Trojan.Starman.5858

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERb96c.dir00\svchost.exe.mdmp 16325836412032180

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb96c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#41.161.234':139
'19#.#41.44.124':139
'19#.#41.4.36':139
'19#.#41.254.126':445
'19#.#41.119.137':445
'19#.#41.114.153':139
'19#.#41.59.46':139
'19#.#41.88.79':139
'19#.#41.10.156':139
'19#.#41.78.196':139
'19#.#41.156.181':445
'19#.#41.193.163':445
'19#.#41.152.28':445
'19#.#41.102.47':445
'19#.#41.174.137':445
'19#.#41.91.174':445
'19#.#41.9.211':445
'19#.#41.169.0':445
'19#.#41.135.248':445
'19#.#41.135.175':445
'19#.#41.49.26':445
'19#.#41.84.95':139
'19#.#41.87.229':139
'19#.#41.156.60':445
'19#.#41.154.97':445
'19#.#41.11.160':445
'19#.#41.60.234':139
'19#.#41.157.41':139
'19#.#41.23.231':139
'19#.#41.17.32':139
'19#.#41.165.73':139
'19#.#41.59.46':445
'19#.#41.4.36':445
'19#.#41.161.234':445
'19#.#41.156.60':139
'19#.#41.154.97':139
'19#.#41.11.160':139
'19#.#41.88.79':445
'19#.#41.114.153':445
'19#.#41.78.196':445
'19#.#41.44.124':445
'19#.#41.10.156':445
'19#.#41.119.137':139
'19#.#41.153.147':445
'19#.#41.254.126':139
'19#.#41.169.0':139
'19#.#41.156.181':139
'19#.#41.5.175':445
'19#.#41.228.137':445
'19#.#41.165.56':445
'19#.#41.62.59':445
'19#.#41.147.21':445
'19#.#41.9.211':139
'19#.#41.91.174':139
'19#.#41.102.47':139
'19#.#41.174.137':139
'19#.#41.171.211':139
'19#.#41.137.171':139
'19#.#41.49.26':139
'19#.#41.135.248':139
'19#.#41.135.175':139
'19#.#41.193.163':139
'19#.#41.152.28':139
'19#.#41.30.247':445
'19#.#41.229.69':445
'19#.#41.167.171':445
'19#.#41.121.16':445
'19#.#41.212.204':445
'19#.#41.171.211':445
'19#.#41.137.171':445
'19#.#41.46.254':445
'19#.#41.219.111':445
'19#.#41.114.76':445
'19#.#41.17.54':445
'19#.#41.121.236':445
'19#.#41.104.161':445
'19#.#41.166.109':445
'19#.#41.12.229':445
'19#.#41.224.236':445
'19#.#41.8.166':445
'19#.#41.163.178':445
'19#.#41.16.29':445
'19#.#41.42.206':445
'19#.#41.52.128':445
'19#.#41.132.88':445
'19#.#41.51.180':445
'19#.#41.18.146':445
'19#.#41.13.189':445
'19#.#41.167.184':445
'19#.#41.136.6':445
'19#.#41.205.26':445
'19#.#41.58.113':445
'19#.#41.6.87':445
'19#.#41.77.57':445
'19#.#41.23.137':445
'19#.#41.190.232':445
'19#.#41.244.190':445
'19#.#41.233.158':445
'19#.#41.108.40':445
'19#.#41.57.252':445
'19#.#41.21.209':445
'19#.#41.128.250':445
'19#.#41.209.7':445
'19#.#41.73.61':445
'19#.#41.0.169':445
'19#.#41.99.46':139
'19#.#41.156.98':139
'19#.#41.45.181':139
'19#.#41.204.95':139
'19#.#41.180.204':139
'19#.#41.158.71':139
'19#.#41.59.215':139
'19#.#41.45.77':139
'19#.#41.171.64':139
'19#.#41.11.128':139
'19#.#41.95.245':139
'19#.#41.101.189':445
'19#.#41.170.43':445
'19#.#41.48.8':445
'19#.#41.147.242':445
'19#.#41.194.205':445
'19#.#41.94.188':445
'19#.#41.245.233':445
'19#.#41.208.170':445
'19#.#41.219.232':445
'19#.#41.112.145':445
'19#.#41.167.184':139
'19#.#41.18.146':139
'19#.#41.13.189':139
'19#.#41.128.250':139
'19#.#41.23.137':139
'19#.#41.77.57':139
'19#.#41.58.113':139
'19#.#41.6.87':139
'19#.#41.132.88':139
'19#.#41.51.180':139
'19#.#41.21.209':139
'19#.#41.57.252':139
'19#.#41.233.158':139
'19#.#41.108.40':139
'19#.#41.72.211':139
'19#.#41.40.169':139
'19#.#41.0.169':139
'19#.#41.209.7':139
'19#.#41.73.61':139
'19#.#41.190.232':139
'19#.#41.244.190':139
'19#.#41.17.32':445
'19#.#41.165.73':445
'19#.#41.87.229':445
'19#.#41.245.233':139
'19#.#41.84.95':445
'19#.#41.157.41':445
'19#.#41.40.169':445
'19#.#41.72.211':445
'19#.#41.23.231':445
'19#.#41.60.234':445
'19#.#41.94.188':139
'19#.#41.194.205':139
'19#.#41.48.8':139
'19#.#41.147.242':139
'19#.#41.136.6':139
'19#.#41.205.26':139
'19#.#41.112.145':139
'19#.#41.208.170':139
'19#.#41.219.232':139
'19#.#41.101.189':139
'19#.#41.170.43':139
'19#.#41.46.254':139
'19#.#41.25.217':445
'19#.#41.94.67':445
'19#.#41.238.68':445
'19#.#41.159.118':445
'19#.#41.25.100':445
'19#.#41.194.29':445
'19#.#41.176.226':445
'19#.#41.163.139':445
'19#.#41.181.60':445
'19#.#41.72.150':445
'19#.#41.225.219':445
'19#.#41.179.167':139
'19#.#41.241.16':139
'19#.#41.21.164':139
'19#.#41.108.17':139
'19#.#41.13.86':139
'19#.#41.157.138':139
'19#.#41.211.235':445
'19#.#41.242.147':139
'19#.#41.142.57':139
'19#.#41.249.203':139
'19#.#41.76.92':445
'19#.#41.160.126':445
'19#.#41.206.27':445
'19#.#41.171.22':445
'19#.#41.0.211':445
'19#.#41.37.46':445
'19#.#41.82.132':445
'19#.#41.46.38':445
'19#.#41.112.39':445
'19#.#41.95.62':445
'19#.#41.181.46':445
'19#.#41.18.235':445
'19#.#41.131.237':445
'19#.#41.240.95':445
'19#.#41.124.96':445
'19#.#41.95.205':445
'19#.#41.152.249':445
'19#.#41.190.110':445
'19#.#41.50.138':445
'19#.#41.206.25':445
'19#.#41.216.58':445
'19#.#41.240.95':139
'19#.#41.18.235':139
'19#.#41.95.205':139
'19#.#41.176.226':139
'19#.#41.124.96':139
'19#.#41.50.138':139
'19#.#41.152.249':139
'19#.#41.216.58':139
'19#.#41.131.237':139
'19#.#41.206.25':139
'19#.#41.194.29':139
'19#.#41.238.68':139
'19#.#41.159.118':139
'19#.#41.211.235':139
'19#.#41.225.219':139
'19#.#41.25.217':139
'19#.#41.72.150':139
'19#.#41.163.139':139
'19#.#41.181.60':139
'19#.#41.25.100':139
'19#.#41.94.67':139
'19#.#41.218.193':139
'19#.#41.29.230':139
'19#.#41.213.243':139
'19#.#41.82.132':139
'19#.#41.188.194':139
'19#.#41.202.72':139
'19#.#41.147.201':139
'19#.#41.211.78':139
'19#.#41.80.248':139
'19#.#41.87.101':139
'19#.#41.37.46':139
'19#.#41.0.211':139
'19#.#41.206.27':139
'19#.#41.171.22':139
'19#.#41.190.110':139
'19#.#41.181.46':139
'19#.#41.95.62':139
'19#.#41.46.38':139
'19#.#41.112.39':139
'19#.#41.76.92':139
'19#.#41.160.126':139
'19#.#41.120.61':445
'19#.#41.212.53':445
'19#.#41.23.18':445
'19#.#41.118.110':445
'19#.#41.96.233':445
'19#.#41.62.59':139
'19#.#41.147.21':139
'19#.#41.153.147':139
'19#.#41.120.122':445
'19#.#41.147.143':445
'19#.#41.215.103':445
'19#.#41.120.61':139
'19#.#41.212.53':139
'19#.#41.23.18':139
'19#.#41.118.110':139
'19#.#41.96.233':139
'19#.#41.7.18':445
'19#.#41.123.159':445
'19#.#41.29.122':445
'19#.#41.120.122':139
'19#.#41.147.143':139
'19#.#41.121.16':139
'19#.#41.212.204':139
'19#.#41.17.54':139
'19#.#41.8.166':139
'19#.#41.163.178':139
'19#.#41.219.111':139
'19#.#41.114.76':139
'19#.#41.229.69':139
'19#.#41.167.171':139
'19#.#41.30.247':139
'19#.#41.16.29':139
'19#.#41.12.229':139
'19#.#41.224.236':139
'19#.#41.228.137':139
'19#.#41.165.56':139
'19#.#41.5.175':139
'19#.#41.42.206':139
'19#.#41.52.128':139
'19#.#41.104.161':139
'19#.#41.166.109':139
'19#.#41.121.236':139
'19#.#41.142.57':445
'19#.#41.249.203':445
'19#.#41.241.16':445
'19#.#41.21.164':445
'19#.#41.179.167':445
'19#.#41.181.60':9988
'19#.#41.72.150':9988
'19#.#41.25.100':9988
'19#.#41.242.147':445
'19#.#41.157.138':445
'19#.#41.13.86':445
'19#.#41.29.230':445
'19#.#41.80.248':445
'19#.#41.218.193':445
'19#.#41.188.194':445
'19#.#41.213.243':445
'19#.#41.147.201':445
'19#.#41.108.17':445
'19#.#41.202.72':445
'19#.#41.87.101':445
'19#.#41.211.78':445
'19#.#41.76.92':9988
'19#.#41.160.126':9988
'19#.#41.206.27':9988
'19#.#41.171.22':9988
'19#.#41.0.211':9988
'19#.#41.123.159':139
'19#.#41.215.103':139
'19#.#41.7.18':139
'19#.#41.112.39':9988
'19#.#41.29.122':139
'19#.#41.181.46':9988
'19#.#41.95.205':9988
'19#.#41.124.96':9988
'19#.#41.176.226':9988
'19#.#41.163.139':9988
'19#.#41.194.29':9988
'19#.#41.206.25':9988
'19#.#41.216.58':9988
'19#.#41.131.237':9988
'19#.#41.240.95':9988
'19#.#41.18.235':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней