Trojan.Starman.5194

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER759e.dir00\svchost.exe.mdmp 16325836412032116

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER759e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#46.112.86':139
'19#.#46.99.232':139
'19#.#46.249.163':139
'19#.#46.14.221':139
'19#.#46.236.131':139
'19#.#46.147.102':139
'19#.#46.141.73':139
'19#.#46.102.43':139
'19#.#46.210.85':139
'19#.#46.157.99':139
'19#.#46.203.80':139
'19#.#46.193.41':445
'19#.#46.39.237':445
'19#.#46.28.112':445
'19#.#46.86.88':445
'19#.#46.79.86':445
'19#.#46.70.237':139
'19#.#46.7.120':139
'19#.#46.189.212':139
'19#.#46.169.39':139
'19#.#46.59.8':139
'19#.#46.112.86':445
'19#.#46.99.232':445
'19#.#46.249.163':445
'19#.#46.14.221':445
'19#.#46.236.131':445
'19#.#46.147.102':445
'19#.#46.141.73':445
'19#.#46.102.43':445
'19#.#46.210.85':445
'19#.#46.157.99':445
'19#.#46.203.80':445
'19#.#46.195.104':139
'19#.#46.31.195':139
'19#.#46.4.11':139
'19#.#46.235.252':139
'19#.#46.17.27':139
'19#.#46.70.237':445
'19#.#46.7.120':445
'19#.#46.189.212':445
'19#.#46.169.39':445
'19#.#46.59.8':445
'19#.#46.88.127':445
'19#.#46.79.86':139
'19#.#46.28.112':139
'19#.#46.86.88':139
'19#.#46.8.164':139
'19#.#46.88.127':139
'19#.#46.116.50':445
'19#.#46.252.54':445
'19#.#46.55.43':445
'19#.#46.193.41':139
'19#.#46.39.237':139
'19#.#46.16.157':139
'19#.#46.132.219':139
'19#.#46.35.88':139
'19#.#46.199.152':139
'19#.#46.47.203':139
'19#.#46.176.170':139
'19#.#46.170.28':139
'19#.#46.18.130':139
'19#.#46.128.49':139
'19#.#46.173.131':139
'19#.#46.65.201':139
'19#.#46.173.131':445
'19#.#46.65.201':445
'19#.#46.35.88':445
'19#.#46.199.152':445
'19#.#46.132.219':445
'19#.#46.16.157':445
'19#.#46.8.164':445
'19#.#46.18.130':445
'19#.#46.128.49':445
'19#.#46.170.28':445
'19#.#46.176.170':445
'19#.#46.130.128':445
'19#.#46.54.170':445
'19#.#46.128.146':445
'19#.#46.190.47':445
'19#.#46.8.43':445
'19#.#46.49.7':445
'19#.#46.47.203':445
'19#.#46.34.47':445
'19#.#46.212.244':445
'19#.#46.24.86':445
'19#.#46.235.252':445
'19#.#46.69.66':445
'19#.#46.73.79':445
'19#.#46.126.253':445
'19#.#46.49.31':445
'19#.#46.197.140':445
'19#.#46.51.198':445
'19#.#46.186.182':445
'19#.#46.71.208':445
'19#.#46.109.72':445
'19#.#46.47.230':445
'19#.#46.200.75':445
'19#.#46.3.205':445
'19#.#46.30.80':445
'19#.#46.1.156':445
'19#.#46.44.62':445
'19#.#46.163.165':445
'19#.#46.120.187':445
'19#.#46.75.38':445
'19#.#46.63.36':445
'19#.#46.145.45':445
'19#.#46.42.107':445
'19#.#46.89.38':139
'19#.#46.89.51':139
'19#.#46.65.154':139
'19#.#46.7.208':139
'19#.#46.64.50':139
'19#.#46.169.66':139
'19#.#46.35.114':139
'19#.#46.103.110':139
'19#.#46.73.191':139
'19#.#46.55.24':139
'19#.#46.104.225':139
'19#.#46.84.96':139
'19#.#46.130.83':139
'19#.#46.96.5':139
'19#.#46.164.209':139
'19#.#46.146.20':139
'19#.#46.46.81':139
'19#.#46.231.60':139
'19#.#46.124.57':139
'19#.#46.129.240':139
'19#.#46.99.233':139
'19#.#46.220.60':445
'19#.#46.163.165':139
'19#.#46.1.156':139
'19#.#46.44.62':139
'19#.#46.219.202':139
'19#.#46.220.60':139
'19#.#46.42.107':139
'19#.#46.63.36':139
'19#.#46.145.45':139
'19#.#46.3.205':139
'19#.#46.30.80':139
'19#.#46.90.240':139
'19#.#46.31.195':445
'19#.#46.99.237':139
'19#.#46.195.104':445
'19#.#46.17.27':445
'19#.#46.4.11':445
'19#.#46.84.206':139
'19#.#46.111.238':139
'19#.#46.201.65':139
'19#.#46.29.29':139
'19#.#46.253.204':139
'19#.#46.29.29':445
'19#.#46.253.204':445
'19#.#46.99.237':445
'19#.#46.51.198':139
'19#.#46.186.182':139
'19#.#46.90.240':445
'19#.#46.219.202':445
'19#.#46.111.238':445
'19#.#46.201.65':445
'19#.#46.84.206':445
'19#.#46.71.208':139
'19#.#46.49.31':139
'19#.#46.197.140':139
'19#.#46.200.75':139
'19#.#46.120.187':139
'19#.#46.75.38':139
'19#.#46.109.72':139
'19#.#46.47.230':139
'19#.#46.73.79':139
'19#.#46.126.253':139
'19#.#46.69.66':139
'19#.#46.16.252':445
'19#.#46.17.41':445
'19#.#46.145.169':445
'19#.#46.25.251':445
'19#.#46.219.153':445
'19#.#46.249.210':445
'19#.#46.4.164':445
'19#.#46.64.57':445
'19#.#46.52.175':445
'19#.#46.166.103':445
'19#.#46.212.153':445
'19#.#46.33.122':139
'19#.#46.226.224':139
'19#.#46.7.193':139
'19#.#46.109.64':139
'19#.#46.93.109':139
'19#.#46.164.29':445
'19#.#46.40.236':445
'19#.#46.169.75':139
'19#.#46.11.154':139
'19#.#46.29.165':139
'19#.#46.174.19':445
'19#.#46.240.174':445
'19#.#46.15.8':445
'19#.#46.53.240':445
'19#.#46.214.131':445
'19#.#46.155.245':445
'19#.#46.145.91':445
'19#.#46.35.49':445
'19#.#46.11.219':445
'19#.#46.225.69':445
'19#.#46.63.236':445
'19#.#46.202.9':445
'19#.#46.60.201':445
'19#.#46.10.61':445
'19#.#46.120.236':445
'19#.#46.149.184':445
'19#.#46.18.126':445
'19#.#46.99.101':445
'19#.#46.125.85':445
'19#.#46.173.60':445
'19#.#46.85.173':445
'19#.#46.59.139':139
'19#.#46.149.184':139
'19#.#46.10.61':139
'19#.#46.120.236':139
'19#.#46.249.210':139
'19#.#46.4.164':139
'19#.#46.85.173':139
'19#.#46.125.85':139
'19#.#46.173.60':139
'19#.#46.202.9':139
'19#.#46.60.201':139
'19#.#46.64.57':139
'19#.#46.219.153':139
'19#.#46.145.169':139
'19#.#46.164.29':139
'19#.#46.212.153':139
'19#.#46.40.236':139
'19#.#46.52.175':139
'19#.#46.166.103':139
'19#.#46.17.41':139
'19#.#46.25.251':139
'19#.#46.16.252':139
'19#.#46.64.153':139
'19#.#46.59.83':139
'19#.#46.19.238':139
'19#.#46.155.245':139
'19#.#46.145.91':139
'19#.#46.70.166':139
'19#.#46.144.156':139
'19#.#46.94.9':139
'19#.#46.70.173':139
'19#.#46.252.70':139
'19#.#46.35.49':139
'19#.#46.53.240':139
'19#.#46.214.131':139
'19#.#46.63.236':139
'19#.#46.18.126':139
'19#.#46.99.101':139
'19#.#46.11.219':139
'19#.#46.225.69':139
'19#.#46.240.174':139
'19#.#46.15.8':139
'19#.#46.174.19':139
'19#.#46.19.238':445
'19#.#46.50.154':445
'19#.#46.210.61':445
'19#.#46.57.207':445
'19#.#46.156.62':445
'19#.#46.15.145':445
'19#.#46.105.15':445
'19#.#46.8.59':445
'19#.#46.16.106':445
'19#.#46.79.63':445
'19#.#46.73.128':445
'19#.#46.57.214':445
'19#.#46.54.109':139
'19#.#46.171.56':139
'19#.#46.109.85':139
'19#.#46.61.110':139
'19#.#46.85.226':139
'19#.#46.63.241':139
'19#.#46.80.198':445
'19#.#46.121.120':139
'19#.#46.87.178':139
'19#.#46.2.183':139
'19#.#46.128.146':139
'19#.#46.130.128':139
'19#.#46.8.43':139
'19#.#46.252.54':139
'19#.#46.190.47':139
'19#.#46.34.47':139
'19#.#46.49.7':139
'19#.#46.24.86':139
'19#.#46.54.170':139
'19#.#46.212.244':139
'19#.#46.116.50':139
'19#.#46.54.109':445
'19#.#46.171.56':445
'19#.#46.109.85':445
'19#.#46.61.110':445
'19#.#46.85.226':445
'19#.#46.63.241':445
'19#.#46.55.43':139
'19#.#46.121.120':445
'19#.#46.87.178':445
'19#.#46.2.183':445
'19#.#46.8.59':139
'19#.#46.29.165':445
'19#.#46.169.75':445
'19#.#46.11.154':445
'19#.#46.33.122':445
'19#.#46.226.224':445
'19#.#46.52.175':9988
'19#.#46.64.57':9988
'19#.#46.166.103':9988
'19#.#46.17.41':9988
'19#.#46.219.153':9988
'19#.#46.7.193':445
'19#.#46.252.70':445
'19#.#46.94.9':445
'19#.#46.70.173':445
'19#.#46.64.153':445
'19#.#46.59.83':445
'19#.#46.109.64':445
'19#.#46.93.109':445
'19#.#46.59.139':445
'19#.#46.70.166':445
'19#.#46.144.156':445
'19#.#46.57.207':139
'19#.#46.50.154':139
'19#.#46.15.145':139
'19#.#46.57.214':139
'19#.#46.156.62':139
'19#.#46.16.106':139
'19#.#46.105.15':139
'19#.#46.73.128':139
'19#.#46.210.61':139
'19#.#46.79.63':139
'19#.#46.80.198':139
'19#.#46.60.201':9988
'19#.#46.202.9':9988
'19#.#46.10.61':9988
'19#.#46.249.210':9988
'19#.#46.120.236':9988
'19#.#46.99.101':9988
'19#.#46.15.8':9988
'19#.#46.125.85':9988
'19#.#46.173.60':9988
'19#.#46.85.173':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней