Trojan.Starman.5821

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WERed99.dir00\svchost.exe.mdmp 16325836412032404

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WERed99.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'21#.#30.100.211':445
'21#.#30.109.184':445
'21#.#30.42.230':445
'21#.#30.127.210':445
'21#.#30.98.29':445
'21#.#30.229.69':445
'21#.#30.12.145':445
'21#.#30.53.224':445
'21#.#30.239.14':445
'21#.#30.58.46':139
'21#.#30.61.58':139
'21#.#30.111.25':139
'21#.#30.45.111':139
'21#.#30.225.45':139
'21#.#30.150.146':139
'21#.#30.217.39':139
'21#.#30.68.100':139
'21#.#30.219.78':139
'21#.#30.169.219':445
'21#.#30.147.55':445
'21#.#30.176.170':445
'21#.#30.234.167':445
'21#.#30.227.2':445
'21#.#30.81.88':445
'21#.#30.1.82':445
'21#.#30.5.117':445
'21#.#30.87.117':445
'21#.#30.231.137':445
'21#.#30.34.153':445
'21#.#30.116.169':445
'21#.#30.237.195':445
'21#.#30.125.58':445
'21#.#30.137.12':445
'21#.#30.121.63':445
'21#.#30.82.57':445
'21#.#30.224.55':445
'21#.#30.66.70':445
'21#.#30.121.63':139
'21#.#30.66.70':139
'21#.#30.137.12':139
'21#.#30.224.55':139
'21#.#30.5.117':139
'21#.#30.227.2':139
'21#.#30.82.57':139
'21#.#30.87.117':139
'21#.#30.234.167':139
'21#.#30.169.219':139
'21#.#30.116.169':139
'21#.#30.53.224':139
'21#.#30.239.14':139
'21#.#30.34.153':139
'21#.#30.237.195':139
'21#.#30.12.145':139
'21#.#30.125.58':139
'21#.#30.229.69':139
'21#.#30.1.82':139
'21#.#30.36.187':139
'21#.#30.67.221':139
'21#.#30.129.253':139
'21#.#30.106.96':139
'21#.#30.91.217':139
'21#.#30.126.61':139
'21#.#30.52.41':139
'21#.#30.82.247':139
'21#.#30.24.89':139
'21#.#30.147.55':139
'21#.#30.81.88':139
'21#.#30.176.170':139
'21#.#30.231.137':139
'21#.#30.234.186':139
'21#.#30.237.109':139
'21#.#30.73.237':139
'21#.#30.27.207':139
'21#.#30.109.207':139
'21#.#30.234.186':445
'21#.#30.255.109':139
'21#.#30.83.203':139
'21#.#30.24.83':139
'21#.#30.110.48':139
'21#.#30.191.121':139
'21#.#30.206.143':139
'21#.#30.5.229':139
'21#.#30.75.10':139
'21#.#30.167.91':139
'21#.#30.90.166':139
'21#.#30.56.36':139
'21#.#30.110.67':139
'21#.#30.184.127':139
'21#.#30.78.136':139
'21#.#30.5.203':139
'21#.#30.143.105':139
'21#.#30.22.78':139
'21#.#30.67.238':139
'21#.#30.58.216':139
'21#.#30.3.187':139
'21#.#30.112.17':139
'21#.#30.173.57':139
'21#.#30.1.199':139
'21#.#30.82.12':139
'21#.#30.216.112':139
'21#.#30.127.136':445
'21#.#30.10.5':139
'21#.#30.117.104':139
'21#.#30.198.191':139
'21#.#30.187.33':139
'21#.#30.35.61':139
'21#.#30.154.118':139
'21#.#30.76.248':139
'21#.#30.81.126':139
'21#.#30.137.124':139
'21#.#30.126.181':139
'21#.#30.126.126':139
'21#.#30.52.41':445
'21#.#30.126.61':445
'21#.#30.82.247':445
'21#.#30.24.89':445
'21#.#30.111.25':445
'21#.#30.61.58':445
'21#.#30.225.45':445
'21#.#30.45.111':445
'21#.#30.58.46':445
'21#.#30.129.253':445
'21#.#30.106.96':445
'21#.#30.237.109':445
'21#.#30.109.207':445
'21#.#30.27.207':445
'21#.#30.67.221':445
'21#.#30.91.217':445
'21#.#30.73.237':445
'21#.#30.36.187':445
'21#.#30.68.100':445
'21#.#30.85.135':139
'21#.#30.199.71':139
'21#.#30.208.203':139
'21#.#30.206.18':139
'21#.#30.58.1':139
'21#.#30.126.14':139
'21#.#30.157.136':139
'21#.#30.49.13':139
'21#.#30.15.61':139
'21#.#30.217.39':445
'21#.#30.127.136':139
'21#.#30.150.146':445
'21#.#30.219.78':445
'21#.#30.146.159':139
'21#.#30.7.168':139
'21#.#30.55.8':139
'21#.#30.124.236':139
'21#.#30.45.12':139
'21#.#30.100.89':139
'21#.#30.221.104':139
'21#.#30.128.79':139
'21#.#30.193.235':139
'21#.#30.226.83':139
'21#.#30.0.168':445
'21#.#30.6.54':445
'21#.#30.38.32':139
'21#.#30.78.227':139
'21#.#30.141.129':139
'21#.#30.231.227':139
'21#.#30.251.230':139
'21#.#30.60.253':139
'21#.#30.39.109':139
'21#.#30.146.11':139
'21#.#30.79.146':139
'21#.#30.97.49':139
'21#.#30.121.38':139
'21#.#30.1.141':445
'21#.#30.113.128':445
'21#.#30.51.227':445
'21#.#30.7.175':445
'21#.#30.103.28':445
'21#.#30.9.164':445
'21#.#30.23.127':445
'21#.#30.107.221':445
'21#.#30.178.139':445
'21#.#30.157.224':445
'21#.#30.152.231':445
'21#.#30.10.141':445
'21#.#30.39.198':445
'21#.#30.32.26':445
'21#.#30.129.219':445
'21#.#30.197.155':445
'21#.#30.185.26':445
'21#.#30.94.224':445
'21#.#30.56.114':445
'21#.#30.103.28':139
'21#.#30.185.26':139
'21#.#30.113.128':139
'21#.#30.56.114':139
'21#.#30.7.175':139
'21#.#30.178.139':139
'21#.#30.9.164':139
'21#.#30.197.155':139
'21#.#30.51.227':139
'21#.#30.32.26':139
'21#.#30.39.198':139
'21#.#30.0.168':139
'21#.#30.1.141':139
'21#.#30.6.54':139
'21#.#30.129.219':139
'21#.#30.94.224':139
'21#.#30.10.141':139
'21#.#30.152.231':139
'21#.#30.157.224':139
'21#.#30.0.107':139
'21#.#30.129.0':139
'21#.#30.6.245':139
'21#.#30.64.135':139
'21#.#30.26.76':139
'21#.#30.114.51':139
'21#.#30.28.125':139
'21#.#30.199.79':139
'21#.#30.159.138':139
'21#.#30.234.149':139
'21#.#30.183.210':139
'21#.#30.107.221':139
'21#.#30.23.127':139
'21#.#30.70.126':139
'21#.#30.145.107':139
'21#.#30.40.125':139
'21#.#30.16.242':139
'21#.#30.60.191':139
'21#.#30.16.242':445
'21#.#30.6.245':9988
'21#.#30.56.114':9988
'21#.#30.145.107':9988
'21#.#30.0.107':9988
'21#.#30.107.221':9988
'21#.#30.193.235':9988
'21#.#30.39.109':9988
'21#.#30.16.242':9988
'21#.#30.159.138':9988
'21#.#30.70.126':9988
'21#.#30.38.32':9988
'21#.#30.39.198':9988
'21#.#30.251.230':9988
'21#.#30.94.224':9988
'21#.#30.103.28':9988
'21#.#30.32.26':9988
'21#.#30.7.175':9988
'21#.#30.185.26':9988
'21#.#30.97.49':9988
'21#.#30.147.10':445
'21#.#30.198.109':445
'21#.#30.198.109':139
'21#.#30.147.10':139
'21#.#30.98.29':139
'21#.#30.127.210':139
'21#.#30.109.184':139
'21#.#30.100.211':139
'21#.#30.42.230':139
'21#.#30.60.253':9988
'21#.#30.146.11':9988
'21#.#30.79.146':9988
'21#.#30.121.38':9988
'21#.#30.128.79':9988
'21#.#30.221.104':9988
'21#.#30.78.227':9988
'21#.#30.231.227':9988
'21#.#30.226.83':9988
'21#.#30.129.0':445
'21#.#30.159.138':445
'21#.#30.199.79':445
'21#.#30.26.76':445
'21#.#30.114.51':445
'21#.#30.60.253':445
'21#.#30.39.109':445
'21#.#30.28.125':445
'21#.#30.251.230':445
'21#.#30.6.245':445
'21#.#30.40.125':445
'21#.#30.234.149':445
'21#.#30.183.210':445
'21#.#30.60.191':445
'21#.#30.0.107':445
'21#.#30.64.135':445
'21#.#30.70.126':445
'21#.#30.145.107':445
'21#.#30.141.129':445
'21#.#30.78.227':445
'21#.#30.51.227':9988
'21#.#30.226.83':445
'21#.#30.38.32':445
'21#.#30.10.141':9988
'21#.#30.199.79':9988
'21#.#30.64.135':9988
'21#.#30.60.191':9988
'21#.#30.0.168':9988
'21#.#30.121.38':445
'21#.#30.146.11':445
'21#.#30.231.227':445
'21#.#30.97.49':445
'21#.#30.79.146':445
'21#.#30.100.89':445
'21#.#30.221.104':445
'21#.#30.128.79':445
'21#.#30.193.235':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней