Trojan.Starman.5911

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1f29.dir00\svchost.exe.mdmp 16325836412032088

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1f29.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#04.13.19':139
'21#.#04.88.133':139
'21#.#04.2.141':139
'21#.#04.245.157':139
'21#.#04.68.130':139
'21#.#04.244.43':139
'21#.#04.73.58':139
'21#.#04.209.39':139
'21#.#04.236.58':139
'21#.#04.30.189':139
'21#.#04.58.198':139
'21#.#04.215.85':139
'21#.#04.109.63':139
'21#.104.6.3':139
'21#.#04.127.147':139
'21#.#04.66.73':139
'21#.#04.85.80':139
'21#.#04.66.179':139
'21#.#04.238.162':139
'21#.#04.67.238':139
'21#.#04.208.205':139
'21#.#04.206.166':139
'21#.#04.229.190':139
'21#.#04.10.20':445
'21#.#04.56.18':445
'21#.#04.19.116':445
'21#.#04.99.4':139
'21#.#04.18.33':139
'21#.#04.137.56':445
'21#.#04.54.102':445
'21#.#04.243.168':445
'21#.#04.186.172':445
'21#.#04.186.188':445
'21#.#04.40.253':445
'21#.#04.173.24':139
'21#.#04.234.200':139
'21#.#04.116.141':139
'21#.#04.15.91':139
'21#.#04.177.121':139
'21#.#04.140.173':139
'21#.#04.38.117':139
'21#.#04.108.222':139
'21#.#04.24.109':139
'21#.#04.17.200':139
'21#.#04.186.76':139
'21#.#04.231.85':139
'21#.#04.2.134':445
'21#.#04.126.120':445
'21#.#04.59.193':445
'21#.#04.112.130':445
'21#.#04.99.143':445
'21#.#04.138.233':445
'21#.#04.76.195':445
'21#.#04.240.157':445
'21#.#04.254.218':445
'21#.#04.233.249':445
'21#.#04.97.90':445
'21#.#04.84.111':445
'21#.#04.116.177':445
'21#.#04.241.116':445
'21#.#04.177.164':445
'21#.#04.232.86':445
'21#.#04.164.123':445
'21#.#04.49.241':445
'21#.#04.102.161':445
'21#.#04.215.189':445
'21#.#04.22.41':445
'21#.#04.82.36':445
'21#.#04.98.229':445
'21#.#04.186.172':139
'21#.#04.54.102':139
'21#.#04.40.253':139
'21#.#04.137.56':139
'21#.#04.186.188':139
'21#.#04.243.168':139
'21#.#04.163.159':139
'21#.#04.41.22':139
'21#.#04.145.242':139
'21#.#04.151.109':139
'21#.#04.242.150':139
'21#.#04.56.18':139
'21#.#04.19.124':445
'21#.#04.43.163':445
'21#.#04.136.218':445
'21#.#04.239.239':445
'21#.#04.218.239':445
'21#.#04.244.188':445
'21#.#04.19.116':139
'21#.#04.10.20':139
'21#.#04.84.16':445
'21#.#04.155.57':445
'21#.#04.203.233':445
'21#.#04.151.109':445
'21#.#04.47.229':139
'21#.#04.121.221':139
'21#.#04.102.174':139
'21#.#04.45.200':139
'21#.#04.173.203':139
'21#.#04.35.218':139
'21#.#04.74.68':139
'21#.#04.141.235':139
'21#.#04.106.105':139
'21#.#04.246.35':139
'21#.#04.96.71':139
'21#.#04.16.205':139
'21#.#04.174.2':139
'21#.#04.178.203':139
'21#.#04.0.47':139
'21#.#04.204.101':139
'21#.#04.60.89':139
'21#.#04.111.157':139
'21#.#04.47.241':139
'21#.#04.205.162':139
'21#.#04.48.103':139
'21#.#04.90.88':139
'21#.#04.126.137':139
'21#.#04.161.230':139
'21#.#04.162.19':139
'21#.#04.240.213':139
'21#.#04.142.228':139
'21#.#04.191.186':139
'21#.#04.86.79':139
'21#.#04.36.109':139
'21#.#04.246.216':139
'21#.#04.54.178':139
'21#.#04.122.122':139
'21#.#04.2.154':139
'21#.#04.228.225':139
'21#.#04.112.29':139
'21#.#04.63.112':139
'21#.#04.90.45':139
'21#.#04.45.142':139
'21#.#04.179.45':139
'21#.#04.214.59':139
'21#.#04.153.166':139
'21#.#04.208.41':139
'21#.#04.19.235':139
'21#.#04.146.127':139
'21#.#04.84.198':139
'21#.#04.215.85':445
'21#.#04.245.157':445
'21#.#04.67.238':445
'21#.#04.208.205':445
'21#.#04.238.162':445
'21#.#04.68.130':445
'21#.#04.244.43':445
'21#.#04.30.189':445
'21#.#04.88.133':445
'21#.#04.2.141':445
'21#.#04.13.19':445
'21#.#04.229.190':445
'21#.#04.41.22':445
'21#.#04.66.73':445
'21#.#04.163.159':445
'21#.#04.242.150':445
'21#.#04.145.242':445
'21#.#04.85.80':445
'21#.#04.66.179':445
'21#.#04.206.166':445
'21#.104.6.3':445
'21#.#04.127.147':445
'21#.#04.109.63':445
'21#.#04.173.24':445
'21#.#04.99.4':445
'21#.#04.24.109':445
'21#.#04.17.200':445
'21#.#04.108.222':445
'21#.#04.18.33':445
'21#.#04.45.86':139
'21#.#04.76.22':139
'21#.#04.20.155':139
'21#.#04.36.9':139
'21#.#04.232.63':139
'21#.#04.231.85':445
'21#.#04.209.39':445
'21#.#04.177.121':445
'21#.#04.73.58':445
'21#.#04.58.198':445
'21#.#04.236.58':445
'21#.#04.140.173':445
'21#.#04.38.117':445
'21#.#04.186.76':445
'21#.#04.116.141':445
'21#.#04.15.91':445
'21#.#04.234.200':445
'21#.#04.185.85':445
'21#.#04.19.251':445
'21#.#04.150.181':445
'21#.#04.77.151':445
'21#.#04.40.52':445
'21#.#04.204.205':445
'21#.#04.215.117':445
'21#.#04.246.13':445
'21#.#04.119.71':445
'21#.#04.12.208':445
'21#.#04.14.141':445
'21#.#04.207.245':445
'21#.#04.180.87':445
'21#.#04.250.207':139
'21#.#04.208.189':139
'21#.#04.88.83':139
'21#.#04.14.71':139
'21#.#04.194.235':139
'21#.#04.18.221':445
'21#.#04.155.127':445
'21#.#04.209.58':445
'21#.#04.82.99':445
'21#.#04.182.224':445
'21#.#04.112.73':445
'21#.#04.98.204':445
'21#.#04.240.98':445
'21#.#04.252.112':445
'21#.#04.22.200':445
'21#.#04.39.166':445
'21#.#04.247.197':445
'21#.#04.196.126':445
'21#.#04.190.192':445
'21#.#04.185.126':445
'21#.#04.82.47':445
'21#.#04.12.51':445
'21#.#04.96.203':445
'21#.#04.66.117':445
'21#.#04.141.249':445
'21#.#04.14.164':445
'21#.#04.128.17':445
'21#.#04.164.73':445
'21#.#04.118.153':445
'21#.#04.213.227':445
'21#.#04.159.31':445
'21#.#04.15.153':445
'21#.#04.39.244':445
'21#.#04.225.40':445
'21#.#04.207.245':139
'21#.#04.12.208':139
'21#.#04.246.13':139
'21#.#04.40.52':139
'21#.#04.14.141':139
'21#.#04.119.71':139
'21#.#04.66.117':139
'21#.#04.141.249':139
'21#.#04.14.164':139
'21#.#04.128.17':139
'21#.#04.164.73':139
'21#.#04.215.117':139
'21#.#04.112.73':139
'21#.#04.18.221':139
'21#.#04.182.224':139
'21#.#04.155.127':139
'21#.#04.82.99':139
'21#.#04.209.58':139
'21#.#04.150.181':139
'21#.#04.77.151':139
'21#.#04.19.251':139
'21#.#04.180.87':139
'21#.#04.204.205':139
'21#.#04.185.126':139
'21#.#04.196.126':139
'21#.#04.12.51':139
'21#.#04.240.98':139
'21#.#04.82.47':139
'21#.#04.190.192':139
'21#.#04.141.162':139
'21#.#04.148.222':139
'21#.#04.178.178':139
'21#.#04.204.234':139
'21#.#04.2.180':139
'21#.#04.247.197':139
'21#.#04.15.153':139
'21#.#04.213.227':139
'21#.#04.225.40':139
'21#.#04.118.153':139
'21#.#04.39.244':139
'21#.#04.159.31':139
'21#.#04.39.166':139
'21#.#04.98.204':139
'21#.#04.252.112':139
'21#.#04.96.203':139
'21#.#04.22.200':139
'21#.#04.204.234':445
'21#.#04.97.90':139
'21#.#04.254.218':139
'21#.#04.233.249':139
'21#.#04.126.120':139
'21#.#04.138.233':139
'21#.#04.76.195':139
'21#.#04.136.218':139
'21#.#04.19.124':139
'21#.#04.218.239':139
'21#.#04.240.157':139
'21#.#04.239.239':139
'21#.#04.2.134':139
'21#.#04.98.229':139
'21#.#04.22.41':139
'21#.#04.82.36':139
'21#.#04.241.116':139
'21#.#04.49.241':139
'21#.#04.102.161':139
'21#.#04.99.143':139
'21#.#04.59.193':139
'21#.#04.112.130':139
'21#.#04.215.189':139
'21#.#04.84.111':139
'21#.#04.203.137':445
'21#.#04.77.210':445
'21#.#04.26.183':445
'21#.#04.112.68':445
'21#.#04.51.157':445
'21#.#04.198.21':445
'21#.#04.129.215':445
'21#.#04.174.10':445
'21#.#04.31.65':445
'21#.#04.199.36':445
'21#.#04.118.175':445
'21#.#04.239.184':445
'21#.#04.203.233':139
'21#.#04.84.16':139
'21#.#04.155.57':139
'21#.#04.43.163':139
'21#.#04.244.188':139
'21#.#04.181.131':445
'21#.#04.255.194':445
'21#.#04.52.170':445
'21#.#04.13.177':445
'21#.#04.137.10':445
'21#.#04.127.129':445
'21#.#04.128.17':9988
'21#.#04.66.117':9988
'21#.#04.164.73':9988
'21#.#04.207.245':9988
'21#.#04.119.71':9988
'21#.#04.14.164':9988
'21#.#04.82.47':9988
'21#.#04.12.51':9988
'21#.#04.252.112':9988
'21#.#04.118.153':9988
'21#.#04.225.40':9988
'21#.#04.150.181':9988
'21#.#04.141.162':445
'21#.#04.14.71':445
'21#.#04.148.222':445
'21#.#04.2.180':445
'21#.#04.178.178':445
'21#.#04.194.235':445
'21#.#04.155.127':9988
'21#.#04.112.73':9988
'21#.#04.208.189':445
'21#.#04.88.83':445
'21#.#04.250.207':445
'21#.#04.31.65':139
'21#.#04.129.215':139
'21#.#04.118.175':139
'21#.#04.198.21':139
'21#.#04.199.36':139
'21#.#04.174.10':139
'21#.#04.177.164':139
'21#.#04.116.177':139
'21#.#04.164.123':139
'21#.#04.185.85':139
'21#.#04.232.86':139
'21#.#04.77.210':139
'21#.#04.13.177':139
'21#.#04.255.194':139
'21#.#04.127.129':139
'21#.#04.181.131':139
'21#.#04.137.10':139
'21#.#04.52.170':139
'21#.#04.26.183':139
'21#.#04.203.137':139
'21#.#04.51.157':139
'21#.#04.239.184':139
'21#.#04.112.68':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней