Trojan.Starman.6524

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER703b.dir00\svchost.exe.mdmp 16325836412029916

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER703b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#41.149.115':445
'21#.#41.17.115':445
'21#.#41.96.9':445
'21#.#41.193.240':445
'21#.#41.154.202':445
'21#.#41.220.63':445
'21#.#41.89.130':445
'21#.#41.124.118':445
'21#.#41.63.234':445
'21#.#41.243.192':139
'21#.#41.83.129':139
'21#.#41.51.64':139
'21#.#41.214.10':139
'21#.#41.75.105':139
'21#.#41.145.36':139
'21#.#41.77.208':445
'21#.#41.94.159':139
'21#.#41.37.45':139
'21#.#41.175.184':445
'21#.#41.177.167':445
'21#.#41.24.177':445
'21#.#41.22.103':445
'21#.#41.168.22':445
'21#.#41.9.157':445
'21#.#41.241.4':445
'21#.#41.78.227':445
'21#.#41.21.136':445
'21#.#41.190.26':445
'21#.#41.76.70':445
'21#.#41.76.198':445
'21#.#41.233.244':445
'21#.#41.20.237':445
'21#.#41.44.104':445
'21#.#41.39.123':445
'21#.#41.131.143':445
'21#.#41.26.134':445
'21#.#41.242.26':445
'21#.#41.163.166':139
'21#.#41.26.134':139
'21#.#41.242.26':139
'21#.#41.76.198':139
'21#.#41.44.104':139
'21#.#41.39.123':139
'21#.#41.168.22':139
'21#.#41.177.167':139
'21#.#41.131.143':139
'21#.#41.22.103':139
'21#.#41.63.234':139
'21#.#41.220.63':139
'21#.#41.154.202':139
'21#.#41.124.118':139
'21#.#41.89.130':139
'21#.#41.20.237':139
'21#.#41.76.70':139
'21#.#41.175.184':139
'21#.#41.233.244':139
'21#.#41.24.177':139
'21#.#41.29.151':139
'21#.#41.161.29':139
'21#.#41.43.61':139
'21#.#41.7.121':139
'21#.#41.168.75':139
'21#.#41.184.176':139
'21#.#41.182.225':139
'21#.#41.141.197':139
'21#.#41.208.157':139
'21#.#41.190.26':139
'21#.#41.241.4':139
'21#.#41.9.157':139
'21#.#41.21.136':139
'21#.#41.78.227':139
'21#.#41.5.39':139
'21#.#41.27.74':139
'21#.#41.80.45':139
'21#.#41.128.48':139
'21#.#41.80.45':445
'21#.#41.31.157':139
'21#.#41.173.252':139
'21#.#41.31.208':139
'21#.#41.2.93':139
'21#.#41.241.82':139
'21#.#41.8.211':139
'21#.#41.78.103':139
'21#.#41.178.212':139
'21#.#41.112.236':139
'21#.#41.30.193':139
'21#.#41.63.223':139
'21#.#41.177.79':139
'21#.#41.64.142':139
'21#.#41.221.192':139
'21#.#41.105.140':139
'21#.#41.156.181':139
'21#.#41.113.90':139
'21#.#41.244.190':139
'21#.#41.54.102':139
'21#.#41.31.240':139
'21#.#41.196.24':139
'21#.#41.115.88':139
'21#.#41.239.179':139
'21#.#41.193.165':139
'21#.#41.121.67':445
'21#.#41.194.78':445
'21#.#41.14.219':139
'21#.#41.201.108':445
'21#.#41.71.22':139
'21#.#41.166.202':139
'21#.#41.68.224':139
'21#.#41.122.85':139
'21#.#41.67.5':139
'21#.#41.35.61':139
'21#.#41.18.93':139
'21#.#41.167.66':139
'21#.#41.90.132':139
'21#.#41.141.18':139
'21#.#41.182.225':445
'21#.#41.163.166':445
'21#.#41.208.157':445
'21#.#41.184.176':445
'21#.#41.51.64':445
'21#.#41.83.129':445
'21#.#41.75.105':445
'21#.#41.214.10':445
'21#.#41.243.192':445
'21#.#41.27.74':445
'21#.#41.43.61':445
'21#.#41.128.48':445
'21#.#41.5.39':445
'21#.#41.7.121':445
'21#.#41.168.75':445
'21#.#41.141.197':445
'21#.#41.29.151':445
'21#.#41.161.29':445
'21#.#41.94.159':445
'21#.#41.18.82':139
'21#.#41.27.164':139
'21#.#41.115.0':139
'21#.#41.70.37':139
'21#.#41.56.212':139
'21#.#41.84.133':139
'21#.#41.198.52':139
'21#.#41.47.57':139
'21#.#41.73.199':139
'21#.#41.201.108':139
'21#.#41.121.67':139
'21#.#41.37.45':445
'21#.#41.145.36':445
'21#.#41.194.78':139
'21#.#41.189.170':139
'21#.#41.65.179':139
'21#.#41.187.194':139
'21#.#41.232.187':139
'21#.#41.17.115':139
'21#.#41.181.70':139
'21#.#41.2.49':139
'21#.#41.96.189':139
'21#.#41.70.181':139
'21#.#41.128.105':445
'21#.#41.2.223':445
'21#.#41.2.74':445
'21#.#41.41.39':445
'21#.#41.149.225':445
'21#.#41.34.123':139
'21#.#41.33.93':139
'21#.#41.209.247':139
'21#.#41.78.1':139
'21#.#41.240.81':139
'21#.#41.97.253':139
'21#.#41.180.206':139
'21#.#41.144.204':139
'21#.#41.141.171':139
'21#.#41.181.225':445
'21#.#41.47.50':445
'21#.#41.22.239':445
'21#.#41.199.150':445
'21#.#41.153.44':445
'21#.#41.143.70':445
'21#.#41.39.97':445
'21#.#41.187.134':445
'21#.#41.83.124':445
'21#.#41.105.83':445
'21#.#41.25.214':445
'21#.#41.88.71':445
'21#.#41.246.234':445
'21#.#41.172.226':445
'21#.#41.158.86':445
'21#.#41.93.114':445
'21#.#41.171.110':445
'21#.#41.179.179':445
'21#.#41.141.9':445
'21#.#41.183.229':139
'21#.#41.179.179':139
'21#.#41.141.9':139
'21#.#41.88.71':139
'21#.#41.158.86':139
'21#.#41.93.114':139
'21#.#41.153.44':139
'21#.#41.47.50':139
'21#.#41.171.110':139
'21#.#41.199.150':139
'21#.#41.149.225':139
'21#.#41.2.223':139
'21#.#41.128.105':139
'21#.#41.41.39':139
'21#.#41.2.74':139
'21#.#41.172.226':139
'21#.#41.25.214':139
'21#.#41.181.225':139
'21#.#41.246.234':139
'21#.#41.22.239':139
'21#.#41.230.100':139
'21#.#41.12.201':139
'21#.#41.146.0':139
'21#.#41.247.236':139
'21#.#41.240.79':139
'21#.#41.197.42':139
'21#.#41.204.114':139
'21#.#41.171.205':139
'21#.#41.43.109':139
'21#.#41.105.83':139
'21#.#41.39.97':139
'21#.#41.143.70':139
'21#.#41.83.124':139
'21#.#41.187.134':139
'21#.#41.73.2':139
'21#.#41.126.11':139
'21#.#41.57.45':139
'21#.#41.41.215':139
'21#.#41.57.45':445
'21#.#41.49.169':139
'21#.#41.228.59':139
'21#.#41.127.94':139
'21#.#41.20.75':139
'21#.#41.17.195':139
'21#.#41.49.49':139
'21#.#41.151.27':139
'21#.#41.90.204':139
'21#.#41.163.85':139
'21#.#41.230.100':9988
'21#.#41.240.79':9988
'21#.#41.146.0':9988
'21#.#41.247.236':9988
'21#.#41.171.205':9988
'21#.#41.197.178':139
'21#.#41.103.197':139
'21#.#41.43.109':9988
'21#.#41.197.42':9988
'21#.#41.148.1':139
'21#.#41.151.27':445
'21#.#41.148.1':445
'21#.#41.163.85':445
'21#.#41.49.49':445
'21#.#41.170.131':445
'21#.#41.193.240':139
'21#.#41.149.115':139
'21#.#41.77.208':139
'21#.#41.96.9':139
'21#.#41.103.197':445
'21#.#41.127.94':445
'21#.#41.170.131':139
'21#.#41.197.178':445
'21#.#41.20.75':445
'21#.#41.17.195':445
'21#.#41.90.204':445
'21#.#41.49.169':445
'21#.#41.228.59':445
'21#.#41.126.11':9988
'21#.#41.204.114':445
'21#.#41.183.229':445
'21#.#41.43.109':445
'21#.#41.197.42':445
'21#.#41.209.247':445
'21#.#41.33.93':445
'21#.#41.240.81':445
'21#.#41.78.1':445
'21#.#41.34.123':445
'21#.#41.126.11':445
'21#.#41.146.0':445
'21#.#41.41.215':445
'21#.#41.73.2':445
'21#.#41.247.236':445
'21#.#41.240.79':445
'21#.#41.171.205':445
'21#.#41.230.100':445
'21#.#41.12.201':445
'21#.#41.144.204':445
'21#.#41.153.44':9988
'21#.#41.47.50':9988
'21#.#41.2.74':9988
'21#.#41.141.9':9988
'21#.#41.22.239':9988
'21#.#41.57.45':9988
'21#.#41.73.2':9988
'21#.#41.143.70':9988
'21#.#41.39.97':9988
'21#.#41.180.206':445
'21#.#41.96.189':445
'21#.#41.141.171':445
'21#.#41.97.253':445
'21#.#41.70.181':445
'21#.#41.2.223':9988
'21#.#41.128.105':9988
'21#.#41.181.70':445
'21#.#41.2.49':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней