Trojan.Starman.6702

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1132 -dm 7 7 %TEMP%\WER1c4e.dir00\svchost.exe.mdmp 16325836412032240

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1c4e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#54.244.170':139
'19#.#54.219.164':139
'19#.#54.110.180':139
'19#.#54.209.38':139
'19#.#54.180.209':139
'19#.#54.156.135':139
'19#.#54.232.10':139
'19#.#54.174.111':139
'19#.154.9.2':139
'19#.#54.112.9':139
'19#.#54.140.122':139
'19#.#54.215.79':139
'19#.#54.78.140':139
'19#.#54.87.7':139
'19#.#54.236.66':139
'19#.#54.53.183':139
'19#.#54.132.1':139
'19#.#54.69.50':139
'19#.#54.69.80':139
'19#.#54.16.40':139
'19#.#54.67.27':139
'19#.#54.136.202':445
'19#.#54.183.38':445
'19#.#54.130.182':445
'19#.#54.141.67':445
'19#.#54.50.108':445
'19#.#54.215.79':445
'19#.#54.78.140':445
'19#.#54.87.7':445
'19#.#54.236.66':445
'19#.#54.53.183':445
'19#.#54.28.81':445
'19#.#54.233.43':139
'19#.#54.29.73':445
'19#.#54.194.226':139
'19#.#54.85.165':139
'19#.#54.71.150':139
'19#.#54.22.20':445
'19#.#54.226.31':445
'19#.#54.87.196':445
'19#.#54.78.228':445
'19#.#54.142.63':445
'19#.#54.183.38':139
'19#.#54.157.125':139
'19#.#54.110.157':139
'19#.#54.217.24':139
'19#.#54.57.112':139
'19#.#54.90.209':139
'19#.#54.103.35':445
'19#.#54.25.85':445
'19#.#54.51.193':445
'19#.#54.64.111':139
'19#.#54.104.65':445
'19#.#54.108.146':139
'19#.#54.104.65':139
'19#.#54.51.193':139
'19#.#54.246.211':445
'19#.#54.5.126':445
'19#.#54.8.65':445
'19#.#54.92.220':139
'19#.#54.83.248':139
'19#.#54.219.123':139
'19#.#54.103.35':139
'19#.#54.25.85':139
'19#.#54.22.20':139
'19#.#54.226.31':139
'19#.#54.87.196':139
'19#.#54.78.228':139
'19#.#54.142.63':139
'19#.#54.130.182':139
'19#.#54.136.202':139
'19#.#54.50.108':139
'19#.#54.28.81':139
'19#.#54.141.67':139
'19#.#54.29.73':139
'19#.#54.108.146':445
'19#.#54.57.112':445
'19#.#54.83.248':445
'19#.#54.219.123':445
'19#.#54.92.220':445
'19#.#54.110.157':445
'19#.#54.64.111':445
'19#.#54.157.125':445
'19#.#54.90.209':445
'19#.#54.217.24':445
'19#.#54.189.209':139
'19#.#54.28.76':139
'19#.#54.32.26':139
'19#.#54.70.230':139
'19#.#54.56.39':139
'19#.#54.243.107':139
'19#.#54.170.242':139
'19#.#54.94.232':139
'19#.#54.195.100':139
'19#.#54.17.71':139
'19#.#54.242.95':139
'19#.#54.160.249':445
'19#.#54.137.20':445
'19#.#54.184.150':445
'19#.#54.231.92':445
'19#.#54.57.35':445
'19#.#54.236.164':139
'19#.#54.51.236':139
'19#.#54.164.250':139
'19#.#54.18.72':139
'19#.#54.250.140':139
'19#.#54.94.63':139
'19#.#54.21.123':139
'19#.#54.123.15':139
'19#.#54.149.214':139
'19#.#54.172.96':139
'19#.#54.147.70':139
'19#.#54.233.146':139
'19#.#54.61.17':139
'19#.#54.75.73':139
'19#.#54.69.107':139
'19#.#54.35.103':139
'19#.#54.229.233':139
'19#.#54.187.1':139
'19#.#54.93.138':139
'19#.#54.134.109':139
'19#.#54.152.170':139
'19#.#54.123.50':139
'19#.#54.156.16':139
'19#.#54.126.9':139
'19#.#54.160.250':139
'19#.#54.9.138':139
'19#.#54.114.75':445
'19#.#54.156.135':445
'19#.#54.232.10':445
'19#.#54.174.111':445
'19#.154.9.2':445
'19#.#54.112.9':445
'19#.#54.233.43':445
'19#.#54.127.233':139
'19#.#54.194.226':445
'19#.#54.85.165':445
'19#.#54.71.150':445
'19#.#54.219.164':445
'19#.#54.132.1':445
'19#.#54.69.50':445
'19#.#54.69.80':445
'19#.#54.16.40':445
'19#.#54.67.27':445
'19#.#54.110.180':445
'19#.#54.244.170':445
'19#.#54.180.209':445
'19#.#54.140.122':445
'19#.#54.209.38':445
'19#.#54.73.128':445
'19#.#54.60.198':445
'19#.#54.127.233':445
'19#.#54.160.249':139
'19#.#54.137.20':139
'19#.#54.60.141':445
'19#.#54.143.167':445
'19#.#54.57.69':445
'19#.#54.12.45':445
'19#.#54.69.69':445
'19#.#54.184.150':139
'19#.#54.69.69':139
'19#.#54.57.69':139
'19#.#54.12.45':139
'19#.#54.73.128':139
'19#.#54.60.198':139
'19#.#54.231.92':139
'19#.#54.57.35':139
'19#.#54.114.75':139
'19#.#54.60.141':139
'19#.#54.143.167':139
'19#.#54.132.137':445
'19#.#54.136.237':445
'19#.#54.203.173':445
'19#.#54.237.37':445
'19#.#54.21.59':445
'19#.#54.37.21':445
'19#.#54.23.239':445
'19#.#54.62.0':445
'19#.#54.71.11':445
'19#.#54.182.20':445
'19#.#54.83.9':445
'19#.#54.128.6':445
'19#.#54.173.201':139
'19#.#54.20.212':139
'19#.#54.44.182':139
'19#.#54.185.155':139
'19#.#54.85.32':139
'19#.#54.149.26':445
'19#.#54.99.92':445
'19#.#54.32.139':139
'19#.#54.240.202':139
'19#.#54.105.183':139
'19#.#54.221.130':445
'19#.#54.190.104':445
'19#.#54.0.88':445
'19#.#54.76.162':445
'19#.#54.44.214':445
'19#.#54.250.120':445
'19#.#54.131.220':445
'19#.#54.184.166':445
'19#.#54.212.47':445
'19#.#54.144.19':445
'19#.#54.70.191':445
'19#.#54.62.98':445
'19#.#54.78.194':445
'19#.#54.174.35':445
'19#.#54.220.78':445
'19#.#54.37.235':445
'19#.#54.9.104':445
'19#.#54.115.94':445
'19#.#54.26.220':445
'19#.#54.230.13':445
'19#.#54.87.6':445
'19#.#54.23.71':139
'19#.#54.37.235':139
'19#.#54.174.35':139
'19#.#54.220.78':139
'19#.#54.23.239':139
'19#.#54.62.0':139
'19#.#54.87.6':139
'19#.#54.26.220':139
'19#.#54.230.13':139
'19#.#54.62.98':139
'19#.#54.78.194':139
'19#.#54.71.11':139
'19#.#54.21.59':139
'19#.#54.37.21':139
'19#.#54.128.6':139
'19#.#54.149.26':139
'19#.#54.99.92':139
'19#.#54.182.20':139
'19#.#54.83.9':139
'19#.#54.203.173':139
'19#.#54.237.37':139
'19#.#54.136.237':139
'19#.#54.234.75':139
'19#.#54.124.38':139
'19#.#54.82.77':139
'19#.#54.250.120':139
'19#.#54.131.220':139
'19#.#54.245.139':139
'19#.#54.118.232':139
'19#.#54.24.14':139
'19#.#54.136.1':139
'19#.#54.43.56':139
'19#.#54.184.166':139
'19#.#54.76.162':139
'19#.#54.44.214':139
'19#.#54.70.191':139
'19#.#54.9.104':139
'19#.#54.115.94':139
'19#.#54.212.47':139
'19#.#54.144.19':139
'19#.#54.190.104':139
'19#.#54.0.88':139
'19#.#54.221.130':139
'19#.#54.246.211':139
'19#.#54.161.32':445
'19#.#54.8.65':139
'19#.#54.132.137':139
'19#.#54.5.126':139
'19#.#54.155.118':445
'19#.#54.98.195':445
'19#.#54.69.166':445
'19#.#54.248.76':445
'19#.#54.223.78':445
'19#.#54.253.243':139
'19#.#54.141.252':139
'19#.#54.83.226':139
'19#.#54.80.193':139
'19#.#54.92.25':139
'19#.#54.149.175':139
'19#.#54.216.244':139
'19#.#54.83.227':139
'19#.#54.113.163':139
'19#.#54.104.184':139
'19#.#54.158.25':139
'19#.#54.83.226':445
'19#.#54.104.184':445
'19#.#54.141.252':445
'19#.#54.149.175':445
'19#.#54.80.193':445
'19#.#54.83.227':445
'19#.#54.253.243':445
'19#.#54.216.244':445
'19#.#54.158.25':445
'19#.#54.113.163':445
'19#.#54.92.25':445
'19#.#54.156.222':445
'19#.#54.147.23':445
'19#.#54.60.39':445
'19#.#54.96.8':445
'19#.#54.81.168':445
'19#.#54.32.254':445
'19#.#54.27.215':445
'19#.#54.12.180':445
'19#.#54.50.147':445
'19#.#54.239.49':445
'19#.#54.27.215':139
'19#.#54.240.202':445
'19#.#54.105.183':445
'19#.#54.20.212':445
'19#.#54.44.182':445
'19#.#54.173.201':445
'19#.#54.21.59':9988
'19#.#54.99.92':9988
'19#.#54.128.6':9988
'19#.#54.32.139':445
'19#.#54.149.26':9988
'19#.#54.85.32':445
'19#.#54.136.1':445
'19#.#54.43.56':445
'19#.#54.124.38':445
'19#.#54.82.77':445
'19#.#54.234.75':445
'19#.#54.23.71':445
'19#.#54.185.155':445
'19#.#54.118.232':445
'19#.#54.24.14':445
'19#.#54.245.139':445
'19#.#54.60.39':139
'19#.#54.156.222':139
'19#.#54.81.168':139
'19#.#54.98.195':139
'19#.#54.96.8':139
'19#.#54.12.180':139
'19#.#54.32.254':139
'19#.#54.239.49':139
'19#.#54.147.23':139
'19#.#54.50.147':139
'19#.#54.155.118':139
'19#.#54.250.120':9988
'19#.#54.136.1':9988
'19#.#54.70.191':9988
'19#.#54.203.173':9988
'19#.#54.23.239':9988
'19#.#54.223.78':139
'19#.#54.69.166':139
'19#.#54.248.76':139
'19#.#54.24.14':9988
'19#.#54.161.32':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней