Trojan.Starman.5855

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER3f92.dir00\svchost.exe.mdmp 16325836412032004

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3f92.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#45.1.177':139
'21#.#45.224.228':139
'21#.#45.16.9':139
'21#.#45.171.89':139
'21#.#45.190.241':139
'21#.#45.64.23':139
'21#.#45.218.63':139
'21#.#45.91.142':139
'21#.#45.23.99':139
'21#.#45.37.91':139
'21#.#45.128.124':139
'21#.#45.151.212':139
'21#.#45.114.238':139
'21#.#45.212.39':139
'21#.#45.166.52':139
'21#.#45.39.35':139
'21#.#45.95.238':139
'21#.#45.58.130':139
'21#.#45.1.73':139
'21#.#45.186.127':139
'21#.#45.109.85':139
'21#.#45.149.218':139
'21#.#45.1.73':445
'21#.#45.95.238':445
'21#.#45.109.85':445
'21#.#45.114.238':445
'21#.#45.186.127':445
'21#.#45.190.241':445
'21#.#45.16.9':445
'21#.#45.171.89':445
'21#.#45.58.130':445
'21#.#45.128.124':445
'21#.#45.151.212':445
'21#.#45.131.97':139
'21#.#45.239.170':139
'21#.#45.32.10':139
'21#.#45.30.158':139
'21#.#45.10.33':139
'21#.#45.39.35':445
'21#.#45.212.39':445
'21#.#45.166.52':445
'21#.#45.2.188':139
'21#.#45.52.252':445
'21#.#45.135.138':139
'21#.#45.182.184':139
'21#.#45.29.219':139
'21#.#45.146.134':139
'21#.#45.35.125':139
'21#.#45.8.162':139
'21#.#45.40.81':445
'21#.#45.142.190':139
'21#.#45.221.6':139
'21#.#45.189.220':139
'21#.#45.11.33':139
'21#.#45.242.89':139
'21#.#45.135.205':139
'21#.#45.169.21':139
'21#.#45.104.75':139
'21#.#45.10.227':139
'21#.#45.60.241':139
'21#.#45.200.41':139
'21#.#45.49.103':139
'21#.#45.54.243':139
'21#.#45.229.166':139
'21#.#45.75.40':445
'21#.#45.135.138':445
'21#.#45.182.184':445
'21#.#45.29.219':445
'21#.#45.146.134':445
'21#.#45.35.125':445
'21#.#45.8.162':445
'21#.#45.52.252':139
'21#.#45.142.190':445
'21#.#45.221.6':445
'21#.#45.189.220':445
'21#.#45.11.33':445
'21#.#45.242.89':445
'21#.#45.135.205':445
'21#.#45.169.21':445
'21#.#45.104.75':445
'21#.#45.10.227':445
'21#.#45.60.241':445
'21#.#45.200.41':445
'21#.#45.49.103':445
'21#.#45.54.243':445
'21#.#45.229.166':445
'21#.#45.1.177':445
'21#.#45.44.211':139
'21#.#45.138.44':139
'21#.#45.116.162':445
'21#.#45.13.58':445
'21#.#45.130.13':445
'21#.#45.61.227':139
'21#.#45.60.129':139
'21#.#45.94.100':139
'21#.#45.200.185':139
'21#.#45.107.77':139
'21#.#45.57.223':445
'21#.#45.116.139':445
'21#.#45.36.146':445
'21#.#45.189.179':445
'21#.#45.206.158':445
'21#.#45.45.251':445
'21#.#45.181.240':445
'21#.#45.222.181':445
'21#.#45.13.151':445
'21#.#45.115.228':445
'21#.#45.130.12':445
'21#.#45.128.60':139
'21#.#45.2.44':139
'21#.#45.9.144':139
'21#.#45.191.71':139
'21#.#45.62.94':139
'21#.#45.35.242':139
'21#.#45.88.226':139
'21#.#45.177.98':139
'21#.#45.195.119':139
'21#.#45.26.177':139
'21#.#45.150.165':139
'21#.#45.11.143':139
'21#.#45.36.162':139
'21#.#45.217.102':139
'21#.#45.32.115':139
'21#.#45.158.127':139
'21#.#45.114.159':139
'21#.#45.126.4':139
'21#.#45.203.223':139
'21#.#45.55.65':139
'21#.#45.48.121':139
'21#.#45.224.136':139
'21#.#45.37.247':139
'21#.#45.141.112':139
'21#.#45.247.2':139
'21#.#45.239.170':445
'21#.#45.2.188':445
'21#.#45.27.134':139
'21#.#45.158.211':139
'21#.#45.54.79':139
'21#.#45.139.92':139
'21#.#45.145.17':139
'21#.#45.131.97':445
'21#.#45.91.142':445
'21#.#45.64.23':445
'21#.#45.37.91':445
'21#.#45.224.228':445
'21#.#45.23.99':445
'21#.#45.10.33':445
'21#.#45.32.10':445
'21#.#45.30.158':445
'21#.#45.218.63':445
'21#.#45.149.218':445
'21#.#45.206.158':139
'21#.#45.37.247':445
'21#.#45.141.112':445
'21#.#45.247.2':445
'21#.#45.130.13':139
'21#.#45.116.162':139
'21#.#45.27.134':445
'21#.#45.158.211':445
'21#.#45.54.79':445
'21#.#45.139.92':445
'21#.#45.145.17':445
'21#.#45.13.58':139
'21#.#45.36.146':139
'21#.#45.115.228':139
'21#.#45.116.139':139
'21#.#45.45.251':139
'21#.#45.189.179':139
'21#.#45.222.181':139
'21#.#45.57.223':139
'21#.#45.181.240':139
'21#.#45.130.12':139
'21#.#45.13.151':139
'21#.#45.183.137':445
'21#.#45.182.183':445
'21#.#45.168.237':445
'21#.#45.50.65':445
'21#.#45.255.180':445
'21#.#45.42.42':445
'21#.#45.64.187':445
'21#.#45.94.26':445
'21#.#45.23.183':445
'21#.#45.166.24':445
'21#.#45.226.139':445
'21#.#45.10.34':139
'21#.#45.89.9':139
'21#.#45.34.93':139
'21#.#45.143.250':139
'21#.#45.93.144':139
'21#.#45.196.192':445
'21#.#45.205.218':445
'21#.#45.2.16':139
'21#.#45.109.88':139
'21#.#45.159.121':139
'21#.#45.99.243':445
'21#.#45.183.69':445
'21#.#45.52.206':445
'21#.#45.13.15':445
'21#.#45.148.225':445
'21#.#45.206.23':445
'21#.#45.215.249':445
'21#.#45.92.216':445
'21#.#45.222.220':445
'21#.#45.245.8':445
'21#.#45.112.50':445
'21#.#45.95.0':445
'21#.#45.151.52':445
'21#.#45.95.78':445
'21#.#45.199.252':445
'21#.#45.122.162':445
'21#.#45.116.29':445
'21#.#45.143.15':445
'21#.#45.0.143':445
'21#.#45.132.149':445
'21#.#45.27.95':445
'21#.#45.169.27':445
'21#.#45.122.162':139
'21#.#45.116.29':139
'21#.#45.99.243':139
'21#.#45.42.42':139
'21#.#45.64.187':139
'21#.#45.27.95':139
'21#.#45.169.27':139
'21#.#45.95.78':139
'21#.#45.199.252':139
'21#.#45.151.52':139
'21#.#45.94.26':139
'21#.#45.205.218':139
'21#.#45.50.65':139
'21#.#45.226.139':139
'21#.#45.255.180':139
'21#.#45.196.192':139
'21#.#45.23.183':139
'21#.#45.166.24':139
'21#.#45.182.183':139
'21#.#45.168.237':139
'21#.#45.183.137':139
'21#.#45.132.149':139
'21#.#45.46.249':139
'21#.#45.79.49':139
'21#.#45.140.135':139
'21#.#45.215.249':139
'21#.#45.92.216':139
'21#.#45.231.95':139
'21#.#45.250.29':139
'21#.#45.26.220':139
'21#.#45.118.85':139
'21#.#45.24.118':139
'21#.#45.222.220':139
'21#.#45.148.225':139
'21#.#45.206.23':139
'21#.#45.95.0':139
'21#.#45.143.15':139
'21#.#45.0.143':139
'21#.#45.245.8':139
'21#.#45.112.50':139
'21#.#45.52.206':139
'21#.#45.13.15':139
'21#.#45.183.69':139
'21#.#45.140.135':445
'21#.#45.79.3':445
'21#.#45.121.3':445
'21#.#45.114.170':445
'21#.#45.80.163':139
'21#.#45.82.48':445
'21#.#45.82.40':445
'21#.#45.60.202':445
'21#.#45.242.220':445
'21#.#45.118.124':445
'21#.#45.155.97':445
'21#.#45.177.178':139
'21#.#45.55.140':139
'21#.#45.130.164':139
'21#.#45.49.245':139
'21#.#45.191.110':139
'21#.#45.154.191':139
'21#.#45.85.235':139
'21#.#45.49.85':139
'21#.#45.80.232':139
'21#.#45.244.35':139
'21#.#45.143.59':139
'21#.#45.247.191':445
'21#.#45.80.232':445
'21#.#45.85.235':445
'21#.#45.143.59':445
'21#.#45.130.164':445
'21#.#45.244.35':445
'21#.#45.40.81':139
'21#.#45.75.40':139
'21#.#45.80.163':445
'21#.#45.49.85':445
'21#.#45.177.178':445
'21#.#45.55.140':445
'21#.#45.163.92':445
'21#.#45.94.163':445
'21#.#45.136.2':445
'21#.#45.19.133':445
'21#.#45.149.108':445
'21#.#45.154.191':445
'21#.#45.49.245':445
'21#.#45.191.110':445
'21#.#45.0.250':445
'21#.#45.71.94':445
'21#.#45.2.16':445
'21#.#45.226.139':9988
'21#.#45.159.121':445
'21#.#45.89.9':445
'21#.#45.109.88':445
'21#.#45.23.183':9988
'21#.#45.42.42':9988
'21#.#45.196.192':9988
'21#.#45.50.65':9988
'21#.#45.255.180':9988
'21#.#45.10.34':445
'21#.#45.24.118':445
'21#.#45.26.220':445
'21#.#45.118.85':445
'21#.#45.46.249':445
'21#.#45.79.49':445
'21#.#45.93.144':445
'21#.#45.34.93':445
'21#.#45.143.250':445
'21#.#45.231.95':445
'21#.#45.250.29':445
'21#.#45.64.187':9988
'21#.#45.19.133':139
'21#.#45.149.108':139
'21#.#45.247.191':139
'21#.#45.82.40':139
'21#.#45.60.202':139
'21#.#45.0.250':139
'21#.#45.71.94':139
'21#.#45.94.163':139
'21#.#45.136.2':139
'21#.#45.163.92':139
'21#.#45.242.220':139
'21#.#45.169.27':9988
'21#.#45.82.48':139
'21#.#45.95.78':9988
'21#.#45.116.29':9988
'21#.#45.27.95':9988
'21#.#45.118.124':139
'21#.#45.155.97':139
'21#.#45.121.3':139
'21#.#45.114.170':139
'21#.#45.79.3':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней