Trojan.Starman.5165

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER1f3d.dir00\svchost.exe.mdmp 16325836412032160

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1f3d.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'14#.#9.141.222':139
'14#.#9.107.177':139
'14#.#9.242.252':139
'14#.#9.24.100':139
'14#.#9.64.24':139
'14#.#9.83.136':139
'14#.#9.226.223':139
'14#.#9.197.150':139
'14#.#9.82.34':139
'14#.#9.141.83':139
'14#.#9.33.89':139
'14#.#9.209.15':139
'14#.#9.28.209':139
'14#.#9.208.187':139
'14#.#9.244.179':139
'14#.#9.244.243':139
'14#.#9.222.26':139
'14#.#9.161.185':139
'14#.#9.100.161':139
'14#.#9.120.182':139
'14#.#9.200.53':139
'14#.#9.112.186':139
'14#.#9.116.215':139
'14#.#9.55.166':445
'14#.#9.217.7':445
'14#.#9.121.4':445
'14#.#9.27.183':445
'14#.#9.208.49':445
'14#.#9.90.46':445
'14#.#9.204.78':445
'14#.#9.161.187':445
'14#.#9.201.88':445
'14#.#9.80.251':445
'14#.#9.245.51':445
'14#.#9.197.139':139
'14#.#9.127.220':139
'14#.#9.79.36':139
'14#.#9.170.116':139
'14#.#9.126.225':139
'14#.#9.92.128':139
'14#.19.42.6':139
'14#.#9.63.118':139
'14#.#9.226.94':139
'14#.#9.171.25':139
'14#.#9.97.74':139
'14#.#9.180.98':139
'14#.#9.245.13':445
'14#.#9.110.199':445
'14#.19.1.99':445
'14#.#9.238.188':445
'14#.#9.87.138':445
'14#.#9.139.41':445
'14#.#9.29.36':445
'14#.#9.155.27':445
'14#.#9.71.168':445
'14#.#9.112.102':445
'14#.#9.21.251':445
'14#.19.9.30':445
'14#.#9.43.145':445
'14#.#9.215.6':445
'14#.#9.72.242':445
'14#.#9.148.145':445
'14#.#9.32.195':445
'14#.#9.59.192':445
'14#.#9.158.208':445
'14#.#9.192.119':445
'14#.#9.216.86':445
'14#.#9.178.250':445
'14#.#9.237.154':445
'14#.#9.201.88':139
'14#.#9.204.78':139
'14#.#9.245.51':139
'14#.#9.90.46':139
'14#.#9.80.251':139
'14#.#9.161.187':139
'14#.#9.202.227':139
'14#.#9.89.229':139
'14#.#9.129.226':139
'14#.#9.190.38':139
'14#.#9.249.14':139
'14#.#9.195.10':445
'14#.#9.238.194':445
'14#.#9.10.45':445
'14#.#9.43.53':445
'14#.#9.212.246':445
'14#.#9.118.239':445
'14#.#9.55.166':139
'14#.#9.217.7':139
'14#.#9.121.4':139
'14#.#9.27.183':139
'14#.#9.208.49':139
'14#.#9.43.57':139
'14#.#9.214.42':139
'14#.#9.146.58':139
'14#.#9.206.56':139
'14#.#9.39.188':139
'14#.#9.3.200':139
'14#.#9.15.207':139
'14#.#9.145.163':139
'14#.#9.42.118':139
'14#.#9.59.237':139
'14#.#9.28.36':139
'14#.#9.88.67':139
'14#.#9.253.130':139
'14#.#9.191.188':139
'14#.#9.92.36':139
'14#.#9.3.225':139
'14#.#9.54.117':139
'14#.#9.198.123':139
'14#.#9.153.241':139
'14#.#9.97.111':139
'14#.#9.225.24':139
'14#.#9.11.225':139
'14#.#9.188.204':139
'14#.#9.24.121':139
'14#.#9.199.1':139
'14#.#9.115.224':139
'14#.#9.143.227':139
'14#.#9.224.143':139
'14#.#9.15.199':139
'14#.#9.45.115':139
'14#.#9.21.157':139
'14#.#9.116.249':139
'14#.#9.99.16':139
'14#.#9.249.99':139
'14#.#9.172.157':139
'14#.#9.139.147':139
'14#.#9.149.213':139
'14#.#9.70.225':139
'14#.#9.213.5':139
'14#.#9.211.190':139
'14#.#9.86.24':139
'14#.#9.227.185':139
'14#.#9.92.97':139
'14#.#9.22.137':139
'14#.19.35.7':139
'14#.#9.31.235':139
'14#.#9.120.182':445
'14#.#9.161.185':445
'14#.#9.112.186':445
'14#.#9.222.26':445
'14#.#9.200.53':445
'14#.#9.100.161':445
'14#.#9.141.222':445
'14#.#9.107.177':445
'14#.#9.242.252':445
'14#.#9.24.100':445
'14#.#9.64.24':445
'14#.#9.202.227':445
'14#.#9.89.229':445
'14#.#9.129.226':445
'14#.#9.190.38':445
'14#.#9.249.14':445
'14#.#9.180.98':445
'14#.#9.209.15':445
'14#.#9.28.209':445
'14#.#9.208.187':445
'14#.#9.244.179':445
'14#.#9.244.243':445
'14#.#9.83.136':445
'14#.#9.63.118':445
'14#.19.42.6':445
'14#.#9.97.74':445
'14#.#9.92.128':445
'14#.#9.171.25':445
'14#.#9.226.94':445
'14#.#9.84.184':139
'14#.#9.26.230':139
'14#.#9.208.181':139
'14#.#9.209.251':139
'14#.#9.77.197':139
'14#.#9.226.223':445
'14#.#9.197.150':445
'14#.#9.82.34':445
'14#.#9.141.83':445
'14#.#9.33.89':445
'14#.#9.170.116':445
'14#.#9.197.139':445
'14#.#9.127.220':445
'14#.#9.126.225':445
'14#.#9.79.36':445
'14#.#9.116.215':445
'14#.#9.242.61':445
'14#.#9.33.20':445
'14#.#9.202.233':445
'14#.#9.111.74':445
'14#.#9.83.160':445
'14#.#9.109.76':445
'14#.#9.21.195':445
'14#.#9.22.93':445
'14#.#9.216.151':445
'14#.#9.157.245':445
'14#.#9.172.84':445
'14#.#9.22.60':445
'14#.#9.156.245':139
'14#.#9.155.180':139
'14#.#9.217.133':139
'14#.#9.135.186':139
'14#.#9.247.152':139
'14#.#9.246.202':445
'14#.#9.159.160':445
'14#.#9.27.14':445
'14#.#9.194.15':445
'14#.#9.66.247':445
'14#.#9.156.167':445
'14#.#9.193.168':445
'14#.#9.64.109':445
'14#.#9.38.223':445
'14#.#9.126.216':445
'14#.#9.221.150':445
'14#.#9.63.233':445
'14#.#9.43.252':445
'14#.#9.181.21':445
'14#.#9.201.60':445
'14#.#9.174.163':445
'14#.#9.165.246':445
'14#.#9.164.23':445
'14#.#9.68.180':445
'14#.#9.149.23':445
'14#.#9.91.217':445
'14#.#9.89.77':445
'14#.#9.133.45':445
'14#.#9.225.73':445
'14#.#9.30.54':445
'14#.#9.151.106':445
'14#.#9.138.106':445
'14#.#9.32.152':445
'14#.#9.112.185':445
'14#.#9.186.8':139
'14#.#9.157.245':139
'14#.#9.22.93':139
'14#.#9.22.60':139
'14#.#9.21.195':139
'14#.#9.172.84':139
'14#.#9.216.151':139
'14#.#9.91.217':139
'14#.#9.68.180':139
'14#.#9.133.45':139
'14#.#9.193.168':139
'14#.#9.89.77':139
'14#.#9.194.15':139
'14#.#9.27.14':139
'14#.#9.83.160':139
'14#.#9.156.167':139
'14#.#9.111.74':139
'14#.#9.159.160':139
'14#.#9.33.20':139
'14#.#9.202.233':139
'14#.#9.109.76':139
'14#.#9.246.202':139
'14#.#9.66.247':139
'14#.#9.149.23':139
'14#.#9.174.163':139
'14#.#9.181.21':139
'14#.#9.164.23':139
'14#.#9.43.252':139
'14#.#9.165.246':139
'14#.#9.201.60':139
'14#.#9.46.35':139
'14#.#9.8.178':139
'14#.#9.183.187':139
'14#.#9.83.143':139
'14#.#9.225.1':139
'14#.#9.138.106':139
'14#.#9.30.54':139
'14#.#9.112.185':139
'14#.#9.225.73':139
'14#.#9.32.152':139
'14#.#9.151.106':139
'14#.#9.64.109':139
'14#.#9.38.223':139
'14#.#9.126.216':139
'14#.#9.221.150':139
'14#.#9.63.233':139
'14#.#9.71.168':139
'14#.#9.29.36':139
'14#.#9.21.251':139
'14#.#9.139.41':139
'14#.#9.112.102':139
'14#.#9.155.27':139
'14#.#9.10.45':139
'14#.#9.195.10':139
'14#.#9.212.246':139
'14#.#9.237.154':139
'14#.#9.43.53':139
'14#.#9.192.119':139
'14#.#9.59.192':139
'14#.#9.178.250':139
'14#.#9.32.195':139
'14#.#9.216.86':139
'14#.#9.158.208':139
'14#.#9.245.13':139
'14#.#9.110.199':139
'14#.19.1.99':139
'14#.#9.238.188':139
'14#.#9.87.138':139
'14#.#9.238.194':139
'14#.#9.17.98':445
'14#.#9.28.122':445
'14#.#9.36.232':445
'14#.#9.216.38':445
'14#.#9.126.35':445
'14#.#9.0.161':445
'14#.#9.125.174':445
'14#.#9.211.208':445
'14#.#9.112.164':445
'14#.#9.127.15':445
'14#.#9.7.120':445
'14#.#9.246.107':445
'14#.#9.214.194':445
'14#.#9.58.129':445
'14#.#9.118.239':139
'14#.#9.2.217':445
'14#.#9.135.214':445
'14#.#9.230.16':445
'14#.#9.30.33':445
'14#.#9.238.163':445
'14#.19.9.92':445
'14#.#9.104.59':445
'14#.#9.43.145':139
'14#.#9.66.247':9988
'14#.#9.27.14':9988
'14#.#9.246.202':9988
'14#.#9.133.45':9988
'14#.#9.109.76':9988
'14#.#9.89.77':9988
'14#.#9.58.129':139
'14#.#9.246.107':139
'14#.#9.2.217':139
'14#.#9.43.252':9988
'14#.#9.181.21':9988
'14#.#9.183.187':445
'14#.#9.8.178':445
'14#.#9.46.35':445
'14#.#9.83.143':445
'14#.#9.225.1':445
'14#.#9.186.8':445
'14#.#9.156.245':445
'14#.#9.155.180':445
'14#.#9.217.133':445
'14#.#9.135.186':445
'14#.#9.247.152':445
'14#.#9.214.194':139
'14#.#9.112.164':139
'14#.#9.125.174':139
'14#.#9.7.120':139
'14#.#9.0.161':139
'14#.#9.127.15':139
'14#.#9.211.208':139
'14#.#9.215.6':139
'14#.19.9.30':139
'14#.#9.148.145':139
'14#.#9.242.61':139
'14#.#9.72.242':139
'14#.#9.238.163':139
'14#.#9.230.16':139
'14#.#9.104.59':139
'14#.#9.135.214':139
'14#.19.9.92':139
'14#.#9.30.33':139
'14#.#9.17.98':139
'14#.#9.28.122':139
'14#.#9.36.232':139
'14#.#9.216.38':139
'14#.#9.126.35':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней