Trojan.Starman.6354

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERe92c.dir00\svchost.exe.mdmp 16325836412032396

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERe92c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#45.39.29':139
'19#.#45.241.115':139
'19#.#45.236.14':139
'19#.#45.80.198':139
'19#.#45.75.64':139
'19#.#45.94.83':139
'19#.#45.18.74':139
'19#.#45.253.92':139
'19#.#45.100.58':139
'19#.#45.9.190':139
'19#.#45.228.68':139
'19#.#45.13.53':139
'19#.#45.55.233':139
'19#.#45.30.73':139
'19#.#45.62.232':139
'19#.#45.171.195':139
'19#.#45.26.33':139
'19#.#45.84.202':139
'19#.#45.230.65':139
'19#.#45.35.209':139
'19#.#45.159.19':139
'19#.#45.56.186':139
'19#.#45.167.194':139
'19#.#45.192.153':445
'19#.#45.44.87':445
'19#.#45.179.250':139
'19#.#45.142.4':139
'19#.#45.94.141':139
'19#.#45.107.44':445
'19#.#45.133.23':445
'19#.#45.44.141':445
'19#.#45.113.196':445
'19#.#45.129.107':445
'19#.#45.199.70':445
'19#.#45.175.177':139
'19#.#45.104.143':139
'19#.#45.142.114':139
'19#.#45.143.207':139
'19#.#45.118.32':139
'19#.#45.6.104':139
'19#.#45.173.189':139
'19#.#45.57.37':139
'19#.#45.236.51':139
'19#.#45.85.103':139
'19#.#45.142.37':139
'19#.#45.63.230':139
'19#.#45.76.165':139
'19#.#45.173.163':445
'19#.#45.129.90':445
'19#.#45.79.144':445
'19#.#45.60.189':445
'19#.#45.244.41':445
'19#.#45.10.168':445
'19#.#45.59.64':445
'19#.#45.33.83':445
'19#.#45.64.27':445
'19#.#45.80.85':445
'19#.#45.27.80':445
'19#.#45.12.177':445
'19#.#45.50.76':445
'19#.#45.41.40':445
'19#.#45.166.12':445
'19#.#45.60.231':445
'19#.#45.31.203':445
'19#.#45.156.76':445
'19#.#45.90.119':445
'19#.#45.45.96':445
'19#.#45.9.140':445
'19#.#45.78.156':445
'19#.#45.65.188':445
'19#.#45.199.70':139
'19#.#45.113.196':139
'19#.#45.129.107':139
'19#.#45.44.87':139
'19#.#45.107.44':139
'19#.#45.133.23':139
'19#.#45.34.131':139
'19#.#45.126.110':139
'19#.#45.36.244':139
'19#.#45.44.141':139
'19#.#45.244.87':139
'19#.#45.192.153':139
'19#.#45.134.72':445
'19#.#45.28.33':445
'19#.#45.255.130':445
'19#.#45.157.166':445
'19#.#45.131.157':445
'19#.#45.232.209':445
'19#.#45.57.11':445
'19#.#45.253.154':445
'19#.#45.30.146':445
'19#.#45.162.106':445
'19#.#45.84.65':445
'19#.#45.244.87':445
'19#.#45.164.143':139
'19#.#45.112.233':139
'19#.#45.97.38':139
'19#.#45.138.156':139
'19#.#45.83.139':139
'19#.#45.199.230':139
'19#.#45.33.155':139
'19#.#45.119.139':139
'19#.#45.106.117':139
'19#.#45.57.53':139
'19#.#45.128.63':139
'19#.#45.156.195':139
'19#.#45.98.183':139
'19#.#45.199.21':139
'19#.#45.148.108':139
'19#.#45.187.136':139
'19#.#45.113.77':139
'19#.#45.9.146':139
'19#.#45.196.65':139
'19#.#45.159.220':139
'19#.#45.50.248':139
'19#.#45.236.172':139
'19#.#45.22.79':139
'19#.#45.57.187':139
'19#.#45.41.142':139
'19#.#45.186.166':139
'19#.#45.205.205':139
'19#.#45.168.88':139
'19#.#45.192.45':139
'19#.#45.105.252':139
'19#.#45.158.194':139
'19#.#45.12.165':139
'19#.#45.243.202':139
'19#.#45.244.118':139
'19#.#45.65.2':139
'19#.#45.97.135':139
'19#.#45.119.40':139
'19#.#45.242.99':139
'19#.#45.177.163':139
'19#.245.5.2':139
'19#.#45.165.249':139
'19#.#45.69.22':139
'19#.#45.21.9':139
'19#.#45.141.116':139
'19#.#45.26.114':139
'19#.#45.250.199':139
'19#.#45.136.101':139
'19#.#45.13.53':445
'19#.#45.80.198':445
'19#.#45.35.209':445
'19#.#45.230.65':445
'19#.#45.159.19':445
'19#.#45.75.64':445
'19#.#45.94.83':445
'19#.#45.9.190':445
'19#.#45.241.115':445
'19#.#45.236.14':445
'19#.#45.39.29':445
'19#.#45.167.194':445
'19#.#45.76.165':445
'19#.#45.171.195':445
'19#.#45.126.110':445
'19#.#45.36.244':445
'19#.#45.34.131':445
'19#.#45.26.33':445
'19#.#45.84.202':445
'19#.#45.56.186':445
'19#.#45.30.73':445
'19#.#45.62.232':445
'19#.#45.55.233':445
'19#.#45.175.177':445
'19#.#45.142.4':445
'19#.#45.236.51':445
'19#.#45.85.103':445
'19#.#45.57.37':445
'19#.#45.94.141':445
'19#.#45.103.153':139
'19#.#45.101.173':139
'19#.#45.112.113':139
'19#.#45.179.250':445
'19#.#45.38.182':139
'19#.#45.63.230':445
'19#.#45.253.92':445
'19#.#45.118.32':445
'19#.#45.18.74':445
'19#.#45.228.68':445
'19#.#45.100.58':445
'19#.#45.6.104':445
'19#.#45.173.189':445
'19#.#45.142.37':445
'19#.#45.142.114':445
'19#.#45.143.207':445
'19#.#45.104.143':445
'19#.#45.36.133':445
'19#.#45.1.216':445
'19#.#45.130.77':445
'19#.#45.207.135':445
'19#.#45.200.3':445
'19#.#45.15.146':445
'19#.#45.18.179':445
'19#.#45.58.37':445
'19#.#45.188.254':445
'19#.#45.127.247':445
'19#.#45.6.106':445
'19#.#45.156.101':445
'19#.#45.207.213':445
'19#.#45.57.66':139
'19#.#45.186.210':445
'19#.#45.71.28':139
'19#.#45.198.155':139
'19#.#45.115.20':139
'19#.#45.90.221':445
'19#.#45.115.15':445
'19#.#45.58.198':445
'19#.#45.223.68':445
'19#.#45.6.120':445
'19#.#45.237.189':445
'19#.#45.74.42':445
'19#.#45.64.74':445
'19#.#45.20.62':445
'19#.#45.0.50':445
'19#.#45.16.72':445
'19#.#45.49.64':445
'19#.#45.201.80':445
'19#.#45.245.148':445
'19#.#45.210.186':445
'19#.#45.130.49':445
'19#.#45.172.129':445
'19#.#45.93.232':445
'19#.#45.39.43':445
'19#.#45.149.251':445
'19#.#45.67.27':445
'19#.#45.70.139':445
'19#.#45.193.242':445
'19#.#45.65.45':445
'19#.#45.110.89':445
'19#.#45.190.215':445
'19#.#45.174.162':445
'19#.#45.195.135':445
'19#.#45.163.71':445
'19#.#45.155.233':139
'19#.#45.156.101':139
'19#.#45.127.247':139
'19#.#45.6.106':139
'19#.#45.130.77':139
'19#.#45.18.179':139
'19#.#45.58.37':139
'19#.#45.67.27':139
'19#.#45.39.43':139
'19#.#45.193.242':139
'19#.#45.188.254':139
'19#.#45.70.139':139
'19#.#45.1.216':139
'19#.#45.237.189':139
'19#.#45.223.68':139
'19#.#45.6.120':139
'19#.#45.186.210':139
'19#.#45.90.221':139
'19#.#45.115.15':139
'19#.#45.15.146':139
'19#.#45.207.135':139
'19#.#45.200.3':139
'19#.#45.58.198':139
'19#.#45.207.213':139
'19#.#45.172.129':139
'19#.#45.210.186':139
'19#.#45.130.49':139
'19#.#45.64.74':139
'19#.#45.49.64':139
'19#.#45.201.80':139
'19#.#45.33.91':139
'19#.#45.242.252':139
'19#.#45.214.149':139
'19#.#45.245.148':139
'19#.#45.123.246':139
'19#.#45.74.42':139
'19#.#45.163.71':139
'19#.#45.174.162':139
'19#.#45.195.135':139
'19#.#45.149.251':139
'19#.#45.65.45':139
'19#.#45.110.89':139
'19#.#45.16.72':139
'19#.#45.20.62':139
'19#.#45.0.50':139
'19#.#45.190.215':139
'19#.#45.93.232':139
'19#.#45.123.246':445
'19#.#45.27.80':139
'19#.#45.64.27':139
'19#.#45.80.85':139
'19#.#45.129.90':139
'19#.#45.10.168':139
'19#.#45.59.64':139
'19#.#45.255.130':139
'19#.#45.134.72':139
'19#.#45.131.157':139
'19#.#45.33.83':139
'19#.#45.157.166':139
'19#.#45.173.163':139
'19#.#45.65.188':139
'19#.#45.9.140':139
'19#.#45.78.156':139
'19#.#45.41.40':139
'19#.#45.156.76':139
'19#.#45.90.119':139
'19#.#45.244.41':139
'19#.#45.79.144':139
'19#.#45.60.189':139
'19#.#45.45.96':139
'19#.#45.12.177':139
'19#.#45.67.87':445
'19#.#45.136.240':445
'19#.#45.187.245':445
'19#.#45.43.135':445
'19#.#45.246.29':445
'19#.#45.216.223':445
'19#.#45.17.7':445
'19#.#45.133.17':445
'19#.#45.11.33':445
'19#.#45.15.148':445
'19#.#45.144.52':445
'19#.#45.4.106':445
'19#.#45.84.65':139
'19#.#45.30.146':139
'19#.#45.162.106':139
'19#.#45.28.33':139
'19#.#45.232.209':139
'19#.#45.57.11':139
'19#.#45.219.234':445
'19#.#45.224.18':445
'19#.#45.55.154':445
'19#.#45.253.154':139
'19#.#45.114.248':445
'19#.#45.50.76':139
'19#.#45.207.135':9988
'19#.#45.127.247':9988
'19#.#45.18.179':9988
'19#.#45.90.221':9988
'19#.#45.200.3':9988
'19#.#45.58.37':9988
'19#.#45.190.215':9988
'19#.#45.74.42':9988
'19#.#45.188.254':9988
'19#.#45.193.242':9988
'19#.#45.70.139':9988
'19#.#45.186.210':9988
'19#.#45.155.233':445
'19#.#45.198.155':445
'19#.#45.242.252':445
'19#.#45.214.149':445
'19#.#45.33.91':445
'19#.#45.115.20':445
'19#.#45.237.189':9988
'19#.#45.115.15':9988
'19#.#45.223.68':9988
'19#.#45.71.28':445
'19#.#45.57.66':445
'19#.#45.144.52':139
'19#.#45.11.33':139
'19#.#45.15.148':139
'19#.#45.136.240':139
'19#.#45.216.223':139
'19#.#45.17.7':139
'19#.#45.31.203':139
'19#.#45.166.12':139
'19#.#45.60.231':139
'19#.#45.133.17':139
'19#.#45.36.133':139
'19#.#45.67.87':139
'19#.#45.114.248':139
'19#.#45.55.154':139
'19#.#45.71.28':9988
'19#.#45.245.148':9988
'19#.#45.198.155':9988
'19#.#45.219.234':139
'19#.#45.246.29':139
'19#.#45.187.245':139
'19#.#45.43.135':139
'19#.#45.224.18':139
'19#.#45.4.106':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней