Trojan.Starman.6074

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER35dd.dir00\svchost.exe.mdmp 16325836412032152

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER35dd.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#48.12.180':139
'21#.#48.194.238':139
'21#.#48.199.251':139
'21#.#48.139.251':139
'21#.#48.151.195':139
'21#.#48.251.126':139
'21#.#48.231.56':139
'21#.#48.214.72':139
'21#.#48.13.210':139
'21#.#48.234.163':139
'21#.#48.37.215':139
'21#.#48.247.174':139
'21#.#48.43.239':139
'21#.#48.178.34':139
'21#.#48.156.173':139
'21#.#48.51.82':139
'21#.#48.146.69':139
'21#.#48.215.145':139
'21#.#48.249.27':139
'21#.#48.38.8':139
'21#.#48.37.38':139
'21#.#48.244.140':139
'21#.#48.215.145':445
'21#.#48.37.215':445
'21#.#48.146.69':445
'21#.#48.37.38':445
'21#.#48.249.27':445
'21#.#48.12.180':445
'21#.#48.194.238':445
'21#.#48.199.251':445
'21#.#48.139.251':445
'21#.#48.151.195':445
'21#.#48.38.8':445
'21#.#48.117.6':139
'21#.#48.93.230':139
'21#.#48.121.236':139
'21#.#48.225.84':139
'21#.#48.108.81':139
'21#.#48.247.174':445
'21#.#48.43.239':445
'21#.#48.178.34':445
'21#.#48.156.173':445
'21#.#48.51.82':445
'21#.#48.141.217':139
'21#.#48.179.141':139
'21#.#48.189.237':139
'21#.#48.102.160':139
'21#.#48.174.102':139
'21#.#48.253.32':445
'21#.#48.199.237':445
'21#.#48.36.122':139
'21#.#48.247.131':139
'21#.#48.122.6':139
'21#.#48.160.37':139
'21#.#48.9.15':139
'21#.#48.179.201':139
'21#.#48.116.109':139
'21#.#48.0.214':139
'21#.#48.89.44':139
'21#.#48.30.233':139
'21#.#48.254.80':139
'21#.#48.27.244':139
'21#.#48.111.242':139
'21#.#48.30.161':139
'21#.#48.36.200':445
'21#.#48.174.102':445
'21#.#48.189.237':445
'21#.#48.102.160':445
'21#.#48.254.80':445
'21#.#48.160.37':445
'21#.#48.122.6':445
'21#.#48.36.122':445
'21#.#48.247.131':445
'21#.#48.141.217':445
'21#.#48.179.141':445
'21#.#48.30.233':445
'21#.#48.89.44':445
'21#.#48.116.109':445
'21#.#48.0.214':445
'21#.#48.220.46':445
'21#.#48.49.220':445
'21#.#48.30.161':445
'21#.#48.27.244':445
'21#.#48.111.242':445
'21#.#48.9.15':445
'21#.#48.179.201':445
'21#.#48.225.25':445
'21#.#48.55.225':445
'21#.#48.25.239':445
'21#.#48.84.11':445
'21#.#48.192.141':445
'21#.#48.123.129':139
'21#.#48.205.164':139
'21#.#48.191.142':139
'21#.#48.30.196':139
'21#.#48.10.48':139
'21#.#48.121.132':445
'21#.#48.231.161':445
'21#.#48.191.231':445
'21#.#48.25.19':445
'21#.#48.33.151':445
'21#.#48.192.36':445
'21#.#48.11.0':445
'21#.#48.133.10':445
'21#.#48.50.226':445
'21#.#48.163.140':445
'21#.#48.82.95':445
'21#.#48.122.205':139
'21#.#48.199.15':139
'21#.#48.120.253':139
'21#.#48.186.239':139
'21#.#48.88.93':139
'21#.#48.173.153':139
'21#.#48.44.106':139
'21#.#48.230.138':139
'21#.#48.110.171':139
'21#.#48.21.226':139
'21#.#48.202.10':139
'21#.#48.45.234':139
'21#.#48.141.253':139
'21#.#48.165.141':139
'21#.#48.149.51':139
'21#.#48.88.65':139
'21#.#48.5.114':139
'21#.#48.77.235':139
'21#.#48.156.14':139
'21#.#48.122.67':139
'21#.#48.101.165':139
'21#.#48.204.101':139
'21#.#48.168.41':139
'21#.#48.55.168':139
'21#.#48.198.186':139
'21#.#48.21.235':139
'21#.#48.16.100':139
'21#.#48.33.151':139
'21#.#48.192.36':139
'21#.#48.2.227':139
'21#.#48.139.215':139
'21#.#48.190.107':139
'21#.#48.93.230':445
'21#.#48.251.126':445
'21#.#48.231.56':445
'21#.#48.214.72':445
'21#.#48.13.210':445
'21#.#48.234.163':445
'21#.#48.121.236':445
'21#.#48.117.6':445
'21#.#48.108.81':445
'21#.#48.244.140':445
'21#.#48.225.84':445
'21#.#48.25.19':139
'21#.#48.16.100':445
'21#.#48.198.186':445
'21#.#48.21.235':445
'21#.#48.225.25':139
'21#.#48.55.225':139
'21#.#48.190.107':445
'21#.#48.2.227':445
'21#.#48.139.215':445
'21#.#48.168.41':445
'21#.#48.55.168':445
'21#.#48.25.239':139
'21#.#48.82.95':139
'21#.#48.50.226':139
'21#.#48.163.140':139
'21#.#48.231.161':139
'21#.#48.191.231':139
'21#.#48.84.11':139
'21#.#48.192.141':139
'21#.#48.121.132':139
'21#.#48.11.0':139
'21#.#48.133.10':139
'21#.#48.49.220':139
'21#.#48.133.31':445
'21#.#48.182.127':445
'21#.#48.31.15':445
'21#.#48.30.118':445
'21#.#48.9.160':445
'21#.#48.189.180':445
'21#.#48.15.153':445
'21#.#48.17.42':445
'21#.#48.6.241':445
'21#.#48.188.208':445
'21#.#48.75.70':445
'21#.#48.243.12':139
'21#.#48.167.250':139
'21#.#48.7.235':139
'21#.#48.5.34':139
'21#.#48.40.45':139
'21#.#48.44.252':445
'21#.#48.120.78':445
'21#.#48.124.249':139
'21#.#48.4.206':139
'21#.#48.124.247':139
'21#.#48.127.79':445
'21#.#48.91.218':445
'21#.#48.25.60':445
'21#.#48.202.120':445
'21#.#48.19.133':445
'21#.#48.26.20':445
'21#.#48.250.42':445
'21#.#48.24.11':445
'21#.#48.64.23':445
'21#.#48.20.40':445
'21#.#48.163.20':445
'21#.#48.173.70':445
'21#.#48.19.41':445
'21#.#48.1.91':445
'21#.#48.162.102':445
'21#.#48.98.58':445
'21#.#48.200.105':445
'21#.#48.171.91':445
'21#.#48.20.231':445
'21#.#48.14.148':445
'21#.#48.154.231':445
'21#.#48.153.93':445
'21#.#48.98.58':139
'21#.#48.200.105':139
'21#.#48.127.79':139
'21#.#48.189.180':139
'21#.#48.15.153':139
'21#.#48.154.231':139
'21#.#48.153.93':139
'21#.#48.1.91':139
'21#.#48.162.102':139
'21#.#48.19.41':139
'21#.#48.17.42':139
'21#.#48.75.70':139
'21#.#48.44.252':139
'21#.#48.30.118':139
'21#.#48.120.78':139
'21#.#48.9.160':139
'21#.#48.6.241':139
'21#.#48.188.208':139
'21#.#48.182.127':139
'21#.#48.31.15':139
'21#.#48.133.31':139
'21#.#48.14.148':139
'21#.#48.71.44':139
'21#.#48.16.159':139
'21#.#48.57.149':139
'21#.#48.250.42':139
'21#.#48.24.11':139
'21#.#48.108.186':139
'21#.#48.153.76':139
'21#.#48.126.248':139
'21#.#48.64.15':139
'21#.#48.107.5':139
'21#.#48.64.23':139
'21#.#48.19.133':139
'21#.#48.26.20':139
'21#.#48.173.70':139
'21#.#48.171.91':139
'21#.#48.20.231':139
'21#.#48.20.40':139
'21#.#48.163.20':139
'21#.#48.25.60':139
'21#.#48.202.120':139
'21#.#48.91.218':139
'21#.#48.48.125':445
'21#.#48.101.215':445
'21#.#48.29.68':445
'21#.#48.70.131':139
'21#.#48.68.143':445
'21#.#48.181.122':445
'21#.#48.182.22':445
'21#.#48.122.167':445
'21#.#48.28.197':445
'21#.#48.166.223':445
'21#.#48.49.134':139
'21#.#48.234.109':139
'21#.#48.72.3':139
'21#.#48.109.67':139
'21#.#48.177.252':139
'21#.#48.67.178':139
'21#.#48.94.124':139
'21#.#48.190.94':139
'21#.#48.59.44':139
'21#.#48.63.172':139
'21#.#48.227.64':139
'21#.#48.112.103':445
'21#.#48.190.94':445
'21#.#48.49.134':445
'21#.#48.94.124':445
'21#.#48.227.64':445
'21#.#48.59.44':445
'21#.#48.36.200':139
'21#.#48.220.46':139
'21#.#48.199.237':139
'21#.#48.70.131':445
'21#.#48.253.32':139
'21#.#48.63.172':445
'21#.#48.232.191':445
'21#.#48.188.125':445
'21#.#48.246.5':445
'21#.#48.155.252':445
'21#.#48.80.52':445
'21#.#48.234.109':445
'21#.#48.72.3':445
'21#.#48.109.67':445
'21#.#48.177.252':445
'21#.#48.67.178':445
'21#.#48.124.247':445
'21#.#48.124.249':445
'21#.#48.4.206':445
'21#.#48.243.12':445
'21#.#48.167.250':445
'21#.#48.17.42':9988
'21#.#48.189.180':9988
'21#.#48.133.31':9988
'21#.#48.120.78':9988
'21#.#48.30.118':9988
'21#.#48.7.235':445
'21#.#48.64.15':445
'21#.#48.107.5':445
'21#.#48.16.159':445
'21#.#48.57.149':445
'21#.#48.71.44':445
'21#.#48.5.34':445
'21#.#48.40.45':445
'21#.#48.153.76':445
'21#.#48.126.248':445
'21#.#48.108.186':445
'21#.#48.15.153':9988
'21#.#48.182.22':139
'21#.#48.112.103':139
'21#.#48.181.122':139
'21#.#48.166.223':139
'21#.#48.122.167':139
'21#.#48.232.191':139
'21#.#48.188.125':139
'21#.#48.246.5':139
'21#.#48.155.252':139
'21#.#48.80.52':139
'21#.#48.28.197':139
'21#.#48.154.231':9988
'21#.#48.153.93':9988
'21#.#48.200.105':9988
'21#.#48.127.79':9988
'21#.#48.98.58':9988
'21#.#48.48.125':139
'21#.#48.101.215':139
'21#.#48.29.68':139
'21#.#48.171.91':9988
'21#.#48.68.143':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней