Trojan.Starman.5085

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER7152.dir00\svchost.exe.mdmp 16325836412030184

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7152.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#94.58.219':139
'21#.#94.209.66':139
'21#.#94.66.83':139
'21#.#94.52.131':139
'21#.#94.158.86':139
'21#.#94.171.172':139
'21#.#94.48.179':139
'21#.#94.52.251':139
'21#.#94.91.14':139
'21#.#94.119.79':139
'21#.#94.51.221':139
'21#.#94.154.153':139
'21#.#94.84.193':139
'21#.#94.254.220':139
'21#.#94.166.166':139
'21#.#94.221.118':139
'21#.#94.42.30':139
'21#.#94.28.213':139
'21#.#94.177.227':139
'21#.#94.49.178':139
'21#.#94.149.148':139
'21#.#94.42.30':445
'21#.#94.28.213':445
'21#.#94.177.227':445
'21#.#94.49.178':445
'21#.#94.149.148':445
'21#.#94.66.83':445
'21#.#94.58.219':445
'21#.#94.158.86':445
'21#.#94.51.221':445
'21#.#94.52.131':445
'21#.#94.84.193':445
'21#.#94.173.177':139
'21#.#94.64.155':445
'21#.#94.120.204':139
'21#.#94.68.148':139
'21#.#94.55.74':139
'21#.#94.254.220':445
'21#.#94.154.153':445
'21#.#94.221.118':445
'21#.#94.8.18':445
'21#.#94.166.166':445
'21#.#94.207.86':139
'21#.#94.232.108':139
'21#.#94.54.98':139
'21#.#94.98.189':139
'21#.#94.31.253':139
'21#.#94.72.143':445
'21#.#94.87.12':445
'21#.#94.74.176':445
'21#.#94.74.161':445
'21#.#94.205.225':445
'21#.#94.178.159':139
'21#.#94.158.226':139
'21#.#94.149.250':139
'21#.#94.1.148':139
'21#.#94.46.219':139
'21#.#94.19.131':139
'21#.#94.171.17':139
'21#.#94.222.58':139
'21#.#94.246.59':139
'21#.#94.107.150':139
'21#.#94.201.99':139
'21#.#94.98.189':445
'21#.#94.31.253':445
'21#.#94.178.159':445
'21#.#94.171.17':445
'21#.#94.222.58':445
'21#.#94.64.155':139
'21#.#94.8.18':139
'21#.#94.232.108':445
'21#.#94.54.98':445
'21#.#94.207.86':445
'21#.#94.246.59':445
'21#.#94.46.219':445
'21#.#94.19.131':445
'21#.#94.218.204':445
'21#.#94.2.80':445
'21#.#94.205.67':445
'21#.#94.107.150':445
'21#.#94.201.99':445
'21#.#94.149.250':445
'21#.#94.1.148':445
'21#.#94.158.226':445
'21#.#94.209.66':445
'21#.#94.100.144':445
'21#.#94.60.175':139
'21#.#94.135.78':445
'21#.#94.29.66':445
'21#.#94.78.94':445
'21#.#94.129.55':139
'21#.#94.120.216':139
'21#.#94.217.74':139
'21#.#94.12.219':139
'21#.#94.74.223':139
'21#.#94.217.214':445
'21#.#94.250.187':445
'21#.#94.195.229':445
'21#.#94.91.248':445
'21#.#94.230.13':445
'21#.#94.113.174':445
'21#.#94.247.99':445
'21#.#94.247.45':445
'21#.#94.148.211':445
'21#.#94.58.82':445
'21#.#94.16.68':445
'21#.#94.216.77':139
'21#.#94.234.135':139
'21#.#94.24.40':139
'21#.#94.1.193':139
'21#.#94.194.29':139
'21#.#94.194.44':139
'21#.#94.157.240':139
'21#.#94.53.12':139
'21#.#94.204.234':139
'21#.#94.172.139':139
'21#.#94.185.203':139
'21#.#94.196.110':139
'21#.#94.187.207':139
'21#.#94.14.229':139
'21#.#94.38.254':139
'21#.#94.52.120':139
'21#.#94.253.1':139
'21#.#94.203.123':139
'21#.#94.194.140':139
'21#.#94.24.60':139
'21#.#94.212.214':139
'21#.#94.74.113':139
'21#.#94.46.74':139
'21#.#94.113.253':139
'21#.#94.117.254':139
'21#.#94.179.241':139
'21#.#94.113.174':139
'21#.#94.91.248':139
'21#.#94.230.13':139
'21#.#94.11.50':139
'21#.#94.46.31':139
'21#.#94.255.8':139
'21#.#94.171.172':445
'21#.#94.48.179':445
'21#.#94.52.251':445
'21#.#94.91.14':445
'21#.#94.119.79':445
'21#.#94.173.177':445
'21#.#94.42.181':139
'21#.#94.120.204':445
'21#.#94.68.148':445
'21#.#94.55.74':445
'21#.#94.117.254':445
'21#.#94.179.241':445
'21#.#94.255.8':445
'21#.#94.100.144':139
'21#.#94.42.181':445
'21#.#94.11.50':445
'21#.#94.46.31':445
'21#.#94.46.74':445
'21#.#94.113.253':445
'21#.#94.74.113':445
'21#.#94.135.78':139
'21#.#94.16.68':139
'21#.#94.148.211':139
'21#.#94.58.82':139
'21#.#94.250.187':139
'21#.#94.195.229':139
'21#.#94.29.66':139
'21#.#94.78.94':139
'21#.#94.217.214':139
'21#.#94.247.99':139
'21#.#94.247.45':139
'21#.#94.218.204':139
'21#.#94.200.118':445
'21#.#94.185.175':445
'21#.#94.118.24':445
'21#.#94.202.152':445
'21#.#94.29.83':445
'21#.#94.116.8':445
'21#.#94.244.201':445
'21#.#94.51.100':445
'21#.#94.142.97':445
'21#.#94.10.149':445
'21#.#94.117.252':445
'21#.#94.23.124':139
'21#.#94.68.75':139
'21#.#94.42.143':139
'21#.#94.159.136':139
'21#.#94.246.172':139
'21#.#94.25.20':139
'21#.#94.164.162':445
'21#.#94.54.198':139
'21#.#94.11.84':139
'21#.#94.191.69':139
'21#.#94.148.92':445
'21#.#94.80.91':445
'21#.#94.159.71':445
'21#.#94.118.248':445
'21#.#94.209.129':445
'21#.#94.195.38':445
'21#.#94.222.172':445
'21#.#94.38.232':445
'21#.#94.185.141':445
'21#.#94.232.20':445
'21#.#94.152.219':445
'21#.#94.117.98':445
'21#.#94.189.116':445
'21#.#94.94.248':445
'21#.#94.16.79':445
'21#.#94.58.238':445
'21#.#94.57.6':445
'21#.#94.52.110':445
'21#.#94.162.111':445
'21#.#94.117.189':445
'21#.#94.64.55':445
'21#.#94.94.248':139
'21#.#94.117.98':139
'21#.#94.58.238':139
'21#.#94.244.201':139
'21#.#94.16.79':139
'21#.#94.162.111':139
'21#.#94.57.6':139
'21#.#94.64.55':139
'21#.#94.189.116':139
'21#.#94.117.189':139
'21#.#94.116.8':139
'21#.#94.29.83':139
'21#.#94.117.252':139
'21#.#94.164.162':139
'21#.#94.202.152':139
'21#.#94.10.149':139
'21#.#94.185.175':139
'21#.#94.51.100':139
'21#.#94.118.24':139
'21#.#94.142.97':139
'21#.#94.200.118':139
'21#.#94.69.224':139
'21#.#94.112.104':139
'21#.#94.224.131':139
'21#.#94.222.172':139
'21#.#94.95.120':139
'21#.#94.230.105':139
'21#.#94.83.230':139
'21#.#94.79.4':139
'21#.#94.186.148':139
'21#.#94.165.160':139
'21#.#94.195.38':139
'21#.#94.209.129':139
'21#.#94.159.71':139
'21#.#94.118.248':139
'21#.#94.52.110':139
'21#.#94.152.219':139
'21#.#94.232.20':139
'21#.#94.38.232':139
'21#.#94.185.141':139
'21#.#94.148.92':139
'21#.#94.80.91':139
'21#.#94.95.120':445
'21#.#94.220.216':445
'21#.#94.122.171':445
'21#.#94.121.4':445
'21#.#94.68.174':139
'21#.#94.188.24':445
'21#.#94.131.82':445
'21#.#94.218.9':445
'21#.#94.231.143':445
'21#.#94.214.210':445
'21#.#94.244.92':445
'21#.#94.83.26':139
'21#.#94.197.141':139
'21#.#94.201.197':139
'21#.#94.106.182':139
'21#.#94.228.176':139
'21#.#94.9.109':139
'21#.#94.244.144':139
'21#.194.1.4':139
'21#.#94.142.119':139
'21#.#94.233.201':139
'21#.#94.119.234':139
'21#.#94.74.161':139
'21#.#94.205.225':139
'21#.#94.68.174':445
'21#.194.1.4':445
'21#.#94.83.26':445
'21#.#94.2.80':139
'21#.#94.205.67':139
'21#.#94.87.12':139
'21#.#94.74.176':139
'21#.#94.72.143':139
'21#.#94.244.144':445
'21#.#94.9.109':445
'21#.#94.106.182':445
'21#.#94.228.176':445
'21#.#94.33.139':445
'21#.#94.177.114':445
'21#.#94.119.234':445
'21#.#94.142.119':445
'21#.#94.233.201':445
'21#.#94.197.141':445
'21#.#94.201.197':445
'21#.#94.191.69':445
'21#.#94.54.198':445
'21#.#94.11.84':445
'21#.#94.23.124':445
'21#.#94.68.75':445
'21#.#94.64.55':9988
'21#.#94.57.6':9988
'21#.#94.116.8':9988
'21#.#94.25.20':445
'21#.#94.117.252':9988
'21#.#94.42.143':445
'21#.#94.186.148':445
'21#.#94.165.160':445
'21#.#94.112.104':445
'21#.#94.224.131':445
'21#.#94.69.224':445
'21#.#94.159.136':445
'21#.#94.246.172':445
'21#.#94.83.230':445
'21#.#94.79.4':445
'21#.#94.230.105':445
'21#.#94.214.210':139
'21#.#94.244.92':139
'21#.#94.122.171':139
'21#.#94.121.4':139
'21#.#94.220.216':139
'21#.#94.33.139':139
'21#.#94.177.114':139
'21#.#94.218.9':139
'21#.#94.231.143':139
'21#.#94.131.82':139
'21#.#94.188.24':139
'21#.#94.209.129':9988
'21#.#94.148.92':9988
'21#.#94.118.248':9988
'21#.#94.52.110':9988
'21#.#94.152.219':9988
'21#.#94.186.148':9988
'21#.#94.230.105':9988
'21#.#94.112.104':9988
'21#.#94.222.172':9988
'21#.#94.69.224':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней