Trojan.Starman.6357

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERb765.dir00\svchost.exe.mdmp 16325836412032092

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb765.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#4.248.181':445
'21#.24.0.12':445
'21#.#4.205.206':445
'21#.#4.190.242':445
'21#.#4.243.190':445
'21#.#4.190.108':445
'21#.#4.236.159':445
'21#.#4.43.184':445
'21#.#4.176.146':445
'21#.#4.96.193':445
'21#.#4.250.35':445
'21#.#4.76.122':445
'21#.#4.140.163':139
'21#.#4.97.141':139
'21#.#4.14.208':139
'21#.#4.208.66':139
'21#.#4.146.114':139
'21#.#4.195.192':139
'21#.#4.62.73':139
'21#.#4.241.201':445
'21#.#4.17.99':445
'21#.#4.208.43':139
'21#.#4.225.221':139
'21#.#4.80.104':139
'21#.#4.7.170':445
'21#.#4.137.105':445
'21#.#4.61.151':445
'21#.#4.194.135':445
'21#.#4.10.144':445
'21#.#4.170.10':445
'21#.#4.195.192':445
'21#.#4.140.163':445
'21#.#4.97.141':445
'21#.#4.221.34':445
'21#.#4.208.66':445
'21#.#4.146.114':445
'21#.#4.58.203':445
'21#.#4.12.142':445
'21#.#4.40.57':445
'21#.#4.167.111':445
'21#.#4.55.240':445
'21#.#4.48.141':445
'21#.#4.56.40':445
'21#.#4.230.74':445
'21#.#4.191.229':445
'21#.#4.24.122':445
'21#.#4.181.197':445
'21#.#4.2.187':445
'21#.#4.221.34':139
'21#.24.7.15':445
'21#.#4.241.201':139
'21#.#4.17.99':139
'21#.#4.218.62':445
'21#.#4.89.155':445
'21#.#4.108.238':445
'21#.#4.248.181':139
'21#.24.0.12':139
'21#.#4.205.206':139
'21#.#4.190.242':139
'21#.#4.243.190':139
'21#.#4.190.108':139
'21#.#4.121.31':139
'21#.#4.218.62':139
'21#.#4.89.155':139
'21#.#4.200.127':139
'21#.#4.39.16':139
'21#.24.81.4':139
'21#.#4.39.16':445
'21#.24.81.4':445
'21#.#4.121.31':445
'21#.#4.108.238':139
'21#.24.7.15':139
'21#.#4.200.127':445
'21#.#4.56.40':139
'21#.#4.230.74':139
'21#.#4.191.229':139
'21#.#4.24.122':139
'21#.#4.181.197':139
'21#.#4.2.187':139
'21#.#4.7.170':139
'21#.#4.137.105':139
'21#.#4.61.151':139
'21#.#4.194.135':139
'21#.#4.10.144':139
'21#.#4.170.10':139
'21#.#4.236.159':139
'21#.#4.43.184':139
'21#.#4.176.146':139
'21#.#4.96.193':139
'21#.#4.250.35':139
'21#.#4.76.122':139
'21#.#4.58.203':139
'21#.#4.12.142':139
'21#.#4.40.57':139
'21#.#4.167.111':139
'21#.#4.55.240':139
'21#.#4.48.141':139
'21#.#4.14.208':445
'21#.#4.4.191':445
'21#.#4.114.1':445
'21#.#4.116.63':445
'21#.#4.181.15':139
'21#.#4.174.180':139
'21#.#4.104.61':445
'21#.#4.247.240':445
'21#.24.61.3':445
'21#.#4.19.109':445
'21#.#4.182.17':445
'21#.#4.17.36':445
'21#.#4.241.122':445
'21#.#4.239.196':139
'21#.#4.248.100':139
'21#.#4.171.102':139
'21#.#4.26.111':139
'21#.#4.90.26':139
'21#.#4.126.84':139
'21#.#4.207.229':139
'21#.#4.226.207':139
'21#.#4.14.226':139
'21#.#4.2.162':139
'21#.#4.244.65':139
'21#.#4.135.69':139
'21#.#4.198.84':445
'21#.#4.186.67':445
'21#.#4.243.26':445
'21#.#4.230.194':445
'21#.#4.132.174':445
'21#.#4.84.132':445
'21#.#4.126.84':445
'21#.#4.239.196':445
'21#.#4.248.100':445
'21#.#4.255.132':445
'21#.#4.26.111':445
'21#.#4.90.26':445
'21#.#4.52.227':445
'21#.#4.15.130':445
'21#.#4.28.29':445
'21#.24.47.8':445
'21#.#4.170.111':445
'21#.#4.26.47':445
'21#.#4.122.116':445
'21#.#4.140.252':445
'21#.#4.30.163':445
'21#.#4.87.38':445
'21#.#4.134.99':445
'21#.#4.91.89':445
'21#.#4.255.132':139
'21#.#4.98.174':445
'21#.#4.75.44':445
'21#.#4.251.133':445
'21#.#4.99.162':445
'21#.#4.15.11':445
'21#.#4.173.250':445
'21#.#4.4.191':139
'21#.#4.116.63':139
'21#.#4.114.1':139
'21#.#4.12.69':445
'21#.#4.58.229':445
'21#.#4.104.61':139
'21#.#4.62.73':445
'21#.#4.15.11':139
'21#.#4.99.162':139
'21#.#4.208.43':445
'21#.#4.225.221':445
'21#.#4.80.104':445
'21#.#4.251.133':139
'21#.#4.12.69':139
'21#.#4.58.229':139
'21#.#4.173.250':139
'21#.#4.98.174':139
'21#.#4.75.44':139
'21#.#4.122.116':139
'21#.#4.140.252':139
'21#.#4.30.163':139
'21#.#4.87.38':139
'21#.#4.134.99':139
'21#.#4.91.89':139
'21#.#4.198.84':139
'21#.#4.186.67':139
'21#.#4.243.26':139
'21#.#4.230.194':139
'21#.#4.132.174':139
'21#.#4.84.132':139
'21#.#4.247.240':139
'21#.24.61.3':139
'21#.#4.19.109':139
'21#.#4.182.17':139
'21#.#4.17.36':139
'21#.#4.241.122':139
'21#.#4.52.227':139
'21#.#4.15.130':139
'21#.#4.28.29':139
'21#.#4.170.111':139
'21#.24.47.8':139
'21#.#4.26.47':139
'21#.#4.116.142':445
'21#.#4.43.213':445
'21#.#4.154.165':445
'21#.#4.173.155':445
'21#.#4.5.156':445
'21#.#4.18.191':445
'21#.#4.76.185':445
'21#.#4.132.62':445
'21#.#4.34.209':445
'21#.#4.255.110':445
'21#.#4.25.174':445
'21#.#4.61.208':445
'21#.#4.60.46':445
'21#.#4.108.239':445
'21#.#4.14.91':445
'21#.#4.126.44':445
'21#.#4.14.24':139
'21#.#4.21.14':139
'21#.#4.126.78':445
'21#.#4.33.167':445
'21#.#4.67.126':445
'21#.#4.47.231':445
'21#.#4.74.62':445
'21#.#4.18.201':445
'21#.#4.231.48':445
'21#.#4.65.169':445
'21#.#4.237.65':445
'21#.#4.37.139':445
'21#.#4.120.81':445
'21#.#4.26.232':445
'21#.#4.169.26':445
'21#.#4.247.155':445
'21#.#4.8.100':445
'21#.#4.47.89':445
'21#.#4.133.155':445
'21#.#4.10.33':445
'21#.#4.53.175':445
'21#.#4.232.84':445
'21#.#4.175.8':445
'21#.#4.207.224':445
'21#.#4.139.192':445
'21#.#4.61.140':445
'21#.#4.107.64':445
'21#.#4.61.215':445
'21#.#4.136.61':445
'21#.#4.176.172':445
'21#.#4.244.159':445
'21#.#4.52.13':445
'21#.#4.145.115':445
'21#.#4.195.90':139
'21#.#4.173.155':139
'21#.#4.25.174':139
'21#.#4.61.208':139
'21#.#4.76.185':139
'21#.#4.154.165':139
'21#.#4.43.213':139
'21#.#4.255.110':139
'21#.#4.139.192':139
'21#.#4.61.140':139
'21#.#4.60.46':139
'21#.#4.132.62':139
'21#.#4.34.209':139
'21#.#4.18.201':139
'21#.#4.126.78':139
'21#.#4.14.91':139
'21#.#4.108.239':139
'21#.#4.67.126':139
'21#.#4.18.191':139
'21#.#4.5.156':139
'21#.#4.231.48':139
'21#.#4.47.231':139
'21#.#4.126.44':139
'21#.#4.33.167':139
'21#.#4.74.62':139
'21#.#4.37.139':139
'21#.#4.133.155':139
'21#.#4.10.33':139
'21#.#4.169.26':139
'21#.#4.65.169':139
'21#.#4.237.65':139
'21#.#4.47.89':139
'21#.#4.120.177':139
'21#.#4.31.242':139
'21#.#4.53.175':139
'21#.#4.247.155':139
'21#.#4.8.100':139
'21#.#4.207.224':139
'21#.#4.244.159':139
'21#.#4.52.13':139
'21#.#4.107.64':139
'21#.#4.232.84':139
'21#.#4.175.8':139
'21#.#4.176.172':139
'21#.#4.120.81':139
'21#.#4.26.232':139
'21#.#4.61.215':139
'21#.#4.136.61':139
'21#.#4.145.115':139
'21#.#4.120.177':445
'21#.#4.192.153':445
'21#.#4.165.37':445
'21#.#4.110.165':445
'21#.#4.234.114':445
'21#.#4.23.174':445
'21#.#4.66.203':445
'21#.#4.76.76':445
'21#.#4.72.26':445
'21#.#4.99.72':445
'21#.#4.255.38':445
'21#.#4.28.83':445
'21#.#4.58.195':445
'21#.#4.224.67':139
'21#.#4.141.224':139
'21#.#4.116.142':139
'21#.#4.42.207':139
'21#.#4.198.119':139
'21#.#4.68.56':139
'21#.#4.134.110':445
'21#.#4.37.45':445
'21#.#4.114.148':445
'21#.#4.14.156':445
'21#.#4.49.25':445
'21#.#4.90.162':445
'21#.#4.53.211':445
'21#.#4.7.225':445
'21#.#4.129.235':445
'21#.#4.42.80':445
'21#.#4.200.41':445
'21#.#4.121.199':445
'21#.#4.68.56':445
'21#.#4.224.67':445
'21#.#4.141.224':445
'21#.#4.207.129':445
'21#.#4.42.207':445
'21#.#4.198.119':445
'21#.#4.53.154':445
'21#.#4.244.110':445
'21#.#4.12.121':445
'21#.#4.125.9':445
'21#.#4.219.207':445
'21#.#4.154.17':445
'21#.#4.218.35':445
'21#.#4.13.89':445
'21#.#4.75.231':445
'21#.#4.155.220':445
'21#.#4.174.155':445
'21#.#4.7.245':445
'21#.#4.207.129':139
'21#.#4.134.110':139
'21#.#4.37.45':139
'21#.#4.114.148':139
'21#.#4.14.156':139
'21#.#4.49.25':139
'21#.#4.90.162':139
'21#.#4.192.153':139
'21#.#4.165.37':139
'21#.#4.110.165':139
'21#.#4.234.114':139
'21#.#4.23.174':139
'21#.#4.66.203':139
'21#.#4.21.14':445
'21#.#4.74.62':9988
'21#.#4.34.209':9988
'21#.#4.31.242':445
'21#.#4.195.90':445
'21#.#4.14.24':445
'21#.#4.169.26':9988
'21#.#4.65.169':9988
'21#.#4.237.65':9988
'21#.#4.255.110':9988
'21#.#4.107.64':9988
'21#.#4.207.224':9988
'21#.#4.218.35':139
'21#.#4.13.89':139
'21#.#4.75.231':139
'21#.#4.155.220':139
'21#.#4.174.155':139
'21#.#4.7.245':139
'21#.#4.53.211':139
'21#.#4.7.225':139
'21#.#4.129.235':139
'21#.#4.42.80':139
'21#.#4.200.41':139
'21#.#4.121.199':139
'21#.#4.76.76':139
'21#.#4.72.26':139
'21#.#4.99.72':139
'21#.#4.255.38':139
'21#.#4.28.83':139
'21#.#4.58.195':139
'21#.#4.53.154':139
'21#.#4.244.110':139
'21#.#4.12.121':139
'21#.#4.125.9':139
'21#.#4.219.207':139
'21#.#4.154.17':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней