Trojan.Starman.5210

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER36e0.dir00\svchost.exe.mdmp 16325836412032312

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER36e0.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#80.210.122':139
'21#.#80.5.143':139
'21#.#80.41.113':139
'21#.#80.8.134':139
'21#.#80.109.51':139
'21#.#80.33.246':139
'21#.#80.133.20':139
'21#.#80.105.68':139
'21#.#80.1.56':139
'21#.#80.98.239':139
'21#.#80.126.220':139
'21#.#80.90.129':139
'21#.#80.176.112':139
'21#.#80.233.26':139
'21#.#80.34.225':139
'21#.#80.81.41':139
'21#.#80.150.132':139
'21#.#80.169.28':139
'21#.#80.103.12':139
'21#.#80.21.18':139
'21#.#80.216.243':139
'21#.#80.207.132':139
'21#.#80.103.12':445
'21#.#80.150.132':445
'21#.#80.216.243':445
'21#.#80.176.112':445
'21#.#80.21.18':445
'21#.#80.109.51':445
'21#.#80.41.113':445
'21#.#80.8.134':445
'21#.#80.169.28':445
'21#.#80.126.220':445
'21#.#80.90.129':445
'21#.#80.125.241':139
'21#.#80.64.21':139
'21#.#80.118.127':139
'21#.#80.28.235':139
'21#.#80.40.1':139
'21#.#80.81.41':445
'21#.#80.233.26':445
'21#.#80.34.225':445
'21#.#80.138.212':139
'21#.#80.225.85':445
'21#.#80.55.246':139
'21#.#80.138.108':139
'21#.#80.246.40':139
'21#.#80.61.155':139
'21#.#80.41.62':139
'21#.#80.38.254':139
'21#.#80.50.100':445
'21#.#80.32.14':139
'21#.#80.119.179':139
'21#.#80.134.95':139
'21#.#80.102.236':139
'21#.#80.61.89':139
'21#.#80.15.186':139
'21#.#80.99.153':139
'21#.#80.74.237':139
'21#.#80.245.51':139
'21#.#80.96.242':139
'21#.#80.40.223':139
'21#.#80.222.100':139
'21#.#80.188.223':139
'21#.#80.172.103':139
'21#.#80.82.243':445
'21#.#80.55.246':445
'21#.#80.138.108':445
'21#.#80.246.40':445
'21#.#80.61.155':445
'21#.#80.41.62':445
'21#.#80.38.254':445
'21#.#80.225.85':139
'21#.#80.32.14':445
'21#.#80.119.179':445
'21#.#80.134.95':445
'21#.#80.102.236':445
'21#.#80.61.89':445
'21#.#80.15.186':445
'21#.#80.99.153':445
'21#.#80.74.237':445
'21#.#80.245.51':445
'21#.#80.96.242':445
'21#.#80.40.223':445
'21#.#80.222.100':445
'21#.#80.188.223':445
'21#.#80.172.103':445
'21#.#80.210.122':445
'21#.#80.56.206':139
'21#.#80.22.169':139
'21#.#80.120.52':445
'21#.#80.170.205':445
'21#.#80.54.171':445
'21#.#80.111.232':139
'21#.#80.31.9':139
'21#.#80.95.227':139
'21#.#80.56.144':139
'21#.#80.114.211':139
'21#.#80.68.197':445
'21#.#80.230.241':445
'21#.#80.163.197':445
'21#.#80.10.90':445
'21#.#80.147.129':445
'21#.#80.31.106':445
'21#.#80.13.70':445
'21#.#80.30.136':445
'21#.#80.4.39':445
'21#.#80.197.163':445
'21#.#80.66.50':445
'21#.#80.40.220':139
'21#.#80.131.28':139
'21#.#80.59.20':139
'21#.#80.95.168':139
'21#.#80.21.9':139
'21#.#80.17.243':139
'21#.#80.112.113':139
'21#.#80.224.112':139
'21#.#80.113.63':139
'21#.#80.184.55':139
'21#.#80.66.169':139
'21#.#80.166.246':139
'21#.#80.41.114':139
'21#.#80.200.43':139
'21#.#80.140.179':139
'21#.#80.14.165':139
'21#.#80.209.27':139
'21#.#80.124.33':139
'21#.#80.92.154':139
'21#.#80.9.185':139
'21#.#80.95.118':139
'21#.#80.107.17':139
'21#.#80.58.109':139
'21#.#80.9.222':139
'21#.#80.48.154':139
'21#.#80.64.21':445
'21#.#80.138.212':445
'21#.#80.17.82':139
'21#.#80.175.224':139
'21#.#80.27.31':139
'21#.#80.213.9':139
'21#.#80.48.226':139
'21#.#80.125.241':445
'21#.#80.105.68':445
'21#.#80.33.246':445
'21#.#80.98.239':445
'21#.#80.5.143':445
'21#.#80.1.56':445
'21#.#80.40.1':445
'21#.#80.118.127':445
'21#.#80.28.235':445
'21#.#80.133.20':445
'21#.#80.207.132':445
'21#.#80.147.129':139
'21#.#80.58.109':445
'21#.#80.9.222':445
'21#.#80.48.154':445
'21#.#80.54.171':139
'21#.#80.120.52':139
'21#.#80.17.82':445
'21#.#80.175.224':445
'21#.#80.27.31':445
'21#.#80.213.9':445
'21#.#80.48.226':445
'21#.#80.170.205':139
'21#.#80.163.197':139
'21#.#80.197.163':139
'21#.#80.230.241':139
'21#.#80.31.106':139
'21#.#80.10.90':139
'21#.#80.30.136':139
'21#.#80.68.197':139
'21#.#80.13.70':139
'21#.#80.66.50':139
'21#.#80.4.39':139
'21#.#80.41.211':445
'21#.#80.105.169':445
'21#.#80.24.20':445
'21#.#80.48.97':445
'21#.#80.95.140':445
'21#.#80.70.74':445
'21#.#80.31.99':445
'21#.#80.116.119':445
'21#.#80.175.172':445
'21#.#80.246.52':445
'21#.#80.51.8':445
'21#.#80.11.56':139
'21#.#80.5.175':139
'21#.#80.123.146':139
'21#.#80.164.176':139
'21#.#80.30.107':139
'21#.#80.60.147':445
'21#.#80.62.34':445
'21#.#80.168.95':139
'21#.#80.231.196':139
'21#.#80.23.226':139
'21#.#80.180.146':445
'21#.#80.144.2':445
'21#.#80.249.193':445
'21#.#80.3.75':445
'21#.#80.215.76':445
'21#.#80.75.215':445
'21#.#80.155.165':445
'21#.#80.16.21':445
'21#.#80.176.169':445
'21#.#80.157.175':445
'21#.#80.124.160':445
'21#.#80.76.196':445
'21#.#80.210.218':445
'21#.#80.171.81':445
'21#.#80.120.150':445
'21#.#80.59.41':445
'21#.#80.150.84':445
'21#.#80.22.182':445
'21#.#80.134.240':445
'21#.#80.21.6':445
'21#.#80.210.149':445
'21#.#80.186.172':445
'21#.#80.59.41':139
'21#.#80.150.84':139
'21#.#80.180.146':139
'21#.#80.70.74':139
'21#.#80.31.99':139
'21#.#80.210.149':139
'21#.#80.186.172':139
'21#.#80.171.81':139
'21#.#80.120.150':139
'21#.#80.210.218':139
'21#.#80.116.119':139
'21#.#80.62.34':139
'21#.#80.24.20':139
'21#.#80.51.8':139
'21#.#80.95.140':139
'21#.#80.41.211':139
'21#.#80.175.172':139
'21#.#80.246.52':139
'21#.#80.105.169':139
'21#.#80.60.147':139
'21#.#80.48.97':139
'21#.#80.21.6':139
'21#.#80.218.100':139
'21#.#80.76.218':139
'21#.#80.227.40':139
'21#.#80.155.165':139
'21#.#80.16.21':139
'21#.#80.235.203':139
'21#.#80.178.65':139
'21#.#80.203.185':139
'21#.#80.54.131':139
'21#.#80.97.85':139
'21#.#80.176.169':139
'21#.#80.215.76':139
'21#.#80.75.215':139
'21#.#80.76.196':139
'21#.#80.22.182':139
'21#.#80.134.240':139
'21#.#80.157.175':139
'21#.#80.124.160':139
'21#.#80.249.193':139
'21#.#80.3.75':139
'21#.#80.144.2':139
'21#.#80.227.40':445
'21#.#80.47.79':445
'21#.#80.212.161':445
'21#.#80.223.109':445
'21#.#80.99.189':139
'21#.#80.191.140':445
'21#.#80.183.118':445
'21#.#80.12.62':445
'21#.#80.34.24':445
'21#.#80.208.245':445
'21#.#80.184.2':445
'21#.#80.180.84':139
'21#.#80.39.83':139
'21#.#80.90.238':139
'21#.#80.130.146':139
'21#.#80.31.251':139
'21#.#80.141.252':139
'21#.#80.34.65':139
'21#.#80.211.64':139
'21#.#80.64.121':139
'21#.#80.222.8':139
'21#.#80.118.4':139
'21#.#80.6.89':445
'21#.#80.64.121':445
'21#.#80.34.65':445
'21#.#80.118.4':445
'21#.#80.90.238':445
'21#.#80.222.8':445
'21#.#80.50.100':139
'21#.#80.82.243':139
'21#.#80.99.189':445
'21#.#80.211.64':445
'21#.#80.180.84':445
'21#.#80.39.83':445
'21#.#80.50.177':445
'21#.#80.178.139':445
'21#.#80.22.144':445
'21#.#80.73.146':445
'21#.#80.142.79':445
'21#.#80.141.252':445
'21#.#80.130.146':445
'21#.#80.31.251':445
'21#.#80.208.21':445
'21#.#80.200.243':445
'21#.#80.168.95':445
'21#.#80.62.34':9988
'21#.#80.23.226':445
'21#.#80.5.175':445
'21#.#80.231.196':445
'21#.#80.120.150':9988
'21#.#80.210.218':9988
'21#.#80.31.99':9988
'21#.#80.41.211':9988
'21#.#80.175.172':9988
'21#.#80.11.56':445
'21#.#80.97.85':445
'21#.#80.203.185':445
'21#.#80.54.131':445
'21#.#80.218.100':445
'21#.#80.76.218':445
'21#.#80.30.107':445
'21#.#80.123.146':445
'21#.#80.164.176':445
'21#.#80.235.203':445
'21#.#80.178.65':445
'21#.#80.210.149':9988
'21#.#80.73.146':139
'21#.#80.142.79':139
'21#.#80.6.89':139
'21#.#80.183.118':139
'21#.#80.12.62':139
'21#.#80.208.21':139
'21#.#80.200.243':139
'21#.#80.178.139':139
'21#.#80.22.144':139
'21#.#80.50.177':139
'21#.#80.34.24':139
'21#.#80.134.240':9988
'21#.#80.191.140':139
'21#.#80.21.6':9988
'21#.#80.171.81':9988
'21#.#80.186.172':9988
'21#.#80.208.245':139
'21#.#80.184.2':139
'21#.#80.212.161':139
'21#.#80.223.109':139
'21#.#80.47.79':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней