Trojan.Starman.6096

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2636.dir00\svchost.exe.mdmp 16325836412032280

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WER2636.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'22#.#98.3.189':445
'22#.#98.12.197':445
'22#.#98.116.129':445
'22#.#98.134.57':445
'22#.#98.37.217':445
'22#.#98.74.80':445
'22#.#98.135.193':445
'22#.#98.118.91':445
'22#.#98.128.176':445
'22#.#98.131.206':445
'22#.#98.126.222':445
'22#.#98.50.57':445
'22#.#98.111.8':445
'22#.#98.126.223':445
'22#.#98.178.246':445
'22#.#98.41.107':445
'22#.#98.98.104':445
'22#.#98.78.45':445
'22#.#98.176.14':445
'22#.#98.149.82':445
'22#.#98.91.149':139
'22#.#98.236.201':139
'22#.#98.91.149':445
'22#.#98.236.201':445
'22#.#98.246.196':445
'22#.#98.22.126':445
'22#.#98.22.126':139
'22#.#98.62.53':445
'22#.#98.98.23':445
'22#.#98.26.131':445
'22#.#98.20.180':445
'22#.#98.149.82':139
'22#.#98.246.196':139
'22#.#98.221.17':445
'22#.#98.176.14':139
'22#.#98.44.150':445
'22#.#98.62.53':139
'22#.#98.98.23':139
'22#.#98.26.131':139
'22#.#98.20.180':139
'22#.#98.218.79':445
'22#.#98.212.44':445
'22#.#98.221.17':139
'22#.#98.136.37':445
'22#.#98.78.45':139
'22#.#98.3.189':139
'22#.#98.12.197':139
'22#.#98.116.129':139
'22#.#98.134.57':139
'22#.#98.37.217':139
'22#.#98.74.80':139
'22#.#98.135.193':139
'22#.#98.118.91':139
'22#.#98.240.211':445
'22#.#98.108.190':445
'22#.#98.194.19':445
'22#.#98.180.50':445
'22#.#98.60.83':445
'22#.#98.136.134':445
'22#.#98.82.75':445
'22#.#98.76.178':445
'22#.#98.5.180':445
'22#.#98.240.253':445
'22#.#98.67.40':445
'22#.#98.211.181':445
'22#.#98.110.77':445
'22#.#98.45.176':445
'22#.#98.83.74':445
'22#.#98.194.170':445
'22#.#98.121.249':445
'22#.#98.61.171':445
'22#.#98.161.134':445
'22#.#98.151.128':445
'22#.#98.71.44':445
'22#.#98.248.244':445
'22#.#98.173.94':445
'22#.#98.242.165':445
'22#.#98.135.23':445
'22#.#98.83.144':445
'22#.#98.150.182':139
'22#.#98.26.211':139
'22#.#98.46.124':139
'22#.#98.145.14':139
'22#.#98.248.144':139
'22#.#98.255.251':139
'22#.#98.71.37':139
'22#.#98.35.75':139
'22#.#98.22.12':139
'22#.#98.25.181':445
'22#.#98.98.147':445
'22#.#98.173.222':445
'22#.#98.57.135':445
'22#.#98.225.125':445
'22#.#98.197.76':445
'22#.#98.59.138':445
'22#.#98.101.112':445
'22#.#98.114.245':445
'22#.#98.61.27':445
'22#.#98.82.115':445
'22#.#98.109.131':445
'22#.#98.119.184':445
'22#.#98.237.252':445
'22#.#98.194.5':445
'22#.#98.94.246':445
'22#.#98.128.92':445
'22#.#98.157.203':445
'22#.#98.127.191':139
'22#.#98.82.115':139
'22#.#98.109.131':139
'22#.#98.119.184':139
'22#.#98.237.252':139
'22#.#98.194.5':139
'22#.#98.94.246':139
'22#.#98.128.92':139
'22#.#98.157.203':139
'22#.#98.25.181':139
'22#.#98.161.134':139
'22#.#98.151.128':139
'22#.#98.71.44':139
'22#.#98.248.244':139
'22#.#98.173.94':139
'22#.#98.242.165':139
'22#.#98.135.23':139
'22#.#98.83.144':139
'22#.#98.61.27':139
'22#.#98.33.26':139
'22#.#98.242.251':139
'22#.#98.121.137':139
'22#.#98.236.161':139
'22#.#98.106.47':139
'22#.#98.139.101':139
'22#.#98.155.243':139
'22#.#98.22.79':139
'22#.#98.65.104':139
'22#.#98.98.147':139
'22#.#98.173.222':139
'22#.#98.57.135':139
'22#.#98.225.125':139
'22#.#98.197.76':139
'22#.#98.59.138':139
'22#.#98.101.112':139
'22#.#98.114.245':139
'22#.#98.24.167':139
'22#.#98.21.191':139
'22#.#98.64.63':139
'22#.#98.3.65':139
'22#.#98.128.10':445
'22#.#98.58.96':445
'22#.#98.162.137':139
'22#.#98.59.142':139
'22#.#98.35.127':139
'22#.#98.120.244':139
'22#.#98.81.189':139
'22#.#98.129.238':139
'22#.#98.61.182':139
'22#.#98.128.166':139
'22#.#98.238.78':139
'22#.#98.109.51':139
'22#.#98.3.78':139
'22#.#98.11.137':445
'22#.#98.69.153':445
'22#.#98.200.68':445
'22#.#98.153.97':445
'22#.#98.118.107':445
'22#.#98.128.215':445
'22#.#98.150.63':445
'22#.#98.30.55':445
'22#.#98.214.215':445
'22#.#98.48.88':445
'22#.#98.98.181':445
'22#.#98.54.38':445
'22#.#98.131.140':445
'22#.#98.1.107':445
'22#.#98.55.54':445
'22#.#98.201.154':445
'22#.#98.196.24':445
'22#.#98.87.162':445
'22#.#98.69.63':139
'22#.#98.48.88':139
'22#.#98.118.107':139
'22#.#98.54.38':139
'22#.#98.201.154':139
'22#.#98.200.68':139
'22#.#98.30.55':139
'22#.#98.153.97':139
'22#.#98.69.153':139
'22#.#98.196.24':139
'22#.#98.58.96':139
'22#.#98.131.140':139
'22#.#98.1.107':139
'22#.#98.55.54':139
'22#.#98.87.162':139
'22#.#98.98.181':139
'22#.#98.11.137':139
'22#.#98.128.10':139
'22#.#98.214.215':139
'22#.#98.161.239':139
'22#.#98.145.161':139
'22#.#98.146.20':139
'22#.#98.94.91':139
'22#.#98.189.134':139
'22#.#98.233.51':139
'22#.#98.209.34':139
'22#.#98.18.250':139
'22#.#98.241.216':139
'22#.#98.10.240':139
'22#.#98.60.105':139
'22#.#98.128.215':139
'22#.#98.150.63':139
'22#.#98.249.243':139
'22#.#98.217.65':139
'22#.#98.124.118':139
'22#.#98.14.244':139
'22#.#98.211.181':139
'22#.#98.121.249':139
'22#.#98.45.176':139
'22#.#98.67.40':139
'22#.#98.194.170':139
'22#.#98.240.253':139
'22#.#98.61.171':139
'22#.#98.83.74':139
'22#.#98.110.77':139
'22#.#98.24.167':9988
'22#.#98.162.137':9988
'22#.#98.129.238':9988
'22#.#98.120.244':9988
'22#.#98.212.44':139
'22#.#98.240.211':139
'22#.#98.136.37':139
'22#.#98.218.79':139
'22#.#98.180.50':139
'22#.#98.126.222':139
'22#.#98.41.107':139
'22#.#98.111.8':139
'22#.#98.131.206':139
'22#.#98.178.246':139
'22#.#98.128.176':139
'22#.#98.98.104':139
'22#.#98.126.223':139
'22#.#98.50.57':139
'22#.#98.194.19':139
'22#.#98.76.178':139
'22#.#98.60.83':139
'22#.#98.108.190':139
'22#.#98.82.75':139
'22#.#98.44.150':139
'22#.#98.5.180':139
'22#.#98.136.134':139
'22#.#98.18.250':9988
'22#.#98.209.34':445
'22#.#98.18.250':445
'22#.#98.161.239':445
'22#.#98.145.161':445
'22#.#98.69.63':445
'22#.#98.129.238':445
'22#.#98.189.134':445
'22#.#98.233.51':445
'22#.#98.94.91':445
'22#.#98.124.118':445
'22#.#98.14.244':445
'22#.#98.10.240':445
'22#.#98.60.105':445
'22#.#98.146.20':445
'22#.#98.241.216':445
'22#.#98.249.243':445
'22#.#98.217.65':445
'22#.#98.61.182':445
'22#.#98.162.137':445
'22#.#98.21.191':445
'22#.#98.24.167':445
'22#.#98.59.142':445
'22#.#98.10.240':9988
'22#.#98.94.91':9988
'22#.#98.128.215':9988
'22#.#98.1.107':9988
'22#.#98.3.65':445
'22#.#98.109.51':445
'22#.#98.3.78':445
'22#.#98.120.244':445
'22#.#98.81.189':445
'22#.#98.35.127':445
'22#.#98.64.63':445
'22#.#98.128.166':445
'22#.#98.238.78':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней