Trojan.Starman.5253

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER391c.dir00\svchost.exe.mdmp 16325836412030180

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER391c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'63.##0.94.124':139
'63.##0.189.71':139
'63.##0.213.164':139
'63.##0.107.143':139
'63.##0.102.67':139
'63.##0.124.237':139
'63.##0.126.28':139
'63.##0.76.230':139
'63.##0.218.184':139
'63.##0.17.236':139
'63.##0.81.66':139
'63.##0.153.88':139
'63.##0.14.115':139
'63.##0.92.180':139
'63.##0.70.110':139
'63.##0.171.70':139
'63.##0.128.79':139
'63.##0.218.193':139
'63.##0.79.24':139
'63.##0.182.181':139
'63.##0.47.182':139
'63.##0.165.164':139
'63.##0.7.142':445
'63.##0.70.110':445
'63.##0.98.136':445
'63.##0.131.229':445
'63.##0.1.253':445
'63.##0.14.115':445
'63.##0.182.181':445
'63.##0.153.88':445
'63.##0.171.70':445
'63.##0.92.180':445
'63.##0.61.198':445
'63.##0.81.162':139
'63.##0.137.37':139
'63.##0.134.10':139
'63.##0.176.247':139
'63.##0.10.177':139
'63.##0.217.236':445
'63.##0.35.120':445
'63.##0.237.7':445
'63.##0.93.223':139
'63.##0.145.58':139
'63.##0.7.142':139
'63.##0.74.95':139
'63.##0.63.74':139
'63.##0.114.171':139
'63.##0.5.187':139
'63.##0.248.132':139
'63.##0.230.136':139
'63.##0.210.230':139
'63.##0.136.124':139
'63.##0.130.51':139
'63.##0.29.209':139
'63.##0.186.149':139
'63.##0.130.175':445
'63.##0.48.172':445
'63.##0.175.154':445
'63.##0.203.75':445
'63.##0.214.18':445
'63.##0.248.235':139
'63.##0.149.248':139
'63.##0.120.155':445
'63.#50.26.4':445
'63.##0.105.25':445
'63.##0.8.211':139
'63.##0.237.7':139
'63.##0.217.236':139
'63.##0.8.211':445
'63.##0.230.136':445
'63.##0.210.230':445
'63.##0.1.253':139
'63.##0.98.136':139
'63.##0.131.229':139
'63.##0.35.120':139
'63.##0.61.198':139
'63.##0.136.124':445
'63.##0.5.187':445
'63.##0.248.132':445
'63.##0.186.149':445
'63.##0.248.235':445
'63.##0.149.248':445
'63.##0.130.51':445
'63.##0.29.209':445
'63.##0.63.74':445
'63.##0.114.171':445
'63.##0.74.95':445
'63.##0.47.182':445
'63.##0.86.208':139
'63.##0.145.223':139
'63.##0.208.119':139
'63.##0.194.123':139
'63.##0.167.140':139
'63.##0.139.35':139
'63.##0.170.214':139
'63.##0.171.82':139
'63.##0.234.67':139
'63.##0.179.174':139
'63.##0.178.217':139
'63.##0.255.182':445
'63.##0.111.186':445
'63.##0.183.117':445
'63.##0.243.181':445
'63.##0.159.96':445
'63.##0.180.222':139
'63.##0.89.194':139
'63.##0.223.77':139
'63.##0.77.216':445
'63.##0.40.89':139
'63.##0.124.160':139
'63.##0.115.7':139
'63.##0.105.32':139
'63.##0.7.172':139
'63.##0.42.94':139
'63.##0.219.102':139
'63.##0.209.26':139
'63.##0.24.131':139
'63.##0.26.105':139
'63.##0.200.217':139
'63.##0.105.88':139
'63.##0.127.211':139
'63.##0.199.139':139
'63.##0.188.254':139
'63.##0.76.202':139
'63.##0.212.153':139
'63.##0.74.12':139
'63.##0.209.42':139
'63.##0.3.129':139
'63.##0.250.123':139
'63.##0.51.122':139
'63.##0.91.51':139
'63.##0.68.42':445
'63.##0.165.164':445
'63.##0.176.247':445
'63.##0.126.28':445
'63.##0.76.230':445
'63.##0.124.237':445
'63.##0.137.37':445
'63.##0.93.223':445
'63.##0.81.162':445
'63.##0.10.177':445
'63.##0.134.10':445
'63.##0.17.236':445
'63.##0.81.66':445
'63.##0.107.143':445
'63.##0.218.193':445
'63.##0.79.24':445
'63.##0.128.79':445
'63.##0.189.71':445
'63.##0.218.184':445
'63.##0.94.124':445
'63.##0.102.67':445
'63.##0.213.164':445
'63.##0.145.58':445
'63.##0.151.145':445
'63.##0.88.151':445
'63.##0.77.216':139
'63.##0.255.182':139
'63.##0.111.186':139
'63.##0.190.139':445
'63.##0.170.57':445
'63.##0.114.143':445
'63.#50.7.21':445
'63.##0.166.129':445
'63.##0.183.117':139
'63.##0.166.129':139
'63.##0.114.143':139
'63.#50.7.21':139
'63.##0.151.145':139
'63.##0.88.151':139
'63.##0.243.181':139
'63.##0.159.96':139
'63.##0.68.42':139
'63.##0.190.139':139
'63.##0.170.57':139
'63.##0.25.146':445
'63.##0.130.154':445
'63.##0.109.215':445
'63.##0.235.5':445
'63.##0.34.130':445
'63.##0.106.198':445
'63.##0.202.106':445
'63.##0.98.22':445
'63.##0.11.181':445
'63.##0.43.86':445
'63.##0.149.22':445
'63.##0.217.241':139
'63.#50.91.7':139
'63.##0.6.247':139
'63.##0.218.182':139
'63.##0.54.33':139
'63.##0.147.130':445
'63.##0.241.158':445
'63.##0.130.39':445
'63.##0.40.202':139
'63.##0.106.74':139
'63.##0.33.136':445
'63.##0.133.77':445
'63.##0.151.94':445
'63.##0.180.101':445
'63.##0.37.233':445
'63.##0.79.58':445
'63.##0.158.215':445
'63.##0.44.137':445
'63.##0.2.228':445
'63.##0.231.151':445
'63.##0.88.218':445
'63.##0.101.69':445
'63.##0.100.214':445
'63.##0.10.101':445
'63.##0.189.36':445
'63.##0.146.235':445
'63.##0.106.139':445
'63.##0.2.107':445
'63.##0.111.40':445
'63.##0.82.49':445
'63.#50.82.4':445
'63.##0.247.10':445
'63.##0.133.191':139
'63.##0.33.136':139
'63.##0.146.235':139
'63.##0.202.106':139
'63.##0.98.22':139
'63.##0.106.198':139
'63.##0.10.101':139
'63.##0.247.10':139
'63.##0.100.214':139
'63.##0.106.139':139
'63.##0.189.36':139
'63.##0.43.86':139
'63.##0.149.22':139
'63.##0.34.130':139
'63.##0.235.5':139
'63.##0.130.39':139
'63.##0.241.158':139
'63.##0.130.154':139
'63.##0.11.181':139
'63.##0.25.146':139
'63.##0.147.130':139
'63.##0.109.215':139
'63.#50.82.4':139
'63.##0.254.44':139
'63.##0.44.247':139
'63.##0.44.137':139
'63.##0.2.228':139
'63.##0.158.215':139
'63.##0.65.39':139
'63.##0.194.244':139
'63.##0.175.96':139
'63.##0.101.217':139
'63.##0.236.74':139
'63.##0.88.218':139
'63.##0.101.69':139
'63.##0.37.233':139
'63.##0.111.40':139
'63.##0.82.49':139
'63.##0.2.107':139
'63.##0.151.94':139
'63.##0.231.151':139
'63.##0.133.77':139
'63.##0.79.58':139
'63.##0.180.101':139
'63.##0.254.44':445
'63.##0.189.99':445
'63.##0.119.200':445
'63.##0.120.155':139
'63.#50.26.4':139
'63.##0.105.25':139
'63.##0.111.216':445
'63.##0.139.202':445
'63.##0.215.187':445
'63.#50.37.8':445
'63.##0.187.30':445
'63.##0.48.172':139
'63.##0.143.91':139
'63.##0.29.229':139
'63.##0.82.241':139
'63.##0.48.112':139
'63.#50.7.14':139
'63.##0.175.154':139
'63.##0.130.175':139
'63.##0.214.18':139
'63.##0.237.144':139
'63.##0.203.75':139
'63.##0.192.238':445
'63.##0.105.67':445
'63.##0.48.112':445
'63.##0.69.247':445
'63.#50.5.25':445
'63.##0.235.63':445
'63.##0.29.229':445
'63.##0.237.144':445
'63.##0.143.91':445
'63.#50.7.14':445
'63.##0.82.241':445
'63.##0.177.161':445
'63.##0.29.103':445
'63.##0.113.95':445
'63.##0.246.146':445
'63.##0.80.192':445
'63.#50.8.57':445
'63.##0.59.28':445
'63.##0.62.81':445
'63.##0.8.136':445
'63.##0.179.13':445
'63.##0.45.244':445
'63.##0.105.67':139
'63.##0.130.39':9988
'63.##0.109.215':9988
'63.##0.106.74':445
'63.#50.91.7':445
'63.##0.40.202':445
'63.##0.146.235':9988
'63.#50.82.4':9988
'63.##0.33.136':9988
'63.##0.43.86':9988
'63.##0.202.106':9988
'63.##0.217.241':445
'63.##0.175.96':445
'63.##0.65.39':445
'63.##0.236.74':445
'63.##0.44.247':445
'63.##0.101.217':445
'63.##0.54.33':445
'63.##0.6.247':445
'63.##0.218.182':445
'63.##0.194.244':445
'63.##0.133.191':445
'63.##0.189.99':139
'63.##0.8.136':139
'63.##0.59.28':139
'63.##0.45.244':139
'63.##0.113.95':139
'63.##0.179.13':139
'63.##0.235.63':139
'63.##0.69.247':139
'63.#50.5.25':139
'63.##0.62.81':139
'63.##0.177.161':139
'63.##0.29.103':139
'63.##0.215.187':139
'63.##0.111.216':139
'63.##0.187.30':139
'63.##0.119.200':139
'63.#50.37.8':139
'63.#50.8.57':139
'63.##0.246.146':139
'63.##0.80.192':139
'63.##0.139.202':139
'63.##0.192.238':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней