'72.#.60.177':139
'72.#.153.10':139
'72.#.101.219':139
'72.#.116.96':139
'72.#.120.8':139
'72.#.102.5':139
'72.#.97.98':139
'72.#.22.212':139
'72.#.211.101':139
'72.#.26.180':139
'72.#.194.61':445
'72.#.189.234':445
'72.#.164.0':445
'72.#.71.153':445
'72.#.32.240':445
'72.#.186.93':139
'72.#.15.82':139
'72.#.85.194':445
'72.#.9.9':445
'72.#.243.142':139
'72.#.15.31':139
'72.#.112.250':139
'72.#.112.106':139
'72.#.115.195':139
'72.#.92.167':139
'72.#.199.152':139
'72.#.212.76':139
'72.#.195.12':139
'72.#.167.115':445
'72.#.100.50':445
'72.#.41.82':445
'72.#.219.8':445
'72.#.172.0':445
'72.#.82.121':445
'72.#.106.114':445
'72.#.50.26':445
'72.#.44.246':445
'72.#.76.45':445
'72.#.21.89':139
'72.#.52.48':139
'72.#.213.205':139
'72.#.80.103':139
'72.#.23.56':139
'72.#.105.110':139
'72.#.96.15':139
'72.#.53.240':139
'72.#.248.81':139
'72.#.91.79':139
'72.#.201.44':139
'72.#.215.125':139
'72.#.2.88':139
'72.#.36.27':139
'72.#.67.192':139
'72.#.224.133':139
'72.#.51.212':139
'72.#.224.34':139
'72.#.113.214':139
'72.#.73.38':445
'72.#.224.34':445
'72.#.113.214':445
'72.#.215.125':445
'72.#.67.192':445
'72.#.224.133':445
'72.#.213.205':445
'72.#.80.103':445
'72.#.51.212':445
'72.#.91.79':445
'72.#.201.44':445
'72.#.115.195':445
'72.#.212.76':445
'72.#.243.142':445
'72.#.15.31':445
'72.#.195.12':445
'72.#.2.88':445
'72.#.36.27':445
'72.#.92.167':445
'72.#.199.152':445
'72.#.37.61':445
'72.#.53.142':445
'72.#.141.3':445
'72.#.59.142':445
'72.#.110.153':445
'72.#.132.86':445
'72.#.44.105':445
'72.#.215.33':445
'72.#.168.86':445
'72.#.173.58':445
'72.#.23.56':445
'72.#.53.240':445
'72.#.21.89':445
'72.#.52.48':445
'72.#.248.81':445
'72.#.105.99':445
'72.#.17.243':445
'72.#.105.110':445
'72.#.96.15':445
'72.#.170.200':445
'72.#.99.96':445
'72.#.247.142':445
'72.#.9.161':445
'72.#.236.103':445
'72.#.52.66':445
'72.#.74.143':445
'72.#.0.236':445
'72.#.129.102':445
'72.#.101.87':445
'72.#.86.204':445
'72.#.38.71':445
'72.#.31.246':445
'72.#.91.250':445
'72.#.162.69':445
'72.#.95.240':445
'72.#.20.3':445
'72.#.80.198':445
'72.#.3.53':445
'72.#.3.73':445
'72.#.72.167':445
'72.#.181.124':445
'72.#.193.68':445
'72.#.167.195':445
'72.#.35.192':139
'72.#.237.178':139
'72.#.106.179':445
'72.#.60.70':139
'72.#.132.12':445
'72.#.154.138':445
'72.#.139.40':445
'72.#.193.117':445
'72.#.220.148':445
'72.#.97.86':445
'72.#.45.173':445
'72.#.51.243':445
'72.#.153.102':445
'72.#.169.51':445
'72.#.74.176':445
'72.#.73.38':139
'72.#.219.8':139
'72.#.132.86':139
'72.#.44.105':139
'72.#.172.0':139
'72.#.82.121':139
'72.#.44.246':139
'72.#.100.50':139
'72.#.41.82':139
'72.#.168.86':139
'72.#.173.58':139
'72.#.141.3':139
'72.#.105.99':139
'72.#.17.243':139
'72.#.59.142':139
'72.#.110.153':139
'72.#.215.33':139
'72.#.37.61':139
'72.#.53.142':139
'72.#.69.54':445
'72.#.170.199':445
'72.#.102.1':445
'72.#.116.242':445
'72.#.119.207':445
'72.#.81.187':445
'72.#.110.106':445
'72.#.26.188':445
'72.#.180.81':445
'72.#.153.85':445
'72.#.50.26':139
'72.#.167.115':139
'72.#.76.45':139
'72.#.106.114':139
'72.#.60.70':445
'72.#.185.16':445
'72.#.17.167':445
'72.#.35.192':445
'72.#.237.178':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней