Trojan.Starman.5912

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER483d.dir00\svchost.exe.mdmp 16325836412032344

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER483d.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#44.23.107':445
'21#.#44.180.23':445
'21#.#44.244.41':445
'21#.#44.190.94':445
'21#.#44.64.11':445
'21#.#44.41.232':445
'21#.#44.106.122':445
'21#.#44.140.230':445
'21#.#44.125.13':445
'21#.#44.143.79':139
'21#.#44.153.131':139
'21#.#44.161.202':139
'21#.#44.65.161':139
'21#.#44.128.84':445
'21#.#44.125.126':445
'21#.#44.102.220':139
'21#.#44.30.171':445
'21#.#44.44.78':445
'21#.#44.216.137':445
'21#.#44.31.39':445
'21#.#44.100.124':445
'21#.#44.245.230':445
'21#.#44.206.26':445
'21#.#44.78.38':445
'21#.#44.154.36':445
'21#.#44.149.38':445
'21#.#44.56.146':445
'21#.#44.174.209':445
'21#.#44.223.174':445
'21#.#44.173.245':445
'21#.#44.209.165':445
'21#.#44.162.126':445
'21#.#44.30.43':445
'21#.#44.114.176':445
'21#.#44.132.10':445
'21#.#44.203.10':139
'21#.#44.106.122':139
'21#.#44.140.230':139
'21#.#44.23.107':139
'21#.#44.180.23':139
'21#.#44.44.78':139
'21#.#44.173.245':139
'21#.#44.64.11':139
'21#.#44.41.232':139
'21#.#44.190.94':139
'21#.#44.146.97':445
'21#.#44.30.171':139
'21#.#44.190.190':445
'21#.#44.44.81':445
'21#.#44.125.13':139
'21#.#44.244.41':139
'21#.#44.128.84':139
'21#.#44.125.126':139
'21#.#44.209.165':139
'21#.#44.154.36':139
'21#.#44.149.38':139
'21#.#44.216.137':139
'21#.#44.31.39':139
'21#.#44.217.58':139
'21#.#44.99.75':139
'21#.#44.206.26':139
'21#.#44.78.38':139
'21#.#44.245.230':139
'21#.#44.114.176':139
'21#.#44.132.10':139
'21#.#44.174.209':139
'21#.#44.223.174':139
'21#.#44.56.146':139
'21#.#44.100.124':139
'21#.#44.162.126':139
'21#.#44.30.43':139
'21#.#44.217.58':445
'21#.#44.154.2':139
'21#.#44.6.185':139
'21#.#44.252.199':139
'21#.#44.67.148':139
'21#.#44.5.184':139
'21#.#44.4.219':139
'21#.#44.61.250':139
'21#.#44.49.189':139
'21#.#44.113.76':139
'21#.#44.53.162':139
'21#.#44.157.207':139
'21#.#44.242.165':139
'21#.#44.199.139':139
'21#.#44.62.226':139
'21#.#44.37.54':139
'21#.#44.198.7':139
'21#.#44.151.28':139
'21#.#44.54.28':139
'21#.#44.156.161':139
'21#.#44.65.13':139
'21#.#44.243.132':139
'21#.#44.95.243':139
'21#.#44.71.136':139
'21#.#44.11.218':139
'21#.#44.24.247':139
'21#.#44.194.25':139
'21#.#44.132.232':139
'21#.#44.104.253':139
'21#.#44.242.14':139
'21#.#44.229.2':139
'21#.#44.34.11':139
'21#.#44.96.82':139
'21#.#44.194.115':139
'21#.#44.16.254':139
'21#.#44.156.141':139
'21#.#44.165.197':139
'21#.#44.64.123':139
'21#.#44.95.252':139
'21#.#44.1.203':139
'21#.#44.34.78':139
'21#.#44.27.127':139
'21#.#44.55.143':139
'21#.#44.23.42':139
'21#.#44.92.23':139
'21#.#44.141.152':139
'21#.#44.161.202':445
'21#.#44.65.161':445
'21#.#44.99.75':445
'21#.#44.203.10':445
'21#.#44.102.220':445
'21#.#44.175.216':139
'21#.#44.143.79':445
'21#.#44.153.131':445
'21#.#44.22.244':139
'21#.#44.55.143':445
'21#.#44.22.244':445
'21#.#44.92.23':445
'21#.#44.27.127':445
'21#.#44.19.177':139
'21#.#44.198.80':139
'21#.#44.145.140':445
'21#.#44.46.185':445
'21#.#44.23.42':445
'21#.#44.175.216':445
'21#.#44.141.152':445
'21#.#44.145.140':139
'21#.#44.46.185':139
'21#.#44.64.123':445
'21#.#44.95.252':445
'21#.#44.1.203':445
'21#.#44.34.78':445
'21#.#44.5.39':445
'21#.#44.174.191':139
'21#.#44.18.174':139
'21#.#44.100.117':139
'21#.#44.89.14':139
'21#.#44.22.74':445
'21#.#44.53.133':445
'21#.#44.87.118':139
'21#.#44.177.76':139
'21#.#44.117.74':139
'21#.#44.133.107':139
'21#.#44.143.99':139
'21#.#44.99.187':139
'21#.#44.250.237':139
'21#.#44.51.146':139
'21#.#44.2.99':139
'21#.#44.83.143':139
'21#.#44.146.83':139
'21#.#44.84.44':445
'21#.#44.190.232':445
'21#.#44.58.246':445
'21#.#44.159.119':445
'21#.#44.134.158':445
'21#.#44.32.243':445
'21#.#44.41.16':445
'21#.#44.156.22':445
'21#.#44.228.156':445
'21#.#44.119.42':445
'21#.#44.38.145':445
'21#.#44.183.201':445
'21#.#44.133.207':445
'21#.#44.207.154':445
'21#.#44.197.209':445
'21#.#44.35.162':445
'21#.#44.42.16':445
'21#.#44.247.127':445
'21#.#44.7.250':139
'21#.#44.119.42':139
'21#.#44.159.119':139
'21#.#44.197.209':139
'21#.#44.35.162':139
'21#.#44.58.246':139
'21#.#44.156.22':139
'21#.#44.134.158':139
'21#.#44.190.232':139
'21#.#44.247.127':139
'21#.#44.84.44':139
'21#.#44.133.207':139
'21#.#44.207.154':139
'21#.#44.53.133':139
'21#.#44.183.201':139
'21#.#44.42.16':139
'21#.#44.22.74':139
'21#.#44.38.145':139
'21#.#44.228.156':139
'21#.#44.0.212':139
'21#.#44.41.231':139
'21#.#44.155.242':139
'21#.#44.211.155':139
'21#.#44.105.226':139
'21#.#44.220.105':139
'21#.#44.96.253':139
'21#.#44.226.188':139
'21#.#44.7.68':139
'21#.#44.251.197':139
'21#.#44.5.25':139
'21#.#44.32.243':139
'21#.#44.41.16':139
'21#.#44.72.45':139
'21#.#44.45.83':139
'21#.#44.53.51':139
'21#.#44.1.136':139
'21#.#44.251.197':445
'21#.#44.96.253':9988
'21#.#44.105.226':9988
'21#.#44.155.242':9988
'21#.#44.211.155':9988
'21#.#44.107.102':139
'21#.#44.188.109':139
'21#.#44.230.90':139
'21#.#44.111.132':139
'21#.#44.53.51':9988
'21#.#44.119.42':9988
'21#.#44.156.22':9988
'21#.#44.197.209':9988
'21#.#44.35.162':9988
'21#.#44.251.197':9988
'21#.#44.5.25':9988
'21#.#44.32.243':9988
'21#.#44.41.16':9988
'21#.#44.85.21':139
'21#.#44.188.109':445
'21#.#44.85.21':445
'21#.#44.111.132':445
'21#.#44.107.102':445
'21#.#44.123.53':445
'21#.#44.61.66':445
'21#.#44.135.231':445
'21#.#44.255.131':445
'21#.#44.230.90':445
'21#.#44.123.53':139
'21#.#44.61.66':139
'21#.#44.135.231':139
'21#.#44.255.131':139
'21#.#44.44.81':139
'21#.#44.146.97':139
'21#.#44.5.39':139
'21#.#44.190.190':139
'21#.#44.247.127':9988
'21#.#44.226.188':445
'21#.#44.105.226':445
'21#.#44.41.231':445
'21#.#44.96.253':445
'21#.#44.99.187':445
'21#.#44.250.237':445
'21#.#44.220.105':445
'21#.#44.7.250':445
'21#.#44.0.212':445
'21#.#44.1.136':445
'21#.#44.72.45':445
'21#.#44.5.25':445
'21#.#44.53.51':445
'21#.#44.155.242':445
'21#.#44.211.155':445
'21#.#44.45.83':445
'21#.#44.7.68':445
'21#.#44.133.107':445
'21#.#44.177.76':445
'21#.#44.53.133':9988
'21#.#44.18.174':445
'21#.#44.87.118':445
'21#.#44.133.207':9988
'21#.#44.207.154':9988
'21#.#44.22.74':9988
'21#.#44.42.16':9988
'21#.#44.174.191':445
'21#.#44.146.83':445
'21#.#44.51.146':445
'21#.#44.143.99':445
'21#.#44.83.143':445
'21#.#44.100.117':445
'21#.#44.89.14':445
'21#.#44.2.99':445
'21#.#44.117.74':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней