Trojan.Starman.5168

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER1b62.dir00\svchost.exe.mdmp 16325836412032168

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1b62.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'67.##1.80.105':139
'67.##1.91.22':139
'67.##1.66.37':139
'67.##1.19.38':139
'67.##1.118.9':139
'67.##1.198.226':139
'67.##1.224.245':139
'67.##1.241.102':139
'67.##1.89.231':139
'67.##1.62.135':139
'67.##1.106.118':139
'67.##1.209.250':139
'67.##1.97.22':139
'67.##1.143.52':139
'67.##1.61.86':445
'67.##1.57.26':139
'67.##1.209.199':139
'67.##1.229.128':139
'67.##1.200.30':139
'67.##1.195.227':139
'67.##1.155.134':139
'67.##1.118.9':445
'67.##1.66.37':445
'67.##1.19.38':445
'67.##1.229.128':445
'67.##1.106.118':445
'67.##1.62.135':445
'67.##1.241.102':445
'67.##1.89.231':445
'67.##1.80.105':445
'67.##1.91.22':445
'67.##1.209.199':445
'67.##1.57.26':445
'67.##1.143.52':445
'67.##1.128.215':139
'67.##1.164.226':139
'67.##1.120.46':139
'67.##1.155.134':445
'67.##1.200.30':445
'67.##1.195.227':445
'67.##1.209.250':445
'67.##1.97.22':445
'67.##1.61.86':139
'67.##1.184.54':445
'67.##1.238.53':139
'67.##1.208.220':139
'67.##1.97.47':139
'67.##1.92.223':445
'67.##1.124.214':445
'67.##1.41.86':445
'67.##1.171.147':445
'67.##1.192.71':445
'67.##1.130.177':139
'67.##1.43.192':139
'67.##1.55.248':139
'67.##1.237.217':139
'67.##1.20.67':139
'67.##1.203.20':139
'67.##1.15.216':139
'67.##1.167.211':139
'67.##1.215.222':139
'67.##1.58.50':139
'67.##1.129.134':139
'67.##1.215.222':445
'67.##1.15.216':445
'67.##1.129.134':445
'67.##1.55.248':445
'67.##1.58.50':445
'67.##1.97.47':445
'67.##1.238.53':445
'67.##1.208.220':445
'67.##1.167.211':445
'67.##1.130.177':445
'67.##1.43.192':445
'67.##1.119.74':445
'67.##1.145.134':445
'67.##1.177.185':445
'67.##1.83.32':445
'67.##1.156.131':445
'67.##1.203.20':445
'67.##1.237.217':445
'67.##1.20.67':445
'67.##1.234.18':445
'67.##1.3.175':445
'67.##1.19.94':445
'67.##1.254.18':445
'67.##1.94.49':445
'67.##1.77.131':445
'67.##1.49.78':445
'67.##1.92.62':139
'67.##1.28.92':139
'67.##1.238.170':445
'67.##1.89.177':445
'67.##1.212.70':445
'67.##1.100.55':445
'67.##1.173.23':445
'67.##1.99.106':445
'67.##1.92.113':445
'67.##1.90.159':445
'67.##1.115.196':445
'67.##1.67.118':445
'67.##1.11.140':445
'67.##1.179.199':445
'67.##1.252.153':445
'67.##1.99.205':445
'67.##1.246.46':139
'67.##1.88.190':139
'67.##1.62.187':139
'67.##1.5.240':139
'67.#61.80.6':139
'67.##1.203.185':139
'67.##1.126.79':139
'67.##1.136.148':139
'67.##1.126.88':139
'67.##1.148.126':139
'67.##1.239.180':139
'67.##1.244.221':139
'67.##1.31.134':139
'67.##1.253.115':139
'67.##1.169.26':139
'67.##1.21.101':139
'67.##1.181.136':139
'67.##1.9.237':139
'67.##1.25.115':139
'67.##1.108.49':139
'67.##1.12.61':139
'67.##1.90.159':139
'67.##1.115.196':139
'67.##1.234.127':139
'67.##1.114.243':139
'67.##1.22.64':139
'67.##1.252.153':139
'67.##1.99.205':139
'67.##1.99.106':139
'67.##1.92.113':139
'67.##1.173.23':139
'67.##1.27.183':139
'67.##1.120.46':445
'67.##1.128.215':445
'67.##1.164.226':445
'67.##1.198.226':445
'67.##1.224.245':445
'67.##1.5.230':139
'67.##1.141.1':139
'67.##1.229.187':139
'67.##1.175.76':139
'67.##1.137.226':139
'67.##1.229.187':445
'67.##1.5.230':445
'67.##1.137.226':445
'67.##1.238.170':139
'67.##1.175.76':445
'67.##1.22.64':445
'67.##1.234.127':445
'67.##1.114.243':445
'67.##1.141.1':445
'67.##1.27.183':445
'67.##1.212.70':139
'67.##1.100.55':139
'67.##1.77.131':139
'67.##1.11.140':139
'67.##1.179.199':139
'67.##1.67.118':139
'67.##1.254.18':139
'67.##1.89.177':139
'67.##1.19.94':139
'67.##1.49.78':139
'67.##1.94.49':139
'67.##1.3.175':139
'67.##1.106.146':445
'67.##1.205.106':445
'67.##1.146.152':445
'67.##1.129.135':445
'67.##1.125.28':445
'67.##1.13.130':445
'67.##1.80.203':445
'67.##1.230.99':445
'67.##1.231.129':445
'67.##1.49.140':445
'67.##1.141.59':445
'67.##1.49.167':139
'67.##1.161.29':139
'67.##1.23.159':139
'67.##1.12.152':139
'67.##1.235.247':139
'67.##1.58.196':139
'67.##1.42.250':445
'67.##1.180.38':139
'67.##1.108.14':139
'67.#61.3.73':139
'67.##1.132.57':445
'67.##1.141.132':445
'67.##1.179.48':445
'67.##1.68.124':445
'67.##1.209.15':445
'67.##1.125.15':445
'67.##1.78.136':445
'67.##1.52.36':445
'67.##1.105.47':445
'67.##1.29.126':445
'67.##1.85.234':445
'67.##1.211.95':445
'67.##1.0.234':445
'67.##1.95.246':445
'67.##1.26.130':445
'67.##1.245.241':445
'67.##1.114.43':445
'67.##1.123.72':445
'67.##1.66.117':445
'67.##1.18.192':445
'67.##1.85.115':445
'67.##1.95.246':139
'67.##1.211.95':139
'67.##1.245.241':139
'67.##1.80.203':139
'67.##1.26.130':139
'67.##1.66.117':139
'67.##1.114.43':139
'67.##1.85.115':139
'67.##1.0.234':139
'67.##1.18.192':139
'67.##1.13.130':139
'67.##1.125.28':139
'67.##1.146.152':139
'67.##1.129.135':139
'67.##1.141.59':139
'67.##1.42.250':139
'67.##1.49.140':139
'67.##1.230.99':139
'67.##1.231.129':139
'67.##1.106.146':139
'67.##1.205.106':139
'67.##1.11.52':139
'67.##1.48.215':139
'67.##1.54.18':139
'67.##1.78.136':139
'67.##1.18.79':139
'67.##1.250.183':139
'67.##1.133.183':139
'67.##1.167.208':139
'67.##1.6.206':139
'67.##1.150.216':139
'67.##1.125.15':139
'67.##1.209.15':139
'67.##1.179.48':139
'67.##1.68.124':139
'67.##1.123.72':139
'67.##1.85.234':139
'67.##1.29.126':139
'67.##1.52.36':139
'67.##1.105.47':139
'67.##1.132.57':139
'67.##1.141.132':139
'67.##1.126.238':445
'67.##1.50.214':445
'67.##1.251.131':445
'67.##1.110.27':445
'67.##1.131.248':445
'67.##1.182.213':445
'67.##1.162.126':445
'67.##1.214.13':445
'67.##1.20.221':445
'67.##1.14.23':445
'67.##1.109.178':139
'67.##1.240.47':139
'67.##1.114.71':139
'67.##1.187.123':139
'67.##1.182.213':139
'67.##1.162.126':139
'67.##1.94.197':139
'67.##1.211.120':139
'67.##1.91.94':139
'67.##1.24.114':139
'67.##1.239.24':139
'67.##1.124.214':139
'67.##1.83.32':139
'67.##1.92.223':139
'67.##1.192.71':139
'67.##1.41.86':139
'67.##1.145.134':139
'67.##1.234.18':139
'67.##1.119.74':139
'67.##1.156.131':139
'67.##1.177.185':139
'67.##1.171.147':139
'67.##1.24.114':445
'67.##1.239.24':445
'67.##1.114.71':445
'67.##1.187.123':445
'67.##1.240.47':445
'67.##1.109.178':445
'67.##1.184.54':139
'67.##1.211.120':445
'67.##1.91.94':445
'67.##1.94.197':445
'67.##1.108.14':445
'67.#61.3.73':445
'67.##1.161.29':445
'67.##1.23.159':445
'67.##1.49.167':445
'67.##1.42.250':9988
'67.##1.125.28':9988
'67.##1.141.59':9988
'67.##1.180.38':445
'67.##1.58.196':445
'67.##1.235.247':445
'67.##1.48.215':445
'67.##1.6.206':445
'67.##1.11.52':445
'67.##1.18.79':445
'67.##1.54.18':445
'67.##1.133.183':445
'67.##1.12.152':445
'67.##1.250.183':445
'67.##1.150.216':445
'67.##1.167.208':445
'67.##1.131.248':139
'67.##1.251.131':139
'67.##1.110.27':139
'67.##1.29.126':9988
'67.##1.78.136':9988
'67.##1.14.23':139
'67.##1.214.13':139
'67.##1.20.221':139
'67.##1.126.238':139
'67.##1.50.214':139
'67.##1.179.48':9988
'67.##1.95.246':9988
'67.##1.211.95':9988
'67.##1.245.241':9988
'67.##1.146.152':9988
'67.##1.106.146':9988
'67.##1.85.234':9988
'67.##1.209.15':9988
'67.##1.123.72':9988
'67.##1.0.234':9988
'67.##1.18.192':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней