Trojan.Starman.5216

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER3b72.dir00\svchost.exe.mdmp 16325836412032216

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3b72.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#36.125.46':139
'21#.#36.62.34':139
'21#.#36.8.178':139
'21#.#36.45.169':139
'21#.#36.178.45':139
'21#.#36.85.9':139
'21#.#36.174.33':139
'21#.#36.136.230':139
'21#.#36.50.6':139
'21#.#36.80.177':139
'21#.#36.169.47':139
'21#.#36.168.62':445
'21#.#36.118.185':445
'21#.#36.32.45':445
'21#.#36.34.125':445
'21#.#36.93.102':445
'21#.#36.13.133':139
'21#.#36.122.72':139
'21#.#36.6.193':139
'21#.#36.86.72':445
'21#.#36.102.153':139
'21#.#36.50.6':445
'21#.#36.80.177':445
'21#.#36.62.34':445
'21#.#36.8.178':445
'21#.#36.125.46':445
'21#.#36.87.111':445
'21#.#36.166.230':445
'21#.#36.174.33':445
'21#.#36.136.230':445
'21#.#36.85.9':445
'21#.#36.178.45':445
'21#.#36.189.146':139
'21#.#36.102.153':445
'21#.#36.23.227':139
'21#.#36.87.111':139
'21#.#36.166.230':139
'21#.#36.169.47':445
'21#.#36.45.169':445
'21#.#36.122.72':445
'21#.#36.6.193':445
'21#.#36.13.133':445
'21#.#36.53.45':445
'21#.#36.168.62':139
'21#.#36.118.185':139
'21#.#36.32.45':139
'21#.#36.34.125':139
'21#.#36.93.102':139
'21#.#36.171.191':445
'21#.#36.190.117':445
'21#.#36.191.91':445
'21#.#36.86.72':139
'21#.#36.91.33':445
'21#.#36.53.45':139
'21#.#36.148.150':139
'21#.#36.50.127':139
'21#.#36.231.158':139
'21#.#36.196.30':139
'21#.#36.136.20':139
'21#.#36.253.133':139
'21#.#36.82.208':139
'21#.#36.33.66':139
'21#.#36.243.53':139
'21#.#36.142.170':139
'21#.#36.148.150':445
'21#.#36.50.127':445
'21#.#36.231.158':445
'21#.#36.196.30':445
'21#.#36.136.20':445
'21#.#36.253.133':445
'21#.#36.82.208':445
'21#.#36.33.66':445
'21#.#36.243.53':445
'21#.#36.142.170':445
'21#.#36.75.103':445
'21#.#36.24.82':445
'21#.#36.113.132':445
'21#.#36.55.36':445
'21#.#36.116.141':445
'21#.#36.92.39':445
'21#.#36.50.40':445
'21#.#36.97.132':445
'21#.#36.74.20':445
'21#.#36.209.119':445
'21#.#36.152.209':445
'21#.#36.14.16':445
'21#.#36.5.63':445
'21#.#36.96.226':445
'21#.#36.2.122':445
'21#.#36.227.1':445
'21#.#36.8.40':445
'21#.#36.214.247':445
'21#.#36.175.60':445
'21#.#36.118.35':445
'21#.#36.191.47':445
'21#.#36.28.107':445
'21#.#36.171.233':445
'21#.#36.122.174':445
'21#.#36.139.32':445
'21#.#36.12.162':445
'21#.#36.41.174':445
'21#.#36.100.59':445
'21#.#36.58.52':445
'21#.#36.228.113':445
'21#.#36.140.57':445
'21#.#36.241.139':445
'21#.#36.160.106':139
'21#.#36.222.9':139
'21#.#36.73.23':139
'21#.#36.60.135':139
'21#.#36.161.153':139
'21#.#36.123.198':139
'21#.#36.242.189':139
'21#.#36.91.225':139
'21#.#36.170.0':139
'21#.#36.222.145':139
'21#.#36.235.200':139
'21#.#36.63.87':139
'21#.#36.38.108':139
'21#.#36.130.7':139
'21#.#36.17.131':445
'21#.#36.174.203':445
'21#.#36.99.26':139
'21#.#36.11.199':139
'21#.#36.26.143':139
'21#.#36.218.248':139
'21#.#36.143.182':139
'21#.#36.196.199':445
'21#.#36.171.233':139
'21#.#36.122.174':139
'21#.#36.139.32':139
'21#.#36.12.162':139
'21#.#36.41.174':139
'21#.#36.100.59':139
'21#.#36.58.52':139
'21#.#36.228.113':139
'21#.#36.140.57':139
'21#.#36.241.139':139
'21#.#36.196.199':139
'21#.#36.236.207':139
'21#.#36.51.62':139
'21#.#36.57.223':139
'21#.#36.23.227':445
'21#.#36.189.146':445
'21#.#36.2.24':139
'21#.#36.98.136':139
'21#.#36.197.35':139
'21#.#36.102.51':139
'21#.#36.73.9':139
'21#.#36.236.207':445
'21#.#36.51.62':445
'21#.#36.57.223':445
'21#.#36.17.131':139
'21#.#36.174.203':139
'21#.#36.2.24':445
'21#.#36.98.136':445
'21#.#36.197.35':445
'21#.#36.102.51':445
'21#.#36.73.9':445
'21#.#36.214.247':139
'21#.#36.96.226':139
'21#.#36.14.16':139
'21#.#36.227.1':139
'21#.#36.28.107':139
'21#.#36.2.122':139
'21#.#36.175.60':139
'21#.#36.8.40':139
'21#.#36.191.47':139
'21#.#36.5.63':139
'21#.#36.118.35':139
'21#.#36.75.103':139
'21#.#36.64.194':445
'21#.#36.51.169':445
'21#.#36.36.90':445
'21#.#36.180.45':445
'21#.#36.232.104':445
'21#.#36.4.80':445
'21#.#36.152.73':445
'21#.#36.22.60':445
'21#.#36.205.187':445
'21#.#36.245.81':445
'21#.#36.13.208':445
'21#.#36.14.174':139
'21#.#36.16.13':139
'21#.#36.238.97':139
'21#.#36.36.221':139
'21#.#36.149.103':139
'21#.#36.78.247':445
'21#.#36.122.89':445
'21#.#36.193.135':139
'21#.#36.0.235':139
'21#.#36.103.250':139
'21#.#36.141.241':445
'21#.#36.182.142':445
'21#.#36.122.6':445
'21#.#36.48.11':445
'21#.#36.248.71':445
'21#.#36.130.181':445
'21#.#36.255.174':445
'21#.#36.50.37':445
'21#.#36.10.114':445
'21#.#36.248.118':445
'21#.#36.88.228':445
'21#.#36.22.79':445
'21#.#36.131.248':445
'21#.#36.218.223':445
'21#.#36.36.78':445
'21#.#36.164.106':445
'21#.#36.184.152':445
'21#.#36.45.184':445
'21#.#36.51.116':445
'21#.#36.90.55':445
'21#.#36.0.29':445
'21#.#36.94.72':139
'21#.#36.164.106':139
'21#.#36.218.223':139
'21#.#36.152.73':139
'21#.#36.4.80':139
'21#.#36.36.78':139
'21#.#36.0.29':139
'21#.#36.51.116':139
'21#.#36.90.55':139
'21#.#36.22.79':139
'21#.#36.131.248':139
'21#.#36.22.60':139
'21#.#36.78.247':139
'21#.#36.122.89':139
'21#.#36.36.90':139
'21#.#36.180.45':139
'21#.#36.13.208':139
'21#.#36.205.187':139
'21#.#36.245.81':139
'21#.#36.51.169':139
'21#.#36.232.104':139
'21#.#36.64.194':139
'21#.#36.63.239':139
'21#.#36.112.64':139
'21#.#36.111.95':139
'21#.#36.130.181':139
'21#.#36.255.174':139
'21#.#36.74.19':139
'21#.#36.83.6':139
'21#.#36.138.175':139
'21#.#36.11.192':139
'21#.#36.159.218':139
'21#.#36.50.37':139
'21#.#36.48.11':139
'21#.#36.248.71':139
'21#.#36.88.228':139
'21#.#36.184.152':139
'21#.#36.45.184':139
'21#.#36.10.114':139
'21#.#36.248.118':139
'21#.#36.182.142':139
'21#.#36.122.6':139
'21#.#36.141.241':139
'21#.#36.197.143':445
'21#.#36.95.120':445
'21#.#36.182.66':445
'21#.#36.99.64':445
'21#.#36.76.208':445
'21#.#36.140.226':445
'21#.#36.39.140':445
'21#.#36.227.0':445
'21#.#36.254.235':445
'21#.#36.176.137':445
'21#.#36.40.170':445
'21#.#36.6.106':139
'21#.#36.93.6':139
'21#.#36.105.40':139
'21#.#36.140.226':139
'21#.#36.39.140':139
'21#.#36.131.97':139
'21#.#36.65.191':445
'21#.#36.159.30':139
'21#.#36.64.93':139
'21#.#36.170.63':139
'21#.#36.24.82':139
'21#.#36.113.132':139
'21#.#36.55.36':139
'21#.#36.116.141':139
'21#.#36.92.39':139
'21#.#36.50.40':139
'21#.#36.97.132':139
'21#.#36.74.20':139
'21#.#36.209.119':139
'21#.#36.152.209':139
'21#.#36.190.117':139
'21#.#36.64.93':445
'21#.#36.170.63':445
'21#.#36.93.6':445
'21#.#36.105.40':445
'21#.#36.6.106':445
'21#.#36.191.91':139
'21#.#36.171.191':139
'21#.#36.91.33':139
'21#.#36.159.30':445
'21#.#36.131.97':445
'21#.#36.227.0':139
'21#.#36.0.235':445
'21#.#36.103.250':445
'21#.#36.16.13':445
'21#.#36.238.97':445
'21#.#36.14.174':445
'21#.#36.245.81':9988
'21#.#36.22.60':9988
'21#.#36.51.169':9988
'21#.#36.193.135':445
'21#.#36.122.89':9988
'21#.#36.149.103':445
'21#.#36.11.192':445
'21#.#36.159.218':445
'21#.#36.112.64':445
'21#.#36.111.95':445
'21#.#36.63.239':445
'21#.#36.94.72':445
'21#.#36.36.221':445
'21#.#36.83.6':445
'21#.#36.138.175':445
'21#.#36.74.19':445
'21#.#36.99.64':139
'21#.#36.76.208':139
'21#.#36.40.170':139
'21#.#36.111.95':9988
'21#.#36.65.191':139
'21#.#36.254.235':139
'21#.#36.176.137':139
'21#.#36.95.120':139
'21#.#36.182.66':139
'21#.#36.197.143':139
'21#.#36.255.174':9988
'21#.#36.88.228':9988
'21#.#36.45.184':9988
'21#.#36.184.152':9988
'21#.#36.131.248':9988
'21#.#36.90.55':9988
'21#.#36.50.37':9988
'21#.#36.130.181':9988
'21#.#36.248.118':9988
'21#.#36.48.11':9988
'21#.#36.122.6':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней