Trojan.Starman.5180

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERafcf.dir00\svchost.exe.mdmp 16325836412032088

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERafcf.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#4.110.177':445
'21#.#4.222.129':445
'21#.#4.67.123':445
'21#.#4.237.31':445
'21#.#4.142.222':445
'21#.#4.241.112':445
'21#.#4.250.214':445
'21#.#4.169.140':445
'21#.54.19.5':445
'21#.#4.149.182':445
'21#.#4.132.80':445
'21#.#4.227.115':445
'21#.#4.109.7':139
'21#.#4.5.164':139
'21#.#4.18.17':139
'21#.#4.61.189':139
'21#.#4.203.166':139
'21#.#4.7.167':139
'21#.#4.76.170':139
'21#.#4.94.28':139
'21#.#4.47.228':139
'21#.#4.75.18':139
'21#.#4.177.29':139
'21#.#4.208.68':139
'21#.#4.64.165':445
'21#.#4.61.189':445
'21#.#4.216.209':445
'21#.#4.197.231':445
'21#.#4.167.206':445
'21#.#4.51.40':445
'21#.#4.5.164':445
'21#.#4.18.17':445
'21#.#4.75.18':445
'21#.#4.203.166':445
'21#.#4.7.167':445
'21#.#4.109.7':445
'21#.#4.151.124':445
'21#.#4.119.202':445
'21#.#4.44.99':445
'21#.#4.177.73':445
'21#.#4.125.189':445
'21#.#4.124.177':445
'21#.#4.159.158':445
'21#.#4.101.40':445
'21#.#4.61.197':445
'21#.#4.123.97':445
'21#.#4.16.252':445
'21#.#4.158.237':445
'21#.#4.216.209':139
'21#.#4.218.136':445
'21#.#4.169.37':445
'21#.#4.35.184':445
'21#.#4.175.74':445
'21#.#4.101.175':445
'21#.#4.29.102':445
'21#.#4.142.222':139
'21#.#4.241.112':139
'21#.#4.110.177':139
'21#.#4.92.234':445
'21#.#4.105.160':445
'21#.#4.237.31':139
'21#.#4.101.175':139
'21#.#4.29.102':139
'21#.#4.218.136':139
'21#.#4.248.122':139
'21#.#4.74.249':139
'21#.#4.175.74':139
'21#.#4.105.160':139
'21#.#4.248.122':445
'21#.#4.74.249':445
'21#.#4.169.37':139
'21#.#4.35.184':139
'21#.#4.92.234':139
'21#.#4.16.252':139
'21#.#4.158.237':139
'21#.#4.159.158':139
'21#.#4.119.202':139
'21#.#4.44.99':139
'21#.#4.123.97':139
'21#.#4.167.206':139
'21#.#4.51.40':139
'21#.#4.64.165':139
'21#.#4.101.40':139
'21#.#4.197.231':139
'21#.#4.61.197':139
'21#.#4.132.80':139
'21#.#4.227.115':139
'21#.#4.250.214':139
'21#.#4.222.129':139
'21#.#4.67.123':139
'21#.#4.149.182':139
'21#.#4.177.73':139
'21#.#4.124.177':139
'21#.#4.151.124':139
'21#.#4.169.140':139
'21#.54.19.5':139
'21#.#4.125.189':139
'21#.#4.154.129':139
'21#.#4.22.87':139
'21#.#4.183.254':445
'21#.#4.27.44':139
'21#.#4.124.100':139
'21#.#4.226.234':139
'21#.#4.14.58':445
'21#.#4.59.72':445
'21#.#4.130.59':445
'21#.#4.182.15':445
'21#.#4.13.157':445
'21#.#4.195.89':445
'21#.#4.170.235':139
'21#.#4.187.88':139
'21#.#4.92.176':139
'21#.#4.39.191':139
'21#.#4.120.124':139
'21#.#4.35.56':139
'21#.#4.43.195':139
'21#.#4.93.37':139
'21#.#4.217.82':139
'21#.54.3.46':139
'21#.#4.39.173':139
'21#.#4.3.127':139
'21#.#4.43.196':445
'21#.#4.100.154':445
'21#.#4.39.191':445
'21#.#4.30.234':445
'21#.#4.192.110':445
'21#.#4.158.61':445
'21#.#4.187.88':445
'21#.#4.92.176':445
'21#.54.3.46':445
'21#.#4.120.124':445
'21#.#4.35.56':445
'21#.#4.170.235':445
'21#.#4.176.3':445
'21#.#4.169.172':445
'21#.#4.24.99':445
'21#.#4.43.83':445
'21#.#4.101.152':445
'21#.#4.247.135':445
'21#.#4.33.159':445
'21#.#4.2.119':445
'21#.#4.46.61':445
'21#.#4.226.63':445
'21#.#4.38.56':445
'21#.54.97.5':445
'21#.#4.100.154':139
'21#.#4.170.59':445
'21#.#4.76.126':445
'21#.#4.70.173':445
'21#.#4.80.15':139
'21#.#4.220.249':139
'21#.#4.7.104':139
'21#.#4.177.104':445
'21#.#4.80.15':445
'21#.#4.220.249':445
'21#.#4.64.70':445
'21#.#4.172.64':445
'21#.#4.116.155':445
'21#.#4.94.28':445
'21#.#4.47.228':445
'21#.#4.170.59':139
'21#.#4.177.29':445
'21#.#4.208.68':445
'21#.#4.76.170':445
'21#.#4.172.64':139
'21#.#4.116.155':139
'21#.#4.177.104':139
'21#.#4.76.126':139
'21#.#4.70.173':139
'21#.#4.64.70':139
'21#.#4.38.56':139
'21#.54.97.5':139
'21#.#4.33.159':139
'21#.#4.169.172':139
'21#.#4.24.99':139
'21#.#4.226.63':139
'21#.#4.192.110':139
'21#.#4.158.61':139
'21#.#4.43.196':139
'21#.#4.2.119':139
'21#.#4.46.61':139
'21#.#4.30.234':139
'21#.#4.13.157':139
'21#.#4.195.89':139
'21#.#4.14.58':139
'21#.#4.7.104':445
'21#.#4.183.254':139
'21#.#4.182.15':139
'21#.#4.101.152':139
'21#.#4.247.135':139
'21#.#4.176.3':139
'21#.#4.59.72':139
'21#.#4.130.59':139
'21#.#4.43.83':139
'21#.#4.122.124':445
'21#.#4.162.60':445
'21#.#4.161.24':445
'21#.#4.54.57':445
'21#.#4.69.91':445
'21#.#4.73.163':445
'21#.#4.16.196':445
'21#.#4.30.53':445
'21#.#4.17.221':445
'21#.#4.173.48':445
'21#.#4.7.230':445
'21#.#4.219.71':445
'21#.#4.111.163':445
'21#.#4.148.126':445
'21#.#4.77.230':445
'21#.#4.95.61':445
'21#.54.64.6':139
'21#.#4.147.32':139
'21#.#4.179.54':445
'21#.#4.15.12':445
'21#.#4.122.121':445
'21#.#4.171.105':445
'21#.#4.30.100':445
'21#.#4.116.62':445
'21#.#4.58.40':445
'21#.#4.223.236':445
'21#.#4.252.212':445
'21#.#4.179.93':445
'21#.#4.154.83':445
'21#.#4.248.220':445
'21#.#4.237.151':445
'21#.54.6.71':445
'21#.54.79.6':445
'21#.#4.40.79':445
'21#.#4.80.170':445
'21#.#4.226.244':445
'21#.#4.205.208':445
'21#.#4.189.133':445
'21#.#4.109.116':445
'21#.#4.116.36':445
'21#.#4.58.133':445
'21#.#4.32.59':445
'21#.#4.144.126':445
'21#.#4.44.188':445
'21#.#4.22.246':445
'21#.#4.106.33':445
'21#.#4.11.160':445
'21#.#4.49.80':445
'21#.#4.187.217':445
'21#.#4.107.137':139
'21#.#4.54.57':139
'21#.#4.7.230':139
'21#.#4.219.71':139
'21#.#4.16.196':139
'21#.#4.162.60':139
'21#.#4.161.24':139
'21#.#4.173.48':139
'21#.#4.58.133':139
'21#.#4.32.59':139
'21#.#4.111.163':139
'21#.#4.30.53':139
'21#.#4.17.221':139
'21#.#4.95.61':139
'21#.#4.58.40':139
'21#.#4.77.230':139
'21#.#4.179.54':139
'21#.#4.148.126':139
'21#.#4.30.100':139
'21#.#4.122.121':139
'21#.#4.69.91':139
'21#.#4.73.163':139
'21#.#4.116.62':139
'21#.#4.15.12':139
'21#.#4.171.105':139
'21#.#4.179.93':139
'21#.#4.80.170':139
'21#.#4.226.244':139
'21#.#4.237.151':139
'21#.#4.223.236':139
'21#.#4.252.212':139
'21#.#4.40.79':139
'21#.#4.63.241':139
'21#.54.5.89':139
'21#.#4.205.208':139
'21#.54.6.71':139
'21#.54.79.6':139
'21#.#4.116.36':139
'21#.#4.11.160':139
'21#.#4.49.80':139
'21#.#4.189.133':139
'21#.#4.144.126':139
'21#.#4.109.116':139
'21#.#4.106.33':139
'21#.#4.154.83':139
'21#.#4.248.220':139
'21#.#4.187.217':139
'21#.#4.44.188':139
'21#.#4.22.246':139
'21#.#4.13.119':445
'21#.54.6.22':445
'21#.#4.35.175':445
'21#.#4.130.171':445
'21#.#4.129.44':445
'21#.#4.231.44':445
'21#.#4.12.210':445
'21#.#4.243.12':445
'21#.#4.248.228':445
'21#.#4.88.84':445
'21#.#4.239.234':445
'21#.#4.209.51':445
'21#.#4.133.114':139
'21#.#4.159.44':139
'21#.#4.83.86':139
'21#.#4.217.109':139
'21#.#4.65.137':139
'21#.#4.173.60':139
'21#.#4.17.104':445
'21#.#4.129.98':445
'21#.#4.61.109':445
'21#.#4.63.166':139
'21#.#4.122.124':139
'21#.#4.39.175':445
'21#.#4.198.216':445
'21#.#4.156.198':445
'21#.#4.217.109':445
'21#.#4.173.176':445
'21#.#4.174.173':445
'21#.#4.243.37':445
'21#.#4.159.44':445
'21#.#4.83.86':445
'21#.#4.63.166':445
'21#.#4.65.137':445
'21#.#4.173.60':445
'21#.#4.133.114':445
'21#.#4.28.101':445
'21#.#4.67.26':445
'21#.#4.27.102':445
'21#.#4.44.231':445
'21#.#4.244.182':445
'21#.#4.198.243':445
'21#.#4.163.220':445
'21#.#4.151.0':445
'21#.#4.47.201':445
'21#.#4.172.17':445
'21#.#4.62.172':445
'21#.#4.99.63':445
'21#.#4.156.198':139
'21#.#4.248.220':9988
'21#.#4.39.175':139
'21#.#4.17.104':139
'21#.#4.226.244':9988
'21#.#4.63.241':9988
'21#.54.5.89':9988
'21#.#4.129.44':139
'21#.#4.231.44':139
'21#.#4.13.119':139
'21#.#4.129.98':139
'21#.#4.61.109':139
'21#.#4.130.171':139
'21#.54.64.6':445
'21#.#4.147.32':445
'21#.#4.95.61':9988
'21#.#4.63.241':445
'21#.54.5.89':445
'21#.#4.107.137':445
'21#.#4.144.126':9988
'21#.#4.116.36':9988
'21#.#4.179.93':9988
'21#.#4.179.54':9988
'21#.#4.122.121':9988
'21#.#4.58.133':9988
'21#.#4.62.172':139
'21#.#4.99.63':139
'21#.#4.163.220':139
'21#.#4.67.26':139
'21#.#4.27.102':139
'21#.#4.172.17':139
'21#.#4.174.173':139
'21#.#4.243.37':139
'21#.#4.198.216':139
'21#.#4.151.0':139
'21#.#4.47.201':139
'21#.#4.173.176':139
'21#.#4.239.234':139
'21#.#4.209.51':139
'21#.#4.12.210':139
'21#.54.6.22':139
'21#.#4.35.175':139
'21#.#4.88.84':139
'21#.#4.244.182':139
'21#.#4.198.243':139
'21#.#4.28.101':139
'21#.#4.243.12':139
'21#.#4.248.228':139
'21#.#4.44.231':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней