Trojan.Starman.5952

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERef13.dir00\svchost.exe.mdmp 16325836412030480

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERef13.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'60.##0.83.153':139
'60.##0.53.139':445
'60.##0.157.123':139
'60.#00.39.6':139
'60.##0.153.136':445
'60.#00.39.6':445
'60.##0.83.153':445
'60.##0.147.67':445
'60.##0.157.123':445
'60.##0.147.67':139
'60.##0.135.38':445
'60.##0.42.108':445
'60.##0.24.49':445
'60.##0.37.239':445
'60.##0.154.63':445
'60.##0.53.139':139
'60.##0.153.136':139
'60.##0.102.93':445
'60.##0.138.222':445
'60.##0.136.71':139
'60.##0.16.13':139
'60.##0.160.89':139
'60.##0.18.161':139
'60.##0.196.15':139
'60.##0.93.208':139
'60.##0.86.220':139
'60.##0.179.195':139
'60.##0.69.180':139
'60.##0.230.246':139
'60.##0.11.104':139
'60.##0.82.215':139
'60.##0.226.112':139
'60.##0.181.103':139
'60.##0.231.11':139
'60.##0.86.253':139
'60.##0.231.235':139
'60.##0.149.19':139
'60.##0.125.184':139
'60.#00.0.62':445
'60.##0.225.193':445
'60.##0.46.87':445
'60.##0.7.209':445
'60.##0.194.24':445
'60.##0.81.149':445
'60.##0.165.50':445
'60.##0.57.10':445
'60.##0.40.207':445
'60.##0.221.171':445
'60.##0.108.42':445
'60.##0.228.180':445
'60.##0.128.182':445
'60.##0.138.222':139
'60.##0.14.39':445
'60.##0.28.248':445
'60.##0.61.65':445
'60.##0.125.140':445
'60.##0.173.162':445
'60.##0.129.99':445
'60.##0.122.224':445
'60.##0.145.34':445
'60.##0.93.166':445
'60.##0.200.79':445
'60.##0.255.42':445
'60.##0.86.135':445
'60.##0.25.175':445
'60.##0.4.137':445
'60.##0.31.24':445
'60.##0.166.107':445
'60.##0.84.108':445
'60.##0.123.193':445
'60.##0.216.106':445
'60.##0.237.197':445
'60.##0.5.102':445
'60.##0.59.220':445
'60.##0.107.224':445
'60.##0.57.176':445
'60.##0.197.171':445
'60.##0.124.236':445
'60.##0.69.183':445
'60.##0.68.175':445
'60.##0.89.59':445
'60.##0.229.69':445
'60.##0.154.220':445
'60.##0.92.148':445
'60.##0.162.148':445
'60.##0.94.204':445
'60.##0.175.29':445
'60.##0.179.195':445
'60.##0.69.180':445
'60.##0.16.13':445
'60.##0.196.15':445
'60.##0.93.208':445
'60.##0.129.75':445
'60.##0.165.85':445
'60.##0.86.220':445
'60.##0.193.86':445
'60.##0.199.116':445
'60.##0.114.162':139
'60.##0.98.24':445
'60.##0.101.133':445
'60.##0.208.163':139
'60.##0.39.171':139
'60.##0.235.51':139
'60.##0.104.209':139
'60.##0.171.104':139
'60.##0.24.133':445
'60.##0.254.37':445
'60.##0.50.215':445
'60.##0.163.210':445
'60.##0.41.251':445
'60.##0.148.247':445
'60.##0.121.238':445
'60.##0.133.40':445
'60.##0.24.149':445
'60.#00.4.41':445
'60.##0.136.71':445
'60.##0.92.148':139
'60.##0.163.210':139
'60.##0.94.204':139
'60.##0.154.220':139
'60.##0.41.251':139
'60.##0.148.247':139
'60.##0.24.149':139
'60.##0.254.37':139
'60.##0.50.215':139
'60.##0.162.148':139
'60.##0.165.85':139
'60.##0.175.29':139
'60.##0.193.86':139
'60.##0.129.75':139
'60.##0.68.175':139
'60.##0.69.183':139
'60.##0.229.69':139
'60.##0.89.59':139
'60.##0.124.236':139
'60.##0.149.19':445
'60.##0.125.184':445
'60.##0.82.215':445
'60.##0.231.11':445
'60.##0.86.253':445
'60.##0.160.89':445
'60.##0.18.161':445
'60.##0.231.235':445
'60.##0.230.246':445
'60.##0.11.104':445
'60.##0.133.40':139
'60.##0.24.133':139
'60.#00.4.41':139
'60.##0.121.238':139
'60.##0.98.24':139
'60.##0.226.112':445
'60.##0.181.103':445
'60.##0.101.133':139
'60.##0.199.116':139
'60.##0.25.197':445
'60.##0.130.246':445
'60.##0.148.207':139
'60.##0.112.148':139
'60.##0.84.60':445
'60.##0.169.37':445
'60.##0.26.109':445
'60.##0.170.95':445
'60.##0.199.119':445
'60.##0.253.28':139
'60.##0.87.37':139
'60.##0.76.87':139
'60.##0.4.129':139
'60.##0.186.133':139
'60.##0.230.168':139
'60.##0.254.42':139
'60.##0.249.27':139
'60.##0.196.76':139
'60.##0.207.195':139
'60.##0.111.163':445
'60.##0.107.140':445
'60.##0.247.154':445
'60.##0.114.135':445
'60.##0.134.198':445
'60.##0.17.46':445
'60.##0.78.17':445
'60.##0.211.9':445
'60.##0.149.21':445
'60.##0.202.194':445
'60.##0.126.210':445
'60.##0.5.176':445
'60.##0.221.223':445
'60.##0.84.224':445
'60.##0.235.242':445
'60.##0.92.225':445
'60.##0.62.189':445
'60.##0.74.155':445
'60.#00.5.8':445
'60.##0.201.149':139
'60.#00.5.8':139
'60.##0.169.37':139
'60.##0.84.224':139
'60.##0.92.225':139
'60.##0.221.223':139
'60.##0.247.154':139
'60.##0.114.135':139
'60.##0.5.176':139
'60.##0.26.109':139
'60.##0.74.155':139
'60.##0.84.60':139
'60.##0.130.246':139
'60.##0.25.197':139
'60.##0.170.95':139
'60.##0.199.119':139
'60.##0.202.194':139
'60.##0.235.242':139
'60.##0.62.189':139
'60.##0.126.210':139
'60.##0.169.163':139
'60.##0.76.141':139
'60.##0.78.180':139
'60.##0.20.65':139
'60.##0.62.16':139
'60.##0.66.124':139
'60.##0.94.76':139
'60.##0.57.209':139
'60.##0.138.58':139
'60.##0.194.16':139
'60.##0.134.198':139
'60.##0.149.21':139
'60.##0.111.163':139
'60.##0.107.140':139
'60.##0.211.9':139
'60.##0.229.117':139
'60.##0.130.47':139
'60.##0.17.46':139
'60.##0.78.17':139
'60.##0.216.106':139
'60.##0.237.197':139
'60.##0.165.50':139
'60.##0.57.10':139
'60.##0.84.108':139
'60.##0.57.176':139
'60.##0.197.171':139
'60.##0.123.193':139
'60.##0.5.102':139
'60.##0.221.171':139
'60.##0.108.42':139
'60.##0.7.209':139
'60.##0.61.65':139
'60.##0.125.140':139
'60.##0.194.24':139
'60.##0.81.149':139
'60.##0.40.207':139
'60.##0.225.193':139
'60.##0.46.87':139
'60.#00.0.62':139
'60.##0.24.49':139
'60.##0.86.135':139
'60.##0.25.175':139
'60.##0.37.239':139
'60.##0.154.63':139
'60.##0.102.93':139
'60.##0.135.38':139
'60.##0.42.108':139
'60.##0.31.24':139
'60.##0.166.107':139
'60.##0.93.166':139
'60.##0.59.220':139
'60.##0.107.224':139
'60.##0.200.79':139
'60.##0.255.42':139
'60.##0.4.137':139
'60.##0.122.224':139
'60.##0.145.34':139
'60.##0.129.99':139
'60.##0.201.149':445
'60.##0.4.129':445
'60.##0.66.124':445
'60.##0.94.76':445
'60.##0.186.133':445
'60.##0.230.168':445
'60.##0.196.76':445
'60.##0.87.37':445
'60.##0.76.87':445
'60.##0.138.58':445
'60.##0.194.16':445
'60.##0.78.180':445
'60.##0.229.117':445
'60.##0.130.47':445
'60.##0.20.65':445
'60.##0.62.16':445
'60.##0.57.209':445
'60.##0.169.163':445
'60.##0.76.141':445
'60.##0.74.155':9988
'60.##0.78.17':9988
'60.##0.169.37':9988
'60.##0.84.224':9988
'60.##0.14.39':139
'60.##0.28.248':139
'60.##0.173.162':139
'60.##0.228.180':139
'60.##0.128.182':139
'60.##0.84.60':9988
'60.##0.249.27':445
'60.##0.253.28':445
'60.##0.207.195':445
'60.##0.254.42':445
'60.##0.148.207':445
'60.##0.130.246':9988
'60.##0.25.197':9988
'60.##0.112.148':445
'60.##0.170.95':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней