Trojan.Starman.5427

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER38f6.dir00\svchost.exe.mdmp 16325836412030672

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER38f6.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'68.##0.89.70':139
'68.##0.88.59':139
'68.##0.41.100':139
'68.##0.135.209':139
'68.##0.176.9':139
'68.##0.238.146':139
'68.##0.47.188':139
'68.##0.61.122':139
'68.##0.104.158':139
'68.##0.58.245':139
'68.##0.151.183':139
'68.##0.132.194':139
'68.##0.86.73':139
'68.##0.37.95':139
'68.##0.50.136':139
'68.##0.148.75':139
'68.##0.78.172':139
'68.##0.83.72':139
'68.##0.228.132':139
'68.#30.25.5':139
'68.##0.27.72':139
'68.##0.92.29':139
'68.##0.83.72':445
'68.##0.151.183':445
'68.##0.78.172':445
'68.##0.27.72':445
'68.##0.228.132':445
'68.##0.89.70':445
'68.##0.88.59':445
'68.##0.41.100':445
'68.##0.135.209':445
'68.##0.176.9':445
'68.#30.25.5':445
'68.##0.125.24':139
'68.##0.85.25':139
'68.##0.24.136':139
'68.##0.61.163':139
'68.##0.4.185':139
'68.##0.132.194':445
'68.##0.86.73':445
'68.##0.37.95':445
'68.##0.50.136':445
'68.##0.148.75':445
'68.##0.136.179':139
'68.##0.20.57':139
'68.##0.172.207':139
'68.##0.161.249':139
'68.##0.82.179':139
'68.##0.5.201':445
'68.##0.29.60':445
'68.##0.86.230':139
'68.##0.135.142':139
'68.##0.91.27':139
'68.##0.190.130':139
'68.##0.215.242':139
'68.##0.230.206':139
'68.##0.49.194':139
'68.##0.235.239':139
'68.##0.96.235':139
'68.##0.155.30':139
'68.##0.130.155':139
'68.##0.187.166':139
'68.##0.62.171':139
'68.##0.153.18':139
'68.##0.119.218':445
'68.##0.82.179':445
'68.##0.172.207':445
'68.##0.161.249':445
'68.##0.130.155':445
'68.##0.190.130':445
'68.##0.91.27':445
'68.##0.86.230':445
'68.##0.135.142':445
'68.##0.136.179':445
'68.##0.20.57':445
'68.##0.155.30':445
'68.##0.96.235':445
'68.##0.49.194':445
'68.##0.235.239':445
'68.##0.245.17':445
'68.##0.239.244':445
'68.##0.153.18':445
'68.##0.187.166':445
'68.##0.62.171':445
'68.##0.215.242':445
'68.##0.230.206':445
'68.##0.125.219':445
'68.##0.178.125':445
'68.##0.218.23':445
'68.##0.22.91':445
'68.##0.222.190':445
'68.#30.30.9':139
'68.##0.133.235':139
'68.##0.203.13':139
'68.##0.39.72':139
'68.##0.160.169':139
'68.##0.90.205':445
'68.##0.110.170':445
'68.##0.170.84':445
'68.##0.170.103':445
'68.#30.8.12':445
'68.##0.143.30':445
'68.##0.135.175':445
'68.##0.204.182':445
'68.##0.59.192':445
'68.##0.249.238':445
'68.##0.217.249':445
'68.##0.247.31':139
'68.##0.24.59':139
'68.##0.73.147':139
'68.##0.67.44':139
'68.##0.140.44':139
'68.##0.220.102':139
'68.##0.224.219':139
'68.##0.41.66':139
'68.##0.249.124':139
'68.##0.132.80':139
'68.##0.124.173':139
'68.##0.152.22':139
'68.##0.36.117':139
'68.##0.111.70':139
'68.##0.163.51':139
'68.#30.9.62':139
'68.##0.106.156':139
'68.##0.199.39':139
'68.##0.137.234':139
'68.##0.94.181':139
'68.##0.229.45':139
'68.##0.61.238':139
'68.##0.166.140':139
'68.##0.252.76':139
'68.##0.4.121':139
'68.##0.134.89':139
'68.##0.128.218':139
'68.#30.8.12':139
'68.##0.143.30':139
'68.##0.250.53':139
'68.##0.232.83':139
'68.##0.12.232':139
'68.##0.85.25':445
'68.##0.238.146':445
'68.##0.47.188':445
'68.##0.61.122':445
'68.##0.104.158':445
'68.##0.58.245':445
'68.##0.24.136':445
'68.##0.125.24':445
'68.##0.4.185':445
'68.##0.92.29':445
'68.##0.61.163':445
'68.##0.170.103':139
'68.##0.128.218':445
'68.##0.4.121':445
'68.##0.134.89':445
'68.##0.125.219':139
'68.##0.178.125':139
'68.##0.12.232':445
'68.##0.250.53':445
'68.##0.232.83':445
'68.##0.166.140':445
'68.##0.252.76':445
'68.##0.218.23':139
'68.##0.217.249':139
'68.##0.59.192':139
'68.##0.249.238':139
'68.##0.110.170':139
'68.##0.170.84':139
'68.##0.22.91':139
'68.##0.222.190':139
'68.##0.90.205':139
'68.##0.135.175':139
'68.##0.204.182':139
'68.##0.239.244':139
'68.##0.182.163':445
'68.##0.27.102':445
'68.##0.64.84':445
'68.##0.2.171':445
'68.##0.170.231':445
'68.##0.177.204':445
'68.##0.32.192':445
'68.##0.145.118':445
'68.##0.76.163':445
'68.##0.26.122':445
'68.##0.70.113':445
'68.##0.233.149':139
'68.##0.224.50':139
'68.##0.171.216':139
'68.##0.25.232':139
'68.##0.58.130':139
'68.##0.2.250':445
'68.##0.23.90':445
'68.##0.7.213':139
'68.##0.0.107':139
'68.##0.194.225':139
'68.##0.110.17':445
'68.##0.71.90':445
'68.##0.130.87':445
'68.#30.29.4':445
'68.##0.76.125':445
'68.##0.20.196':445
'68.##0.179.233':445
'68.##0.45.114':445
'68.##0.129.201':445
'68.##0.19.33':445
'68.##0.162.174':445
'68.##0.34.234':445
'68.##0.74.117':445
'68.##0.21.74':445
'68.##0.160.185':445
'68.##0.57.94':445
'68.##0.152.16':445
'68.##0.149.77':445
'68.##0.52.163':445
'68.##0.244.178':445
'68.##0.60.167':445
'68.##0.153.208':445
'68.##0.57.94':139
'68.##0.152.16':139
'68.##0.110.17':139
'68.##0.177.204':139
'68.##0.32.192':139
'68.##0.60.167':139
'68.##0.153.208':139
'68.##0.21.74':139
'68.##0.160.185':139
'68.##0.74.117':139
'68.##0.145.118':139
'68.##0.64.84':139
'68.##0.23.90':139
'68.##0.2.250':139
'68.##0.2.171':139
'68.##0.170.231':139
'68.##0.76.163':139
'68.##0.26.122':139
'68.##0.27.102':139
'68.##0.70.113':139
'68.##0.182.163':139
'68.##0.244.178':139
'68.##0.6.198':139
'68.##0.164.209':139
'68.##0.15.115':139
'68.##0.179.233':139
'68.##0.45.114':139
'68.##0.146.230':139
'68.##0.21.142':139
'68.##0.21.150':139
'68.##0.128.137':139
'68.##0.70.198':139
'68.##0.129.201':139
'68.##0.76.125':139
'68.##0.20.196':139
'68.##0.34.234':139
'68.##0.149.77':139
'68.##0.52.163':139
'68.##0.19.33':139
'68.##0.162.174':139
'68.##0.130.87':139
'68.#30.29.4':139
'68.##0.71.90':139
'68.##0.125.167':445
'68.##0.143.143':445
'68.##0.166.216':445
'68.##0.59.181':139
'68.##0.114.214':445
'68.##0.14.178':445
'68.##0.249.10':445
'68.##0.197.8':445
'68.##0.159.122':445
'68.##0.18.107':445
'68.##0.167.247':139
'68.##0.17.175':139
'68.##0.243.39':139
'68.##0.56.58':139
'68.##0.37.211':139
'68.##0.88.64':139
'68.##0.15.61':139
'68.##0.91.159':139
'68.##0.173.212':139
'68.##0.6.250':139
'68.##0.213.66':139
'68.##0.10.143':445
'68.##0.91.159':445
'68.##0.167.247':445
'68.##0.15.61':445
'68.##0.213.66':445
'68.##0.173.212':445
'68.##0.119.218':139
'68.##0.245.17':139
'68.##0.29.60':139
'68.##0.59.181':445
'68.##0.5.201':139
'68.##0.6.250':445
'68.##0.167.105':445
'68.##0.150.89':445
'68.##0.104.222':445
'68.#30.2.45':445
'68.##0.42.68':445
'68.##0.17.175':445
'68.##0.243.39':445
'68.##0.56.58':445
'68.##0.37.211':445
'68.##0.88.64':445
'68.##0.194.225':445
'68.##0.7.213':445
'68.##0.0.107':445
'68.##0.233.149':445
'68.##0.224.50':445
'68.##0.57.94':9988
'68.##0.160.185':9988
'68.##0.177.204':9988
'68.##0.182.163':9988
'68.##0.2.250':9988
'68.##0.171.216':445
'68.##0.128.137':445
'68.##0.70.198':445
'68.##0.164.209':445
'68.##0.15.115':445
'68.##0.6.198':445
'68.##0.25.232':445
'68.##0.58.130':445
'68.##0.21.142':445
'68.##0.21.150':445
'68.##0.146.230':445
'68.##0.74.117':9988
'68.##0.249.10':139
'68.##0.10.143':139
'68.##0.14.178':139
'68.##0.18.107':139
'68.##0.197.8':139
'68.##0.167.105':139
'68.##0.150.89':139
'68.##0.104.222':139
'68.#30.2.45':139
'68.##0.42.68':139
'68.##0.159.122':139
'68.##0.34.234':9988
'68.##0.76.125':9988
'68.##0.149.77':9988
'68.##0.60.167':9988
'68.##0.244.178':9988
'68.##0.125.167':139
'68.##0.143.143':139
'68.##0.166.216':139
'68.##0.20.196':9988
'68.##0.114.214':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней