Trojan.Starman.6669

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER276e.dir00\svchost.exe.mdmp 16325836412032216

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER276e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#23.52.24':139
'19#.#23.68.151':445
'19#.#23.48.111':139
'19#.#23.54.15':139
'19#.#23.48.111':445
'19#.#23.102.150':139
'19#.#23.121.95':139
'19#.#23.54.15':445
'19#.#23.52.24':445
'19#.#23.68.151':139
'19#.#23.61.8':445
'19#.#23.117.10':445
'19#.#23.253.113':445
'19#.#23.109.173':445
'19#.#23.15.178':445
'19#.#23.105.216':445
'19#.#23.102.104':445
'19#.#23.206.244':445
'19#.#23.39.143':445
'19#.#23.130.183':139
'19#.#23.128.221':139
'19#.#23.118.216':139
'19#.#23.145.20':139
'19#.123.4.0':139
'19#.#23.47.53':139
'19#.#23.33.7':139
'19#.#23.66.39':139
'19#.#23.61.170':139
'19#.#23.223.143':139
'19#.#23.77.31':139
'19#.#23.75.77':139
'19#.#23.34.177':139
'19#.#23.23.217':139
'19#.#23.101.78':139
'19#.#23.162.168':139
'19#.#23.20.183':139
'19#.#23.18.152':139
'19#.#23.65.205':139
'19#.#23.158.78':445
'19#.#23.240.115':445
'19#.#23.3.143':445
'19#.#23.237.106':445
'19#.#23.182.241':445
'19#.#23.158.195':445
'19#.#23.35.35':445
'19#.#23.227.182':445
'19#.#23.243.226':445
'19#.#23.143.166':445
'19#.#23.163.84':445
'19#.#23.66.33':445
'19#.#23.61.150':445
'19#.#23.85.19':445
'19#.#23.89.36':445
'19#.#23.238.13':445
'19#.#23.159.15':445
'19#.#23.212.152':445
'19#.#23.80.128':445
'19#.#23.43.131':445
'19#.#23.55.67':445
'19#.#23.154.67':445
'19#.#23.180.153':445
'19#.#23.62.55':445
'19#.#23.217.30':445
'19#.#23.138.22':445
'19#.#23.249.214':445
'19#.#23.159.31':445
'19#.#23.229.215':445
'19#.#23.24.245':445
'19#.#23.59.247':445
'19#.#23.186.199':445
'19#.#23.186.206':445
'19#.#23.91.0':445
'19#.#23.178.95':445
'19#.#23.44.179':445
'19#.#23.140.90':445
'19#.#23.22.140':445
'19#.#23.45.238':139
'19#.#23.185.254':445
'19#.#23.225.64':445
'19#.#23.156.229':445
'19#.#23.89.210':445
'19#.#23.130.68':445
'19#.#23.174.181':445
'19#.#23.48.68':445
'19#.#23.15.99':445
'19#.#23.153.241':445
'19#.#23.171.104':445
'19#.#23.128.221':445
'19#.123.4.0':445
'19#.#23.145.20':445
'19#.#23.130.183':445
'19#.#23.66.39':445
'19#.#23.33.7':445
'19#.#23.45.238':445
'19#.#23.61.170':445
'19#.#23.47.53':445
'19#.#23.226.174':445
'19#.#23.159.230':445
'19#.#23.203.62':445
'19#.#23.175.123':445
'19#.#23.85.109':445
'19#.#23.217.166':139
'19#.#23.47.165':139
'19#.#23.86.80':139
'19#.#23.7.183':139
'19#.#23.71.251':445
'19#.#23.101.206':445
'19#.#23.17.106':445
'19#.#23.179.81':445
'19#.#23.71.179':445
'19#.#23.171.110':445
'19#.#23.61.41':445
'19#.#23.48.156':445
'19#.#23.56.171':445
'19#.#23.248.56':445
'19#.#23.101.206':139
'19#.#23.17.106':139
'19#.#23.179.81':139
'19#.#23.71.179':139
'19#.#23.171.110':139
'19#.#23.61.41':139
'19#.#23.48.156':139
'19#.#23.56.171':139
'19#.#23.248.56':139
'19#.#23.48.68':139
'19#.#23.89.210':139
'19#.#23.185.254':139
'19#.#23.171.104':139
'19#.#23.156.229':139
'19#.#23.225.64':139
'19#.#23.153.241':139
'19#.#23.174.181':139
'19#.#23.130.68':139
'19#.#23.15.99':139
'19#.#23.101.78':445
'19#.#23.18.152':445
'19#.#23.77.31':445
'19#.#23.75.77':445
'19#.#23.65.205':445
'19#.#23.223.143':445
'19#.#23.118.216':445
'19#.#23.162.168':445
'19#.#23.20.183':445
'19#.#23.23.217':445
'19#.#23.175.123':139
'19#.#23.226.174':139
'19#.#23.71.251':139
'19#.#23.203.62':139
'19#.#23.159.230':139
'19#.#23.121.95':445
'19#.#23.34.177':445
'19#.#23.85.109':139
'19#.#23.102.150':445
'19#.#23.45.139':139
'19#.#23.212.201':445
'19#.#23.31.73':139
'19#.#23.194.189':139
'19#.#23.226.249':445
'19#.#23.109.224':445
'19#.#23.74.230':445
'19#.#23.19.36':445
'19#.#23.43.42':445
'19#.#23.62.158':139
'19#.#23.102.167':139
'19#.#23.9.219':139
'19#.#23.41.249':139
'19#.#23.35.139':139
'19#.#23.26.109':139
'19#.#23.46.203':139
'19#.#23.35.85':139
'19#.#23.79.26':139
'19#.#23.22.238':139
'19#.#23.229.192':445
'19#.#23.73.172':445
'19#.#23.62.134':445
'19#.#23.28.81':445
'19#.#23.63.219':445
'19#.#23.71.141':445
'19#.#23.247.71':445
'19#.#23.38.60':445
'19#.#23.100.50':445
'19#.#23.210.190':445
'19#.#23.75.230':445
'19#.#23.103.23':445
'19#.#23.74.22':445
'19#.#23.198.4':445
'19#.#23.237.28':445
'19#.#23.148.167':445
'19#.#23.3.164':445
'19#.#23.228.236':445
'19#.#23.57.18':445
'19#.#23.57.18':139
'19#.#23.148.167':139
'19#.#23.237.28':139
'19#.#23.228.236':139
'19#.#23.3.164':139
'19#.#23.28.81':139
'19#.#23.229.192':139
'19#.#23.210.190':139
'19#.#23.62.134':139
'19#.#23.103.23':139
'19#.#23.43.42':139
'19#.#23.109.224':139
'19#.#23.226.249':139
'19#.#23.212.201':139
'19#.#23.19.36':139
'19#.#23.198.4':139
'19#.#23.75.230':139
'19#.#23.74.230':139
'19#.#23.74.22':139
'19#.#23.123.135':139
'19#.#23.205.26':139
'19#.#23.246.32':139
'19#.#23.242.11':139
'19#.#23.223.89':139
'19#.#23.111.202':139
'19#.#23.44.222':139
'19#.#23.21.26':139
'19#.#23.24.204':139
'19#.#23.93.191':139
'19#.#23.38.60':139
'19#.#23.100.50':139
'19#.#23.73.172':139
'19#.#23.63.219':139
'19#.#23.71.141':139
'19#.#23.167.236':139
'19#.#23.51.106':139
'19#.#23.247.71':139
'19#.#23.189.159':139
'19#.#23.189.159':445
'19#.#23.24.245':139
'19#.#23.59.247':139
'19#.#23.186.199':139
'19#.#23.186.206':139
'19#.#23.91.0':139
'19#.#23.178.95':139
'19#.#23.44.179':139
'19#.#23.140.90':139
'19#.#23.22.140':139
'19#.#23.35.35':139
'19#.#23.237.106':139
'19#.#23.158.78':139
'19#.#23.143.166':139
'19#.#23.3.143':139
'19#.#23.240.115':139
'19#.#23.243.226':139
'19#.#23.158.195':139
'19#.#23.182.241':139
'19#.#23.227.182':139
'19#.#23.61.8':139
'19#.#23.117.10':139
'19#.#23.253.113':139
'19#.#23.109.173':139
'19#.#23.15.178':139
'19#.#23.105.216':139
'19#.#23.102.104':139
'19#.#23.206.244':139
'19#.#23.39.143':139
'19#.#23.138.22':139
'19#.#23.180.153':139
'19#.#23.43.131':139
'19#.#23.229.215':139
'19#.#23.154.67':139
'19#.#23.55.67':139
'19#.#23.159.31':139
'19#.#23.217.30':139
'19#.#23.62.55':139
'19#.#23.249.214':139
'19#.#23.41.249':445
'19#.#23.35.139':445
'19#.#23.111.202':445
'19#.#23.44.222':445
'19#.#23.102.167':445
'19#.#23.79.26':445
'19#.#23.22.238':445
'19#.#23.9.219':445
'19#.#23.26.109':445
'19#.#23.24.204':445
'19#.#23.93.191':445
'19#.#23.246.32':445
'19#.#23.167.236':445
'19#.#23.51.106':445
'19#.#23.242.11':445
'19#.#23.223.89':445
'19#.#23.21.26':445
'19#.#23.123.135':445
'19#.#23.205.26':445
'19#.#23.163.84':139
'19#.#23.66.33':139
'19#.#23.61.150':139
'19#.#23.85.19':139
'19#.#23.89.36':139
'19#.#23.238.13':139
'19#.#23.159.15':139
'19#.#23.212.152':139
'19#.#23.80.128':139
'19#.#23.74.230':9988
'19#.#23.62.158':445
'19#.#23.31.73':445
'19#.#23.46.203':445
'19#.#23.35.85':445
'19#.#23.194.189':445
'19#.#23.74.22':9988
'19#.#23.226.249':9988
'19#.#23.45.139':445
'19#.#23.212.201':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней