Trojan.Starman.6001

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3ed5.dir00\svchost.exe.mdmp 16325836412032148

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3ed5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#34.80.180':139
'21#.#34.63.121':139
'21#.#34.43.78':139
'21#.#34.2.10':139
'21#.#34.73.116':139
'21#.#34.121.126':139
'21#.#34.254.160':139
'21#.#34.21.179':139
'21#.#34.56.218':139
'21#.#34.15.128':139
'21#.#34.168.158':139
'21#.#34.109.71':445
'21#.#34.108.109':445
'21#.#34.3.134':445
'21#.#34.36.156':445
'21#.#34.199.88':445
'21#.#34.59.56':139
'21#.#34.15.59':139
'21#.#34.55.208':139
'21#.#34.58.200':445
'21#.#34.80.157':139
'21#.#34.56.218':445
'21#.#34.15.128':445
'21#.#34.63.121':445
'21#.#34.43.78':445
'21#.#34.80.180':445
'21#.#34.45.67':445
'21#.#34.97.6':445
'21#.#34.254.160':445
'21#.#34.21.179':445
'21#.#34.121.126':445
'21#.#34.73.116':445
'21#.#34.109.101':139
'21#.#34.80.157':445
'21#.#34.220.97':139
'21#.#34.45.67':139
'21#.#34.97.6':139
'21#.#34.168.158':445
'21#.#34.2.10':445
'21#.#34.15.59':445
'21#.#34.55.208':445
'21#.#34.59.56':445
'21#.#34.119.22':445
'21#.#34.109.71':139
'21#.#34.108.109':139
'21#.#34.3.134':139
'21#.#34.36.156':139
'21#.#34.199.88':139
'21#.#34.134.134':445
'21#.#34.117.165':445
'21#.#34.10.218':445
'21#.#34.58.200':139
'21#.#34.147.103':445
'21#.#34.119.22':139
'21#.#34.184.89':139
'21#.#34.55.103':139
'21#.#34.155.224':139
'21#.#34.143.183':139
'21#.#34.110.213':139
'21#.#34.138.79':139
'21#.#34.103.138':139
'21#.#34.136.220':139
'21#.#34.57.169':139
'21#.234.7.6':139
'21#.#34.184.89':445
'21#.#34.55.103':445
'21#.#34.155.224':445
'21#.#34.143.183':445
'21#.#34.110.213':445
'21#.#34.138.79':445
'21#.#34.103.138':445
'21#.#34.136.220':445
'21#.#34.57.169':445
'21#.234.7.6':445
'21#.#34.59.252':445
'21#.#34.23.234':445
'21#.#34.239.0':445
'21#.#34.234.78':445
'21#.#34.21.162':445
'21#.#34.79.63':445
'21#.#34.104.174':445
'21#.#34.157.104':445
'21#.#34.174.194':445
'21#.#34.255.43':445
'21#.#34.204.145':445
'21#.#34.162.191':445
'21#.#34.236.7':445
'21#.#34.199.189':445
'21#.#34.207.219':445
'21#.#34.176.155':445
'21#.#34.88.10':445
'21#.#34.48.187':445
'21#.#34.84.12':445
'21#.#34.176.161':445
'21#.#34.55.33':445
'21#.#34.74.71':445
'21#.#34.164.60':445
'21#.#34.48.116':445
'21#.#34.29.222':445
'21#.#34.205.67':445
'21#.#34.218.67':445
'21#.#34.70.73':445
'21#.#34.149.219':445
'21#.#34.248.197':445
'21#.#34.127.15':445
'21#.#34.32.188':445
'21#.#34.192.125':139
'21#.#34.204.248':139
'21#.#34.46.147':139
'21#.#34.110.237':139
'21#.#34.111.197':139
'21#.#34.181.196':139
'21#.#34.59.122':139
'21#.#34.39.216':139
'21#.#34.213.141':139
'21#.#34.218.212':139
'21#.#34.236.230':139
'21#.#34.202.38':139
'21#.#34.1.70':139
'21#.#34.38.55':139
'21#.#34.120.20':445
'21#.#34.217.165':445
'21#.#34.11.226':139
'21#.#34.59.250':139
'21#.#34.21.31':139
'21#.#34.101.241':139
'21#.#34.7.228':139
'21#.#34.44.113':445
'21#.#34.164.60':139
'21#.#34.48.116':139
'21#.#34.29.222':139
'21#.#34.205.67':139
'21#.#34.218.67':139
'21#.#34.70.73':139
'21#.#34.149.219':139
'21#.#34.248.197':139
'21#.#34.127.15':139
'21#.#34.32.188':139
'21#.#34.44.113':139
'21#.#34.36.191':139
'21#.#34.179.151':139
'21#.#34.120.71':139
'21#.#34.220.97':445
'21#.#34.109.101':445
'21#.#34.151.248':139
'21#.#34.173.101':139
'21#.#34.67.220':139
'21#.#34.40.243':139
'21#.#34.220.40':139
'21#.#34.36.191':445
'21#.#34.179.151':445
'21#.#34.120.71':445
'21#.#34.120.20':139
'21#.#34.217.165':139
'21#.#34.151.248':445
'21#.#34.173.101':445
'21#.#34.67.220':445
'21#.#34.40.243':445
'21#.#34.220.40':445
'21#.#34.48.187':139
'21#.#34.199.189':139
'21#.#34.162.191':139
'21#.#34.176.155':139
'21#.#34.74.71':139
'21#.#34.207.219':139
'21#.#34.84.12':139
'21#.#34.88.10':139
'21#.#34.55.33':139
'21#.#34.236.7':139
'21#.#34.176.161':139
'21#.#34.59.252':139
'21#.#34.27.248':445
'21#.#34.20.65':445
'21#.#34.5.245':445
'21#.#34.145.105':445
'21#.#34.21.219':445
'21#.#34.247.138':445
'21#.#34.199.65':445
'21#.#34.129.184':445
'21#.#34.93.126':445
'21#.#34.202.151':445
'21#.#34.46.222':445
'21#.#34.35.56':139
'21#.#34.41.4':139
'21#.#34.222.8':139
'21#.#34.185.239':139
'21#.#34.120.152':139
'21#.#34.11.135':445
'21#.#34.250.160':445
'21#.#34.85.249':139
'21#.#34.84.252':139
'21#.#34.68.96':139
'21#.#34.233.141':445
'21#.#34.253.131':445
'21#.#34.182.252':445
'21#.#34.177.49':445
'21#.#34.214.112':445
'21#.#34.146.126':445
'21#.#34.178.207':445
'21#.#34.113.211':445
'21#.#34.118.106':445
'21#.#34.211.37':445
'21#.#34.151.11':445
'21#.#34.207.21':445
'21#.#34.46.10':445
'21#.#34.235.185':445
'21#.#34.211.131':445
'21#.#34.62.192':445
'21#.#34.36.145':445
'21#.#34.39.183':445
'21#.#34.139.191':445
'21#.#34.111.113':445
'21#.#34.27.171':445
'21#.#34.25.89':139
'21#.#34.62.192':139
'21#.#34.235.185':139
'21#.#34.211.131':139
'21#.#34.247.138':139
'21#.#34.199.65':139
'21#.#34.111.113':139
'21#.#34.139.191':139
'21#.#34.27.171':139
'21#.#34.207.21':139
'21#.#34.46.10':139
'21#.#34.129.184':139
'21#.#34.21.219':139
'21#.#34.11.135':139
'21#.#34.46.222':139
'21#.#34.250.160':139
'21#.#34.145.105':139
'21#.#34.93.126':139
'21#.#34.202.151':139
'21#.#34.20.65':139
'21#.#34.5.245':139
'21#.#34.27.248':139
'21#.#34.167.9':139
'21#.#34.151.113':139
'21#.#34.123.162':139
'21#.#34.146.126':139
'21#.#34.178.207':139
'21#.#34.78.201':139
'21#.#34.240.80':139
'21#.#34.201.170':139
'21#.#34.162.150':139
'21#.#34.170.162':139
'21#.#34.113.211':139
'21#.#34.177.49':139
'21#.#34.214.112':139
'21#.#34.151.11':139
'21#.#34.36.145':139
'21#.#34.39.183':139
'21#.#34.118.106':139
'21#.#34.211.37':139
'21#.#34.253.131':139
'21#.#34.182.252':139
'21#.#34.233.141':139
'21#.#34.119.120':445
'21#.#34.226.14':445
'21#.#34.67.103':445
'21#.#34.9.156':445
'21#.#34.79.116':445
'21#.#34.33.180':445
'21#.#34.235.2':445
'21#.#34.126.196':445
'21#.#34.2.68':445
'21#.#34.196.54':445
'21#.#34.68.226':445
'21#.#34.55.198':139
'21#.#34.251.33':139
'21#.#34.110.90':139
'21#.#34.33.180':139
'21#.#34.235.2':139
'21#.#34.36.164':139
'21#.#34.86.219':445
'21#.#34.215.223':139
'21#.#34.156.191':139
'21#.#34.64.214':139
'21#.#34.23.234':139
'21#.#34.239.0':139
'21#.#34.234.78':139
'21#.#34.21.162':139
'21#.#34.79.63':139
'21#.#34.104.174':139
'21#.#34.157.104':139
'21#.#34.174.194':139
'21#.#34.255.43':139
'21#.#34.204.145':139
'21#.#34.117.165':139
'21#.#34.156.191':445
'21#.#34.64.214':445
'21#.#34.251.33':445
'21#.#34.110.90':445
'21#.#34.55.198':445
'21#.#34.10.218':139
'21#.#34.134.134':139
'21#.#34.147.103':139
'21#.#34.215.223':445
'21#.#34.36.164':445
'21#.#34.126.196':139
'21#.#34.84.252':445
'21#.#34.68.96':445
'21#.#34.41.4':445
'21#.#34.222.8':445
'21#.#34.35.56':445
'21#.#34.20.65':9988
'21#.#34.93.126':9988
'21#.#34.27.248':9988
'21#.#34.85.249':445
'21#.#34.250.160':9988
'21#.#34.120.152':445
'21#.#34.162.150':445
'21#.#34.170.162':445
'21#.#34.151.113':445
'21#.#34.123.162':445
'21#.#34.167.9':445
'21#.#34.25.89':445
'21#.#34.185.239':445
'21#.#34.240.80':445
'21#.#34.201.170':445
'21#.#34.78.201':445
'21#.#34.9.156':139
'21#.#34.79.116':139
'21#.#34.68.226':139
'21#.#34.36.145':9988
'21#.#34.86.219':139
'21#.#34.2.68':139
'21#.#34.196.54':139
'21#.#34.226.14':139
'21#.#34.67.103':139
'21#.#34.119.120':139
'21#.#34.139.191':9988
'21#.#34.211.131':9988
'21#.#34.62.192':9988
'21#.#34.199.65':9988
'21#.#34.202.151':9988
'21#.#34.129.184':9988
'21#.#34.46.10':9988
'21#.#34.27.171':9988
'21#.#34.111.113':9988
'21#.#34.235.185':9988
'21#.#34.207.21':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней