Trojan.Starman.4758

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1112 -dm 7 7 %TEMP%\WERfac6.dir00\svchost.exe.mdmp 16325836412032256

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERfac6.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#79.114.115':139
'19#.#79.2.77':445
'19#.#79.63.165':445
'19#.#79.22.99':445
'19#.#79.115.184':139
'19#.#79.71.248':445
'19#.#79.99.32':445
'19#.#79.55.151':445
'19#.#79.96.193':139
'19#.#79.139.206':445
'19#.#79.99.32':139
'19#.#79.55.151':139
'19#.#79.22.99':139
'19#.#79.2.77':139
'19#.#79.63.165':139
'19#.#79.142.4':445
'19#.#79.110.192':445
'19#.#79.71.248':139
'19#.#79.139.206':139
'19#.#79.39.212':139
'19#.#79.39.212':445
'19#.#79.195.189':139
'19#.#79.187.84':139
'19#.#79.158.110':139
'19#.#79.66.126':139
'19#.#79.44.201':139
'19#.#79.166.6':139
'19#.#79.27.120':139
'19#.#79.10.11':139
'19#.#79.103.94':139
'19#.#79.88.24':139
'19#.#79.9.249':139
'19#.#79.152.118':139
'19#.#79.191.93':139
'19#.#79.182.173':139
'19#.#79.39.219':139
'19#.#79.20.18':139
'19#.#79.50.233':139
'19#.#79.20.215':139
'19#.#79.153.206':139
'19#.#79.81.121':139
'19#.#79.121.55':445
'19#.#79.92.141':445
'19#.#79.171.46':445
'19#.#79.134.165':445
'19#.#79.21.165':445
'19#.#79.180.87':445
'19#.#79.249.224':445
'19#.#79.163.169':445
'19#.#79.83.152':445
'19#.#79.124.33':445
'19#.#79.134.51':445
'19#.#79.234.42':445
'19#.#79.34.244':445
'19#.#79.50.52':445
'19#.#79.109.56':445
'19#.#79.121.247':445
'19#.#79.202.120':445
'19#.#79.181.113':445
'19#.#79.91.109':445
'19#.#79.0.31':445
'19#.#79.138.166':445
'19#.#79.30.238':445
'19#.#79.72.158':445
'19#.#79.27.17':445
'19#.#79.30.195':445
'19#.#79.15.23':445
'19#.#79.142.4':139
'19#.#79.110.192':139
'19#.#79.245.79':445
'19#.#79.145.52':445
'19#.#79.120.242':445
'19#.#79.255.49':445
'19#.#79.24.84':445
'19#.#79.107.147':445
'19#.#79.102.96':445
'19#.#79.11.207':445
'19#.#79.61.112':445
'19#.#79.242.22':445
'19#.#79.227.241':445
'19#.#79.221.124':445
'19#.#79.222.221':445
'19#.#79.197.234':445
'19#.#79.82.18':445
'19#.#79.150.214':445
'19#.#79.9.208':445
'19#.#79.250.34':445
'19#.#79.70.41':139
'19#.#79.4.70':139
'19#.#79.41.178':139
'19#.#79.14.32':445
'19#.#79.89.23':445
'19#.#79.15.87':445
'19#.#79.7.222':445
'19#.#79.191.226':445
'19#.#79.27.120':445
'19#.#79.218.106':445
'19#.#79.185.231':445
'19#.#79.99.28':445
'19#.#79.159.227':445
'19#.#79.245.89':445
'19#.#79.90.113':445
'19#.#79.168.181':139
'19#.#79.227.239':445
'19#.#79.174.188':445
'19#.#79.50.10':445
'19#.#79.168.181':445
'19#.#79.205.181':445
'19#.#79.106.229':139
'19#.#79.53.227':139
'19#.#79.39.71':139
'19#.#79.145.157':445
'19#.#79.124.182':445
'19#.#79.174.188':139
'19#.#79.145.157':139
'19#.#79.227.239':139
'19#.#79.205.181':139
'19#.#79.50.10':139
'19#.#79.70.41':445
'19#.#79.4.70':445
'19#.#79.41.178':445
'19#.#79.165.187':445
'19#.#79.124.182':139
'19#.#79.197.234':139
'19#.#79.82.18':139
'19#.#79.150.214':139
'19#.#79.9.208':139
'19#.#79.250.34':139
'19#.#79.115.184':445
'19#.#79.96.193':445
'19#.#79.165.187':139
'19#.#79.89.23':139
'19#.#79.14.32':139
'19#.#79.15.87':139
'19#.#79.7.222':139
'19#.#79.191.226':139
'19#.#79.106.165':139
'19#.#79.218.106':139
'19#.#79.185.231':139
'19#.#79.99.28':139
'19#.#79.159.227':139
'19#.#79.90.113':139
'19#.#79.245.89':139
'19#.#79.114.115':445
'19#.#79.195.189':445
'19#.#79.187.84':445
'19#.#79.158.110':445
'19#.#79.66.126':445
'19#.#79.44.201':445
'19#.#79.166.6':445
'19#.#79.106.165':445
'19#.#79.10.11':445
'19#.#79.103.94':445
'19#.#79.88.24':445
'19#.#79.191.93':445
'19#.#79.152.118':445
'19#.#79.9.249':445
'19#.#79.182.173':445
'19#.#79.39.219':445
'19#.#79.20.18':445
'19#.#79.50.233':445
'19#.#79.20.215':445
'19#.#79.153.206':445
'19#.#79.81.121':445
'19#.#79.137.187':445
'19#.#79.37.26':445
'19#.#79.96.35':445
'19#.#79.36.88':445
'19#.#79.5.96':445
'19#.#79.84.132':445
'19#.#79.85.226':445
'19#.#79.19.122':445
'19#.#79.100.7':445
'19#.#79.53.232':445
'19#.#79.216.131':139
'19#.#79.29.213':139
'19#.#79.176.146':139
'19#.#79.104.219':139
'19#.#79.2.147':139
'19#.#79.237.145':139
'19#.#79.159.72':139
'19#.#79.67.7':139
'19#.#79.254.29':139
'19#.#79.84.254':139
'19#.#79.70.68':445
'19#.#79.6.130':445
'19#.#79.191.109':445
'19#.#79.87.190':445
'19#.#79.191.7':445
'19#.#79.90.92':445
'19#.#79.37.72':445
'19#.#79.246.146':445
'19#.#79.6.36':445
'19#.#79.84.51':445
'19#.#79.173.84':445
'19#.#79.52.99':445
'19#.#79.140.88':445
'19#.#79.25.33':445
'19#.#79.69.210':445
'19#.#79.60.28':445
'19#.#79.92.102':445
'19#.#79.7.90':445
'19#.#79.128.187':445
'19#.#79.14.132':445
'19#.#79.188.87':445
'19#.#79.25.33':139
'19#.#79.52.99':139
'19#.#79.60.28':139
'19#.#79.70.68':139
'19#.#79.69.210':139
'19#.#79.128.187':139
'19#.#79.92.102':139
'19#.#79.188.87':139
'19#.#79.140.88':139
'19#.#79.14.132':139
'19#.#79.96.35':139
'19#.#79.37.26':139
'19#.#79.53.232':139
'19#.#79.137.187':139
'19#.#79.100.7':139
'19#.#79.19.122':139
'19#.#79.85.226':139
'19#.#79.84.132':139
'19#.#79.5.96':139
'19#.#79.36.88':139
'19#.#79.7.90':139
'19#.#79.226.5':139
'19#.179.6.4':139
'19#.#79.187.171':139
'19#.#79.221.168':139
'19#.#79.171.240':139
'19#.#79.187.235':139
'19#.#79.219.187':139
'19#.#79.179.148':139
'19#.#79.41.29':139
'19#.#79.170.144':139
'19#.#79.6.130':139
'19#.#79.191.109':139
'19#.#79.87.190':139
'19#.#79.90.92':139
'19#.#79.191.7':139
'19#.#79.37.72':139
'19#.#79.246.146':139
'19#.#79.6.36':139
'19#.#79.84.51':139
'19#.#79.173.84':139
'19#.#79.121.55':139
'19#.#79.102.96':139
'19#.#79.121.247':139
'19#.#79.21.165':139
'19#.#79.202.120':139
'19#.#79.92.141':139
'19#.#79.15.23':139
'19#.#79.107.147':139
'19#.#79.255.49':139
'19#.#79.124.33':139
'19#.#79.134.51':139
'19#.#79.91.109':139
'19#.#79.234.42':139
'19#.#79.42.239':139
'19#.#79.109.56':139
'19#.#79.134.165':139
'19#.#79.171.46':139
'19#.#79.181.113':139
'19#.#79.34.244':139
'19#.#79.0.31':139
'19#.#79.72.158':139
'19#.#79.83.152':139
'19#.#79.138.166':139
'19#.#79.227.241':139
'19#.#79.30.238':139
'19#.#79.242.22':139
'19#.#79.56.232':445
'19#.#79.42.239':445
'19#.#79.245.79':139
'19#.#79.120.242':139
'19#.#79.145.52':139
'19#.#79.24.84':139
'19#.#79.222.221':139
'19#.#79.163.169':139
'19#.#79.27.17':139
'19#.#79.221.124':139
'19#.#79.180.87':139
'19#.#79.30.195':139
'19#.#79.61.112':139
'19#.#79.11.207':139
'19#.#79.249.224':139
'19#.#79.216.131':445
'19#.#79.29.213':445
'19#.#79.176.146':445
'19#.#79.104.219':445
'19#.#79.2.147':445
'19#.#79.237.145':445
'19#.#79.159.72':445
'19#.#79.84.254':445
'19#.#79.254.29':445
'19#.#79.67.7':445
'19#.#79.226.5':445
'19#.179.6.4':445
'19#.#79.171.240':445
'19#.#79.221.168':445
'19#.#79.187.171':445
'19#.#79.187.235':445
'19#.#79.219.187':445
'19#.#79.179.148':445
'19#.#79.41.29':445
'19#.#79.170.144':445
'19#.#79.5.96':9988
'19#.#79.216.131':9988
'19#.#79.52.99':9988
'19#.#79.41.29':9988
'19#.#79.84.51':9988
'19#.#79.187.171':9988
'19#.#79.56.232':139
'19#.#79.50.52':139
'19#.#79.85.226':9988
'19#.#79.53.232':9988
'19#.#79.37.26':9988
'19#.#79.188.87':9988
'19#.#79.128.187':9988
'19#.#79.140.88':9988
'19#.#79.137.187':9988
'19#.#79.36.88':9988
'19#.#79.6.130':9988
'19#.#79.191.109':9988
'19#.#79.87.190':9988
'19#.#79.92.102':9988
'19#.#79.7.90':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней