Trojan.Starman.5893

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2060.dir00\svchost.exe.mdmp 16325836412032288

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2060.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#50.18.7':139
'21#.#50.42.236':139
'21#.#50.224.69':139
'21#.#50.252.225':139
'21#.#50.69.252':139
'21#.#50.134.11':139
'21#.#50.191.183':139
'21#.#50.28.162':139
'21#.#50.193.13':139
'21#.#50.254.246':139
'21#.#50.165.210':139
'21#.#50.7.95':445
'21#.#50.246.235':445
'21#.#50.29.170':445
'21#.#50.67.16':445
'21#.#50.107.243':445
'21#.#50.16.31':445
'21#.#50.73.214':445
'21#.#50.117.98':445
'21#.#50.188.106':445
'21#.#50.213.64':445
'21#.#50.191.183':445
'21#.#50.238.39':445
'21#.#50.134.11':445
'21#.#50.254.246':445
'21#.#50.28.162':445
'21#.#50.99.11':139
'21#.#50.31.224':139
'21#.#50.166.48':445
'21#.#50.40.213':445
'21#.#50.134.0':445
'21#.#50.193.13':445
'21#.#50.166.48':139
'21#.#50.165.210':445
'21#.#50.134.0':139
'21#.#50.238.39':139
'21#.#50.40.213':139
'21#.#50.18.7':445
'21#.#50.42.236':445
'21#.#50.224.69':445
'21#.#50.252.225':445
'21#.#50.69.252':445
'21#.#50.16.31':139
'21#.#50.73.214':139
'21#.#50.117.98':139
'21#.#50.188.106':139
'21#.#50.213.64':139
'21#.#50.13.195':445
'21#.#50.47.157':445
'21#.#50.10.222':445
'21#.#50.87.51':445
'21#.#50.136.5':445
'21#.#50.246.235':139
'21#.#50.139.192':139
'21#.#50.78.139':139
'21#.#50.126.199':139
'21#.#50.108.64':139
'21#.#50.161.79':139
'21#.#50.29.170':139
'21#.#50.7.95':139
'21#.#50.107.243':139
'21#.#50.10.22':139
'21#.#50.67.16':139
'21#.#50.64.239':445
'21#.#50.108.64':445
'21#.#50.239.164':445
'21#.#50.133.233':445
'21#.#50.56.252':445
'21#.#50.78.139':445
'21#.#50.10.22':445
'21#.#50.139.192':445
'21#.#50.161.79':445
'21#.#50.126.199':445
'21#.#50.6.180':445
'21#.#50.62.242':445
'21#.#50.83.0':445
'21#.#50.253.62':445
'21#.#50.212.99':445
'21#.#50.46.196':445
'21#.#50.90.170':445
'21#.#50.139.215':445
'21#.#50.169.130':445
'21#.#50.47.127':445
'21#.#50.155.139':445
'21#.#50.115.23':139
'21#.#50.234.160':445
'21#.#50.52.74':445
'21#.#50.84.215':445
'21#.#50.46.2':445
'21#.#50.53.131':445
'21#.#50.54.139':445
'21#.#50.219.51':445
'21#.#50.183.154':445
'21#.#50.162.166':445
'21#.#50.233.170':445
'21#.#50.50.117':445
'21#.#50.130.38':445
'21#.#50.80.34':445
'21#.#50.13.13':445
'21#.#50.113.91':445
'21#.#50.18.251':445
'21#.#50.39.130':445
'21#.#50.81.88':445
'21#.#50.45.254':445
'21#.#50.132.77':445
'21#.#50.177.171':445
'21#.#50.225.164':139
'21#.#50.239.140':139
'21#.#50.165.99':139
'21#.#50.207.7':139
'21#.#50.99.207':139
'21#.#50.105.230':139
'21#.#50.103.235':139
'21#.#50.34.98':139
'21#.#50.184.245':139
'21#.#50.94.12':139
'21#.#50.53.18':139
'21#.#50.112.118':445
'21#.#50.29.232':445
'21#.#50.122.72':445
'21#.#50.75.93':445
'21#.#50.180.123':445
'21#.#50.105.192':139
'21#.#50.125.155':139
'21#.#50.34.62':139
'21#.#50.167.105':445
'21#.#50.163.212':139
'21#.#50.39.130':139
'21#.#50.81.88':139
'21#.#50.45.254':139
'21#.#50.132.77':139
'21#.#50.177.171':139
'21#.#50.84.215':139
'21#.#50.234.160':139
'21#.#50.53.131':139
'21#.#50.50.117':139
'21#.#50.46.2':139
'21#.#50.80.34':139
'21#.#50.239.70':139
'21#.#50.7.204':139
'21#.#50.103.72':139
'21#.#50.229.130':139
'21#.#50.72.80':139
'21#.#50.13.13':139
'21#.#50.130.38':139
'21#.#50.18.251':139
'21#.#50.143.24':139
'21#.#50.113.91':139
'21#.#50.115.23':445
'21#.#50.229.130':445
'21#.#50.31.224':445
'21#.#50.167.105':139
'21#.#50.99.11':445
'21#.#50.7.204':445
'21#.#50.143.24':445
'21#.#50.239.70':445
'21#.#50.72.80':445
'21#.#50.103.72':445
'21#.#50.29.232':139
'21#.#50.183.154':139
'21#.#50.219.51':139
'21#.#50.233.170':139
'21#.#50.52.74':139
'21#.#50.162.166':139
'21#.#50.122.72':139
'21#.#50.112.118':139
'21#.#50.180.123':139
'21#.#50.54.139':139
'21#.#50.75.93':139
'21#.#50.64.239':139
'21#.#50.97.94':445
'21#.#50.168.189':445
'21#.#50.79.146':445
'21#.#50.131.30':445
'21#.#50.63.89':445
'21#.#50.184.63':445
'21#.#50.54.91':445
'21#.#50.62.145':445
'21#.#50.64.86':445
'21#.#50.236.134':445
'21#.#50.76.127':445
'21#.#50.8.159':139
'21#.#50.101.172':139
'21#.#50.70.158':139
'21#.#50.84.49':139
'21#.#50.215.236':139
'21#.#50.181.215':139
'21#.#50.134.167':445
'21#.#50.230.215':139
'21#.#50.228.220':139
'21#.#50.43.117':139
'21#.#50.136.200':445
'21#.#50.121.189':445
'21#.#50.190.44':445
'21#.#50.232.244':445
'21#.#50.86.142':445
'21#.#50.64.97':445
'21#.#50.132.40':445
'21#.#50.132.142':445
'21#.#50.179.177':445
'21#.#50.165.169':445
'21#.#50.78.47':445
'21#.#50.156.12':445
'21#.#50.167.156':445
'21#.#50.12.193':445
'21#.#50.101.114':445
'21#.#50.13.198':445
'21#.#50.39.49':445
'21#.#50.92.248':445
'21#.#50.171.214':445
'21#.#50.113.167':445
'21#.#50.214.113':445
'21#.#50.12.193':139
'21#.#50.156.12':139
'21#.#50.13.198':139
'21#.#50.54.91':139
'21#.#50.101.114':139
'21#.#50.171.214':139
'21#.#50.39.49':139
'21#.#50.214.113':139
'21#.#50.167.156':139
'21#.#50.113.167':139
'21#.#50.184.63':139
'21#.#50.63.89':139
'21#.#50.79.146':139
'21#.#50.131.30':139
'21#.#50.76.127':139
'21#.#50.134.167':139
'21#.#50.236.134':139
'21#.#50.62.145':139
'21#.#50.64.86':139
'21#.#50.97.94':139
'21#.#50.168.189':139
'21#.#50.170.8':139
'21#.#50.128.211':139
'21#.#50.2.35':139
'21#.#50.132.40':139
'21#.#50.68.24':139
'21#.#50.53.211':139
'21#.#50.156.53':139
'21#.#50.20.43':139
'21#.#50.128.195':139
'21#.#50.128.72':139
'21#.#50.64.97':139
'21#.#50.86.142':139
'21#.#50.190.44':139
'21#.#50.232.244':139
'21#.#50.92.248':139
'21#.#50.78.47':139
'21#.#50.165.169':139
'21#.#50.132.142':139
'21#.#50.179.177':139
'21#.#50.121.189':139
'21#.#50.136.200':139
'21#.#50.68.24':445
'21#.#50.104.138':445
'21#.#50.44.186':445
'21#.#50.194.243':445
'21#.#50.200.141':445
'21#.#50.222.99':445
'21#.#50.210.54':445
'21#.#50.5.89':445
'21#.#50.24.68':445
'21#.#50.119.78':445
'21#.#50.203.245':445
'21#.#50.106.177':445
'21#.#50.24.68':139
'21#.#50.210.54':139
'21#.#50.203.245':139
'21#.#50.44.186':139
'21#.#50.119.78':139
'21#.#50.202.30':445
'21#.#50.126.41':445
'21#.#50.83.53':139
'21#.#50.5.89':139
'21#.#50.154.249':139
'21#.#50.169.130':139
'21#.#50.90.170':139
'21#.#50.155.139':139
'21#.#50.83.0':139
'21#.#50.47.127':139
'21#.#50.56.252':139
'21#.#50.239.164':139
'21#.#50.133.233':139
'21#.#50.139.215':139
'21#.#50.6.180':139
'21#.#50.62.242':139
'21#.#50.136.5':139
'21#.#50.10.222':139
'21#.#50.87.51':139
'21#.#50.154.249':445
'21#.#50.83.53':445
'21#.#50.46.196':139
'21#.#50.253.62':139
'21#.#50.212.99':139
'21#.#50.13.195':139
'21#.#50.47.157':139
'21#.#50.43.117':445
'21#.#50.230.215':445
'21#.#50.228.220':445
'21#.#50.8.159':445
'21#.#50.101.172':445
'21#.#50.131.30':9988
'21#.#50.63.89':9988
'21#.#50.76.127':9988
'21#.#50.181.215':445
'21#.#50.134.167':9988
'21#.#50.70.158':445
'21#.#50.128.195':445
'21#.#50.128.72':445
'21#.#50.128.211':445
'21#.#50.2.35':445
'21#.#50.170.8':445
'21#.#50.84.49':445
'21#.#50.215.236':445
'21#.#50.156.53':445
'21#.#50.20.43':445
'21#.#50.53.211':445
'21#.#50.202.30':139
'21#.#50.126.41':139
'21#.#50.165.169':9988
'21#.#50.121.189':9988
'21#.#50.179.177':9988
'21#.#50.194.243':139
'21#.#50.104.138':139
'21#.#50.222.99':139
'21#.#50.106.177':139
'21#.#50.200.141':139
'21#.#50.92.248':9988
'21#.#50.184.63':9988
'21#.#50.54.91':9988
'21#.#50.168.189':9988
'21#.#50.79.146':9988
'21#.#50.97.94':9988
'21#.#50.214.113':9988
'21#.#50.39.49':9988
'21#.#50.167.156':9988
'21#.#50.156.12':9988
'21#.#50.113.167':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней