Trojan.Starman.5846

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER3c71.dir00\svchost.exe.mdmp 16325836412031956

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3c71.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#02.176.199':139
'21#.#02.91.183':139
'21#.#02.84.147':139
'21#.#02.17.45':139
'21#.#02.147.16':139
'21#.#02.47.228':139
'21#.#02.60.150':139
'21#.#02.84.232':139
'21#.#02.130.69':139
'21#.#02.99.139':139
'21#.#02.19.210':139
'21#.#02.163.170':139
'21#.#02.170.64':139
'21#.#02.27.213':445
'21#.#02.10.86':445
'21#.#02.74.247':445
'21#.#02.248.93':139
'21#.#02.194.208':139
'21#.#02.87.75':139
'21#.#02.189.42':139
'21#.#02.16.98':139
'21#.#02.147.16':445
'21#.#02.84.147':445
'21#.#02.17.45':445
'21#.#02.194.208':445
'21#.#02.19.210':445
'21#.#02.99.139':445
'21#.#02.84.232':445
'21#.#02.130.69':445
'21#.#02.176.199':445
'21#.#02.91.183':445
'21#.#02.248.93':445
'21#.#02.255.108':139
'21#.#02.234.254':139
'21#.#02.109.70':139
'21#.#02.115.39':139
'21#.#02.184.80':139
'21#.#02.16.98':445
'21#.#02.87.75':445
'21#.#02.189.42':445
'21#.#02.163.170':445
'21#.#02.170.64':445
'21#.#02.156.217':445
'21#.#02.156.217':139
'21#.#02.10.86':139
'21#.#02.2.185':139
'21#.#02.230.58':139
'21#.#02.19.252':139
'21#.#02.225.199':445
'21#.#02.228.225':445
'21#.#02.199.97':445
'21#.#02.74.247':139
'21#.#02.27.213':139
'21#.#02.114.249':139
'21#.#02.58.242':139
'21#.#02.67.191':139
'21#.#02.16.93':139
'21#.#02.71.65':139
'21#.#02.69.111':139
'21#.#02.173.211':139
'21#.#02.249.173':139
'21#.#02.222.116':139
'21#.#02.53.243':139
'21#.#02.24.180':139
'21#.#02.222.116':445
'21#.#02.173.211':445
'21#.#02.24.180':445
'21#.#02.67.191':445
'21#.#02.53.243':445
'21#.#02.19.252':445
'21#.#02.2.185':445
'21#.#02.230.58':445
'21#.#02.249.173':445
'21#.#02.114.249':445
'21#.#02.58.242':445
'21#.#02.59.13':445
'21#.#02.239.58':445
'21#.#02.13.19':445
'21#.#02.136.99':445
'21#.#02.71.24':445
'21#.#02.69.111':445
'21#.#02.16.93':445
'21#.#02.71.65':445
'21#.#02.97.239':445
'21#.#02.65.97':445
'21#.#02.47.228':445
'21#.#02.250.206':445
'21#.#02.129.20':445
'21#.#02.121.43':445
'21#.#02.36.39':445
'21#.#02.43.96':445
'21#.#02.131.238':139
'21#.#02.29.83':139
'21#.#02.239.16':445
'21#.#02.155.11':445
'21#.#02.74.138':445
'21#.#02.97.96':445
'21#.#02.189.157':445
'21#.#02.1.189':445
'21#.#02.174.43':445
'21#.#02.158.115':445
'21#.#02.113.221':445
'21#.#02.29.180':445
'21#.#02.106.84':445
'21#.#02.142.125':445
'21#.#02.223.95':445
'21#.#02.125.200':445
'21#.#02.1.250':139
'21#.#02.232.61':139
'21#.#02.84.145':139
'21#.#02.43.1':139
'21#.#02.138.51':139
'21#.#02.197.111':139
'21#.#02.47.165':139
'21#.#02.96.252':139
'21#.#02.49.211':139
'21#.#02.222.37':139
'21#.#02.3.102':139
'21#.#02.118.197':139
'21#.#02.106.36':139
'21#.#02.125.217':139
'21#.#02.38.91':139
'21#.#02.202.21':139
'21#.#02.64.140':139
'21#.#02.168.140':139
'21#.#02.86.193':139
'21#.#02.101.46':139
'21#.#02.112.202':139
'21#.#02.80.91':445
'21#.#02.80.91':139
'21#.#02.158.115':139
'21#.#02.244.42':139
'21#.#02.31.29':139
'21#.#02.164.116':139
'21#.#02.1.189':139
'21#.#02.223.95':139
'21#.#02.189.157':139
'21#.#02.113.221':139
'21#.#02.174.43':139
'21#.#02.221.102':139
'21#.#02.109.70':445
'21#.#02.255.108':445
'21#.#02.184.80':445
'21#.#02.60.150':445
'21#.#02.115.39':445
'21#.#02.121.206':139
'21#.#02.242.244':139
'21#.#02.175.108':139
'21#.#02.234.254':445
'21#.#02.127.142':139
'21#.#02.175.108':445
'21#.#02.121.206':445
'21#.#02.127.142':445
'21#.#02.74.138':139
'21#.#02.239.16':139
'21#.#02.164.116':445
'21#.#02.244.42':445
'21#.#02.31.29':445
'21#.#02.242.244':445
'21#.#02.221.102':445
'21#.#02.155.11':139
'21#.#02.106.84':139
'21#.#02.97.96':139
'21#.#02.29.180':139
'21#.#02.125.200':139
'21#.#02.142.125':139
'21#.#02.250.206':139
'21#.#02.129.20':139
'21#.#02.121.43':139
'21#.#02.36.39':139
'21#.#02.43.96':139
'21#.#02.65.97':139
'21#.#02.153.224':445
'21#.#02.157.29':445
'21#.#02.145.48':445
'21#.#02.106.202':445
'21#.#02.231.82':445
'21#.#02.41.30':445
'21#.#02.213.223':445
'21#.#02.76.126':445
'21#.#02.76.157':445
'21#.#02.126.77':445
'21#.#02.29.197':445
'21#.#02.194.99':139
'21#.#02.126.237':139
'21#.#02.40.127':139
'21#.#02.57.53':139
'21#.#02.237.101':139
'21#.#02.93.119':445
'21#.#02.82.207':445
'21#.#02.116.88':139
'21#.#02.201.251':139
'21#.#02.121.232':139
'21#.#02.40.176':445
'21#.#02.176.166':445
'21#.#02.97.98':445
'21#.#02.64.101':445
'21#.#02.200.69':445
'21#.#02.35.160':445
'21#.#02.34.189':445
'21#.#02.20.109':445
'21#.#02.119.40':445
'21#.#02.191.118':445
'21#.#02.38.214':445
'21#.#02.249.227':445
'21#.#02.100.102':445
'21#.#02.227.233':445
'21#.#02.3.145':445
'21#.#02.234.2':445
'21#.#02.148.156':445
'21#.#02.172.148':445
'21#.#02.134.238':445
'21#.#02.142.96':445
'21#.#02.196.58':445
'21#.#02.234.64':139
'21#.#02.234.2':139
'21#.#02.227.233':139
'21#.#02.3.145':139
'21#.#02.41.30':139
'21#.#02.213.223':139
'21#.#02.196.58':139
'21#.#02.134.238':139
'21#.#02.142.96':139
'21#.#02.249.227':139
'21#.#02.100.102':139
'21#.#02.76.126':139
'21#.#02.82.207':139
'21#.#02.29.197':139
'21#.#02.231.82':139
'21#.#02.106.202':139
'21#.#02.93.119':139
'21#.#02.76.157':139
'21#.#02.126.77':139
'21#.#02.157.29':139
'21#.#02.145.48':139
'21#.#02.153.224':139
'21#.#02.119.51':139
'21#.#02.102.5':139
'21#.#02.54.77':139
'21#.#02.35.160':139
'21#.#02.34.189':139
'21#.#02.23.42':139
'21#.#02.122.211':139
'21#.#02.14.214':139
'21#.#02.238.33':139
'21#.#02.214.238':139
'21#.#02.20.109':139
'21#.#02.64.101':139
'21#.#02.200.69':139
'21#.#02.38.214':139
'21#.#02.148.156':139
'21#.#02.172.148':139
'21#.#02.119.40':139
'21#.#02.191.118':139
'21#.#02.40.176':139
'21#.#02.97.98':139
'21#.#02.176.166':139
'21#.#02.54.77':445
'21#.#02.93.200':445
'21#.#02.152.72':445
'21#.#02.8.139':445
'21#.#02.168.157':445
'21#.#02.111.168':445
'21#.#02.7.241':445
'21#.#02.59.95':445
'21#.#02.127.194':445
'21#.#02.223.12':445
'21#.#02.123.78':445
'21#.#02.44.34':445
'21#.#02.37.64':139
'21#.#02.7.11':139
'21#.#02.1.164':139
'21#.#02.127.242':139
'21#.#02.111.127':139
'21#.#02.91.94':139
'21#.#02.98.128':139
'21#.#02.8.216':139
'21#.#02.100.34':139
'21#.#02.192.140':139
'21#.#02.228.225':139
'21#.#02.136.99':139
'21#.#02.225.199':139
'21#.#02.98.128':445
'21#.#02.199.97':139
'21#.#02.239.58':139
'21#.#02.97.239':139
'21#.#02.59.13':139
'21#.#02.71.24':139
'21#.#02.13.19':139
'21#.#02.91.94':445
'21#.#02.111.127':445
'21#.#02.1.164':445
'21#.#02.127.242':445
'21#.#02.8.166':445
'21#.#02.14.176':445
'21#.#02.192.140':445
'21#.#02.8.216':445
'21#.#02.100.34':445
'21#.#02.37.64':445
'21#.#02.7.11':445
'21#.#02.14.176':139
'21#.#02.121.232':445
'21#.#02.116.88':445
'21#.#02.201.251':445
'21#.#02.194.99':445
'21#.#02.126.237':445
'21#.#02.76.157':9988
'21#.#02.76.126':9988
'21#.#02.145.48':9988
'21#.#02.106.202':9988
'21#.#02.29.197':9988
'21#.#02.40.127':445
'21#.#02.214.238':445
'21#.#02.14.214':445
'21#.#02.238.33':445
'21#.#02.119.51':445
'21#.#02.102.5':445
'21#.#02.57.53':445
'21#.#02.237.101':445
'21#.#02.234.64':445
'21#.#02.23.42':445
'21#.#02.122.211':445
'21#.#02.152.72':139
'21#.#02.223.12':139
'21#.#02.93.200':139
'21#.#02.111.168':139
'21#.#02.8.139':139
'21#.#02.59.95':139
'21#.#02.8.166':139
'21#.#02.7.241':139
'21#.#02.123.78':139
'21#.#02.127.194':139
'21#.#02.168.157':139
'21#.#02.227.233':9988
'21#.#02.100.102':9988
'21#.#02.3.145':9988
'21#.#02.213.223':9988
'21#.#02.234.2':9988
'21#.#02.97.98':9988
'21#.#02.44.34':139
'21#.#02.64.101':9988
'21#.#02.142.96':9988
'21#.#02.148.156':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней