Trojan.Starman.6667

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER2068.dir00\svchost.exe.mdmp 16325836412032352

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2068.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#56.207.128':139
'21#.#56.240.206':139
'21#.#56.77.148':139
'21#.#56.86.224':139
'21#.#56.15.39':139
'21#.#56.76.239':139
'21#.#56.25.179':139
'21#.#56.234.210':139
'21#.#56.83.44':139
'21#.#56.211.72':139
'21#.#56.28.99':139
'21#.#56.97.22':445
'21#.#56.6.171':445
'21#.#56.13.233':445
'21#.#56.28.72':445
'21#.#56.140.32':445
'21#.#56.87.40':139
'21#.#56.39.128':139
'21#.#56.45.67':139
'21#.#56.121.115':445
'21#.#56.78.154':139
'21#.#56.83.44':445
'21#.#56.211.72':445
'21#.#56.240.206':445
'21#.#56.77.148':445
'21#.#56.207.128':445
'21#.#56.67.156':445
'21#.#56.43.200':445
'21#.#56.25.179':445
'21#.#56.234.210':445
'21#.#56.76.239':445
'21#.#56.15.39':445
'21#.#56.116.86':139
'21#.#56.78.154':445
'21#.#56.27.44':139
'21#.#56.67.156':139
'21#.#56.43.200':139
'21#.#56.28.99':445
'21#.#56.86.224':445
'21#.#56.39.128':445
'21#.#56.45.67':445
'21#.#56.87.40':445
'21#.#56.215.243':445
'21#.#56.97.22':139
'21#.#56.6.171':139
'21#.#56.13.233':139
'21#.#56.28.72':139
'21#.#56.140.32':139
'21#.#56.7.205':445
'21#.#56.219.56':445
'21#.#56.252.203':445
'21#.#56.121.115':139
'21#.#56.140.127':445
'21#.#56.215.243':139
'21#.#56.195.108':139
'21#.#56.226.194':139
'21#.#56.100.196':139
'21#.#56.242.204':139
'21#.#56.36.215':139
'21#.#56.79.17':139
'21#.#56.33.10':139
'21#.#56.75.159':139
'21#.#56.199.226':139
'21#.#56.34.154':139
'21#.#56.195.108':445
'21#.#56.226.194':445
'21#.#56.100.196':445
'21#.#56.242.204':445
'21#.#56.36.215':445
'21#.#56.79.17':445
'21#.#56.33.10':445
'21#.#56.75.159':445
'21#.#56.199.226':445
'21#.#56.34.154':445
'21#.#56.94.32':445
'21#.#56.9.224':445
'21#.#56.111.89':445
'21#.#56.216.154':445
'21#.#56.52.82':445
'21#.#56.160.61':445
'21#.#56.16.107':445
'21#.#56.84.52':445
'21#.#56.107.185':445
'21#.#56.106.70':445
'21#.#56.106.112':445
'21#.#56.93.132':445
'21#.#56.246.16':445
'21#.#56.195.32':445
'21#.#56.111.98':445
'21#.#56.63.186':445
'21#.#56.50.72':445
'21#.#56.44.190':445
'21#.#56.21.174':445
'21#.#56.27.235':445
'21#.#56.34.124':445
'21#.#56.107.137':445
'21#.#56.79.33':445
'21#.#56.246.146':445
'21#.#56.239.30':445
'21#.#56.25.178':445
'21#.#56.92.154':445
'21#.#56.73.31':445
'21#.#56.67.139':445
'21#.#56.206.201':445
'21#.#56.163.105':445
'21#.#56.71.225':445
'21#.#56.47.76':139
'21#.#56.144.53':139
'21#.#56.103.216':139
'21#.#56.245.232':139
'21#.#56.240.119':139
'21#.#56.141.175':139
'21#.#56.13.206':139
'21#.#56.176.88':139
'21#.#56.98.52':139
'21#.#56.185.61':139
'21#.#56.181.153':139
'21#.#56.122.185':139
'21#.#56.71.235':139
'21#.#56.15.167':139
'21#.#56.15.207':445
'21#.#56.225.209':445
'21#.#56.71.6':139
'21#.#56.39.71':139
'21#.#56.6.74':139
'21#.#56.62.112':139
'21#.#56.73.114':139
'21#.#56.70.216':445
'21#.#56.79.33':139
'21#.#56.246.146':139
'21#.#56.239.30':139
'21#.#56.25.178':139
'21#.#56.92.154':139
'21#.#56.73.31':139
'21#.#56.67.139':139
'21#.#56.206.201':139
'21#.#56.163.105':139
'21#.#56.71.225':139
'21#.#56.70.216':139
'21#.#56.36.214':139
'21#.#56.109.108':139
'21#.#56.3.175':139
'21#.#56.27.44':445
'21#.#56.116.86':445
'21#.#56.116.84':139
'21#.#56.7.217':139
'21#.#56.146.76':139
'21#.#56.132.181':139
'21#.#56.79.132':139
'21#.#56.36.214':445
'21#.#56.109.108':445
'21#.#56.3.175':445
'21#.#56.15.207':139
'21#.#56.225.209':139
'21#.#56.116.84':445
'21#.#56.7.217':445
'21#.#56.146.76':445
'21#.#56.132.181':445
'21#.#56.79.132':445
'21#.#56.44.190':139
'21#.#56.195.32':139
'21#.#56.93.132':139
'21#.#56.63.186':139
'21#.#56.107.137':139
'21#.#56.111.98':139
'21#.#56.21.174':139
'21#.#56.50.72':139
'21#.#56.34.124':139
'21#.#56.246.16':139
'21#.#56.27.235':139
'21#.#56.94.32':139
'21#.#56.150.214':445
'21#.#56.40.47':445
'21#.#56.12.116':445
'21#.#56.55.110':445
'21#.#56.88.22':445
'21#.#56.122.43':445
'21#.#56.105.122':445
'21#.#56.43.109':445
'21#.#56.34.173':445
'21#.#56.108.157':445
'21#.#56.30.44':445
'21#.#56.43.9':139
'21#.#56.38.222':139
'21#.#56.42.167':139
'21#.#56.245.38':139
'21#.#56.112.245':139
'21#.#56.241.146':445
'21#.#56.142.241':445
'21#.#56.63.144':139
'21#.#56.92.38':139
'21#.#56.169.102':139
'21#.#56.173.129':445
'21#.#56.185.197':445
'21#.#56.62.47':445
'21#.#56.49.215':445
'21#.#56.62.14':445
'21#.#56.181.86':445
'21#.#56.16.181':445
'21#.#56.2.156':445
'21#.#56.12.194':445
'21#.#56.89.219':445
'21#.#56.149.155':445
'21#.#56.50.234':445
'21#.#56.22.51':445
'21#.#56.1.181':445
'21#.#56.21.214':445
'21#.#56.3.165':445
'21#.#56.80.64':445
'21#.#56.133.125':445
'21#.#56.253.58':445
'21#.#56.202.243':445
'21#.#56.109.102':445
'21#.#56.38.154':139
'21#.#56.3.165':139
'21#.#56.1.181':139
'21#.#56.21.214':139
'21#.#56.122.43':139
'21#.#56.105.122':139
'21#.#56.109.102':139
'21#.#56.253.58':139
'21#.#56.202.243':139
'21#.#56.50.234':139
'21#.#56.22.51':139
'21#.#56.43.109':139
'21#.#56.55.110':139
'21#.#56.88.22':139
'21#.#56.30.44':139
'21#.#56.241.146':139
'21#.#56.142.241':139
'21#.#56.34.173':139
'21#.#56.108.157':139
'21#.#56.40.47':139
'21#.#56.12.116':139
'21#.#56.150.214':139
'21#.#56.39.173':139
'21#.#56.119.151':139
'21#.#56.217.94':139
'21#.#56.181.86':139
'21#.#56.16.181':139
'21#.#56.37.150':139
'21#.#56.40.56':139
'21#.#56.98.215':139
'21#.#56.227.211':139
'21#.#56.74.34':139
'21#.#56.2.156':139
'21#.#56.49.215':139
'21#.#56.62.14':139
'21#.#56.149.155':139
'21#.#56.80.64':139
'21#.#56.133.125':139
'21#.#56.12.194':139
'21#.#56.89.219':139
'21#.#56.185.197':139
'21#.#56.62.47':139
'21#.#56.173.129':139
'21#.#56.58.198':445
'21#.#56.5.221':445
'21#.#56.172.94':445
'21#.#56.42.230':445
'21#.#56.66.6':445
'21#.#56.43.36':445
'21#.#56.10.182':445
'21#.#56.75.10':445
'21#.#56.38.106':445
'21#.#56.107.38':445
'21#.#56.47.101':445
'21#.#56.232.26':139
'21#.#56.144.55':139
'21#.#56.106.48':139
'21#.#56.43.36':139
'21#.#56.10.182':139
'21#.#56.6.169':139
'21#.#56.68.207':445
'21#.#56.146.96':139
'21#.#56.62.159':139
'21#.#56.13.107':139
'21#.#56.9.224':139
'21#.#56.111.89':139
'21#.#56.216.154':139
'21#.#56.52.82':139
'21#.#56.160.61':139
'21#.#56.16.107':139
'21#.#56.84.52':139
'21#.#56.107.185':139
'21#.#56.106.70':139
'21#.#56.106.112':139
'21#.#56.219.56':139
'21#.#56.62.159':445
'21#.#56.13.107':445
'21#.#56.144.55':445
'21#.#56.106.48':445
'21#.#56.232.26':445
'21#.#56.252.203':139
'21#.#56.7.205':139
'21#.#56.140.127':139
'21#.#56.146.96':445
'21#.#56.6.169':445
'21#.#56.75.10':139
'21#.#56.92.38':445
'21#.#56.169.102':445
'21#.#56.38.222':445
'21#.#56.42.167':445
'21#.#56.43.9':445
'21#.#56.241.146':9988
'21#.#56.55.110':9988
'21#.#56.142.241':9988
'21#.#56.63.144':445
'21#.#56.30.44':9988
'21#.#56.112.245':445
'21#.#56.227.211':445
'21#.#56.74.34':445
'21#.#56.119.151':445
'21#.#56.217.94':445
'21#.#56.39.173':445
'21#.#56.38.154':445
'21#.#56.245.38':445
'21#.#56.40.56':445
'21#.#56.98.215':445
'21#.#56.37.150':445
'21#.#56.42.230':139
'21#.#56.66.6':139
'21#.#56.47.101':139
'21#.#56.181.86':9988
'21#.#56.68.207':139
'21#.#56.38.106':139
'21#.#56.107.38':139
'21#.#56.5.221':139
'21#.#56.172.94':139
'21#.#56.58.198':139
'21#.#56.12.194':9988
'21#.#56.40.47':9988
'21#.#56.34.173':9988
'21#.#56.150.214':9988
'21#.#56.88.22':9988
'21#.#56.12.116':9988
'21#.#56.49.215':9988
'21#.#56.62.14':9988
'21#.#56.253.58':9988
'21#.#56.105.122':9988
'21#.#56.21.214':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней