Trojan.Starman.5616

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa19a.dir00\svchost.exe.mdmp 16325836412030220

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa19a.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#41.251.118':139
'21#.#41.228.190':139
'21#.#41.2.76':139
'21#.#41.63.153':139
'21#.#41.1.184':139
'21#.#41.184.171':139
'21#.#41.92.139':139
'21#.#41.29.176':139
'21#.#41.67.155':139
'21#.#41.237.79':139
'21#.#41.155.237':139
'21#.#41.57.165':139
'21#.#41.212.111':139
'21#.#41.55.20':139
'21#.#41.106.84':139
'21#.#41.71.160':139
'21#.#41.21.9':139
'21#.#41.75.114':139
'21#.#41.100.46':139
'21#.#41.30.50':139
'21#.#41.25.50':139
'21#.#41.164.80':139
'21#.#41.2.42':139
'21#.#41.3.182':445
'21#.#41.81.110':445
'21#.#41.137.137':445
'21#.#41.64.167':445
'21#.#41.26.38':445
'21#.#41.70.82':445
'21#.#41.160.251':445
'21#.#41.5.127':445
'21#.#41.154.117':445
'21#.#41.51.222':445
'21#.#41.139.49':445
'21#.#41.97.118':139
'21#.#41.177.97':139
'21#.#41.185.196':139
'21#.#41.35.6':139
'21#.#41.187.84':139
'21#.#41.126.107':139
'21#.#41.64.34':139
'21#.#41.70.13':445
'21#.#41.64.220':139
'21#.#41.126.149':139
'21#.#41.124.103':139
'21#.#41.96.232':445
'21#.#41.88.254':445
'21#.#41.67.195':445
'21#.#41.20.215':445
'21#.#41.177.100':445
'21#.#41.129.104':445
'21#.#41.208.45':445
'21#.#41.168.199':445
'21#.#41.70.132':445
'21#.#41.162.42':445
'21#.#41.96.236':445
'21#.#41.100.183':445
'21#.#41.153.168':445
'21#.#41.94.103':445
'21#.#41.14.14':445
'21#.#41.103.206':445
'21#.#41.104.153':445
'21#.#41.125.59':445
'21#.#41.2.55':445
'21#.#41.45.104':445
'21#.#41.68.166':445
'21#.#41.236.189':445
'21#.#41.181.22':445
'21#.#41.160.251':139
'21#.#41.5.127':139
'21#.#41.154.117':139
'21#.#41.51.222':139
'21#.#41.139.49':139
'21#.#41.151.42':139
'21#.#41.237.145':139
'21#.#41.213.8':139
'21#.#41.31.10':139
'21#.#41.94.74':139
'21#.#41.65.205':139
'21#.#41.135.228':445
'21#.#41.70.13':139
'21#.#41.244.197':445
'21#.#41.5.20':445
'21#.#41.192.41':445
'21#.#41.64.167':139
'21#.#41.81.110':139
'21#.#41.70.82':139
'21#.#41.3.182':139
'21#.#41.26.38':139
'21#.#41.137.137':139
'21#.#41.78.177':139
'21#.#41.107.139':139
'21#.#41.228.5':139
'21#.#41.42.106':139
'21#.#41.251.146':139
'21#.#41.139.109':139
'21#.#41.165.225':139
'21#.#41.51.83':139
'21#.#41.158.74':139
'21#.#41.18.224':139
'21#.#41.109.246':139
'21#.#41.62.127':139
'21#.#41.246.37':139
'21#.#41.40.238':139
'21#.#41.18.204':139
'21#.#41.164.19':139
'21#.#41.86.24':139
'21#.#41.244.202':139
'21#.#41.201.120':139
'21#.#41.202.58':139
'21#.#41.9.65':139
'21#.141.1.2':139
'21#.#41.0.66':139
'21#.#41.114.203':139
'21#.#41.195.206':139
'21#.#41.147.78':139
'21#.#41.83.140':139
'21#.#41.78.223':139
'21#.#41.166.239':139
'21#.#41.44.115':139
'21#.#41.53.44':139
'21#.#41.57.219':139
'21#.#41.64.84':139
'21#.#41.7.221':139
'21#.#41.237.116':139
'21#.#41.147.189':139
'21#.#41.194.244':139
'21#.#41.30.190':139
'21#.#41.99.170':139
'21#.#41.141.162':139
'21#.#41.152.66':139
'21#.#41.210.213':139
'21#.#41.66.55':139
'21#.#41.74.37':139
'21#.#41.233.76':139
'21#.#41.30.50':445
'21#.#41.75.114':445
'21#.#41.164.80':445
'21#.#41.21.9':445
'21#.#41.25.50':445
'21#.#41.100.46':445
'21#.#41.251.118':445
'21#.#41.228.190':445
'21#.#41.2.76':445
'21#.#41.63.153':445
'21#.#41.1.184':445
'21#.#41.31.10':445
'21#.#41.237.145':445
'21#.#41.65.205':445
'21#.#41.151.42':445
'21#.#41.94.74':445
'21#.#41.213.8':445
'21#.#41.57.165':445
'21#.#41.212.111':445
'21#.#41.55.20':445
'21#.#41.106.84':445
'21#.#41.71.160':445
'21#.#41.184.171':445
'21#.#41.64.220':445
'21#.#41.64.34':445
'21#.#41.124.103':445
'21#.#41.126.107':445
'21#.#41.126.149':445
'21#.#41.17.75':139
'21#.#41.234.38':139
'21#.#41.19.127':139
'21#.#41.10.241':139
'21#.#41.103.251':139
'21#.#41.241.103':139
'21#.#41.92.139':445
'21#.#41.29.176':445
'21#.#41.67.155':445
'21#.#41.237.79':445
'21#.#41.155.237':445
'21#.#41.2.42':445
'21#.#41.97.118':445
'21#.#41.177.97':445
'21#.#41.185.196':445
'21#.#41.35.6':445
'21#.#41.187.84':445
'21#.#41.216.33':445
'21#.141.5.3':445
'21#.#41.18.41':445
'21#.#41.88.20':445
'21#.#41.240.194':445
'21#.#41.15.209':445
'21#.#41.94.190':445
'21#.#41.80.124':445
'21#.#41.89.161':445
'21#.#41.3.181':445
'21#.#41.216.119':445
'21#.#41.100.167':139
'21#.#41.31.229':139
'21#.#41.76.7':139
'21#.#41.81.89':139
'21#.#41.165.81':139
'21#.#41.84.79':139
'21#.#41.20.9':445
'21#.#41.133.213':445
'21#.#41.9.28':445
'21#.#41.121.145':445
'21#.#41.27.150':445
'21#.#41.178.99':445
'21#.#41.137.23':445
'21#.#41.130.74':445
'21#.#41.49.86':445
'21#.#41.227.107':445
'21#.#41.90.81':445
'21#.#41.235.112':445
'21#.#41.198.210':445
'21#.#41.186.138':445
'21#.#41.253.111':445
'21#.#41.86.70':445
'21#.#41.39.74':445
'21#.#41.148.111':445
'21#.#41.134.239':445
'21#.#41.111.165':445
'21#.#41.177.177':445
'21#.#41.11.60':445
'21#.#41.11.159':445
'21#.#41.26.235':445
'21#.#41.117.94':445
'21#.#41.218.239':445
'21#.#41.244.223':445
'21#.#41.231.17':445
'21#.#41.94.190':139
'21#.#41.80.124':139
'21#.#41.89.161':139
'21#.#41.3.181':139
'21#.#41.216.119':139
'21#.#41.178.99':139
'21#.#41.148.111':139
'21#.#41.134.239':139
'21#.#41.111.165':139
'21#.#41.177.177':139
'21#.#41.11.60':139
'21#.#41.88.20':139
'21#.#41.20.9':139
'21#.#41.121.145':139
'21#.#41.27.150':139
'21#.#41.9.28':139
'21#.#41.133.213':139
'21#.141.5.3':139
'21#.#41.15.209':139
'21#.#41.216.33':139
'21#.#41.240.194':139
'21#.#41.18.41':139
'21#.#41.11.159':139
'21#.#41.198.210':139
'21#.#41.186.138':139
'21#.#41.253.111':139
'21#.#41.86.70':139
'21#.#41.39.74':139
'21#.#41.192.182':139
'21#.#41.234.192':139
'21#.#41.122.128':139
'21#.#41.142.128':139
'21#.#41.159.172':139
'21#.#41.146.173':139
'21#.#41.26.235':139
'21#.#41.117.94':139
'21#.#41.218.239':139
'21#.#41.244.223':139
'21#.#41.231.17':139
'21#.#41.227.107':139
'21#.#41.130.74':139
'21#.#41.235.112':139
'21#.#41.137.23':139
'21#.#41.90.81':139
'21#.#41.49.86':139
'21#.#41.208.45':139
'21#.#41.168.199':139
'21#.#41.70.132':139
'21#.#41.162.42':139
'21#.#41.96.236':139
'21#.#41.181.22':139
'21#.#41.135.228':139
'21#.#41.91.80':445
'21#.#41.244.197':139
'21#.#41.5.20':139
'21#.#41.192.41':139
'21#.#41.125.59':139
'21#.#41.2.55':139
'21#.#41.45.104':139
'21#.#41.68.166':139
'21#.#41.236.189':139
'21#.#41.20.215':139
'21#.#41.88.254':139
'21#.#41.129.104':139
'21#.#41.96.232':139
'21#.#41.177.100':139
'21#.#41.67.195':139
'21#.#41.161.51':445
'21#.#41.57.48':445
'21#.#41.201.50':445
'21#.#41.36.19':445
'21#.#41.156.190':445
'21#.#41.250.186':445
'21#.#41.186.10':445
'21#.#41.120.166':445
'21#.#41.21.250':445
'21#.#41.39.103':445
'21#.#41.159.1':445
'21#.#41.103.80':445
'21#.#41.169.42':445
'21#.#41.154.129':445
'21#.#41.174.224':445
'21#.#41.109.77':445
'21#.#41.58.56':445
'21#.#41.123.173':445
'21#.#41.15.50':445
'21#.#41.11.43':445
'21#.#41.64.7':445
'21#.#41.12.208':445
'21#.#41.134.84':445
'21#.#41.27.150':9988
'21#.#41.91.80':139
'21#.#41.240.194':9988
'21#.#41.84.79':445
'21#.#41.20.9':9988
'21#.#41.161.51':139
'21#.#41.169.42':139
'21#.#41.154.129':139
'21#.#41.174.224':139
'21#.#41.109.77':139
'21#.#41.58.56':139
'21#.#41.142.128':445
'21#.#41.234.192':445
'21#.#41.146.173':445
'21#.#41.192.182':445
'21#.#41.159.172':445
'21#.#41.122.128':445
'21#.#41.100.167':445
'21#.#41.31.229':445
'21#.#41.76.7':445
'21#.#41.81.89':445
'21#.#41.165.81':445
'21#.#41.123.173':139
'21#.#41.120.166':139
'21#.#41.21.250':139
'21#.#41.39.103':139
'21#.#41.159.1':139
'21#.#41.103.80':139
'21#.#41.14.14':139
'21#.#41.153.168':139
'21#.#41.104.153':139
'21#.#41.100.183':139
'21#.#41.103.206':139
'21#.#41.94.103':139
'21#.#41.15.50':139
'21#.#41.11.43':139
'21#.#41.64.7':139
'21#.#41.12.208':139
'21#.#41.134.84':139
'21#.#41.156.190':139
'21#.#41.201.50':139
'21#.#41.186.10':139
'21#.#41.57.48':139
'21#.#41.250.186':139
'21#.#41.36.19':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней