Trojan.Starman.5771

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER469f.dir00\svchost.exe.mdmp 16325836412030300

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER469f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#88.67.187':139
'21#.#88.122.239':445
'21#.#88.178.242':139
'21#.#88.0.179':139
'21#.#88.178.242':445
'21#.#88.37.143':139
'21#.#88.34.138':139
'21#.#88.0.179':445
'21#.#88.67.187':445
'21#.#88.122.239':139
'21#.#88.38.27':445
'21#.#88.13.72':445
'21#.#88.82.212':445
'21#.#88.47.129':445
'21#.#88.62.122':445
'21#.#88.149.159':445
'21#.#88.69.73':445
'21#.#88.124.117':445
'21#.#88.209.32':445
'21#.#88.205.126':139
'21#.#88.34.77':139
'21#.#88.7.203':139
'21#.#88.10.235':139
'21#.#88.47.34':139
'21#.#88.20.122':139
'21#.#88.94.148':139
'21#.#88.162.1':139
'21#.#88.206.186':139
'21#.#88.159.173':139
'21#.#88.48.133':139
'21#.#88.195.182':139
'21#.#88.191.199':139
'21#.#88.117.191':139
'21#.#88.76.10':139
'21#.#88.166.231':139
'21#.#88.15.72':139
'21#.#88.100.247':139
'21#.#88.66.184':139
'21#.#88.150.244':445
'21#.#88.136.15':445
'21#.#88.152.206':445
'21#.#88.190.76':445
'21#.#88.146.228':445
'21#.#88.148.252':445
'21#.#88.206.87':445
'21#.#88.105.29':445
'21#.#88.134.38':445
'21#.#88.96.87':445
'21#.#88.176.81':445
'21#.#88.106.119':445
'21#.#88.5.109':445
'21#.#88.81.243':445
'21#.#88.157.36':445
'21#.#88.106.161':445
'21#.#88.90.39':445
'21#.#88.45.159':445
'21#.#88.203.40':445
'21#.#88.73.27':445
'21#.#88.9.73':445
'21#.#88.134.39':445
'21#.#88.251.45':445
'21#.#88.41.49':445
'21#.#88.26.192':445
'21#.#88.23.198':445
'21#.#88.102.45':445
'21#.#88.38.19':445
'21#.#88.226.18':445
'21#.#88.239.58':445
'21#.#88.5.102':445
'21#.#88.3.219':445
'21#.#88.26.4':445
'21#.#88.81.98':445
'21#.#88.155.153':445
'21#.#88.18.117':445
'21#.#88.45.19':445
'21#.#88.7.107':445
'21#.#88.80.83':139
'21#.#88.193.32':445
'21#.#88.73.100':445
'21#.#88.211.17':445
'21#.#88.108.43':445
'21#.#88.71.122':445
'21#.#88.208.22':445
'21#.#88.133.55':445
'21#.#88.204.73':445
'21#.#88.26.252':445
'21#.#88.210.80':445
'21#.#88.34.77':445
'21#.#88.47.34':445
'21#.#88.10.235':445
'21#.#88.205.126':445
'21#.#88.162.1':445
'21#.#88.94.148':445
'21#.#88.80.83':445
'21#.#88.206.186':445
'21#.#88.20.122':445
'21#.#88.94.207':445
'21#.#88.210.219':445
'21#.#88.194.220':445
'21#.#88.69.253':445
'21#.#88.120.66':445
'21#.#88.91.159':139
'21#.#88.4.73':139
'21#.#88.234.242':139
'21#.#88.159.22':139
'21#.#88.220.240':445
'21#.#88.168.172':445
'21#.#88.208.246':445
'21#.#88.208.159':445
'21#.#88.32.158':445
'21#.#88.40.118':445
'21#.#88.25.239':445
'21#.#88.214.161':445
'21#.#88.18.37':445
'21#.#88.133.120':445
'21#.#88.168.172':139
'21#.#88.208.246':139
'21#.#88.208.159':139
'21#.#88.32.158':139
'21#.#88.40.118':139
'21#.#88.25.239':139
'21#.#88.214.161':139
'21#.#88.18.37':139
'21#.#88.133.120':139
'21#.#88.133.55':139
'21#.#88.108.43':139
'21#.#88.193.32':139
'21#.#88.210.80':139
'21#.#88.211.17':139
'21#.#88.73.100':139
'21#.#88.26.252':139
'21#.#88.208.22':139
'21#.#88.71.122':139
'21#.#88.204.73':139
'21#.#88.76.10':445
'21#.#88.100.247':445
'21#.#88.48.133':445
'21#.#88.195.182':445
'21#.#88.66.184':445
'21#.#88.159.173':445
'21#.#88.7.203':445
'21#.#88.166.231':445
'21#.#88.15.72':445
'21#.#88.117.191':445
'21#.#88.69.253':139
'21#.#88.94.207':139
'21#.#88.220.240':139
'21#.#88.194.220':139
'21#.#88.210.219':139
'21#.#88.34.138':445
'21#.#88.191.199':445
'21#.#88.120.66':139
'21#.#88.37.143':445
'21#.#88.22.231':139
'21#.#88.17.214':445
'21#.#88.168.41':139
'21#.#88.142.139':139
'21#.#88.255.121':445
'21#.#88.115.232':445
'21#.#88.180.7':445
'21#.#88.237.160':445
'21#.#88.122.132':445
'21#.#88.138.252':139
'21#.#88.135.117':139
'21#.#88.27.61':139
'21#.#88.22.116':139
'21#.#88.133.248':139
'21#.#88.34.205':139
'21#.#88.101.126':139
'21#.#88.38.232':139
'21#.#88.125.32':139
'21#.#88.61.125':139
'21#.#88.111.0':445
'21#.#88.20.165':445
'21#.#88.196.178':445
'21#.#88.164.53':445
'21#.#88.193.51':445
'21#.#88.137.105':445
'21#.#88.36.13':445
'21#.#88.33.67':445
'21#.#88.127.178':445
'21#.#88.121.245':445
'21#.#88.221.73':445
'21#.#88.158.221':445
'21#.#88.237.231':445
'21#.#88.27.151':445
'21#.#88.184.204':445
'21#.#88.125.34':445
'21#.#88.63.221':445
'21#.#88.9.29':445
'21#.#88.130.99':445
'21#.#88.130.99':139
'21#.#88.125.34':139
'21#.#88.184.204':139
'21#.#88.9.29':139
'21#.#88.63.221':139
'21#.#88.164.53':139
'21#.#88.111.0':139
'21#.#88.121.245':139
'21#.#88.196.178':139
'21#.#88.158.221':139
'21#.#88.237.160':139
'21#.#88.17.214':139
'21#.#88.122.132':139
'21#.#88.180.7':139
'21#.#88.255.121':139
'21#.#88.27.151':139
'21#.#88.221.73':139
'21#.#88.115.232':139
'21#.#88.237.231':139
'21#.#88.114.142':139
'21#.#88.146.38':139
'21#.#88.10.175':139
'21#.#88.229.128':139
'21#.#88.237.250':139
'21#.#88.157.57':139
'21#.#88.94.68':139
'21#.#88.116.200':139
'21#.#88.171.116':139
'21#.#88.45.55':139
'21#.#88.33.67':139
'21#.#88.127.178':139
'21#.#88.20.165':139
'21#.#88.193.51':139
'21#.#88.137.105':139
'21#.#88.249.64':139
'21#.#88.51.25':139
'21#.#88.36.13':139
'21#.#88.253.125':139
'21#.#88.253.125':445
'21#.#88.239.58':139
'21#.#88.5.102':139
'21#.#88.3.219':139
'21#.#88.26.4':139
'21#.#88.81.98':139
'21#.#88.155.153':139
'21#.#88.18.117':139
'21#.#88.45.19':139
'21#.#88.7.107':139
'21#.#88.206.87':139
'21#.#88.190.76':139
'21#.#88.150.244':139
'21#.#88.96.87':139
'21#.#88.152.206':139
'21#.#88.136.15':139
'21#.#88.134.38':139
'21#.#88.148.252':139
'21#.#88.146.228':139
'21#.#88.105.29':139
'21#.#88.38.27':139
'21#.#88.13.72':139
'21#.#88.82.212':139
'21#.#88.47.129':139
'21#.#88.62.122':139
'21#.#88.149.159':139
'21#.#88.69.73':139
'21#.#88.124.117':139
'21#.#88.209.32':139
'21#.#88.23.198':139
'21#.#88.251.45':139
'21#.#88.73.27':139
'21#.#88.226.18':139
'21#.#88.134.39':139
'21#.#88.9.73':139
'21#.#88.38.19':139
'21#.#88.26.192':139
'21#.#88.41.49':139
'21#.#88.102.45':139
'21#.#88.22.116':445
'21#.#88.133.248':445
'21#.#88.157.57':445
'21#.#88.94.68':445
'21#.#88.135.117':445
'21#.#88.125.32':445
'21#.#88.61.125':445
'21#.#88.27.61':445
'21#.#88.34.205':445
'21#.#88.171.116':445
'21#.#88.45.55':445
'21#.#88.10.175':445
'21#.#88.249.64':445
'21#.#88.51.25':445
'21#.#88.229.128':445
'21#.#88.237.250':445
'21#.#88.116.200':445
'21#.#88.114.142':445
'21#.#88.146.38':445
'21#.#88.176.81':139
'21#.#88.106.119':139
'21#.#88.5.109':139
'21#.#88.81.243':139
'21#.#88.157.36':139
'21#.#88.106.161':139
'21#.#88.90.39':139
'21#.#88.45.159':139
'21#.#88.203.40':139
'21#.#88.27.61':9988
'21#.#88.138.252':445
'21#.#88.168.41':445
'21#.#88.101.126':445
'21#.#88.38.232':445
'21#.#88.142.139':445
'21#.#88.255.121':9988
'21#.#88.158.221':9988
'21#.#88.22.231':445
'21#.#88.63.221':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней