Trojan.Starman.6471

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3230.dir00\svchost.exe.mdmp 16325836412032296

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3230.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#6.207.6':445
'21#.#6.195.206':445
'21#.#6.55.251':445
'21#.#6.163.128':445
'21#.#6.13.22':445
'21#.#6.9.205':445
'21#.#6.20.183':445
'21#.#6.13.78':445
'21#.#6.36.116':445
'21#.#6.128.56':445
'21#.#6.68.85':445
'21#.#6.217.134':445
'21#.#6.43.230':445
'21#.#6.80.165':445
'21#.#6.125.91':445
'21#.#6.116.243':445
'21#.#6.56.117':445
'21#.#6.99.65':445
'21#.#6.243.75':445
'21#.#6.86.12':445
'21#.#6.184.175':445
'21#.#6.132.107':445
'21#.#6.177.53':445
'21#.#6.175.177':445
'21#.#6.118.176':445
'21#.#6.7.239':445
'21#.#6.68.244':445
'21#.#6.82.14':445
'21#.#6.144.198':445
'21#.#6.27.79':445
'21#.#6.135.147':445
'21#.#6.72.57':445
'21#.#6.244.238':445
'21#.#6.231.219':445
'21#.#6.9.159':445
'21#.#6.27.185':445
'21#.#6.186.235':445
'21#.#6.214.71':445
'21#.#6.233.167':445
'21#.#6.9.159':139
'21#.#6.214.71':139
'21#.#6.135.147':139
'21#.#6.72.57':139
'21#.#6.233.167':139
'21#.#6.27.79':139
'21#.#6.177.53':139
'21#.#6.27.185':139
'21#.#6.186.235':139
'21#.#6.231.219':139
'21#.#6.13.22':139
'21#.#6.13.78':139
'21#.#6.207.6':139
'21#.#6.195.206':139
'21#.#6.36.116':139
'21#.#6.86.12':139
'21#.#6.244.238':139
'21#.#6.9.205':139
'21#.#6.20.183':139
'21#.#6.175.177':139
'21#.#6.20.50':139
'21#.#6.17.128':139
'21#.#6.8.109':139
'21#.#6.249.114':139
'21#.#6.51.48':139
'21#.#6.241.103':139
'21#.#6.228.28':139
'21#.#6.245.235':139
'21#.#6.5.202':139
'21#.#6.242.178':139
'21#.#6.118.176':139
'21#.#6.82.14':139
'21#.#6.184.175':139
'21#.#6.132.107':139
'21#.#6.144.198':139
'21#.#6.202.35':139
'21#.#6.204.247':139
'21#.#6.7.239':139
'21#.#6.68.244':139
'21#.#6.250.191':139
'21#.#6.60.26':139
'21#.#6.8.169':139
'21#.#6.152.16':139
'21#.#6.90.87':139
'21#.#6.15.23':139
'21#.#6.153.181':139
'21#.#6.7.235':139
'21#.#6.160.13':139
'21#.#6.230.133':139
'21#.#6.22.76':139
'21#.#6.125.139':139
'21#.#6.188.36':139
'21#.#6.64.188':139
'21#.#6.93.126':139
'21#.#6.101.114':139
'21#.46.18.9':139
'21#.#6.18.165':139
'21#.#6.6.248':139
'21#.#6.22.196':139
'21#.#6.192.94':445
'21#.#6.246.127':445
'21#.#6.62.62':445
'21#.#6.5.199':445
'21#.#6.133.135':445
'21#.#6.123.185':445
'21#.#6.175.57':445
'21#.#6.207.193':445
'21#.#6.213.140':445
'21#.#6.104.168':445
'21#.#6.190.17':139
'21#.#6.90.120':139
'21#.#6.24.23':139
'21#.#6.122.50':139
'21#.#6.45.188':445
'21#.#6.170.184':445
'21#.#6.178.246':445
'21#.#6.236.118':445
'21#.#6.190.191':445
'21#.#6.45.188':139
'21#.#6.236.118':139
'21#.#6.241.103':445
'21#.#6.228.28':445
'21#.#6.190.191':139
'21#.#6.104.168':139
'21#.#6.62.62':139
'21#.#6.170.184':139
'21#.#6.178.246':139
'21#.#6.5.202':445
'21#.#6.242.178':445
'21#.#6.8.109':445
'21#.#6.202.35':445
'21#.#6.204.247':445
'21#.#6.249.114':445
'21#.#6.51.48':445
'21#.#6.245.235':445
'21#.#6.20.50':445
'21#.#6.17.128':445
'21#.#6.5.199':139
'21#.#6.84.58':139
'21#.#6.130.69':139
'21#.#6.88.150':139
'21#.#6.212.57':139
'21#.#6.105.189':139
'21#.#6.214.220':139
'21#.#6.79.151':139
'21#.#6.68.105':139
'21#.#6.54.68':139
'21#.#6.215.21':139
'21#.#6.133.135':139
'21#.#6.207.193':139
'21#.#6.192.94':139
'21#.#6.246.127':139
'21#.#6.213.140':139
'21#.#6.61.48':139
'21#.#6.237.134':139
'21#.#6.123.185':139
'21#.#6.175.57':139
'21#.#6.54.242':445
'21#.#6.89.196':445
'21#.#6.184.123':139
'21#.#6.141.212':139
'21#.#6.87.161':445
'21#.#6.121.90':445
'21#.#6.158.85':445
'21#.#6.240.205':445
'21#.#6.90.63':445
'21#.#6.123.141':139
'21#.#6.153.223':139
'21#.#6.134.76':139
'21#.#6.61.124':139
'21#.#6.134.61':139
'21#.#6.235.144':139
'21#.#6.43.145':139
'21#.#6.101.249':139
'21#.#6.0.239':139
'21#.#6.100.14':139
'21#.#6.222.184':445
'21#.#6.164.51':445
'21#.#6.48.102':445
'21#.#6.18.189':445
'21#.#6.51.207':445
'21#.#6.216.136':445
'21#.#6.73.101':445
'21#.#6.189.1':445
'21#.#6.126.4':445
'21#.#6.100.126':445
'21#.#6.140.12':445
'21#.#6.11.91':445
'21#.#6.117.15':445
'21#.#6.111.175':445
'21#.#6.2.118':445
'21#.#6.32.254':445
'21#.#6.24.93':445
'21#.46.56.0':445
'21#.#6.219.246':445
'21#.#6.51.222':445
'21#.#6.32.254':139
'21#.#6.219.246':139
'21#.#6.11.91':139
'21#.#6.117.15':139
'21#.#6.51.222':139
'21#.#6.140.12':139
'21#.#6.18.189':139
'21#.#6.24.93':139
'21#.46.56.0':139
'21#.#6.2.118':139
'21#.#6.87.161':139
'21#.#6.240.205':139
'21#.#6.54.242':139
'21#.#6.89.196':139
'21#.#6.90.63':139
'21#.#6.222.184':139
'21#.#6.111.175':139
'21#.#6.121.90':139
'21#.#6.158.85':139
'21#.#6.51.207':139
'21#.#6.204.107':139
'21#.#6.236.239':139
'21#.#6.159.181':139
'21#.#6.15.176':139
'21#.#6.174.0':139
'21#.#6.189.7':139
'21#.#6.124.188':139
'21#.#6.205.56':139
'21#.#6.173.207':139
'21#.#6.18.42':139
'21#.#6.216.136':139
'21#.#6.126.4':139
'21#.#6.164.51':139
'21#.#6.48.102':139
'21#.#6.100.126':139
'21#.#6.239.45':139
'21#.#6.42.24':139
'21#.#6.73.101':139
'21#.#6.189.1':139
'21#.#6.208.126':139
'21#.#6.11.141':139
'21#.46.52.7':139
'21#.#6.104.209':139
'21#.#6.37.114':139
'21#.46.19.3':445
'21#.#6.98.111':445
'21#.#6.170.124':139
'21#.#6.5.251':445
'21#.#6.6.139':139
'21#.#6.174.0':9988
'21#.#6.173.207':9988
'21#.#6.159.181':9988
'21#.#6.15.176':9988
'21#.#6.189.7':9988
'21#.#6.98.111':139
'21#.#6.79.203':139
'21#.#6.5.251':139
'21#.46.19.3':139
'21#.#6.79.203':445
'21#.#6.99.65':139
'21#.#6.243.75':139
'21#.#6.217.134':139
'21#.#6.125.91':139
'21#.#6.116.243':139
'21#.#6.55.251':139
'21#.#6.163.128':139
'21#.#6.56.117':139
'21#.#6.128.56':139
'21#.#6.68.85':139
'21#.#6.104.209':445
'21#.#6.208.126':445
'21#.#6.6.139':445
'21#.46.52.7':445
'21#.#6.11.141':445
'21#.#6.43.230':139
'21#.#6.80.165':139
'21#.#6.37.114':445
'21#.#6.170.124':445
'21#.#6.61.124':445
'21#.#6.134.61':445
'21#.#6.189.7':445
'21#.#6.124.188':445
'21#.#6.153.223':445
'21#.#6.0.239':445
'21#.#6.100.14':445
'21#.#6.134.76':445
'21#.#6.235.144':445
'21#.#6.173.207':445
'21#.#6.18.42':445
'21#.#6.159.181':445
'21#.#6.239.45':445
'21#.#6.42.24':445
'21#.#6.15.176':445
'21#.#6.174.0':445
'21#.#6.205.56':445
'21#.#6.204.107':445
'21#.#6.236.239':445
'21#.#6.43.145':445
'21#.46.56.0':9988
'21#.#6.140.12':9988
'21#.#6.11.91':9988
'21#.#6.24.93':9988
'21#.#6.18.189':9988
'21#.#6.189.1':9988
'21#.#6.18.42':9988
'21#.#6.51.207':9988
'21#.#6.126.4':9988
'21#.#6.2.118':9988
'21#.#6.184.123':445
'21#.#6.141.212':445
'21#.#6.101.249':445
'21#.#6.123.141':445
'21#.#6.89.196':9988
'21#.#6.240.205':9988
'21#.#6.111.175':9988
'21#.#6.87.161':9988
'21#.#6.54.242':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней