Trojan.Starman.5424

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER486a.dir00\svchost.exe.mdmp 16325836412031180

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER486a.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#0.221.83':139
'21#.#0.173.173':139
'21#.30.38.2':139
'21#.#0.60.168':139
'21#.#0.21.42':139
'21#.#0.234.153':139
'21#.#0.212.105':139
'21#.#0.157.102':139
'21#.#0.131.119':139
'21#.#0.187.76':139
'21#.#0.14.197':139
'21#.#0.81.186':139
'21#.#0.130.92':139
'21#.#0.232.64':445
'21#.#0.30.138':445
'21#.#0.250.16':445
'21#.#0.32.22':139
'21#.#0.192.87':139
'21#.#0.181.148':139
'21#.#0.197.13':139
'21#.#0.208.51':139
'21#.#0.21.42':445
'21#.30.38.2':445
'21#.#0.60.168':445
'21#.#0.192.87':445
'21#.#0.14.197':445
'21#.#0.187.76':445
'21#.#0.157.102':445
'21#.#0.131.119':445
'21#.#0.221.83':445
'21#.#0.173.173':445
'21#.#0.32.22':445
'21#.#0.195.71':139
'21#.#0.24.78':139
'21#.#0.71.89':139
'21#.#0.63.175':139
'21#.#0.89.64':139
'21#.#0.208.51':445
'21#.#0.181.148':445
'21#.#0.197.13':445
'21#.#0.81.186':445
'21#.#0.130.92':445
'21#.#0.56.189':445
'21#.#0.56.189':139
'21#.#0.30.138':139
'21#.#0.222.241':139
'21#.#0.44.78':139
'21#.#0.218.243':139
'21#.#0.121.70':445
'21#.#0.142.146':445
'21#.#0.144.97':445
'21#.#0.250.16':139
'21#.#0.232.64':139
'21#.#0.42.165':139
'21#.#0.90.238':139
'21#.#0.164.38':139
'21#.#0.125.64':139
'21#.#0.252.32':139
'21#.#0.93.242':139
'21#.#0.193.126':139
'21#.#0.165.55':139
'21#.#0.199.219':139
'21#.#0.247.49':139
'21#.#0.249.246':139
'21#.#0.199.219':445
'21#.#0.193.126':445
'21#.#0.249.246':445
'21#.#0.164.38':445
'21#.#0.247.49':445
'21#.#0.218.243':445
'21#.#0.222.241':445
'21#.#0.44.78':445
'21#.#0.165.55':445
'21#.#0.42.165':445
'21#.#0.90.238':445
'21#.#0.79.58':445
'21#.#0.193.122':445
'21#.#0.156.212':445
'21#.#0.163.81':445
'21#.#0.154.225':445
'21#.#0.93.242':445
'21#.#0.125.64':445
'21#.#0.252.32':445
'21#.#0.99.163':445
'21#.#0.201.42':445
'21#.#0.234.153':445
'21#.#0.157.87':445
'21#.#0.12.56':445
'21#.#0.43.132':445
'21#.#0.38.53':445
'21#.#0.254.218':445
'21#.#0.228.172':139
'21#.#0.183.46':139
'21#.#0.167.245':445
'21#.#0.199.89':445
'21#.#0.124.199':445
'21#.#0.67.67':445
'21#.#0.244.228':445
'21#.30.4.64':445
'21#.#0.237.221':445
'21#.#0.19.43':445
'21#.#0.115.231':445
'21#.#0.138.27':445
'21#.#0.77.166':445
'21#.#0.25.35':445
'21#.#0.40.46':445
'21#.#0.126.179':445
'21#.#0.62.33':139
'21#.#0.163.178':139
'21#.#0.61.245':139
'21#.#0.177.44':139
'21#.#0.245.160':139
'21#.#0.159.58':139
'21#.#0.226.3':139
'21#.#0.244.182':139
'21#.#0.251.166':139
'21#.#0.182.224':139
'21#.#0.125.214':139
'21#.#0.239.97':139
'21#.#0.143.238':139
'21#.#0.247.105':139
'21#.#0.78.65':139
'21#.#0.12.66':139
'21#.#0.87.254':139
'21#.#0.80.111':139
'21#.#0.85.140':139
'21#.#0.81.15':139
'21#.#0.140.105':139
'21#.#0.17.147':445
'21#.#0.17.147':139
'21#.#0.19.43':139
'21#.#0.233.39':139
'21#.#0.221.104':139
'21#.#0.168.219':139
'21#.30.4.64':139
'21#.#0.40.46':139
'21#.#0.244.228':139
'21#.#0.115.231':139
'21#.#0.237.221':139
'21#.#0.244.24':139
'21#.#0.71.89':445
'21#.#0.195.71':445
'21#.#0.89.64':445
'21#.#0.212.105':445
'21#.#0.63.175':445
'21#.#0.39.50':139
'21#.#0.24.126':139
'21#.#0.133.95':139
'21#.#0.24.78':445
'21#.#0.219.196':139
'21#.#0.133.95':445
'21#.#0.39.50':445
'21#.#0.219.196':445
'21#.#0.124.199':139
'21#.#0.167.245':139
'21#.#0.168.219':445
'21#.#0.233.39':445
'21#.#0.221.104':445
'21#.#0.24.126':445
'21#.#0.244.24':445
'21#.#0.199.89':139
'21#.#0.77.166':139
'21#.#0.67.67':139
'21#.#0.138.27':139
'21#.#0.126.179':139
'21#.#0.25.35':139
'21#.#0.157.87':139
'21#.#0.12.56':139
'21#.#0.43.132':139
'21#.#0.38.53':139
'21#.#0.254.218':139
'21#.#0.201.42':139
'21#.#0.247.63':445
'21#.#0.16.27':445
'21#.#0.142.132':445
'21#.#0.209.226':445
'21#.#0.132.209':445
'21#.#0.104.132':445
'21#.#0.60.148':445
'21#.#0.132.110':445
'21#.#0.155.127':445
'21#.#0.111.95':445
'21#.#0.226.76':445
'21#.#0.251.143':139
'21#.#0.36.228':139
'21#.#0.118.12':139
'21#.#0.114.129':139
'21#.#0.117.17':139
'21#.#0.31.23':445
'21#.#0.52.188':445
'21#.#0.66.216':139
'21#.#0.4.234':139
'21#.#0.133.24':139
'21#.#0.183.240':445
'21#.#0.185.122':445
'21#.#0.240.104':445
'21#.#0.153.182':445
'21#.#0.47.150':445
'21#.#0.12.226':445
'21#.#0.49.215':445
'21#.#0.75.104':445
'21#.#0.70.58':445
'21#.#0.185.141':445
'21#.#0.183.9':445
'21#.#0.83.144':445
'21#.#0.183.116':445
'21#.#0.67.22':445
'21#.#0.35.31':445
'21#.#0.109.97':445
'21#.#0.85.75':445
'21#.#0.144.250':445
'21#.#0.30.248':445
'21#.#0.181.116':445
'21#.#0.78.70':445
'21#.#0.170.220':139
'21#.#0.109.97':139
'21#.#0.67.22':139
'21#.#0.35.31':139
'21#.#0.104.132':139
'21#.#0.60.148':139
'21#.#0.78.70':139
'21#.#0.30.248':139
'21#.#0.181.116':139
'21#.#0.83.144':139
'21#.#0.183.116':139
'21#.#0.132.110':139
'21#.#0.209.226':139
'21#.#0.132.209':139
'21#.#0.226.76':139
'21#.#0.31.23':139
'21#.#0.52.188':139
'21#.#0.155.127':139
'21#.#0.111.95':139
'21#.#0.16.27':139
'21#.#0.142.132':139
'21#.#0.247.63':139
'21#.#0.211.195':139
'21#.#0.121.13':139
'21#.#0.79.184':139
'21#.#0.12.226':139
'21#.#0.49.215':139
'21#.#0.52.138':139
'21#.#0.220.92':139
'21#.#0.171.59':139
'21#.#0.86.111':139
'21#.#0.115.202':139
'21#.#0.75.104':139
'21#.#0.153.182':139
'21#.#0.47.150':139
'21#.#0.183.9':139
'21#.#0.85.75':139
'21#.#0.144.250':139
'21#.#0.70.58':139
'21#.#0.185.141':139
'21#.#0.185.122':139
'21#.#0.240.104':139
'21#.#0.183.240':139
'21#.#0.79.184':445
'21#.#0.59.156':445
'21#.#0.124.201':445
'21#.#0.178.98':445
'21#.#0.193.108':445
'21#.#0.107.214':445
'21#.#0.97.34':445
'21#.#0.170.247':445
'21#.#0.16.94':445
'21#.#0.41.50':445
'21#.#0.37.193':445
'21#.#0.88.133':445
'21#.#0.248.50':139
'21#.#0.8.249':139
'21#.#0.26.188':139
'21#.#0.85.113':139
'21#.#0.202.50':139
'21#.#0.55.69':139
'21#.30.22.4':139
'21#.#0.147.30':139
'21#.30.53.9':139
'21#.#0.113.53':139
'21#.#0.142.146':139
'21#.#0.163.81':139
'21#.#0.121.70':139
'21#.30.22.4':445
'21#.#0.144.97':139
'21#.#0.193.122':139
'21#.#0.99.163':139
'21#.#0.79.58':139
'21#.#0.154.225':139
'21#.#0.156.212':139
'21#.#0.55.69':445
'21#.#0.202.50':445
'21#.#0.26.188':445
'21#.#0.85.113':445
'21#.#0.61.195':445
'21#.#0.167.221':445
'21#.#0.113.53':445
'21#.#0.147.30':445
'21#.30.53.9':445
'21#.#0.248.50':445
'21#.#0.8.249':445
'21#.#0.167.221':139
'21#.#0.133.24':445
'21#.#0.66.216':445
'21#.#0.4.234':445
'21#.#0.251.143':445
'21#.#0.36.228':445
'21#.#0.247.63':9988
'21#.#0.132.110':9988
'21#.#0.142.132':9988
'21#.#0.52.188':9988
'21#.#0.132.209':9988
'21#.#0.118.12':445
'21#.#0.115.202':445
'21#.#0.171.59':445
'21#.#0.86.111':445
'21#.#0.211.195':445
'21#.#0.121.13':445
'21#.#0.114.129':445
'21#.#0.117.17':445
'21#.#0.170.220':445
'21#.#0.52.138':445
'21#.#0.220.92':445
'21#.#0.124.201':139
'21#.#0.41.50':139
'21#.#0.59.156':139
'21#.#0.107.214':139
'21#.#0.178.98':139
'21#.#0.170.247':139
'21#.#0.61.195':139
'21#.#0.97.34':139
'21#.#0.37.193':139
'21#.#0.16.94':139
'21#.#0.193.108':139
'21#.#0.78.70':9988
'21#.#0.85.75':9988
'21#.#0.30.248':9988
'21#.#0.83.144':9988
'21#.#0.183.116':9988
'21#.#0.70.58':9988
'21#.#0.88.133':139
'21#.#0.153.182':9988
'21#.#0.144.250':9988
'21#.#0.183.9':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней