Trojan.Starman.5700

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd6b3.dir00\svchost.exe.mdmp 16325836412030280

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERd6b3.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#6.32.63':445
'19#.#6.144.52':445
'19#.#6.173.196':139
'19#.#6.199.173':139
'19#.#6.82.144':445
'19#.#6.199.173':445
'19#.#6.203.199':139
'19#.#6.92.163':445
'19#.#6.173.196':445
'19#.#6.92.163':139
'19#.#6.205.62':445
'19#.#6.174.205':445
'19#.#6.52.236':445
'19#.#6.63.53':445
'19#.#6.141.174':445
'19#.#6.144.52':139
'19#.#6.82.144':139
'19#.#6.60.142':445
'19#.#6.32.63':139
'19#.#6.26.181':139
'19#.#6.30.27':139
'19#.#6.243.188':139
'19#.#6.180.243':139
'19#.#6.42.65':139
'19#.#6.28.236':139
'19#.#6.216.167':139
'19#.#6.235.79':139
'19#.#6.85.194':139
'19#.#6.188.57':139
'19#.#6.174.136':139
'19#.#6.194.140':139
'19#.#6.209.203':139
'19#.#6.136.209':139
'19#.#6.84.150':139
'19#.#6.112.159':139
'19#.#6.39.108':139
'19#.#6.66.88':139
'19#.#6.55.209':139
'19#.#6.6.210':445
'19#.#6.146.204':445
'19#.#6.46.238':445
'19#.#6.157.47':445
'19#.#6.185.218':445
'19#.#6.163.138':445
'19#.#6.106.25':445
'19#.#6.66.130':445
'19#.#6.138.66':445
'19#.#6.38.161':445
'19#.#6.73.214':445
'19#.#6.191.95':445
'19#.#6.95.50':445
'19#.#6.186.95':445
'19#.#6.66.191':445
'19#.#6.221.83':445
'19#.#6.31.55':445
'19#.#6.23.38':445
'19#.#6.83.241':445
'19#.#6.210.83':445
'19#.#6.239.67':445
'19#.#6.9.217':445
'19#.#6.78.10':445
'19#.#6.127.121':445
'19#.#6.214.106':445
'19#.#6.108.237':445
'19#.#6.199.21':445
'19#.#6.106.34':445
'19#.#6.217.89':445
'19#.#6.110.218':445
'19#.#6.114.25':445
'19#.#6.50.144':445
'19#.#6.54.183':445
'19#.#6.212.187':445
'19#.#6.138.156':445
'19#.#6.89.138':445
'19#.#6.49.140':445
'19#.#6.70.72':445
'19#.#6.248.182':445
'19#.#6.50.20':445
'19#.#6.197.42':445
'19#.#6.99.94':445
'19#.#6.183.29':445
'19#.#6.47.127':445
'19#.#6.34.65':445
'19#.#6.176.72':445
'19#.#6.12.207':445
'19#.#6.114.36':445
'19#.#6.42.65':445
'19#.#6.235.79':445
'19#.#6.26.181':445
'19#.#6.30.27':445
'19#.#6.85.194':445
'19#.#6.226.90':445
'19#.#6.25.151':445
'19#.#6.28.236':445
'19#.#6.216.167':445
'19#.#6.73.22':445
'19#.#6.93.184':139
'19#.#6.198.237':445
'19#.#6.22.216':445
'19#.#6.169.102':139
'19#.#6.138.198':139
'19#.#6.51.146':139
'19#.#6.150.169':139
'19#.#6.253.79':139
'19#.#6.158.41':445
'19#.#6.204.76':445
'19#.#6.229.204':445
'19#.#6.46.87':445
'19#.#6.218.139':445
'19#.#6.81.32':445
'19#.#6.146.141':445
'19#.#6.63.57':445
'19#.#6.128.171':445
'19#.#6.233.24':445
'19#.#6.46.87':139
'19#.#6.218.139':139
'19#.#6.47.127':139
'19#.#6.34.65':139
'19#.#6.204.76':139
'19#.#6.128.171':139
'19#.#6.233.24':139
'19#.#6.229.204':139
'19#.#6.81.32':139
'19#.#6.12.207':139
'19#.#6.114.36':139
'19#.#6.197.42':139
'19#.#6.226.90':139
'19#.#6.25.151':139
'19#.#6.99.94':139
'19#.#6.183.29':139
'19#.#6.176.72':139
'19#.#6.248.182':139
'19#.#6.50.20':139
'19#.#6.66.88':445
'19#.#6.55.209':445
'19#.#6.194.140':445
'19#.#6.84.150':445
'19#.#6.112.159':445
'19#.#6.243.188':445
'19#.#6.180.243':445
'19#.#6.39.108':445
'19#.#6.188.57':445
'19#.#6.174.136':445
'19#.#6.158.41':139
'19#.#6.198.237':139
'19#.#6.146.141':139
'19#.#6.63.57':139
'19#.#6.22.216':139
'19#.#6.209.203':445
'19#.#6.136.209':445
'19#.#6.73.22':139
'19#.#6.203.199':445
'19#.46.28.3':445
'19#.#6.114.216':139
'19#.#6.134.145':445
'19#.#6.61.189':139
'19#.#6.216.91':139
'19#.#6.22.236':445
'19#.#6.146.121':445
'19#.#6.235.195':445
'19#.#6.230.106':445
'19#.#6.122.37':445
'19#.#6.29.49':139
'19#.#6.172.150':139
'19#.#6.136.33':139
'19#.#6.240.208':139
'19#.46.20.6':139
'19#.#6.207.85':139
'19#.#6.189.15':139
'19#.#6.48.178':139
'19#.#6.52.147':139
'19#.#6.152.126':139
'19#.#6.41.234':445
'19#.#6.141.96':445
'19#.#6.202.212':445
'19#.#6.224.161':445
'19#.#6.58.99':445
'19#.#6.24.101':445
'19#.#6.55.211':445
'19#.#6.243.122':445
'19#.#6.176.242':445
'19#.#6.85.156':445
'19#.#6.103.62':445
'19#.#6.1.224':445
'19#.#6.179.43':445
'19#.#6.63.23':445
'19#.#6.205.215':445
'19#.#6.55.169':445
'19#.#6.44.24':445
'19#.#6.220.205':445
'19#.#6.51.189':445
'19#.#6.51.189':139
'19#.#6.55.169':139
'19#.#6.205.215':139
'19#.#6.220.205':139
'19#.#6.44.24':139
'19#.#6.224.161':139
'19#.#6.41.234':139
'19#.#6.85.156':139
'19#.#6.202.212':139
'19#.#6.1.224':139
'19#.#6.122.37':139
'19#.#6.230.106':139
'19#.#6.134.145':139
'19#.#6.179.43':139
'19#.#6.146.121':139
'19#.#6.63.23':139
'19#.#6.103.62':139
'19#.#6.235.195':139
'19#.#6.22.236':139
'19#.#6.4.253':139
'19#.#6.223.4':139
'19#.#6.98.152':139
'19#.#6.239.200':139
'19#.#6.26.223':139
'19#.#6.23.219':139
'19#.#6.150.234':139
'19#.#6.182.26':139
'19#.#6.77.181':139
'19#.#6.75.224':139
'19#.#6.243.122':139
'19#.#6.176.242':139
'19#.#6.141.96':139
'19#.#6.58.99':139
'19#.#6.24.101':139
'19#.#6.110.113':139
'19#.#6.56.250':139
'19#.#6.55.211':139
'19#.#6.29.146':139
'19#.#6.106.25':139
'19#.#6.50.144':139
'19#.#6.138.66':139
'19#.#6.163.138':139
'19#.#6.54.183':139
'19#.#6.212.187':139
'19#.#6.49.140':139
'19#.#6.110.218':139
'19#.#6.114.25':139
'19#.#6.66.130':139
'19#.#6.31.55':139
'19#.#6.38.161':139
'19#.#6.83.241':139
'19#.#6.221.83':139
'19#.#6.46.238':139
'19#.#6.146.204':139
'19#.#6.185.218':139
'19#.#6.157.47':139
'19#.#6.6.210':139
'19#.#6.108.237':139
'19#.#6.52.236':139
'19#.#6.106.34':139
'19#.#6.214.106':139
'19#.#6.63.53':139
'19#.#6.141.174':139
'19#.#6.60.142':139
'19#.#6.205.62':139
'19#.#6.174.205':139
'19#.#6.199.21':139
'19#.#6.89.138':139
'19#.#6.217.89':139
'19#.#6.70.72':139
'19#.#6.138.156':139
'19#.#6.9.217':139
'19#.#6.239.67':139
'19#.#6.127.121':139
'19#.#6.78.10':139
'19#.#6.210.83':139
'19#.#6.150.234':445
'19#.#6.240.208':445
'19#.#6.77.181':445
'19#.#6.23.219':445
'19#.46.20.6':445
'19#.#6.207.85':445
'19#.#6.52.147':445
'19#.#6.172.150':445
'19#.#6.136.33':445
'19#.#6.182.26':445
'19#.#6.56.250':445
'19#.#6.75.224':445
'19#.#6.29.146':445
'19#.#6.110.113':445
'19#.#6.98.152':445
'19#.#6.223.4':445
'19#.#6.26.223':445
'19#.#6.239.200':445
'19#.#6.4.253':445
'19#.46.28.3':139
'19#.#6.95.50':139
'19#.#6.134.145':9988
'19#.46.20.6':9988
'19#.#6.186.95':139
'19#.#6.66.191':139
'19#.#6.23.38':139
'19#.#6.73.214':139
'19#.#6.191.95':139
'19#.#6.122.37':9988
'19#.#6.48.178':445
'19#.#6.29.49':445
'19#.#6.152.126':445
'19#.#6.189.15':445
'19#.#6.61.189':445
'19#.#6.63.23':9988
'19#.#6.146.121':9988
'19#.#6.216.91':445
'19#.#6.114.216':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней