Trojan.Starman.5812

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER3bff.dir00\svchost.exe.mdmp 16325836412032220

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3bff.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#57.35.244':139
'21#.#57.247.205':139
'21#.#57.7.165':139
'21#.#57.13.253':139
'21#.#57.57.13':139
'21#.#57.11.21':139
'21#.#57.13.155':139
'21#.#57.119.31':139
'21#.#57.57.79':139
'21#.#57.71.46':139
'21#.#57.253.177':139
'21#.#57.16.238':139
'21#.#57.50.88':139
'21#.#57.87.78':139
'21#.#57.153.254':445
'21#.#57.78.44':445
'21#.#57.156.110':139
'21#.#57.58.68':139
'21#.#57.224.51':139
'21#.#57.155.226':139
'21#.#57.119.52':139
'21#.#57.165.86':139
'21#.#57.13.253':445
'21#.#57.57.13':445
'21#.#57.253.177':445
'21#.#57.156.110':445
'21#.#57.58.68':445
'21#.#57.57.79':445
'21#.#57.71.46':445
'21#.#57.247.205':445
'21#.#57.7.165':445
'21#.#57.35.244':445
'21#.#57.224.51':445
'21#.#57.197.196':139
'21#.#57.24.163':139
'21#.#57.105.4':139
'21#.#57.120.28':139
'21#.#57.21.175':139
'21#.#57.155.226':445
'21#.#57.119.52':445
'21#.#57.50.88':445
'21#.#57.87.78':445
'21#.#57.16.238':445
'21#.#57.75.198':139
'21#.#57.146.20':139
'21#.#57.163.63':139
'21#.#57.130.120':139
'21#.#57.222.26':139
'21#.#57.90.13':445
'21#.#57.50.102':445
'21#.#57.78.44':139
'21#.#57.6.85':139
'21#.#57.153.254':139
'21#.#57.230.189':139
'21#.#57.4.110':139
'21#.#57.37.112':139
'21#.#57.127.166':139
'21#.#57.60.105':139
'21#.#57.184.60':139
'21#.#57.238.48':139
'21#.#57.119.241':139
'21#.#57.109.91':139
'21#.#57.217.167':139
'21#.#57.171.222':139
'21#.#57.111.110':445
'21#.#57.230.189':445
'21#.#57.130.120':445
'21#.#57.119.241':445
'21#.#57.109.91':445
'21#.#57.238.48':445
'21#.#57.146.20':445
'21#.#57.6.85':445
'21#.#57.75.198':445
'21#.#57.222.26':445
'21#.#57.163.63':445
'21#.#57.171.222':445
'21#.#57.44.187':445
'21#.#57.60.105':445
'21#.#57.27.144':445
'21#.#57.162.18':445
'21#.#57.113.4':445
'21#.#57.37.112':445
'21#.#57.217.167':445
'21#.#57.4.110':445
'21#.#57.184.60':445
'21#.#57.127.166':445
'21#.#57.238.112':445
'21#.#57.51.199':445
'21#.#57.15.115':445
'21#.#57.38.191':445
'21#.#57.7.147':445
'21#.#57.39.251':139
'21#.#57.97.209':139
'21#.#57.176.217':139
'21#.#57.104.52':445
'21#.#57.206.103':445
'21#.#57.50.250':445
'21#.#57.171.237':445
'21#.#57.229.188':445
'21#.#57.39.61':445
'21#.#57.79.26':445
'21#.#57.4.242':445
'21#.#57.76.128':445
'21#.#57.243.240':445
'21#.#57.4.130':445
'21#.#57.43.106':445
'21#.#57.183.25':445
'21#.#57.173.201':139
'21#.#57.251.30':139
'21#.#57.179.209':139
'21#.#57.154.111':139
'21#.#57.191.47':139
'21#.#57.255.203':139
'21#.#57.97.203':139
'21#.#57.211.97':139
'21#.#57.67.240':139
'21#.#57.224.165':139
'21#.#57.128.38':139
'21#.#57.49.43':139
'21#.#57.68.110':139
'21#.#57.136.160':139
'21#.#57.192.92':139
'21#.#57.187.220':139
'21#.#57.92.186':139
'21#.#57.25.185':139
'21#.#57.204.16':139
'21#.#57.184.207':139
'21#.#57.195.47':139
'21#.#57.253.232':139
'21#.#57.251.254':139
'21#.#57.13.152':139
'21#.#57.39.193':139
'21#.#57.166.25':139
'21#.#57.25.7':139
'21#.#57.39.61':139
'21#.#57.171.237':139
'21#.#57.4.242':139
'21#.#57.248.5':139
'21#.#57.79.26':139
'21#.#57.159.221':139
'21#.#57.165.86':445
'21#.#57.120.28':445
'21#.#57.13.155':445
'21#.#57.119.31':445
'21#.#57.11.21':445
'21#.#57.24.163':445
'21#.#57.119.57':139
'21#.#57.197.196':445
'21#.#57.21.175':445
'21#.#57.105.4':445
'21#.#57.229.188':139
'21#.#57.159.221':445
'21#.#57.166.25':445
'21#.#57.119.57':445
'21#.#57.104.52':139
'21#.#57.206.103':139
'21#.#57.13.152':445
'21#.#57.248.5':445
'21#.#57.251.254':445
'21#.#57.25.7':445
'21#.#57.39.193':445
'21#.#57.51.199':139
'21#.#57.76.128':139
'21#.#57.243.240':139
'21#.#57.4.130':139
'21#.#57.43.106':139
'21#.#57.183.25':139
'21#.#57.15.115':139
'21#.#57.238.112':139
'21#.#57.7.147':139
'21#.#57.50.250':139
'21#.#57.38.191':139
'21#.#57.13.161':445
'21#.#57.194.146':445
'21#.#57.152.119':445
'21#.#57.29.9':445
'21#.#57.51.37':445
'21#.#57.236.118':445
'21#.#57.101.55':445
'21#.#57.119.116':445
'21#.#57.12.114':445
'21#.#57.9.235':445
'21#.#57.81.0':445
'21#.#57.81.22':139
'21#.#57.240.18':139
'21#.#57.22.28':139
'21#.#57.165.100':139
'21#.#57.46.88':139
'21#.#57.141.88':445
'21#.#57.7.57':445
'21#.#57.40.194':139
'21#.#57.127.64':139
'21#.#57.193.192':139
'21#.#57.202.208':445
'21#.#57.61.165':445
'21#.#57.7.111':445
'21#.#57.186.22':445
'21#.#57.137.224':445
'21#.#57.20.195':445
'21#.#57.36.54':445
'21#.#57.223.238':445
'21#.#57.66.123':445
'21#.#57.85.111':445
'21#.#57.115.124':445
'21#.#57.164.80':445
'21#.#57.5.234':445
'21#.#57.21.153':445
'21#.#57.213.47':445
'21#.#57.153.76':445
'21#.#57.220.192':445
'21#.#57.11.174':445
'21#.#57.42.218':445
'21#.#57.240.38':445
'21#.#57.45.174':445
'21#.#57.129.88':445
'21#.#57.153.76':139
'21#.#57.220.192':139
'21#.#57.202.208':139
'21#.#57.236.118':139
'21#.#57.101.55':139
'21#.#57.45.174':139
'21#.#57.129.88':139
'21#.#57.21.153':139
'21#.#57.213.47':139
'21#.#57.5.234':139
'21#.#57.119.116':139
'21#.#57.29.9':139
'21#.#57.51.37':139
'21#.#57.81.0':139
'21#.#57.7.57':139
'21#.#57.141.88':139
'21#.#57.12.114':139
'21#.#57.9.235':139
'21#.#57.194.146':139
'21#.#57.152.119':139
'21#.#57.13.161':139
'21#.#57.240.38':139
'21#.#57.29.25':139
'21#.#57.108.242':139
'21#.#57.239.142':139
'21#.#57.36.54':139
'21#.#57.223.238':139
'21#.#57.129.85':139
'21#.#57.128.121':139
'21#.#57.64.234':139
'21#.#57.85.112':139
'21#.#57.56.86':139
'21#.#57.66.123':139
'21#.#57.137.224':139
'21#.#57.20.195':139
'21#.#57.164.80':139
'21#.#57.11.174':139
'21#.#57.42.218':139
'21#.#57.85.111':139
'21#.#57.115.124':139
'21#.#57.7.111':139
'21#.#57.186.22':139
'21#.#57.61.165':139
'21#.#57.208.230':445
'21#.#57.201.51':445
'21#.#57.109.56':445
'21#.#57.226.39':445
'21#.#57.7.226':445
'21#.#57.14.63':445
'21#.#57.118.238':445
'21#.#57.93.215':445
'21#.#57.113.167':445
'21#.#57.30.185':445
'21#.#57.64.147':139
'21#.#57.164.5':139
'21#.#57.225.6':139
'21#.#57.27.40':139
'21#.#57.218.5':139
'21#.#57.239.149':139
'21#.#57.174.140':139
'21#.#57.76.175':139
'21#.#57.140.171':139
'21#.#57.149.136':139
'21#.#57.171.59':139
'21#.#57.53.121':445
'21#.#57.90.13':139
'21#.#57.50.102':139
'21#.#57.64.147':445
'21#.#57.174.140':445
'21#.#57.76.175':445
'21#.#57.27.144':139
'21#.#57.44.187':139
'21#.#57.113.4':139
'21#.#57.111.110':139
'21#.#57.162.18':139
'21#.#57.140.171':445
'21#.#57.218.5':445
'21#.#57.239.149':445
'21#.#57.234.207':445
'21#.#57.147.169':445
'21#.#57.46.231':445
'21#.#57.149.136':445
'21#.#57.171.59':445
'21#.#57.225.6':445
'21#.#57.27.40':445
'21#.#57.164.5':445
'21#.#57.193.192':445
'21#.#57.40.194':445
'21#.#57.127.64':445
'21#.#57.81.22':445
'21#.#57.240.18':445
'21#.#57.13.161':9988
'21#.#57.194.146':9988
'21#.#57.51.37':9988
'21#.#57.7.57':9988
'21#.#57.141.88':9988
'21#.#57.22.28':445
'21#.#57.85.112':445
'21#.#57.56.86':445
'21#.#57.108.242':445
'21#.#57.239.142':445
'21#.#57.29.25':445
'21#.#57.165.100':445
'21#.#57.46.88':445
'21#.#57.128.121':445
'21#.#57.64.234':445
'21#.#57.129.85':445
'21#.#57.12.114':9988
'21#.#57.93.215':139
'21#.#57.14.63':139
'21#.#57.30.185':139
'21#.#57.201.51':139
'21#.#57.113.167':139
'21#.#57.46.231':139
'21#.#57.234.207':139
'21#.#57.147.169':139
'21#.#57.118.238':139
'21#.#57.53.121':139
'21#.#57.208.230':139
'21#.#57.45.174':9988
'21#.#57.129.88':9988
'21#.#57.21.153':9988
'21#.#57.220.192':9988
'21#.#57.5.234':9988
'21#.#57.7.226':139
'21#.#57.109.56':139
'21#.#57.226.39':139
'21#.#57.11.174':9988
'21#.#57.42.218':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней