Trojan.Starman.5786

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER2e01.dir00\svchost.exe.mdmp 16325836412032276

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2e01.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#4.28.161':139
'19#.#4.11.76':139
'19#.#4.69.45':139
'19#.#4.10.132':139
'19#.#4.14.227':139
'19#.#4.52.120':139
'19#.#4.124.84':139
'19#.#4.42.193':139
'19#.#4.76.237':139
'19#.#4.36.68':139
'19#.#4.31.71':139
'19#.#4.214.182':139
'19#.#4.11.215':139
'19#.#4.39.218':139
'19#.#4.174.17':139
'19#.#4.87.40':139
'19#.#4.145.140':139
'19#.#4.91.183':139
'19#.#4.193.77':139
'19#.#4.31.98':139
'19#.#4.65.11':139
'19#.#4.36.125':139
'19#.#4.91.183':445
'19#.#4.31.71':445
'19#.#4.145.140':445
'19#.#4.65.11':445
'19#.#4.193.77':445
'19#.#4.28.161':445
'19#.#4.11.76':445
'19#.#4.69.45':445
'19#.#4.10.132':445
'19#.#4.14.227':445
'19#.#4.31.98':445
'19#.#4.255.1':139
'19#.#4.92.20':139
'19#.#4.2.164':139
'19#.64.8.62':139
'19#.#4.107.11':139
'19#.#4.214.182':445
'19#.#4.11.215':445
'19#.#4.39.218':445
'19#.#4.174.17':445
'19#.#4.87.40':445
'19#.#4.134.55':139
'19#.#4.91.16':139
'19#.#4.32.240':139
'19#.#4.169.182':139
'19#.#4.7.220':139
'19#.#4.34.58':445
'19#.#4.240.104':445
'19#.#4.5.169':139
'19#.#4.45.46':139
'19#.#4.123.86':139
'19#.#4.182.182':139
'19#.#4.247.53':139
'19#.#4.11.61':139
'19#.#4.53.241':139
'19#.#4.72.158':139
'19#.#4.241.72':139
'19#.#4.237.203':139
'19#.#4.182.238':139
'19#.#4.1.173':139
'19#.#4.232.111':139
'19#.#4.127.133':139
'19#.#4.72.240':445
'19#.#4.7.220':445
'19#.#4.32.240':445
'19#.#4.169.182':445
'19#.#4.182.238':445
'19#.#4.182.182':445
'19#.#4.123.86':445
'19#.#4.5.169':445
'19#.#4.45.46':445
'19#.#4.134.55':445
'19#.#4.91.16':445
'19#.#4.237.203':445
'19#.#4.241.72':445
'19#.#4.53.241':445
'19#.#4.72.158':445
'19#.#4.22.73':445
'19#.#4.64.217':445
'19#.#4.127.133':445
'19#.#4.1.173':445
'19#.#4.232.111':445
'19#.#4.247.53':445
'19#.#4.11.61':445
'19#.#4.42.147':445
'19#.#4.93.164':445
'19#.#4.18.60':445
'19#.#4.93.194':445
'19#.#4.43.97':445
'19#.#4.217.142':139
'19#.#4.142.71':139
'19#.#4.142.44':139
'19#.#4.82.156':139
'19#.#4.119.242':139
'19#.#4.213.131':445
'19#.#4.83.89':445
'19#.#4.41.189':445
'19#.#4.59.89':445
'19#.#4.31.29':445
'19#.#4.169.200':445
'19#.#4.31.39':445
'19#.64.15.7':445
'19#.#4.5.221':445
'19#.#4.183.214':445
'19#.#4.132.108':445
'19#.#4.196.27':139
'19#.#4.135.245':139
'19#.#4.165.208':139
'19#.#4.140.131':139
'19#.#4.125.187':139
'19#.#4.211.187':139
'19#.#4.241.50':139
'19#.#4.223.164':139
'19#.#4.29.33':139
'19#.#4.221.21':139
'19#.#4.124.194':139
'19#.#4.6.192':139
'19#.#4.30.183':139
'19#.#4.97.159':139
'19#.#4.107.217':139
'19#.#4.58.169':139
'19#.#4.222.108':139
'19#.#4.93.202':139
'19#.#4.114.219':139
'19#.#4.167.56':139
'19#.#4.232.62':139
'19#.#4.255.76':139
'19#.#4.186.151':139
'19#.#4.124.176':139
'19#.#4.85.254':139
'19#.#4.138.100':139
'19#.#4.30.39':139
'19#.#4.31.29':139
'19#.#4.169.200':139
'19#.#4.157.78':139
'19#.#4.60.254':139
'19#.64.79.2':139
'19#.#4.92.20':445
'19#.#4.52.120':445
'19#.#4.124.84':445
'19#.#4.42.193':445
'19#.#4.76.237':445
'19#.#4.36.68':445
'19#.#4.2.164':445
'19#.#4.255.1':445
'19#.#4.107.11':445
'19#.#4.36.125':445
'19#.64.8.62':445
'19#.#4.59.89':139
'19#.#4.30.39':445
'19#.#4.85.254':445
'19#.#4.138.100':445
'19#.#4.42.147':139
'19#.#4.93.164':139
'19#.64.79.2':445
'19#.#4.157.78':445
'19#.#4.60.254':445
'19#.#4.186.151':445
'19#.#4.124.176':445
'19#.#4.18.60':139
'19#.#4.132.108':139
'19#.#4.5.221':139
'19#.#4.183.214':139
'19#.#4.83.89':139
'19#.#4.41.189':139
'19#.#4.93.194':139
'19#.#4.43.97':139
'19#.#4.213.131':139
'19#.#4.31.39':139
'19#.64.15.7':139
'19#.#4.64.217':139
'19#.#4.234.237':445
'19#.#4.49.70':445
'19#.#4.237.173':445
'19#.#4.111.53':445
'19#.#4.154.30':445
'19#.#4.31.117':445
'19#.#4.20.127':445
'19#.#4.230.83':445
'19#.#4.80.57':445
'19#.#4.68.105':445
'19#.#4.30.200':445
'19#.#4.168.13':139
'19#.#4.14.64':139
'19#.#4.90.53':139
'19#.#4.176.194':139
'19#.#4.141.108':139
'19#.#4.113.102':445
'19#.#4.238.7':445
'19#.#4.161.115':139
'19#.#4.16.74':139
'19#.#4.79.60':139
'19#.#4.215.58':445
'19#.#4.69.42':445
'19#.#4.172.31':445
'19#.#4.242.70':445
'19#.#4.211.173':445
'19#.#4.131.232':445
'19#.#4.65.141':445
'19#.#4.58.158':445
'19#.#4.90.246':445
'19#.#4.99.99':445
'19#.#4.246.99':445
'19#.#4.126.167':445
'19#.#4.253.0':445
'19#.#4.108.124':445
'19#.#4.25.68':445
'19#.#4.6.101':445
'19#.#4.27.76':445
'19#.#4.66.246':445
'19#.#4.113.118':445
'19#.#4.246.34':445
'19#.#4.42.40':445
'19#.#4.35.78':445
'19#.#4.6.101':139
'19#.#4.27.76':139
'19#.#4.215.58':139
'19#.#4.31.117':139
'19#.#4.20.127':139
'19#.#4.42.40':139
'19#.#4.35.78':139
'19#.#4.108.124':139
'19#.#4.25.68':139
'19#.#4.253.0':139
'19#.#4.230.83':139
'19#.#4.113.102':139
'19#.#4.238.7':139
'19#.#4.30.200':139
'19#.#4.111.53':139
'19#.#4.154.30':139
'19#.#4.80.57':139
'19#.#4.68.105':139
'19#.#4.49.70':139
'19#.#4.237.173':139
'19#.#4.234.237':139
'19#.#4.246.34':139
'19#.#4.203.19':139
'19#.#4.23.103':139
'19#.#4.19.143':139
'19#.#4.65.141':139
'19#.#4.58.158':139
'19#.#4.233.26':139
'19#.#4.56.196':139
'19#.#4.110.253':139
'19#.#4.182.147':139
'19#.#4.53.184':139
'19#.#4.90.246':139
'19#.#4.211.173':139
'19#.#4.242.70':139
'19#.#4.126.167':139
'19#.#4.66.246':139
'19#.#4.113.118':139
'19#.#4.99.99':139
'19#.#4.246.99':139
'19#.#4.172.31':139
'19#.#4.131.232':139
'19#.#4.69.42':139
'19#.#4.159.219':445
'19#.#4.233.71':445
'19#.#4.253.104':445
'19#.#4.37.245':139
'19#.#4.66.155':445
'19#.#4.12.96':445
'19#.#4.35.12':445
'19#.#4.32.232':445
'19#.#4.80.159':445
'19#.#4.138.191':445
'19#.#4.251.79':139
'19#.#4.102.47':139
'19#.#4.43.180':139
'19#.#4.206.250':139
'19#.#4.153.2':139
'19#.#4.233.56':139
'19#.#4.52.173':139
'19#.#4.105.127':139
'19#.#4.173.118':139
'19#.#4.113.24':139
'19#.#4.113.223':139
'19#.#4.107.35':445
'19#.#4.105.127':445
'19#.#4.251.79':445
'19#.#4.52.173':445
'19#.#4.113.223':445
'19#.#4.173.118':445
'19#.#4.72.240':139
'19#.#4.22.73':139
'19#.#4.240.104':139
'19#.#4.37.245':445
'19#.#4.34.58':139
'19#.#4.113.24':445
'19#.#4.44.138':445
'19#.#4.161.131':445
'19#.#4.18.16':445
'19#.#4.97.58':445
'19#.#4.11.170':445
'19#.#4.102.47':445
'19#.#4.43.180':445
'19#.#4.206.250':445
'19#.#4.153.2':445
'19#.#4.233.56':445
'19#.#4.79.60':445
'19#.#4.161.115':445
'19#.#4.16.74':445
'19#.#4.168.13':445
'19#.#4.14.64':445
'19#.#4.49.70':9988
'19#.#4.80.57':9988
'19#.#4.238.7':9988
'19#.#4.113.102':9988
'19#.#4.111.53':9988
'19#.#4.90.53':445
'19#.#4.182.147':445
'19#.#4.53.184':445
'19#.#4.23.103':445
'19#.#4.19.143':445
'19#.#4.203.19':445
'19#.#4.176.194':445
'19#.#4.141.108':445
'19#.#4.56.196':445
'19#.#4.110.253':445
'19#.#4.233.26':445
'19#.#4.68.105':9988
'19#.#4.35.12':139
'19#.#4.107.35':139
'19#.#4.12.96':139
'19#.#4.138.191':139
'19#.#4.32.232':139
'19#.#4.44.138':139
'19#.#4.161.131':139
'19#.#4.18.16':139
'19#.#4.97.58':139
'19#.#4.11.170':139
'19#.#4.80.159':139
'19#.#4.25.68':9988
'19#.#4.246.34':9988
'19#.#4.27.76':9988
'19#.#4.230.83':9988
'19#.#4.20.127':9988
'19#.#4.159.219':139
'19#.#4.233.71':139
'19#.#4.253.104':139
'19#.#4.113.118':9988
'19#.#4.66.155':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней