Trojan.Starman.6362

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERfd0c.dir00\svchost.exe.mdmp 16325836412031988

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WERfd0c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'65.#.194.235':139
'65.#.178.84':139
'65.#.7.251':139
'65.#.216.8':445
'65.#.86.17':445
'65.#.1.49':139
'65.#.115.1':139
'65.#.48.228':139
'65.#.105.104':139
'65.#.227.226':139
'65.#.112.218':445
'65.#.112.218':139
'65.#.216.8':139
'65.#.38.108':139
'65.#.192.50':139
'65.#.249.203':139
'65.#.249.203':445
'65.#.38.108':445
'65.#.192.50':445
'65.#.86.17':139
'65.#.44.122':445
'65.#.143.81':139
'65.#.85.143':139
'65.#.200.40':139
'65.#.167.21':139
'65.#.163.112':139
'65.#.214.104':139
'65.#.71.247':139
'65.#.57.64':139
'65.#.79.95':139
'65.#.1.118':139
'65.#.21.178':139
'65.#.92.178':139
'65.#.84.65':139
'65.#.143.117':139
'65.#.6.214':139
'65.#.117.211':139
'65.#.106.52':139
'65.#.84.27':139
'65.#.198.199':139
'65.#.126.84':139
'65.#.127.171':139
'65.#.232.107':445
'65.#.157.183':445
'65.#.90.21':445
'65.#.0.178':445
'65.#.81.169':445
'65.#.165.95':445
'65.#.24.52':445
'65.#.190.140':445
'65.#.18.233':445
'65.#.65.197':445
'65.#.194.129':445
'65.#.26.226':445
'65.#.16.182':445
'65.#.91.26':445
'65.#.81.9':445
'65.#.172.90':445
'65.#.44.73':445
'65.#.130.83':445
'65.#.82.173':445
'65.#.131.239':445
'65.#.217.104':445
'65.#.210.88':445
'65.#.230.190':445
'65.#.69.216':445
'65.#.229.34':445
'65.#.86.183':445
'65.#.167.186':445
'65.#.44.122':139
'65.#.14.140':445
'65.#.48.70':445
'65.#.176.230':445
'65.#.171.66':445
'65.#.83.70':445
'65.#.192.219':445
'65.#.163.22':445
'65.#.20.102':445
'65.#.83.72':445
'65.#.42.21':445
'65.#.190.138':445
'65.#.49.7':445
'65.#.7.121':445
'65.#.95.27':445
'65.#.138.251':139
'65.#.28.224':445
'65.#.110.218':445
'65.#.132.71':445
'65.#.251.67':445
'65.#.32.25':445
'65.#.87.43':139
'65.#.162.170':139
'65.#.202.179':139
'65.#.236.110':139
'65.#.26.198':139
'65.#.162.93':445
'65.#.47.100':445
'65.#.140.211':445
'65.#.251.194':445
'65.#.71.247':445
'65.#.138.251':445
'65.#.51.143':445
'65.#.84.185':445
'65.#.227.72':445
'65.#.140.248':445
'65.#.137.86':445
'65.#.15.236':139
'65.#.140.206':139
'65.#.57.136':139
'65.#.157.123':139
'65.#.156.217':139
'65.#.175.185':139
'65.#.251.60':139
'65.#.128.233':139
'65.#.182.5':139
'65.#.26.113':139
'65.#.32.180':139
'65.#.26.198':445
'65.#.202.179':445
'65.#.236.110':445
'65.#.130.216':139
'65.#.196.115':139
'65.#.196.115':445
'65.#.68.55':139
'65.#.130.216':445
'65.#.87.43':445
'65.#.162.170':445
'65.#.7.251':445
'65.#.48.228':445
'65.#.110.218':139
'65.#.28.224':139
'65.#.32.25':139
'65.#.1.49':445
'65.#.227.226':445
'65.#.178.84':445
'65.#.6.214':445
'65.#.105.104':445
'65.#.251.67':139
'65.#.140.248':139
'65.#.137.86':139
'65.#.140.211':139
'65.#.47.100':139
'65.#.251.194':139
'65.#.132.71':139
'65.#.162.93':139
'65.#.84.185':139
'65.#.227.72':139
'65.#.51.143':139
'65.#.200.40':445
'65.#.143.81':445
'65.#.163.112':445
'65.#.198.199':445
'65.#.167.21':445
'65.#.57.64':445
'65.#.214.104':445
'65.#.1.118':445
'65.#.79.95':445
'65.#.85.143':445
'65.#.126.84':445
'65.#.21.178':445
'65.#.143.117':445
'65.#.127.171':445
'65.#.115.1':445
'65.#.194.235':445
'65.#.84.65':445
'65.#.117.211':445
'65.#.106.52':445
'65.#.84.27':445
'65.#.92.178':445
'65.#.166.135':445
'65.#.149.181':445
'65.#.104.20':445
'65.#.40.128':445
'65.#.6.168':445
'65.#.45.41':445
'65.#.71.35':445
'65.#.22.87':445
'65.#.171.77':445
'65.#.9.78':445
'65.#.87.150':445
'65.#.35.157':139
'65.#.170.97':139
'65.#.24.164':139
'65.#.105.181':139
'65.#.71.49':139
'65.#.228.6':139
'65.#.41.237':445
'65.#.56.212':139
'65.#.246.222':139
'65.#.179.157':139
'65.#.125.139':445
'65.#.249.198':445
'65.#.151.121':445
'65.#.131.120':445
'65.#.73.136':445
'65.#.113.170':445
'65.#.36.214':445
'65.#.1.96':445
'65.#.199.14':445
'65.#.159.77':445
'65.#.121.131':445
'65.#.218.196':445
'65.#.146.160':445
'65.#.85.195':445
'65.#.65.209':445
'65.#.217.214':445
'65.#.110.47':445
'65.#.196.107':445
'65.#.132.143':445
'65.#.138.43':445
'65.#.70.115':445
'65.#.217.214':139
'65.#.85.195':139
'65.#.65.209':139
'65.#.149.181':139
'65.#.218.196':139
'65.#.132.143':139
'65.#.110.47':139
'65.#.70.115':139
'65.#.146.160':139
'65.#.138.43':139
'65.#.166.135':139
'65.#.22.87':139
'65.#.40.128':139
'65.#.171.77':139
'65.#.41.237':139
'65.#.87.150':139
'65.#.6.168':139
'65.#.71.35':139
'65.#.104.20':139
'65.#.9.78':139
'65.#.45.41':139
'65.#.59.40':139
'65.#.63.134':139
'65.#.21.242':139
'65.#.36.214':139
'65.#.168.214':139
'65.#.173.232':139
'65.#.61.24':139
'65.#.11.124':139
'65.#.96.153':139
'65.#.101.169':139
'65.#.113.170':139
'65.#.121.131':139
'65.#.151.121':139
'65.#.131.120':139
'65.#.196.107':139
'65.#.73.136':139
'65.#.159.77':139
'65.#.1.96':139
'65.#.249.198':139
'65.#.125.139':139
'65.#.199.14':139
'65.#.168.214':445
'65.#.192.219':139
'65.#.163.22':139
'65.#.83.72':139
'65.#.24.52':139
'65.#.20.102':139
'65.#.49.7':139
'65.#.171.66':139
'65.#.7.121':139
'65.#.83.70':139
'65.#.169.140':445
'65.#.165.95':139
'65.#.81.169':139
'65.#.90.21':139
'65.#.0.178':139
'65.#.130.83':139
'65.#.194.129':139
'65.#.65.197':139
'65.#.190.140':139
'65.#.18.233':139
'65.#.157.183':139
'65.#.232.107':139
'65.#.128.33':445
'65.#.34.239':445
'65.#.14.140':139
'65.#.176.230':139
'65.#.48.70':139
'65.#.94.172':445
'65.#.146.223':445
'65.#.178.247':445
'65.#.167.186':139
'65.#.197.64':445
'65.#.230.190':139
'65.#.229.34':139
'65.#.86.183':139
'65.#.95.27':139
'65.#.42.21':139
'65.#.190.138':139
'65.#.210.88':139
'65.#.121.154':445
'65.#.0.94':445
'65.#.69.216':139
'65.#.150.180':445
'65.#.179.157':445
'65.#.56.212':445
'65.#.246.222':445
'65.#.170.97':445
'65.#.35.157':445
'65.#.24.164':9988
'65.#.35.157':9988
'65.#.22.87':9988
'65.#.228.6':445
'65.#.104.20':9988
'65.#.71.49':445
'65.#.96.153':445
'65.#.101.169':445
'65.#.63.134':445
'65.#.21.242':445
'65.#.59.40':445
'65.#.173.232':445
'65.#.24.164':445
'65.#.61.24':445
'65.#.11.124':445
'65.#.105.181':445
'65.#.91.26':139
'65.#.172.90':139
'65.#.26.226':139
'65.#.146.223':139
'65.#.81.9':139
'65.#.217.104':139
'65.#.82.173':139
'65.#.44.73':139
'65.#.131.239':139
'65.#.16.182':139
'65.#.94.172':139
'65.#.150.180':139
'65.#.0.94':139
'65.#.169.140':139
'65.#.246.222':9988
'65.#.56.212':9988
'65.#.197.64':139
'65.#.178.247':139
'65.#.34.239':139
'65.#.121.154':139
'65.#.128.33':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней