Trojan.Starman.5611

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1116 -dm 7 7 %TEMP%\WER7782.dir00\svchost.exe.mdmp 16325836412032076

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7782.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#41.232.45':445
'21#.#41.39.232':445
'21#.#41.39.160':445
'21#.#41.45.233':445
'21#.#41.27.109':445
'21#.#41.8.222':445
'21#.#41.77.210':445
'21#.#41.245.122':445
'21#.#41.32.3':445
'21#.#41.96.127':139
'21#.#41.189.95':139
'21#.#41.127.153':139
'21#.#41.237.83':139
'21#.#41.48.118':139
'21#.#41.37.104':445
'21#.#41.184.167':445
'21#.#41.106.245':139
'21#.#41.106.44':139
'21#.#41.189.95':445
'21#.#41.48.118':445
'21#.#41.237.83':445
'21#.#41.96.127':445
'21#.#41.106.245':445
'21#.#41.73.238':139
'21#.#41.132.213':139
'21#.#41.106.44':445
'21#.#41.122.120':139
'21#.#41.106.88':445
'21#.#41.130.49':445
'21#.#41.195.138':445
'21#.#41.104.127':445
'21#.#41.68.142':445
'21#.#41.154.33':445
'21#.#41.127.153':445
'21#.#41.100.17':445
'21#.#41.232.75':445
'21#.#41.154.33':139
'21#.#41.20.55':445
'21#.#41.172.188':445
'21#.#41.67.138':445
'21#.#41.161.58':445
'21#.#41.92.121':445
'21#.#41.39.29':445
'21#.#41.188.144':445
'21#.#41.95.92':445
'21#.#41.29.96':445
'21#.#41.230.62':445
'21#.#41.195.202':445
'21#.#41.23.44':445
'21#.#41.62.171':445
'21#.#41.191.59':445
'21#.#41.235.236':445
'21#.#41.3.99':445
'21#.#41.166.32':445
'21#.#41.133.56':445
'21#.#41.195.138':139
'21#.#41.104.127':139
'21#.#41.8.222':139
'21#.#41.77.210':139
'21#.#41.106.88':139
'21#.#41.100.17':139
'21#.#41.232.75':139
'21#.#41.130.49':139
'21#.#41.68.142':139
'21#.#41.39.160':139
'21#.#41.45.233':139
'21#.#41.37.104':139
'21#.#41.184.167':139
'21#.#41.232.45':139
'21#.#41.245.122':139
'21#.#41.32.3':139
'21#.#41.39.232':139
'21#.#41.27.109':139
'21#.#41.47.176':139
'21#.#41.83.35':139
'21#.#41.8.205':445
'21#.#41.76.101':139
'21#.#41.157.22':139
'21#.#41.12.175':139
'21#.#41.236.235':139
'21#.#41.93.18':139
'21#.#41.229.92':139
'21#.#41.176.54':445
'21#.#41.239.54':445
'21#.#41.0.240':445
'21#.#41.163.146':445
'21#.#41.124.4':445
'21#.#41.25.196':445
'21#.#41.59.218':445
'21#.#41.124.214':445
'21#.#41.53.216':445
'21#.#41.16.130':139
'21#.#41.91.223':139
'21#.#41.123.44':139
'21#.#41.243.119':139
'21#.#41.244.191':139
'21#.#41.162.87':139
'21#.#41.180.103':139
'21#.#41.64.218':139
'21#.#41.70.249':139
'21#.#41.72.52':139
'21#.#41.204.85':139
'21#.#41.50.104':139
'21#.#41.0.11':139
'21#.#41.116.36':139
'21#.#41.59.173':139
'21#.#41.156.221':139
'21#.#41.71.116':139
'21#.#41.46.126':139
'21#.#41.24.118':445
'21#.#41.24.118':139
'21#.#41.0.240':139
'21#.#41.111.233':139
'21#.#41.178.54':139
'21#.#41.163.146':139
'21#.#41.124.4':139
'21#.#41.124.214':139
'21#.#41.176.54':139
'21#.#41.239.54':139
'21#.#41.214.15':139
'21#.#41.66.217':139
'21#.#41.190.155':139
'21#.#41.24.139':139
'21#.#41.97.14':139
'21#.#41.51.211':139
'21#.#41.64.34':139
'21#.#41.1.208':139
'21#.#41.22.247':139
'21#.#41.97.14':445
'21#.#41.1.208':445
'21#.#41.214.15':445
'21#.#41.66.217':445
'21#.#41.22.247':445
'21#.#41.111.233':445
'21#.#41.178.54':445
'21#.#41.51.211':445
'21#.#41.64.34':445
'21#.#41.59.218':139
'21#.#41.8.205':139
'21#.#41.53.216':139
'21#.#41.25.196':139
'21#.#41.122.120':445
'21#.#41.190.155':445
'21#.#41.24.139':445
'21#.#41.73.238':445
'21#.#41.132.213':445
'21#.#41.110.157':445
'21#.#41.72.186':139
'21#.#41.0.100':139
'21#.#41.141.143':139
'21#.#41.39.44':139
'21#.#41.76.213':139
'21#.#41.146.163':445
'21#.#41.195.92':445
'21#.#41.140.134':445
'21#.#41.117.121':445
'21#.#41.233.128':139
'21#.#41.164.111':139
'21#.#41.83.53':139
'21#.#41.11.83':139
'21#.#41.160.4':139
'21#.#41.7.103':139
'21#.#41.159.149':139
'21#.#41.170.105':139
'21#.#41.81.207':139
'21#.#41.209.236':445
'21#.#41.81.40':445
'21#.#41.105.133':445
'21#.#41.32.231':445
'21#.#41.160.195':445
'21#.#41.226.52':445
'21#.#41.231.225':445
'21#.#41.31.199':445
'21#.#41.250.219':445
'21#.#41.100.211':445
'21#.#41.27.145':445
'21#.#41.118.123':445
'21#.#41.162.201':445
'21#.#41.250.65':445
'21#.#41.184.38':445
'21#.#41.254.150':445
'21#.#41.86.199':445
'21#.#41.136.87':445
'21#.#41.243.144':139
'21#.#41.184.38':139
'21#.#41.254.150':139
'21#.#41.86.199':139
'21#.#41.136.87':139
'21#.#41.105.133':139
'21#.#41.81.40':139
'21#.#41.160.195':139
'21#.#41.32.231':139
'21#.#41.209.236':139
'21#.#41.146.163':139
'21#.#41.195.92':139
'21#.#41.140.134':139
'21#.#41.117.121':139
'21#.#41.118.123':139
'21#.#41.27.145':139
'21#.#41.250.65':139
'21#.#41.162.201':139
'21#.#41.100.211':139
'21#.#41.103.133':139
'21#.#41.83.109':139
'21#.#41.237.87':139
'21#.#41.50.202':139
'21#.#41.51.45':139
'21#.#41.36.120':139
'21#.#41.29.112':139
'21#.#41.15.167':139
'21#.#41.196.146':139
'21#.#41.226.52':139
'21#.#41.231.225':139
'21#.#41.31.199':139
'21#.#41.250.219':139
'21#.#41.181.154':139
'21#.#41.11.208':139
'21#.#41.174.145':139
'21#.#41.189.37':139
'21#.#41.163.8':139
'21#.#41.110.157':139
'21#.#41.23.44':139
'21#.#41.71.130':139
'21#.#41.81.103':139
'21#.#41.62.171':139
'21#.#41.191.59':139
'21#.#41.166.32':139
'21#.#41.230.62':139
'21#.#41.195.202':139
'21#.#41.231.225':9988
'21#.#41.163.8':9988
'21#.#41.160.195':9988
'21#.#41.181.154':9988
'21#.#41.11.208':9988
'21#.#41.49.70':139
'21#.#41.130.133':139
'21#.#41.131.77':139
'21#.#41.142.151':139
'21#.#41.188.144':139
'21#.#41.131.77':445
'21#.#41.29.96':139
'21#.#41.39.29':139
'21#.#41.142.151':445
'21#.#41.71.130':445
'21#.#41.81.103':445
'21#.#41.49.70':445
'21#.#41.130.133':445
'21#.#41.3.99':139
'21#.#41.67.138':139
'21#.#41.133.56':139
'21#.#41.235.236':139
'21#.#41.161.58':139
'21#.#41.92.121':139
'21#.#41.95.92':139
'21#.#41.20.55':139
'21#.#41.172.188':139
'21#.#41.32.231':9988
'21#.#41.196.146':445
'21#.#41.36.120':445
'21#.#41.51.45':445
'21#.#41.15.167':445
'21#.#41.29.112':445
'21#.#41.11.83':445
'21#.#41.233.128':445
'21#.#41.243.144':445
'21#.#41.83.53':445
'21#.#41.163.8':445
'21#.#41.11.208':445
'21#.#41.181.154':445
'21#.#41.189.37':445
'21#.#41.174.145':445
'21#.#41.103.133':445
'21#.#41.83.109':445
'21#.#41.237.87':445
'21#.#41.50.202':445
'21#.#41.195.92':9988
'21#.#41.146.163':9988
'21#.#41.0.100':445
'21#.#41.76.213':445
'21#.#41.140.134':9988
'21#.#41.254.150':9988
'21#.#41.105.133':9988
'21#.#41.100.211':9988
'21#.#41.250.65':9988
'21#.#41.170.105':445
'21#.#41.81.207':445
'21#.#41.164.111':445
'21#.#41.160.4':445
'21#.#41.7.103':445
'21#.#41.39.44':445
'21#.#41.72.186':445
'21#.#41.159.149':445
'21#.#41.141.143':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней