Trojan.Starman.5062

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa47e.dir00\svchost.exe.mdmp 16325836412032232

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa47e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'62.##4.172.196':139
'62.##4.78.138':139
'62.##4.197.21':139
'62.##4.23.188':139
'62.##4.132.130':139
'62.##4.9.247':139
'62.##4.9.100':139
'62.##4.27.47':139
'62.##4.101.163':139
'62.##4.215.82':139
'62.##4.78.114':139
'62.##4.74.160':139
'62.##4.45.12':139
'62.##4.160.75':139
'62.##4.254.41':139
'62.##4.253.103':139
'62.##4.57.232':139
'62.##4.216.225':139
'62.##4.132.187':139
'62.##4.206.162':139
'62.##4.215.62':139
'62.##4.160.75':445
'62.##4.74.160':445
'62.##4.253.103':445
'62.##4.60.137':445
'62.##4.254.41':445
'62.##4.132.187':445
'62.##4.57.232':445
'62.##4.215.62':445
'62.##4.45.12':445
'62.##4.206.162':445
'62.##4.95.105':445
'62.##4.124.103':445
'62.##4.215.123':445
'62.##4.237.249':139
'62.##4.16.105':139
'62.##4.47.16':139
'62.##4.154.34':445
'62.##4.61.29':445
'62.##4.68.173':445
'62.##4.193.215':445
'62.##4.239.114':445
'62.##4.62.244':139
'62.##4.196.183':445
'62.#24.51.0':139
'62.##4.126.77':139
'62.#24.4.30':139
'62.##4.242.80':445
'62.##4.228.120':445
'62.##4.171.180':445
'62.##4.134.24':445
'62.##4.244.165':445
'62.##4.16.22':139
'62.##4.66.190':139
'62.#24.6.31':139
'62.##4.228.120':139
'62.##4.171.180':139
'62.##4.242.80':139
'62.##4.71.224':139
'62.##4.154.71':139
'62.##4.223.228':139
'62.##4.29.216':139
'62.##4.129.114':139
'62.##4.193.215':139
'62.##4.239.114':139
'62.##4.215.123':139
'62.##4.62.244':445
'62.##4.124.103':139
'62.##4.95.105':139
'62.##4.60.137':139
'62.##4.61.29':139
'62.##4.68.173':139
'62.##4.154.34':139
'62.#24.51.0':445
'62.##4.129.114':445
'62.##4.223.228':445
'62.##4.29.216':445
'62.##4.66.190':445
'62.#24.6.31':445
'62.##4.126.77':445
'62.#24.4.30':445
'62.##4.16.22':445
'62.##4.71.224':445
'62.##4.154.71':445
'62.##4.91.228':139
'62.##4.63.30':139
'62.##4.59.194':139
'62.##4.143.60':139
'62.##4.218.142':139
'62.##4.213.170':139
'62.##4.55.39':139
'62.#24.24.1':139
'62.##4.49.10':139
'62.##4.166.124':139
'62.##4.60.108':139
'62.##4.209.12':445
'62.##4.146.35':445
'62.##4.233.43':445
'62.##4.174.50':445
'62.##4.95.138':445
'62.##4.178.125':445
'62.##4.40.226':139
'62.##4.134.110':445
'62.##4.42.146':445
'62.##4.82.177':445
'62.##4.246.168':139
'62.##4.221.221':139
'62.##4.59.81':139
'62.##4.20.221':139
'62.##4.78.75':139
'62.##4.38.133':139
'62.##4.78.165':139
'62.##4.231.22':139
'62.##4.255.103':139
'62.##4.55.201':139
'62.##4.66.48':139
'62.##4.176.235':139
'62.##4.51.113':139
'62.##4.205.140':139
'62.##4.37.40':139
'62.##4.129.3':139
'62.##4.208.254':139
'62.##4.96.13':139
'62.##4.104.69':139
'62.##4.164.253':139
'62.##4.24.165':139
'62.##4.237.249':445
'62.##4.50.142':139
'62.##4.47.16':445
'62.##4.9.100':445
'62.##4.16.105':445
'62.#24.38.3':139
'62.##4.120.158':139
'62.##4.87.223':139
'62.##4.87.48':139
'62.##4.68.30':139
'62.##4.9.247':445
'62.##4.132.130':445
'62.##4.197.21':445
'62.##4.23.188':445
'62.##4.216.225':445
'62.##4.78.114':445
'62.##4.215.82':445
'62.##4.27.47':445
'62.##4.101.163':445
'62.##4.172.196':445
'62.##4.78.138':445
'62.##4.68.30':445
'62.##4.87.223':445
'62.##4.87.48':445
'62.##4.178.125':139
'62.##4.50.142':445
'62.##4.75.34':445
'62.##4.109.16':445
'62.##4.34.167':445
'62.#24.38.3':445
'62.##4.120.158':445
'62.##4.134.110':139
'62.##4.174.50':139
'62.##4.95.138':139
'62.##4.109.16':139
'62.##4.34.167':139
'62.##4.75.34':139
'62.##4.42.146':139
'62.##4.82.177':139
'62.##4.146.35':139
'62.##4.233.43':139
'62.##4.209.12':139
'62.##4.47.45':445
'62.##4.178.78':445
'62.##4.42.59':445
'62.##4.166.253':445
'62.##4.60.20':445
'62.##4.103.64':445
'62.##4.46.241':445
'62.#24.81.9':445
'62.##4.113.34':445
'62.##4.125.71':445
'62.##4.76.183':445
'62.##4.68.90':139
'62.##4.153.252':139
'62.##4.126.146':139
'62.##4.52.145':139
'62.##4.225.66':139
'62.##4.70.202':139
'62.##4.185.35':445
'62.##4.188.91':139
'62.##4.17.72':139
'62.#24.5.96':139
'62.##4.209.234':445
'62.##4.61.63':445
'62.##4.234.43':445
'62.##4.104.99':445
'62.##4.148.209':445
'62.##4.76.182':445
'62.##4.59.179':445
'62.##4.179.108':445
'62.##4.39.253':445
'62.##4.108.179':445
'62.##4.221.138':445
'62.##4.165.36':445
'62.##4.8.184':445
'62.##4.34.203':445
'62.##4.19.157':445
'62.##4.143.145':445
'62.##4.253.169':445
'62.##4.89.115':445
'62.##4.66.74':445
'62.##4.172.244':445
'62.##4.215.246':445
'62.##4.34.203':139
'62.##4.165.36':139
'62.##4.143.145':139
'62.##4.46.241':139
'62.##4.19.157':139
'62.##4.66.74':139
'62.##4.253.169':139
'62.##4.215.246':139
'62.##4.8.184':139
'62.##4.172.244':139
'62.##4.103.64':139
'62.##4.60.20':139
'62.##4.42.59':139
'62.##4.185.35':139
'62.##4.76.183':139
'62.##4.166.253':139
'62.##4.125.71':139
'62.#24.81.9':139
'62.##4.113.34':139
'62.##4.47.45':139
'62.##4.178.78':139
'62.##4.137.60':139
'62.##4.178.137':139
'62.##4.60.103':139
'62.##4.59.179':139
'62.##4.103.45':139
'62.##4.10.66':139
'62.##4.17.133':139
'62.##4.178.156':139
'62.##4.231.178':139
'62.##4.177.188':139
'62.##4.76.182':139
'62.##4.148.209':139
'62.##4.234.43':139
'62.##4.104.99':139
'62.##4.89.115':139
'62.##4.221.138':139
'62.##4.179.108':139
'62.##4.108.179':139
'62.##4.39.253':139
'62.##4.209.234':139
'62.##4.61.63':139
'62.##4.72.203':445
'62.##4.199.88':445
'62.##4.221.152':139
'62.##4.76.184':139
'62.##4.252.112':139
'62.##4.171.94':445
'62.##4.172.18':445
'62.##4.105.125':445
'62.##4.153.198':445
'62.##4.94.195':445
'62.##4.171.182':139
'62.##4.134.199':139
'62.##4.71.135':139
'62.##4.198.214':139
'62.##4.15.67':139
'62.##4.215.15':139
'62.#24.8.18':139
'62.##4.94.84':139
'62.##4.131.229':139
'62.##4.93.111':139
'62.##4.150.227':139
'62.##4.171.182':445
'62.##4.76.184':445
'62.##4.94.84':445
'62.##4.131.229':445
'62.#24.8.18':445
'62.##4.134.24':139
'62.##4.244.165':139
'62.##4.196.183':139
'62.##4.252.112':445
'62.##4.221.152':445
'62.##4.150.227':445
'62.##4.67.224':445
'62.##4.15.67':445
'62.##4.224.151':445
'62.##4.131.49':445
'62.##4.151.19':445
'62.##4.71.135':445
'62.##4.93.111':445
'62.##4.134.199':445
'62.##4.215.15':445
'62.##4.198.214':445
'62.##4.17.72':445
'62.#24.5.96':445
'62.##4.153.252':445
'62.##4.126.146':445
'62.##4.68.90':445
'62.##4.60.20':9988
'62.##4.47.45':9988
'62.##4.185.35':9988
'62.##4.188.91':445
'62.##4.70.202':445
'62.##4.225.66':445
'62.##4.178.137':445
'62.##4.231.178':445
'62.##4.137.60':445
'62.##4.103.45':445
'62.##4.60.103':445
'62.##4.17.133':445
'62.##4.52.145':445
'62.##4.10.66':445
'62.##4.177.188':445
'62.##4.178.156':445
'62.##4.105.125':139
'62.##4.171.94':139
'62.##4.94.195':139
'62.##4.199.88':139
'62.##4.153.198':139
'62.##4.224.151':139
'62.##4.67.224':139
'62.##4.151.19':139
'62.##4.172.18':139
'62.##4.131.49':139
'62.##4.72.203':139
'62.##4.8.184':9988
'62.##4.215.246':9988
'62.##4.143.145':9988
'62.##4.178.78':9988
'62.#24.81.9':9988
'62.##4.137.60':9988
'62.##4.10.66':9988
'62.##4.76.182':9988
'62.##4.253.169':9988
'62.##4.104.99':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней