Trojan.Starman.6560

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa796.dir00\svchost.exe.mdmp 16325836412032220

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa796.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#6.233.135':139
'21#.#6.146.218':139
'21#.#6.62.211':139
'21#.#6.207.127':445
'21#.#6.76.34':445
'21#.#6.252.236':139
'21#.#6.161.141':139
'21#.#6.112.104':139
'21#.#6.8.253':139
'21#.#6.204.62':139
'21#.#6.101.197':445
'21#.#6.165.174':445
'21#.#6.199.135':445
'21#.#6.20.157':445
'21#.#6.145.109':445
'21#.#6.63.35':445
'21#.#6.86.198':445
'21#.#6.137.32':445
'21#.#6.77.189':445
'21#.#6.235.242':445
'21#.#6.71.161':139
'21#.#6.140.93':139
'21#.#6.172.173':139
'21#.#6.134.78':139
'21#.#6.175.140':139
'21#.#6.80.115':139
'21#.#6.135.164':139
'21#.#6.48.123':139
'21#.#6.163.187':139
'21#.#6.128.164':139
'21#.#6.187.218':139
'21#.#6.8.253':445
'21#.#6.204.62':445
'21#.#6.146.218':445
'21#.#6.62.211':445
'21#.#6.233.135':445
'21#.#6.71.161':445
'21#.#6.142.168':139
'21#.#6.161.141':445
'21#.#6.112.104':445
'21#.#6.252.236':445
'21#.#6.40.187':445
'21#.#6.76.44':445
'21#.#6.50.223':445
'21#.#6.76.34':139
'21#.#6.230.159':445
'21#.#6.204.211':445
'21#.#6.183.64':445
'21#.#6.124.60':445
'21#.#6.74.218':445
'21#.#6.74.65':445
'21#.#6.165.174':139
'21#.#6.77.189':139
'21#.#6.101.197':139
'21#.#6.145.109':139
'21#.#6.199.135':139
'21#.#6.86.198':139
'21#.#6.207.127':139
'21#.#6.63.35':139
'21#.#6.235.242':139
'21#.#6.137.32':139
'21#.#6.203.211':445
'21#.#6.209.198':445
'21#.#6.182.244':445
'21#.#6.218.6':445
'21#.#6.149.55':445
'21#.#6.130.86':445
'21#.16.1.46':445
'21#.#6.90.70':445
'21#.#6.30.100':445
'21#.#6.225.189':445
'21#.#6.99.226':445
'21#.#6.140.73':445
'21#.#6.102.88':445
'21#.#6.148.217':445
'21#.#6.19.46':445
'21#.#6.63.30':445
'21#.#6.249.42':445
'21#.#6.153.249':445
'21#.#6.82.214':445
'21#.#6.93.15':445
'21#.#6.190.63':445
'21#.#6.155.50':445
'21#.#6.13.163':445
'21#.#6.66.170':445
'21#.#6.23.90':445
'21#.#6.170.23':445
'21#.#6.115.21':445
'21#.#6.73.84':445
'21#.#6.253.251':445
'21#.16.81.4':445
'21#.#6.66.181':445
'21#.#6.4.129':445
'21#.#6.82.12':445
'21#.#6.50.42':445
'21#.#6.48.123':445
'21#.#6.98.100':445
'21#.#6.16.105':445
'21#.#6.86.54':445
'21#.#6.17.38':445
'21#.#6.68.200':445
'21#.#6.138.221':445
'21#.#6.239.137':445
'21#.#6.165.91':139
'21#.#6.206.165':139
'21#.#6.91.84':139
'21#.#6.145.35':445
'21#.#6.78.228':139
'21#.#6.7.196':139
'21#.#6.250.58':139
'21#.#6.195.234':139
'21#.#6.248.79':139
'21#.#6.68.68':139
'21#.#6.85.45':445
'21#.#6.180.13':445
'21#.#6.41.46':445
'21#.#6.239.120':445
'21#.#6.167.75':445
'21#.#6.83.250':445
'21#.#6.71.232':445
'21#.#6.36.100':445
'21#.#6.86.51':445
'21#.#6.37.59':445
'21#.#6.13.163':139
'21#.16.81.4':139
'21#.#6.155.50':139
'21#.#6.170.23':139
'21#.#6.66.170':139
'21#.#6.73.84':139
'21#.#6.239.137':139
'21#.#6.115.21':139
'21#.#6.66.181':139
'21#.#6.253.251':139
'21#.#6.82.12':139
'21#.#6.68.200':139
'21#.#6.4.129':139
'21#.#6.98.100':139
'21#.#6.50.42':139
'21#.#6.86.54':139
'21#.#6.23.90':139
'21#.#6.16.105':139
'21#.#6.138.221':139
'21#.#6.17.38':139
'21#.#6.239.120':139
'21#.#6.134.78':445
'21#.#6.140.93':445
'21#.#6.80.115':445
'21#.#6.142.168':445
'21#.#6.175.140':445
'21#.#6.163.187':445
'21#.#6.135.164':445
'21#.#6.187.218':445
'21#.#6.172.173':445
'21#.#6.128.164':445
'21#.#6.180.13':139
'21#.#6.86.51':139
'21#.#6.85.45':139
'21#.#6.167.75':139
'21#.#6.41.46':139
'21#.#6.71.232':139
'21#.#6.145.35':139
'21#.#6.83.250':139
'21#.#6.37.59':139
'21#.#6.36.100':139
'21#.#6.151.120':445
'21#.#6.111.61':445
'21#.#6.234.159':445
'21#.#6.19.253':445
'21#.#6.130.220':445
'21#.#6.70.97':445
'21#.#6.151.30':445
'21#.#6.48.105':445
'21#.#6.102.171':445
'21#.#6.22.80':445
'21#.#6.114.165':139
'21#.#6.31.114':139
'21#.#6.165.56':139
'21#.#6.39.217':139
'21#.#6.52.237':139
'21#.16.6.28':139
'21#.#6.27.235':139
'21#.#6.23.203':139
'21#.#6.255.46':139
'21#.#6.130.13':139
'21#.#6.115.2':445
'21#.#6.192.153':445
'21#.#6.36.192':445
'21#.#6.153.115':445
'21#.#6.4.104':445
'21#.#6.115.157':445
'21#.#6.103.220':445
'21#.#6.19.172':445
'21#.#6.236.200':445
'21#.#6.125.49':445
'21#.#6.48.86':445
'21#.#6.175.83':445
'21#.#6.19.11':445
'21#.#6.42.100':445
'21#.#6.18.140':445
'21#.#6.100.171':445
'21#.#6.125.92':445
'21#.#6.61.246':445
'21#.#6.160.230':445
'21#.#6.247.15':445
'21#.#6.133.249':445
'21#.#6.42.100':139
'21#.#6.175.83':139
'21#.#6.100.171':139
'21#.#6.115.2':139
'21#.#6.18.140':139
'21#.#6.160.230':139
'21#.#6.133.249':139
'21#.#6.61.246':139
'21#.#6.19.11':139
'21#.#6.247.15':139
'21#.#6.130.220':139
'21#.#6.102.171':139
'21#.#6.234.159':139
'21#.#6.19.253':139
'21#.#6.151.120':139
'21#.#6.70.97':139
'21#.#6.151.30':139
'21#.#6.48.105':139
'21#.#6.111.61':139
'21#.#6.22.80':139
'21#.#6.125.92':139
'21#.#6.202.213':139
'21#.#6.111.203':139
'21#.#6.38.144':139
'21#.#6.27.214':139
'21#.#6.144.27':139
'21#.#6.102.48':139
'21#.#6.89.98':139
'21#.#6.250.60':139
'21#.#6.58.174':139
'21#.#6.73.173':139
'21#.#6.192.153':139
'21#.#6.36.192':139
'21#.#6.153.115':139
'21#.#6.4.104':139
'21#.#6.115.157':139
'21#.#6.103.220':139
'21#.#6.19.172':139
'21#.#6.236.200':139
'21#.#6.125.49':139
'21#.#6.48.86':139
'21#.#6.76.44':139
'21#.#6.74.218':139
'21#.#6.40.187':139
'21#.#6.230.159':139
'21#.#6.50.223':139
'21#.#6.183.64':139
'21#.#6.203.211':139
'21#.#6.204.211':139
'21#.#6.74.65':139
'21#.#6.124.60':139
'21#.#6.156.162':445
'21#.16.1.51':445
'21#.#6.161.222':445
'21#.#6.159.236':139
'21#.#6.170.89':445
'21#.#6.233.142':445
'21#.#6.159.236':445
'21#.#6.43.82':445
'21#.#6.110.94':445
'21#.#6.166.3':445
'21#.#6.19.46':139
'21#.#6.182.244':139
'21#.#6.225.189':139
'21#.#6.209.198':139
'21#.#6.130.86':139
'21#.#6.218.6':139
'21#.#6.90.70':139
'21#.#6.20.157':139
'21#.16.1.46':139
'21#.#6.99.226':139
'21#.#6.30.100':139
'21#.#6.102.88':139
'21#.#6.93.15':139
'21#.#6.140.73':139
'21#.#6.63.30':139
'21#.#6.148.217':139
'21#.#6.153.249':139
'21#.#6.149.55':139
'21#.#6.249.42':139
'21#.#6.190.63':139
'21#.#6.82.214':139
'21#.#6.114.165':445
'21#.#6.31.114':445
'21#.#6.165.56':445
'21#.#6.39.217':445
'21#.#6.52.237':445
'21#.16.6.28':445
'21#.#6.27.235':445
'21#.#6.23.203':445
'21#.#6.255.46':445
'21#.#6.130.13':445
'21#.#6.202.213':445
'21#.#6.111.203':445
'21#.#6.38.144':445
'21#.#6.27.214':445
'21#.#6.144.27':445
'21#.#6.102.48':445
'21#.#6.89.98':445
'21#.#6.250.60':445
'21#.#6.58.174':445
'21#.#6.73.173':445
'21#.#6.111.61':9988
'21#.#6.161.222':139
'21#.#6.156.162':139
'21#.#6.170.89':139
'21#.#6.153.115':9988
'21#.#6.36.192':9988
'21#.#6.43.82':139
'21#.#6.233.142':139
'21#.#6.166.3':139
'21#.16.1.51':139
'21#.#6.110.94':139
'21#.#6.115.2':9988
'21#.#6.18.140':9988
'21#.#6.151.30':9988
'21#.#6.48.105':9988
'21#.#6.70.97':9988
'21#.#6.4.104':9988
'21#.#6.115.157':9988
'21#.#6.133.249':9988
'21#.#6.100.171':9988
'21#.#6.19.11':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней