Trojan.Starman.6110

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1156 -dm 7 7 %TEMP%\WERa3f5.dir00\svchost.exe.mdmp 16325836412032080

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa3f5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#58.153.86':139
'21#.#58.249.219':139
'21#.#58.50.99':139
'21#.#58.178.8':139
'21#.#58.173.162':139
'21#.#58.203.238':139
'21#.#58.207.162':139
'21#.#58.86.88':139
'21#.#58.172.172':139
'21#.#58.190.239':139
'21#.#58.172.183':139
'21#.#58.112.78':139
'21#.#58.255.209':139
'21#.#58.167.199':139
'21#.#58.188.151':139
'21#.#58.113.136':139
'21#.#58.102.203':139
'21#.#58.119.126':139
'21#.#58.132.119':139
'21#.#58.230.122':139
'21#.#58.233.70':139
'21#.#58.48.233':139
'21#.#58.193.22':139
'21#.#58.161.74':445
'21#.#58.216.160':445
'21#.#58.74.177':445
'21#.#58.27.223':139
'21#.#58.176.198':445
'21#.#58.99.174':445
'21#.#58.209.6':445
'21#.#58.5.253':445
'21#.#58.6.131':445
'21#.#58.72.87':445
'21#.#58.205.123':445
'21#.#58.90.91':139
'21#.#58.126.159':139
'21#.#58.152.54':139
'21#.#58.86.254':139
'21#.#58.55.3':139
'21#.#58.74.167':139
'21#.#58.31.156':139
'21#.#58.167.145':139
'21#.#58.156.99':139
'21#.#58.28.227':139
'21#.#58.42.189':139
'21#.#58.183.81':139
'21#.#58.155.140':445
'21#.#58.80.84':445
'21#.#58.57.181':445
'21#.#58.62.234':445
'21#.#58.71.98':445
'21#.#58.15.12':445
'21#.#58.115.112':445
'21#.#58.169.160':445
'21#.#58.112.76':445
'21#.#58.229.182':445
'21#.#58.75.230':445
'21#.#58.34.28':445
'21#.#58.163.36':445
'21#.#58.120.72':445
'21#.#58.208.38':445
'21#.#58.194.51':445
'21#.#58.4.185':445
'21#.#58.158.221':445
'21#.#58.77.158':445
'21#.#58.221.188':445
'21#.#58.135.90':445
'21#.#58.176.9':445
'21#.#58.70.29':445
'21#.#58.6.131':139
'21#.#58.209.6':139
'21#.#58.205.123':139
'21#.#58.99.174':139
'21#.#58.72.87':139
'21#.#58.5.253':139
'21#.#58.111.221':139
'21#.#58.237.79':139
'21#.#58.158.161':139
'21#.#58.154.164':139
'21#.#58.115.43':139
'21#.#58.227.147':445
'21#.#58.242.252':445
'21#.#58.86.140':445
'21#.#58.157.63':445
'21#.#58.33.246':445
'21#.#58.189.76':445
'21#.#58.161.74':139
'21#.#58.216.160':139
'21#.#58.74.177':139
'21#.#58.81.176':445
'21#.#58.176.198':139
'21#.#58.154.164':445
'21#.#58.178.98':139
'21#.#58.254.162':139
'21#.#58.68.250':139
'21#.#58.46.42':139
'21#.#58.125.136':139
'21#.#58.207.142':139
'21#.#58.17.16':139
'21#.#58.9.166':139
'21#.#58.103.245':139
'21#.#58.240.97':139
'21#.#58.128.192':139
'21#.#58.162.235':139
'21#.#58.107.163':139
'21#.#58.134.27':139
'21#.#58.0.247':139
'21#.#58.45.38':139
'21#.#58.54.209':139
'21#.#58.13.88':139
'21#.#58.237.193':139
'21#.#58.195.195':139
'21#.#58.36.124':139
'21#.#58.156.128':139
'21#.#58.170.21':139
'21#.#58.53.173':139
'21#.#58.109.174':139
'21#.#58.30.102':139
'21#.#58.128.185':139
'21#.#58.17.132':139
'21#.#58.212.78':139
'21#.#58.169.35':139
'21#.#58.9.38':139
'21#.#58.132.49':139
'21#.#58.144.123':139
'21#.#58.60.230':139
'21#.#58.35.16':139
'21#.#58.79.111':139
'21#.#58.93.155':139
'21#.#58.149.98':139
'21#.#58.101.34':139
'21#.#58.36.235':139
'21#.#58.77.8':139
'21#.#58.113.23':139
'21#.#58.100.88':139
'21#.#58.201.119':139
'21#.#58.220.201':139
'21#.#58.2.138':139
'21#.#58.119.126':445
'21#.#58.132.119':445
'21#.#58.230.122':445
'21#.#58.233.70':445
'21#.#58.48.233':445
'21#.#58.178.8':445
'21#.#58.249.219':445
'21#.#58.203.238':445
'21#.#58.153.86':445
'21#.#58.173.162':445
'21#.#58.50.99':445
'21#.#58.237.79':445
'21#.#58.183.81':445
'21#.#58.111.221':445
'21#.#58.115.43':445
'21#.#58.158.161':445
'21#.#58.188.151':445
'21#.#58.255.209':445
'21#.#58.102.203':445
'21#.#58.112.78':445
'21#.#58.113.136':445
'21#.#58.167.199':445
'21#.#58.190.239':445
'21#.#58.31.156':445
'21#.#58.167.145':445
'21#.#58.156.99':445
'21#.#58.28.227':445
'21#.#58.42.189':445
'21#.#58.27.223':445
'21#.#58.255.243':139
'21#.#58.251.103':139
'21#.#58.2.86':139
'21#.#58.27.161':139
'21#.#58.85.240':139
'21#.#58.86.88':445
'21#.#58.193.22':445
'21#.#58.207.162':445
'21#.#58.172.183':445
'21#.#58.172.172':445
'21#.#58.86.254':445
'21#.#58.126.159':445
'21#.#58.74.167':445
'21#.#58.90.91':445
'21#.#58.55.3':445
'21#.#58.152.54':445
'21#.#58.159.121':445
'21#.#58.186.17':445
'21#.#58.234.156':445
'21#.#58.10.111':445
'21#.#58.125.23':445
'21#.#58.110.125':445
'21#.#58.30.77':445
'21#.#58.156.55':445
'21#.#58.47.246':445
'21#.#58.42.4':445
'21#.#58.150.169':445
'21#.#58.249.149':445
'21#.#58.209.53':139
'21#.#58.59.28':139
'21#.#58.82.198':139
'21#.#58.85.106':139
'21#.#58.58.204':139
'21#.#58.106.88':445
'21#.#58.194.89':445
'21#.#58.51.153':445
'21#.#58.159.236':445
'21#.#58.15.4':445
'21#.#58.236.249':445
'21#.#58.13.112':445
'21#.#58.69.123':445
'21#.#58.11.160':445
'21#.#58.37.207':445
'21#.#58.79.216':445
'21#.#58.72.51':445
'21#.#58.102.154':445
'21#.#58.58.22':445
'21#.#58.222.202':445
'21#.#58.80.77':445
'21#.#58.129.230':445
'21#.#58.23.45':445
'21#.#58.166.227':445
'21#.#58.118.190':445
'21#.#58.81.207':445
'21#.#58.57.48':445
'21#.#58.130.168':445
'21#.#58.15.124':445
'21#.#58.113.79':445
'21#.#58.182.81':445
'21#.#58.139.95':445
'21#.#58.134.142':445
'21#.#58.197.134':445
'21#.#58.247.245':139
'21#.#58.42.4':139
'21#.#58.156.55':139
'21#.#58.249.149':139
'21#.#58.30.77':139
'21#.#58.150.169':139
'21#.#58.13.112':139
'21#.#58.81.207':139
'21#.#58.166.227':139
'21#.#58.130.168':139
'21#.#58.47.246':139
'21#.#58.57.48':139
'21#.#58.159.236':139
'21#.#58.194.89':139
'21#.#58.236.249':139
'21#.#58.106.88':139
'21#.#58.15.4':139
'21#.#58.51.153':139
'21#.#58.186.17':139
'21#.#58.234.156':139
'21#.#58.10.111':139
'21#.#58.125.23':139
'21#.#58.110.125':139
'21#.#58.118.190':139
'21#.#58.222.202':139
'21#.#58.23.45':139
'21#.#58.1.56':139
'21#.#58.102.154':139
'21#.#58.129.230':139
'21#.#58.58.22':139
'21#.#58.101.153':139
'21#.#58.92.65':139
'21#.#58.104.15':139
'21#.#58.16.144':139
'21#.#58.80.77':139
'21#.#58.139.95':139
'21#.#58.113.79':139
'21#.#58.197.134':139
'21#.#58.15.124':139
'21#.#58.134.142':139
'21#.#58.182.81':139
'21#.#58.79.216':139
'21#.#58.11.160':139
'21#.#58.37.207':139
'21#.#58.69.123':139
'21#.#58.72.51':139
'21#.#58.1.56':445
'21#.#58.112.76':139
'21#.#58.115.112':139
'21#.#58.75.230':139
'21#.#58.15.12':139
'21#.#58.229.182':139
'21#.#58.169.160':139
'21#.#58.86.140':139
'21#.#58.227.147':139
'21#.#58.33.246':139
'21#.#58.70.29':139
'21#.#58.157.63':139
'21#.#58.221.188':139
'21#.#58.158.221':139
'21#.#58.176.9':139
'21#.#58.4.185':139
'21#.#58.135.90':139
'21#.#58.77.158':139
'21#.#58.155.140':139
'21#.#58.80.84':139
'21#.#58.57.181':139
'21#.#58.62.234':139
'21#.#58.71.98':139
'21#.#58.242.252':139
'21#.#58.56.141':445
'21#.#58.217.2':445
'21#.#58.24.18':445
'21#.#58.180.134':445
'21#.#58.38.157':445
'21#.#58.107.168':445
'21#.#58.30.238':445
'21#.#58.5.211':445
'21#.#58.169.221':445
'21#.#58.248.130':445
'21#.#58.222.104':445
'21#.#58.1.203':445
'21#.#58.166.87':445
'21#.#58.134.226':445
'21#.#58.189.76':139
'21#.#58.81.176':139
'21#.#58.4.137':445
'21#.#58.89.147':445
'21#.#58.3.145':445
'21#.#58.51.218':445
'21#.#58.77.37':445
'21#.#58.218.76':445
'21#.#58.163.36':139
'21#.#58.234.156':9988
'21#.#58.13.112':9988
'21#.#58.186.17':9988
'21#.#58.159.236':9988
'21#.#58.110.125':9988
'21#.#58.130.168':9988
'21#.#58.134.226':139
'21#.#58.1.203':139
'21#.#58.102.154':9988
'21#.#58.197.134':9988
'21#.#58.11.160':9988
'21#.#58.247.245':445
'21#.#58.92.65':445
'21#.#58.101.153':445
'21#.#58.16.144':445
'21#.#58.104.15':445
'21#.#58.85.106':445
'21#.#58.82.198':445
'21#.#58.106.88':9988
'21#.#58.209.53':445
'21#.#58.59.28':445
'21#.#58.58.204':445
'21#.#58.166.87':139
'21#.#58.169.221':139
'21#.#58.30.238':139
'21#.#58.222.104':139
'21#.#58.107.168':139
'21#.#58.248.130':139
'21#.#58.5.211':139
'21#.#58.120.72':139
'21#.#58.34.28':139
'21#.#58.194.51':139
'21#.#58.159.121':139
'21#.#58.208.38':139
'21#.#58.51.218':139
'21#.#58.89.147':139
'21#.#58.218.76':139
'21#.#58.4.137':139
'21#.#58.77.37':139
'21#.#58.3.145':139
'21#.#58.56.141':139
'21#.#58.217.2':139
'21#.#58.24.18':139
'21#.#58.180.134':139
'21#.#58.38.157':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней