Trojan.Starman.6069

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER9933.dir00\svchost.exe.mdmp 16325836412028040

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER9933.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#3.32.61':139
'21#.#3.77.66':139
'21#.83.70.1':139
'21#.#3.126.68':139
'21#.#3.59.148':139
'21#.#3.250.218':139
'21#.#3.31.40':139
'21#.#3.237.180':139
'21#.#3.37.236':139
'21#.#3.14.105':139
'21#.#3.125.147':139
'21#.#3.185.247':445
'21#.#3.232.185':445
'21#.#3.247.206':445
'21#.#3.104.244':445
'21#.#3.179.135':445
'21#.#3.49.82':139
'21#.#3.128.10':139
'21#.#3.60.107':445
'21#.83.46.9':445
'21#.83.9.7':445
'21#.#3.237.180':445
'21#.#3.250.218':445
'21#.#3.14.105':445
'21#.#3.77.66':445
'21#.#3.37.236':445
'21#.#3.27.18':445
'21#.#3.109.27':445
'21#.#3.91.225':445
'21#.#3.31.40':445
'21#.#3.85.11':445
'21#.#3.32.61':445
'21#.#3.109.27':139
'21#.#3.49.82':445
'21#.#3.27.18':139
'21#.#3.85.11':139
'21#.#3.91.225':139
'21#.#3.59.148':445
'21#.83.70.1':445
'21#.#3.126.68':445
'21#.#3.128.10':445
'21#.#3.125.147':445
'21#.#3.143.32':445
'21#.83.46.9':139
'21#.83.9.7':139
'21#.#3.232.185':139
'21#.#3.247.206':139
'21#.#3.185.247':139
'21#.#3.0.107':445
'21#.#3.79.237':445
'21#.#3.75.247':445
'21#.#3.60.107':139
'21#.#3.182.91':445
'21#.#3.179.135':139
'21#.#3.13.227':139
'21#.#3.144.177':139
'21#.#3.227.104':139
'21#.#3.4.146':139
'21#.#3.171.181':139
'21#.#3.143.32':139
'21#.#3.104.244':139
'21#.#3.29.158':139
'21#.#3.47.36':139
'21#.#3.44.147':139
'21#.#3.171.181':445
'21#.#3.227.104':445
'21#.#3.4.146':445
'21#.#3.17.35':445
'21#.#3.145.123':445
'21#.#3.44.147':445
'21#.#3.29.158':445
'21#.#3.47.36':445
'21#.#3.13.227':445
'21#.#3.144.177':445
'21#.#3.122.164':445
'21#.#3.120.171':445
'21#.#3.179.240':445
'21#.83.20.7':445
'21#.#3.155.250':445
'21#.#3.18.28':445
'21#.#3.165.106':445
'21#.#3.110.122':445
'21#.#3.122.162':445
'21#.#3.82.131':445
'21#.#3.215.122':445
'21#.#3.21.225':445
'21#.#3.67.79':445
'21#.#3.157.35':445
'21#.#3.120.204':445
'21#.#3.182.171':445
'21#.#3.31.227':445
'21#.#3.160.122':445
'21#.#3.22.129':445
'21#.#3.11.116':445
'21#.#3.129.8':445
'21#.#3.50.59':445
'21#.#3.7.167':445
'21#.#3.252.153':445
'21#.#3.26.13':445
'21#.#3.208.110':445
'21#.#3.94.181':445
'21#.#3.39.217':445
'21#.#3.215.90':445
'21#.#3.216.206':445
'21#.#3.251.252':445
'21#.#3.104.11':445
'21#.#3.133.82':139
'21#.#3.127.247':139
'21#.#3.116.163':139
'21#.#3.21.39':139
'21#.#3.172.145':139
'21#.#3.234.178':139
'21#.#3.17.92':139
'21#.83.2.44':139
'21#.#3.14.165':139
'21#.#3.245.108':139
'21#.#3.39.160':139
'21#.#3.67.210':445
'21#.#3.150.67':139
'21#.#3.32.209':445
'21#.#3.244.73':445
'21#.#3.104.3':445
'21#.#3.52.43':139
'21#.#3.160.235':139
'21#.#3.104.112':139
'21#.#3.34.227':139
'21#.#3.111.146':139
'21#.#3.182.154':445
'21#.#3.251.252':139
'21#.#3.104.11':139
'21#.#3.252.153':139
'21#.#3.26.13':139
'21#.#3.7.167':139
'21#.#3.50.59':139
'21#.#3.120.204':139
'21#.#3.215.90':139
'21#.#3.216.206':139
'21#.#3.39.217':139
'21#.#3.94.181':139
'21#.#3.60.57':139
'21#.#3.0.114':139
'21#.#3.151.222':139
'21#.#3.140.234':139
'21#.#3.45.165':139
'21#.#3.182.154':139
'21#.#3.208.110':139
'21#.#3.124.184':139
'21#.#3.80.132':139
'21#.#3.1.135':139
'21#.#3.45.165':445
'21#.#3.151.222':445
'21#.#3.140.234':445
'21#.#3.32.209':139
'21#.#3.67.210':139
'21#.#3.1.135':445
'21#.#3.124.184':445
'21#.#3.80.132':445
'21#.#3.60.57':445
'21#.#3.0.114':445
'21#.#3.104.3':139
'21#.#3.67.79':139
'21#.#3.11.116':139
'21#.#3.21.225':139
'21#.#3.182.171':139
'21#.#3.157.35':139
'21#.#3.160.122':139
'21#.#3.244.73':139
'21#.#3.31.227':139
'21#.#3.129.8':139
'21#.#3.22.129':139
'21#.#3.178.188':445
'21#.#3.238.135':445
'21#.#3.107.254':445
'21#.#3.106.207':445
'21#.#3.179.38':445
'21#.#3.36.25':445
'21#.#3.165.23':445
'21#.#3.24.231':445
'21#.#3.241.111':445
'21#.#3.242.116':445
'21#.#3.50.24':445
'21#.#3.22.134':139
'21#.#3.223.1':139
'21#.#3.38.228':139
'21#.#3.68.182':139
'21#.#3.228.68':139
'21#.#3.120.75':445
'21#.#3.191.53':445
'21#.#3.28.145':139
'21#.#3.88.124':139
'21#.#3.56.16':139
'21#.#3.149.144':445
'21#.#3.120.74':445
'21#.#3.48.250':445
'21#.#3.248.22':445
'21#.#3.111.6':445
'21#.#3.212.170':445
'21#.#3.15.72':445
'21#.#3.151.72':445
'21#.#3.92.120':445
'21#.#3.227.92':445
'21#.#3.103.141':445
'21#.#3.2.238':445
'21#.#3.181.211':445
'21#.#3.44.246':445
'21#.#3.82.243':445
'21#.#3.191.122':445
'21#.#3.22.229':445
'21#.#3.109.100':445
'21#.#3.99.83':445
'21#.#3.52.182':445
'21#.#3.69.252':445
'21#.#3.182.78':139
'21#.#3.191.122':139
'21#.#3.44.246':139
'21#.#3.82.243':139
'21#.#3.36.25':139
'21#.#3.165.23':139
'21#.#3.69.252':139
'21#.#3.99.83':139
'21#.#3.52.182':139
'21#.#3.2.238':139
'21#.#3.181.211':139
'21#.#3.24.231':139
'21#.#3.106.207':139
'21#.#3.120.75':139
'21#.#3.179.38':139
'21#.#3.238.135':139
'21#.#3.107.254':139
'21#.#3.241.111':139
'21#.#3.242.116':139
'21#.#3.50.24':139
'21#.#3.191.53':139
'21#.#3.178.188':139
'21#.#3.140.138':139
'21#.#3.24.82':139
'21#.#3.139.98':139
'21#.#3.212.170':139
'21#.#3.15.72':139
'21#.#3.183.193':139
'21#.#3.97.248':139
'21#.#3.197.126':139
'21#.#3.157.239':139
'21#.#3.195.188':139
'21#.#3.151.72':139
'21#.#3.248.22':139
'21#.#3.111.6':139
'21#.#3.103.141':139
'21#.#3.22.229':139
'21#.#3.109.100':139
'21#.#3.92.120':139
'21#.#3.227.92':139
'21#.#3.120.74':139
'21#.#3.48.250':139
'21#.#3.149.144':139
'21#.#3.102.87':445
'21#.#3.204.77':445
'21#.#3.87.61':445
'21#.#3.89.140':445
'21#.#3.38.109':445
'21#.#3.44.236':445
'21#.#3.91.10':445
'21#.#3.220.35':445
'21#.#3.33.16':445
'21#.#3.75.98':445
'21#.#3.83.153':445
'21#.#3.91.10':139
'21#.#3.141.10':139
'21#.#3.44.236':139
'21#.#3.75.98':139
'21#.#3.220.35':139
'21#.#3.33.198':445
'21#.#3.153.74':445
'21#.#3.56.59':139
'21#.#3.222.101':139
'21#.#3.168.140':139
'21#.#3.215.122':139
'21#.#3.122.162':139
'21#.#3.82.131':139
'21#.#3.120.171':139
'21#.#3.179.240':139
'21#.#3.17.35':139
'21#.#3.145.123':139
'21#.#3.122.164':139
'21#.#3.165.106':139
'21#.#3.110.122':139
'21#.83.20.7':139
'21#.#3.56.59':445
'21#.#3.182.91':139
'21#.#3.168.140':445
'21#.#3.141.10':445
'21#.#3.222.101':445
'21#.#3.79.237':139
'21#.#3.18.28':139
'21#.#3.155.250':139
'21#.#3.75.247':139
'21#.#3.0.107':139
'21#.#3.33.16':139
'21#.#3.88.124':445
'21#.#3.56.16':445
'21#.#3.223.1':445
'21#.#3.38.228':445
'21#.#3.22.134':445
'21#.#3.36.25':9988
'21#.#3.165.23':9988
'21#.#3.178.188':9988
'21#.#3.28.145':445
'21#.#3.120.75':9988
'21#.#3.228.68':445
'21#.#3.157.239':445
'21#.#3.195.188':445
'21#.#3.24.82':445
'21#.#3.139.98':445
'21#.#3.140.138':445
'21#.#3.182.78':445
'21#.#3.68.182':445
'21#.#3.97.248':445
'21#.#3.197.126':445
'21#.#3.183.193':445
'21#.#3.153.74':139
'21#.#3.83.153':139
'21#.#3.33.198':139
'21#.#3.15.72':9988
'21#.#3.139.98':9988
'21#.#3.102.87':139
'21#.#3.204.77':139
'21#.#3.87.61':139
'21#.#3.89.140':139
'21#.#3.38.109':139
'21#.#3.212.170':9988
'21#.#3.69.252':9988
'21#.#3.109.100':9988
'21#.#3.52.182':9988
'21#.#3.82.243':9988
'21#.#3.2.238':9988
'21#.#3.92.120':9988
'21#.#3.151.72':9988
'21#.#3.120.74':9988
'21#.#3.111.6':9988
'21#.#3.48.250':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней