Trojan.Starman.5345

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERa20f.dir00\svchost.exe.mdmp 16325836412032180

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa20f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'13#.#00.187.42':445
'13#.#00.126.187':445
'13#.#00.82.231':445
'13#.#00.42.237':445
'13#.#00.38.127':139
'13#.#00.166.20':445
'13#.#00.92.72':139
'13#.#00.166.20':139
'13#.#00.38.127':445
'13#.#00.36.28':445
'13#.#00.58.155':445
'13#.#00.0.96':445
'13#.#00.18.28':445
'13#.#00.139.85':445
'13#.#00.18.145':445
'13#.#00.65.126':445
'13#.#00.3.203':445
'13#.#00.88.45':445
'13#.#00.153.167':445
'13#.#00.149.100':139
'13#.#00.65.81':139
'13#.#00.206.77':139
'13#.#00.165.92':139
'13#.#00.45.168':139
'13#.#00.174.91':139
'13#.#00.82.221':139
'13#.#00.117.199':139
'13#.#00.235.108':139
'13#.#00.116.169':139
'13#.#00.199.57':139
'13#.#00.236.101':139
'13#.#00.176.236':139
'13#.#00.189.157':139
'13#.#00.102.78':139
'13#.#00.176.168':139
'13#.#00.232.2':139
'13#.#00.20.232':139
'13#.#00.192.148':139
'13#.#00.2.234':139
'13#.#00.213.0':445
'13#.#00.28.95':445
'13#.#00.98.103':445
'13#.#00.184.37':445
'13#.#00.51.215':445
'13#.#00.25.153':445
'13#.#00.144.198':445
'13#.#00.228.209':445
'13#.#00.224.38':445
'13#.#00.135.158':445
'13#.#00.37.42':445
'13#.#00.42.237':139
'13#.#00.187.42':139
'13#.#00.36.28':139
'13#.#00.82.231':139
'13#.#00.126.187':139
'13#.#00.42.53':445
'13#.#00.212.165':445
'13#.#00.251.228':445
'13#.#00.46.197':445
'13#.#00.197.217':445
'13#.#00.183.120':445
'13#.#00.128.170':445
'13#.#00.143.100':445
'13#.#00.19.75':445
'13#.#00.17.154':445
'13#.#00.165.30':445
'13#.#00.94.217':445
'13#.#00.49.38':445
'13#.#00.121.186':445
'13#.#00.204.106':445
'13#.#00.115.94':445
'13#.#00.57.232':445
'13#.#00.217.228':445
'13#.#00.251.197':445
'13#.#00.31.248':445
'13#.#00.187.88':445
'13#.#00.143.39':445
'13#.#00.121.10':445
'13#.#00.63.176':445
'13#.#00.61.60':445
'13#.#00.30.135':445
'13#.#00.83.120':445
'13#.#00.250.83':445
'13#.#00.29.30':445
'13#.#00.17.99':445
'13#.#00.126.229':445
'13#.#00.132.64':445
'13#.#00.130.241':445
'13#.#00.120.117':445
'13#.#00.65.81':445
'13#.#00.206.77':445
'13#.#00.165.92':445
'13#.#00.45.168':445
'13#.#00.174.91':445
'13#.#00.82.221':445
'13#.#00.117.199':445
'13#.#00.235.108':445
'13#.#00.116.169':445
'13#.#00.2.161':445
'13#.#00.20.146':445
'13#.#00.206.72':445
'13#.#00.0.114':445
'13#.#00.55.46':445
'13#.#00.83.213':445
'13#.#00.59.81':139
'13#.#00.100.36':139
'13#.#00.31.168':445
'13#.#00.84.115':445
'13#.#00.60.226':445
'13#.#00.69.199':445
'13#.#00.18.250':445
'13#.#00.32.177':445
'13#.#00.198.162':445
'13#.#00.12.164':445
'13#.#00.204.122':445
'13#.#00.65.208':445
'13#.#00.180.184':445
'13#.#00.167.233':445
'13#.#00.199.57':445
'13#.#00.198.162':139
'13#.#00.69.199':139
'13#.#00.2.161':139
'13#.#00.32.177':139
'13#.#00.18.250':139
'13#.#00.167.233':139
'13#.#00.204.122':139
'13#.#00.12.164':139
'13#.#00.180.184':139
'13#.#00.126.229':139
'13#.#00.250.83':139
'13#.#00.61.60':139
'13#.#00.120.117':139
'13#.#00.83.120':139
'13#.#00.30.135':139
'13#.#00.130.241':139
'13#.#00.17.99':139
'13#.#00.29.30':139
'13#.#00.132.64':139
'13#.#00.65.208':139
'13#.#00.236.101':445
'13#.#00.176.236':445
'13#.#00.189.157':445
'13#.#00.102.78':445
'13#.#00.176.168':445
'13#.#00.232.2':445
'13#.#00.20.232':445
'13#.#00.192.148':445
'13#.#00.2.234':445
'13#.#00.149.100':445
'13#.#00.55.46':139
'13#.#00.20.146':139
'13#.#00.60.226':139
'13#.#00.0.114':139
'13#.#00.206.72':139
'13#.#00.84.115':139
'13#.#00.92.72':445
'13#.#00.83.213':139
'13#.#00.31.168':139
'13#.#00.228.50':445
'13#.#00.51.164':445
'13#.#00.171.41':139
'13#.#00.238.225':445
'13#.#00.255.91':445
'13#.#00.127.138':445
'13#.#00.8.37':445
'13#.#00.2.83':445
'13#.#00.163.239':445
'13#.#00.29.238':139
'13#.#00.188.7':139
'13#.#00.27.176':139
'13#.#00.195.205':139
'13#.#00.114.247':139
'13#.#00.194.12':139
'13#.#00.1.210':139
'13#.#00.238.47':139
'13#.#00.161.206':139
'13#.#00.157.12':139
'13#.#00.70.17':445
'13#.#00.28.135':445
'13#.#00.239.118':445
'13#.#00.248.61':445
'13#.#00.117.114':445
'13#.#00.210.89':445
'13#.#00.21.238':445
'13#.#00.200.166':445
'13#.#00.19.117':445
'13#.#00.81.89':445
'13#.#00.163.130':445
'13#.#00.0.81':445
'13#.#00.52.152':445
'13#.#00.90.117':445
'13#.#00.30.13':445
'13#.#00.28.100':445
'13#.#00.58.41':445
'13#.#00.178.248':445
'13#.#00.236.170':445
'13#.#00.90.197':445
'13#.#00.225.145':139
'13#.#00.52.152':139
'13#.#00.28.100':139
'13#.#00.30.13':139
'13#.#00.0.81':139
'13#.#00.236.170':139
'13#.#00.178.248':139
'13#.#00.163.130':139
'13#.#00.90.197':139
'13#.#00.58.41':139
'13#.#00.90.117':139
'13#.#00.51.164':139
'13#.#00.238.225':139
'13#.#00.2.83':139
'13#.#00.163.239':139
'13#.#00.255.91':139
'13#.#00.8.37':139
'13#.#00.70.17':139
'13#.#00.228.50':139
'13#.#00.127.138':139
'13#.#00.248.61':139
'13#.#00.148.190':139
'13#.#00.13.137':139
'13#.#00.220.146':139
'13#.#00.191.6':139
'13#.#00.74.148':139
'13#.#00.184.120':139
'13#.#00.183.169':139
'13#.#00.87.111':139
'13#.#00.120.87':139
'13#.#00.77.212':139
'13#.#00.239.118':139
'13#.#00.210.89':139
'13#.#00.117.114':139
'13#.#00.28.135':139
'13#.#00.19.117':139
'13#.#00.200.166':139
'13#.#00.144.207':139
'13#.#00.81.89':139
'13#.#00.21.238':139
'13#.#00.115.94':139
'13#.#00.57.232':139
'13#.#00.197.217':139
'13#.#00.251.197':139
'13#.#00.31.248':139
'13#.#00.187.88':139
'13#.#00.143.39':139
'13#.#00.121.10':139
'13#.#00.63.176':139
'13#.#00.217.228':139
'13#.#00.28.95':139
'13#.#00.98.103':139
'13#.#00.184.37':139
'13#.#00.51.215':139
'13#.#00.25.153':139
'13#.#00.144.198':139
'13#.#00.228.209':139
'13#.#00.224.38':139
'13#.#00.135.158':139
'13#.#00.204.106':139
'13#.#00.58.155':139
'13#.#00.0.96':139
'13#.#00.18.28':139
'13#.#00.139.85':139
'13#.#00.18.145':139
'13#.#00.65.126':139
'13#.#00.3.203':139
'13#.#00.88.45':139
'13#.#00.153.167':139
'13#.#00.213.0':139
'13#.#00.183.120':139
'13#.#00.128.170':139
'13#.#00.143.100':139
'13#.#00.19.75':139
'13#.#00.17.154':139
'13#.#00.165.30':139
'13#.#00.94.217':139
'13#.#00.49.38':139
'13#.#00.121.186':139
'13#.#00.37.42':139
'13#.#00.195.205':445
'13#.#00.114.247':445
'13#.#00.183.169':445
'13#.#00.225.145':445
'13#.#00.188.7':445
'13#.#00.161.206':445
'13#.#00.157.12':445
'13#.#00.27.176':445
'13#.#00.194.12':445
'13#.#00.184.120':445
'13#.#00.220.146':445
'13#.#00.191.6':445
'13#.#00.144.207':445
'13#.#00.77.212':445
'13#.#00.148.190':445
'13#.#00.87.111':445
'13#.#00.120.87':445
'13#.#00.13.137':445
'13#.#00.74.148':445
'13#.#00.1.210':445
'13#.#00.87.111':9988
'13#.#00.120.87':9988
'13#.#00.148.190':9988
'13#.#00.74.148':9988
'13#.#00.183.169':9988
'13#.#00.42.53':139
'13#.#00.212.165':139
'13#.#00.251.228':139
'13#.#00.46.197':139
'13#.#00.28.135':9988
'13#.#00.171.41':445
'13#.#00.163.239':9988
'13#.#00.238.47':445
'13#.#00.29.238':445
'13#.#00.90.117':9988
'13#.#00.58.41':9988
'13#.#00.117.114':9988
'13#.#00.28.100':9988
'13#.#00.90.197':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней