Trojan.Starman.5976

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER5207.dir00\svchost.exe.mdmp 16325836412032076

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5207.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#56.33.244':139
'21#.#56.36.104':139
'21#.#56.82.205':139
'21#.#56.29.215':139
'21#.#56.41.13':139
'21#.#56.38.11':139
'21#.#56.138.38':139
'21#.#56.214.241':139
'21#.#56.71.36':139
'21#.#56.82.70':139
'21#.#56.40.223':139
'21#.#56.184.18':139
'21#.#56.2.23':139
'21#.#56.18.122':445
'21#.#56.137.139':445
'21#.#56.121.137':445
'21#.#56.80.254':139
'21#.#56.33.221':139
'21#.#56.254.4':139
'21#.#56.136.85':139
'21#.#56.5.59':139
'21#.#56.82.205':445
'21#.#56.41.13':445
'21#.#56.29.215':445
'21#.#56.33.221':445
'21#.#56.40.223':445
'21#.#56.82.70':445
'21#.#56.214.241':445
'21#.#56.71.36':445
'21#.#56.36.104':445
'21#.#56.33.244':445
'21#.#56.80.254':445
'21#.#56.130.184':139
'21#.#56.113.132':139
'21#.#56.184.183':139
'21#.#56.156.189':139
'21#.#56.145.45':139
'21#.#56.5.59':445
'21#.#56.254.4':445
'21#.#56.136.85':445
'21#.#56.184.18':445
'21#.#56.2.23':445
'21#.#56.221.30':445
'21#.#56.221.30':139
'21#.#56.137.139':139
'21#.#56.157.218':139
'21#.#56.63.109':139
'21#.#56.218.152':139
'21#.#56.64.251':445
'21#.#56.60.64':445
'21#.#56.251.249':445
'21#.#56.121.137':139
'21#.#56.18.122':139
'21#.#56.61.149':139
'21#.#56.215.178':139
'21#.#56.228.31':139
'21#.#56.178.213':139
'21#.#56.4.244':139
'21#.#56.155.82':139
'21#.#56.218.207':139
'21#.#56.32.178':139
'21#.#56.127.84':139
'21#.#56.33.180':139
'21#.#56.35.2':139
'21#.#56.127.84':445
'21#.#56.218.207':445
'21#.#56.35.2':445
'21#.#56.228.31':445
'21#.#56.33.180':445
'21#.#56.218.152':445
'21#.#56.157.218':445
'21#.#56.63.109':445
'21#.#56.32.178':445
'21#.#56.61.149':445
'21#.#56.215.178':445
'21#.#56.74.91':445
'21#.#56.179.71':445
'21#.#56.169.251':445
'21#.#56.126.221':445
'21#.#56.82.14':445
'21#.#56.155.82':445
'21#.#56.178.213':445
'21#.#56.4.244':445
'21#.#56.204.159':445
'21#.#56.228.191':445
'21#.#56.38.11':445
'21#.#56.158.8':445
'21#.#56.61.21':445
'21#.#56.171.248':445
'21#.#56.215.113':445
'21#.#56.81.205':445
'21#.#56.62.194':139
'21#.#56.227.241':139
'21#.#56.56.150':445
'21#.#56.43.60':445
'21#.#56.85.181':445
'21#.#56.192.85':445
'21#.#56.29.47':445
'21#.#56.92.194':445
'21#.#56.4.128':445
'21#.#56.24.142':445
'21#.#56.129.253':445
'21#.#56.4.56':445
'21#.#56.3.54':445
'21#.#56.208.225':445
'21#.#56.36.207':445
'21#.#56.185.190':445
'21#.#56.153.20':139
'21#.#56.62.211':139
'21#.#56.142.120':139
'21#.#56.232.156':139
'21#.#56.199.232':139
'21#.#56.235.7':139
'21#.#56.221.44':139
'21#.#56.153.41':139
'21#.#56.73.157':139
'21#.#56.218.73':139
'21#.#56.181.230':139
'21#.#56.56.43':139
'21#.#56.200.44':139
'21#.#56.102.223':139
'21#.#56.70.27':139
'21#.156.0.8':139
'21#.#56.178.67':139
'21#.#56.23.21':139
'21#.#56.228.198':139
'21#.#56.81.200':139
'21#.#56.160.151':139
'21#.#56.228.254':445
'21#.#56.228.254':139
'21#.#56.24.142':139
'21#.#56.91.175':139
'21#.#56.110.130':139
'21#.#56.193.213':139
'21#.#56.92.194':139
'21#.#56.36.207':139
'21#.#56.29.47':139
'21#.#56.129.253':139
'21#.#56.4.128':139
'21#.#56.25.159':139
'21#.#56.184.183':445
'21#.#56.130.184':445
'21#.#56.145.45':445
'21#.#56.138.38':445
'21#.#56.156.189':445
'21#.#56.172.110':139
'21#.#56.249.66':139
'21#.#56.81.183':139
'21#.#56.113.132':445
'21#.#56.20.230':139
'21#.#56.81.183':445
'21#.#56.172.110':445
'21#.#56.20.230':445
'21#.#56.85.181':139
'21#.#56.56.150':139
'21#.#56.193.213':445
'21#.#56.91.175':445
'21#.#56.110.130':445
'21#.#56.249.66':445
'21#.#56.25.159':445
'21#.#56.43.60':139
'21#.#56.3.54':139
'21#.#56.192.85':139
'21#.#56.4.56':139
'21#.#56.185.190':139
'21#.#56.208.225':139
'21#.#56.158.8':139
'21#.#56.61.21':139
'21#.#56.171.248':139
'21#.#56.215.113':139
'21#.#56.81.205':139
'21#.#56.228.191':139
'21#.#56.111.71':445
'21#.#56.61.194':445
'21#.#56.147.246':445
'21#.#56.225.1':445
'21#.#56.168.217':445
'21#.#56.125.13':445
'21#.#56.13.115':445
'21#.#56.220.98':445
'21#.#56.15.62':445
'21#.156.9.4':445
'21#.#56.43.81':445
'21#.#56.7.130':139
'21#.#56.118.80':139
'21#.#56.42.11':139
'21#.#56.110.129':139
'21#.#56.86.191':139
'21#.#56.95.240':445
'21#.#56.25.82':445
'21#.156.7.9':139
'21#.#56.105.197':139
'21#.#56.188.233':139
'21#.#56.250.47':445
'21#.#56.217.249':445
'21#.#56.204.184':445
'21#.#56.15.26':445
'21#.#56.82.8':445
'21#.#56.206.173':445
'21#.#56.19.96':445
'21#.#56.80.158':445
'21#.#56.174.23':445
'21#.#56.158.196':445
'21#.#56.153.155':445
'21#.#56.197.180':445
'21#.#56.159.219':445
'21#.#56.18.247':445
'21#.#56.15.86':445
'21#.#56.59.203':445
'21#.#56.61.127':445
'21#.#56.63.254':445
'21#.#56.0.198':445
'21#.#56.138.242':445
'21#.#56.237.129':445
'21#.#56.152.176':139
'21#.#56.59.203':139
'21#.#56.18.247':139
'21#.#56.15.86':139
'21#.#56.125.13':139
'21#.#56.13.115':139
'21#.#56.138.242':139
'21#.#56.0.198':139
'21#.#56.237.129':139
'21#.#56.197.180':139
'21#.#56.159.219':139
'21#.#56.220.98':139
'21#.#56.25.82':139
'21#.#56.147.246':139
'21#.#56.225.1':139
'21#.#56.43.81':139
'21#.#56.95.240':139
'21#.#56.15.62':139
'21#.156.9.4':139
'21#.#56.61.194':139
'21#.#56.168.217':139
'21#.#56.111.71':139
'21#.#56.216.18':139
'21#.#56.28.8':139
'21#.#56.102.77':139
'21#.#56.206.173':139
'21#.#56.19.96':139
'21#.#56.239.99':139
'21#.#56.124.206':139
'21#.#56.18.115':139
'21#.#56.212.163':139
'21#.#56.133.149':139
'21#.#56.80.158':139
'21#.#56.15.26':139
'21#.#56.82.8':139
'21#.#56.153.155':139
'21#.#56.61.127':139
'21#.#56.63.254':139
'21#.#56.174.23':139
'21#.#56.158.196':139
'21#.#56.217.249':139
'21#.#56.204.184':139
'21#.#56.250.47':139
'21#.#56.102.77':445
'21#.#56.70.203':445
'21#.#56.62.187':445
'21#.#56.117.126':445
'21#.#56.100.187':445
'21#.#56.127.82':445
'21#.#56.39.33':445
'21#.#56.253.154':445
'21#.#56.211.191':445
'21#.#56.75.185':445
'21#.#56.41.77':445
'21#.#56.45.115':445
'21#.#56.104.48':139
'21#.#56.12.17':139
'21#.#56.242.207':139
'21#.#56.92.52':139
'21#.#56.155.178':139
'21#.#56.161.34':139
'21#.#56.150.63':139
'21#.#56.143.156':139
'21#.#56.99.211':139
'21#.#56.138.173':139
'21#.#56.60.64':139
'21#.#56.126.221':139
'21#.#56.64.251':139
'21#.#56.150.63':445
'21#.#56.251.249':139
'21#.#56.179.71':139
'21#.#56.204.159':139
'21#.#56.74.91':139
'21#.#56.82.14':139
'21#.#56.169.251':139
'21#.#56.161.34':445
'21#.#56.155.178':445
'21#.#56.242.207':445
'21#.#56.92.52':445
'21#.#56.250.242':445
'21#.#56.70.10':445
'21#.#56.138.173':445
'21#.#56.143.156':445
'21#.#56.99.211':445
'21#.#56.104.48':445
'21#.#56.12.17':445
'21#.#56.70.10':139
'21#.#56.188.233':445
'21#.156.7.9':445
'21#.#56.105.197':445
'21#.#56.7.130':445
'21#.#56.118.80':445
'21#.#56.147.246':9988
'21#.#56.61.194':9988
'21#.#56.95.240':9988
'21#.#56.168.217':9988
'21#.#56.25.82':9988
'21#.#56.42.11':445
'21#.#56.133.149':445
'21#.#56.18.115':445
'21#.#56.212.163':445
'21#.#56.216.18':445
'21#.#56.28.8':445
'21#.#56.110.129':445
'21#.#56.86.191':445
'21#.#56.152.176':445
'21#.#56.239.99':445
'21#.#56.124.206':445
'21#.#56.62.187':139
'21#.#56.75.185':139
'21#.#56.70.203':139
'21#.#56.127.82':139
'21#.#56.117.126':139
'21#.#56.253.154':139
'21#.#56.250.242':139
'21#.#56.39.33':139
'21#.#56.41.77':139
'21#.#56.211.191':139
'21#.#56.100.187':139
'21#.#56.197.180':9988
'21#.#56.159.219':9988
'21#.#56.18.247':9988
'21#.#56.15.62':9988
'21#.#56.220.98':9988
'21#.#56.15.26':9988
'21#.#56.45.115':139
'21#.#56.82.8':9988
'21#.#56.61.127':9988
'21#.#56.153.155':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней