Trojan.Starman.6375

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa2b5.dir00\svchost.exe.mdmp 16325836412032252

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa2b5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#8.122.228':139
'21#.#8.87.254':139
'21#.#8.111.183':139
'21#.#8.223.2':139
'21#.#8.183.47':139
'21#.#8.36.208':139
'21#.#8.223.2':445
'21#.#8.167.109':139
'21#.#8.141.155':139
'21#.#8.52.114':139
'21#.#8.92.30':445
'21#.#8.87.155':445
'21#.#8.251.175':445
'21#.#8.25.85':445
'21#.#8.237.136':445
'21#.#8.107.186':445
'21#.#8.104.148':445
'21#.#8.183.231':445
'21#.#8.41.198':445
'21#.#8.32.44':445
'21#.#8.147.231':139
'21#.#8.52.241':139
'21#.#8.141.236':139
'21#.#8.231.71':139
'21#.#8.168.230':139
'21#.#8.47.164':139
'21#.#8.135.132':139
'21#.#8.48.151':139
'21#.#8.25.53':139
'21#.#8.103.159':139
'21#.#8.87.254':445
'21#.#8.141.155':445
'21#.#8.122.228':445
'21#.#8.183.47':445
'21#.#8.111.183':445
'21#.#8.217.137':139
'21#.#8.44.221':139
'21#.#8.36.208':445
'21#.#8.52.114':445
'21#.#8.167.109':445
'21#.#8.232.43':445
'21#.#8.30.134':445
'21#.#8.158.134':445
'21#.#8.111.27':445
'21#.#8.19.114':445
'21#.#8.208.34':445
'21#.#8.95.130':445
'21#.#8.109.95':445
'21#.#8.130.125':445
'21#.#8.99.234':445
'21#.#8.55.187':445
'21#.#8.87.155':139
'21#.#8.41.198':139
'21#.#8.92.30':139
'21#.#8.237.136':139
'21#.#8.251.175':139
'21#.#8.104.148':139
'21#.#8.125.20':445
'21#.#8.107.186':139
'21#.#8.32.44':139
'21#.#8.183.231':139
'21#.#8.147.19':445
'21#.#8.217.113':445
'21#.#8.183.167':445
'21#.#8.202.213':445
'21#.#8.45.254':445
'21#.#8.111.190':445
'21#.#8.162.109':445
'21#.#8.36.19':445
'21#.#8.229.209':445
'21#.#8.32.108':445
'21#.#8.99.122':445
'21#.#8.122.70':445
'21#.#8.75.37':445
'21#.#8.11.145':445
'21#.#8.36.219':445
'21#.#8.159.77':445
'21#.#8.223.125':445
'21#.#8.177.213':445
'21#.#8.173.58':445
'21#.#8.109.34':445
'21#.#8.137.59':445
'21#.#8.19.237':445
'21#.#8.59.91':445
'21#.#8.53.21':445
'21#.#8.29.34':445
'21#.#8.6.109':445
'21#.#8.208.87':445
'21#.#8.113.1':445
'21#.#8.90.218':445
'21#.38.1.74':445
'21#.#8.108.42':445
'21#.#8.130.127':445
'21#.#8.238.26':445
'21#.#8.135.132':445
'21#.#8.63.211':445
'21#.#8.222.22':445
'21#.#8.134.205':445
'21#.#8.112.21':445
'21#.#8.90.141':445
'21#.#8.139.229':445
'21#.#8.217.73':139
'21#.#8.159.188':139
'21#.#8.73.57':139
'21#.#8.152.140':445
'21#.#8.149.98':139
'21#.#8.36.88':139
'21#.38.6.17':139
'21#.#8.253.120':139
'21#.#8.192.232':139
'21#.#8.63.192':139
'21#.#8.100.116':445
'21#.#8.43.236':445
'21#.#8.134.15':445
'21#.#8.219.67':445
'21#.#8.214.200':445
'21#.#8.210.106':445
'21#.#8.185.209':445
'21#.#8.41.87':445
'21#.#8.62.122':445
'21#.#8.153.245':445
'21#.#8.47.164':445
'21#.#8.19.237':139
'21#.#8.90.218':139
'21#.#8.137.59':139
'21#.#8.29.34':139
'21#.#8.59.91':139
'21#.#8.208.87':139
'21#.#8.219.67':139
'21#.#8.6.109':139
'21#.38.1.74':139
'21#.#8.113.1':139
'21#.#8.130.127':139
'21#.#8.90.141':139
'21#.#8.108.42':139
'21#.#8.63.211':139
'21#.#8.238.26':139
'21#.#8.134.205':139
'21#.#8.53.21':139
'21#.#8.222.22':139
'21#.#8.139.229':139
'21#.#8.112.21':139
'21#.#8.168.230':445
'21#.#8.141.236':445
'21#.#8.231.71':445
'21#.#8.217.137':445
'21#.#8.44.221':445
'21#.#8.103.159':445
'21#.#8.48.151':445
'21#.#8.25.53':445
'21#.#8.147.231':445
'21#.#8.52.241':445
'21#.#8.43.236':139
'21#.#8.62.122':139
'21#.#8.100.116':139
'21#.#8.214.200':139
'21#.#8.134.15':139
'21#.#8.185.209':139
'21#.#8.152.140':139
'21#.#8.210.106':139
'21#.#8.153.245':139
'21#.#8.41.87':139
'21#.#8.114.254':445
'21#.#8.114.20':445
'21#.#8.250.47':445
'21#.#8.83.108':445
'21#.#8.23.206':445
'21#.#8.53.217':445
'21#.#8.157.181':445
'21#.#8.111.122':445
'21#.#8.140.83':445
'21#.#8.28.216':445
'21#.#8.37.174':139
'21#.#8.20.38':139
'21#.#8.156.145':139
'21#.#8.71.125':139
'21#.#8.41.217':139
'21#.#8.141.195':139
'21#.#8.129.206':139
'21#.#8.198.211':139
'21#.#8.101.47':139
'21#.#8.69.187':139
'21#.#8.29.224':445
'21#.#8.62.217':445
'21#.#8.155.0':445
'21#.#8.184.150':445
'21#.#8.216.184':445
'21#.38.14.7':445
'21#.#8.29.222':445
'21#.#8.147.138':445
'21#.#8.2.225':445
'21#.#8.159.1':445
'21#.#8.11.55':445
'21#.#8.230.11':445
'21#.#8.12.204':445
'21#.#8.170.18':445
'21#.#8.83.161':445
'21#.#8.19.107':445
'21#.#8.150.175':445
'21#.#8.73.187':445
'21#.#8.236.229':445
'21#.#8.234.194':445
'21#.#8.54.71':139
'21#.#8.11.55':139
'21#.#8.230.11':139
'21#.#8.12.204':139
'21#.#8.170.18':139
'21#.#8.83.161':139
'21#.#8.19.107':139
'21#.#8.150.175':139
'21#.#8.73.187':139
'21#.#8.236.229':139
'21#.#8.234.194':139
'21#.#8.250.47':139
'21#.#8.114.20':139
'21#.#8.114.254':139
'21#.#8.83.108':139
'21#.#8.140.83':139
'21#.#8.53.217':139
'21#.#8.157.181':139
'21#.#8.111.122':139
'21#.#8.23.206':139
'21#.#8.28.216':139
'21#.#8.160.147':139
'21#.#8.92.195':139
'21#.#8.166.178':139
'21#.#8.255.30':139
'21#.#8.115.204':139
'21#.#8.67.47':139
'21#.#8.85.222':139
'21#.#8.236.152':139
'21#.#8.229.151':139
'21#.#8.244.19':139
'21#.#8.29.224':139
'21#.#8.62.217':139
'21#.#8.155.0':139
'21#.#8.184.150':139
'21#.#8.216.184':139
'21#.38.14.7':139
'21#.#8.29.222':139
'21#.#8.147.138':139
'21#.#8.2.225':139
'21#.#8.159.1':139
'21#.#8.99.234':139
'21#.#8.55.187':139
'21#.#8.158.134':139
'21#.#8.111.27':139
'21#.#8.30.134':139
'21#.#8.11.145':139
'21#.#8.36.219':139
'21#.#8.109.95':139
'21#.#8.130.125':139
'21#.#8.95.130':139
'21#.#8.97.171':445
'21#.#8.183.137':445
'21#.#8.20.206':445
'21#.#8.17.20':445
'21#.#8.12.86':445
'21#.#8.19.114':139
'21#.#8.208.34':139
'21#.#8.125.20':139
'21#.#8.239.46':445
'21#.#8.6.114':445
'21#.#8.229.209':139
'21#.#8.32.108':139
'21#.#8.217.113':139
'21#.#8.183.167':139
'21#.#8.147.19':139
'21#.#8.232.43':139
'21#.#8.25.85':139
'21#.#8.162.109':139
'21#.#8.36.19':139
'21#.#8.111.190':139
'21#.#8.173.58':139
'21#.#8.109.34':139
'21#.#8.122.70':139
'21#.#8.75.37':139
'21#.#8.99.122':139
'21#.#8.202.213':139
'21#.#8.45.254':139
'21#.#8.223.125':139
'21#.#8.177.213':139
'21#.#8.159.77':139
'21#.#8.39.53':445
'21#.#8.156.145':445
'21#.#8.37.174':445
'21#.#8.41.217':445
'21#.#8.54.71':445
'21#.#8.71.125':445
'21#.#8.198.211':445
'21#.#8.141.195':445
'21#.#8.69.187':445
'21#.#8.20.38':445
'21#.#8.101.47':445
'21#.#8.160.147':445
'21#.#8.92.195':445
'21#.#8.166.178':445
'21#.#8.255.30':445
'21#.#8.115.204':445
'21#.#8.85.222':445
'21#.#8.67.47':445
'21#.#8.236.152':445
'21#.#8.229.151':445
'21#.#8.244.19':445
'21#.#8.12.86':139
'21#.#8.20.206':139
'21#.#8.17.20':139
'21#.#8.26.174':139
'21#.#8.39.53':139
'21#.#8.6.114':139
'21#.#8.26.174':445
'21#.#8.239.46':139
'21#.#8.97.171':139
'21#.#8.183.137':139
'21#.#8.250.47':9988
'21#.#8.83.161':9988
'21#.#8.28.216':9988
'21#.#8.129.206':445
'21#.#8.157.181':9988
'21#.#8.229.151':9988
'21#.#8.141.195':9988
'21#.#8.115.204':9988
'21#.#8.11.55':9988
'21#.#8.29.222':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней