Trojan.Starman.5122

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2c68.dir00\svchost.exe.mdmp 16325836412032240

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2c68.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#15.69.159':139
'21#.#15.34.69':139
'21#.#15.158.168':139
'21#.#15.128.106':139
'21#.#15.53.102':139
'21#.#15.24.174':139
'21#.#15.68.206':139
'21#.#15.251.71':139
'21#.#15.62.34':139
'21#.#15.72.62':139
'21#.#15.26.87':139
'21#.#15.26.249':139
'21#.#15.89.34':139
'21#.#15.111.101':139
'21#.#15.53.131':139
'21#.#15.159.233':139
'21#.#15.34.25':139
'21#.#15.60.34':139
'21#.#15.108.231':139
'21#.#15.156.144':139
'21#.#15.75.132':139
'21#.#15.108.231':445
'21#.#15.68.206':445
'21#.#15.34.25':445
'21#.#15.53.102':445
'21#.#15.156.144':445
'21#.#15.158.168':445
'21#.#15.34.69':445
'21#.#15.128.106':445
'21#.#15.62.34':445
'21#.#15.69.159':445
'21#.#15.72.62':445
'21#.#15.237.186':139
'21#.#15.53.131':445
'21#.#15.209.217':139
'21#.#15.64.155':139
'21#.#15.34.57':139
'21#.#15.89.34':445
'21#.#15.251.71':445
'21#.#15.26.249':445
'21#.#15.159.233':445
'21#.#15.111.101':445
'21#.#15.213.173':445
'21#.#15.102.45':139
'21#.#15.174.1':139
'21#.#15.14.102':139
'21#.#15.60.32':139
'21#.#15.66.179':139
'21#.#15.27.59':445
'21#.#15.56.84':445
'21#.#15.142.199':445
'21#.#15.213.173':139
'21#.#15.219.75':445
'21#.#15.218.254':139
'21#.#15.58.164':139
'21#.#15.251.57':139
'21#.#15.245.186':139
'21#.#15.229.120':139
'21#.#15.234.167':139
'21#.#15.44.20':139
'21#.#15.111.224':139
'21#.#15.58.137':139
'21#.#15.156.50':139
'21#.#15.2.52':139
'21#.#15.111.224':445
'21#.#15.218.254':445
'21#.#15.44.20':445
'21#.#15.2.52':445
'21#.#15.58.137':445
'21#.#15.102.45':445
'21#.#15.174.1':445
'21#.#15.14.102':445
'21#.#15.60.32':445
'21#.#15.66.179':445
'21#.#15.156.50':445
'21#.#15.45.35':445
'21#.#15.15.83':445
'21#.#15.17.16':445
'21#.#15.221.103':445
'21#.#15.234.92':445
'21#.#15.58.164':445
'21#.#15.251.57':445
'21#.#15.245.186':445
'21#.#15.229.120':445
'21#.#15.234.167':445
'21#.#15.130.29':445
'21#.#15.62.124':445
'21#.#15.1.69':445
'21#.#15.80.40':445
'21#.#15.42.228':445
'21#.#15.36.6':139
'21#.#15.39.83':139
'21#.#15.52.77':139
'21#.#15.89.211':445
'21#.#15.77.98':139
'21#.#15.170.155':445
'21#.#15.249.45':445
'21#.#15.138.76':445
'21#.#15.187.32':445
'21#.#15.96.29':445
'21#.#15.52.84':445
'21#.#15.166.179':445
'21#.#15.159.146':445
'21#.#15.71.182':445
'21#.#15.35.138':445
'21#.#15.190.35':445
'21#.#15.214.25':139
'21#.#15.25.245':139
'21#.#15.203.68':139
'21#.#15.209.17':139
'21#.#15.70.209':139
'21#.#15.249.150':139
'21#.#15.135.248':139
'21#.#15.103.107':139
'21#.#15.24.110':139
'21#.#15.78.160':139
'21#.#15.17.243':139
'21#.#15.14.194':139
'21#.#15.11.163':139
'21#.#15.62.54':139
'21#.#15.12.57':139
'21#.#15.121.217':139
'21#.#15.192.83':139
'21#.#15.242.191':139
'21#.#15.72.210':139
'21#.#15.200.11':139
'21#.#15.41.3':139
'21#.#15.71.84':445
'21#.#15.123.111':139
'21#.#15.106.35':139
'21#.#15.84.69':139
'21#.#15.84.38':139
'21#.#15.28.18':139
'21#.#15.187.32':139
'21#.#15.249.45':139
'21#.#15.52.84':139
'21#.#15.71.84':139
'21#.#15.96.29':139
'21#.#15.159.138':139
'21#.#15.75.132':445
'21#.#15.64.155':445
'21#.#15.26.87':445
'21#.#15.24.174':445
'21#.#15.60.34':445
'21#.#15.83.237':139
'21#.#15.168.26':139
'21#.#15.237.186':445
'21#.#15.34.57':445
'21#.#15.209.217':445
'21#.#15.168.26':445
'21#.#15.159.138':445
'21#.#15.83.237':445
'21#.#15.62.124':139
'21#.#15.89.211':139
'21#.#15.123.111':445
'21#.#15.106.35':445
'21#.#15.84.69':445
'21#.#15.84.38':445
'21#.#15.28.18':445
'21#.#15.130.29':139
'21#.#15.71.182':139
'21#.#15.166.179':139
'21#.#15.190.35':139
'21#.#15.138.76':139
'21#.#15.35.138':139
'21#.#15.42.228':139
'21#.#15.1.69':139
'21#.#15.80.40':139
'21#.#15.159.146':139
'21#.#15.170.155':139
'21#.#15.15.83':139
'21#.#15.250.236':445
'21#.#15.34.251':445
'21#.#15.236.243':445
'21#.#15.165.46':445
'21#.#15.243.164':445
'21#.#15.30.178':445
'21#.#15.207.108':445
'21#.#15.178.78':445
'21#.#15.72.49':445
'21#.#15.6.85':445
'21#.#15.49.78':445
'21#.#15.127.50':139
'21#.#15.247.60':139
'21#.#15.253.46':139
'21#.#15.42.128':139
'21#.#15.47.37':139
'21#.#15.70.162':445
'21#.#15.127.79':445
'21#.#15.237.42':139
'21#.#15.151.247':139
'21#.#15.168.2':139
'21#.#15.79.124':445
'21#.#15.58.30':445
'21#.#15.113.87':445
'21#.#15.52.165':445
'21#.#15.69.114':445
'21#.#15.58.69':445
'21#.#15.47.50':445
'21#.#15.60.100':445
'21#.#15.41.207':445
'21#.#15.191.251':445
'21#.#15.28.187':445
'21#.#15.223.117':445
'21#.#15.49.212':445
'21#.#15.128.220':445
'21#.#15.3.137':445
'21#.#15.184.171':445
'21#.#15.149.207':445
'21#.#15.187.149':445
'21#.#15.213.152':445
'21#.#15.168.198':445
'21#.#15.149.251':445
'21#.#15.138.174':139
'21#.#15.184.171':139
'21#.#15.128.220':139
'21#.#15.3.137':139
'21#.#15.30.178':139
'21#.#15.207.108':139
'21#.#15.149.251':139
'21#.#15.213.152':139
'21#.#15.168.198':139
'21#.#15.223.117':139
'21#.#15.49.212':139
'21#.#15.178.78':139
'21#.#15.165.46':139
'21#.#15.243.164':139
'21#.#15.49.78':139
'21#.#15.127.79':139
'21#.#15.70.162':139
'21#.#15.72.49':139
'21#.#15.6.85':139
'21#.#15.34.251':139
'21#.#15.236.243':139
'21#.#15.250.236':139
'21#.#15.26.45':139
'21#.#15.245.214':139
'21#.#15.13.165':139
'21#.#15.58.69':139
'21#.#15.47.50':139
'21#.#15.245.86':139
'21#.#15.171.103':139
'21#.#15.190.110':139
'21#.#15.33.53':139
'21#.#15.200.215':139
'21#.#15.60.100':139
'21#.#15.52.165':139
'21#.#15.69.114':139
'21#.#15.28.187':139
'21#.#15.149.207':139
'21#.#15.187.149':139
'21#.#15.41.207':139
'21#.#15.191.251':139
'21#.#15.58.30':139
'21#.#15.113.87':139
'21#.#15.79.124':139
'21#.#15.99.156':445
'21#.#15.115.2':445
'21#.#15.20.234':445
'21#.#15.44.227':445
'21#.#15.13.66':445
'21#.#15.169.6':445
'21#.#15.199.198':445
'21#.#15.113.139':445
'21#.#15.62.39':445
'21#.#15.180.91':445
'21#.#15.75.115':139
'21#.#15.232.37':139
'21#.#15.227.72':139
'21#.#15.8.77':139
'21#.#15.223.185':139
'21#.#15.26.172':139
'21#.#15.22.33':139
'21#.#15.109.29':139
'21#.#15.59.71':139
'21#.#15.205.174':139
'21#.#15.34.88':139
'21#.#15.142.199':139
'21#.#15.27.59':139
'21#.#15.219.75':139
'21#.#15.109.29':445
'21#.#15.75.115':445
'21#.#15.17.16':139
'21#.#15.45.35':139
'21#.#15.234.92':139
'21#.#15.56.84':139
'21#.#15.221.103':139
'21#.#15.22.33':445
'21#.#15.26.172':445
'21#.#15.8.77':445
'21#.#15.223.185':445
'21#.#15.14.94':445
'21#.#15.67.3':445
'21#.#15.34.88':445
'21#.#15.59.71':445
'21#.#15.205.174':445
'21#.#15.232.37':445
'21#.#15.227.72':445
'21#.#15.67.3':139
'21#.#15.151.247':445
'21#.#15.168.2':445
'21#.#15.247.60':445
'21#.#15.253.46':445
'21#.#15.127.50':445
'21#.#15.236.243':9988
'21#.#15.6.85':9988
'21#.#15.243.164':9988
'21#.#15.237.42':445
'21#.#15.49.78':9988
'21#.#15.47.37':445
'21#.#15.33.53':445
'21#.#15.200.215':445
'21#.#15.245.214':445
'21#.#15.13.165':445
'21#.#15.26.45':445
'21#.#15.138.174':445
'21#.#15.42.128':445
'21#.#15.171.103':445
'21#.#15.190.110':445
'21#.#15.245.86':445
'21#.#15.115.2':139
'21#.#15.62.39':139
'21#.#15.99.156':139
'21#.#15.13.66':139
'21#.#15.20.234':139
'21#.#15.199.198':139
'21#.#15.14.94':139
'21#.#15.169.6':139
'21#.#15.180.91':139
'21#.#15.113.139':139
'21#.#15.44.227':139
'21#.#15.3.137':9988
'21#.#15.49.212':9988
'21#.#15.207.108':9988
'21#.#15.178.78':9988
'21#.#15.30.178':9988
'21#.#15.113.87':9988
'21#.#15.60.100':9988
'21#.#15.187.149':9988
'21#.#15.213.152':9988
'21#.#15.149.207':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней