Trojan.Starman.5033

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER4fc8.dir00\svchost.exe.mdmp 16325836412032044

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WER4fc8.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'21#.#44.129.169':139
'21#.#44.63.163':139
'21#.#44.148.121':139
'21#.#44.192.155':139
'21#.#44.92.248':139
'21#.#44.198.150':445
'21#.#44.148.121':445
'21#.#44.130.77':445
'21#.#44.79.82':445
'21#.#44.99.5':445
'21#.#44.21.60':445
'21#.#44.89.227':445
'21#.#44.213.175':445
'21#.#44.1.24':445
'21#.#44.79.82':139
'21#.#44.198.150':139
'21#.#44.22.177':445
'21#.#44.130.77':139
'21#.#44.192.155':445
'21#.#44.118.49':139
'21#.#44.207.35':139
'21#.#44.84.164':139
'21#.#44.241.98':139
'21#.#44.94.214':139
'21#.#44.156.123':139
'21#.#44.7.156':139
'21#.#44.197.31':139
'21#.#44.123.144':139
'21#.#44.92.248':445
'21#.#44.108.142':139
'21#.#44.129.169':445
'21#.#44.63.163':445
'21#.#44.111.41':139
'21#.#44.75.244':139
'21#.#44.127.115':139
'21#.#44.231.110':139
'21#.#44.243.230':139
'21#.#44.81.90':445
'21#.#44.56.97':445
'21#.#44.107.41':445
'21#.#44.48.108':445
'21#.#44.245.0':445
'21#.#44.59.131':445
'21#.#44.120.9':445
'21#.#44.179.203':445
'21#.#44.40.88':445
'21#.#44.98.59':445
'21#.#44.45.94':445
'21#.#44.48.45':445
'21#.#44.117.152':445
'21#.#44.38.227':445
'21#.#44.20.96':445
'21#.#44.12.234':445
'21#.#44.53.237':445
'21#.#44.203.132':445
'21#.#44.46.169':445
'21#.#44.87.139':445
'21#.#44.14.55':445
'21#.#44.50.97':445
'21#.#44.103.175':445
'21#.#44.153.220':445
'21#.#44.102.89':445
'21#.#44.59.146':445
'21#.#44.2.40':445
'21#.#44.135.162':445
'21#.#44.29.132':445
'21#.#44.164.29':445
'21#.#44.137.87':445
'21#.#44.222.50':445
'21#.#44.82.207':445
'21#.#44.27.181':445
'21#.#44.228.163':445
'21#.#44.112.112':445
'21#.#44.180.225':445
'21#.#44.165.7':139
'21#.#44.31.87':445
'21#.#44.2.196':445
'21#.#44.75.142':445
'21#.#44.75.250':445
'21#.#44.103.127':445
'21#.#44.165.11':445
'21#.#44.8.137':445
'21#.#44.217.97':445
'21#.#44.3.98':445
'21#.#44.123.144':445
'21#.#44.156.123':445
'21#.#44.94.214':445
'21#.#44.197.31':445
'21#.#44.7.156':445
'21#.#44.22.122':445
'21#.#44.46.209':445
'21#.#44.165.7':445
'21#.#44.80.200':445
'21#.#44.173.148':445
'21#.#44.129.238':445
'21#.#44.38.33':445
'21#.#44.70.129':445
'21#.#44.63.117':445
'21#.#44.128.147':445
'21#.#44.18.129':139
'21#.#44.78.178':139
'21#.#44.182.195':139
'21#.#44.230.237':139
'21#.#44.250.33':445
'21#.#44.64.49':445
'21#.#44.66.45':445
'21#.#44.89.108':445
'21#.#44.166.74':445
'21#.#44.36.86':445
'21#.#44.129.190':445
'21#.#44.130.123':445
'21#.#44.118.112':445
'21#.#44.8.137':139
'21#.#44.173.148':139
'21#.#44.3.98':139
'21#.#44.165.11':139
'21#.#44.66.45':139
'21#.#44.64.49':139
'21#.#44.166.74':139
'21#.#44.89.108':139
'21#.#44.250.33':139
'21#.#44.46.209':139
'21#.#44.75.142':139
'21#.#44.80.200':139
'21#.#44.22.122':139
'21#.#44.75.250':139
'21#.#44.103.127':139
'21#.#44.217.97':139
'21#.#44.31.87':139
'21#.#44.2.196':139
'21#.#44.130.123':139
'21#.#44.243.230':445
'21#.#44.75.244':445
'21#.#44.111.41':445
'21#.#44.231.110':445
'21#.#44.127.115':445
'21#.#44.118.49':445
'21#.#44.207.35':445
'21#.#44.84.164':445
'21#.#44.241.98':445
'21#.#44.129.190':139
'21#.#44.70.129':139
'21#.#44.118.112':139
'21#.#44.36.86':139
'21#.#44.63.117':139
'21#.#44.128.147':139
'21#.#44.108.142':445
'21#.#44.129.238':139
'21#.#44.38.33':139
'21#.#44.138.10':139
'21#.#44.188.192':139
'21#.#44.89.131':139
'21#.#44.10.216':139
'21#.#44.198.37':139
'21#.#44.205.43':445
'21#.#44.141.77':445
'21#.#44.94.184':445
'21#.#44.108.160':445
'21#.#44.60.195':139
'21#.#44.35.61':139
'21#.#44.66.157':139
'21#.#44.194.196':139
'21#.#44.50.251':139
'21#.#44.39.56':139
'21#.#44.130.103':139
'21#.#44.46.94':139
'21#.#44.53.223':139
'21#.#44.32.215':445
'21#.#44.118.129':445
'21#.#44.181.118':445
'21#.#44.22.12':445
'21#.#44.44.200':445
'21#.#44.112.58':445
'21#.#44.52.127':445
'21#.#44.246.75':445
'21#.#44.255.127':445
'21#.#44.68.214':445
'21#.#44.141.205':445
'21#.#44.57.12':445
'21#.#44.246.82':445
'21#.#44.184.31':445
'21#.#44.190.141':445
'21#.#44.77.243':445
'21#.#44.128.23':445
'21#.#44.93.97':445
'21#.#44.64.196':445
'21#.#44.184.31':139
'21#.#44.32.215':139
'21#.#44.205.43':139
'21#.#44.64.196':139
'21#.#44.44.200':139
'21#.#44.22.12':139
'21#.#44.112.58':139
'21#.#44.128.23':139
'21#.#44.255.127':139
'21#.#44.77.243':139
'21#.#44.190.141':139
'21#.#44.246.82':139
'21#.#44.141.77':139
'21#.#44.93.97':139
'21#.#44.108.160':139
'21#.#44.57.12':139
'21#.#44.94.184':139
'21#.#44.141.205':139
'21#.#44.181.118':139
'21#.#44.175.174':139
'21#.#44.20.28':139
'21#.#44.231.158':139
'21#.#44.215.185':139
'21#.#44.138.235':139
'21#.#44.124.155':139
'21#.#44.106.43':139
'21#.#44.15.126':139
'21#.#44.142.216':139
'21#.#44.52.127':139
'21#.#44.246.75':139
'21#.#44.118.129':139
'21#.#44.68.214':139
'21#.#44.57.83':139
'21#.#44.156.253':139
'21#.#44.31.240':139
'21#.#44.209.57':139
'21#.#44.72.209':139
'21#.#44.57.83':445
'21#.#44.59.131':139
'21#.#44.137.87':139
'21#.#44.40.88':139
'21#.#44.120.9':139
'21#.#44.46.169':139
'21#.#44.164.29':139
'21#.#44.82.207':139
'21#.#44.222.50':139
'21#.#44.29.132':139
'21#.#44.12.234':139
'21#.#44.107.41':139
'21#.#44.203.132':139
'21#.#44.20.96':139
'21#.#44.48.108':139
'21#.#44.245.0':139
'21#.#44.179.203':139
'21#.#44.81.90':139
'21#.#44.56.97':139
'21#.#44.112.112':139
'21#.#44.59.146':139
'21#.#44.89.227':139
'21#.#44.135.162':139
'21#.#44.102.89':139
'21#.#44.99.5':139
'21#.#44.1.24':139
'21#.#44.22.177':139
'21#.#44.213.175':139
'21#.#44.21.60':139
'21#.#44.228.163':139
'21#.#44.103.175':139
'21#.#44.180.225':139
'21#.#44.27.181':139
'21#.#44.50.97':139
'21#.#44.14.55':139
'21#.#44.2.40':139
'21#.#44.87.139':139
'21#.#44.153.220':139
'21#.#44.124.155':445
'21#.#44.194.196':445
'21#.#44.138.235':445
'21#.#44.142.216':445
'21#.#44.106.43':445
'21#.#44.46.94':445
'21#.#44.35.61':445
'21#.#44.66.157':445
'21#.#44.60.195':445
'21#.#44.72.209':445
'21#.#44.231.158':445
'21#.#44.156.253':445
'21#.#44.209.57':445
'21#.#44.31.240':445
'21#.#44.175.174':445
'21#.#44.15.126':445
'21#.#44.215.185':445
'21#.#44.20.28':445
'21#.#44.50.251':445
'21#.#44.93.97':9988
'21#.#44.48.45':139
'21#.#44.32.215':9988
'21#.#44.108.160':9988
'21#.#44.117.152':139
'21#.#44.38.227':139
'21#.#44.53.237':139
'21#.#44.98.59':139
'21#.#44.45.94':139
'21#.#44.130.103':445
'21#.#44.89.131':445
'21#.#44.53.223':445
'21#.#44.39.56':445
'21#.#44.138.10':445
'21#.#44.198.37':445
'21#.#44.205.43':9988
'21#.#44.10.216':445
'21#.#44.188.192':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней