Trojan.Starman.6568

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERa196.dir00\svchost.exe.mdmp 16325836412032224

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa196.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#6.148.155':139
'19#.#6.149.219':139
'19#.#6.140.179':139
'19#.#6.121.127':139
'19#.#6.234.16':139
'19#.#6.75.145':139
'19#.#6.66.81':139
'19#.#6.146.99':139
'19#.#6.81.80':139
'19#.#6.11.104':139
'19#.#6.80.86':139
'19#.#6.124.218':139
'19#.#6.215.214':139
'19#.#6.190.7':139
'19#.#6.100.132':139
'19#.#6.180.25':139
'19#.#6.234.143':139
'19#.#6.43.187':139
'19#.#6.236.138':139
'19#.#6.204.41':139
'19#.#6.245.187':139
'19#.#6.147.230':139
'19#.#6.21.51':139
'19#.#6.74.250':445
'19#.#6.84.40':445
'19#.#6.128.107':445
'19#.#6.166.152':445
'19#.#6.107.83':445
'19#.#6.27.105':445
'19#.#6.12.43':445
'19#.#6.107.96':445
'19#.#6.103.55':445
'19#.#6.138.243':445
'19#.#6.210.169':445
'19#.#6.123.143':445
'19#.#6.180.62':445
'19#.#6.25.240':445
'19#.#6.239.35':139
'19#.#6.168.55':139
'19#.#6.222.187':445
'19#.#6.161.79':445
'19#.#6.229.240':445
'19#.#6.31.37':445
'19#.#6.161.211':445
'19#.#6.199.211':445
'19#.#6.23.154':139
'19#.#6.33.184':445
'19#.#6.203.33':445
'19#.#6.183.121':445
'19#.#6.3.199':445
'19#.#6.121.126':445
'19#.#6.140.194':445
'19#.#6.70.234':445
'19#.#6.224.211':445
'19#.#6.224.211':139
'19#.#6.88.102':445
'19#.#6.70.234':139
'19#.#6.167.61':445
'19#.#6.104.20':445
'19#.#6.96.10':445
'19#.#6.170.46':445
'19#.#6.219.169':445
'19#.#6.209.208':445
'19#.#6.150.221':445
'19#.#6.27.169':445
'19#.#6.95.78':445
'19#.#6.56.210':445
'19#.#6.148.41':445
'19#.#6.25.240':139
'19#.#6.138.243':139
'19#.#6.210.169':139
'19#.#6.27.105':139
'19#.#6.74.250':139
'19#.#6.84.40':139
'19#.#6.12.43':139
'19#.#6.245.184':139
'19#.#6.218.87':139
'19#.#6.23.17':139
'19#.#6.103.55':139
'19#.#6.107.96':139
'19#.#6.199.211':139
'19#.#6.161.211':139
'19#.#6.222.187':139
'19#.#6.123.143':139
'19#.#6.180.62':139
'19#.#6.31.37':139
'19#.#6.107.83':139
'19#.#6.128.107':139
'19#.#6.166.152':139
'19#.#6.161.79':139
'19#.#6.229.240':139
'19#.#6.23.17':445
'19#.#6.110.162':139
'19#.#6.87.74':139
'19#.#6.156.40':139
'19#.36.21.0':139
'19#.36.28.5':139
'19#.#6.99.133':139
'19#.#6.73.227':139
'19#.#6.199.44':139
'19#.#6.251.244':139
'19#.#6.243.86':139
'19#.#6.12.128':139
'19#.#6.62.51':139
'19#.#6.49.247':139
'19#.#6.96.171':139
'19#.#6.224.201':139
'19#.#6.172.8':139
'19#.#6.193.120':139
'19#.#6.5.145':139
'19#.#6.249.141':139
'19#.36.85.9':139
'19#.#6.70.194':139
'19#.#6.164.70':139
'19#.#6.81.61':139
'19#.#6.222.55':445
'19#.#6.26.224':445
'19#.#6.68.146':445
'19#.#6.178.210':139
'19#.#6.124.235':445
'19#.#6.108.20':445
'19#.#6.40.122':445
'19#.#6.146.219':445
'19#.#6.27.65':445
'19#.#6.132.81':445
'19#.#6.103.98':445
'19#.#6.241.59':139
'19#.#6.30.252':139
'19#.#6.120.183':139
'19#.#6.162.49':139
'19#.#6.171.137':139
'19#.#6.28.72':139
'19#.#6.149.175':139
'19#.#6.169.165':139
'19#.#6.71.29':139
'19#.#6.242.28':139
'19#.#6.101.106':139
'19#.#6.24.69':139
'19#.#6.121.127':445
'19#.#6.234.16':445
'19#.#6.236.138':445
'19#.#6.204.41':445
'19#.#6.43.187':445
'19#.#6.140.179':445
'19#.#6.11.104':445
'19#.#6.80.86':445
'19#.#6.75.145':445
'19#.#6.148.155':445
'19#.#6.149.219':445
'19#.#6.180.25':445
'19#.#6.100.132':445
'19#.#6.23.154':445
'19#.#6.245.184':445
'19#.#6.218.87':445
'19#.#6.190.7':445
'19#.#6.245.187':445
'19#.#6.147.230':445
'19#.#6.234.143':445
'19#.#6.124.218':445
'19#.#6.215.214':445
'19#.#6.81.80':445
'19#.#6.132.81':139
'19#.#6.103.98':139
'19#.#6.108.20':139
'19#.#6.222.55':139
'19#.#6.26.224':139
'19#.#6.27.65':139
'19#.#6.118.43':139
'19#.#6.6.110':139
'19#.#6.134.45':139
'19#.#6.40.122':139
'19#.#6.146.219':139
'19#.#6.239.35':445
'19#.#6.168.55':445
'19#.#6.21.51':445
'19#.#6.66.81':445
'19#.#6.146.99':445
'19#.#6.14.244':139
'19#.#6.124.235':139
'19#.#6.68.146':139
'19#.#6.125.95':445
'19#.#6.125.95':139
'19#.#6.14.244':445
'19#.#6.234.243':445
'19#.#6.184.46':445
'19#.#6.246.185':445
'19#.#6.69.50':445
'19#.36.6.8':445
'19#.#6.64.36':445
'19#.#6.0.115':445
'19#.#6.162.8':445
'19#.#6.245.89':445
'19#.#6.175.203':445
'19#.#6.166.41':445
'19#.#6.135.80':445
'19#.36.2.39':139
'19#.#6.179.113':139
'19#.#6.117.72':139
'19#.#6.192.189':139
'19#.#6.101.178':139
'19#.#6.98.209':445
'19#.#6.24.211':445
'19#.36.3.25':445
'19#.#6.211.27':445
'19#.#6.14.204':445
'19#.#6.140.195':445
'19#.#6.226.84':445
'19#.#6.64.162':445
'19#.#6.107.226':445
'19#.#6.72.142':445
'19#.#6.97.31':445
'19#.#6.4.231':445
'19#.#6.243.88':445
'19#.#6.176.183':445
'19#.#6.159.38':445
'19#.#6.69.143':445
'19#.#6.58.55':445
'19#.#6.49.25':445
'19#.#6.79.23':445
'19#.#6.208.191':445
'19#.#6.125.60':445
'19#.36.2.19':445
'19#.#6.154.114':445
'19#.#6.27.249':445
'19#.#6.176.122':445
'19#.#6.95.118':445
'19#.#6.84.229':445
'19#.#6.74.95':445
'19#.#6.53.220':445
'19#.#6.172.186':139
'19#.#6.175.203':139
'19#.#6.162.8':139
'19#.#6.166.41':139
'19#.#6.0.115':139
'19#.#6.135.80':139
'19#.#6.245.89':139
'19#.#6.125.60':139
'19#.#6.79.23':139
'19#.#6.154.114':139
'19#.#6.226.84':139
'19#.36.2.19':139
'19#.#6.64.36':139
'19#.#6.140.195':139
'19#.#6.211.27':139
'19#.#6.98.209':139
'19#.#6.69.50':139
'19#.36.6.8':139
'19#.#6.184.46':139
'19#.#6.246.185':139
'19#.36.3.25':139
'19#.#6.14.204':139
'19#.#6.24.211':139
'19#.#6.208.191':139
'19#.#6.69.143':139
'19#.#6.176.183':139
'19#.#6.49.25':139
'19#.#6.243.88':139
'19#.#6.58.55':139
'19#.#6.159.38':139
'19#.#6.60.204':139
'19#.#6.45.242':139
'19#.#6.217.207':139
'19#.#6.157.41':139
'19#.#6.208.148':139
'19#.#6.84.229':139
'19#.#6.176.122':139
'19#.#6.74.95':139
'19#.#6.27.249':139
'19#.#6.53.220':139
'19#.#6.95.118':139
'19#.#6.64.162':139
'19#.#6.107.226':139
'19#.#6.72.142':139
'19#.#6.97.31':139
'19#.#6.4.231':139
'19#.#6.157.41':445
'19#.#6.88.102':139
'19#.#6.226.178':445
'19#.#6.140.194':139
'19#.#6.33.184':139
'19#.#6.203.33':139
'19#.#6.59.137':445
'19#.#6.39.232':445
'19#.#6.101.252':445
'19#.#6.91.136':445
'19#.#6.55.40':445
'19#.#6.165.4':445
'19#.#6.56.210':139
'19#.#6.148.41':139
'19#.#6.209.208':139
'19#.#6.167.61':139
'19#.#6.104.20':139
'19#.#6.95.78':139
'19#.#6.121.126':139
'19#.#6.183.121':139
'19#.#6.3.199':139
'19#.#6.150.221':139
'19#.#6.27.169':139
'19#.#6.95.176':445
'19#.#6.214.36':445
'19#.#6.167.214':445
'19#.#6.130.172':445
'19#.#6.79.229':445
'19#.#6.121.47':445
'19#.#6.76.190':445
'19#.#6.169.60':445
'19#.#6.134.110':445
'19#.#6.163.58':445
'19#.#6.97.111':445
'19#.#6.228.131':445
'19#.#6.79.147':445
'19#.#6.61.156':445
'19#.#6.148.0':445
'19#.#6.115.200':445
'19#.36.6.13':445
'19#.#6.48.135':445
'19#.#6.91.204':445
'19#.#6.229.84':445
'19#.#6.65.133':445
'19#.#6.74.49':445
'19#.#6.28.109':445
'19#.#6.96.10':139
'19#.#6.55.40':139
'19#.#6.165.4':139
'19#.#6.59.137':139
'19#.#6.4.231':9988
'19#.#6.226.178':139
'19#.#6.91.136':139
'19#.#6.115.200':139
'19#.36.6.13':139
'19#.#6.95.176':139
'19#.#6.39.232':139
'19#.#6.101.252':139
'19#.#6.45.242':445
'19#.#6.172.186':445
'19#.#6.60.204':445
'19#.#6.208.148':445
'19#.#6.217.207':445
'19#.#6.192.189':445
'19#.#6.179.113':445
'19#.36.3.25':9988
'19#.36.2.39':445
'19#.#6.101.178':445
'19#.#6.117.72':445
'19#.#6.148.0':139
'19#.#6.97.111':139
'19#.#6.228.131':139
'19#.#6.76.190':139
'19#.#6.214.36':139
'19#.#6.167.214':139
'19#.#6.163.58':139
'19#.#6.170.46':139
'19#.#6.219.169':139
'19#.#6.234.243':139
'19#.#6.169.60':139
'19#.#6.134.110':139
'19#.#6.74.49':139
'19#.#6.28.109':139
'19#.#6.48.135':139
'19#.#6.79.147':139
'19#.#6.61.156':139
'19#.#6.65.133':139
'19#.#6.121.47':139
'19#.#6.130.172':139
'19#.#6.79.229':139
'19#.#6.91.204':139
'19#.#6.229.84':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней