Trojan.Starman.6508

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1156 -dm 7 7 %TEMP%\WERb1c8.dir00\svchost.exe.mdmp 16325836412032320

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb1c8.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'12#.#64.6.11':139
'12#.#64.107.6':139
'12#.#64.10.107':139
'12#.#64.77.239':139
'12#.#64.155.8':139
'12#.#64.246.106':139
'12#.#64.246.77':139
'12#.#64.145.95':139
'12#.#64.27.155':139
'12#.#64.83.246':139
'12#.#64.95.42':139
'12#.#64.87.86':139
'12#.#64.29.162':139
'12#.#64.167.189':139
'12#.#64.87.2':139
'12#.#64.48.86':139
'12#.#64.66.44':139
'12#.#64.14.35':139
'12#.#64.54.223':139
'12#.#64.23.175':139
'12#.#64.156.200':139
'12#.#64.65.225':139
'12#.#64.226.183':445
'12#.#64.92.88':445
'12#.#64.113.119':445
'12#.#64.213.13':445
'12#.#64.140.76':445
'12#.#64.77.183':445
'12#.#64.180.120':445
'12#.#64.172.138':445
'12#.#64.41.60':445
'12#.#64.121.78':445
'12#.#64.106.238':445
'12#.#64.14.130':139
'12#.#64.234.189':139
'12#.#64.69.90':139
'12#.#64.178.14':139
'12#.#64.162.214':139
'12#.#64.144.56':139
'12#.#64.60.127':139
'12#.#64.14.105':445
'12#.#64.127.212':139
'12#.#64.166.132':139
'12#.#64.217.205':139
'12#.#64.99.206':139
'12#.#64.254.102':445
'12#.#64.2.33':445
'12#.#64.59.99':445
'12#.#64.245.208':445
'12#.#64.64.159':445
'12#.#64.14.111':445
'12#.#64.134.75':445
'12#.#64.55.54':445
'12#.#64.108.59':445
'12#.#64.43.231':445
'12#.#64.54.179':445
'12#.#64.153.115':445
'12#.#64.55.197':445
'12#.#64.115.172':445
'12#.#64.104.183':445
'12#.#64.196.49':445
'12#.#64.30.62':445
'12#.#64.58.66':445
'12#.#64.45.28':445
'12#.#64.65.228':445
'12#.#64.16.40':445
'12#.#64.228.15':445
'12#.#64.180.120':139
'12#.#64.172.138':139
'12#.#64.41.60':139
'12#.#64.121.78':139
'12#.#64.106.238':139
'12#.#64.4.76':139
'12#.#64.183.7':139
'12#.#64.50.252':139
'12#.#64.86.238':139
'12#.#64.139.66':139
'12#.#64.138.108':139
'12#.#64.166.185':445
'12#.#64.14.105':139
'12#.#64.253.48':445
'12#.#64.192.152':445
'12#.#64.127.45':445
'12#.#64.213.13':139
'12#.#64.92.88':139
'12#.#64.77.183':139
'12#.#64.226.183':139
'12#.#64.140.76':139
'12#.#64.113.119':139
'12#.#64.4.76':445
'12#.#64.173.155':139
'12#.#64.65.154':139
'12#.#64.238.100':139
'12#.#64.196.194':139
'12#.#64.76.148':139
'12#.#64.14.249':139
'12#.#64.74.131':139
'12#.#64.250.145':139
'12#.#64.1.126':139
'12#.#64.20.0':139
'12#.#64.200.43':139
'12#.#64.27.119':139
'12#.#64.119.27':139
'12#.#64.119.54':139
'12#.#64.126.69':139
'12#.#64.54.59':139
'12#.#64.73.155':139
'12#.#64.37.131':139
'12#.#64.97.185':139
'12#.#64.159.37':139
'12#.#64.80.101':139
'12#.#64.79.204':139
'12#.#64.247.126':139
'12#.#64.58.30':139
'12#.#64.69.95':139
'12#.#64.26.225':139
'12#.#64.7.167':139
'12#.#64.244.177':139
'12#.#64.90.110':139
'12#.#64.34.185':139
'12#.#64.237.42':139
'12#.#64.98.73':139
'12#.#64.43.190':139
'12#.#64.52.147':139
'12#.#64.85.227':139
'12#.#64.147.142':139
'12#.#64.23.39':139
'12#.#64.142.75':139
'12#.#64.88.243':139
'12#.#64.44.51':139
'12#.#64.209.51':139
'12#.#64.77.43':139
'12#.#64.111.74':139
'12#.#64.180.5':139
'12#.#64.101.220':139
'12#.#64.23.175':445
'12#.#64.14.35':445
'12#.#64.65.225':445
'12#.#64.66.44':445
'12#.#64.156.200':445
'12#.#64.54.223':445
'12#.#64.6.11':445
'12#.#64.107.6':445
'12#.#64.10.107':445
'12#.#64.77.239':445
'12#.#64.155.8':445
'12#.#64.183.7':445
'12#.#64.50.252':445
'12#.#64.86.238':445
'12#.#64.139.66':445
'12#.#64.138.108':445
'12#.#64.99.206':445
'12#.#64.87.86':445
'12#.#64.29.162':445
'12#.#64.167.189':445
'12#.#64.87.2':445
'12#.#64.48.86':445
'12#.#64.127.212':445
'12#.#64.60.127':445
'12#.#64.217.205':445
'12#.#64.144.56':445
'12#.#64.166.132':445
'12#.#64.94.60':139
'12#.#64.133.181':139
'12#.#64.149.133':139
'12#.#64.181.68':139
'12#.#64.226.28':139
'12#.#64.253.148':139
'12#.#64.27.155':445
'12#.#64.246.77':445
'12#.#64.95.42':445
'12#.#64.246.106':445
'12#.#64.83.246':445
'12#.#64.145.95':445
'12#.#64.14.130':445
'12#.#64.234.189':445
'12#.#64.69.90':445
'12#.#64.178.14':445
'12#.#64.162.214':445
'12#.#64.183.254':445
'12#.#64.142.59':445
'12#.#64.16.115':445
'12#.#64.91.151':445
'12#.#64.21.122':445
'12#.#64.60.130':445
'12#.#64.118.169':445
'12#.#64.43.170':445
'12#.#64.89.224':445
'12#.#64.27.57':445
'12#.#64.57.145':445
'12#.#64.245.154':445
'12#.#64.72.212':139
'12#.#64.12.28':139
'12#.#64.214.74':139
'12#.#64.12.127':139
'12#.#64.172.85':139
'12#.#64.118.186':139
'12#.#64.50.198':445
'12#.#64.187.62':445
'12#.#64.6.213':445
'12#.#64.58.211':445
'12#.#64.254.153':445
'12#.#64.193.89':445
'12#.#64.7.235':445
'12#.#64.234.77':445
'12#.#64.71.68':445
'12#.#64.133.193':445
'12#.#64.21.8':445
'12#.#64.44.85':445
'12#.#64.183.28':445
'12#.#64.31.135':445
'12#.#64.46.21':445
'12#.#64.109.46':445
'12#.#64.178.16':445
'12#.#64.146.128':445
'12#.#64.17.56':445
'12#.#64.190.43':445
'12#.#64.91.157':445
'12#.#64.187.113':445
'12#.#64.13.137':445
'12#.#64.136.239':445
'12#.#64.248.220':445
'12#.#64.147.116':445
'12#.#64.180.183':445
'12#.#64.215.111':139
'12#.#64.89.224':139
'12#.#64.43.170':139
'12#.#64.245.154':139
'12#.#64.57.145':139
'12#.#64.27.57':139
'12#.#64.190.43':139
'12#.#64.146.128':139
'12#.#64.187.113':139
'12#.#64.178.16':139
'12#.#64.91.157':139
'12#.#64.17.56':139
'12#.#64.254.153':139
'12#.#64.91.151':139
'12#.#64.58.211':139
'12#.#64.142.59':139
'12#.#64.21.122':139
'12#.#64.6.213':139
'12#.#64.118.169':139
'12#.#64.16.115':139
'12#.#64.60.130':139
'12#.#64.187.62':139
'12#.#64.50.198':139
'12#.#64.44.85':139
'12#.#64.183.28':139
'12#.#64.31.135':139
'12#.#64.46.21':139
'12#.#64.109.46':139
'12#.#64.15.114':139
'12#.164.9.5':139
'12#.#64.127.207':139
'12#.#64.76.216':139
'12#.#64.254.177':139
'12#.#64.133.235':139
'12#.#64.136.239':139
'12#.#64.13.137':139
'12#.#64.248.220':139
'12#.#64.147.116':139
'12#.#64.180.183':139
'12#.#64.71.68':139
'12#.#64.7.235':139
'12#.#64.21.8':139
'12#.#64.234.77':139
'12#.#64.193.89':139
'12#.#64.133.193':139
'12#.#64.254.177':445
'12#.#64.134.75':139
'12#.#64.55.54':139
'12#.#64.108.59':139
'12#.#64.43.231':139
'12#.#64.54.179':139
'12#.#64.192.152':139
'12#.#64.33.71':445
'12#.#64.16.205':445
'12#.#64.166.185':139
'12#.#64.127.45':139
'12#.#64.253.48':139
'12#.#64.58.66':139
'12#.#64.45.28':139
'12#.#64.65.228':139
'12#.#64.16.40':139
'12#.#64.228.15':139
'12#.#64.245.208':139
'12#.#64.2.33':139
'12#.#64.14.111':139
'12#.#64.254.102':139
'12#.#64.64.159':139
'12#.#64.59.99':139
'12#.#64.178.203':445
'12#.#64.31.203':445
'12#.#64.125.226':445
'12#.#64.67.154':445
'12#.#64.104.196':445
'12#.#64.218.151':445
'12#.#64.208.195':445
'12#.#64.254.208':445
'12#.#64.28.4':445
'12#.#64.113.251':445
'12#.#64.33.96':445
'12#.#64.22.101':445
'12#.#64.177.135':445
'12#.#64.50.205':445
'12#.#64.97.235':445
'12#.#64.3.79':445
'12#.#64.180.177':445
'12#.#64.107.11':445
'12#.#64.137.11':445
'12#.#64.121.159':445
'12#.#64.206.180':445
'12#.#64.159.207':445
'12#.#64.30.62':139
'12#.#64.33.71':139
'12#.#64.16.205':139
'12#.#64.21.122':9988
'12#.#64.118.186':445
'12#.#64.187.62':9988
'12#.#64.97.235':139
'12#.#64.177.135':139
'12#.#64.180.177':139
'12#.#64.22.101':139
'12#.#64.3.79':139
'12#.#64.50.205':139
'12#.164.9.5':445
'12#.#64.127.207':445
'12#.#64.76.216':445
'12#.#64.15.114':445
'12#.#64.133.235':445
'12#.#64.215.111':445
'12#.#64.72.212':445
'12#.#64.12.28':445
'12#.#64.214.74':445
'12#.#64.12.127':445
'12#.#64.172.85':445
'12#.#64.208.195':139
'12#.#64.254.208':139
'12#.#64.28.4':139
'12#.#64.113.251':139
'12#.#64.33.96':139
'12#.#64.183.254':139
'12#.#64.153.115':139
'12#.#64.55.197':139
'12#.#64.115.172':139
'12#.#64.104.183':139
'12#.#64.196.49':139
'12#.#64.107.11':139
'12#.#64.137.11':139
'12#.#64.121.159':139
'12#.#64.206.180':139
'12#.#64.159.207':139
'12#.#64.67.154':139
'12#.#64.31.203':139
'12#.#64.218.151':139
'12#.#64.178.203':139
'12#.#64.104.196':139
'12#.#64.125.226':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней