Trojan.Starman.6622

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3c55.dir00\svchost.exe.mdmp 16325836412032220

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3c55.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#6.82.103':139
'21#.#6.198.81':139
'21#.#6.120.217':139
'21#.#6.94.253':139
'21#.#6.200.180':139
'21#.#6.194.30':139
'21#.#6.254.62':139
'21#.#6.207.144':139
'21#.#6.5.164':139
'21#.#6.221.146':139
'21#.#6.214.216':139
'21#.#6.203.11':139
'21#.#6.102.83':139
'21#.#6.219.233':139
'21#.#6.158.40':139
'21#.#6.121.157':139
'21#.#6.215.170':139
'21#.#6.40.209':139
'21#.#6.162.244':139
'21#.#6.26.19':139
'21#.#6.11.140':139
'21#.#6.102.62':139
'21#.#6.26.19':445
'21#.#6.11.140':445
'21#.#6.102.83':445
'21#.#6.219.233':445
'21#.#6.203.11':445
'21#.#6.214.216':445
'21#.#6.94.253':445
'21#.#6.40.209':445
'21#.#6.162.244':445
'21#.#6.215.170':445
'21#.#6.121.157':445
'21#.#6.107.127':139
'21#.#6.129.72':139
'21#.#6.151.246':139
'21#.#6.148.78':139
'21#.#6.191.153':139
'21#.#6.181.2':445
'21#.#6.158.40':445
'21#.56.8.65':445
'21#.#6.4.164':139
'21#.#6.162.240':445
'21#.#6.162.223':139
'21#.#6.99.155':139
'21#.#6.181.250':139
'21#.#6.191.172':139
'21#.#6.33.91':139
'21#.#6.240.20':139
'21#.#6.17.42':445
'21#.#6.201.237':139
'21#.#6.148.88':139
'21#.#6.18.148':139
'21#.#6.117.249':139
'21#.#6.129.163':139
'21#.56.1.1':139
'21#.#6.3.242':139
'21#.#6.17.42':139
'21#.#6.20.78':139
'21#.#6.208.88':139
'21#.#6.137.151':139
'21#.#6.78.85':139
'21#.#6.85.100':139
'21#.#6.85.86':139
'21#.#6.20.78':445
'21#.#6.148.88':445
'21#.#6.18.148':445
'21#.#6.99.155':445
'21#.#6.181.250':445
'21#.#6.162.223':445
'21#.56.8.65':139
'21#.#6.181.2':139
'21#.#6.162.240':139
'21#.#6.201.237':445
'21#.#6.240.20':445
'21#.#6.33.91':445
'21#.#6.85.100':445
'21#.#6.85.86':445
'21#.56.1.1':445
'21#.#6.3.242':445
'21#.#6.129.163':445
'21#.#6.117.249':445
'21#.#6.191.172':445
'21#.#6.137.151':445
'21#.#6.78.85':445
'21#.#6.208.88':445
'21#.#6.200.180':445
'21#.#6.47.60':139
'21#.#6.53.241':139
'21#.#6.16.248':139
'21#.56.58.4':445
'21#.#6.163.149':139
'21#.#6.2.195':139
'21#.#6.243.92':139
'21#.#6.204.48':139
'21#.#6.155.214':139
'21#.#6.48.151':139
'21#.#6.253.200':445
'21#.56.1.11':445
'21#.#6.23.131':445
'21#.#6.92.249':445
'21#.#6.153.178':445
'21#.#6.44.151':445
'21#.#6.10.37':445
'21#.#6.46.127':445
'21#.#6.145.254':445
'21#.#6.40.71':445
'21#.#6.59.84':445
'21#.#6.32.40':139
'21#.#6.159.142':139
'21#.#6.38.19':139
'21#.#6.142.146':139
'21#.#6.184.97':139
'21#.#6.183.190':139
'21#.#6.255.123':139
'21#.56.69.5':139
'21#.#6.110.252':139
'21#.#6.213.57':139
'21#.#6.79.173':139
'21#.#6.101.208':139
'21#.#6.148.172':139
'21#.#6.217.67':139
'21#.#6.165.29':139
'21#.#6.35.113':139
'21#.#6.29.52':139
'21#.#6.139.4':139
'21#.#6.72.38':139
'21#.#6.4.152':139
'21#.#6.141.160':139
'21#.#6.38.229':139
'21#.#6.4.164':445
'21#.#6.137.161':139
'21#.#6.129.72':445
'21#.#6.151.246':445
'21#.#6.107.127':445
'21#.#6.178.164':139
'21#.#6.128.63':139
'21#.#6.7.203':139
'21#.#6.110.167':139
'21#.#6.33.174':139
'21#.#6.191.153':445
'21#.#6.5.164':445
'21#.#6.221.146':445
'21#.#6.198.81':445
'21#.#6.120.217':445
'21#.#6.82.103':445
'21#.#6.102.62':445
'21#.#6.148.78':445
'21#.#6.254.62':445
'21#.#6.207.144':445
'21#.#6.194.30':445
'21#.#6.55.27':139
'21#.#6.110.167':445
'21#.#6.33.174':445
'21#.#6.137.161':445
'21#.#6.253.200':139
'21#.56.58.4':139
'21#.#6.55.27':445
'21#.#6.154.80':445
'21#.#6.128.63':445
'21#.#6.7.203':445
'21#.#6.178.164':445
'21#.#6.46.127':139
'21#.#6.92.249':139
'21#.56.1.11':139
'21#.#6.44.151':139
'21#.#6.154.80':139
'21#.#6.153.178':139
'21#.#6.145.254':139
'21#.#6.10.37':139
'21#.#6.59.84':139
'21#.#6.23.131':139
'21#.#6.40.71':139
'21#.#6.202.49':445
'21#.#6.241.216':445
'21#.#6.19.17':445
'21#.#6.239.65':445
'21#.#6.4.232':445
'21#.56.22.1':445
'21#.#6.144.145':445
'21#.#6.23.180':445
'21#.#6.25.89':445
'21#.#6.84.157':445
'21#.#6.148.99':445
'21#.#6.73.124':445
'21#.#6.60.88':139
'21#.#6.78.29':139
'21#.#6.26.179':139
'21#.#6.6.191':139
'21#.56.20.7':139
'21#.56.8.82':445
'21#.#6.194.157':445
'21#.#6.246.149':139
'21#.#6.125.24':139
'21#.#6.86.24':139
'21#.#6.178.188':445
'21#.#6.244.155':445
'21#.#6.33.49':445
'21#.#6.12.66':445
'21#.#6.121.75':445
'21#.#6.89.251':445
'21#.#6.18.58':445
'21#.#6.65.55':445
'21#.#6.84.154':445
'21#.#6.109.231':445
'21#.#6.169.232':445
'21#.#6.75.198':445
'21#.#6.216.250':445
'21#.#6.229.220':445
'21#.#6.251.47':445
'21#.#6.163.186':445
'21#.56.71.9':445
'21#.#6.125.159':445
'21#.#6.35.21':445
'21#.#6.190.182':445
'21#.#6.20.52':445
'21#.#6.182.203':445
'21#.#6.163.186':139
'21#.56.71.9':139
'21#.#6.178.188':139
'21#.#6.144.145':139
'21#.#6.23.180':139
'21#.#6.20.52':139
'21#.#6.182.203':139
'21#.#6.229.220':139
'21#.#6.251.47':139
'21#.#6.216.250':139
'21#.#6.25.89':139
'21#.#6.73.124':139
'21#.56.22.1':139
'21#.#6.4.232':139
'21#.56.8.82':139
'21#.#6.194.157':139
'21#.#6.84.157':139
'21#.#6.148.99':139
'21#.#6.19.17':139
'21#.#6.239.65':139
'21#.#6.241.216':139
'21#.#6.190.182':139
'21#.#6.25.15':139
'21#.#6.1.195':139
'21#.#6.1.155':139
'21#.#6.18.58':139
'21#.#6.65.55':139
'21#.#6.94.89':139
'21#.#6.148.113':139
'21#.#6.230.86':139
'21#.56.59.1':139
'21#.#6.17.59':139
'21#.#6.84.154':139
'21#.#6.121.75':139
'21#.#6.89.251':139
'21#.#6.75.198':139
'21#.#6.125.159':139
'21#.#6.35.21':139
'21#.#6.109.231':139
'21#.#6.169.232':139
'21#.#6.33.49':139
'21#.#6.12.66':139
'21#.#6.244.155':139
'21#.#6.1.155':445
'21#.#6.78.240':445
'21#.#6.90.179':445
'21#.#6.204.245':445
'21#.#6.139.97':139
'21#.#6.202.49':139
'21#.#6.230.53':445
'21#.#6.5.109':445
'21#.#6.32.67':445
'21#.#6.49.102':445
'21#.#6.86.54':445
'21#.#6.206.124':139
'21#.#6.225.232':139
'21#.#6.11.191':139
'21#.#6.35.32':139
'21#.#6.187.120':139
'21#.#6.67.227':139
'21#.#6.68.190':139
'21#.#6.13.116':139
'21#.#6.18.26':139
'21#.#6.23.44':139
'21#.56.32.5':139
'21#.#6.110.5':445
'21#.#6.23.44':445
'21#.56.32.5':445
'21#.#6.11.191':445
'21#.#6.35.32':445
'21#.#6.225.232':445
'21#.#6.206.124':445
'21#.#6.139.97':445
'21#.#6.13.116':445
'21#.#6.18.26':445
'21#.#6.68.190':445
'21#.#6.67.227':445
'21#.#6.11.60':445
'21#.#6.239.174':445
'21#.#6.174.77':445
'21#.#6.10.197':445
'21#.#6.91.163':445
'21#.#6.72.236':445
'21#.#6.187.120':445
'21#.#6.151.84':445
'21#.#6.186.211':445
'21#.#6.202.98':445
'21#.#6.246.149':445
'21#.#6.239.65':9988
'21#.#6.86.24':445
'21#.#6.78.29':445
'21#.#6.125.24':445
'21#.#6.251.47':9988
'21#.#6.163.186':9988
'21#.#6.25.89':9988
'21#.#6.194.157':9988
'21#.#6.148.99':9988
'21#.#6.60.88':445
'21#.#6.17.59':445
'21#.#6.230.86':445
'21#.56.59.1':445
'21#.#6.25.15':445
'21#.#6.1.195':445
'21#.56.20.7':445
'21#.#6.26.179':445
'21#.#6.6.191':445
'21#.#6.94.89':445
'21#.#6.148.113':445
'21#.#6.20.52':9988
'21#.#6.174.77':139
'21#.#6.11.60':139
'21#.#6.91.163':139
'21#.#6.110.5':139
'21#.#6.10.197':139
'21#.#6.151.84':139
'21#.#6.72.236':139
'21#.#6.202.98':139
'21#.#6.239.174':139
'21#.#6.186.211':139
'21#.#6.5.109':139
'21#.#6.204.245':139
'21#.#6.78.240':139
'21#.#6.125.159':9988
'21#.#6.190.182':9988
'21#.#6.182.203':9988
'21#.#6.32.67':139
'21#.#6.230.53':139
'21#.#6.86.54':139
'21#.#6.90.179':139
'21#.#6.49.102':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней