Trojan.Starman.6586

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER5049.dir00\svchost.exe.mdmp 16325836412032352

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5049.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#6.205.129':139
'21#.26.56.0':139
'21#.#6.61.134':139
'21#.#6.121.182':139
'21#.#6.70.32':139
'21#.#6.145.252':139
'21#.#6.60.146':139
'21#.#6.12.194':139
'21#.#6.147.41':139
'21#.#6.75.226':139
'21#.#6.35.131':445
'21#.#6.158.61':445
'21#.#6.30.200':445
'21#.#6.188.148':445
'21#.#6.234.185':445
'21#.#6.214.149':445
'21#.#6.171.186':445
'21#.#6.170.170':445
'21#.#6.68.22':445
'21#.#6.253.245':445
'21#.#6.224.97':139
'21#.#6.95.40':445
'21#.#6.83.41':445
'21#.#6.224.97':445
'21#.#6.145.252':445
'21#.#6.60.146':445
'21#.#6.182.55':139
'21#.#6.240.115':139
'21#.#6.185.59':139
'21#.#6.211.8':139
'21#.#6.165.59':139
'21#.#6.70.32':445
'21#.#6.61.134':445
'21#.#6.121.182':445
'21#.#6.95.40':139
'21#.#6.83.41':139
'21#.#6.75.226':445
'21#.#6.12.194':445
'21#.#6.147.41':445
'21#.#6.205.129':445
'21#.26.56.0':445
'21#.#6.72.110':445
'21#.#6.171.186':139
'21#.#6.57.96':445
'21#.#6.214.149':139
'21#.#6.253.245':139
'21#.#6.170.170':139
'21#.#6.41.127':445
'21#.#6.85.83':445
'21#.#6.111.80':445
'21#.#6.200.129':445
'21#.#6.70.52':445
'21#.#6.72.110':139
'21#.#6.188.148':139
'21#.#6.110.137':139
'21#.#6.160.225':139
'21#.#6.201.156':139
'21#.#6.158.61':139
'21#.#6.68.22':139
'21#.#6.35.131':139
'21#.#6.234.185':139
'21#.#6.30.200':139
'21#.#6.145.160':445
'21#.#6.25.63':445
'21#.#6.131.253':445
'21#.#6.39.138':445
'21#.#6.157.180':445
'21#.#6.219.158':445
'21#.#6.201.156':445
'21#.#6.110.137':445
'21#.#6.160.225':445
'21#.#6.241.218':445
'21#.#6.129.252':445
'21#.#6.18.200':445
'21#.#6.23.99':445
'21#.#6.203.7':445
'21#.#6.48.146':445
'21#.26.8.49':445
'21#.#6.142.137':445
'21#.#6.180.132':445
'21#.#6.80.163':445
'21#.#6.211.112':445
'21#.#6.188.230':445
'21#.#6.19.195':139
'21#.#6.64.152':445
'21#.#6.120.39':445
'21#.#6.64.135':445
'21#.#6.18.135':445
'21#.#6.134.109':445
'21#.#6.50.77':445
'21#.#6.110.227':445
'21#.#6.27.218':445
'21#.#6.153.93':445
'21#.#6.248.45':445
'21#.#6.241.135':445
'21#.#6.173.154':445
'21#.#6.86.110':445
'21#.#6.151.165':445
'21#.#6.46.247':445
'21#.#6.65.17':445
'21#.#6.16.203':445
'21#.#6.181.4':445
'21#.#6.53.203':445
'21#.#6.136.229':445
'21#.#6.56.225':445
'21#.#6.123.32':139
'21#.#6.110.252':139
'21#.#6.181.207':139
'21#.#6.113.247':139
'21#.#6.107.38':139
'21#.#6.194.11':139
'21#.#6.32.123':139
'21#.#6.148.149':139
'21#.#6.73.69':139
'21#.#6.141.89':139
'21#.#6.169.253':445
'21#.#6.192.150':445
'21#.#6.102.122':445
'21#.#6.147.174':445
'21#.#6.122.10':445
'21#.26.5.3':139
'21#.#6.205.194':139
'21#.#6.90.113':139
'21#.#6.221.187':445
'21#.#6.12.60':445
'21#.#6.197.23':445
'21#.#6.16.203':139
'21#.#6.18.135':139
'21#.#6.65.17':139
'21#.#6.136.229':139
'21#.#6.181.4':139
'21#.#6.120.39':139
'21#.#6.153.93':139
'21#.#6.64.152':139
'21#.#6.134.109':139
'21#.#6.64.135':139
'21#.#6.197.23':139
'21#.#6.151.165':139
'21#.#6.50.100':139
'21#.#6.166.144':139
'21#.#6.55.48':139
'21#.#6.173.154':139
'21#.#6.53.203':139
'21#.#6.241.135':139
'21#.#6.46.247':139
'21#.#6.86.110':139
'21#.#6.248.45':139
'21#.#6.185.59':445
'21#.#6.182.55':445
'21#.#6.165.59':445
'21#.#6.12.60':139
'21#.#6.211.8':445
'21#.#6.55.48':445
'21#.#6.50.100':445
'21#.#6.166.144':445
'21#.#6.240.115':445
'21#.#6.19.195':445
'21#.#6.56.225':139
'21#.#6.147.174':139
'21#.#6.110.227':139
'21#.#6.27.218':139
'21#.#6.50.77':139
'21#.#6.192.150':139
'21#.#6.221.187':139
'21#.#6.169.253':139
'21#.#6.122.10':139
'21#.#6.102.122':139
'21#.#6.129.252':139
'21#.#6.16.212':445
'21#.#6.41.83':445
'21#.#6.118.235':445
'21#.#6.63.35':445
'21#.#6.46.145':445
'21#.#6.40.32':445
'21#.#6.212.149':445
'21#.#6.24.137':445
'21#.#6.117.75':445
'21#.#6.32.229':445
'21#.#6.36.211':139
'21#.#6.77.140':139
'21#.#6.167.206':139
'21#.#6.71.243':139
'21#.26.9.62':139
'21#.#6.143.162':139
'21#.#6.52.209':445
'21#.#6.162.14':139
'21#.#6.200.172':139
'21#.#6.84.35':139
'21#.#6.220.37':445
'21#.#6.203.197':445
'21#.#6.85.183':445
'21#.#6.252.215':445
'21#.#6.134.185':445
'21#.#6.110.231':445
'21#.#6.106.202':445
'21#.#6.203.0':445
'21#.#6.49.26':445
'21#.#6.120.88':445
'21#.#6.179.95':445
'21#.#6.80.91':445
'21#.#6.117.10':445
'21#.#6.91.108':445
'21#.#6.233.130':445
'21#.#6.113.187':445
'21#.#6.211.123':445
'21#.#6.185.210':445
'21#.#6.7.114':445
'21#.#6.21.164':445
'21#.#6.235.115':445
'21#.#6.31.231':139
'21#.#6.113.187':139
'21#.#6.91.108':139
'21#.#6.233.130':139
'21#.#6.212.149':139
'21#.#6.220.37':139
'21#.#6.235.115':139
'21#.#6.7.114':139
'21#.#6.21.164':139
'21#.#6.80.91':139
'21#.#6.117.10':139
'21#.#6.52.209':139
'21#.#6.46.145':139
'21#.#6.63.35':139
'21#.#6.16.212':139
'21#.#6.41.83':139
'21#.#6.24.137':139
'21#.#6.40.32':139
'21#.#6.32.229':139
'21#.#6.118.235':139
'21#.#6.117.75':139
'21#.#6.211.123':139
'21#.#6.138.77':139
'21#.#6.15.82':139
'21#.#6.117.54':139
'21#.#6.203.0':139
'21#.#6.27.172':139
'21#.#6.153.40':139
'21#.#6.16.88':139
'21#.#6.16.244':139
'21#.26.44.6':139
'21#.#6.84.161':139
'21#.#6.252.215':139
'21#.#6.203.197':139
'21#.#6.110.231':139
'21#.#6.185.210':139
'21#.#6.134.185':139
'21#.#6.49.26':139
'21#.#6.106.202':139
'21#.#6.179.95':139
'21#.#6.85.183':139
'21#.#6.120.88':139
'21#.#6.27.172':445
'21#.#6.221.40':445
'21#.#6.15.247':445
'21#.#6.183.226':445
'21#.#6.250.247':445
'21#.#6.188.251':445
'21#.#6.57.96':139
'21#.#6.200.129':139
'21#.26.96.4':445
'21#.#6.198.55':445
'21#.#6.103.67':445
'21#.#6.103.67':139
'21#.26.96.4':139
'21#.#6.198.55':139
'21#.#6.221.40':139
'21#.#6.15.247':139
'21#.#6.46.209':445
'21#.#6.33.190':445
'21#.#6.175.156':445
'21#.#6.159.76':445
'21#.#6.29.60':445
'21#.#6.70.52':139
'21#.#6.180.132':139
'21#.#6.157.180':139
'21#.#6.142.137':139
'21#.#6.188.230':139
'21#.#6.80.163':139
'21#.#6.131.253':139
'21#.#6.241.218':139
'21#.#6.25.63':139
'21#.#6.219.158':139
'21#.#6.39.138':139
'21#.#6.145.160':139
'21#.#6.48.146':139
'21#.#6.85.83':139
'21#.#6.111.80':139
'21#.#6.41.127':139
'21#.#6.23.99':139
'21#.#6.211.112':139
'21#.#6.18.200':139
'21#.26.8.49':139
'21#.#6.203.7':139
'21#.#6.183.226':139
'21#.#6.77.140':445
'21#.#6.200.172':445
'21#.#6.36.211':445
'21#.26.9.62':445
'21#.#6.167.206':445
'21#.#6.46.145':9988
'21#.#6.118.235':9988
'21#.#6.143.162':445
'21#.#6.84.35':445
'21#.#6.162.14':445
'21#.26.44.6':445
'21#.#6.84.161':445
'21#.#6.15.82':445
'21#.#6.117.54':445
'21#.#6.138.77':445
'21#.#6.31.231':445
'21#.#6.71.243':445
'21#.#6.16.88':445
'21#.#6.16.244':445
'21#.#6.153.40':445
'21#.#6.52.209':9988
'21#.#6.159.76':139
'21#.#6.29.60':139
'21#.#6.203.197':9988
'21#.#6.211.123':9988
'21#.#6.185.210':9988
'21#.#6.250.247':139
'21#.#6.188.251':139
'21#.#6.33.190':139
'21#.#6.175.156':139
'21#.#6.46.209':139
'21#.#6.233.130':9988
'21#.#6.113.187':9988
'21#.#6.220.37':9988
'21#.#6.24.137':9988
'21#.#6.212.149':9988
'21#.#6.235.115':9988
'21#.#6.7.114':9988
'21#.#6.21.164':9988
'21#.#6.91.108':9988
'21#.#6.80.91':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней