Trojan.Starman.5488

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERa7b4.dir00\svchost.exe.mdmp 16325836412032408

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa7b4.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'81.##0.29.97':139
'81.##0.75.98':139
'81.##0.173.96':139
'81.##0.97.35':139
'81.##0.18.134':139
'81.##0.51.216':139
'81.##0.20.59':139
'81.##0.20.154':139
'81.#50.9.67':139
'81.##0.26.64':139
'81.##0.154.186':139
'81.##0.86.55':139
'81.##0.98.13':139
'81.##0.199.140':139
'81.##0.17.15':139
'81.##0.252.44':139
'81.##0.139.192':139
'81.##0.79.22':139
'81.##0.232.78':139
'81.##0.94.48':139
'81.##0.177.105':139
'81.##0.246.142':139
'81.##0.242.142':139
'81.##0.187.52':445
'81.##0.254.160':445
'81.##0.110.118':445
'81.##0.117.56':445
'81.##0.119.80':445
'81.##0.217.236':445
'81.#50.58.3':445
'81.##0.226.2':445
'81.#50.3.61':445
'81.##0.83.43':445
'81.##0.95.250':445
'81.##0.51.209':139
'81.##0.171.78':139
'81.##0.45.62':139
'81.##0.71.91':139
'81.##0.156.82':139
'81.##0.95.136':139
'81.##0.113.107':139
'81.##0.75.134':139
'81.##0.244.230':139
'81.##0.209.223':139
'81.##0.122.64':139
'81.##0.246.92':445
'81.##0.124.158':445
'81.##0.251.236':445
'81.##0.153.104':445
'81.##0.27.29':445
'81.##0.254.148':445
'81.##0.144.149':445
'81.##0.4.165':445
'81.##0.133.221':445
'81.##0.53.196':445
'81.##0.186.28':445
'81.##0.23.98':445
'81.##0.18.212':445
'81.##0.223.205':445
'81.##0.181.134':445
'81.##0.205.148':445
'81.##0.76.188':445
'81.##0.40.15':445
'81.##0.179.80':445
'81.##0.75.169':445
'81.#50.3.54':445
'81.##0.105.60':445
'81.##0.177.137':445
'81.#50.58.3':139
'81.##0.226.2':139
'81.#50.3.61':139
'81.##0.83.43':139
'81.##0.95.250':139
'81.##0.101.203':139
'81.##0.83.89':139
'81.##0.184.83':139
'81.##0.13.180':139
'81.##0.31.221':139
'81.##0.126.99':139
'81.##0.178.139':445
'81.##0.57.85':445
'81.##0.90.33':445
'81.##0.34.202':445
'81.##0.118.218':445
'81.##0.117.56':139
'81.##0.254.160':139
'81.##0.217.236':139
'81.##0.187.52':139
'81.##0.119.80':139
'81.##0.110.118':139
'81.##0.101.203':445
'81.##0.27.63':139
'81.#50.4.93':139
'81.##0.62.148':139
'81.##0.195.148':139
'81.##0.148.159':139
'81.##0.164.163':139
'81.##0.93.111':139
'81.##0.253.229':139
'81.##0.76.196':139
'81.##0.223.164':139
'81.##0.179.223':139
'81.##0.59.211':139
'81.##0.110.195':139
'81.##0.210.185':139
'81.##0.133.41':139
'81.##0.186.132':139
'81.##0.143.101':139
'81.##0.149.206':139
'81.##0.128.78':139
'81.##0.233.16':139
'81.##0.205.191':139
'81.##0.6.119':139
'81.##0.91.253':139
'81.##0.1.161':139
'81.##0.16.72':139
'81.##0.113.98':139
'81.##0.73.74':139
'81.##0.105.214':139
'81.##0.246.203':139
'81.##0.222.234':139
'81.##0.95.223':139
'81.##0.206.126':139
'81.##0.80.247':139
'81.##0.189.80':139
'81.#50.3.85':139
'81.##0.1.149':139
'81.##0.19.26':139
'81.##0.128.91':139
'81.##0.151.128':139
'81.##0.233.72':139
'81.##0.14.54':139
'81.##0.39.190':139
'81.##0.216.96':139
'81.##0.152.46':139
'81.##0.110.175':139
'81.##0.79.22':445
'81.##0.232.78':445
'81.##0.94.48':445
'81.##0.177.105':445
'81.##0.246.142':445
'81.##0.97.35':445
'81.##0.75.98':445
'81.##0.51.216':445
'81.##0.29.97':445
'81.##0.18.134':445
'81.##0.173.96':445
'81.##0.83.89':445
'81.##0.184.83':445
'81.##0.13.180':445
'81.##0.31.221':445
'81.##0.126.99':445
'81.##0.17.15':445
'81.##0.98.13':445
'81.##0.139.192':445
'81.##0.86.55':445
'81.##0.252.44':445
'81.##0.199.140':445
'81.##0.26.64':445
'81.##0.113.107':445
'81.##0.75.134':445
'81.##0.244.230':445
'81.##0.209.223':445
'81.##0.122.64':445
'81.##0.65.192':139
'81.##0.165.176':139
'81.##0.180.243':139
'81.##0.77.46':139
'81.##0.137.119':139
'81.##0.45.137':139
'81.##0.20.154':445
'81.##0.242.142':445
'81.##0.20.59':445
'81.##0.154.186':445
'81.#50.9.67':445
'81.##0.71.91':445
'81.##0.171.78':445
'81.##0.95.136':445
'81.##0.51.209':445
'81.##0.156.82':445
'81.##0.45.62':445
'81.##0.206.219':445
'81.##0.187.130':445
'81.##0.161.106':445
'81.##0.43.151':445
'81.##0.162.76':445
'81.##0.65.186':445
'81.##0.160.151':445
'81.##0.91.254':445
'81.##0.162.52':445
'81.##0.114.58':445
'81.#50.7.79':445
'81.##0.191.136':139
'81.##0.20.205':139
'81.##0.46.109':139
'81.##0.135.18':139
'81.##0.109.135':139
'81.##0.171.20':139
'81.##0.190.53':445
'81.##0.107.136':445
'81.##0.147.37':445
'81.##0.42.178':445
'81.##0.54.25':445
'81.##0.186.161':445
'81.##0.241.34':445
'81.##0.14.62':445
'81.##0.67.33':445
'81.##0.33.47':445
'81.##0.35.50':445
'81.##0.174.167':445
'81.##0.35.104':445
'81.##0.83.80':445
'81.##0.95.205':445
'81.##0.17.148':445
'81.#50.96.0':445
'81.##0.253.14':445
'81.##0.228.166':445
'81.##0.163.157':445
'81.##0.175.242':445
'81.##0.225.242':445
'81.##0.202.73':445
'81.##0.209.87':445
'81.##0.107.235':445
'81.##0.95.194':445
'81.##0.21.202':445
'81.##0.88.22':445
'81.##0.160.151':139
'81.##0.91.254':139
'81.##0.162.52':139
'81.##0.114.58':139
'81.#50.7.79':139
'81.##0.186.161':139
'81.##0.253.14':139
'81.##0.228.166':139
'81.##0.163.157':139
'81.##0.175.242':139
'81.##0.225.242':139
'81.##0.42.178':139
'81.##0.54.25':139
'81.##0.147.37':139
'81.##0.190.53':139
'81.##0.43.151':139
'81.##0.107.136':139
'81.##0.187.130':139
'81.##0.65.186':139
'81.##0.206.219':139
'81.##0.162.76':139
'81.##0.161.106':139
'81.##0.202.73':139
'81.##0.83.80':139
'81.##0.35.104':139
'81.##0.95.205':139
'81.##0.17.148':139
'81.#50.96.0':139
'81.##0.194.176':139
'81.##0.52.27':139
'81.##0.18.77':139
'81.##0.71.165':139
'81.##0.155.174':139
'81.##0.63.160':139
'81.##0.95.194':139
'81.##0.107.235':139
'81.##0.209.87':139
'81.##0.21.202':139
'81.##0.88.22':139
'81.##0.35.50':139
'81.##0.14.62':139
'81.##0.174.167':139
'81.##0.241.34':139
'81.##0.33.47':139
'81.##0.67.33':139
'81.##0.194.176':445
'81.##0.144.149':139
'81.##0.4.165':139
'81.##0.133.221':139
'81.##0.53.196':139
'81.##0.186.28':139
'81.##0.177.137':139
'81.##0.178.139':139
'81.##0.57.85':139
'81.##0.90.33':139
'81.##0.34.202':139
'81.##0.118.218':139
'81.##0.40.15':139
'81.##0.179.80':139
'81.##0.75.169':139
'81.#50.3.54':139
'81.##0.105.60':139
'81.##0.153.104':139
'81.##0.124.158':139
'81.##0.254.148':139
'81.##0.246.92':139
'81.##0.27.29':139
'81.##0.251.236':139
'81.##0.160.170':445
'81.##0.165.1':445
'81.##0.66.250':445
'81.##0.150.31':445
'81.#50.10.4':445
'81.##0.37.10':445
'81.##0.41.82':445
'81.##0.109.214':445
'81.##0.241.218':445
'81.##0.120.47':445
'81.##0.241.237':445
'81.##0.9.142':445
'81.##0.25.210':445
'81.##0.80.58':445
'81.##0.209.50':445
'81.##0.45.123':445
'81.##0.51.48':445
'81.##0.98.118':445
'81.##0.7.253':445
'81.##0.135.75':445
'81.##0.252.203':445
'81.##0.137.62':445
'81.##0.204.30':445
'81.##0.160.151':9988
'81.##0.43.151':9988
'81.##0.147.37':9988
'81.##0.163.157':9988
'81.#50.7.79':9988
'81.##0.160.170':139
'81.##0.25.210':139
'81.##0.80.58':139
'81.##0.209.50':139
'81.##0.45.123':139
'81.##0.51.48':139
'81.##0.52.27':445
'81.##0.18.77':445
'81.##0.71.165':445
'81.##0.155.174':445
'81.##0.63.160':445
'81.##0.135.18':445
'81.##0.20.205':445
'81.##0.171.20':445
'81.##0.191.136':445
'81.##0.109.135':445
'81.##0.46.109':445
'81.##0.98.118':139
'81.##0.109.214':139
'81.##0.241.218':139
'81.##0.120.47':139
'81.##0.241.237':139
'81.##0.9.142':139
'81.##0.181.134':139
'81.##0.18.212':139
'81.##0.76.188':139
'81.##0.23.98':139
'81.##0.205.148':139
'81.##0.223.205':139
'81.##0.7.253':139
'81.##0.135.75':139
'81.##0.252.203':139
'81.##0.137.62':139
'81.##0.204.30':139
'81.#50.10.4':139
'81.##0.66.250':139
'81.##0.41.82':139
'81.##0.165.1':139
'81.##0.37.10':139
'81.##0.150.31':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней