Trojan.Starman.5888

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER34fb.dir00\svchost.exe.mdmp 16325836412032540

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER34fb.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#31.190.123':445
'21#.#31.225.185':445
'21#.#31.233.85':445
'21#.#31.52.244':445
'21#.#31.191.52':445
'21#.#31.123.191':445
'21#.#31.98.144':445
'21#.#31.95.98':445
'21#.#31.6.96':445
'21#.#31.186.142':445
'21#.#31.171.184':445
'21#.#31.144.99':445
'21#.#31.244.15':445
'21#.#31.183.194':445
'21#.#31.235.76':445
'21#.#31.19.236':445
'21#.#31.21.169':445
'21#.#31.189.156':445
'21#.#31.195.79':445
'21#.#31.41.230':445
'21#.#31.235.178':445
'21#.#31.197.108':445
'21#.#31.45.112':445
'21#.#31.39.132':445
'21#.#31.255.39':445
'21#.#31.151.70':445
'21#.#31.43.225':445
'21#.#31.38.188':445
'21#.#31.254.38':445
'21#.#31.174.213':445
'21#.#31.158.117':445
'21#.#31.145.37':445
'21#.#31.141.206':139
'21#.#31.9.142':139
'21#.#31.155.9':139
'21#.#31.246.253':445
'21#.#31.247.246':445
'21#.#31.231.221':139
'21#.#31.31.77':445
'21#.#31.162.84':445
'21#.#31.174.38':445
'21#.#31.55.207':445
'21#.#31.34.223':445
'21#.#31.44.128':445
'21#.#31.172.42':445
'21#.#31.135.11':445
'21#.#31.227.148':445
'21#.#31.74.135':445
'21#.#31.2.96':445
'21#.#31.131.218':445
'21#.#31.205.225':445
'21#.#31.244.15':139
'21#.#31.52.244':139
'21#.#31.191.52':139
'21#.#31.41.230':139
'21#.#31.235.178':139
'21#.#31.197.108':139
'21#.#31.233.85':139
'21#.#31.186.142':139
'21#.#31.171.184':139
'21#.#31.123.191':139
'21#.#31.190.123':139
'21#.#31.225.185':139
'21#.#31.255.39':139
'21#.#31.253.13':445
'21#.#31.21.169':139
'21#.#31.189.156':139
'21#.#31.233.116':445
'21#.#31.83.67':445
'21#.#31.74.202':445
'21#.#31.19.236':139
'21#.#31.45.112':139
'21#.#31.39.132':139
'21#.#31.195.79':139
'21#.#31.183.194':139
'21#.#31.235.76':139
'21#.#31.144.99':139
'21#.#31.31.77':139
'21#.#31.174.213':139
'21#.#31.158.117':139
'21#.#31.135.11':139
'21#.#31.227.148':139
'21#.#31.74.135':139
'21#.#31.254.38':139
'21#.#31.246.253':139
'21#.#31.247.246':139
'21#.#31.145.37':139
'21#.#31.43.225':139
'21#.#31.38.188':139
'21#.#31.205.225':139
'21#.#31.151.70':139
'21#.#31.34.223':139
'21#.#31.44.128':139
'21#.#31.98.144':139
'21#.#31.95.98':139
'21#.#31.6.96':139
'21#.#31.55.207':139
'21#.#31.2.96':139
'21#.#31.131.218':139
'21#.#31.172.42':139
'21#.#31.162.84':139
'21#.#31.174.38':139
'21#.#31.85.46':445
'21#.#31.57.8':445
'21#.#31.4.250':445
'21#.#31.27.63':445
'21#.#31.124.163':445
'21#.#31.7.151':445
'21#.#31.152.60':445
'21#.#31.55.22':445
'21#.#31.195.176':445
'21#.#31.20.112':445
'21#.#31.176.214':445
'21#.#31.120.10':445
'21#.#31.102.244':445
'21#.#31.61.156':445
'21#.#31.233.179':445
'21#.#31.192.191':445
'21#.#31.251.154':445
'21#.#31.138.251':445
'21#.#31.13.139':445
'21#.#31.99.115':445
'21#.#31.254.123':445
'21#.#31.113.32':445
'21#.#31.66.170':445
'21#.#31.38.159':445
'21#.#31.76.38':445
'21#.#31.190.0':445
'21#.#31.159.92':445
'21#.#31.232.129':445
'21#.#31.83.232':445
'21#.#31.176.33':445
'21#.#31.85.9':445
'21#.#31.29.13':445
'21#.#31.127.109':139
'21#.#31.221.125':139
'21#.#31.172.221':139
'21#.#31.83.64':445
'21#.#31.204.82':445
'21#.#31.89.9':139
'21#.#31.184.73':445
'21#.#31.245.238':445
'21#.#31.200.245':445
'21#.#31.214.232':445
'21#.#31.42.151':445
'21#.#31.78.196':445
'21#.#31.165.243':445
'21#.#31.27.123':445
'21#.#31.94.152':445
'21#.#31.239.196':445
'21#.#31.55.174':445
'21#.#31.155.34':445
'21#.#31.3.13':445
'21#.#31.102.244':139
'21#.#31.27.63':139
'21#.#31.124.163':139
'21#.#31.99.115':139
'21#.#31.254.123':139
'21#.#31.113.32':139
'21#.#31.4.250':139
'21#.#31.20.112':139
'21#.#31.176.214':139
'21#.#31.7.151':139
'21#.#31.85.46':139
'21#.#31.57.8':139
'21#.#31.76.38':139
'21#.#31.155.9':445
'21#.#31.251.154':139
'21#.#31.138.251':139
'21#.#31.231.221':445
'21#.#31.141.206':445
'21#.#31.9.142':445
'21#.#31.192.191':139
'21#.#31.66.170':139
'21#.#31.38.159':139
'21#.#31.13.139':139
'21#.#31.61.156':139
'21#.#31.233.179':139
'21#.#31.120.10':139
'21#.#31.184.73':139
'21#.#31.176.33':139
'21#.#31.85.9':139
'21#.#31.27.123':139
'21#.#31.94.152':139
'21#.#31.239.196':139
'21#.#31.83.232':139
'21#.#31.83.64':139
'21#.#31.204.82':139
'21#.#31.29.13':139
'21#.#31.159.92':139
'21#.#31.232.129':139
'21#.#31.3.13':139
'21#.#31.190.0':139
'21#.#31.42.151':139
'21#.#31.78.196':139
'21#.#31.152.60':139
'21#.#31.55.22':139
'21#.#31.195.176':139
'21#.#31.214.232':139
'21#.#31.55.174':139
'21#.#31.155.34':139
'21#.#31.165.243':139
'21#.#31.245.238':139
'21#.#31.200.245':139
'21#.#31.42.21':445
'21#.#31.124.90':445
'21#.#31.82.104':445
'21#.#31.68.172':445
'21#.#31.186.86':445
'21#.#31.43.186':445
'21#.#31.148.102':445
'21#.#31.57.149':445
'21#.#31.194.57':445
'21#.#31.83.246':445
'21#.#31.30.84':445
'21#.#31.0.49':445
'21#.#31.12.83':445
'21#.#31.37.238':445
'21#.#31.69.61':445
'21#.#31.71.161':445
'21#.#31.26.182':445
'21#.#31.61.37':445
'21#.#31.113.69':445
'21#.#31.125.210':445
'21#.#31.5.77':445
'21#.#31.195.27':445
'21#.#31.120.219':445
'21#.#31.210.216':445
'21#.#31.221.31':445
'21#.#31.1.194':445
'21#.#31.252.175':445
'21#.#31.218.59':445
'21#.#31.141.4':445
'21#.#31.181.176':445
'21#.#31.78.87':445
'21#.#31.176.30':445
'21#.#31.9.109':445
'21#.#31.102.30':445
'21#.#31.79.24':445
'21#.#31.138.85':445
'21#.#31.161.168':445
'21#.#31.192.167':445
'21#.#31.35.243':445
'21#.#31.131.228':445
'21#.#31.44.132':445
'21#.#31.160.154':445
'21#.#31.204.129':445
'21#.#31.130.1':445
'21#.#31.93.82':445
'21#.#31.157.221':445
'21#.#31.73.112':445
'21#.#31.120.210':445
'21#.#31.84.75':445
'21#.#31.159.43':445
'21#.#31.50.109':445
'21#.#31.42.21':139
'21#.#31.124.90':139
'21#.#31.82.104':139
'21#.#31.68.172':139
'21#.#31.186.86':139
'21#.#31.43.186':139
'21#.#31.148.102':139
'21#.#31.57.149':139
'21#.#31.194.57':139
'21#.#31.83.246':139
'21#.#31.30.84':139
'21#.#31.0.49':139
'21#.#31.12.83':139
'21#.#31.69.61':139
'21#.#31.26.182':139
'21#.#31.120.219':139
'21#.#31.61.37':139
'21#.#31.37.238':139
'21#.#31.113.69':139
'21#.#31.125.210':139
'21#.#31.5.77':139
'21#.#31.195.27':139
'21#.#31.71.161':139
'21#.#31.210.216':139
'21#.#31.221.31':139
'21#.#31.1.194':139
'21#.#31.252.175':139
'21#.#31.218.59':139
'21#.#31.141.4':139
'21#.#31.35.243':139
'21#.#31.78.87':139
'21#.#31.176.30':139
'21#.#31.9.109':139
'21#.#31.102.30':139
'21#.#31.79.24':139
'21#.#31.138.85':139
'21#.#31.161.168':139
'21#.#31.192.167':139
'21#.#31.181.176':139
'21#.#31.131.228':139
'21#.#31.44.132':139
'21#.#31.160.154':139
'21#.#31.130.1':139
'21#.#31.204.129':139
'21#.#31.93.82':139
'21#.#31.157.221':139
'21#.#31.73.112':139
'21#.#31.120.210':139
'21#.#31.84.75':139
'21#.#31.159.43':139
'21#.#31.50.109':139
'21#.#31.33.106':445
'21#.#31.187.207':445
'21#.#31.119.177':445
'21#.#31.169.41':445
'21#.#31.97.34':445
'21#.#31.57.203':445
'21#.#31.174.28':445
'21#.#31.101.195':445
'21#.#31.136.100':445
'21#.#31.197.91':445
'21#.#31.75.113':445
'21#.#31.103.142':445
'21#.#31.91.79':445
'21#.#31.175.212':445
'21#.#31.57.246':445
'21#.#31.17.20':445
'21#.#31.83.12':445
'21#.#31.149.249':445
'21#.#31.177.9':445
'21#.#31.74.142':445
'21#.#31.95.199':445
'21#.#31.234.155':445
'21#.#31.88.1':445
'21#.#31.142.248':445
'21#.#31.142.142':445
'21#.#31.156.115':445
'21#.#31.81.159':445
'21#.#31.255.147':445
'21#.#31.164.54':445
'21#.#31.26.18':445
'21#.#31.32.53':445
'21#.#31.7.162':445
'21#.#31.83.67':139
'21#.#31.74.202':139
'21#.#31.253.13':139
'21#.#31.92.99':445
'21#.#31.187.121':445
'21#.#31.233.116':139
'21#.#31.124.221':445
'21#.#31.85.74':445
'21#.#31.154.159':445
'21#.#31.192.154':445
'21#.#31.45.226':445
'21#.#31.140.154':445
'21#.#31.249.186':445
'21#.#31.138.93':445
'21#.#31.61.216':445
'21#.#31.222.52':445
'21#.#31.128.148':445
'21#.#31.115.217':445
'21#.#31.43.69':445
'21#.#31.91.79':139
'21#.#31.169.41':139
'21#.#31.97.34':139
'21#.#31.74.142':139
'21#.#31.95.199':139
'21#.#31.234.155':139
'21#.#31.119.177':139
'21#.#31.197.91':139
'21#.#31.75.113':139
'21#.#31.57.203':139
'21#.#31.33.106':139
'21#.#31.187.207':139
'21#.#31.142.142':139
'21#.#31.50.109':9988
'21#.#31.83.12':139
'21#.#31.149.249':139
'21#.#31.61.37':9988
'21#.#31.71.161':9988
'21#.#31.84.75':9988
'21#.#31.17.20':139
'21#.#31.88.1':139
'21#.#31.142.248':139
'21#.#31.177.9':139
'21#.#31.175.212':139
'21#.#31.57.246':139
'21#.#31.103.142':139
'21#.#31.124.221':139
'21#.#31.26.18':139
'21#.#31.32.53':139
'21#.#31.138.93':139
'21#.#31.61.216':139
'21#.#31.222.52':139
'21#.#31.164.54':139
'21#.#31.92.99':139
'21#.#31.187.121':139
'21#.#31.7.162':139
'21#.#31.81.159':139
'21#.#31.255.147':139
'21#.#31.43.69':139
'21#.#31.156.115':139
'21#.#31.45.226':139
'21#.#31.140.154':139
'21#.#31.174.28':139
'21#.#31.101.195':139
'21#.#31.136.100':139
'21#.#31.192.154':139
'21#.#31.128.148':139
'21#.#31.115.217':139
'21#.#31.249.186':139
'21#.#31.85.74':139
'21#.#31.154.159':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней