Trojan.Starman.5844

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER253d.dir00\svchost.exe.mdmp 16325836412032160

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER253d.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'14#.#88.196.57':445
'14#.#88.53.196':445
'14#.#88.120.207':445
'14#.#88.76.113':445
'14#.#88.49.137':445
'14#.#88.41.99':445
'14#.#88.86.228':445
'14#.#88.121.3':139
'14#.#88.41.99':139
'14#.#88.86.228':139
'14#.#88.247.173':445
'14#.#88.234.43':445
'14#.#88.39.47':445
'14#.#88.53.138':445
'14#.#88.191.118':445
'14#.#88.12.128':445
'14#.#88.150.8':445
'14#.#88.150.241':445
'14#.#88.16.158':445
'14#.#88.124.16':445
'14#.#88.78.91':139
'14#.#88.146.206':139
'14#.#88.105.178':139
'14#.#88.13.84':139
'14#.#88.139.201':139
'14#.#88.109.250':139
'14#.#88.164.109':139
'14#.#88.250.71':139
'14#.#88.156.138':139
'14#.#88.71.156':139
'14#.#88.126.220':139
'14#.#88.86.127':139
'14#.#88.220.203':139
'14#.#88.121.3':445
'14#.#88.204.151':139
'14#.#88.180.3':139
'14#.#88.192.180':139
'14#.#88.3.86':139
'14#.#88.27.108':139
'14#.#88.121.230':139
'14#.#88.47.181':445
'14#.#88.10.21':445
'14#.#88.79.28':445
'14#.#88.7.110':445
'14#.#88.178.252':445
'14#.#88.188.46':445
'14#.#88.128.188':445
'14#.#88.5.242':445
'14#.#88.87.82':445
'14#.#88.223.227':445
'14#.#88.49.137':139
'14#.#88.120.207':139
'14#.#88.76.113':139
'14#.#88.12.128':139
'14#.#88.150.8':139
'14#.#88.52.127':445
'14#.#88.166.52':445
'14#.#88.124.114':445
'14#.#88.196.57':139
'14#.#88.53.196':139
'14#.#88.248.196':445
'14#.#88.44.42':445
'14#.#88.67.213':445
'14#.#88.50.147':445
'14#.#88.6.154':445
'14#.#88.18.121':445
'14#.#88.55.145':445
'14#.#88.49.171':445
'14#.#88.217.153':445
'14#.#88.8.223':445
'14#.#88.5.90':445
'14#.#88.208.76':445
'14#.#88.12.79':445
'14#.#88.66.170':445
'14#.#88.92.176':445
'14#.#88.173.20':445
'14#.#88.172.253':445
'14#.#88.4.184':445
'14#.#88.74.138':445
'14#.#88.103.202':445
'14#.#88.33.97':445
'14#.#88.220.51':445
'14#.#88.124.216':445
'14#.#88.18.46':445
'14#.#88.43.146':445
'14#.#88.47.64':445
'14#.#88.37.37':445
'14#.#88.87.217':445
'14#.#88.36.48':445
'14#.#88.16.116':445
'14#.#88.156.138':445
'14#.#88.71.156':445
'14#.#88.146.206':445
'14#.#88.105.178':445
'14#.#88.78.91':445
'14#.#88.139.87':445
'14#.#88.114.184':445
'14#.#88.164.109':445
'14#.#88.250.71':445
'14#.#88.109.250':445
'14#.#88.195.147':445
'14#.#88.140.96':445
'14#.#88.183.3':445
'14#.#88.48.81':445
'14#.#88.71.138':445
'14#.#88.55.77':139
'14#.#88.216.55':139
'14#.#88.174.99':139
'14#.#88.97.190':445
'14#.#88.100.98':445
'14#.#88.64.193':445
'14#.#88.107.166':445
'14#.#88.44.12':445
'14#.#88.89.17':445
'14#.#88.12.92':445
'14#.#88.40.117':445
'14#.#88.81.194':445
'14#.#88.71.105':445
'14#.#88.14.250':445
'14#.#88.5.57':445
'14#.#88.12.92':139
'14#.#88.44.12':139
'14#.#88.89.17':139
'14#.#88.47.64':139
'14#.#88.37.37':139
'14#.#88.5.57':139
'14#.#88.71.105':139
'14#.#88.14.250':139
'14#.#88.64.193':139
'14#.#88.107.166':139
'14#.#88.43.146':139
'14#.#88.124.216':139
'14#.#88.18.46':139
'14#.#88.139.87':139
'14#.#88.114.184':139
'14#.#88.16.116':139
'14#.#88.87.217':139
'14#.#88.36.48':139
'14#.#88.33.97':139
'14#.#88.220.51':139
'14#.#88.27.108':445
'14#.#88.121.230':445
'14#.#88.86.127':445
'14#.#88.220.203':445
'14#.#88.126.220':445
'14#.#88.13.84':445
'14#.#88.139.201':445
'14#.#88.192.180':445
'14#.#88.3.86':445
'14#.#88.180.3':445
'14#.#88.71.138':139
'14#.#88.183.3':139
'14#.#88.48.81':139
'14#.#88.40.117':139
'14#.#88.81.194':139
'14#.#88.100.98':139
'14#.#88.204.151':445
'14#.#88.97.190':139
'14#.#88.195.147':139
'14#.#88.140.96':139
'14#.#88.36.217':445
'14#.#88.109.22':445
'14#.#88.239.189':445
'14#.#88.225.121':139
'14#.#88.210.234':445
'14#.#88.253.74':445
'14#.#88.83.110':445
'14#.#88.72.160':445
'14#.#88.167.0':445
'14#.#88.1.101':445
'14#.#88.145.221':139
'14#.#88.230.145':139
'14#.#88.221.161':139
'14#.#88.94.48':139
'14#.#88.161.94':139
'14#.#88.132.209':139
'14#.#88.39.39':139
'14#.#88.209.187':139
'14#.#88.107.79':139
'14#.#88.188.58':139
'14#.#88.2.216':445
'14#.#88.102.43':445
'14#.#88.10.87':445
'14#.#88.64.179':445
'14#.#88.211.53':445
'14#.#88.29.17':445
'14#.#88.45.124':445
'14#.#88.95.224':445
'14#.#88.230.101':445
'14#.#88.116.229':445
'14#.#88.51.5':445
'14#.#88.245.3':445
'14#.#88.193.130':445
'14#.#88.200.123':445
'14#.#88.68.200':445
'14#.#88.133.207':445
'14#.#88.21.127':445
'14#.#88.60.250':445
'14#.#88.151.176':445
'14#.#88.113.111':445
'14#.#88.245.3':139
'14#.#88.151.176':139
'14#.#88.51.5':139
'14#.#88.68.200':139
'14#.#88.193.130':139
'14#.#88.21.127':139
'14#.#88.64.179':139
'14#.#88.133.207':139
'14#.#88.113.111':139
'14#.#88.60.250':139
'14#.#88.210.234':139
'14#.#88.1.101':139
'14#.#88.239.189':139
'14#.#88.72.160':139
'14#.#88.253.74':139
'14#.#88.83.110':139
'14#.#88.200.123':139
'14#.#88.36.217':139
'14#.#88.109.22':139
'14#.#88.167.0':139
'14#.#88.20.220':139
'14#.#88.24.72':139
'14#.#88.204.116':139
'14#.#88.155.153':139
'14#.#88.51.125':139
'14#.#88.1.157':139
'14#.#88.48.19':139
'14#.#88.142.126':139
'14#.#88.126.86':139
'14#.#88.54.74':139
'14#.#88.102.43':139
'14#.#88.230.101':139
'14#.#88.2.216':139
'14#.#88.211.53':139
'14#.#88.10.87':139
'14#.#88.45.124':139
'14#.#88.142.206':139
'14#.#88.29.17':139
'14#.#88.116.229':139
'14#.#88.95.224':139
'14#.#88.92.176':139
'14#.#88.12.79':139
'14#.#88.66.170':139
'14#.#88.188.46':139
'14#.#88.128.188':139
'14#.#88.103.202':139
'14#.#88.4.184':139
'14#.#88.74.138':139
'14#.#88.5.90':139
'14#.#88.208.76':139
'14#.#88.178.252':139
'14#.#88.79.28':139
'14#.#88.7.110':139
'14#.#88.52.127':139
'14#.#88.166.52':139
'14#.#88.223.227':139
'14#.#88.5.242':139
'14#.#88.87.82':139
'14#.#88.47.181':139
'14#.#88.10.21':139
'14#.#88.191.118':139
'14#.#88.39.47':139
'14#.#88.53.138':139
'14#.#88.18.121':139
'14#.#88.55.145':139
'14#.#88.124.16':139
'14#.#88.150.241':139
'14#.#88.16.158':139
'14#.#88.247.173':139
'14#.#88.234.43':139
'14#.#88.6.154':139
'14#.#88.67.213':139
'14#.#88.50.147':139
'14#.#88.173.20':139
'14#.#88.172.253':139
'14#.#88.8.223':139
'14#.#88.49.171':139
'14#.#88.217.153':139
'14#.#88.248.196':139
'14#.#88.44.42':139
'14#.#88.221.161':445
'14#.#88.145.221':445
'14#.#88.161.94':445
'14#.#88.48.19':445
'14#.#88.94.48':445
'14#.#88.209.187':445
'14#.#88.132.209':445
'14#.#88.188.58':445
'14#.#88.230.145':445
'14#.#88.107.79':445
'14#.#88.204.116':445
'14#.#88.20.220':445
'14#.#88.51.125':445
'14#.#88.142.206':445
'14#.#88.155.153':445
'14#.#88.142.126':445
'14#.#88.1.157':445
'14#.#88.54.74':445
'14#.#88.24.72':445
'14#.#88.126.86':445
'14#.#88.6.34':139
'14#.#88.119.207':139
'14#.#88.24.72':9988
'14#.#88.45.124':9988
'14#.#88.51.125':9988
'14#.#88.135.24':445
'14#.#88.124.114':139
'14#.#88.119.207':445
'14#.#88.135.24':139
'14#.#88.6.34':445
'14#.#88.151.176':9988
'14#.#88.113.111':9988
'14#.#88.253.74':9988
'14#.#88.39.39':445
'14#.#88.225.121':445
'14#.#88.102.43':9988
'14#.#88.29.17':9988
'14#.#88.10.87':9988
'14#.#88.60.250':9988
'14#.#88.133.207':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней