Trojan.Starman.6469

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER725b.dir00\svchost.exe.mdmp 16325836412032384

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER725b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#04.170.1':139
'19#.#04.243.252':139
'19#.#04.17.151':139
'19#.#04.190.216':139
'19#.#04.56.45':139
'19#.#04.233.150':139
'19#.#04.250.161':139
'19#.#04.190.68':139
'19#.#04.161.196':139
'19#.#04.90.36':139
'19#.#04.196.74':139
'19#.#04.169.34':139
'19#.#04.15.62':139
'19#.#04.130.147':139
'19#.#04.117.73':139
'19#.#04.112.173':139
'19#.#04.72.123':139
'19#.#04.230.95':139
'19#.#04.216.159':139
'19#.#04.133.57':139
'19#.#04.21.108':139
'19#.#04.126.135':139
'19#.#04.169.34':445
'19#.#04.15.62':445
'19#.#04.130.147':445
'19#.#04.117.73':445
'19#.#04.112.173':445
'19#.#04.72.123':445
'19#.#04.230.95':445
'19#.#04.216.159':445
'19#.#04.133.57':445
'19#.#04.21.108':445
'19#.#04.126.135':445
'19#.#04.0.187':445
'19#.#04.41.60':445
'19#.#04.154.253':139
'19#.#04.134.186':139
'19#.#04.174.235':139
'19#.#04.205.148':445
'19#.#04.47.141':445
'19#.#04.61.169':445
'19#.#04.160.85':445
'19#.#04.85.205':445
'19#.#04.99.85':445
'19#.#04.224.81':139
'19#.#04.78.64':139
'19#.#04.81.92':139
'19#.#04.229.195':139
'19#.#04.92.186':139
'19#.#04.17.61':139
'19#.#04.51.225':445
'19#.#04.35.251':445
'19#.#04.12.177':445
'19#.#04.72.135':139
'19#.#04.114.51':445
'19#.#04.35.251':139
'19#.#04.82.0':139
'19#.#04.51.225':139
'19#.#04.114.51':139
'19#.#04.12.177':139
'19#.#04.102.140':139
'19#.#04.185.172':139
'19#.#04.16.200':139
'19#.#04.16.78':139
'19#.#04.77.102':139
'19#.#04.159.150':139
'19#.#04.0.187':139
'19#.#04.41.60':139
'19#.#04.72.135':445
'19#.#04.78.64':445
'19#.#04.17.61':445
'19#.#04.205.148':139
'19#.#04.47.141':139
'19#.#04.61.169':139
'19#.#04.160.85':139
'19#.#04.85.205':139
'19#.#04.99.85':139
'19#.#04.159.150':445
'19#.#04.16.78':445
'19#.#04.77.102':445
'19#.#04.82.0':445
'19#.#04.102.140':445
'19#.#04.185.172':445
'19#.#04.81.92':445
'19#.#04.224.81':445
'19#.#04.92.186':445
'19#.#04.16.200':445
'19#.#04.229.195':445
'19#.#04.53.217':139
'19#.#04.56.44':139
'19#.#04.10.43':139
'19#.#04.54.25':139
'19#.#04.137.4':139
'19#.#04.104.181':139
'19#.#04.92.14':139
'19#.#04.134.105':139
'19#.#04.85.223':139
'19#.#04.198.162':139
'19#.#04.174.198':139
'19#.#04.65.197':445
'19#.#04.223.65':445
'19#.#04.197.75':445
'19#.#04.30.186':445
'19#.#04.15.210':445
'19#.#04.84.218':445
'19#.#04.7.135':139
'19#.#04.159.129':139
'19#.#04.87.40':139
'19#.#04.107.223':139
'19#.#04.91.48':139
'19#.#04.78.207':139
'19#.#04.128.55':139
'19#.#04.93.217':139
'19#.#04.62.29':139
'19#.#04.135.35':139
'19#.#04.165.123':139
'19#.#04.7.135':445
'19#.#04.159.129':445
'19#.#04.87.40':445
'19#.#04.107.223':445
'19#.#04.91.48':445
'19#.#04.124.58':139
'19#.#04.168.214':139
'19#.#04.20.117':139
'19#.#04.8.167':139
'19#.#04.92.247':139
'19#.#04.249.166':139
'19#.#04.159.57':139
'19#.#04.216.223':139
'19#.#04.13.31':139
'19#.#04.10.113':139
'19#.#04.198.152':139
'19#.#04.226.239':139
'19#.#04.97.100':139
'19#.#04.154.253':445
'19#.#04.134.186':445
'19#.#04.174.235':445
'19#.#04.21.78':139
'19#.#04.212.146':139
'19#.#04.227.107':139
'19#.#04.108.86':139
'19#.#04.75.21':139
'19#.#04.131.167':139
'19#.#04.170.1':445
'19#.#04.243.252':445
'19#.#04.17.151':445
'19#.#04.190.216':445
'19#.#04.56.45':445
'19#.#04.233.150':445
'19#.#04.250.161':445
'19#.#04.190.68':445
'19#.#04.161.196':445
'19#.#04.90.36':445
'19#.#04.196.74':445
'19#.#04.131.167':445
'19#.#04.108.86':445
'19#.#04.75.21':445
'19#.#04.97.100':445
'19#.#04.21.78':445
'19#.#04.212.146':445
'19#.#04.249.209':445
'19#.#04.212.177':445
'19#.#04.144.130':445
'19#.#04.227.107':445
'19#.#04.41.228':445
'19#.#04.212.177':139
'19#.#04.30.186':139
'19#.#04.249.209':139
'19#.#04.41.228':139
'19#.#04.144.130':139
'19#.#04.15.210':139
'19#.#04.84.218':139
'19#.#04.226.239':445
'19#.#04.223.65':139
'19#.#04.197.75':139
'19#.#04.65.197':139
'19#.#04.58.223':445
'19#.#04.54.116':445
'19#.#04.91.7':445
'19#.#04.169.80':445
'19#.#04.192.4':445
'19#.#04.132.180':445
'19#.#04.33.4':445
'19#.#04.62.209':445
'19#.#04.120.143':445
'19#.#04.104.150':445
'19#.#04.103.67':445
'19#.#04.109.96':139
'19#.#04.76.140':139
'19#.#04.50.151':139
'19#.#04.33.37':139
'19#.#04.213.188':139
'19#.#04.6.40':139
'19#.#04.175.140':445
'19#.#04.220.78':445
'19#.#04.56.16':445
'19#.#04.231.66':139
'19#.#04.139.221':445
'19#.#04.253.177':445
'19#.#04.113.112':445
'19#.#04.211.2':445
'19#.#04.231.22':445
'19#.#04.36.112':445
'19#.#04.88.32':445
'19#.#04.248.146':445
'19#.#04.245.176':445
'19#.#04.74.247':445
'19#.#04.10.55':445
'19#.#04.247.152':445
'19#.#04.39.132':445
'19#.#04.58.138':445
'19#.#04.13.167':445
'19#.#04.34.109':445
'19#.#04.21.55':445
'19#.#04.155.58':445
'19#.#04.96.248':445
'19#.#04.123.162':445
'19#.#04.212.208':445
'19#.#04.252.154':445
'19#.#04.116.93':445
'19#.#04.34.109':139
'19#.#04.62.209':139
'19#.#04.33.4':139
'19#.#04.103.67':139
'19#.#04.120.143':139
'19#.#04.13.167':139
'19#.#04.155.58':139
'19#.#04.252.154':139
'19#.#04.58.138':139
'19#.#04.21.55':139
'19#.#04.39.132':139
'19#.#04.192.4':139
'19#.#04.220.78':139
'19#.#04.56.16':139
'19#.#04.91.7':139
'19#.#04.175.140':139
'19#.#04.169.80':139
'19#.#04.132.180':139
'19#.#04.104.150':139
'19#.#04.54.116':139
'19#.#04.139.221':139
'19#.#04.58.223':139
'19#.#04.245.176':139
'19#.#04.139.165':139
'19#.#04.248.146':139
'19#.#04.247.152':139
'19#.#04.74.247':139
'19#.#04.30.240':139
'19#.#04.168.93':139
'19#.#04.241.213':139
'19#.#04.42.62':139
'19#.#04.241.34':139
'19#.#04.201.23':139
'19#.#04.123.162':139
'19#.#04.231.22':139
'19#.#04.96.248':139
'19#.#04.116.93':139
'19#.#04.212.208':139
'19#.#04.36.112':139
'19#.#04.88.32':139
'19#.#04.10.55':139
'19#.#04.113.112':139
'19#.#04.211.2':139
'19#.#04.253.177':139
'19#.#04.23.244':445
'19#.#04.145.187':445
'19#.#04.219.196':445
'19#.#04.113.176':445
'19#.#04.187.22':445
'19#.#04.172.162':445
'19#.#04.211.35':445
'19#.#04.15.56':445
'19#.#04.35.37':445
'19#.#04.27.173':445
'19#.#04.163.164':445
'19#.#04.48.210':139
'19#.#04.39.67':139
'19#.#04.208.197':139
'19#.#04.205.16':139
'19#.#04.197.204':139
'19#.#04.180.236':139
'19#.#04.148.36':139
'19#.#04.171.37':139
'19#.#04.110.229':139
'19#.#04.147.61':139
'19#.#04.36.193':139
'19#.#04.48.210':445
'19#.#04.39.67':445
'19#.#04.208.197':445
'19#.#04.205.16':445
'19#.#04.197.204':445
'19#.#04.180.236':445
'19#.#04.148.36':445
'19#.#04.171.37':445
'19#.#04.110.229':445
'19#.#04.147.61':445
'19#.#04.36.193':445
'19#.#04.202.244':445
'19#.#04.31.203':445
'19#.#04.36.141':445
'19#.#04.43.7':445
'19#.#04.138.43':445
'19#.#04.251.157':445
'19#.#04.73.205':445
'19#.#04.134.57':445
'19#.#04.131.131':445
'19#.#04.140.237':445
'19#.#04.67.86':445
'19#.#04.252.154':9988
'19#.#04.116.93':9988
'19#.#04.231.66':445
'19#.#04.76.140':445
'19#.#04.6.40':445
'19#.#04.253.177':9988
'19#.#04.91.7':9988
'19#.#04.212.208':9988
'19#.#04.169.80':9988
'19#.#04.192.4':9988
'19#.#04.39.132':9988
'19#.#04.201.23':445
'19#.#04.42.62':445
'19#.#04.241.34':445
'19#.#04.139.165':445
'19#.#04.30.240':445
'19#.#04.168.93':445
'19#.#04.213.188':445
'19#.#04.109.96':445
'19#.#04.50.151':445
'19#.#04.241.213':445
'19#.#04.33.37':445
'19#.#04.202.244':139
'19#.#04.31.203':139
'19#.#04.36.141':139
'19#.#04.43.7':139
'19#.#04.138.43':139
'19#.#04.251.157':139
'19#.#04.73.205':139
'19#.#04.134.57':139
'19#.#04.131.131':139
'19#.#04.140.237':139
'19#.#04.67.86':139
'19#.#04.23.244':139
'19#.#04.145.187':139
'19#.#04.219.196':139
'19#.#04.113.176':139
'19#.#04.187.22':139
'19#.#04.172.162':139
'19#.#04.211.35':139
'19#.#04.15.56':139
'19#.#04.35.37':139
'19#.#04.27.173':139
'19#.#04.163.164':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней