Trojan.Starman.5798

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1bde.dir00\svchost.exe.mdmp 16325836412029016

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1bde.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#8.254.141':139
'21#.#8.203.43':139
'21#.#8.15.211':139
'21#.#8.120.130':139
'21#.#8.97.121':139
'21#.#8.140.88':139
'21#.#8.114.201':139
'21#.#8.2.137':139
'21#.#8.202.96':139
'21#.#8.150.245':139
'21#.#8.96.85':139
'21#.#8.94.145':139
'21#.#8.156.14':139
'21#.#8.106.145':139
'21#.#8.114.37':139
'21#.#8.109.161':139
'21#.#8.54.91':139
'21#.78.3.87':139
'21#.#8.130.3':139
'21#.#8.87.16':139
'21#.#8.74.42':139
'21#.#8.72.14':139
'21#.#8.114.204':139
'21#.#8.71.124':445
'21#.#8.223.36':445
'21#.#8.31.10':445
'21#.#8.89.208':445
'21#.#8.166.141':445
'21#.#8.119.69':445
'21#.#8.31.60':445
'21#.#8.55.13':445
'21#.#8.55.23':445
'21#.#8.234.58':445
'21#.#8.171.70':445
'21#.#8.29.23':139
'21#.#8.162.120':139
'21#.#8.246.26':139
'21#.#8.171.24':139
'21#.#8.76.130':139
'21#.#8.93.142':139
'21#.#8.93.48':139
'21#.#8.158.8':445
'21#.#8.47.249':139
'21#.#8.151.241':139
'21#.#8.106.14':139
'21#.#8.168.179':445
'21#.#8.180.247':445
'21#.#8.43.98':445
'21#.#8.31.136':445
'21#.#8.186.210':445
'21#.#8.32.95':445
'21#.#8.100.68':445
'21#.#8.109.114':445
'21#.#8.20.165':445
'21#.#8.141.32':445
'21#.#8.164.115':445
'21#.#8.68.37':445
'21#.#8.202.118':445
'21#.#8.214.21':445
'21#.#8.182.202':445
'21#.#8.106.210':445
'21#.#8.176.5':445
'21#.#8.114.185':445
'21#.78.93.7':445
'21#.#8.186.187':445
'21#.#8.213.175':445
'21#.#8.85.180':445
'21#.#8.132.109':445
'21#.#8.31.60':139
'21#.#8.55.13':139
'21#.#8.55.23':139
'21#.#8.234.58':139
'21#.#8.171.70':139
'21#.#8.181.226':139
'21#.#8.33.140':139
'21#.#8.182.45':139
'21#.#8.161.214':139
'21#.#8.81.141':139
'21#.#8.245.238':139
'21#.#8.92.125':445
'21#.#8.158.8':139
'21#.#8.48.40':445
'21#.#8.26.192':445
'21#.#8.126.140':445
'21#.#8.89.208':139
'21#.#8.223.36':139
'21#.#8.119.69':139
'21#.#8.71.124':139
'21#.#8.166.141':139
'21#.#8.31.10':139
'21#.#8.185.125':139
'21#.#8.110.48':139
'21#.#8.179.134':139
'21#.#8.55.30':139
'21#.#8.96.39':139
'21#.#8.91.107':139
'21#.#8.70.129':139
'21#.#8.246.38':139
'21#.#8.161.20':139
'21#.#8.99.114':139
'21#.#8.40.28':139
'21#.#8.51.151':139
'21#.#8.61.182':139
'21#.#8.79.128':139
'21#.#8.166.127':139
'21#.#8.167.166':139
'21#.#8.157.30':139
'21#.#8.189.96':139
'21#.#8.184.189':139
'21#.#8.172.74':139
'21#.#8.223.38':139
'21#.#8.104.140':139
'21#.#8.101.123':139
'21#.#8.114.224':139
'21#.#8.214.139':139
'21#.#8.225.35':139
'21#.#8.28.209':139
'21#.#8.134.75':139
'21#.#8.103.77':139
'21#.#8.28.26':139
'21#.#8.39.181':139
'21#.#8.154.96':139
'21#.#8.46.28':139
'21#.#8.80.198':139
'21#.#8.86.225':139
'21#.#8.100.49':139
'21#.#8.100.175':139
'21#.#8.81.107':139
'21#.#8.176.3':139
'21#.#8.57.186':139
'21#.#8.76.209':139
'21#.#8.205.73':139
'21#.#8.118.60':139
'21#.#8.160.224':139
'21#.#8.204.144':139
'21#.#8.87.16':445
'21#.78.3.87':445
'21#.#8.72.14':445
'21#.#8.54.91':445
'21#.#8.74.42':445
'21#.#8.130.3':445
'21#.#8.254.141':445
'21#.#8.203.43':445
'21#.#8.15.211':445
'21#.#8.120.130':445
'21#.#8.97.121':445
'21#.#8.161.214':445
'21#.#8.33.140':445
'21#.#8.245.238':445
'21#.#8.181.226':445
'21#.#8.81.141':445
'21#.#8.182.45':445
'21#.#8.94.145':445
'21#.#8.156.14':445
'21#.#8.106.145':445
'21#.#8.114.37':445
'21#.#8.109.161':445
'21#.#8.140.88':445
'21#.#8.47.249':445
'21#.#8.93.48':445
'21#.#8.106.14':445
'21#.#8.93.142':445
'21#.#8.151.241':445
'21#.#8.19.193':139
'21#.#8.90.226':139
'21#.#8.218.38':139
'21#.#8.24.187':139
'21#.#8.236.96':139
'21#.#8.254.22':139
'21#.#8.114.201':445
'21#.#8.2.137':445
'21#.#8.202.96':445
'21#.#8.150.245':445
'21#.#8.96.85':445
'21#.#8.114.204':445
'21#.#8.29.23':445
'21#.#8.162.120':445
'21#.#8.246.26':445
'21#.#8.171.24':445
'21#.#8.76.130':445
'21#.#8.155.161':445
'21#.#8.18.142':445
'21#.#8.162.0':445
'21#.#8.109.12':445
'21#.#8.16.40':445
'21#.#8.174.35':445
'21#.#8.234.36':445
'21#.#8.131.66':445
'21#.#8.122.188':445
'21#.#8.65.68':445
'21#.#8.109.82':445
'21#.#8.96.80':139
'21#.#8.233.5':139
'21#.#8.12.27':139
'21#.#8.86.31':139
'21#.#8.143.76':139
'21#.#8.103.233':139
'21#.#8.148.41':445
'21#.#8.187.149':445
'21#.#8.19.222':445
'21#.78.2.57':445
'21#.#8.155.109':445
'21#.#8.49.234':445
'21#.#8.208.225':445
'21#.#8.48.21':445
'21#.#8.109.11':445
'21#.#8.202.1':445
'21#.#8.153.48':445
'21#.#8.138.229':445
'21#.#8.172.238':445
'21#.#8.184.207':445
'21#.#8.159.22':445
'21#.#8.177.5':445
'21#.#8.54.46':445
'21#.#8.41.196':445
'21#.#8.164.217':445
'21#.#8.11.45':445
'21#.#8.133.139':445
'21#.#8.225.209':445
'21#.#8.239.7':445
'21#.#8.121.212':445
'21#.#8.130.22':445
'21#.#8.240.121':445
'21#.#8.52.63':445
'21#.#8.44.177':445
'21#.#8.131.66':139
'21#.#8.234.36':139
'21#.#8.122.188':139
'21#.#8.65.68':139
'21#.#8.109.82':139
'21#.#8.49.234':139
'21#.#8.41.196':139
'21#.#8.164.217':139
'21#.#8.11.45':139
'21#.#8.133.139':139
'21#.#8.225.209':139
'21#.78.2.57':139
'21#.#8.155.109':139
'21#.#8.187.149':139
'21#.#8.148.41':139
'21#.#8.109.12':139
'21#.#8.19.222':139
'21#.#8.174.35':139
'21#.#8.18.142':139
'21#.#8.155.161':139
'21#.#8.16.40':139
'21#.#8.162.0':139
'21#.#8.239.7':139
'21#.#8.172.238':139
'21#.#8.184.207':139
'21#.#8.159.22':139
'21#.#8.138.229':139
'21#.#8.54.46':139
'21#.#8.53.108':139
'21#.#8.148.66':139
'21#.#8.20.104':139
'21#.#8.71.159':139
'21#.#8.216.50':139
'21#.#8.28.115':139
'21#.#8.240.121':139
'21#.#8.130.22':139
'21#.#8.121.212':139
'21#.#8.44.177':139
'21#.#8.52.63':139
'21#.#8.202.1':139
'21#.#8.48.21':139
'21#.#8.177.5':139
'21#.#8.208.225':139
'21#.#8.153.48':139
'21#.#8.109.11':139
'21#.#8.100.68':139
'21#.#8.109.114':139
'21#.#8.20.165':139
'21#.#8.141.32':139
'21#.#8.164.115':139
'21#.#8.132.109':139
'21#.#8.92.125':139
'21#.#8.107.126':445
'21#.#8.48.40':139
'21#.#8.26.192':139
'21#.#8.126.140':139
'21#.#8.114.185':139
'21#.78.93.7':139
'21#.#8.186.187':139
'21#.#8.213.175':139
'21#.#8.85.180':139
'21#.#8.31.136':139
'21#.#8.180.247':139
'21#.#8.32.95':139
'21#.#8.168.179':139
'21#.#8.186.210':139
'21#.#8.43.98':139
'21#.#8.228.219':445
'21#.#8.88.238':445
'21#.#8.249.88':445
'21#.#8.238.140':445
'21#.#8.36.157':445
'21#.#8.132.29':445
'21#.#8.158.249':445
'21#.#8.67.211':445
'21#.#8.40.221':445
'21#.#8.238.182':445
'21#.78.79.5':445
'21#.#8.86.172':445
'21#.78.71.4':445
'21#.#8.93.71':445
'21#.#8.3.175':445
'21#.#8.134.184':445
'21#.#8.92.101':445
'21#.#8.162.93':445
'21#.#8.72.76':445
'21#.#8.230.72':445
'21#.#8.56.181':445
'21#.#8.145.161':445
'21#.78.91.8':445
'21#.#8.143.76':9988
'21#.#8.107.126':139
'21#.#8.138.229':9988
'21#.#8.103.233':445
'21#.#8.109.11':9988
'21#.#8.228.219':139
'21#.78.71.4':139
'21#.#8.93.71':139
'21#.#8.3.175':139
'21#.#8.134.184':139
'21#.#8.92.101':139
'21#.#8.28.115':445
'21#.#8.148.66':445
'21#.#8.71.159':445
'21#.#8.53.108':445
'21#.#8.216.50':445
'21#.#8.86.31':445
'21#.#8.233.5':445
'21#.#8.96.80':445
'21#.#8.12.27':445
'21#.#8.20.104':445
'21#.#8.143.76':445
'21#.#8.162.93':139
'21#.#8.67.211':139
'21#.#8.40.221':139
'21#.#8.238.182':139
'21#.78.79.5':139
'21#.#8.86.172':139
'21#.#8.182.202':139
'21#.#8.202.118':139
'21#.#8.176.5':139
'21#.#8.68.37':139
'21#.#8.106.210':139
'21#.#8.214.21':139
'21#.#8.72.76':139
'21#.#8.230.72':139
'21#.#8.56.181':139
'21#.#8.145.161':139
'21#.78.91.8':139
'21#.#8.36.157':139
'21#.#8.249.88':139
'21#.#8.158.249':139
'21#.#8.88.238':139
'21#.#8.132.29':139
'21#.#8.238.140':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней