Trojan.Starman.6603

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3e17.dir00\svchost.exe.mdmp 16325836412032272

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3e17.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#23.152.199':139
'19#.#23.16.81':139
'19#.#23.158.188':139
'19#.#23.184.26':139
'19#.#23.220.228':139
'19#.#23.180.19':139
'19#.#23.92.250':139
'19#.#23.91.35':139
'19#.#23.178.206':139
'19#.#23.180.86':139
'19#.#23.114.89':139
'19#.#23.40.252':139
'19#.#23.13.103':139
'19#.#23.173.4':139
'19#.#23.105.97':445
'19#.#23.87.32':445
'19#.#23.75.98':139
'19#.#23.38.231':139
'19#.#23.6.63':139
'19#.#23.158.243':139
'19#.#23.63.159':139
'19#.#23.180.10':139
'19#.#23.184.26':445
'19#.#23.220.228':445
'19#.#23.114.89':445
'19#.#23.75.98':445
'19#.#23.38.231':445
'19#.#23.178.206':445
'19#.#23.180.86':445
'19#.#23.16.81':445
'19#.#23.158.188':445
'19#.#23.152.199':445
'19#.#23.6.63':445
'19#.#23.95.251':139
'19#.#23.208.30':139
'19#.#23.251.134':139
'19#.#23.224.167':139
'19#.#23.135.224':139
'19#.#23.158.243':445
'19#.#23.63.159':445
'19#.#23.13.103':445
'19#.#23.173.4':445
'19#.#23.40.252':445
'19#.#23.54.132':139
'19#.#23.53.54':139
'19#.#23.29.94':139
'19#.#23.94.252':139
'19#.#23.155.94':139
'19#.#23.73.218':445
'19#.#23.88.229':445
'19#.#23.87.32':139
'19#.#23.97.53':139
'19#.#23.105.97':139
'19#.#23.22.168':139
'19#.#23.81.160':139
'19#.#23.204.218':139
'19#.#23.39.28':139
'19#.#23.9.166':139
'19#.#23.116.7':139
'19#.#23.193.253':139
'19#.#23.173.86':139
'19#.#23.253.239':139
'19#.#23.101.250':139
'19#.#23.24.22':139
'19#.#23.181.114':445
'19#.#23.22.168':445
'19#.#23.94.252':445
'19#.#23.173.86':445
'19#.#23.253.239':445
'19#.#23.193.253':445
'19#.#23.53.54':445
'19#.#23.97.53':445
'19#.#23.54.132':445
'19#.#23.155.94':445
'19#.#23.29.94':445
'19#.#23.24.22':445
'19#.#23.65.154':445
'19#.#23.9.166':445
'19#.#23.220.21':445
'19#.#23.254.186':445
'19#.#23.159.254':445
'19#.#23.204.218':445
'19#.#23.101.250':445
'19#.#23.81.160':445
'19#.#23.116.7':445
'19#.#23.39.28':445
'19#.#23.172.128':445
'19#.#23.69.156':445
'19#.#23.32.6':445
'19#.#23.60.122':445
'19#.#23.168.48':445
'19#.#23.204.58':139
'19#.#23.13.1':139
'19#.#23.144.177':139
'19#.#23.152.86':445
'19#.#23.148.83':445
'19#.#23.156.121':445
'19#.#23.82.160':445
'19#.#23.93.82':445
'19#.#23.35.207':445
'19#.#23.94.233':445
'19#.#23.164.95':445
'19#.#23.82.162':445
'19#.#23.113.55':445
'19#.#23.156.15':445
'19#.#23.182.217':445
'19#.#23.14.14':445
'19#.#23.229.219':139
'19#.#23.37.80':139
'19#.#23.206.249':139
'19#.#23.80.49':139
'19#.#23.12.238':139
'19#.#23.48.181':139
'19#.#23.57.161':139
'19#.#23.211.174':139
'19#.#23.177.222':139
'19#.#23.20.9':139
'19#.#23.28.149':139
'19#.#23.231.177':139
'19#.#23.253.10':139
'19#.#23.80.171':139
'19#.#23.61.104':139
'19#.#23.39.121':139
'19#.#23.152.22':139
'19#.#23.12.175':139
'19#.#23.122.138':139
'19#.#23.6.193':139
'19#.#23.138.155':139
'19#.#23.57.107':139
'19#.#23.88.210':139
'19#.#23.36.149':139
'19#.#23.205.96':139
'19#.#23.41.131':139
'19#.#23.124.100':139
'19#.#23.35.207':139
'19#.#23.82.160':139
'19#.#23.164.95':139
'19#.#23.35.61':139
'19#.#23.94.233':139
'19#.#23.56.226':139
'19#.#23.180.10':445
'19#.#23.224.167':445
'19#.#23.92.250':445
'19#.#23.91.35':445
'19#.#23.180.19':445
'19#.#23.208.30':445
'19#.#23.125.191':139
'19#.#23.95.251':445
'19#.#23.135.224':445
'19#.#23.251.134':445
'19#.#23.93.82':139
'19#.#23.56.226':445
'19#.#23.41.131':445
'19#.#23.125.191':445
'19#.#23.152.86':139
'19#.#23.148.83':139
'19#.#23.36.149':445
'19#.#23.35.61':445
'19#.#23.88.210':445
'19#.#23.124.100':445
'19#.#23.205.96':445
'19#.#23.69.156':139
'19#.#23.82.162':139
'19#.#23.113.55':139
'19#.#23.156.15':139
'19#.#23.182.217':139
'19#.#23.14.14':139
'19#.#23.32.6':139
'19#.#23.172.128':139
'19#.#23.168.48':139
'19#.#23.156.121':139
'19#.#23.60.122':139
'19#.#23.75.155':445
'19#.#23.190.252':445
'19#.#23.77.123':445
'19#.#23.63.211':445
'19#.#23.182.33':445
'19#.#23.45.60':445
'19#.#23.122.219':445
'19#.#23.16.125':445
'19#.#23.232.225':445
'19#.#23.173.149':445
'19#.#23.27.215':445
'19#.#23.93.96':139
'19#.#23.196.183':139
'19#.#23.202.40':139
'19#.#23.239.147':139
'19#.#23.9.165':139
'19#.#23.244.209':445
'19#.#23.224.156':445
'19#.#23.74.181':139
'19#.#23.59.18':139
'19#.#23.181.81':139
'19#.#23.252.226':445
'19#.#23.227.15':445
'19#.#23.16.6':445
'19#.#23.69.26':445
'19#.#23.150.77':445
'19#.#23.125.205':445
'19#.#23.240.249':445
'19#.#23.171.191':445
'19#.#23.198.154':445
'19#.#23.249.131':445
'19#.#23.6.171':445
'19#.#23.224.194':445
'19#.#23.99.125':445
'19#.#23.66.100':445
'19#.#23.52.125':445
'19#.#23.241.119':445
'19#.#23.56.143':445
'19#.#23.62.145':445
'19#.#23.186.8':445
'19#.#23.105.148':445
'19#.#23.40.141':445
'19#.#23.58.117':445
'19#.#23.241.119':139
'19#.#23.56.143':139
'19#.#23.252.226':139
'19#.#23.45.60':139
'19#.#23.122.219':139
'19#.#23.40.141':139
'19#.#23.58.117':139
'19#.#23.66.100':139
'19#.#23.52.125':139
'19#.#23.99.125':139
'19#.#23.16.125':139
'19#.#23.244.209':139
'19#.#23.224.156':139
'19#.#23.182.33':139
'19#.#23.27.215':139
'19#.#23.63.211':139
'19#.#23.232.225':139
'19#.#23.173.149':139
'19#.#23.75.155':139
'19#.#23.77.123':139
'19#.#23.190.252':139
'19#.#23.105.148':139
'19#.#23.51.136':139
'19#.#23.171.61':139
'19#.#23.89.117':139
'19#.#23.240.249':139
'19#.#23.171.191':139
'19#.#23.248.225':139
'19#.#23.120.66':139
'19#.#23.226.111':139
'19#.#23.131.92':139
'19#.#23.111.202':139
'19#.#23.198.154':139
'19#.#23.150.77':139
'19#.#23.125.205':139
'19#.#23.224.194':139
'19#.#23.62.145':139
'19#.#23.186.8':139
'19#.#23.249.131':139
'19#.#23.6.171':139
'19#.#23.227.15':139
'19#.#23.69.26':139
'19#.#23.16.6':139
'19#.#23.95.212':445
'19#.#23.88.95':445
'19#.#23.212.31':445
'19#.#23.17.73':445
'19#.#23.91.232':445
'19#.#23.23.200':445
'19#.#23.22.18':445
'19#.#23.61.252':445
'19#.#23.148.88':445
'19#.#23.110.114':445
'19#.#23.219.211':139
'19#.#23.31.167':139
'19#.#23.194.208':139
'19#.#23.228.64':139
'19#.#23.186.177':139
'19#.#23.122.211':139
'19#.#23.120.174':139
'19#.#23.196.231':139
'19#.#23.25.61':139
'19#.#23.48.114':139
'19#.#23.140.57':139
'19#.#23.47.82':445
'19#.#23.73.218':139
'19#.#23.88.229':139
'19#.#23.219.211':445
'19#.#23.120.174':445
'19#.#23.196.231':445
'19#.#23.220.21':139
'19#.#23.65.154':139
'19#.#23.159.254':139
'19#.#23.181.114':139
'19#.#23.254.186':139
'19#.#23.25.61':445
'19#.#23.186.177':445
'19#.#23.122.211':445
'19#.#23.36.195':445
'19#.#23.27.214':445
'19#.#23.133.45':445
'19#.#23.48.114':445
'19#.#23.140.57':445
'19#.#23.194.208':445
'19#.#23.228.64':445
'19#.#23.31.167':445
'19#.#23.181.81':445
'19#.#23.74.181':445
'19#.#23.59.18':445
'19#.#23.93.96':445
'19#.#23.196.183':445
'19#.#23.182.33':9988
'19#.#23.63.211':9988
'19#.#23.77.123':9988
'19#.#23.244.209':9988
'19#.#23.224.156':9988
'19#.#23.202.40':445
'19#.#23.131.92':445
'19#.#23.111.202':445
'19#.#23.171.61':445
'19#.#23.89.117':445
'19#.#23.51.136':445
'19#.#23.239.147':445
'19#.#23.9.165':445
'19#.#23.120.66':445
'19#.#23.226.111':445
'19#.#23.248.225':445
'19#.#23.52.125':9988
'19#.#23.61.252':139
'19#.#23.23.200':139
'19#.#23.110.114':139
'19#.#23.88.95':139
'19#.#23.148.88':139
'19#.#23.133.45':139
'19#.#23.36.195':139
'19#.#23.27.214':139
'19#.#23.22.18':139
'19#.#23.47.82':139
'19#.#23.95.212':139
'19#.#23.186.8':9988
'19#.#23.224.194':9988
'19#.#23.62.145':9988
'19#.#23.66.100':9988
'19#.#23.40.141':9988
'19#.#23.91.232':139
'19#.#23.212.31':139
'19#.#23.17.73':139
'19#.#23.69.26':9988
'19#.#23.227.15':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней