Trojan.Starman.5783

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER3554.dir00\svchost.exe.mdmp 16325836412032044

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3554.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#6.197.173':139
'21#.#6.98.246':139
'21#.#6.173.186':139
'21#.#6.11.92':139
'21#.#6.97.191':139
'21#.#6.19.120':139
'21#.#6.143.148':139
'21#.#6.219.242':139
'21#.86.33.1':139
'21#.#6.178.157':139
'21#.#6.152.231':139
'21#.#6.78.112':139
'21#.#6.199.42':139
'21#.#6.112.56':139
'21#.#6.39.89':139
'21#.#6.90.139':139
'21#.#6.36.172':139
'21#.#6.189.25':139
'21#.#6.219.221':139
'21#.#6.83.137':139
'21#.#6.13.14':139
'21#.#6.230.142':139
'21#.#6.189.25':445
'21#.#6.152.231':445
'21#.#6.36.172':445
'21#.#6.13.14':445
'21#.#6.219.221':445
'21#.#6.197.173':445
'21#.#6.98.246':445
'21#.#6.173.186':445
'21#.#6.11.92':445
'21#.#6.97.191':445
'21#.#6.83.137':445
'21#.#6.131.142':139
'21#.#6.127.9':139
'21#.#6.142.31':139
'21#.#6.194.47':139
'21#.#6.229.182':139
'21#.#6.78.112':445
'21#.#6.199.42':445
'21#.#6.112.56':445
'21#.#6.39.89':445
'21#.#6.90.139':445
'21#.#6.190.56':139
'21#.#6.91.219':139
'21#.#6.237.182':139
'21#.#6.80.176':139
'21#.#6.47.138':139
'21#.#6.230.123':445
'21#.#6.53.133':445
'21#.#6.183.60':139
'21#.#6.215.137':139
'21#.#6.55.140':139
'21#.#6.176.166':139
'21#.#6.51.92':139
'21#.#6.35.189':139
'21#.#6.91.237':139
'21#.#6.46.44':139
'21#.#6.237.128':139
'21#.#6.61.223':139
'21#.#6.166.163':139
'21#.#6.14.127':139
'21#.#6.59.69':139
'21#.#6.216.59':139
'21#.#6.196.250':445
'21#.#6.47.138':445
'21#.#6.237.182':445
'21#.#6.80.176':445
'21#.#6.166.163':445
'21#.#6.176.166':445
'21#.#6.55.140':445
'21#.#6.183.60':445
'21#.#6.215.137':445
'21#.#6.190.56':445
'21#.#6.91.219':445
'21#.#6.61.223':445
'21#.#6.237.128':445
'21#.#6.91.237':445
'21#.#6.46.44':445
'21#.#6.250.213':445
'21#.#6.170.96':445
'21#.#6.216.59':445
'21#.#6.14.127':445
'21#.#6.59.69':445
'21#.#6.51.92':445
'21#.#6.35.189':445
'21#.#6.212.250':445
'21#.#6.235.125':445
'21#.#6.220.202':445
'21#.#6.94.97':445
'21#.#6.31.120':445
'21#.#6.47.253':139
'21#.#6.27.181':139
'21#.#6.39.247':139
'21#.#6.125.64':139
'21#.#6.58.80':139
'21#.#6.109.218':445
'21#.#6.129.41':445
'21#.#6.243.129':445
'21#.#6.41.78':445
'21#.#6.116.91':445
'21#.#6.144.116':445
'21#.#6.147.107':445
'21#.#6.11.110':445
'21#.#6.181.171':445
'21#.#6.71.72':445
'21#.#6.210.28':445
'21#.#6.151.163':139
'21#.#6.242.94':139
'21#.#6.177.253':139
'21#.#6.225.177':139
'21#.#6.20.241':139
'21#.#6.85.234':139
'21#.#6.168.233':139
'21#.#6.99.106':139
'21#.#6.40.43':139
'21#.#6.97.116':139
'21#.#6.162.72':139
'21#.#6.11.199':139
'21#.#6.251.107':139
'21#.#6.80.92':139
'21#.86.21.7':139
'21#.#6.161.151':139
'21#.#6.230.161':139
'21#.#6.20.67':139
'21#.#6.105.125':139
'21#.#6.206.1':139
'21#.#6.16.152':139
'21#.#6.185.16':139
'21#.#6.41.33':139
'21#.#6.161.109':139
'21#.#6.132.13':139
'21#.#6.55.76':139
'21#.#6.224.196':139
'21#.#6.116.91':139
'21#.#6.144.116':139
'21#.#6.211.141':139
'21#.#6.86.161':139
'21#.#6.130.215':139
'21#.#6.127.9':445
'21#.#6.19.120':445
'21#.#6.143.148':445
'21#.#6.219.242':445
'21#.86.33.1':445
'21#.#6.178.157':445
'21#.#6.142.31':445
'21#.#6.131.142':445
'21#.#6.229.182':445
'21#.#6.230.142':445
'21#.#6.194.47':445
'21#.#6.41.78':139
'21#.#6.224.196':445
'21#.#6.132.13':445
'21#.#6.55.76':445
'21#.#6.212.250':139
'21#.#6.235.125':139
'21#.#6.130.215':445
'21#.#6.211.141':445
'21#.#6.86.161':445
'21#.#6.41.33':445
'21#.#6.161.109':445
'21#.#6.220.202':139
'21#.#6.210.28':139
'21#.#6.181.171':139
'21#.#6.71.72':139
'21#.#6.129.41':139
'21#.#6.243.129':139
'21#.#6.94.97':139
'21#.#6.31.120':139
'21#.#6.109.218':139
'21#.#6.147.107':139
'21#.#6.11.110':139
'21#.#6.170.96':139
'21#.#6.160.23':445
'21#.#6.24.219':445
'21#.#6.79.242':445
'21#.#6.60.247':445
'21#.#6.167.201':445
'21#.#6.176.211':445
'21#.#6.107.136':445
'21#.#6.41.181':445
'21#.#6.133.0':445
'21#.#6.46.35':445
'21#.#6.242.68':445
'21#.#6.216.150':139
'21#.#6.59.191':139
'21#.#6.113.194':139
'21#.#6.34.94':139
'21#.#6.194.75':139
'21#.#6.226.128':445
'21#.#6.215.231':445
'21#.#6.61.227':139
'21#.#6.47.78':139
'21#.#6.227.11':139
'21#.#6.51.249':445
'21#.#6.109.118':445
'21#.#6.199.243':445
'21#.#6.101.155':445
'21#.86.0.83':445
'21#.86.91.1':445
'21#.#6.217.16':445
'21#.#6.216.113':445
'21#.#6.173.208':445
'21#.#6.134.154':445
'21#.#6.185.71':445
'21#.#6.82.230':445
'21#.#6.106.106':445
'21#.#6.111.32':445
'21#.86.5.85':445
'21#.#6.75.93':445
'21#.#6.249.79':445
'21#.#6.117.252':445
'21#.#6.252.249':445
'21#.#6.8.136':445
'21#.86.1.99':445
'21#.#6.108.248':445
'21#.#6.75.93':139
'21#.#6.249.79':139
'21#.#6.51.249':139
'21#.#6.176.211':139
'21#.#6.107.136':139
'21#.86.1.99':139
'21#.#6.108.248':139
'21#.#6.111.32':139
'21#.86.5.85':139
'21#.#6.106.106':139
'21#.#6.41.181':139
'21#.#6.215.231':139
'21#.#6.167.201':139
'21#.#6.226.128':139
'21#.#6.60.247':139
'21#.#6.242.68':139
'21#.#6.133.0':139
'21#.#6.46.35':139
'21#.#6.24.219':139
'21#.#6.79.242':139
'21#.#6.160.23':139
'21#.#6.8.136':139
'21#.#6.102.250':139
'21#.#6.179.252':139
'21#.#6.89.119':139
'21#.#6.217.16':139
'21#.#6.216.113':139
'21#.#6.97.126':139
'21#.#6.40.62':139
'21#.#6.8.219':139
'21#.#6.65.97':139
'21#.#6.185.103':139
'21#.#6.173.208':139
'21#.86.0.83':139
'21#.86.91.1':139
'21#.#6.82.230':139
'21#.#6.117.252':139
'21#.#6.252.249':139
'21#.#6.134.154':139
'21#.#6.185.71':139
'21#.#6.199.243':139
'21#.#6.101.155':139
'21#.#6.109.118':139
'21#.#6.136.25':445
'21#.#6.61.133':445
'21#.#6.117.32':445
'21#.#6.124.17':139
'21#.#6.161.165':445
'21#.86.26.1':445
'21#.86.84.2':445
'21#.#6.255.142':445
'21#.#6.154.136':445
'21#.#6.4.205':445
'21#.86.4.31':139
'21#.#6.139.28':139
'21#.#6.252.93':139
'21#.#6.181.190':139
'21#.#6.137.46':139
'21#.#6.94.126':139
'21#.#6.168.151':139
'21#.#6.25.22':139
'21#.#6.38.187':139
'21#.#6.77.252':139
'21#.#6.152.184':139
'21#.#6.143.74':445
'21#.#6.25.22':445
'21#.86.4.31':445
'21#.#6.168.151':445
'21#.#6.152.184':445
'21#.#6.38.187':445
'21#.#6.196.250':139
'21#.#6.250.213':139
'21#.#6.53.133':139
'21#.#6.124.17':445
'21#.#6.230.123':139
'21#.#6.77.252':445
'21#.#6.128.79':445
'21#.#6.117.87':445
'21#.86.7.12':445
'21#.#6.197.4':445
'21#.#6.57.15':445
'21#.#6.139.28':445
'21#.#6.252.93':445
'21#.#6.181.190':445
'21#.#6.137.46':445
'21#.#6.94.126':445
'21#.#6.227.11':445
'21#.#6.61.227':445
'21#.#6.47.78':445
'21#.#6.216.150':445
'21#.#6.59.191':445
'21#.#6.215.231':9988
'21#.#6.79.242':9988
'21#.#6.242.68':9988
'21#.#6.60.247':9988
'21#.#6.167.201':9988
'21#.#6.113.194':445
'21#.#6.65.97':445
'21#.#6.185.103':445
'21#.#6.179.252':445
'21#.#6.89.119':445
'21#.#6.102.250':445
'21#.#6.34.94':445
'21#.#6.194.75':445
'21#.#6.40.62':445
'21#.#6.8.219':445
'21#.#6.97.126':445
'21#.#6.160.23':9988
'21#.86.84.2':139
'21#.#6.143.74':139
'21#.86.26.1':139
'21#.#6.4.205':139
'21#.#6.255.142':139
'21#.#6.128.79':139
'21#.#6.117.87':139
'21#.86.7.12':139
'21#.#6.197.4':139
'21#.#6.57.15':139
'21#.#6.154.136':139
'21#.#6.51.249':9988
'21#.#6.111.32':9988
'21#.#6.107.136':9988
'21#.#6.133.0':9988
'21#.#6.24.219':9988
'21#.#6.136.25':139
'21#.#6.61.133':139
'21#.#6.117.32':139
'21#.#6.8.136':9988
'21#.#6.161.165':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней