Trojan.Starman.5328

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1d6c.dir00\svchost.exe.mdmp 16325836412032188

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1d6c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'21#.#0.103.218':445
'21#.#0.238.217':445
'21#.#0.96.110':445
'21#.40.2.86':445
'21#.#0.32.132':445
'21#.#0.188.108':445
'21#.#0.58.72':445
'21#.#0.103.178':445
'21#.#0.107.226':445
'21#.#0.32.69':139
'21#.#0.87.32':139
'21#.#0.136.116':139
'21#.#0.61.201':139
'21#.#0.224.86':139
'21#.40.88.2':445
'21#.#0.106.228':445
'21#.#0.227.223':139
'21#.#0.153.63':139
'21#.#0.87.32':445
'21#.#0.224.86':445
'21#.#0.61.201':445
'21#.#0.32.69':445
'21#.#0.227.223':445
'21#.#0.211.91':139
'21#.#0.132.162':139
'21#.#0.153.63':445
'21#.#0.67.40':139
'21#.#0.91.136':445
'21#.#0.110.43':445
'21#.#0.127.71':445
'21#.#0.77.129':445
'21#.#0.45.155':445
'21#.#0.79.33':445
'21#.#0.136.116':445
'21#.#0.61.112':445
'21#.#0.229.225':445
'21#.#0.79.33':139
'21#.#0.249.28':445
'21#.#0.217.162':445
'21#.#0.42.164':445
'21#.#0.29.180':445
'21#.#0.125.52':445
'21#.#0.49.68':445
'21#.#0.32.211':445
'21#.#0.101.172':445
'21#.#0.11.170':445
'21#.#0.61.143':445
'21#.#0.213.61':445
'21#.#0.133.168':445
'21#.#0.38.81':445
'21#.#0.207.253':445
'21#.#0.26.240':445
'21#.#0.83.26':445
'21#.#0.142.108':445
'21#.#0.20.68':445
'21#.#0.127.71':139
'21#.#0.77.129':139
'21#.#0.188.108':139
'21#.#0.58.72':139
'21#.#0.91.136':139
'21#.#0.61.112':139
'21#.#0.229.225':139
'21#.#0.110.43':139
'21#.#0.45.155':139
'21#.#0.96.110':139
'21#.40.2.86':139
'21#.40.88.2':139
'21#.#0.106.228':139
'21#.#0.103.218':139
'21#.#0.103.178':139
'21#.#0.107.226':139
'21#.#0.238.217':139
'21#.#0.32.132':139
'21#.#0.75.142':139
'21#.#0.58.55':139
'21#.#0.157.79':445
'21#.#0.51.157':139
'21#.#0.74.214':139
'21#.#0.169.37':139
'21#.#0.209.115':139
'21#.#0.37.163':139
'21#.#0.178.242':139
'21#.#0.189.144':445
'21#.#0.151.189':445
'21#.#0.189.62':445
'21#.#0.144.192':445
'21#.#0.144.151':445
'21#.#0.84.75':445
'21#.#0.32.192':445
'21#.#0.68.182':445
'21#.#0.140.179':445
'21#.#0.124.127':139
'21#.#0.44.124':139
'21#.#0.140.67':139
'21#.#0.140.21':139
'21#.#0.203.131':139
'21#.#0.80.178':139
'21#.#0.111.61':139
'21#.#0.131.36':139
'21#.#0.21.171':139
'21#.#0.101.117':139
'21#.#0.43.76':139
'21#.#0.86.195':139
'21#.#0.61.222':139
'21#.#0.39.168':139
'21#.#0.191.109':139
'21#.#0.202.196':139
'21#.#0.43.28':139
'21#.#0.105.23':139
'21#.#0.198.47':445
'21#.#0.198.47':139
'21#.#0.189.62':139
'21#.#0.120.251':139
'21#.#0.48.86':139
'21#.#0.144.192':139
'21#.#0.144.151':139
'21#.#0.68.182':139
'21#.#0.189.144':139
'21#.#0.151.189':139
'21#.#0.119.105':139
'21#.#0.99.244':139
'21#.#0.151.232':139
'21#.#0.110.66':139
'21#.#0.73.59':139
'21#.#0.233.185':139
'21#.#0.237.232':139
'21#.#0.71.168':139
'21#.#0.83.91':139
'21#.#0.73.59':445
'21#.#0.71.168':445
'21#.#0.119.105':445
'21#.#0.99.244':445
'21#.#0.83.91':445
'21#.#0.120.251':445
'21#.#0.48.86':445
'21#.#0.233.185':445
'21#.#0.237.232':445
'21#.#0.32.192':139
'21#.#0.157.79':139
'21#.#0.140.179':139
'21#.#0.84.75':139
'21#.#0.67.40':445
'21#.#0.151.232':445
'21#.#0.110.66':445
'21#.#0.211.91':445
'21#.#0.132.162':445
'21#.#0.89.177':445
'21#.#0.186.81':139
'21#.#0.53.104':139
'21#.#0.218.146':139
'21#.#0.81.219':139
'21#.#0.109.10':139
'21#.#0.188.210':445
'21#.#0.51.212':445
'21#.#0.156.186':445
'21#.#0.211.4':445
'21#.#0.97.148':139
'21#.40.2.91':139
'21#.#0.60.202':139
'21#.#0.133.163':139
'21#.#0.114.187':139
'21#.#0.138.163':139
'21#.#0.237.231':139
'21#.#0.66.203':139
'21#.#0.179.248':139
'21#.#0.210.134':445
'21#.#0.24.144':445
'21#.#0.88.254':445
'21#.#0.135.180':445
'21#.#0.169.46':445
'21#.#0.211.94':445
'21#.#0.149.108':445
'21#.#0.240.244':445
'21#.#0.6.112':445
'21#.#0.190.123':445
'21#.#0.134.217':445
'21#.#0.34.190':445
'21#.#0.82.83':445
'21#.#0.90.190':445
'21#.#0.62.35':445
'21#.#0.162.100':445
'21#.#0.26.136':445
'21#.#0.34.112':445
'21#.#0.105.94':139
'21#.#0.62.35':139
'21#.#0.162.100':139
'21#.#0.26.136':139
'21#.#0.34.112':139
'21#.#0.88.254':139
'21#.#0.24.144':139
'21#.#0.169.46':139
'21#.#0.135.180':139
'21#.#0.210.134':139
'21#.#0.188.210':139
'21#.#0.51.212':139
'21#.#0.156.186':139
'21#.#0.211.4':139
'21#.#0.34.190':139
'21#.#0.134.217':139
'21#.#0.90.190':139
'21#.#0.82.83':139
'21#.#0.190.123':139
'21#.#0.182.239':139
'21#.#0.223.25':139
'21#.#0.170.96':139
'21#.#0.93.190':139
'21#.#0.99.45':139
'21#.#0.16.54':139
'21#.#0.34.13':139
'21#.#0.155.247':139
'21#.#0.54.38':139
'21#.#0.211.94':139
'21#.#0.149.108':139
'21#.#0.240.244':139
'21#.#0.6.112':139
'21#.#0.81.87':139
'21#.#0.100.108':139
'21#.#0.149.100':139
'21#.#0.124.28':139
'21#.#0.107.157':139
'21#.#0.89.177':139
'21#.#0.133.168':139
'21#.#0.112.145':139
'21#.#0.59.113':139
'21#.#0.38.81':139
'21#.#0.207.253':139
'21#.#0.142.108':139
'21#.#0.61.143':139
'21#.#0.213.61':139
'21#.#0.169.46':9988
'21#.#0.240.244':9988
'21#.#0.210.134':9988
'21#.#0.24.144':9988
'21#.#0.211.94':9988
'21#.#0.75.89':139
'21#.#0.205.177':139
'21#.#0.157.95':139
'21#.#0.76.108':139
'21#.#0.32.211':139
'21#.#0.157.95':445
'21#.#0.11.170':139
'21#.#0.49.68':139
'21#.#0.76.108':445
'21#.#0.112.145':445
'21#.#0.59.113':445
'21#.#0.75.89':445
'21#.#0.205.177':445
'21#.#0.83.26':139
'21#.#0.42.164':139
'21#.#0.20.68':139
'21#.#0.26.240':139
'21#.#0.29.180':139
'21#.#0.125.52':139
'21#.#0.101.172':139
'21#.#0.249.28':139
'21#.#0.217.162':139
'21#.#0.135.180':9988
'21#.#0.155.247':445
'21#.#0.16.54':445
'21#.#0.99.45':445
'21#.#0.54.38':445
'21#.#0.34.13':445
'21#.#0.133.163':445
'21#.#0.97.148':445
'21#.#0.105.94':445
'21#.#0.60.202':445
'21#.#0.107.157':445
'21#.#0.100.108':445
'21#.#0.81.87':445
'21#.#0.124.28':445
'21#.#0.149.100':445
'21#.#0.182.239':445
'21#.#0.223.25':445
'21#.#0.170.96':445
'21#.#0.93.190':445
'21#.#0.156.186':9988
'21#.#0.34.190':9988
'21#.#0.53.104':445
'21#.#0.109.10':445
'21#.#0.82.83':9988
'21#.#0.162.100':9988
'21#.#0.88.254':9988
'21#.#0.134.217':9988
'21#.#0.34.112':9988
'21#.#0.66.203':445
'21#.#0.179.248':445
'21#.40.2.91':445
'21#.#0.114.187':445
'21#.#0.138.163':445
'21#.#0.81.219':445
'21#.#0.186.81':445
'21#.#0.237.231':445
'21#.#0.218.146':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней