Trojan.Starman.5289

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER2ef1.dir00\svchost.exe.mdmp 16325836412032160

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2ef1.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'80.##0.62.26':139
'80.##0.13.222':139
'80.##0.27.225':139
'80.##0.151.128':139
'80.##0.153.151':139
'80.##0.12.121':139
'80.##0.188.104':139
'80.##0.239.146':139
'80.##0.69.223':139
'80.##0.77.79':139
'80.##0.22.68':139
'80.##0.69.135':139
'80.##0.180.69':139
'80.##0.15.104':139
'80.##0.187.116':139
'80.##0.19.126':139
'80.##0.4.167':139
'80.##0.214.60':139
'80.##0.20.70':139
'80.##0.130.180':139
'80.##0.179.86':139
'80.##0.126.108':139
'80.##0.214.60':445
'80.##0.22.68':445
'80.##0.4.167':445
'80.##0.179.86':445
'80.##0.20.70':445
'80.##0.62.26':445
'80.##0.13.222':445
'80.##0.27.225':445
'80.##0.151.128':445
'80.##0.153.151':445
'80.##0.130.180':445
'80.##0.23.71':139
'80.##0.95.156':139
'80.##0.116.42':139
'80.##0.203.166':139
'80.##0.166.149':139
'80.##0.69.135':445
'80.##0.180.69':445
'80.##0.15.104':445
'80.##0.187.116':445
'80.##0.19.126':445
'80.##0.233.164':139
'80.##0.58.50':139
'80.#20.74.8':139
'80.##0.203.52':139
'80.##0.146.146':139
'80.##0.57.83':445
'80.##0.166.99':445
'80.##0.137.134':139
'80.##0.85.193':139
'80.##0.143.248':139
'80.#20.53.8':139
'80.##0.27.54':139
'80.##0.212.205':139
'80.##0.27.243':139
'80.##0.25.130':139
'80.##0.24.62':139
'80.##0.16.127':139
'80.##0.176.66':139
'80.##0.63.203':139
'80.##0.98.10':139
'80.##0.203.97':139
'80.##0.40.104':445
'80.##0.146.146':445
'80.#20.74.8':445
'80.##0.203.52':445
'80.##0.176.66':445
'80.#20.53.8':445
'80.##0.143.248':445
'80.##0.137.134':445
'80.##0.85.193':445
'80.##0.233.164':445
'80.##0.58.50':445
'80.##0.16.127':445
'80.##0.24.62':445
'80.##0.27.243':445
'80.##0.25.130':445
'80.##0.109.109':445
'80.##0.94.202':445
'80.##0.203.97':445
'80.##0.63.203':445
'80.##0.98.10':445
'80.##0.27.54':445
'80.##0.212.205':445
'80.##0.221.171':445
'80.##0.132.144':445
'80.##0.171.251':445
'80.##0.70.188':445
'80.##0.32.95':445
'80.##0.84.237':139
'80.##0.231.169':139
'80.##0.63.14':139
'80.##0.46.193':139
'80.##0.14.47':139
'80.##0.28.249':445
'80.##0.10.190':445
'80.##0.30.216':445
'80.##0.55.118':445
'80.##0.7.110':445
'80.##0.55.176':445
'80.##0.79.248':445
'80.##0.53.30':445
'80.##0.175.209':445
'80.##0.111.204':445
'80.##0.159.21':445
'80.##0.233.162':139
'80.##0.95.225':139
'80.##0.26.21':139
'80.##0.88.242':139
'80.##0.118.8':139
'80.##0.172.6':139
'80.##0.28.93':139
'80.##0.222.186':139
'80.##0.93.158':139
'80.##0.188.2':139
'80.##0.158.187':139
'80.##0.155.80':139
'80.##0.36.126':139
'80.##0.139.36':139
'80.##0.189.208':139
'80.##0.160.221':139
'80.##0.79.20':139
'80.##0.56.64':139
'80.##0.141.213':139
'80.##0.96.242':139
'80.##0.180.216':139
'80.##0.161.187':139
'80.##0.232.36':139
'80.##0.67.30':139
'80.##0.72.83':139
'80.##0.27.198':139
'80.##0.83.28':139
'80.##0.7.110':139
'80.##0.55.176':139
'80.##0.110.97':139
'80.##0.70.232':139
'80.##0.165.140':139
'80.##0.95.156':445
'80.##0.12.121':445
'80.##0.188.104':445
'80.##0.239.146':445
'80.##0.69.223':445
'80.##0.77.79':445
'80.##0.116.42':445
'80.##0.23.71':445
'80.##0.166.149':445
'80.##0.126.108':445
'80.##0.203.166':445
'80.##0.55.118':139
'80.##0.83.28':445
'80.##0.72.83':445
'80.##0.27.198':445
'80.##0.221.171':139
'80.##0.132.144':139
'80.##0.165.140':445
'80.##0.110.97':445
'80.##0.70.232':445
'80.##0.232.36':445
'80.##0.67.30':445
'80.##0.171.251':139
'80.##0.159.21':139
'80.##0.175.209':139
'80.##0.111.204':139
'80.##0.10.190':139
'80.##0.30.216':139
'80.##0.70.188':139
'80.##0.32.95':139
'80.##0.28.249':139
'80.##0.79.248':139
'80.##0.53.30':139
'80.##0.94.202':139
'80.##0.142.66':445
'80.##0.176.116':445
'80.##0.95.34':445
'80.##0.130.174':445
'80.##0.118.181':445
'80.##0.139.73':445
'80.##0.227.181':445
'80.##0.254.69':445
'80.##0.151.73':445
'80.##0.44.148':445
'80.##0.242.146':445
'80.#20.9.35':139
'80.##0.252.148':139
'80.##0.234.116':139
'80.##0.90.146':139
'80.##0.192.190':139
'80.##0.116.68':445
'80.##0.11.100':445
'80.##0.243.99':139
'80.#20.1.45':139
'80.##0.238.213':139
'80.##0.217.39':445
'80.##0.69.140':445
'80.##0.33.198':445
'80.#20.14.2':445
'80.##0.75.224':445
'80.##0.15.136':445
'80.##0.164.144':445
'80.#20.6.51':445
'80.##0.191.189':445
'80.##0.75.42':445
'80.##0.77.75':445
'80.#20.1.73':445
'80.##0.27.129':445
'80.##0.14.96':445
'80.##0.129.54':445
'80.##0.222.101':445
'80.##0.217.87':445
'80.##0.163.138':445
'80.##0.187.230':445
'80.##0.171.34':445
'80.##0.100.205':445
'80.##0.58.253':445
'80.##0.222.101':139
'80.##0.217.87':139
'80.##0.217.39':139
'80.##0.139.73':139
'80.##0.227.181':139
'80.##0.100.205':139
'80.##0.58.253':139
'80.##0.14.96':139
'80.##0.129.54':139
'80.##0.27.129':139
'80.##0.254.69':139
'80.##0.130.174':139
'80.##0.116.68':139
'80.##0.11.100':139
'80.##0.242.146':139
'80.##0.95.34':139
'80.##0.151.73':139
'80.##0.44.148':139
'80.##0.176.116':139
'80.##0.118.181':139
'80.##0.142.66':139
'80.##0.171.34':139
'80.##0.156.203':139
'80.##0.90.118':139
'80.##0.10.180':139
'80.##0.164.144':139
'80.#20.6.51':139
'80.##0.99.26':139
'80.##0.105.179':139
'80.##0.36.213':139
'80.##0.111.69':139
'80.##0.159.252':139
'80.##0.191.189':139
'80.##0.75.224':139
'80.##0.15.136':139
'80.#20.1.73':139
'80.##0.163.138':139
'80.##0.187.230':139
'80.##0.75.42':139
'80.##0.77.75':139
'80.##0.33.198':139
'80.#20.14.2':139
'80.##0.69.140':139
'80.##0.255.241':445
'80.##0.199.207':445
'80.##0.36.50':445
'80.##0.129.186':139
'80.##0.234.153':445
'80.##0.207.223':445
'80.##0.13.66':445
'80.##0.83.165':445
'80.##0.138.85':445
'80.##0.214.89':445
'80.##0.45.154':139
'80.##0.25.116':139
'80.##0.163.24':139
'80.##0.116.7':139
'80.##0.233.221':139
'80.#20.7.53':139
'80.##0.27.73':139
'80.##0.154.26':139
'80.##0.72.153':139
'80.##0.234.163':139
'80.##0.152.234':139
'80.##0.184.139':445
'80.##0.154.26':445
'80.##0.45.154':445
'80.##0.27.73':445
'80.##0.152.234':445
'80.##0.72.153':445
'80.##0.40.104':139
'80.##0.109.109':139
'80.##0.166.99':139
'80.##0.129.186':445
'80.##0.57.83':139
'80.##0.234.163':445
'80.##0.13.71':445
'80.##0.220.46':445
'80.##0.90.206':445
'80.##0.78.185':445
'80.##0.200.78':445
'80.##0.25.116':445
'80.##0.163.24':445
'80.##0.116.7':445
'80.##0.233.221':445
'80.#20.7.53':445
'80.##0.238.213':445
'80.##0.243.99':445
'80.#20.1.45':445
'80.#20.9.35':445
'80.##0.252.148':445
'80.##0.116.68':9988
'80.##0.176.116':9988
'80.##0.11.100':9988
'80.##0.118.181':9988
'80.##0.130.174':9988
'80.##0.234.116':445
'80.##0.111.69':445
'80.##0.159.252':445
'80.##0.90.118':445
'80.##0.10.180':445
'80.##0.156.203':445
'80.##0.90.146':445
'80.##0.192.190':445
'80.##0.105.179':445
'80.##0.36.213':445
'80.##0.99.26':445
'80.##0.44.148':9988
'80.##0.13.66':139
'80.##0.184.139':139
'80.##0.207.223':139
'80.##0.214.89':139
'80.##0.83.165':139
'80.##0.13.71':139
'80.##0.220.46':139
'80.##0.90.206':139
'80.##0.78.185':139
'80.##0.200.78':139
'80.##0.138.85':139
'80.##0.171.34':9988
'80.#20.14.2':9988
'80.##0.27.129':9988
'80.##0.227.181':9988
'80.##0.217.87':9988
'80.##0.255.241':139
'80.##0.199.207':139
'80.##0.36.50':139
'80.##0.69.140':9988
'80.##0.234.153':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней