Trojan.Starman.5171

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERb0d0.dir00\svchost.exe.mdmp 16325836412028852

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb0d0.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'63.#.35.131':139
'63.#.112.35':139
'63.#.131.109':139
'63.#.191.23':139
'63.#.109.191':139
'63.#.183.173':139
'63.#.53.103':139
'63.#.207.71':139
'63.#.216.169':139
'63.#.20.247':139
'63.#.23.109':139
'63.#.79.21':139
'63.#.84.234':139
'63.#.54.205':139
'63.#.125.47':139
'63.#.153.60':139
'63.#.12.180':139
'63.#.122.185':139
'63.#.96.50':139
'63.#.45.69':139
'63.#.123.1':139
'63.#.125.47':445
'63.#.153.60':445
'63.#.47.57':445
'63.#.122.88':445
'63.#.57.25':445
'63.#.45.69':445
'63.#.123.1':445
'63.#.84.234':445
'63.#.54.205':445
'63.#.79.21':445
'63.#.36.111':445
'63.#.106.121':139
'63.#.23.122':445
'63.#.205.17':139
'63.#.50.53':139
'63.#.1.47':139
'63.#.160.216':445
'63.#.24.194':445
'63.#.59.19':445
'63.#.173.142':445
'63.#.72.63':445
'63.#.47.57':139
'63.#.75.235':139
'63.#.209.75':139
'63.#.128.229':139
'63.#.61.97':139
'63.#.59.180':139
'63.#.107.116':445
'63.#.92.95':445
'63.#.23.135':445
'63.#.42.203':139
'63.#.216.38':445
'63.#.227.115':139
'63.#.107.116':139
'63.#.92.95':139
'63.#.23.135':139
'63.#.240.251':445
'63.#.216.38':139
'63.#.121.34':139
'63.#.216.143':139
'63.#.35.177':139
'63.#.133.81':139
'63.#.64.133':139
'63.#.72.63':139
'63.#.59.19':139
'63.#.173.142':139
'63.#.42.203':445
'63.#.23.122':139
'63.#.122.88':139
'63.#.57.25':139
'63.#.36.111':139
'63.#.160.216':139
'63.#.24.194':139
'63.#.209.75':445
'63.#.121.34':445
'63.#.216.143':445
'63.#.35.177':445
'63.#.133.81':445
'63.#.64.133':445
'63.#.128.229':445
'63.#.75.235':445
'63.#.59.180':445
'63.#.227.115':445
'63.#.61.97':445
'63.#.198.122':139
'63.#.110.233':139
'63.#.55.189':139
'63.#.216.166':139
'63.#.57.99':139
'63.#.145.168':139
'63.#.62.173':139
'63.#.168.214':139
'63.#.163.7':139
'63.#.132.0':139
'63.#.64.36':139
'63.#.38.76':445
'63.#.62.73':445
'63.#.249.82':445
'63.#.239.176':445
'63.#.68.181':445
'63.#.7.221':139
'63.#.241.7':139
'63.#.220.33':139
'63.#.90.96':445
'63.#.46.109':445
'63.#.81.188':139
'63.#.248.81':139
'63.#.189.22':139
'63.#.151.161':139
'63.#.22.151':139
'63.#.236.134':139
'63.#.11.41':139
'63.#.135.23':139
'63.#.125.46':139
'63.#.139.158':139
'63.#.8.145':139
'63.#.58.200':139
'63.#.113.89':139
'63.#.135.152':139
'63.#.161.228':139
'63.#.7.0':139
'63.#.121.81':139
'63.#.86.244':139
'63.#.96.150':139
'63.#.245.79':139
'63.#.242.245':139
'63.#.104.240':445
'63.#.1.47':445
'63.#.205.17':445
'63.#.53.103':445
'63.#.131.109':445
'63.#.183.173':445
'63.#.182.84':139
'63.#.20.183':139
'63.#.85.106':139
'63.#.106.121':445
'63.#.50.53':445
'63.#.35.131':445
'63.#.23.109':445
'63.#.191.23':445
'63.#.122.185':445
'63.#.96.50':445
'63.#.12.180':445
'63.#.207.71':445
'63.#.20.247':445
'63.#.216.169':445
'63.#.109.191':445
'63.#.112.35':445
'63.#.182.84':445
'63.#.20.183':445
'63.#.85.106':445
'63.#.90.96':139
'63.#.46.109':139
'63.#.108.194':445
'63.#.213.108':445
'63.#.194.90':445
'63.#.130.20':445
'63.#.43.109':445
'63.#.62.73':139
'63.#.108.194':139
'63.#.213.108':139
'63.#.194.90':139
'63.#.130.20':139
'63.#.43.109':139
'63.#.249.82':139
'63.#.38.76':139
'63.#.68.181':139
'63.#.104.240':139
'63.#.239.176':139
'63.#.19.99':445
'63.#.69.19':445
'63.#.98.140':445
'63.#.94.207':445
'63.#.64.216':445
'63.#.119.160':445
'63.#.110.230':445
'63.#.193.98':445
'63.#.46.69':445
'63.#.140.174':445
'63.#.168.167':445
'63.#.203.89':139
'63.#.197.203':139
'63.#.137.217':139
'63.#.111.130':139
'63.#.231.117':139
'63.#.55.95':445
'63.#.225.159':445
'63.#.5.142':139
'63.#.135.173':139
'63.#.147.125':139
'63.#.64.140':445
'63.#.159.64':445
'63.#.139.222':445
'63.#.163.138':445
'63.#.74.97':445
'63.#.3.244':445
'63.#.246.28':445
'63.#.162.80':445
'63.#.22.159':445
'63.#.81.23':445
'63.#.24.223':445
'63.#.147.232':445
'63.#.84.148':445
'63.#.141.71':445
'63.#.92.146':445
'63.#.113.122':445
'63.#.127.3':445
'63.#.223.126':445
'63.#.29.135':445
'63.#.93.122':445
'63.#.9.150':445
'63.#.99.69':139
'63.#.113.122':139
'63.#.141.71':139
'63.#.92.146':139
'63.#.119.160':139
'63.#.110.230':139
'63.#.9.150':139
'63.#.29.135':139
'63.#.93.122':139
'63.#.147.232':139
'63.#.84.148':139
'63.#.193.98':139
'63.#.94.207':139
'63.#.64.216':139
'63.#.168.167':139
'63.#.225.159':139
'63.#.55.95':139
'63.#.46.69':139
'63.#.140.174':139
'63.#.69.19':139
'63.#.98.140':139
'63.#.19.99':139
'63.#.98.203':139
'63.#.201.184':139
'63.#.158.202':139
'63.#.3.244':139
'63.#.246.28':139
'63.#.24.173':139
'63.#.14.9':139
'63.#.173.3':139
'63.#.62.201':139
'63.#.59.216':139
'63.#.162.80':139
'63.#.163.138':139
'63.#.74.97':139
'63.#.24.223':139
'63.#.127.3':139
'63.#.223.126':139
'63.#.22.159':139
'63.#.81.23':139
'63.#.159.64':139
'63.#.139.222':139
'63.#.64.140':139
'63.#.16.70':445
'63.#.64.137':445
'63.#.240.251':139
'63.#.15.169':139
'63.#.123.172':139
'63.#.172.128':445
'63.#.161.172':445
'63.#.67.10':445
'63.#.80.253':445
'63.#.66.80':445
'63.#.7.171':139
'63.#.178.178':139
'63.#.27.178':139
'63.#.155.55':139
'63.#.230.223':139
'63.#.170.184':139
'63.#.94.173':139
'63.#.210.94':139
'63.#.6.179':139
'63.#.84.27':139
'63.#.196.121':139
'63.#.27.178':445
'63.#.6.179':445
'63.#.84.27':445
'63.#.170.184':445
'63.#.178.178':445
'63.#.15.169':445
'63.#.123.172':445
'63.#.7.171':445
'63.#.94.173':445
'63.#.210.94':445
'63.#.196.121':445
'63.#.69.251':445
'63.#.101.137':445
'63.#.62.226':445
'63.#.231.243':445
'63.#.47.116':445
'63.#.230.223':445
'63.#.155.55':445
'63.#.24.55':445
'63.#.181.114':445
'63.#.152.120':445
'63.#.24.55':139
'63.#.135.173':445
'63.#.147.125':445
'63.#.197.203':445
'63.#.137.217':445
'63.#.203.89':445
'63.#.98.140':9988
'63.#.193.98':9988
'63.#.64.216':9988
'63.#.5.142':445
'63.#.94.207':9988
'63.#.231.117':445
'63.#.62.201':445
'63.#.59.216':445
'63.#.201.184':445
'63.#.158.202':445
'63.#.98.203':445
'63.#.99.69':445
'63.#.111.130':445
'63.#.14.9':445
'63.#.173.3':445
'63.#.24.173':445
'63.#.231.243':139
'63.#.47.116':139
'63.#.161.172':139
'63.#.67.10':139
'63.#.172.128':139
'63.#.181.114':139
'63.#.152.120':139
'63.#.101.137':139
'63.#.62.226':139
'63.#.69.251':139
'63.#.66.80':139
'63.#.159.64':9988
'63.#.22.159':9988
'63.#.139.222':9988
'63.#.110.230':9988
'63.#.29.135':9988
'63.#.64.137':139
'63.#.80.253':139
'63.#.16.70':139
'63.#.158.202':9988
'63.#.98.203':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней