Trojan.Starman.5795

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER5410.dir00\svchost.exe.mdmp 16325836412032160

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5410.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#02.191.128':445
'21#.#02.44.58':445
'21#.#02.25.131':445
'21#.#02.78.2':445
'21#.#02.137.113':445
'21#.#02.139.41':445
'21#.#02.105.103':445
'21#.#02.61.84':445
'21#.#02.28.216':445
'21#.#02.13.216':139
'21#.#02.252.137':445
'21#.#02.0.43':139
'21#.#02.56.123':139
'21#.#02.67.14':445
'21#.#02.45.19':445
'21#.#02.33.37':445
'21#.#02.14.43':445
'21#.#02.86.8':445
'21#.#02.148.114':445
'21#.#02.192.148':445
'21#.#02.8.196':445
'21#.#02.247.59':445
'21#.#02.44.1':445
'21#.#02.162.223':445
'21#.#02.160.173':445
'21#.#02.44.149':445
'21#.#02.75.99':445
'21#.#02.118.190':445
'21#.#02.46.118':445
'21#.#02.26.156':445
'21#.#02.95.144':445
'21#.#02.16.74':445
'21#.#02.76.23':445
'21#.#02.109.146':445
'21#.#02.148.231':445
'21#.#02.75.99':139
'21#.#02.8.196':139
'21#.#02.16.74':139
'21#.#02.76.23':139
'21#.#02.192.148':139
'21#.#02.160.173':139
'21#.#02.247.59':139
'21#.#02.148.114':139
'21#.#02.148.231':139
'21#.#02.86.8':139
'21#.#02.26.156':139
'21#.#02.137.113':139
'21#.#02.139.41':139
'21#.#02.46.118':139
'21#.#02.109.146':139
'21#.#02.95.144':139
'21#.#02.118.190':139
'21#.#02.44.149':139
'21#.#02.169.208':139
'21#.#02.22.192':139
'21#.#02.40.161':139
'21#.#02.45.27':139
'21#.#02.12.181':139
'21#.#02.180.166':139
'21#.#02.179.237':139
'21#.#02.142.159':139
'21#.#02.128.38':139
'21#.#02.96.27':139
'21#.#02.61.127':139
'21#.#02.44.1':139
'21#.#02.162.223':139
'21#.#02.119.225':139
'21#.#02.38.120':139
'21#.#02.184.61':139
'21#.#02.225.184':139
'21#.#02.165.250':139
'21#.#02.137.16':139
'21#.#02.69.189':139
'21#.#02.19.45':139
'21#.#02.178.216':139
'21#.#02.140.219':139
'21#.#02.195.28':139
'21#.#02.76.100':139
'21#.#02.58.173':139
'21#.#02.8.175':139
'21#.#02.97.175':139
'21#.#02.218.114':139
'21#.#02.109.140':139
'21#.#02.62.72':139
'21#.#02.114.66':139
'21#.#02.150.252':139
'21#.#02.198.8':139
'21#.#02.156.204':139
'21#.#02.48.222':139
'21#.#02.23.71':139
'21#.#02.170.1':139
'21#.#02.27.243':139
'21#.#02.60.127':139
'21#.#02.50.127':139
'21#.#02.35.113':139
'21#.#02.114.191':139
'21#.#02.226.196':139
'21#.#02.173.144':139
'21#.#02.197.202':139
'21#.#02.156.205':139
'21#.#02.143.239':139
'21#.#02.38.79':139
'21#.#02.230.59':139
'21#.#02.157.138':139
'21#.#02.9.158':139
'21#.#02.179.237':445
'21#.#02.142.159':445
'21#.#02.169.208':445
'21#.#02.22.192':445
'21#.#02.0.43':445
'21#.#02.56.123':445
'21#.#02.12.181':445
'21#.#02.180.166':445
'21#.#02.45.27':445
'21#.#02.184.61':445
'21#.#02.225.184':445
'21#.#02.96.27':445
'21#.#02.61.127':445
'21#.#02.128.38':445
'21#.#02.40.161':445
'21#.#02.119.225':445
'21#.#02.38.120':445
'21#.#02.13.216':445
'21#.#02.31.192':139
'21#.#02.89.93':139
'21#.#02.175.205':139
'21#.#02.71.175':139
'21#.#02.7.35':139
'21#.#02.134.40':139
'21#.#02.44.219':139
'21#.#02.73.140':139
'21#.#02.205.143':139
'21#.#02.59.203':139
'21#.#02.26.249':139
'21#.#02.134.89':139
'21#.#02.134.89':445
'21#.#02.80.248':139
'21#.#02.145.6':139
'21#.#02.59.231':139
'21#.#02.70.131':139
'21#.#02.61.84':139
'21#.#02.14.196':139
'21#.#02.209.249':139
'21#.#02.205.21':139
'21#.#02.179.204':139
'21#.#02.235.213':139
'21#.#02.120.44':445
'21#.#02.176.8':139
'21#.#02.142.49':139
'21#.#02.43.234':139
'21#.#02.43.107':139
'21#.#02.129.150':139
'21#.#02.197.117':139
'21#.#02.180.35':139
'21#.#02.146.73':139
'21#.#02.61.146':139
'21#.#02.1.130':139
'21#.#02.73.2':139
'21#.#02.4.157':445
'21#.#02.168.61':445
'21#.#02.100.24':445
'21#.#02.221.73':445
'21#.#02.2.100':445
'21#.#02.175.47':445
'21#.#02.21.207':445
'21#.#02.21.33':445
'21#.#02.17.232':445
'21#.#02.221.165':445
'21#.#02.156.182':445
'21#.#02.212.216':445
'21#.#02.145.4':445
'21#.#02.216.120':445
'21#.#02.194.162':445
'21#.#02.166.140':445
'21#.#02.44.174':445
'21#.#02.7.116':445
'21#.#02.221.73':139
'21#.#02.2.100':139
'21#.#02.166.140':139
'21#.#02.221.165':139
'21#.#02.21.33':139
'21#.#02.17.232':139
'21#.#02.168.61':139
'21#.#02.100.24':139
'21#.#02.194.162':139
'21#.#02.44.174':139
'21#.#02.145.4':139
'21#.#02.4.157':139
'21#.#02.120.44':139
'21#.#02.212.216':139
'21#.#02.7.116':139
'21#.#02.156.182':139
'21#.#02.216.120':139
'21#.#02.175.47':139
'21#.#02.201.205':139
'21#.#02.111.202':139
'21#.#02.81.92':139
'21#.#02.252.107':139
'21#.#02.234.135':139
'21#.#02.170.195':139
'21#.#02.179.238':139
'21#.#02.150.49':139
'21#.#02.25.176':139
'21#.#02.36.7':139
'21#.#02.44.89':139
'21#.#02.21.207':139
'21#.#02.22.42':139
'21#.#02.84.73':139
'21#.#02.220.176':139
'21#.#02.158.100':139
'21#.#02.207.181':139
'21#.#02.158.100':9988
'21#.#02.207.181':9988
'21#.#02.36.7':9988
'21#.#02.44.89':9988
'21#.#02.25.176':9988
'21#.#02.252.107':9988
'21#.#02.84.73':9988
'21#.#02.220.176':9988
'21#.#02.21.207':9988
'21#.#02.221.165':9988
'21#.#02.221.73':9988
'21#.#02.7.116':9988
'21#.#02.166.140':9988
'21#.#02.100.24':9988
'21#.#02.216.120':9988
'21#.#02.168.61':9988
'21#.#02.2.100':9988
'21#.#02.170.195':9988
'21#.#02.28.216':139
'21#.#02.25.131':139
'21#.#02.67.14':139
'21#.#02.45.19':139
'21#.#02.44.58':139
'21#.#02.105.103':139
'21#.#02.78.2':139
'21#.#02.191.128':139
'21#.#02.14.43':139
'21#.#02.43.107':9988
'21#.#02.73.2':9988
'21#.#02.197.117':9988
'21#.#02.180.35':9988
'21#.#02.252.137':139
'21#.#02.33.37':139
'21#.#02.126.205':139
'21#.#02.126.205':445
'21#.#02.111.202':445
'21#.#02.179.238':445
'21#.#02.252.107':445
'21#.#02.201.205':445
'21#.#02.170.195':445
'21#.#02.197.117':445
'21#.#02.150.49':445
'21#.#02.234.135':445
'21#.#02.81.92':445
'21#.#02.44.89':445
'21#.#02.158.100':445
'21#.#02.22.42':445
'21#.#02.36.7':445
'21#.#02.220.176':445
'21#.#02.25.176':445
'21#.#02.207.181':445
'21#.#02.84.73':445
'21#.#02.180.35':445
'21#.#02.176.8':445
'21#.#02.142.49':445
'21#.#02.14.196':445
'21#.#02.209.249':445
'21#.#02.194.162':9988
'21#.#02.44.174':9988
'21#.#02.235.213':445
'21#.#02.145.4':9988
'21#.#02.179.204':445
'21#.#02.1.130':445
'21#.#02.73.2':445
'21#.#02.43.107':445
'21#.#02.129.150':445
'21#.#02.43.234':445
'21#.#02.205.21':445
'21#.#02.146.73':445
'21#.#02.61.146':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней