Trojan.Starman.5258

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERa485.dir00\svchost.exe.mdmp 16325836412032192

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa485.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#24.87.237':445
'21#.#24.56.26':445
'21#.#24.105.47':445
'21#.#24.98.228':445
'21#.#24.19.51':445
'21#.#24.114.21':445
'21#.#24.153.237':445
'21#.#24.143.64':445
'21#.#24.38.111':445
'21#.#24.14.125':445
'21#.#24.133.14':445
'21#.#24.255.132':445
'21#.#24.71.1':445
'21#.#24.161.152':445
'21#.#24.34.129':445
'21#.#24.84.34':445
'21#.#24.173.123':445
'21#.#24.255.215':445
'21#.#24.253.240':445
'21#.#24.92.47':445
'21#.#24.224.209':445
'21#.#24.209.45':445
'21#.#24.20.84':445
'21#.#24.220.22':445
'21#.#24.243.24':445
'21#.#24.163.130':445
'21#.#24.104.109':445
'21#.#24.88.54':445
'21#.#24.155.0':445
'21#.#24.61.84':445
'21#.#24.137.84':445
'21#.#24.82.241':445
'21#.#24.224.45':139
'21#.#24.99.90':139
'21#.#24.172.126':139
'21#.#24.12.241':139
'21#.#24.83.95':139
'21#.#24.146.246':139
'21#.#24.232.194':445
'21#.#24.86.37':445
'21#.#24.30.64':445
'21#.#24.3.109':445
'21#.#24.128.246':445
'21#.#24.88.37':445
'21#.#24.237.231':445
'21#.#24.111.63':445
'21#.#24.46.19':445
'21#.#24.146.231':445
'21#.#24.60.128':445
'21#.#24.173.175':445
'21#.#24.117.223':445
'21#.#24.224.209':139
'21#.#24.209.45':139
'21#.#24.71.1':139
'21#.#24.220.22':139
'21#.#24.243.24':139
'21#.#24.92.47':139
'21#.#24.87.237':139
'21#.#24.56.26':139
'21#.#24.105.47':139
'21#.#24.98.228':139
'21#.#24.19.51':139
'21#.#24.114.21':139
'21#.#24.20.84':139
'21#.#24.138.106':445
'21#.#24.234.207':445
'21#.#24.77.234':445
'21#.#24.117.96':445
'21#.#24.123.57':445
'21#.#24.191.203':445
'21#.#24.161.152':139
'21#.#24.34.129':139
'21#.#24.84.34':139
'21#.#24.173.123':139
'21#.#24.255.215':139
'21#.#24.253.240':139
'21#.#24.14.125':139
'21#.#24.46.19':139
'21#.#24.146.231':139
'21#.#24.232.194':139
'21#.#24.173.175':139
'21#.#24.117.223':139
'21#.#24.111.63':139
'21#.#24.104.109':139
'21#.#24.88.54':139
'21#.#24.155.0':139
'21#.#24.61.84':139
'21#.#24.137.84':139
'21#.#24.82.241':139
'21#.#24.60.128':139
'21#.#24.143.64':139
'21#.#24.38.111':139
'21#.#24.163.130':139
'21#.#24.133.14':139
'21#.#24.255.132':139
'21#.#24.153.237':139
'21#.#24.86.37':139
'21#.#24.30.64':139
'21#.#24.3.109':139
'21#.#24.128.246':139
'21#.#24.88.37':139
'21#.#24.237.231':139
'21#.#24.214.239':445
'21#.#24.80.50':445
'21#.#24.29.238':445
'21#.#24.20.135':445
'21#.#24.70.31':445
'21#.#24.227.233':445
'21#.#24.53.91':445
'21#.#24.112.199':445
'21#.#24.77.228':445
'21#.#24.26.254':445
'21#.#24.220.26':445
'21#.#24.121.207':445
'21#.#24.60.81':445
'21#.#24.0.241':445
'21#.#24.47.1':445
'21#.#24.165.47':445
'21#.#24.140.17':445
'21#.#24.245.21':445
'21#.#24.97.219':445
'21#.#24.104.171':445
'21#.#24.68.202':445
'21#.#24.244.91':445
'21#.#24.121.165':445
'21#.#24.13.121':445
'21#.#24.109.102':445
'21#.#24.178.228':445
'21#.#24.23.103':445
'21#.#24.6.132':445
'21#.#24.14.64':445
'21#.#24.153.123':445
'21#.#24.114.79':445
'21#.#24.196.168':445
'21#.#24.96.243':139
'21#.#24.39.39':139
'21#.#24.3.77':139
'21#.#24.141.138':139
'21#.#24.192.150':139
'21#.#24.225.91':139
'21#.#24.32.235':445
'21#.#24.28.0':445
'21#.#24.201.236':445
'21#.#24.181.153':445
'21#.#24.56.117':445
'21#.#24.33.43':445
'21#.#24.162.220':445
'21#.#24.109.155':445
'21#.#24.39.170':445
'21#.#24.180.84':445
'21#.#24.188.237':445
'21#.#24.128.156':445
'21#.#24.41.188':445
'21#.#24.68.202':139
'21#.#24.244.91':139
'21#.#24.60.81':139
'21#.#24.13.121':139
'21#.#24.109.102':139
'21#.#24.104.171':139
'21#.#24.214.239':139
'21#.#24.80.50':139
'21#.#24.26.254':139
'21#.#24.20.135':139
'21#.#24.70.31':139
'21#.#24.227.233':139
'21#.#24.121.165':139
'21#.#24.224.45':445
'21#.#24.99.90':445
'21#.#24.172.126':445
'21#.#24.12.241':445
'21#.#24.83.95':445
'21#.#24.146.246':445
'21#.#24.0.241':139
'21#.#24.47.1':139
'21#.#24.165.47':139
'21#.#24.140.17':139
'21#.#24.245.21':139
'21#.#24.97.219':139
'21#.#24.220.26':139
'21#.#24.153.123':139
'21#.#24.32.235':139
'21#.#24.180.84':139
'21#.#24.128.156':139
'21#.#24.41.188':139
'21#.#24.109.155':139
'21#.#24.23.103':139
'21#.#24.14.64':139
'21#.#24.6.132':139
'21#.#24.39.170':139
'21#.#24.114.79':139
'21#.#24.196.168':139
'21#.#24.188.237':139
'21#.#24.112.199':139
'21#.#24.77.228':139
'21#.#24.178.228':139
'21#.#24.29.238':139
'21#.#24.121.207':139
'21#.#24.53.91':139
'21#.#24.28.0':139
'21#.#24.201.236':139
'21#.#24.181.153':139
'21#.#24.56.117':139
'21#.#24.33.43':139
'21#.#24.162.220':139
'21#.#24.77.234':139
'21#.#24.236.101':445
'21#.#24.249.161':445
'21#.#24.146.85':445
'21#.#24.192.193':445
'21#.#24.166.146':445
'21#.#24.113.166':445
'21#.#24.186.85':445
'21#.#24.95.216':445
'21#.#24.4.30':445
'21#.#24.207.107':445
'21#.#24.74.47':445
'21#.#24.74.64':445
'21#.#24.133.139':445
'21#.#24.173.222':445
'21#.#24.11.99':445
'21#.#24.2.60':445
'21#.#24.222.158':445
'21#.#24.49.155':445
'21#.#24.47.21':445
'21#.#24.247.42':445
'21#.#24.215.35':445
'21#.#24.233.117':445
'21#.#24.132.234':445
'21#.#24.129.146':445
'21#.#24.252.25':445
'21#.#24.5.110':445
'21#.#24.8.158':445
'21#.#24.188.5':445
'21#.#24.38.148':445
'21#.#24.47.102':445
'21#.#24.9.72':445
'21#.#24.178.248':445
'21#.#24.190.19':445
'21#.#24.114.253':445
'21#.#24.1.242':445
'21#.#24.73.61':445
'21#.#24.155.103':445
'21#.#24.25.56':445
'21#.#24.132.108':445
'21#.#24.49.251':445
'21#.#24.220.181':445
'21#.#24.34.124':445
'21#.#24.16.44':445
'21#.#24.165.102':445
'21#.#24.89.99':445
'21#.#24.128.2':445
'21#.#24.183.170':445
'21#.#24.106.79':445
'21#.#24.34.106':445
'21#.#24.32.105':445
'21#.#24.20.166':445
'21#.#24.236.101':139
'21#.#24.249.161':139
'21#.#24.146.85':139
'21#.#24.192.193':139
'21#.#24.166.146':139
'21#.#24.113.166':139
'21#.#24.186.85':139
'21#.#24.95.216':139
'21#.#24.4.30':139
'21#.#24.207.107':139
'21#.#24.74.47':139
'21#.#24.74.64':139
'21#.#24.133.139':139
'21#.#24.47.21':139
'21#.#24.2.60':139
'21#.#24.49.155':139
'21#.#24.222.158':139
'21#.#24.252.25':139
'21#.#24.173.222':139
'21#.#24.247.42':139
'21#.#24.215.35':139
'21#.#24.233.117':139
'21#.#24.11.99':139
'21#.#24.132.234':139
'21#.#24.129.146':139
'21#.#24.5.110':139
'21#.#24.178.248':139
'21#.#24.8.158':139
'21#.#24.188.5':139
'21#.#24.47.102':139
'21#.#24.9.72':139
'21#.#24.38.148':139
'21#.#24.190.19':139
'21#.#24.114.253':139
'21#.#24.1.242':139
'21#.#24.73.61':139
'21#.#24.155.103':139
'21#.#24.25.56':139
'21#.#24.132.108':139
'21#.#24.49.251':139
'21#.#24.220.181':139
'21#.#24.34.124':139
'21#.#24.16.44':139
'21#.#24.165.102':139
'21#.#24.89.99':139
'21#.#24.128.2':139
'21#.#24.183.170':139
'21#.#24.106.79':139
'21#.#24.34.106':139
'21#.#24.32.105':139
'21#.#24.20.166':139
'21#.#24.38.239':445
'21#.#24.99.66':445
'21#.#24.87.78':445
'21#.#24.31.112':445
'21#.#24.239.17':445
'21#.#24.239.25':445
'21#.#24.82.147':445
'21#.#24.128.3':445
'21#.#24.37.129':445
'21#.#24.35.3':445
'21#.#24.4.92':445
'21#.#24.150.59':445
'21#.#24.154.91':445
'21#.#24.112.161':445
'21#.#24.120.63':445
'21#.#24.23.41':445
'21#.#24.179.135':139
'21#.#24.78.196':445
'21#.#24.161.55':445
'21#.#24.249.30':445
'21#.#24.130.40':445
'21#.#24.95.19':445
'21#.#24.77.75':445
'21#.#24.246.250':445
'21#.#24.30.144':445
'21#.#24.74.228':445
'21#.#24.105.241':445
'21#.#24.200.45':445
'21#.#24.135.200':445
'21#.#24.71.233':445
'21#.#24.1.18':445
'21#.#24.102.249':445
'21#.#24.191.203':139
'21#.#24.138.106':139
'21#.#24.234.207':139
'21#.#24.179.135':445
'21#.#24.117.96':139
'21#.#24.123.57':139
'21#.#24.234.2':445
'21#.#24.192.119':445
'21#.#24.90.124':445
'21#.#24.57.178':445
'21#.#24.55.68':445
'21#.#24.128.62':445
'21#.#24.97.96':445
'21#.#24.32.151':445
'21#.#24.67.64':445
'21#.#24.205.24':445
'21#.#24.43.154':445
'21#.#24.255.110':445
'21#.#24.201.84':445
'21#.#24.130.40':139
'21#.#24.95.19':139
'21#.#24.154.91':139
'21#.#24.246.250':139
'21#.#24.30.144':139
'21#.#24.249.30':139
'21#.#24.38.239':139
'21#.#24.99.66':139
'21#.#24.87.78':139
'21#.#24.31.112':139
'21#.#24.239.17':139
'21#.#24.239.25':139
'21#.#24.77.75':139
'21#.#24.236.101':9988
'21#.#24.4.30':9988
'21#.#24.178.248':9988
'21#.#24.215.35':9988
'21#.#24.132.234':9988
'21#.#24.113.166':9988
'21#.#24.112.161':139
'21#.#24.120.63':139
'21#.#24.23.41':139
'21#.#24.25.56':9988
'21#.#24.78.196':139
'21#.#24.161.55':139
'21#.#24.35.3':139
'21#.#24.67.64':139
'21#.#24.205.24':139
'21#.#24.234.2':139
'21#.#24.255.110':139
'21#.#24.201.84':139
'21#.#24.32.151':139
'21#.#24.105.241':139
'21#.#24.200.45':139
'21#.#24.135.200':139
'21#.#24.71.233':139
'21#.#24.1.18':139
'21#.#24.102.249':139
'21#.#24.43.154':139
'21#.#24.128.3':139
'21#.#24.37.129':139
'21#.#24.74.228':139
'21#.#24.4.92':139
'21#.#24.150.59':139
'21#.#24.82.147':139
'21#.#24.192.119':139
'21#.#24.90.124':139
'21#.#24.57.178':139
'21#.#24.55.68':139
'21#.#24.128.62':139
'21#.#24.97.96':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней