Trojan.Starman.5116

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER9a18.dir00\svchost.exe.mdmp 16325836412032640

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#3.157.123':445
'21#.#3.88.111':445
'21#.#3.124.88':445
'21#.#3.92.252':445
'21#.#3.34.59':445
'21#.#3.51.151':445
'21#.#3.23.254':445
'21#.#3.95.164':445
'21#.#3.157.47':445
'21#.#3.179.149':445
'21#.#3.139.182':445
'21#.#3.195.59':445
'21#.83.87.7':445
'21#.#3.91.141':445
'21#.#3.200.165':445
'21#.#3.30.168':445
'21#.#3.193.29':139
'21#.#3.155.52':139
'21#.#3.180.213':445
'21#.#3.54.20':445
'21#.#3.243.219':445
'21#.#3.193.133':445
'21#.#3.86.162':445
'21#.#3.116.211':445
'21#.#3.41.68':445
'21#.#3.232.169':445
'21#.#3.23.51':445
'21#.#3.227.112':445
'21#.#3.30.12':445
'21#.#3.10.222':445
'21#.#3.27.234':445
'21#.#3.60.188':445
'21#.#3.16.12':139
'21#.#3.76.145':139
'21#.#3.10.17':139
'21#.#3.193.29':445
'21#.#3.155.52':445
'21#.#3.170.120':139
'21#.#3.247.104':445
'21#.#3.232.54':445
'21#.#3.211.34':445
'21#.#3.102.245':445
'21#.#3.202.68':445
'21#.#3.205.158':445
'21#.#3.200.204':445
'21#.#3.75.239':445
'21#.#3.157.75':445
'21#.#3.104.157':445
'21#.#3.96.172':445
'21#.#3.92.244':445
'21#.#3.157.228':445
'21#.#3.30.12':139
'21#.#3.54.20':139
'21#.#3.243.219':139
'21#.#3.193.133':139
'21#.#3.86.162':139
'21#.#3.116.211':139
'21#.#3.41.68':139
'21#.#3.51.151':139
'21#.#3.157.123':139
'21#.#3.88.111':139
'21#.83.87.7':139
'21#.#3.92.252':139
'21#.#3.34.59':139
'21#.#3.30.168':139
'21#.#3.5.102':445
'21#.#3.82.90':445
'21#.#3.2.202':445
'21#.#3.125.121':139
'21#.#3.191.124':139
'21#.#3.208.172':139
'21#.#3.180.213':139
'21#.#3.91.141':139
'21#.#3.200.165':139
'21#.#3.125.121':445
'21#.#3.191.124':445
'21#.#3.208.172':445
'21#.#3.124.88':139
'21#.#3.75.239':139
'21#.#3.157.75':139
'21#.#3.104.157':139
'21#.#3.96.172':139
'21#.#3.92.244':139
'21#.#3.157.228':139
'21#.#3.60.188':139
'21#.#3.23.51':139
'21#.#3.227.112':139
'21#.#3.247.104':139
'21#.#3.10.222':139
'21#.#3.27.234':139
'21#.#3.102.245':139
'21#.#3.195.59':139
'21#.#3.95.164':139
'21#.#3.157.47':139
'21#.#3.179.149':139
'21#.#3.139.182':139
'21#.#3.23.254':139
'21#.#3.200.204':139
'21#.#3.232.54':139
'21#.#3.211.34':139
'21#.#3.232.169':139
'21#.#3.202.68':139
'21#.#3.205.158':139
'21#.#3.56.159':139
'21#.#3.98.105':445
'21#.#3.133.208':445
'21#.#3.106.252':445
'21#.#3.211.214':445
'21#.#3.83.240':445
'21#.#3.105.84':445
'21#.#3.61.67':445
'21#.#3.255.193':445
'21#.#3.16.80':445
'21#.#3.164.91':445
'21#.#3.121.238':445
'21#.#3.141.10':445
'21#.#3.145.30':445
'21#.#3.89.250':445
'21#.#3.43.252':445
'21#.#3.151.146':445
'21#.#3.171.34':445
'21#.83.14.0':445
'21#.#3.148.53':445
'21#.#3.191.157':445
'21#.#3.76.191':445
'21#.#3.39.193':445
'21#.#3.16.65':445
'21#.#3.101.208':445
'21#.#3.1.122':445
'21#.#3.118.113':445
'21#.#3.236.235':445
'21#.#3.62.60':445
'21#.#3.242.36':445
'21#.#3.76.119':445
'21#.#3.178.69':445
'21#.#3.149.97':445
'21#.#3.238.48':139
'21#.#3.11.18':139
'21#.#3.85.90':139
'21#.#3.118.193':139
'21#.#3.129.141':139
'21#.#3.168.201':139
'21#.#3.36.68':445
'21#.#3.46.122':445
'21#.#3.41.105':445
'21#.#3.0.229':445
'21#.#3.148.217':445
'21#.#3.134.124':445
'21#.#3.23.135':445
'21#.#3.180.39':445
'21#.#3.57.74':445
'21#.#3.100.162':445
'21#.#3.113.101':445
'21#.#3.11.22':445
'21#.#3.118.31':445
'21#.#3.242.36':139
'21#.#3.191.157':139
'21#.#3.76.191':139
'21#.#3.39.193':139
'21#.#3.16.65':139
'21#.#3.101.208':139
'21#.#3.1.122':139
'21#.#3.105.84':139
'21#.#3.98.105':139
'21#.#3.133.208':139
'21#.#3.145.30':139
'21#.#3.211.214':139
'21#.#3.83.240':139
'21#.#3.151.146':139
'21#.#3.76.145':445
'21#.#3.10.17':445
'21#.#3.56.159':445
'21#.#3.98.215':139
'21#.#3.170.120':445
'21#.#3.16.12':445
'21#.#3.148.53':139
'21#.#3.89.250':139
'21#.#3.43.252':139
'21#.#3.98.215':445
'21#.#3.171.34':139
'21#.83.14.0':139
'21#.#3.106.252':139
'21#.#3.180.39':139
'21#.#3.57.74':139
'21#.#3.100.162':139
'21#.#3.113.101':139
'21#.#3.11.22':139
'21#.#3.118.31':139
'21#.#3.149.97':139
'21#.#3.236.235':139
'21#.#3.62.60':139
'21#.#3.36.68':139
'21#.#3.76.119':139
'21#.#3.178.69':139
'21#.#3.0.229':139
'21#.#3.61.67':139
'21#.#3.255.193':139
'21#.#3.16.80':139
'21#.#3.164.91':139
'21#.#3.121.238':139
'21#.#3.141.10':139
'21#.#3.23.135':139
'21#.#3.46.122':139
'21#.#3.41.105':139
'21#.#3.118.113':139
'21#.#3.148.217':139
'21#.#3.134.124':139
'21#.#3.2.202':139
'21#.#3.129.194':445
'21#.#3.113.129':445
'21#.#3.35.114':445
'21#.#3.89.12':445
'21#.#3.128.120':445
'21#.#3.194.219':445
'21#.#3.95.181':445
'21#.#3.145.75':445
'21#.#3.88.65':445
'21#.#3.67.129':445
'21#.#3.196.166':445
'21#.#3.124.83':445
'21#.#3.55.80':445
'21#.#3.147.47':445
'21#.#3.195.40':445
'21#.#3.149.177':445
'21#.#3.155.101':445
'21#.#3.66.32':445
'21#.#3.22.67':445
'21#.#3.35.209':445
'21#.#3.207.220':445
'21#.#3.47.54':445
'21#.#3.156.149':445
'21#.#3.231.156':445
'21#.#3.224.231':445
'21#.#3.19.95':445
'21#.#3.139.252':445
'21#.#3.92.76':445
'21#.#3.138.139':445
'21#.#3.101.170':445
'21#.#3.13.104':445
'21#.#3.251.148':445
'21#.83.79.8':445
'21#.#3.133.56':445
'21#.#3.149.177':9988
'21#.#3.230.137':445
'21#.#3.75.14':445
'21#.#3.44.171':445
'21#.#3.64.189':445
'21#.#3.240.170':445
'21#.#3.54.195':445
'21#.#3.136.21':445
'21#.#3.178.45':445
'21#.#3.45.178':445
'21#.#3.195.70':445
'21#.#3.65.137':445
'21#.#3.9.117':445
'21#.#3.116.121':445
'21#.#3.65.48':445
'21#.#3.132.25':445
'21#.#3.88.218':445
'21#.#3.101.111':445
'21#.#3.194.219':139
'21#.#3.129.194':139
'21#.#3.113.129':139
'21#.#3.55.80':139
'21#.#3.89.12':139
'21#.#3.128.120':139
'21#.#3.124.83':139
'21#.#3.95.181':139
'21#.#3.145.75':139
'21#.#3.35.114':139
'21#.#3.67.129':139
'21#.#3.196.166':139
'21#.#3.47.54':139
'21#.#3.22.67':139
'21#.#3.147.47':139
'21#.#3.195.40':139
'21#.#3.155.101':139
'21#.#3.101.111':139
'21#.#3.66.32':139
'21#.#3.224.231':139
'21#.#3.35.209':139
'21#.#3.207.220':139
'21#.#3.149.177':139
'21#.#3.156.149':139
'21#.#3.231.156':139
'21#.#3.88.65':139
'21#.#3.251.148':139
'21#.#3.139.252':139
'21#.#3.92.76':139
'21#.#3.64.189':139
'21#.#3.101.170':139
'21#.#3.13.104':139
'21#.#3.44.171':139
'21#.83.79.8':139
'21#.#3.133.56':139
'21#.#3.138.139':139
'21#.#3.230.137':139
'21#.#3.75.14':139
'21#.#3.116.121':139
'21#.#3.195.70':139
'21#.#3.240.170':139
'21#.#3.54.195':139
'21#.#3.19.95':139
'21#.#3.178.45':139
'21#.#3.45.178':139
'21#.#3.88.218':139
'21#.#3.65.137':139
'21#.#3.9.117':139
'21#.#3.136.21':139
'21#.#3.65.48':139
'21#.#3.132.25':139
'21#.#3.224.231':9988
'21#.#3.176.202':445
'21#.#3.133.177':445
'21#.#3.38.133':445
'21#.#3.142.42':445
'21#.#3.84.30':445
'21#.#3.164.73':445
'21#.#3.53.136':445
'21#.#3.143.112':445
'21#.#3.147.165':445
'21#.#3.44.98':445
'21#.#3.186.150':445
'21#.#3.183.196':445
'21#.#3.43.58':445
'21#.#3.1.205':139
'21#.#3.246.45':445
'21#.#3.144.132':445
'21#.#3.17.170':139
'21#.#3.146.114':139
'21#.#3.47.85':139
'21#.#3.168.16':445
'21#.#3.21.133':445
'21#.#3.150.110':445
'21#.#3.156.144':445
'21#.#3.158.120':445
'21#.#3.73.174':445
'21#.83.52.2':445
'21#.#3.40.91':445
'21#.#3.44.201':445
'21#.83.18.5':445
'21#.#3.137.94':445
'21#.#3.28.73':445
'21#.#3.152.62':445
'21#.#3.1.205':445
'21#.#3.5.102':139
'21#.#3.82.90':139
'21#.#3.17.170':445
'21#.#3.146.114':445
'21#.#3.47.85':445
'21#.83.28.4':445
'21#.#3.204.69':445
'21#.#3.150.62':445
'21#.#3.134.55':445
'21#.#3.211.83':445
'21#.#3.42.211':445
'21#.#3.114.43':445
'21#.#3.71.238':445
'21#.#3.106.202':445
'21#.#3.111.52':445
'21#.#3.17.134':445
'21#.#3.160.17':445
'21#.#3.87.160':445
'21#.83.18.5':139
'21#.#3.168.16':139
'21#.#3.21.133':139
'21#.#3.150.110':139
'21#.#3.156.144':139
'21#.#3.158.120':139
'21#.#3.73.174':139
'21#.#3.164.73':139
'21#.#3.176.202':139
'21#.#3.133.177':139
'21#.#3.43.58':139
'21#.#3.142.42':139
'21#.#3.84.30':139
'21#.#3.144.132':139
'21#.#3.156.149':9988
'21#.#3.195.40':9988
'21#.#3.35.209':9988
'21#.#3.231.156':9988
'21#.#3.101.111':9988
'21#.#3.66.32':9988
'21#.#3.13.104':9988
'21#.83.79.8':9988
'21#.#3.246.45':139
'21#.#3.129.194':9988
'21#.#3.19.95':9988
'21#.#3.101.170':9988
'21#.#3.38.133':139
'21#.#3.71.238':139
'21#.#3.106.202':139
'21#.#3.111.52':139
'21#.#3.17.134':139
'21#.#3.160.17':139
'21#.#3.87.160':139
'21#.#3.152.62':139
'21#.#3.40.91':139
'21#.#3.44.201':139
'21#.83.28.4':139
'21#.#3.137.94':139
'21#.#3.28.73':139
'21#.#3.134.55':139
'21#.#3.53.136':139
'21#.#3.143.112':139
'21#.#3.147.165':139
'21#.#3.44.98':139
'21#.#3.186.150':139
'21#.#3.183.196':139
'21#.#3.114.43':139
'21#.#3.204.69':139
'21#.#3.150.62':139
'21#.83.52.2':139
'21#.#3.211.83':139
'21#.#3.42.211':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней