Trojan.Starman.5904

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERc0d5.dir00\svchost.exe.mdmp 16325836412032204

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc0d5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'12#.#80.28.29':139
'12#.#80.204.178':139
'12#.#80.85.76':139
'12#.#80.150.125':139
'12#.#80.221.148':139
'12#.#80.29.2':139
'12#.#80.137.87':139
'12#.#80.172.218':139
'12#.#80.45.205':139
'12#.#80.208.120':139
'12#.#80.50.120':139
'12#.#80.123.253':139
'12#.#80.38.191':139
'12#.#80.171.203':139
'12#.#80.184.102':139
'12#.#80.240.68':139
'12#.#80.13.167':139
'12#.#80.93.91':139
'12#.#80.221.159':139
'12#.#80.5.109':139
'12#.#80.84.58':139
'12#.#80.84.58':445
'12#.#80.221.159':445
'12#.#80.5.109':445
'12#.#80.123.253':445
'12#.#80.38.191':445
'12#.#80.150.125':445
'12#.#80.221.148':445
'12#.#80.50.120':445
'12#.#80.13.167':445
'12#.#80.93.91':445
'12#.#80.171.203':445
'12#.#80.95.3':445
'12#.#80.152.15':445
'12#.#80.209.156':139
'12#.#80.21.61':139
'12#.#80.45.22':139
'12#.#80.184.102':445
'12#.#80.240.68':445
'12#.#80.21.45':445
'12#.#80.29.223':445
'12#.#80.44.114':445
'12#.#80.197.70':139
'12#.#80.53.173':445
'12#.#80.61.251':139
'12#.#80.152.219':139
'12#.#80.72.152':139
'12#.#80.64.129':445
'12#.#80.72.173':445
'12#.#80.249.200':445
'12#.#80.176.60':445
'12#.#80.14.93':445
'12#.#80.199.209':139
'12#.#80.218.74':139
'12#.#80.163.43':139
'12#.#80.174.88':139
'12#.#80.73.111':139
'12#.#80.129.194':139
'12#.#80.103.48':139
'12#.#80.62.31':139
'12#.#80.41.208':139
'12#.#80.132.184':139
'12#.#80.208.39':139
'12#.#80.61.251':445
'12#.#80.197.70':445
'12#.#80.72.152':445
'12#.#80.199.209':445
'12#.#80.152.219':445
'12#.#80.44.114':139
'12#.#80.21.45':139
'12#.#80.29.223':139
'12#.#80.95.3':139
'12#.#80.152.15':139
'12#.#80.62.31':445
'12#.#80.174.88':445
'12#.#80.218.74':445
'12#.#80.129.194':445
'12#.#80.79.243':445
'12#.#80.73.111':445
'12#.#80.41.208':445
'12#.#80.103.48':445
'12#.#80.208.39':445
'12#.#80.163.43':445
'12#.#80.132.184':445
'12#.#80.188.71':139
'12#.#80.254.22':139
'12#.#80.70.43':139
'12#.#80.56.253':445
'12#.#80.43.111':445
'12#.#80.1.45':139
'12#.#80.5.240':139
'12#.#80.245.87':139
'12#.#80.33.138':139
'12#.#80.88.11':139
'12#.#80.177.161':445
'12#.#80.173.174':445
'12#.#80.117.252':445
'12#.#80.96.10':445
'12#.#80.204.157':445
'12#.#80.72.161':445
'12#.#80.251.121':445
'12#.#80.32.78':445
'12#.#80.73.187':445
'12#.#80.129.133':445
'12#.#80.243.73':445
'12#.#80.122.91':139
'12#.#80.232.121':139
'12#.#80.11.165':139
'12#.#80.12.156':139
'12#.#80.204.146':139
'12#.#80.103.130':139
'12#.#80.83.19':139
'12#.#80.130.1':139
'12#.#80.47.62':139
'12#.#80.77.217':139
'12#.#80.155.159':139
'12#.#80.114.58':139
'12#.#80.27.15':139
'12#.#80.182.13':139
'12#.#80.127.4':139
'12#.#80.13.102':139
'12#.#80.237.91':139
'12#.#80.24.245':139
'12#.#80.231.108':139
'12#.#80.201.186':139
'12#.#80.164.9':139
'12#.#80.13.60':139
'12#.#80.131.157':139
'12#.#80.172.234':139
'12#.#80.22.65':139
'12#.#80.51.229':139
'12#.#80.139.144':139
'12#.#80.204.157':139
'12#.#80.103.62':139
'12#.#80.118.52':139
'12#.#80.23.127':139
'12#.#80.209.156':445
'12#.#80.45.205':445
'12#.#80.208.120':445
'12#.#80.204.178':445
'12#.#80.85.76':445
'12#.#80.28.29':445
'12#.#80.21.61':445
'12#.#80.45.22':445
'12#.#80.137.87':445
'12#.#80.172.218':445
'12#.#80.29.2':445
'12#.#80.172.234':445
'12#.#80.13.60':445
'12#.#80.51.229':445
'12#.#80.43.111':139
'12#.#80.22.65':445
'12#.#80.103.62':445
'12#.#80.139.144':445
'12#.#80.23.127':445
'12#.#80.131.157':445
'12#.#80.118.52':445
'12#.#80.56.253':139
'12#.#80.117.252':139
'12#.#80.129.133':139
'12#.#80.173.174':139
'12#.#80.72.161':139
'12#.#80.96.10':139
'12#.#80.32.78':139
'12#.#80.177.161':139
'12#.#80.251.121':139
'12#.#80.243.73':139
'12#.#80.73.187':139
'12#.#80.79.243':139
'12#.#80.96.72':445
'12#.#80.24.139':445
'12#.#80.92.118':445
'12#.#80.18.101':445
'12#.#80.13.113':445
'12#.#80.124.15':445
'12#.#80.123.208':445
'12#.#80.64.80':445
'12#.#80.105.24':445
'12#.#80.185.208':445
'12#.#80.10.48':445
'12#.#80.135.90':139
'12#.#80.208.1':139
'12#.#80.20.36':139
'12#.#80.13.78':139
'12#.#80.141.76':139
'12#.#80.128.57':139
'12#.#80.36.101':445
'12#.#80.29.160':139
'12#.#80.192.165':139
'12#.#80.160.94':139
'12#.#80.22.90':445
'12#.#80.235.224':445
'12#.#80.32.101':445
'12#.#80.176.102':445
'12#.#80.162.216':445
'12#.#80.49.46':445
'12#.#80.14.49':445
'12#.#80.95.126':445
'12#.#80.27.112':445
'12#.#80.10.212':445
'12#.#80.4.163':445
'12#.#80.247.197':445
'12#.#80.23.25':445
'12#.#80.197.208':445
'12#.#80.25.90':445
'12#.#80.21.91':445
'12#.#80.234.177':445
'12#.#80.3.66':445
'12#.#80.165.127':445
'12#.#80.125.244':445
'12#.#80.100.183':445
'12#.#80.197.208':139
'12#.#80.247.197':139
'12#.#80.21.91':139
'12#.#80.123.208':139
'12#.#80.25.90':139
'12#.#80.165.127':139
'12#.#80.234.177':139
'12#.#80.100.183':139
'12#.#80.23.25':139
'12#.#80.125.244':139
'12#.#80.124.15':139
'12#.#80.13.113':139
'12#.#80.92.118':139
'12#.#80.18.101':139
'12#.#80.10.48':139
'12#.#80.36.101':139
'12#.#80.185.208':139
'12#.#80.64.80':139
'12#.#80.105.24':139
'12#.#80.96.72':139
'12#.#80.24.139':139
'12#.#80.193.61':139
'12#.#80.90.182':139
'12#.#80.129.32':139
'12#.#80.14.49':139
'12#.#80.56.14':139
'12#.#80.117.176':139
'12#.#80.122.64':139
'12#.#80.95.235':139
'12#.#80.89.124':139
'12#.#80.178.21':139
'12#.#80.49.46':139
'12#.#80.162.216':139
'12#.#80.32.101':139
'12#.#80.176.102':139
'12#.#80.3.66':139
'12#.#80.4.163':139
'12#.#80.10.212':139
'12#.#80.95.126':139
'12#.#80.27.112':139
'12#.#80.22.90':139
'12#.#80.235.224':139
'12#.#80.133.25':445
'12#.#80.23.133':445
'12#.#80.136.13':445
'12#.#80.12.31':139
'12#.#80.59.250':139
'12#.#80.40.91':445
'12#.#80.155.190':445
'12#.#80.236.13':445
'12#.#80.178.22':445
'12#.#80.22.178':445
'12#.#80.236.165':139
'12#.#80.94.160':139
'12#.#80.122.72':139
'12#.#80.154.66':139
'12#.#80.191.198':139
'12#.#80.78.188':139
'12#.#80.230.250':139
'12#.#80.100.111':139
'12#.#80.215.77':139
'12#.#80.47.167':139
'12#.#80.78.47':139
'12#.#80.59.250':445
'12#.#80.53.173':139
'12#.#80.12.31':445
'12#.#80.100.111':445
'12#.#80.236.165':445
'12#.#80.64.129':139
'12#.#80.72.173':139
'12#.#80.249.200':139
'12#.#80.176.60':139
'12#.#80.14.93':139
'12#.#80.230.250':445
'12#.#80.78.188':445
'12#.#80.154.66':445
'12#.#80.191.198':445
'12#.#80.207.103':445
'12#.#80.161.207':445
'12#.#80.78.47':445
'12#.#80.215.77':445
'12#.#80.47.167':445
'12#.#80.94.160':445
'12#.#80.122.72':445
'12#.#80.192.165':445
'12#.#80.160.94':445
'12#.#80.208.1':445
'12#.#80.20.36':445
'12#.#80.135.90':445
'12#.#80.18.101':9988
'12#.#80.36.101':9988
'12#.#80.13.113':9988
'12#.#80.29.160':445
'12#.#80.128.57':445
'12#.#80.141.76':445
'12#.#80.90.182':445
'12#.#80.89.124':445
'12#.#80.193.61':445
'12#.#80.56.14':445
'12#.#80.129.32':445
'12#.#80.122.64':445
'12#.#80.13.78':445
'12#.#80.117.176':445
'12#.#80.178.21':445
'12#.#80.95.235':445
'12#.#80.178.22':139
'12#.#80.22.178':139
'12#.#80.23.133':139
'12#.#80.136.13':139
'12#.#80.133.25':139
'12#.#80.207.103':139
'12#.#80.161.207':139
'12#.#80.155.190':139
'12#.#80.236.13':139
'12#.#80.40.91':139
'12#.#80.10.212':9988
'12#.#80.124.15':9988
'12#.#80.197.208':9988
'12#.#80.96.72':9988
'12#.#80.10.48':9988
'12#.#80.92.118':9988
'12#.#80.235.224':9988
'12#.#80.27.112':9988
'12#.#80.32.101':9988
'12#.#80.3.66':9988
'12#.#80.176.102':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней