Trojan.Starman.6693

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER21d2.dir00\svchost.exe.mdmp 16325836412032200

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER21d2.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'22#.#21.113.227':445
'22#.#21.130.2':445
'22#.#21.101.144':445
'22#.#21.240.22':445
'22#.#21.131.240':445
'22#.#21.209.26':445
'22#.#21.23.220':139
'22#.#21.117.248':445
'22#.#21.12.53':445
'22#.#21.154.51':445
'22#.#21.63.8':445
'22#.#21.10.232':445
'22#.#21.58.241':445
'22#.#21.13.136':445
'22#.#21.5.217':445
'22#.#21.77.100':445
'22#.#21.194.103':445
'22#.#21.111.246':445
'22#.#21.102.53':445
'22#.#21.32.102':445
'22#.#21.62.231':139
'22#.#21.27.137':139
'22#.#21.119.11':139
'22#.#21.131.127':139
'22#.#21.189.170':139
'22#.#21.89.144':139
'22#.#21.22.126':139
'22#.#21.131.85':139
'22#.#21.147.134':139
'22#.#21.16.104':139
'22#.#21.106.237':139
'22#.#21.166.63':139
'22#.#21.33.191':139
'22#.#21.78.126':139
'22#.#21.185.153':139
'22#.#21.162.201':139
'22#.#21.232.87':139
'22#.#21.92.112':139
'22#.#21.62.102':139
'22#.#21.84.50':139
'22#.#21.167.171':445
'22#.#21.76.91':445
'22#.#21.69.199':445
'22#.#21.191.69':445
'22#.#21.129.109':445
'22#.#21.47.158':445
'22#.#21.24.220':445
'22#.#21.28.242':445
'22#.#21.3.28':445
'22#.#21.113.121':445
'22#.#21.12.53':139
'22#.#21.154.51':139
'22#.#21.130.2':139
'22#.#21.101.144':139
'22#.#21.113.227':139
'22#.#21.18.28':445
'22#.#21.212.21':445
'22#.#21.200.238':445
'22#.#21.209.26':139
'22#.#21.117.248':139
'22#.#21.152.77':445
'22#.#21.202.88':445
'22#.#21.79.127':445
'22#.#21.196.154':445
'22#.#21.26.196':445
'22#.#21.26.90':445
'22#.#21.124.96':445
'22#.#21.91.92':445
'22#.#21.9.161':445
'22#.#21.130.214':445
'22#.#21.4.210':445
'22#.#21.125.88':445
'22#.#21.110.213':445
'22#.#21.47.225':445
'22#.#21.251.172':445
'22#.#21.131.1':445
'22#.#21.200.83':445
'22#.#21.11.26':445
'22#.#21.36.94':445
'22#.#21.209.74':445
'22#.#21.254.159':139
'22#.#21.93.36':445
'22#.#21.17.103':445
'22#.#21.52.47':445
'22#.#21.254.159':445
'22#.#21.37.94':445
'22#.#21.67.32':445
'22#.#21.65.4':445
'22#.#21.34.150':445
'22#.#21.253.16':445
'22#.#21.162.248':445
'22#.#21.62.231':445
'22#.#21.27.137':445
'22#.#21.119.11':445
'22#.#21.131.127':445
'22#.#21.189.170':445
'22#.#21.89.144':445
'22#.#21.22.126':445
'22#.#21.131.85':445
'22#.#21.147.134':445
'22#.#21.16.104':445
'22#.#21.98.4':445
'22#.#21.144.217':445
'22#.#21.2.132':445
'22#.#21.199.188':445
'22#.#21.100.160':445
'22#.#21.176.71':445
'22#.#21.85.158':445
'22#.#21.138.193':445
'22#.#21.106.145':445
'22#.#21.193.105':445
'22#.#21.91.66':445
'22#.#21.68.158':445
'22#.#21.3.72':445
'22#.#21.93.106':445
'22#.#21.92.149':445
'22#.#21.185.194':445
'22#.#21.246.250':445
'22#.#21.195.5':445
'22#.#21.41.216':445
'22#.#21.37.39':445
'22#.#21.68.158':139
'22#.#21.41.216':139
'22#.#21.91.66':139
'22#.#21.92.149':139
'22#.#21.3.72':139
'22#.#21.246.250':139
'22#.#21.199.188':139
'22#.#21.185.194':139
'22#.#21.37.39':139
'22#.#21.195.5':139
'22#.#21.17.103':139
'22#.#21.253.16':139
'22#.#21.93.36':139
'22#.#21.37.94':139
'22#.#21.52.47':139
'22#.#21.65.4':139
'22#.#21.93.106':139
'22#.#21.67.32':139
'22#.#21.162.248':139
'22#.#21.34.150':139
'22#.#21.106.237':445
'22#.#21.166.63':445
'22#.#21.33.191':445
'22#.#21.185.153':445
'22#.#21.78.126':445
'22#.#21.162.201':445
'22#.#21.232.87':445
'22#.#21.92.112':445
'22#.#21.84.50':445
'22#.#21.62.102':445
'22#.#21.144.217':139
'22#.#21.106.145':139
'22#.#21.98.4':139
'22#.#21.100.160':139
'22#.#21.2.132':139
'22#.#21.85.158':139
'22#.#21.23.220':445
'22#.#21.176.71':139
'22#.#21.193.105':139
'22#.#21.138.193':139
'22#.#21.4.148':445
'22#.#21.50.146':445
'22#.#21.47.41':445
'22#.#21.110.55':139
'22#.#21.139.242':445
'22#.#21.53.13':445
'22#.#21.242.38':445
'22#.#21.242.192':445
'22#.#21.40.243':445
'22#.#21.237.205':445
'22#.#21.167.160':139
'22#.#21.65.7':139
'22#.#21.160.125':139
'22#.#21.186.88':139
'22#.#21.60.107':139
'22#.#21.17.128':139
'22#.#21.57.174':139
'22#.#21.24.191':139
'22#.#21.255.134':139
'22#.#21.174.172':139
'22#.#21.42.178':445
'22#.#21.66.62':445
'22#.#21.43.12':445
'22#.#21.23.146':445
'22#.#21.94.207':445
'22#.#21.27.177':445
'22#.#21.121.28':445
'22#.#21.98.59':445
'22#.#21.65.11':445
'22#.#21.56.180':445
'22#.#21.27.249':445
'22#.#21.26.28':445
'22#.#21.249.84':445
'22#.#21.224.217':445
'22#.#21.100.105':445
'22#.#21.149.133':445
'22#.#21.154.239':445
'22#.#21.19.36':445
'22#.#21.51.26':445
'22#.#21.36.22':445
'22#.#21.26.28':139
'22#.#21.51.26':139
'22#.#21.27.249':139
'22#.#21.100.105':139
'22#.#21.249.84':139
'22#.#21.154.239':139
'22#.#21.23.146':139
'22#.#21.149.133':139
'22#.#21.36.22':139
'22#.#21.19.36':139
'22#.#21.50.146':139
'22#.#21.40.243':139
'22#.#21.139.242':139
'22#.#21.53.13':139
'22#.#21.4.148':139
'22#.#21.242.38':139
'22#.#21.224.217':139
'22#.#21.237.205':139
'22#.#21.242.192':139
'22#.#21.47.41':139
'22#.#21.86.8':139
'22#.#21.115.86':139
'22#.#21.140.74':139
'22#.#21.167.168':139
'22#.#21.212.62':139
'22#.#21.251.74':139
'22#.#21.84.130':139
'22#.#21.186.165':139
'22#.#21.6.120':139
'22#.#21.130.129':139
'22#.#21.66.62':139
'22#.#21.65.11':139
'22#.#21.42.178':139
'22#.#21.43.12':139
'22#.#21.94.207':139
'22#.#21.121.28':139
'22#.#21.193.121':139
'22#.#21.27.177':139
'22#.#21.56.180':139
'22#.#21.98.59':139
'22#.#21.193.121':445
'22#.#21.36.94':139
'22#.#21.209.74':139
'22#.#21.125.88':139
'22#.#21.110.213':139
'22#.#21.4.210':139
'22#.#21.196.154':139
'22#.#21.26.196':139
'22#.#21.200.83':139
'22#.#21.11.26':139
'22#.#21.131.1':139
'22#.#21.3.28':139
'22#.#21.113.121':139
'22#.#21.76.91':139
'22#.#21.69.199':139
'22#.#21.167.171':139
'22#.#21.47.225':139
'22#.#21.251.172':139
'22#.#21.24.220':139
'22#.#21.28.242':139
'22#.#21.47.158':139
'22#.#21.102.53':139
'22#.#21.111.246':139
'22#.#21.10.232':139
'22#.#21.58.241':139
'22#.#21.63.8':139
'22#.#21.240.22':139
'22#.#21.131.240':139
'22#.#21.194.103':139
'22#.#21.32.102':139
'22#.#21.77.100':139
'22#.#21.9.161':139
'22#.#21.130.214':139
'22#.#21.202.88':139
'22#.#21.79.127':139
'22#.#21.152.77':139
'22#.#21.13.136':139
'22#.#21.5.217':139
'22#.#21.124.96':139
'22#.#21.91.92':139
'22#.#21.26.90':139
'22#.#21.167.160':445
'22#.#21.65.7':445
'22#.#21.160.125':445
'22#.#21.186.88':445
'22#.#21.60.107':445
'22#.#21.17.128':445
'22#.#21.57.174':445
'22#.#21.24.191':445
'22#.#21.255.134':445
'22#.#21.174.172':445
'22#.#21.86.8':445
'22#.#21.115.86':445
'22#.#21.140.74':445
'22#.#21.167.168':445
'22#.#21.212.62':445
'22#.#21.251.74':445
'22#.#21.84.130':445
'22#.#21.186.165':445
'22#.#21.6.120':445
'22#.#21.130.129':445
'22#.#21.255.134':9988
'22#.#21.110.55':9988
'22#.#21.167.160':9988
'22#.#21.212.62':9988
'22#.#21.186.88':9988
'22#.#21.191.69':139
'22#.#21.129.109':139
'22#.#21.212.21':139
'22#.#21.200.238':139
'22#.#21.18.28':139
'22#.#21.51.26':9988
'22#.#21.36.22':9988
'22#.#21.27.249':9988
'22#.#21.110.55':445
'22#.#21.139.242':9988
'22#.#21.42.178':9988
'22#.#21.27.177':9988
'22#.#21.94.207':9988
'22#.#21.19.36':9988
'22#.#21.23.146':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней