Trojan.Starman.6321

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERb20d.dir00\svchost.exe.mdmp 16325836412029692

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb20d.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#11.44.162':445
'22#.#11.213.229':445
'22#.#11.134.204':445
'22#.#11.108.109':445
'22#.#11.4.66':445
'22#.#11.226.54':139
'22#.#11.27.217':139
'22#.#11.69.203':139
'22#.#11.28.85':139
'22#.#11.62.73':445
'22#.#11.234.104':445
'22#.#11.148.90':445
'22#.#11.182.211':445
'22#.#11.253.182':445
'22#.#11.129.148':445
'22#.#11.36.132':445
'22#.#11.31.136':445
'22#.#11.32.111':445
'22#.#11.185.187':445
'22#.#11.115.148':139
'22#.#11.106.3':139
'22#.#11.1.18':139
'22#.#11.63.121':139
'22#.#11.158.194':139
'22#.#11.191.116':139
'22#.#11.144.125':139
'22#.#11.83.18':139
'22#.#11.127.64':139
'22#.#11.125.56':139
'22#.#11.110.89':139
'22#.#11.108.91':139
'22#.#11.191.29':139
'22#.#11.22.157':139
'22#.#11.43.59':139
'22#.#11.184.127':139
'22#.#11.5.87':139
'22#.#11.85.40':139
'22#.#11.166.39':139
'22#.#11.136.13':139
'22#.#11.241.92':445
'22#.#11.210.240':445
'22#.#11.222.87':445
'22#.#11.92.184':445
'22#.#11.153.186':445
'22#.#11.207.67':445
'22#.#11.147.207':445
'22#.#11.156.229':445
'22#.#11.126.152':445
'22#.#11.116.159':445
'22#.#11.4.66':139
'22#.#11.127.80':445
'22#.#11.44.162':139
'22#.#11.213.229':139
'22#.#11.150.39':445
'22#.#11.251.107':445
'22#.#11.17.143':445
'22#.#11.73.48':445
'22#.#11.176.105':445
'22#.#11.71.33':445
'22#.#11.247.61':445
'22#.#11.168.69':445
'22#.#11.8.150':445
'22#.#11.193.40':445
'22#.#11.54.168':445
'22#.#11.51.87':445
'22#.#11.212.38':445
'22#.#11.26.97':445
'22#.#11.186.143':445
'22#.#11.125.111':445
'22#.#11.160.112':445
'22#.#11.119.219':445
'22#.#11.169.60':445
'22#.#11.200.169':445
'22#.#11.1.144':445
'22#.#11.195.45':445
'22#.#11.72.86':445
'22#.#11.236.210':445
'22#.#11.86.185':445
'22#.#11.213.177':445
'22#.#11.108.233':445
'22#.#11.144.125':445
'22#.#11.83.18':445
'22#.#11.2.27':445
'22#.#11.147.122':445
'22#.#11.101.232':445
'22#.#11.197.41':445
'22#.#11.66.130':445
'22#.#11.125.56':445
'22#.#11.110.89':445
'22#.#11.63.121':445
'22#.#11.5.87':445
'22#.#11.85.40':445
'22#.#11.158.194':445
'22#.#11.191.116':445
'22#.#11.127.64':445
'22#.#11.106.3':445
'22#.#11.1.18':445
'22#.#11.136.153':445
'22#.#11.238.4':445
'22#.#11.21.149':445
'22#.#11.208.188':445
'22#.#11.66.154':445
'22#.#11.122.37':445
'22#.#11.68.52':445
'22#.#11.174.216':445
'22#.#11.102.122':445
'22#.#11.81.103':445
'22#.#11.203.207':445
'22#.#11.72.167':445
'22#.#11.139.222':445
'22#.#11.94.78':445
'22#.#11.247.144':445
'22#.#11.25.197':445
'22#.#11.60.179':445
'22#.#11.67.144':445
'22#.#11.212.139':445
'22#.#11.26.65':445
'22#.#11.139.222':139
'22#.#11.212.139':139
'22#.#11.72.167':139
'22#.#11.25.197':139
'22#.#11.26.65':139
'22#.#11.203.207':139
'22#.#11.208.188':139
'22#.#11.60.179':139
'22#.#11.67.144':139
'22#.#11.247.144':139
'22#.#11.2.27':139
'22#.#11.197.41':139
'22#.#11.213.177':139
'22#.#11.108.233':139
'22#.#11.66.130':139
'22#.#11.136.153':139
'22#.#11.94.78':139
'22#.#11.147.122':139
'22#.#11.101.232':139
'22#.#11.66.154':139
'22#.#11.22.157':445
'22#.#11.43.59':445
'22#.#11.27.217':445
'22#.#11.115.148':445
'22#.#11.108.91':445
'22#.#11.166.39':445
'22#.#11.136.13':445
'22#.#11.191.29':445
'22#.#11.184.127':445
'22#.#11.226.54':445
'22#.#11.122.37':139
'22#.#11.102.122':139
'22#.#11.238.4':139
'22#.#11.21.149':139
'22#.#11.81.103':139
'22#.#11.69.203':445
'22#.#11.28.85':445
'22#.#11.68.52':139
'22#.#11.174.216':139
'22#.#11.60.21':445
'22#.#11.102.166':445
'22#.#11.131.171':139
'22#.#11.81.7':139
'22#.#11.175.198':445
'22#.#11.200.102':445
'22#.#11.166.96':445
'22#.#11.30.127':445
'22#.#11.73.79':445
'22#.#11.123.174':139
'22#.#11.54.135':139
'22#.#11.255.197':139
'22#.#11.241.27':139
'22#.#11.46.190':139
'22#.#11.66.221':139
'22#.#11.52.188':139
'22#.#11.242.151':139
'22#.#11.151.3':139
'22#.#11.6.35':139
'22#.#11.244.180':445
'22#.#11.68.130':445
'22#.#11.66.219':445
'22#.#11.153.19':445
'22#.#11.220.164':445
'22#.#11.149.117':445
'22#.#11.237.163':445
'22#.#11.74.81':445
'22#.#11.23.247':445
'22#.#11.32.17':445
'22#.#11.43.110':445
'22#.#11.181.199':445
'22#.#11.231.190':445
'22#.#11.72.203':445
'22#.#11.62.242':445
'22#.#11.26.137':445
'22#.#11.231.230':445
'22#.#11.136.231':445
'22#.#11.70.178':445
'22#.#11.230.27':445
'22#.#11.26.137':139
'22#.#11.70.178':139
'22#.#11.181.199':139
'22#.#11.231.190':139
'22#.#11.230.27':139
'22#.#11.43.110':139
'22#.#11.153.19':139
'22#.#11.231.230':139
'22#.#11.136.231':139
'22#.#11.62.242':139
'22#.#11.102.166':139
'22#.#11.166.96':139
'22#.#11.30.127':139
'22#.#11.73.79':139
'22#.#11.175.198':139
'22#.#11.244.180':139
'22#.#11.72.203':139
'22#.#11.60.21':139
'22#.#11.200.102':139
'22#.#11.220.164':139
'22#.#11.63.163':139
'22#.#11.40.196':139
'22#.#11.35.44':139
'22#.#11.161.31':139
'22#.#11.98.140':139
'22#.#11.218.167':139
'22#.#11.27.219':139
'22#.#11.224.39':139
'22#.#11.167.223':139
'22#.#11.234.215':139
'22#.#11.149.117':139
'22#.#11.23.247':139
'22#.#11.68.130':139
'22#.#11.66.219':139
'22#.#11.32.17':139
'22#.#11.202.61':139
'22#.#11.66.202':139
'22#.#11.237.163':139
'22#.#11.74.81':139
'22#.#11.1.144':139
'22#.#11.236.210':139
'22#.#11.160.112':139
'22#.#11.119.219':139
'22#.#11.86.185':139
'22#.#11.125.111':139
'22#.#11.8.150':139
'22#.#11.195.45':139
'22#.#11.72.86':139
'22#.#11.200.169':139
'22#.#11.153.186':139
'22#.#11.156.229':139
'22#.#11.241.92':139
'22#.#11.210.240':139
'22#.#11.126.152':139
'22#.#11.71.33':139
'22#.#11.169.60':139
'22#.#11.207.67':139
'22#.#11.147.207':139
'22#.#11.193.40':139
'22#.#11.32.111':139
'22#.#11.185.187':139
'22#.#11.148.90':139
'22#.#11.129.148':139
'22#.#11.36.132':139
'22#.#11.134.204':139
'22#.#11.108.109':139
'22#.#11.31.136':139
'22#.#11.62.73':139
'22#.#11.234.104':139
'22#.#11.54.168':139
'22#.#11.26.97':139
'22#.#11.247.61':139
'22#.#11.168.69':139
'22#.#11.186.143':139
'22#.#11.182.211':139
'22#.#11.253.182':139
'22#.#11.51.87':139
'22#.#11.212.38':139
'22#.#11.241.27':445
'22#.#11.46.190':445
'22#.#11.218.167':445
'22#.#11.27.219':445
'22#.#11.54.135':445
'22#.#11.151.3':445
'22#.#11.6.35':445
'22#.#11.255.197':445
'22#.#11.66.221':445
'22#.#11.167.223':445
'22#.#11.234.215':445
'22#.#11.35.44':445
'22#.#11.66.202':445
'22#.#11.202.61':445
'22#.#11.161.31':445
'22#.#11.98.140':445
'22#.#11.224.39':445
'22#.#11.63.163':445
'22#.#11.40.196':445
'22#.#11.242.151':445
'22#.#11.73.48':139
'22#.#11.176.105':139
'22#.#11.127.80':139
'22#.#11.150.39':139
'22#.#11.251.107':139
'22#.#11.222.87':139
'22#.#11.92.184':139
'22#.#11.17.143':139
'22#.#11.116.159':139
'22#.#11.54.135':9988
'22#.#11.131.171':445
'22#.#11.81.7':445
'22#.#11.52.188':445
'22#.#11.123.174':445
'22#.#11.234.215':9988
'22#.#11.224.39':9988
'22#.#11.241.27':9988
'22#.#11.72.203':9988
'22#.#11.35.44':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней