Trojan.Starman.5857

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER26e4.dir00\svchost.exe.mdmp 16325836412032212

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER26e4.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#35.142.248':445
'21#.#35.32.48':445
'21#.#35.196.31':445
'21#.#35.52.196':445
'21#.#35.206.112':445
'21#.#35.159.77':445
'21#.#35.90.196':445
'21#.#35.26.90':445
'21#.#35.84.167':445
'21#.#35.148.36':445
'21#.#35.226.223':445
'21#.#35.69.102':445
'21#.#35.249.118':445
'21#.#35.131.201':445
'21#.#35.214.131':445
'21#.#35.4.215':445
'21#.#35.66.44':139
'21#.#35.13.180':139
'21#.#35.202.191':139
'21#.#35.151.162':445
'21#.#35.253.158':445
'21#.#35.172.105':445
'21#.#35.160.149':445
'21#.#35.135.204':445
'21#.#35.174.123':445
'21#.#35.110.234':445
'21#.#35.255.129':445
'21#.#35.66.44':445
'21#.#35.13.180':445
'21#.#35.251.114':445
'21#.#35.123.20':445
'21#.#35.114.123':445
'21#.#35.202.191':445
'21#.#35.100.189':139
'21#.#35.127.138':139
'21#.#35.87.128':139
'21#.#35.7.220':139
'21#.#35.139.69':139
'21#.#35.144.228':139
'21#.#35.201.133':445
'21#.#35.252.201':445
'21#.#35.62.213':445
'21#.#35.165.126':445
'21#.#35.136.61':445
'21#.#35.134.136':445
'21#.#35.41.53':445
'21#.#35.226.251':445
'21#.#35.88.65':445
'21#.#35.249.174':445
'21#.#35.184.112':445
'21#.#35.16.128':445
'21#.#35.219.16':445
'21#.#35.135.204':139
'21#.#35.174.123':139
'21#.#35.110.234':139
'21#.#35.214.131':139
'21#.#35.4.215':139
'21#.#35.151.162':139
'21#.#35.253.158':139
'21#.#35.206.112':139
'21#.#35.159.77':139
'21#.#35.142.248':139
'21#.#35.172.105':139
'21#.#35.160.149':139
'21#.#35.52.196':139
'21#.#35.201.102':139
'21#.#35.71.90':445
'21#.#35.92.1':445
'21#.#35.198.178':139
'21#.#35.99.44':139
'21#.#35.161.57':139
'21#.#35.131.181':445
'21#.#35.161.57':445
'21#.#35.201.102':445
'21#.#35.131.201':139
'21#.#35.101.109':445
'21#.#35.198.178':445
'21#.#35.99.44':445
'21#.#35.184.112':139
'21#.#35.16.128':139
'21#.#35.219.16':139
'21#.#35.252.201':139
'21#.#35.62.213':139
'21#.#35.41.53':139
'21#.#35.226.251':139
'21#.#35.123.20':139
'21#.#35.114.123':139
'21#.#35.255.129':139
'21#.#35.88.65':139
'21#.#35.249.174':139
'21#.#35.251.114':139
'21#.#35.226.223':139
'21#.#35.69.102':139
'21#.#35.249.118':139
'21#.#35.32.48':139
'21#.#35.196.31':139
'21#.#35.90.196':139
'21#.#35.26.90':139
'21#.#35.136.61':139
'21#.#35.134.136':139
'21#.#35.201.133':139
'21#.#35.84.167':139
'21#.#35.148.36':139
'21#.#35.165.126':139
'21#.#35.36.40':445
'21#.#35.112.156':445
'21#.#35.17.207':445
'21#.#35.133.251':445
'21#.#35.62.30':445
'21#.#35.95.117':445
'21#.#35.99.46':445
'21#.#35.64.145':445
'21#.#35.26.181':445
'21#.#35.162.236':445
'21#.#35.129.98':445
'21#.#35.50.129':445
'21#.#35.127.197':445
'21#.#35.156.116':445
'21#.#35.175.163':445
'21#.#35.131.74':445
'21#.#35.111.77':139
'21#.#35.205.21':445
'21#.#35.115.235':445
'21#.#35.34.131':445
'21#.#35.195.243':445
'21#.#35.167.24':445
'21#.#35.48.167':445
'21#.#35.134.179':445
'21#.#35.61.177':445
'21#.#35.223.217':445
'21#.#35.20.117':445
'21#.#35.111.77':445
'21#.#35.58.216':139
'21#.#35.111.194':445
'21#.#35.182.55':445
'21#.#35.11.16':445
'21#.#35.12.216':139
'21#.#35.149.200':139
'21#.#35.117.0':139
'21#.#35.93.204':139
'21#.#35.231.121':139
'21#.#35.163.175':139
'21#.#35.226.204':139
'21#.#35.196.72':445
'21#.#35.138.78':445
'21#.#35.38.189':445
'21#.#35.140.186':445
'21#.#35.100.132':445
'21#.#35.36.170':445
'21#.#35.68.222':445
'21#.#35.36.10':445
'21#.#35.143.143':445
'21#.#35.29.147':445
'21#.#35.91.187':445
'21#.#35.16.245':445
'21#.#35.247.204':445
'21#.#35.134.179':139
'21#.#35.61.177':139
'21#.#35.223.217':139
'21#.#35.175.163':139
'21#.#35.131.74':139
'21#.#35.34.131':139
'21#.#35.195.243':139
'21#.#35.62.30':139
'21#.#35.95.117':139
'21#.#35.36.40':139
'21#.#35.167.24':139
'21#.#35.48.167':139
'21#.#35.133.251':139
'21#.#35.139.69':445
'21#.#35.144.228':445
'21#.#35.100.189':445
'21#.#35.48.87':139
'21#.#35.190.152':139
'21#.#35.7.220':445
'21#.#35.127.138':445
'21#.#35.205.21':139
'21#.#35.115.235':139
'21#.#35.156.116':139
'21#.#35.87.128':445
'21#.#35.48.87':445
'21#.#35.190.152':445
'21#.#35.91.187':139
'21#.#35.16.245':139
'21#.#35.247.204':139
'21#.#35.138.78':139
'21#.#35.38.189':139
'21#.#35.68.222':139
'21#.#35.36.10':139
'21#.#35.182.55':139
'21#.#35.11.16':139
'21#.#35.20.117':139
'21#.#35.143.143':139
'21#.#35.29.147':139
'21#.#35.111.194':139
'21#.#35.129.98':139
'21#.#35.50.129':139
'21#.#35.127.197':139
'21#.#35.112.156':139
'21#.#35.17.207':139
'21#.#35.99.46':139
'21#.#35.64.145':139
'21#.#35.100.132':139
'21#.#35.36.170':139
'21#.#35.196.72':139
'21#.#35.26.181':139
'21#.#35.162.236':139
'21#.#35.140.186':139
'21#.#35.181.143':445
'21#.#35.40.208':445
'21#.#35.102.196':445
'21#.#35.224.49':445
'21#.#35.12.101':445
'21#.#35.137.146':445
'21#.#35.37.17':445
'21#.#35.163.46':445
'21#.#35.31.23':445
'21#.#35.98.31':445
'21#.#35.199.25':445
'21#.#35.228.251':445
'21#.#35.39.117':445
'21#.#35.194.246':445
'21#.#35.45.61':445
'21#.#35.54.194':445
'21#.#35.108.22':445
'21#.#35.183.233':445
'21#.#35.243.167':445
'21#.#35.22.246':445
'21#.#35.141.10':445
'21#.#35.245.99':445
'21#.#35.96.219':445
'21#.#35.112.252':445
'21#.#35.100.218':445
'21#.#35.60.51':445
'21#.#35.33.117':445
'21#.#35.55.19':445
'21#.#35.152.129':445
'21#.#35.232.133':445
'21#.#35.151.232':445
'21#.#35.63.124':445
'21#.#35.36.172':445
'21#.#35.13.39':445
'21#.#35.183.233':9988
'21#.#35.45.61':9988
'21#.#35.34.168':445
'21#.#35.74.34':445
'21#.#35.38.74':445
'21#.#35.248.34':445
'21#.#35.90.45':445
'21#.#35.160.209':445
'21#.#35.37.98':445
'21#.#35.172.36':445
'21#.#35.0.209':445
'21#.#35.51.160':445
'21#.#35.74.172':445
'21#.#35.10.11':445
'21#.#35.148.247':445
'21#.#35.106.51':445
'21#.#35.164.136':445
'21#.#35.72.235':445
'21#.#35.137.146':139
'21#.#35.181.143':139
'21#.#35.40.208':139
'21#.#35.60.51':139
'21#.#35.224.49':139
'21#.#35.12.101':139
'21#.#35.102.196':139
'21#.#35.39.117':139
'21#.#35.163.46':139
'21#.#35.31.23':139
'21#.#35.37.17':139
'21#.#35.199.25':139
'21#.#35.228.251':139
'21#.#35.100.218':139
'21#.#35.141.10':139
'21#.#35.96.219':139
'21#.#35.22.246':139
'21#.#35.108.22':139
'21#.#35.112.252':139
'21#.#35.172.124':139
'21#.#35.45.61':139
'21#.#35.194.246':139
'21#.#35.243.167':139
'21#.#35.245.99':139
'21#.#35.54.194':139
'21#.#35.183.233':139
'21#.#35.63.124':139
'21#.#35.33.117':139
'21#.#35.55.19':139
'21#.#35.148.247':139
'21#.#35.232.133':139
'21#.#35.151.232':139
'21#.#35.152.129':139
'21#.#35.38.74':139
'21#.#35.13.39':139
'21#.#35.172.124':445
'21#.#35.36.172':139
'21#.#35.34.168':139
'21#.#35.74.34':139
'21#.#35.0.209':139
'21#.#35.248.34':139
'21#.#35.90.45':139
'21#.#35.98.31':139
'21#.#35.37.98':139
'21#.#35.172.36':139
'21#.#35.160.209':139
'21#.#35.72.235':139
'21#.#35.74.172':139
'21#.#35.10.11':139
'21#.#35.51.160':139
'21#.#35.106.51':139
'21#.#35.164.136':139
'21#.#35.226.193':445
'21#.#35.135.165':445
'21#.#35.85.102':445
'21#.#35.215.129':445
'21#.#35.45.31':445
'21#.#35.49.156':445
'21#.#35.150.124':445
'21#.#35.7.155':445
'21#.#35.132.59':445
'21#.#35.43.96':445
'21#.#35.26.70':445
'21#.#35.209.19':445
'21#.#35.10.195':445
'21#.#35.105.152':139
'21#.#35.90.119':139
'21#.#35.45.13':445
'21#.#35.86.49':139
'21#.#35.196.251':139
'21#.#35.109.10':139
'21#.#35.84.244':445
'21#.#35.177.70':445
'21#.#35.177.134':445
'21#.#35.218.217':445
'21#.#35.222.74':445
'21#.#35.72.212':445
'21#.#35.133.128':445
'21#.#35.183.184':445
'21#.#35.86.49':445
'21#.#35.196.251':445
'21#.#35.218.201':445
'21#.#35.226.108':445
'21#.#35.88.139':445
'21#.#35.109.10':445
'21#.#35.92.1':139
'21#.#35.131.181':139
'21#.#35.101.109':139
'21#.#35.105.152':445
'21#.#35.90.119':445
'21#.#35.71.90':139
'21#.#35.106.0':445
'21#.#35.98.42':445
'21#.#35.170.126':445
'21#.#35.135.60':445
'21#.#35.89.20':445
'21#.#35.10.128':445
'21#.#35.152.240':445
'21#.#35.60.198':445
'21#.#35.101.218':445
'21#.#35.111.144':445
'21#.#35.128.132':445
'21#.#35.33.170':445
'21#.#35.29.33':445
'21#.#35.222.74':139
'21#.#35.72.212':139
'21#.#35.133.128':139
'21#.#35.13.39':9988
'21#.#35.45.13':139
'21#.#35.84.244':139
'21#.#35.177.70':139
'21#.#35.45.31':139
'21#.#35.49.156':139
'21#.#35.226.193':139
'21#.#35.177.134':139
'21#.#35.218.217':139
'21#.#35.215.129':139
'21#.#35.37.17':9988
'21#.#35.199.25':9988
'21#.#35.39.117':9988
'21#.#35.141.10':9988
'21#.#35.137.146':9988
'21#.#35.40.208':9988
'21#.#35.163.46':9988
'21#.#35.72.235':9988
'21#.#35.148.247':9988
'21#.#35.152.129':9988
'21#.#35.98.31':9988
'21#.#35.37.98':9988
'21#.#35.0.209':9988
'21#.#35.128.132':139
'21#.#35.33.170':139
'21#.#35.29.33':139
'21#.#35.98.42':139
'21#.#35.170.126':139
'21#.#35.152.240':139
'21#.#35.60.198':139
'21#.#35.226.108':139
'21#.#35.88.139':139
'21#.#35.183.184':139
'21#.#35.101.218':139
'21#.#35.111.144':139
'21#.#35.218.201':139
'21#.#35.26.70':139
'21#.#35.209.19':139
'21#.#35.10.195':139
'21#.#35.135.165':139
'21#.#35.85.102':139
'21#.#35.150.124':139
'21#.#35.7.155':139
'21#.#35.89.20':139
'21#.#35.10.128':139
'21#.#35.106.0':139
'21#.#35.132.59':139
'21#.#35.43.96':139
'21#.#35.135.60':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней