Trojan.Starman.5121

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc071.dir00\svchost.exe.mdmp 16325836412030152

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##4.115.241':139
'12.##4.69.218':139
'12.##4.43.174':139
'12.##4.193.250':139
'12.##4.61.198':139
'12.##4.241.205':139
'12.##4.141.148':445
'12.##4.20.95':445
'12.##4.26.88':445
'12.##4.102.249':445
'12.##4.230.242':445
'12.##4.223.64':445
'12.##4.249.152':445
'12.##4.173.131':139
'12.##4.111.216':139
'12.##4.97.247':139
'12.##4.26.88':139
'12.##4.102.249':139
'12.##4.170.192':139
'12.##4.82.241':139
'12.##4.135.103':139
'12.##4.163.76':139
'12.##4.250.221':139
'12.##4.73.19':139
'12.##4.100.60':139
'12.##4.103.100':139
'12.##4.170.192':445
'12.##4.2.237':139
'12.##4.75.119':139
'12.##4.80.181':139
'12.##4.115.241':445
'12.##4.69.218':445
'12.##4.43.174':445
'12.##4.198.14':139
'12.##4.132.222':139
'12.##4.235.250':139
'12.##4.47.88':139
'12.##4.88.229':139
'12.##4.52.189':139
'12.##4.222.52':139
'12.##4.82.241':445
'12.##4.73.19':445
'12.##4.100.60':445
'12.##4.173.131':445
'12.##4.111.216':445
'12.##4.97.247':445
'12.##4.103.100':445
'12.##4.193.250':445
'12.##4.61.198':445
'12.##4.241.205':445
'12.##4.135.103':445
'12.##4.163.76':445
'12.##4.250.221':445
'12.##4.20.95':139
'12.##4.97.207':139
'12.##4.64.53':139
'12.##4.24.92':139
'12.##4.114.48':139
'12.##4.240.19':139
'12.##4.207.237':139
'12.##4.178.85':139
'12.##4.202.143':445
'12.##4.34.202':445
'12.##4.53.84':445
'12.##4.41.151':139
'12.##4.61.183':139
'12.##4.102.214':445
'12.##4.254.176':139
'12.##4.184.107':139
'12.##4.45.210':139
'12.##4.65.193':139
'12.##4.25.64':139
'12.##4.177.133':139
'12.##4.10.19':139
'12.##4.27.139':139
'12.##4.111.250':139
'12.##4.98.39':139
'12.##4.93.182':139
'12.##4.13.85':139
'12.##4.253.104':139
'12.#74.43.1':445
'12.##4.97.207':445
'12.##4.64.53':445
'12.##4.24.92':445
'12.##4.114.48':445
'12.##4.240.19':445
'12.##4.207.237':445
'12.##4.178.85':445
'12.##4.230.242':139
'12.##4.223.64':139
'12.##4.249.152':139
'12.##4.41.151':445
'12.##4.61.183':445
'12.##4.141.148':139
'12.##4.254.176':445
'12.##4.184.107':445
'12.##4.45.210':445
'12.##4.65.193':445
'12.##4.25.64':445
'12.##4.177.133':445
'12.##4.10.19':445
'12.##4.27.139':445
'12.##4.111.250':445
'12.##4.98.39':445
'12.##4.93.182':445
'12.##4.13.85':445
'12.##4.253.104':445
'12.##4.214.243':139
'12.##4.147.56':445
'12.#74.97.4':445
'12.##4.31.253':445
'12.##4.185.170':445
'12.##4.211.185':445
'12.##4.10.250':445
'12.##4.106.4':445
'12.##4.237.26':445
'12.##4.120.236':445
'12.##4.48.120':445
'12.##4.9.106':445
'12.##4.178.9':445
'12.##4.204.127':445
'12.##4.67.96':139
'12.#74.6.33':139
'12.##4.161.113':139
'12.##4.120.236':139
'12.##4.48.120':139
'12.##4.66.183':139
'12.##4.243.36':139
'12.##4.54.173':139
'12.##4.29.153':139
'12.##4.138.29':139
'12.##4.164.249':139
'12.##4.36.233':139
'12.##4.26.15':139
'12.##4.66.183':445
'12.##4.164.124':139
'12.##4.4.134':139
'12.##4.132.82':139
'12.##4.3.224':139
'12.##4.41.146':139
'12.##4.56.236':139
'12.##4.222.132':139
'12.##4.228.57':139
'12.##4.69.12':139
'12.##4.230.57':139
'12.##4.198.222':139
'12.##4.20.242':139
'12.##4.211.183':139
'12.##4.243.36':445
'12.##4.164.249':445
'12.##4.36.233':445
'12.##4.67.96':445
'12.#74.6.33':445
'12.##4.161.113':445
'12.##4.26.15':445
'12.##4.27.143':139
'12.##4.250.168':139
'12.##4.218.110':139
'12.##4.54.173':445
'12.##4.29.153':445
'12.##4.138.29':445
'12.##4.237.26':139
'12.##4.2.237':445
'12.##4.75.119':445
'12.##4.80.181':445
'12.##4.139.132':139
'12.##4.72.18':139
'12.##4.171.71':139
'12.##4.198.14':445
'12.##4.132.222':445
'12.##4.235.250':445
'12.##4.47.88':445
'12.##4.88.229':445
'12.##4.52.189':445
'12.##4.222.52':445
'12.##4.107.248':139
'12.##4.133.163':139
'12.##4.78.153':139
'12.##4.216.214':139
'12.##4.170.216':139
'12.##4.124.220':139
'12.##4.177.99':139
'12.##4.11.241':139
'12.##4.156.176':139
'12.##4.151.37':139
'12.##4.141.112':139
'12.##4.136.141':139
'12.##4.83.253':139
'12.##4.214.243':445
'12.##4.185.170':139
'12.##4.211.185':139
'12.##4.10.250':139
'12.##4.139.132':445
'12.##4.72.18':445
'12.##4.171.71':445
'12.##4.147.56':139
'12.##4.9.106':139
'12.##4.178.9':139
'12.##4.204.127':139
'12.#74.97.4':139
'12.##4.31.253':139
'12.##4.106.4':139
'12.##4.107.248':445
'12.##4.133.163':445
'12.##4.78.153':445
'12.##4.216.214':445
'12.##4.170.216':445
'12.##4.124.220':445
'12.##4.177.99':445
'12.##4.11.241':445
'12.##4.156.176':445
'12.##4.151.37':445
'12.##4.141.112':445
'12.##4.136.141':445
'12.##4.83.253':445
'12.##4.129.63':445
'12.##4.128.129':445
'12.##4.9.128':445
'12.##4.71.239':445
'12.##4.154.118':445
'12.##4.195.20':445
'12.##4.217.3':445
'12.##4.168.93':445
'12.##4.95.140':445
'12.##4.50.120':445
'12.##4.165.170':445
'12.##4.147.7':445
'12.##4.115.97':445
'12.##4.167.200':445
'12.##4.156.121':445
'12.##4.230.89':445
'12.##4.33.152':445
'12.##4.68.17':445
'12.##4.72.235':445
'12.##4.201.249':445
'12.##4.217.12':445
'12.##4.158.94':445
'12.##4.36.161':445
'12.##4.79.42':445
'12.##4.70.196':445
'12.##4.47.186':445
'12.##4.38.249':445
'12.##4.247.228':445
'12.##4.131.247':445
'12.##4.176.183':445
'12.##4.84.171':445
'12.##4.151.167':445
'12.##4.120.205':445
'12.##4.59.222':445
'12.##4.47.186':9988
'12.##4.158.94':9988
'12.##4.36.161':9988
'12.##4.70.60':445
'12.##4.156.121':9988
'12.##4.68.17':9988
'12.##4.132.48':445
'12.##4.50.103':445
'12.##4.103.115':445
'12.##4.2.173':445
'12.##4.117.6':445
'12.##4.71.154':445
'12.##4.133.232':445
'12.##4.122.179':445
'12.##4.132.123':445
'12.##4.46.180':445
'12.##4.216.133':445
'12.##4.53.93':445
'12.##4.180.51':445
'12.##4.29.83':445
'12.##4.154.118':139
'12.##4.71.239':139
'12.##4.195.20':139
'12.##4.158.94':139
'12.##4.217.12':139
'12.##4.36.161':139
'12.##4.129.63':139
'12.##4.165.170':139
'12.##4.147.7':139
'12.##4.115.97':139
'12.##4.128.129':139
'12.##4.9.128':139
'12.##4.217.3':139
'12.##4.29.83':139
'12.##4.33.152':139
'12.##4.57.62':139
'12.##4.84.33':139
'12.##4.167.200':139
'12.##4.230.89':139
'12.##4.68.17':139
'12.##4.79.42':139
'12.##4.70.196':139
'12.##4.47.186':139
'12.##4.72.235':139
'12.##4.156.121':139
'12.##4.201.249':139
'12.##4.168.93':139
'12.##4.84.171':139
'12.##4.151.167':139
'12.##4.120.205':139
'12.##4.122.179':139
'12.##4.132.123':139
'12.##4.46.180':139
'12.##4.247.228':139
'12.##4.70.60':139
'12.##4.57.62':445
'12.##4.84.33':445
'12.##4.131.247':139
'12.##4.176.183':139
'12.##4.59.222':139
'12.##4.2.173':139
'12.##4.117.6':139
'12.##4.71.154':139
'12.##4.95.140':139
'12.##4.50.120':139
'12.##4.38.249':139
'12.##4.50.103':139
'12.##4.216.133':139
'12.##4.53.93':139
'12.##4.180.51':139
'12.##4.132.48':139
'12.##4.103.115':139
'12.##4.133.232':139
'12.##4.195.20':9988
'12.##4.161.25':139
'12.##4.242.94':139
'12.##4.148.36':139
'12.#74.3.26':139
'12.##4.50.189':139
'12.##4.110.59':139
'12.##4.160.233':139
'12.##4.18.115':139
'12.##4.122.131':445
'12.##4.101.123':445
'12.##4.176.3':139
'12.##4.109.42':139
'12.##4.96.156':139
'12.##4.30.207':139
'12.##4.252.153':139
'12.##4.21.119':139
'12.##4.122.131':139
'12.##4.101.123':139
'12.##4.243.101':139
'12.##4.20.227':139
'12.##4.27.145':139
'12.##4.32.177':139
'12.##4.88.251':139
'12.##4.116.48':139
'12.##4.165.179':139
'12.##4.44.78':139
'12.##4.243.101':445
'12.##4.160.233':445
'12.##4.176.3':445
'12.##4.109.42':445
'12.##4.161.25':445
'12.##4.242.94':445
'12.##4.148.36':445
'12.##4.96.156':445
'12.##4.34.202':139
'12.##4.53.84':139
'12.#74.43.1':139
'12.##4.18.115':445
'12.##4.102.214':139
'12.##4.202.143':139
'12.##4.20.227':445
'12.##4.116.48':445
'12.##4.165.179':445
'12.##4.30.207':445
'12.##4.252.153':445
'12.##4.21.119':445
'12.##4.44.78':445
'12.#74.3.26':445
'12.##4.50.189':445
'12.##4.110.59':445
'12.##4.27.145':445
'12.##4.32.177':445
'12.##4.88.251':445
'12.##4.64.208':445
'12.##4.26.182':139
'12.##4.253.36':139
'12.##4.31.155':139
'12.##4.239.128':139
'12.##4.61.98':139
'12.##4.98.132':139
'12.##4.227.234':139
'12.##4.248.39':139
'12.##4.93.66':139
'12.##4.133.113':139
'12.##4.173.170':139
'12.##4.54.143':139
'12.##4.200.115':139
'12.##4.117.6':9988
'12.##4.2.173':9988
'12.##4.71.154':9988
'12.##4.71.239':9988
'12.##4.129.63':9988
'12.##4.168.93':9988
'12.##4.133.232':9988
'12.##4.245.118':139
'12.##4.166.193':139
'12.##4.154.22':139
'12.##4.46.180':9988
'12.#74.0.71':139
'12.##4.95.11':139
'12.##4.148.157':139
'12.##4.173.170':445
'12.##4.54.143':445
'12.##4.200.115':445
'12.##4.253.36':445
'12.##4.31.155':445
'12.##4.227.234':445
'12.##4.248.39':445
'12.##4.232.74':445
'12.##4.249.135':445
'12.##4.79.39':445
'12.##4.93.66':445
'12.##4.133.113':445
'12.##4.148.157':445
'12.##4.64.208':139
'12.#74.0.71':445
'12.##4.95.11':445
'12.##4.232.74':139
'12.##4.249.135':139
'12.##4.79.39':139
'12.##4.245.118':445
'12.##4.61.98':445
'12.##4.98.132':445
'12.##4.26.182':445
'12.##4.166.193':445
'12.##4.154.22':445
'12.##4.239.128':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней