Trojan.Starman.6668

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd524.dir00\svchost.exe.mdmp 16325836412032000

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERd524.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#45.255.147':139
'21#.#45.167.253':139
'21#.#45.24.208':139
'21#.#45.149.4':139
'21#.#45.236.91':139
'21#.#45.55.168':139
'21#.#45.160.196':139
'21#.#45.186.133':139
'21#.#45.29.46':139
'21#.#45.235.200':139
'21#.#45.64.226':139
'21#.#45.149.24':139
'21#.#45.108.112':139
'21#.#45.9.45':139
'21#.#45.249.21':139
'21#.#45.211.26':139
'21#.#45.21.211':139
'21#.#45.104.66':139
'21#.#45.139.28':139
'21#.#45.211.135':139
'21#.#45.184.182':139
'21#.#45.60.158':139
'21#.#45.34.231':139
'21#.#45.180.211':445
'21#.#45.128.122':445
'21#.#45.2.188':445
'21#.#45.89.204':139
'21#.#45.61.62':445
'21#.#45.212.208':445
'21#.#45.248.12':445
'21#.#45.212.103':445
'21#.#45.71.36':445
'21#.#45.222.5':445
'21#.#45.19.42':445
'21#.#45.77.230':139
'21#.#45.176.167':139
'21#.#45.60.102':139
'21#.#45.21.15':139
'21#.#45.42.92':139
'21#.#45.21.55':139
'21#.#45.123.60':139
'21#.#45.4.201':139
'21#.#45.167.5':139
'21#.#45.122.208':139
'21#.#45.135.199':139
'21#.#45.115.185':139
'21#.#45.160.201':445
'21#.#45.147.92':445
'21#.#45.175.112':445
'21#.#45.123.56':445
'21#.#45.202.139':445
'21#.#45.224.43':445
'21#.#45.87.213':445
'21#.#45.120.212':445
'21#.#45.111.149':445
'21#.#45.54.249':445
'21#.#45.126.80':445
'21#.#45.161.211':445
'21#.#45.166.99':445
'21#.#45.4.22':445
'21#.#45.49.49':445
'21#.#45.194.17':445
'21#.#45.216.193':445
'21#.#45.125.155':445
'21#.#45.22.69':445
'21#.#45.211.133':445
'21#.#45.192.171':445
'21#.#45.142.205':445
'21#.#45.161.156':445
'21#.#45.71.36':139
'21#.#45.248.12':139
'21#.#45.19.42':139
'21#.#45.212.208':139
'21#.#45.222.5':139
'21#.#45.212.103':139
'21#.#45.4.193':139
'21#.#45.52.78':139
'21#.#45.37.195':139
'21#.#45.40.244':139
'21#.#45.143.223':139
'21#.#45.128.122':139
'21#.#45.16.222':445
'21#.#45.202.16':445
'21#.#45.46.215':445
'21#.#45.97.149':445
'21#.#45.26.229':445
'21#.#45.82.201':445
'21#.#45.2.188':139
'21#.#45.180.211':139
'21#.#45.61.62':139
'21#.#45.48.229':445
'21#.#45.190.48':445
'21#.#45.196.243':139
'21#.#45.137.149':139
'21#.#45.109.106':139
'21#.#45.240.92':139
'21#.#45.18.13':139
'21#.#45.62.42':139
'21#.#45.55.192':139
'21#.#45.232.146':139
'21#.#45.56.170':139
'21#.#45.221.111':139
'21#.#45.123.145':139
'21#.#45.244.72':139
'21#.#45.114.236':139
'21#.#45.51.125':139
'21#.#45.200.123':139
'21#.#45.80.91':139
'21#.#45.242.123':139
'21#.#45.215.94':139
'21#.#45.196.162':139
'21#.#45.13.120':139
'21#.#45.29.7':139
'21#.#45.190.81':139
'21#.#45.172.190':139
'21#.#45.108.130':139
'21#.#45.254.91':139
'21#.#45.228.9':139
'21#.#45.234.58':139
'21#.#45.44.71':139
'21#.#45.98.115':139
'21#.#45.194.249':139
'21#.#45.64.26':139
'21#.#45.51.169':139
'21#.#45.90.219':139
'21#.#45.31.155':139
'21#.#45.105.181':139
'21#.#45.211.125':139
'21#.#45.29.109':139
'21#.#45.198.119':139
'21#.#45.43.138':139
'21#.#45.212.65':139
'21#.#45.199.100':139
'21#.#45.56.141':139
'21#.#45.44.12':139
'21#.#45.213.110':139
'21#.#45.78.8':139
'21#.#45.120.36':139
'21#.#45.211.135':445
'21#.#45.149.24':445
'21#.#45.139.28':445
'21#.#45.34.231':445
'21#.#45.184.182':445
'21#.#45.149.4':445
'21#.#45.167.253':445
'21#.#45.55.168':445
'21#.#45.255.147':445
'21#.#45.236.91':445
'21#.#45.24.208':445
'21#.#45.60.158':445
'21#.#45.4.193':445
'21#.#45.52.78':445
'21#.#45.37.195':445
'21#.#45.40.244':445
'21#.#45.143.223':445
'21#.#45.211.26':445
'21#.#45.9.45':445
'21#.#45.104.66':445
'21#.#45.108.112':445
'21#.#45.21.211':445
'21#.#45.249.21':445
'21#.#45.167.5':445
'21#.#45.77.230':445
'21#.#45.4.201':445
'21#.#45.115.185':445
'21#.#45.122.208':445
'21#.#45.89.204':445
'21#.#45.59.122':139
'21#.#45.239.58':139
'21#.#45.109.241':139
'21#.#45.192.160':139
'21#.#45.72.90':139
'21#.#45.135.199':445
'21#.#45.160.196':445
'21#.#45.186.133':445
'21#.#45.29.46':445
'21#.#45.235.200':445
'21#.#45.64.226':445
'21#.#45.42.92':445
'21#.#45.60.102':445
'21#.#45.123.60':445
'21#.#45.176.167':445
'21#.#45.21.55':445
'21#.#45.21.15':445
'21#.#45.142.64':445
'21#.#45.117.115':445
'21#.#45.103.117':445
'21#.#45.12.113':445
'21#.#45.40.224':445
'21#.#45.246.187':445
'21#.#45.86.166':445
'21#.#45.89.79':445
'21#.#45.51.87':445
'21#.#45.84.70':445
'21#.#45.16.187':445
'21#.#45.16.174':445
'21#.#45.202.193':445
'21#.#45.104.214':139
'21#.#45.253.187':139
'21#.#45.248.236':139
'21#.#45.46.158':139
'21#.#45.148.98':139
'21#.#45.57.49':445
'21#.#45.180.6':445
'21#.#45.58.182':445
'21#.#45.218.81':445
'21#.#45.95.206':445
'21#.#45.81.183':445
'21#.#45.123.29':445
'21#.#45.199.189':445
'21#.#45.94.62':445
'21#.#45.69.203':445
'21#.#45.47.15':445
'21#.#45.67.236':445
'21#.#45.136.87':445
'21#.#45.255.206':445
'21#.#45.100.137':445
'21#.#45.84.31':445
'21#.#45.180.191':445
'21#.#45.130.36':445
'21#.#45.245.212':445
'21#.#45.133.245':445
'21#.#45.8.122':445
'21#.#45.227.51':445
'21#.#45.87.93':445
'21#.#45.254.159':445
'21#.#45.214.162':445
'21#.#45.36.103':445
'21#.#45.172.16':445
'21#.#45.98.170':445
'21#.#45.16.99':445
'21#.#45.84.70':139
'21#.#45.89.79':139
'21#.#45.16.174':139
'21#.#45.86.166':139
'21#.#45.16.187':139
'21#.#45.51.87':139
'21#.#45.245.212':139
'21#.#45.133.245':139
'21#.#45.8.122':139
'21#.#45.227.51':139
'21#.#45.87.93':139
'21#.#45.103.117':139
'21#.#45.58.182':139
'21#.#45.202.193':139
'21#.#45.81.183':139
'21#.#45.95.206':139
'21#.#45.57.49':139
'21#.#45.218.81':139
'21#.#45.12.113':139
'21#.#45.117.115':139
'21#.#45.246.187':139
'21#.#45.180.6':139
'21#.#45.40.224':139
'21#.#45.100.137':139
'21#.#45.136.87':139
'21#.#45.180.191':139
'21#.#45.67.236':139
'21#.#45.84.31':139
'21#.#45.255.206':139
'21#.#45.17.247':139
'21#.#45.107.29':139
'21#.#45.4.13':139
'21#.#45.130.175':139
'21#.#45.73.146':139
'21#.#45.199.189':139
'21#.#45.172.16':139
'21#.#45.214.162':139
'21#.#45.16.99':139
'21#.#45.254.159':139
'21#.#45.98.170':139
'21#.#45.36.103':139
'21#.#45.94.62':139
'21#.#45.123.29':139
'21#.#45.47.15':139
'21#.#45.130.36':139
'21#.#45.69.203':139
'21#.#45.126.80':139
'21#.#45.111.149':139
'21#.#45.224.43':139
'21#.#45.147.92':139
'21#.#45.54.249':139
'21#.#45.87.213':139
'21#.#45.46.215':139
'21#.#45.16.222':139
'21#.#45.26.229':139
'21#.#45.120.212':139
'21#.#45.97.149':139
'21#.#45.160.201':139
'21#.#45.161.156':139
'21#.#45.192.171':139
'21#.#45.142.205':139
'21#.#45.4.22':139
'21#.#45.125.155':139
'21#.#45.22.69':139
'21#.#45.202.139':139
'21#.#45.175.112':139
'21#.#45.123.56':139
'21#.#45.211.133':139
'21#.#45.161.211':139
'21#.#45.68.236':445
'21#.#45.63.69':445
'21#.#45.169.250':445
'21#.#45.157.160':445
'21#.#45.69.104':445
'21#.#45.53.243':445
'21#.#45.171.222':445
'21#.#45.147.24':445
'21#.#45.222.64':445
'21#.#45.207.92':445
'21#.#45.229.219':445
'21#.#45.161.5':445
'21#.#45.190.48':139
'21#.#45.99.170':445
'21#.#45.48.229':139
'21#.#45.202.16':139
'21#.#45.82.201':139
'21#.#45.172.97':445
'21#.#45.139.12':445
'21#.#45.5.139':445
'21#.#45.13.12':445
'21#.#45.195.64':445
'21#.#45.141.189':445
'21#.#45.84.70':9988
'21#.#45.89.79':9988
'21#.#45.16.174':9988
'21#.#45.86.166':9988
'21#.#45.16.187':9988
'21#.#45.16.99':9988
'21#.#45.46.158':9988
'21#.#45.99.170':139
'21#.#45.255.206':9988
'21#.#45.8.122':9988
'21#.#45.69.203':9988
'21#.#45.117.115':9988
'21#.#45.17.247':445
'21#.#45.107.29':445
'21#.#45.4.13':445
'21#.#45.130.175':445
'21#.#45.73.146':445
'21#.#45.46.158':445
'21#.#45.253.187':445
'21#.#45.81.183':9988
'21#.#45.104.214':445
'21#.#45.148.98':445
'21#.#45.248.236':445
'21#.#45.222.64':139
'21#.#45.171.222':139
'21#.#45.229.219':139
'21#.#45.53.243':139
'21#.#45.207.92':139
'21#.#45.147.24':139
'21#.#45.49.49':139
'21#.#45.166.99':139
'21#.#45.216.193':139
'21#.#45.142.64':139
'21#.#45.194.17':139
'21#.#45.63.69':139
'21#.#45.13.12':139
'21#.#45.139.12':139
'21#.#45.141.189':139
'21#.#45.172.97':139
'21#.#45.195.64':139
'21#.#45.5.139':139
'21#.#45.169.250':139
'21#.#45.68.236':139
'21#.#45.69.104':139
'21#.#45.161.5':139
'21#.#45.157.160':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней