Trojan.Starman.5745

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc196.dir00\svchost.exe.mdmp 16325836412029164

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc196.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.22.9.39':445
'19#.#2.27.227':445
'19#.#2.138.20':445
'19#.#2.100.74':445
'19#.#2.151.226':445
'19#.#2.145.151':445
'19#.#2.210.100':445
'19#.22.5.37':445
'19#.#2.213.19':445
'19#.#2.80.171':445
'19#.#2.38.194':445
'19#.#2.5.154':445
'19#.#2.234.4':139
'19#.#2.170.108':139
'19#.#2.242.15':139
'19#.#2.76.178':139
'19#.#2.48.208':139
'19#.#2.100.130':139
'19#.#2.66.147':445
'19#.#2.163.192':445
'19#.#2.169.219':445
'19#.#2.54.142':139
'19#.#2.123.170':445
'19#.#2.226.51':445
'19#.#2.30.213':445
'19#.#2.230.62':445
'19#.#2.183.127':445
'19#.#2.42.206':445
'19#.#2.126.169':445
'19#.#2.68.127':445
'19#.#2.63.68':445
'19#.#2.227.81':445
'19#.#2.15.88':445
'19#.#2.45.25':445
'19#.#2.76.43':445
'19#.#2.83.27':445
'19#.#2.38.87':445
'19#.#2.104.161':445
'19#.#2.90.84':445
'19#.#2.223.38':445
'19#.#2.147.169':445
'19#.#2.186.205':445
'19#.#2.26.153':445
'19#.#2.233.77':445
'19#.#2.34.63':445
'19#.#2.169.20':445
'19#.#2.105.164':445
'19#.#2.118.73':445
'19#.#2.77.224':445
'19#.#2.45.25':139
'19#.#2.145.151':139
'19#.22.9.39':139
'19#.#2.27.227':139
'19#.#2.169.219':139
'19#.#2.100.74':139
'19#.#2.151.226':139
'19#.#2.5.154':139
'19#.#2.210.100':139
'19#.22.5.37':139
'19#.#2.138.20':139
'19#.#2.80.171':139
'19#.#2.38.194':139
'19#.#2.214.90':445
'19#.#2.249.213':139
'19#.#2.92.219':139
'19#.#2.104.35':445
'19#.#2.88.249':445
'19#.#2.88.189':445
'19#.#2.226.51':139
'19#.#2.66.147':139
'19#.#2.163.192':139
'19#.#2.249.213':445
'19#.#2.92.219':445
'19#.#2.123.170':139
'19#.#2.213.19':139
'19#.#2.63.68':139
'19#.#2.230.62':139
'19#.#2.183.127':139
'19#.#2.169.20':139
'19#.#2.126.169':139
'19#.#2.68.127':139
'19#.#2.38.87':139
'19#.#2.227.81':139
'19#.#2.15.88':139
'19#.#2.42.206':139
'19#.#2.76.43':139
'19#.#2.83.27':139
'19#.#2.26.153':139
'19#.#2.104.161':139
'19#.#2.90.84':139
'19#.#2.30.213':139
'19#.#2.147.169':139
'19#.#2.186.205':139
'19#.#2.77.224':139
'19#.#2.233.77':139
'19#.#2.34.63':139
'19#.#2.223.38':139
'19#.#2.105.164':139
'19#.#2.118.73':139
'19#.#2.76.178':445
'19#.#2.2.223':445
'19#.#2.118.140':445
'19#.#2.91.36':445
'19#.#2.78.86':445
'19#.#2.49.55':445
'19#.#2.10.231':445
'19#.#2.6.179':445
'19#.#2.58.120':445
'19#.#2.28.58':445
'19#.#2.120.46':445
'19#.#2.126.78':445
'19#.#2.58.148':445
'19#.#2.181.39':139
'19#.#2.181.180':139
'19#.#2.188.23':139
'19#.#2.78.120':139
'19#.#2.116.78':139
'19#.#2.40.116':139
'19#.#2.53.22':445
'19#.#2.94.53':445
'19#.#2.19.95':445
'19#.#2.130.20':139
'19#.#2.27.47':139
'19#.#2.240.63':139
'19#.#2.113.28':445
'19#.#2.73.229':445
'19#.#2.37.19':445
'19#.22.9.28':445
'19#.#2.244.61':445
'19#.#2.62.192':445
'19#.#2.47.98':445
'19#.#2.49.107':445
'19#.#2.166.237':445
'19#.#2.120.95':445
'19#.#2.133.52':445
'19#.#2.249.102':445
'19#.#2.74.106':445
'19#.#2.31.225':445
'19#.#2.108.32':445
'19#.#2.2.156':445
'19#.#2.189.48':445
'19#.#2.117.194':445
'19#.#2.80.101':445
'19#.#2.182.212':445
'19#.#2.88.72':445
'19#.#2.123.220':445
'19#.#2.231.22':445
'19#.#2.10.179':445
'19#.#2.192.153':445
'19#.#2.120.95':139
'19#.#2.10.231':139
'19#.#2.2.223':139
'19#.#2.118.140':139
'19#.#2.19.95':139
'19#.#2.78.86':139
'19#.#2.49.55':139
'19#.#2.58.148':139
'19#.#2.6.179':139
'19#.#2.58.120':139
'19#.#2.91.36':139
'19#.#2.120.46':139
'19#.#2.126.78':139
'19#.#2.170.108':445
'19#.#2.242.15':445
'19#.#2.54.142':445
'19#.#2.48.208':445
'19#.#2.100.130':445
'19#.#2.234.4':445
'19#.#2.147.173':445
'19#.#2.53.22':139
'19#.#2.94.53':139
'19#.#2.151.230':139
'19#.#2.147.173':139
'19#.#2.151.230':445
'19#.#2.28.58':139
'19#.#2.47.98':139
'19#.#2.73.229':139
'19#.#2.37.19':139
'19#.#2.123.220':139
'19#.#2.244.61':139
'19#.#2.62.192':139
'19#.#2.74.106':139
'19#.#2.49.107':139
'19#.#2.166.237':139
'19#.22.9.28':139
'19#.#2.133.52':139
'19#.#2.249.102':139
'19#.#2.80.101':139
'19#.#2.31.225':139
'19#.#2.108.32':139
'19#.#2.113.28':139
'19#.#2.189.48':139
'19#.#2.117.194':139
'19#.#2.192.153':139
'19#.#2.182.212':139
'19#.#2.88.72':139
'19#.#2.2.156':139
'19#.#2.231.22':139
'19#.#2.10.179':139
'19#.#2.232.208':445
'19#.#2.126.69':445
'19#.#2.106.126':445
'19#.#2.18.66':445
'19#.22.1.93':445
'19#.#2.230.40':445
'19#.#2.46.172':445
'19#.#2.164.216':445
'19#.#2.245.212':445
'19#.#2.82.232':445
'19#.#2.24.62':445
'19#.#2.17.225':445
'19#.#2.139.17':445
'19#.#2.5.219':445
'19#.#2.23.22':445
'19#.#2.255.95':445
'19#.22.67.1':139
'19#.#2.172.70':445
'19#.#2.19.137':445
'19#.#2.130.121':445
'19#.#2.171.97':445
'19#.#2.30.59':445
'19#.#2.49.229':445
'19#.#2.179.204':445
'19#.#2.0.239':445
'19#.#2.128.22':445
'19#.#2.160.60':445
'19#.#2.235.236':445
'19#.#2.60.235':445
'19#.#2.200.15':445
'19#.#2.101.236':445
'19#.#2.42.248':445
'19#.#2.61.80':445
'19#.#2.199.61':445
'19#.#2.93.237':445
'19#.#2.105.121':445
'19#.#2.84.236':445
'19#.#2.79.210':445
'19#.#2.30.187':445
'19#.#2.68.164':445
'19#.22.5.32':445
'19#.#2.86.54':445
'19#.#2.48.28':445
'19#.#2.49.12':445
'19#.#2.254.63':445
'19#.#2.155.19':445
'19#.#2.81.162':445
'19#.#2.183.162':445
'19#.#2.82.32':445
'19#.#2.63.58':445
'19#.#2.122.111':139
'19#.#2.106.126':139
'19#.#2.18.66':139
'19#.#2.24.62':139
'19#.#2.230.40':139
'19#.#2.46.172':139
'19#.#2.126.69':139
'19#.#2.245.212':139
'19#.#2.82.232':139
'19#.#2.128.22':139
'19#.#2.17.225':139
'19#.#2.139.17':139
'19#.#2.164.216':139
'19#.#2.19.137':139
'19#.#2.255.95':139
'19#.#2.5.219':139
'19#.#2.172.70':139
'19#.#2.49.229':139
'19#.#2.23.22':139
'19#.#2.130.121':139
'19#.#2.30.59':139
'19#.22.1.93':139
'19#.#2.0.239':139
'19#.#2.179.204':139
'19#.#2.171.97':139
'19#.#2.86.54':139
'19#.#2.235.236':139
'19#.#2.60.235':139
'19#.#2.105.121':139
'19#.#2.101.236':139
'19#.#2.42.248':139
'19#.#2.160.60':139
'19#.#2.199.61':139
'19#.#2.93.237':139
'19#.#2.225.76':139
'19#.#2.84.236':139
'19#.#2.79.210':139
'19#.#2.61.80':139
'19#.#2.68.164':139
'19#.22.5.32':139
'19#.#2.183.162':139
'19#.#2.48.28':139
'19#.#2.49.12':139
'19#.#2.30.187':139
'19#.#2.155.19':139
'19#.#2.81.162':139
'19#.#2.200.15':139
'19#.#2.82.32':139
'19#.#2.63.58':139
'19#.#2.254.63':139
'19#.#2.225.76':445
'19#.#2.138.173':445
'19#.#2.28.125':445
'19#.#2.51.125':445
'19#.#2.186.76':445
'19#.#2.81.219':445
'19#.#2.20.178':445
'19#.#2.149.94':445
'19#.#2.125.149':445
'19#.#2.20.73':445
'19#.#2.209.152':445
'19#.#2.115.43':445
'19#.#2.94.182':445
'19#.#2.88.189':139
'19#.#2.214.90':139
'19#.#2.63.127':445
'19#.#2.232.208':139
'19#.#2.104.35':139
'19#.#2.88.249':139
'19#.#2.108.89':445
'19#.#2.5.208':445
'19#.#2.76.22':445
'19#.#2.154.124':445
'19#.#2.253.146':445
'19#.#2.143.123':445
'19#.#2.218.94':445
'19#.#2.12.217':445
'19#.#2.3.104':445
'19#.#2.108.88':445
'19#.22.85.8':445
'19#.#2.144.96':445
'19#.#2.27.53':445
'19#.#2.147.63':445
'19#.#2.244.146':445
'19#.#2.53.110':445
'19#.#2.90.18':445
'19#.#2.206.155':445
'19#.#2.63.147':445
'19#.#2.21.110':445
'19#.#2.126.177':445
'19#.#2.232.18':445
'19#.#2.10.20':445
'19#.#2.17.164':445
'19#.#2.41.23':445
'19#.#2.210.108':445
'19#.#2.49.210':445
'19#.#2.34.166':445
'19#.#2.215.231':445
'19#.#2.84.216':445
'19#.#2.18.50':445
'19#.#2.53.110':139
'19#.#2.20.178':139
'19#.#2.138.173':139
'19#.#2.28.125':139
'19#.#2.76.22':139
'19#.#2.186.76':139
'19#.#2.81.219':139
'19#.#2.94.182':139
'19#.#2.149.94':139
'19#.#2.125.149':139
'19#.#2.51.125':139
'19#.#2.115.43':139
'19#.#2.209.152':139
'19#.#2.49.229':9988
'19#.#2.106.126':9988
'19#.#2.139.17':9988
'19#.#2.122.111':445
'19#.22.67.1':445
'19#.#2.19.137':9988
'19#.#2.143.123':139
'19#.#2.108.89':139
'19#.#2.5.208':139
'19#.#2.63.127':139
'19#.#2.154.124':139
'19#.#2.253.146':139
'19#.#2.20.73':139
'19#.#2.27.53':139
'19#.#2.12.217':139
'19#.#2.3.104':139
'19#.#2.34.166':139
'19#.22.85.8':139
'19#.#2.144.96':139
'19#.#2.63.147':139
'19#.#2.147.63':139
'19#.#2.244.146':139
'19#.#2.108.88':139
'19#.#2.90.18':139
'19#.#2.206.155':139
'19#.#2.41.23':139
'19#.#2.21.110':139
'19#.#2.126.177':139
'19#.#2.218.94':139
'19#.#2.10.20':139
'19#.#2.17.164':139
'19#.#2.18.50':139
'19#.#2.210.108':139
'19#.#2.49.210':139
'19#.#2.232.18':139
'19#.#2.215.231':139
'19#.#2.84.216':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней