Trojan.Starman.5982

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER91d6.dir00\svchost.exe.mdmp 16325836412032208

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER91d6.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#32.181.5':139
'21#.#32.135.31':139
'21#.#32.173.86':139
'21#.#32.3.217':139
'21#.#32.199.108':445
'21#.#32.253.166':445
'21#.#32.181.216':445
'21#.#32.89.28':445
'21#.#32.65.183':445
'21#.#32.134.168':139
'21#.#32.42.124':445
'21#.#32.12.155':445
'21#.#32.120.121':445
'21#.#32.58.4':445
'21#.#32.199.108':139
'21#.#32.253.166':139
'21#.#32.181.216':139
'21#.#32.89.28':139
'21#.#32.65.183':139
'21#.#32.19.25':139
'21#.#32.57.42':139
'21#.#32.182.22':139
'21#.#32.174.197':139
'21#.#32.203.169':139
'21#.#32.33.85':139
'21#.#32.223.190':139
'21#.#32.56.242':139
'21#.#32.38.147':139
'21#.#32.240.86':139
'21#.#32.3.217':445
'21#.#32.181.5':445
'21#.#32.134.168':445
'21#.#32.173.86':445
'21#.#32.135.31':445
'21#.#32.245.15':139
'21#.#32.121.55':139
'21#.#32.134.155':139
'21#.#32.32.82':139
'21#.#32.241.141':445
'21#.#32.147.28':445
'21#.#32.243.146':445
'21#.#32.240.35':445
'21#.#32.156.192':445
'21#.#32.73.226':445
'21#.#32.57.126':445
'21#.#32.133.154':445
'21#.#32.27.6':445
'21#.#32.43.33':445
'21#.#32.151.60':445
'21#.#32.209.71':445
'21#.#32.122.209':445
'21#.#32.42.124':139
'21#.#32.12.155':139
'21#.#32.118.123':445
'21#.#32.118.3':445
'21#.#32.160.115':445
'21#.#32.68.118':445
'21#.#32.40.68':445
'21#.#32.174.7':445
'21#.#32.200.119':445
'21#.#32.144.105':445
'21#.#32.7.145':445
'21#.#32.178.27':445
'21#.#32.51.14':445
'21#.#32.116.132':445
'21#.#32.67.85':445
'21#.#32.87.164':445
'21#.#32.129.172':445
'21#.#32.143.2':445
'21#.#32.185.142':445
'21#.#32.78.128':445
'21#.#32.71.126':445
'21#.#32.237.204':445
'21#.#32.250.129':445
'21#.#32.185.250':445
'21#.#32.0.217':445
'21#.#32.93.71':445
'21#.#32.42.44':139
'21#.#32.59.11':445
'21#.#32.5.119':445
'21#.#32.254.190':445
'21#.#32.10.254':445
'21#.#32.224.253':445
'21#.#32.88.179':445
'21#.#32.146.106':445
'21#.#32.125.178':445
'21#.#32.131.40':445
'21#.#32.190.111':445
'21#.#32.155.225':445
'21#.#32.17.163':445
'21#.#32.223.190':445
'21#.#32.42.44':445
'21#.#32.157.80':445
'21#.#32.28.119':445
'21#.#32.167.224':445
'21#.#32.38.159':445
'21#.#32.143.9':445
'21#.#32.4.26':139
'21#.#32.54.95':139
'21#.#32.212.119':139
'21#.#32.102.103':139
'21#.#32.28.173':139
'21#.#32.251.201':139
'21#.#32.254.181':139
'21#.#32.49.166':139
'21#.#32.164.49':139
'21#.#32.98.192':139
'21#.#32.182.32':445
'21#.#32.66.57':445
'21#.#32.205.227':445
'21#.#32.175.99':445
'21#.#32.12.134':445
'21#.#32.167.0':445
'21#.#32.39.84':445
'21#.#32.120.60':445
'21#.#32.85.120':445
'21#.#32.33.85':445
'21#.#32.224.253':139
'21#.#32.125.178':139
'21#.#32.59.11':139
'21#.#32.5.119':139
'21#.#32.131.40':139
'21#.#32.205.227':139
'21#.#32.175.99':139
'21#.#32.88.179':139
'21#.#32.146.106':139
'21#.#32.10.254':139
'21#.#32.157.80':139
'21#.#32.38.159':139
'21#.#32.155.225':139
'21#.#32.17.163':139
'21#.#32.143.9':139
'21#.#32.190.111':139
'21#.#32.254.190':139
'21#.#32.28.119':139
'21#.#32.167.224':139
'21#.#32.182.22':445
'21#.#32.174.197':445
'21#.#32.121.55':445
'21#.#32.240.86':445
'21#.#32.19.25':445
'21#.#32.56.242':445
'21#.#32.38.147':445
'21#.#32.57.42':445
'21#.#32.203.169':445
'21#.#32.245.15':445
'21#.#32.12.134':139
'21#.#32.120.60':139
'21#.#32.182.32':139
'21#.#32.66.57':139
'21#.#32.85.120':139
'21#.#32.134.155':445
'21#.#32.32.82':445
'21#.#32.167.0':139
'21#.#32.39.84':139
'21#.#32.58.4':139
'21#.#32.131.148':445
'21#.#32.255.118':445
'21#.#32.219.118':139
'21#.#32.128.174':139
'21#.#32.226.198':445
'21#.#32.50.226':445
'21#.#32.179.246':445
'21#.#32.118.81':445
'21#.#32.225.187':445
'21#.#32.170.23':139
'21#.#32.15.28':139
'21#.#32.161.15':139
'21#.#32.189.230':139
'21#.#32.79.120':139
'21#.#32.224.160':139
'21#.#32.1.209':139
'21#.#32.112.36':139
'21#.#32.37.225':139
'21#.#32.173.37':139
'21#.#32.211.223':445
'21#.#32.133.51':445
'21#.#32.5.243':445
'21#.#32.46.67':445
'21#.#32.109.25':445
'21#.#32.197.203':445
'21#.#32.211.112':445
'21#.#32.27.66':445
'21#.#32.3.233':445
'21#.#32.243.21':445
'21#.#32.101.93':445
'21#.#32.171.215':445
'21#.#32.159.194':445
'21#.#32.236.217':445
'21#.#32.130.172':445
'21#.#32.151.29':445
'21#.#32.22.137':445
'21#.#32.131.130':445
'21#.#32.240.2':445
'21#.#32.66.170':139
'21#.#32.131.130':139
'21#.#32.240.2':139
'21#.#32.171.215':139
'21#.#32.130.172':139
'21#.#32.151.29':139
'21#.#32.5.243':139
'21#.#32.46.67':139
'21#.#32.22.137':139
'21#.#32.243.21':139
'21#.#32.101.93':139
'21#.#32.226.198':139
'21#.#32.118.81':139
'21#.#32.225.187':139
'21#.#32.131.148':139
'21#.#32.255.118':139
'21#.#32.159.194':139
'21#.#32.236.217':139
'21#.#32.50.226':139
'21#.#32.179.246':139
'21#.#32.231.145':139
'21#.#32.112.231':139
'21#.#32.25.122':139
'21#.#32.197.146':139
'21#.#32.97.112':139
'21#.#32.230.150':139
'21#.#32.104.127':139
'21#.#32.218.224':139
'21#.#32.86.4':139
'21#.#32.193.51':139
'21#.#32.109.25':139
'21#.#32.27.66':139
'21#.#32.211.223':139
'21#.#32.133.51':139
'21#.#32.3.233':139
'21#.#32.48.212':139
'21#.#32.26.200':139
'21#.#32.197.203':139
'21#.#32.211.112':139
'21#.#32.48.212':445
'21#.#32.73.226':139
'21#.#32.27.6':139
'21#.#32.147.28':139
'21#.#32.243.146':139
'21#.#32.43.33':139
'21#.#32.78.128':139
'21#.#32.71.126':139
'21#.#32.57.126':139
'21#.#32.133.154':139
'21#.#32.156.192':139
'21#.#32.118.123':139
'21#.#32.68.118':139
'21#.#32.209.71':139
'21#.#32.122.209':139
'21#.#32.40.68':139
'21#.#32.151.60':139
'21#.#32.240.35':139
'21#.#32.118.3':139
'21#.#32.160.115':139
'21#.#32.178.27':139
'21#.#32.67.85':139
'21#.#32.174.7':139
'21#.#32.200.119':139
'21#.#32.87.164':139
'21#.#32.241.141':139
'21#.#32.120.121':139
'21#.#32.51.14':139
'21#.#32.116.132':139
'21#.#32.7.145':139
'21#.#32.237.204':139
'21#.#32.0.217':139
'21#.#32.143.2':139
'21#.#32.185.142':139
'21#.#32.93.71':139
'21#.#32.129.172':139
'21#.#32.144.105':139
'21#.#32.250.129':139
'21#.#32.185.250':139
'21#.#32.128.174':9988
'21#.#32.189.230':445
'21#.#32.79.120':445
'21#.#32.104.127':445
'21#.#32.66.170':445
'21#.#32.15.28':445
'21#.#32.37.225':445
'21#.#32.173.37':445
'21#.#32.161.15':445
'21#.#32.224.160':445
'21#.#32.230.150':445
'21#.#32.25.122':445
'21#.#32.197.146':445
'21#.#32.26.200':445
'21#.#32.193.51':445
'21#.#32.231.145':445
'21#.#32.218.224':445
'21#.#32.86.4':445
'21#.#32.112.231':445
'21#.#32.97.112':445
'21#.#32.243.21':9988
'21#.#32.133.51':9988
'21#.#32.130.172':9988
'21#.#32.240.2':9988
'21#.#32.109.25':9988
'21#.#32.170.23':9988
'21#.#32.219.118':9988
'21#.#32.48.212':9988
'21#.#32.112.36':9988
'21#.#32.171.215':9988
'21#.#32.170.23':445
'21#.#32.219.118':445
'21#.#32.1.209':445
'21#.#32.112.36':445
'21#.#32.128.174':445
'21#.#32.226.198':9988
'21#.#32.50.226':9988
'21#.#32.179.246':9988
'21#.#32.131.148':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней