Trojan.Starman.6097

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER1847.dir00\svchost.exe.mdmp 16325836412032128

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1847.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#4.124.86':445
'20#.44.3.9':445
'20#.#4.155.43':445
'20#.#4.36.143':445
'20#.#4.55.244':445
'20#.#4.153.194':445
'20#.#4.54.94':445
'20#.#4.152.70':139
'20#.#4.48.105':139
'20#.#4.34.196':139
'20#.#4.58.40':139
'20#.#4.247.193':445
'20#.#4.205.4':445
'20#.#4.39.205':139
'20#.#4.137.89':445
'20#.#4.229.236':445
'20#.#4.43.31':445
'20#.#4.132.21':445
'20#.#4.159.229':445
'20#.#4.16.146':445
'20#.#4.51.131':445
'20#.44.97.9':445
'20#.#4.195.47':445
'20#.#4.47.234':445
'20#.#4.188.239':445
'20#.#4.182.118':445
'20#.#4.207.178':445
'20#.#4.137.21':445
'20#.#4.6.111':445
'20#.#4.27.229':139
'20#.#4.49.130':139
'20#.#4.103.150':139
'20#.#4.114.207':139
'20#.#4.1.166':139
'20#.#4.25.33':139
'20#.#4.59.132':139
'20#.#4.102.206':139
'20#.#4.142.248':139
'20#.#4.17.53':139
'20#.44.46.7':139
'20#.#4.63.33':139
'20#.#4.141.254':139
'20#.#4.209.142':139
'20#.#4.220.242':139
'20#.#4.195.103':139
'20#.#4.110.186':139
'20#.#4.177.90':139
'20#.#4.53.57':139
'20#.#4.42.112':139
'20#.#4.212.253':139
'20#.#4.225.9':139
'20#.#4.92.169':139
'20#.#4.133.110':139
'20#.44.9.86':139
'20#.#4.186.38':139
'20#.#4.102.217':139
'20#.#4.123.240':139
'20#.#4.103.113':139
'20#.#4.47.234':139
'20#.#4.188.239':139
'20#.#4.55.244':139
'20#.#4.195.47':139
'20#.#4.137.21':139
'20#.#4.6.111':139
'20#.#4.182.118':139
'20#.#4.54.94':139
'20#.44.3.9':139
'20#.#4.247.193':139
'20#.#4.153.194':139
'20#.#4.137.89':139
'20#.#4.36.143':139
'20#.#4.124.86':139
'20#.#4.207.178':139
'20#.#4.120.102':139
'20#.#4.188.80':139
'20#.#4.232.187':139
'20#.44.2.35':139
'20#.#4.148.41':139
'20#.#4.185.167':139
'20#.#4.192.175':139
'20#.#4.159.229':139
'20#.#4.43.31':139
'20#.#4.132.21':139
'20#.#4.229.236':139
'20#.#4.16.146':139
'20#.#4.51.131':139
'20#.44.97.9':139
'20#.#4.147.175':445
'20#.#4.55.201':445
'20#.#4.69.106':445
'20#.#4.175.80':445
'20#.#4.41.177':445
'20#.44.7.41':445
'20#.#4.122.91':445
'20#.#4.120.102':445
'20#.#4.188.80':445
'20#.#4.232.187':445
'20#.44.2.35':445
'20#.#4.148.41':445
'20#.#4.185.167':445
'20#.#4.192.175':445
'20#.#4.177.152':445
'20#.#4.73.184':445
'20#.#4.136.29':445
'20#.#4.183.234':445
'20#.#4.253.57':445
'20#.#4.155.43':139
'20#.#4.205.4':139
'20#.#4.58.109':445
'20#.#4.38.174':445
'20#.#4.103.15':445
'20#.#4.152.103':445
'20#.#4.203.175':445
'20#.#4.246.204':445
'20#.#4.16.247':445
'20#.#4.200.38':445
'20#.#4.251.135':139
'20#.#4.136.140':139
'20#.#4.15.137':139
'20#.#4.98.172':139
'20#.#4.140.81':139
'20#.#4.42.37':139
'20#.#4.125.67':139
'20#.#4.81.44':139
'20#.#4.49.189':139
'20#.#4.219.234':139
'20#.#4.71.173':139
'20#.#4.189.160':139
'20#.#4.133.62':139
'20#.#4.51.29':139
'20#.#4.161.41':139
'20#.#4.36.199':139
'20#.#4.50.232':445
'20#.#4.173.71':445
'20#.#4.59.145':445
'20#.#4.166.31':445
'20#.#4.63.96':445
'20#.#4.35.207':445
'20#.#4.66.88':445
'20#.#4.237.147':139
'20#.#4.191.200':139
'20#.#4.92.90':139
'20#.#4.132.191':139
'20#.#4.134.54':445
'20#.#4.186.21':445
'20#.44.35.2':139
'20#.#4.30.72':139
'20#.#4.84.183':139
'20#.#4.57.117':139
'20#.#4.215.63':139
'20#.#4.202.211':139
'20#.#4.236.176':139
'20#.#4.141.187':139
'20#.#4.27.203':139
'20#.#4.191.27':139
'20#.#4.219.108':139
'20#.#4.17.116':139
'20#.#4.77.57':139
'20#.#4.65.77':139
'20#.#4.24.16':139
'20#.#4.204.222':139
'20#.#4.115.127':139
'20#.#4.101.66':139
'20#.#4.11.66':139
'20#.#4.138.42':139
'20#.#4.66.156':139
'20#.#4.197.41':139
'20#.#4.135.129':139
'20#.#4.118.202':139
'20#.#4.27.194':139
'20#.#4.233.118':139
'20#.#4.22.206':139
'20#.#4.131.145':139
'20#.#4.76.154':139
'20#.#4.183.76':139
'20#.#4.48.105':445
'20#.#4.34.196':445
'20#.#4.42.112':445
'20#.#4.152.70':445
'20#.#4.134.54':139
'20#.#4.39.205':445
'20#.#4.58.40':445
'20#.#4.110.186':445
'20#.#4.177.90':445
'20#.#4.102.217':445
'20#.#4.195.103':445
'20#.#4.212.253':445
'20#.#4.225.9':445
'20#.#4.53.57':445
'20#.#4.186.21':139
'20#.#4.77.185':139
'20#.#4.38.110':139
'20#.#4.51.135':139
'20#.#4.185.201':139
'20#.#4.64.186':139
'20#.#4.192.207':139
'20#.#4.201.47':139
'20#.#4.50.232':139
'20#.#4.173.71':139
'20#.#4.59.145':139
'20#.#4.66.88':139
'20#.#4.63.96':139
'20#.#4.35.207':139
'20#.#4.166.31':139
'20#.#4.142.248':445
'20#.#4.17.53':445
'20#.#4.251.135':445
'20#.#4.102.206':445
'20#.#4.141.254':445
'20#.#4.209.142':445
'20#.44.46.7':445
'20#.#4.77.185':445
'20#.#4.38.110':445
'20#.#4.51.135':445
'20#.#4.185.201':445
'20#.#4.64.186':445
'20#.#4.192.207':445
'20#.#4.201.47':445
'20#.#4.63.33':445
'20#.#4.133.110':445
'20#.44.9.86':445
'20#.#4.220.242':445
'20#.#4.92.169':445
'20#.#4.123.240':445
'20#.#4.103.113':445
'20#.#4.186.38':445
'20#.#4.27.229':445
'20#.#4.49.130':445
'20#.#4.103.150':445
'20#.#4.114.207':445
'20#.#4.1.166':445
'20#.#4.25.33':445
'20#.#4.59.132':445
'20#.#4.114.19':445
'20#.#4.84.238':445
'20#.44.4.83':445
'20#.#4.9.189':445
'20#.#4.54.10':445
'20#.#4.207.53':445
'20#.#4.142.224':445
'20#.#4.13.204':445
'20#.#4.160.14':445
'20#.#4.115.92':445
'20#.#4.108.242':445
'20#.#4.105.168':445
'20#.#4.114.44':445
'20#.#4.203.108':445
'20#.#4.105.91':445
'20#.#4.59.76':445
'20#.#4.247.232':445
'20#.44.0.63':445
'20#.#4.134.144':445
'20#.#4.54.204':445
'20#.#4.55.143':445
'20#.#4.102.70':445
'20#.#4.137.215':445
'20#.#4.26.17':445
'20#.#4.28.204':445
'20#.#4.6.113':445
'20#.#4.154.209':445
'20#.#4.116.197':445
'20#.#4.195.23':445
'20#.#4.134.144':9988
'20#.#4.105.91':9988
'20#.#4.29.189':9988
'20#.#4.84.238':9988
'20#.#4.80.31':9988
'20#.#4.173.136':9988
'20#.#4.54.10':9988
'20#.#4.108.161':139
'20#.#4.190.97':139
'20#.#4.29.111':139
'20#.#4.95.170':139
'20#.#4.165.210':9988
'20#.#4.117.135':9988
'20#.44.77.2':139
'20#.#4.171.52':445
'20#.#4.36.66':445
'20#.#4.128.76':445
'20#.#4.199.83':445
'20#.#4.49.177':445
'20#.#4.56.16':445
'20#.#4.47.225':445
'20#.#4.29.189':445
'20#.#4.103.73':445
'20#.#4.8.103':445
'20#.#4.165.210':445
'20#.#4.72.202':445
'20#.#4.117.135':445
'20#.#4.171.125':445
'20#.#4.202.17':445
'20#.#4.26.17':139
'20#.#4.28.204':139
'20#.#4.105.91':139
'20#.#4.137.215':139
'20#.#4.24.218':139
'20#.#4.6.113':139
'20#.#4.195.23':139
'20#.#4.114.19':139
'20#.#4.84.238':139
'20#.44.4.83':139
'20#.#4.9.189':139
'20#.#4.54.10':139
'20#.#4.207.53':139
'20#.#4.142.224':139
'20#.#4.55.143':139
'20#.44.0.63':139
'20#.#4.134.144':139
'20#.#4.247.232':139
'20#.#4.154.209':139
'20#.#4.35.148':139
'20#.#4.59.76':139
'20#.#4.173.136':139
'20#.#4.138.13':139
'20#.#4.102.70':139
'20#.#4.194.98':139
'20#.#4.80.31':139
'20#.#4.20.156':139
'20#.#4.116.197':139
'20#.#4.54.204':139
'20#.#4.8.103':139
'20#.#4.165.210':139
'20#.#4.171.52':139
'20#.#4.103.73':139
'20#.#4.171.125':139
'20#.#4.202.17':139
'20#.#4.72.202':139
'20#.#4.24.218':445
'20#.#4.20.156':445
'20#.#4.35.148':445
'20#.#4.80.31':445
'20#.#4.173.136':445
'20#.#4.194.98':445
'20#.#4.138.13':445
'20#.#4.117.135':139
'20#.#4.13.204':139
'20#.#4.160.14':139
'20#.#4.115.92':139
'20#.#4.203.108':139
'20#.#4.105.168':139
'20#.#4.114.44':139
'20#.#4.108.242':139
'20#.#4.36.66':139
'20#.#4.128.76':139
'20#.#4.199.83':139
'20#.#4.49.177':139
'20#.#4.29.189':139
'20#.#4.56.16':139
'20#.#4.47.225':139
'20#.#4.194.100':139
'20#.#4.34.13':445
'20#.#4.112.206':445
'20#.#4.67.141':445
'20#.#4.186.41':445
'20#.#4.75.251':445
'20#.#4.41.224':445
'20#.#4.141.186':445
'20#.#4.251.157':445
'20#.#4.165.104':445
'20#.#4.162.107':445
'20#.#4.141.76':445
'20#.#4.75.20':445
'20#.#4.179.32':445
'20#.#4.21.200':445
'20#.#4.168.237':445
'20#.#4.172.176':445
'20#.#4.91.131':445
'20#.#4.84.126':445
'20#.#4.60.208':445
'20#.#4.52.92':445
'20#.#4.146.123':445
'20#.#4.202.228':445
'20#.#4.210.109':445
'20#.#4.74.148':445
'20#.#4.45.43':445
'20#.#4.27.106':445
'20#.#4.24.196':445
'20#.#4.78.20':445
'20#.#4.194.172':445
'20#.#4.103.15':139
'20#.#4.152.103':139
'20#.#4.177.152':139
'20#.#4.38.174':139
'20#.#4.16.247':139
'20#.#4.200.38':139
'20#.#4.203.175':139
'20#.#4.147.175':139
'20#.#4.55.201':139
'20#.#4.69.106':139
'20#.#4.175.80':139
'20#.#4.41.177':139
'20#.44.7.41':139
'20#.#4.122.91':139
'20#.#4.246.204':139
'20#.#4.201.39':445
'20#.#4.112.234':445
'20#.#4.62.133':445
'20#.#4.36.138':445
'20#.#4.107.146':445
'20#.#4.143.125':445
'20#.#4.66.181':445
'20#.#4.73.184':139
'20#.#4.183.234':139
'20#.#4.136.29':139
'20#.#4.253.57':139
'20#.#4.34.181':445
'20#.#4.108.98':445
'20#.#4.58.109':139
'20#.#4.27.106':139
'20#.#4.210.109':139
'20#.#4.168.237':139
'20#.#4.74.148':139
'20#.#4.84.126':139
'20#.#4.24.196':139
'20#.#4.45.43':139
'20#.#4.141.186':139
'20#.#4.67.141':139
'20#.#4.75.20':139
'20#.#4.186.41':139
'20#.#4.34.13':139
'20#.#4.75.251':139
'20#.#4.41.224':139
'20#.#4.78.20':139
'20#.#4.172.99':139
'20#.#4.213.135':139
'20#.#4.160.23':139
'20#.#4.57.77':139
'20#.#4.13.194':139
'20#.#4.0.217':139
'20#.#4.81.170':139
'20#.#4.91.131':139
'20#.#4.172.176':139
'20#.#4.194.172':139
'20#.#4.60.208':139
'20#.#4.146.123':139
'20#.#4.52.92':139
'20#.#4.202.228':139
'20#.#4.190.97':445
'20#.#4.29.111':445
'20#.#4.194.100':445
'20#.#4.108.161':445
'20#.#4.108.98':139
'20#.44.77.2':445
'20#.#4.95.170':445
'20#.#4.172.99':445
'20#.#4.213.135':445
'20#.#4.160.23':445
'20#.#4.57.77':445
'20#.#4.13.194':445
'20#.#4.0.217':445
'20#.#4.81.170':445
'20#.#4.34.181':139
'20#.#4.251.157':139
'20#.#4.165.104':139
'20#.#4.143.125':139
'20#.#4.21.200':139
'20#.#4.112.206':139
'20#.#4.141.76':139
'20#.#4.179.32':139
'20#.#4.201.39':139
'20#.#4.112.234':139
'20#.#4.62.133':139
'20#.#4.36.138':139
'20#.#4.107.146':139
'20#.#4.162.107':139
'20#.#4.66.181':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней