Trojan.Starman.6058

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER2644.dir00\svchost.exe.mdmp 16325836412032184

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2644.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#13.70.38':139
'21#.#13.55.5':139
'21#.#13.148.146':139
'21#.#13.25.104':139
'21#.#13.175.25':139
'21#.#13.45.68':139
'21#.#13.53.7':139
'21#.#13.152.19':139
'21#.#13.229.137':139
'21#.#13.244.129':139
'21#.#13.51.183':139
'21#.#13.159.35':139
'21#.#13.166.103':139
'21#.#13.229.88':139
'21#.#13.212.92':445
'21#.#13.88.212':445
'21#.#13.24.150':139
'21#.#13.72.33':139
'21#.#13.108.195':139
'21#.#13.19.240':139
'21#.#13.167.216':139
'21#.#13.75.52':139
'21#.#13.25.104':445
'21#.#13.175.25':445
'21#.#13.51.183':445
'21#.#13.24.150':445
'21#.#13.72.33':445
'21#.#13.229.137':445
'21#.#13.244.129':445
'21#.#13.55.5':445
'21#.#13.148.146':445
'21#.#13.70.38':445
'21#.#13.108.195':445
'21#.#13.162.121':139
'21#.#13.18.103':139
'21#.#13.121.81':139
'21#.#13.50.20':139
'21#.#13.190.233':139
'21#.#13.19.240':445
'21#.#13.167.216':445
'21#.#13.166.103':445
'21#.#13.229.88':445
'21#.#13.159.35':445
'21#.#13.63.37':139
'21#.#13.188.62':139
'21#.#13.37.170':139
'21#.#13.155.0':139
'21#.#13.166.155':139
'21#.#13.99.196':445
'21#.#13.157.85':445
'21#.#13.88.212':139
'21#.#13.92.188':139
'21#.#13.212.92':139
'21#.#13.226.85':139
'21#.#13.136.154':139
'21#.#13.205.136':139
'21#.#13.154.69':139
'21#.#13.120.50':139
'21#.#13.31.149':139
'21#.#13.71.188':139
'21#.#13.22.142':139
'21#.#13.239.19':139
'21#.#13.46.206':139
'21#.#13.2.36':139
'21#.#13.66.91':445
'21#.#13.226.85':445
'21#.#13.155.0':445
'21#.#13.22.142':445
'21#.#13.239.19':445
'21#.#13.71.188':445
'21#.#13.188.62':445
'21#.#13.92.188':445
'21#.#13.63.37':445
'21#.#13.166.155':445
'21#.#13.37.170':445
'21#.#13.2.36':445
'21#.#13.50.221':445
'21#.#13.120.50':445
'21#.#13.83.107':445
'21#.#13.6.230':445
'21#.#13.22.48':445
'21#.#13.205.136':445
'21#.#13.46.206':445
'21#.#13.136.154':445
'21#.#13.31.149':445
'21#.#13.154.69':445
'21#.#13.22.204':445
'21#.#13.193.96':445
'21#.#13.188.67':445
'21#.#13.61.137':445
'21#.#13.28.249':445
'21#.#13.122.80':139
'21#.#13.195.121':139
'21#.#13.200.39':139
'21#.#13.103.167':445
'21#.#13.71.17':445
'21#.#13.248.109':445
'21#.#13.6.160':445
'21#.#13.105.105':445
'21#.#13.198.137':445
'21#.#13.225.15':445
'21#.#13.62.102':445
'21#.#13.38.112':445
'21#.#13.110.79':445
'21#.#13.86.222':445
'21#.#13.178.97':445
'21#.#13.57.129':445
'21#.#13.73.58':139
'21#.#13.59.149':139
'21#.#13.128.3':139
'21#.#13.142.72':139
'21#.#13.1.166':139
'21#.#13.72.6':139
'21#.#13.169.33':139
'21#.#13.244.1':139
'21#.#13.22.246':139
'21#.#13.60.58':139
'21#.#13.127.207':139
'21#.#13.14.181':139
'21#.#13.175.75':139
'21#.#13.49.84':139
'21#.#13.230.245':139
'21#.#13.166.78':139
'21#.#13.245.140':139
'21#.#13.95.186':139
'21#.#13.215.164':139
'21#.#13.0.221':139
'21#.#13.57.86':139
'21#.#13.57.160':139
'21#.#13.248.100':139
'21#.#13.158.194':139
'21#.#13.72.75':139
'21#.#13.188.159':139
'21#.#13.196.58':139
'21#.#13.198.137':139
'21#.#13.6.160':139
'21#.#13.62.102':139
'21#.#13.70.216':139
'21#.#13.225.15':139
'21#.#13.119.111':139
'21#.#13.75.52':445
'21#.#13.50.20':445
'21#.#13.53.7':445
'21#.#13.152.19':445
'21#.#13.45.68':445
'21#.#13.18.103':445
'21#.#13.56.188':139
'21#.#13.162.121':445
'21#.#13.190.233':445
'21#.#13.121.81':445
'21#.#13.105.105':139
'21#.#13.119.111':445
'21#.#13.188.159':445
'21#.#13.56.188':445
'21#.#13.103.167':139
'21#.#13.71.17':139
'21#.#13.158.194':445
'21#.#13.70.216':445
'21#.#13.248.100':445
'21#.#13.196.58':445
'21#.#13.72.75':445
'21#.#13.193.96':139
'21#.#13.38.112':139
'21#.#13.110.79':139
'21#.#13.86.222':139
'21#.#13.178.97':139
'21#.#13.57.129':139
'21#.#13.188.67':139
'21#.#13.22.204':139
'21#.#13.28.249':139
'21#.#13.248.109':139
'21#.#13.61.137':139
'21#.#13.1.85':445
'21#.#13.14.37':445
'21#.#13.189.67':445
'21#.#13.22.144':445
'21#.#13.67.36':445
'21#.#13.148.60':445
'21#.#13.92.169':445
'21#.#13.173.19':445
'21#.#13.255.83':445
'21#.#13.186.10':445
'21#.#13.156.43':445
'21#.#13.70.252':139
'21#.#13.150.70':139
'21#.#13.166.71':139
'21#.#13.100.231':139
'21#.#13.153.249':139
'21#.#13.2.29':445
'21#.#13.90.237':445
'21#.#13.124.135':139
'21#.#13.129.51':139
'21#.#13.46.172':139
'21#.#13.255.99':445
'21#.#13.218.103':445
'21#.#13.155.240':445
'21#.#13.103.193':445
'21#.#13.96.100':445
'21#.#13.0.152':445
'21#.#13.7.174':445
'21#.#13.213.8':445
'21#.#13.118.102':445
'21#.#13.171.49':445
'21#.#13.102.170':445
'21#.#13.250.180':445
'21#.#13.46.212':445
'21#.#13.11.84':445
'21#.#13.212.126':445
'21#.#13.93.32':445
'21#.#13.52.227':445
'21#.#13.106.43':445
'21#.#13.180.225':445
'21#.#13.83.95':445
'21#.#13.123.95':445
'21#.#13.55.29':445
'21#.#13.93.32':139
'21#.#13.52.227':139
'21#.#13.255.99':139
'21#.#13.148.60':139
'21#.#13.92.169':139
'21#.#13.123.95':139
'21#.#13.55.29':139
'21#.#13.11.84':139
'21#.#13.212.126':139
'21#.#13.46.212':139
'21#.#13.173.19':139
'21#.#13.22.144':139
'21#.#13.67.36':139
'21#.#13.156.43':139
'21#.#13.2.29':139
'21#.#13.90.237':139
'21#.#13.255.83':139
'21#.#13.186.10':139
'21#.#13.14.37':139
'21#.#13.189.67':139
'21#.#13.1.85':139
'21#.#13.83.95':139
'21#.#13.201.223':139
'21#.#13.28.199':139
'21#.#13.23.134':139
'21#.#13.7.174':139
'21#.#13.213.8':139
'21#.#13.60.203':139
'21#.#13.84.148':139
'21#.#13.205.166':139
'21#.#13.215.28':139
'21#.#13.89.149':139
'21#.#13.118.102':139
'21#.#13.96.100':139
'21#.#13.0.152':139
'21#.#13.250.180':139
'21#.#13.106.43':139
'21#.#13.180.225':139
'21#.#13.171.49':139
'21#.#13.102.170':139
'21#.#13.155.240':139
'21#.#13.103.193':139
'21#.#13.218.103':139
'21#.#13.18.147':445
'21#.#13.194.35':445
'21#.#13.85.63':445
'21#.#13.221.189':445
'21#.#13.83.190':445
'21#.#13.110.96':445
'21#.#13.240.98':445
'21#.#13.90.9':445
'21#.#13.196.192':445
'21#.#13.56.107':445
'21#.#13.110.85':139
'21#.#13.171.29':139
'21#.#13.22.117':139
'21#.#13.91.148':139
'21#.#13.48.81':139
'21#.#13.135.121':139
'21#.#13.59.238':139
'21#.#13.37.47':139
'21#.#13.81.190':139
'21#.#13.92.215':139
'21#.#13.49.76':139
'21#.#13.206.161':445
'21#.#13.99.196':139
'21#.#13.157.85':139
'21#.#13.110.85':445
'21#.#13.59.238':445
'21#.#13.37.47':445
'21#.#13.83.107':139
'21#.#13.50.221':139
'21#.#13.22.48':139
'21#.#13.66.91':139
'21#.#13.6.230':139
'21#.#13.81.190':445
'21#.#13.48.81':445
'21#.#13.135.121':445
'21#.#13.170.108':445
'21#.#13.147.74':445
'21#.#13.108.147':445
'21#.#13.92.215':445
'21#.#13.49.76':445
'21#.#13.22.117':445
'21#.#13.91.148':445
'21#.#13.171.29':445
'21#.#13.46.172':445
'21#.#13.124.135':445
'21#.#13.129.51':445
'21#.#13.70.252':445
'21#.#13.150.70':445
'21#.#13.2.29':9988
'21#.#13.67.36':9988
'21#.#13.90.237':9988
'21#.#13.22.144':9988
'21#.#13.156.43':9988
'21#.#13.166.71':445
'21#.#13.215.28':445
'21#.#13.89.149':445
'21#.#13.28.199':445
'21#.#13.23.134':445
'21#.#13.201.223':445
'21#.#13.100.231':445
'21#.#13.153.249':445
'21#.#13.84.148':445
'21#.#13.205.166':445
'21#.#13.60.203':445
'21#.#13.186.10':9988
'21#.#13.90.9':139
'21#.#13.110.96':139
'21#.#13.56.107':139
'21#.#13.194.35':139
'21#.#13.196.192':139
'21#.#13.108.147':139
'21#.#13.170.108':139
'21#.#13.147.74':139
'21#.#13.240.98':139
'21#.#13.206.161':139
'21#.#13.18.147':139
'21#.#13.83.95':9988
'21#.#13.96.100':9988
'21#.#13.123.95':9988
'21#.#13.46.212':9988
'21#.#13.11.84':9988
'21#.#13.83.190':139
'21#.#13.85.63':139
'21#.#13.221.189':139
'21#.#13.0.152':9988
'21#.#13.171.49':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней