Trojan.Starman.5295

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER3830.dir00\svchost.exe.mdmp 16325836412032148

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3830.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'68.##7.66.126':139
'68.##7.160.144':139
'68.##7.111.118':139
'68.##7.101.180':139
'68.##7.14.26':139
'68.##7.25.159':139
'68.##7.212.124':139
'68.##7.97.193':139
'68.##7.237.230':139
'68.##7.162.119':139
'68.##7.47.107':139
'68.#77.5.33':139
'68.##7.5.235':139
'68.##7.67.236':139
'68.##7.87.223':139
'68.##7.224.106':139
'68.##7.174.244':139
'68.##7.16.132':139
'68.##7.221.68':139
'68.##7.237.225':139
'68.##7.208.237':139
'68.##7.223.52':139
'68.##7.221.68':445
'68.##7.174.244':445
'68.##7.208.237':445
'68.##7.5.235':445
'68.##7.237.225':445
'68.##7.14.26':445
'68.##7.111.118':445
'68.##7.101.180':445
'68.##7.16.132':445
'68.##7.47.107':445
'68.#77.5.33':445
'68.##7.162.42':139
'68.##7.240.51':139
'68.##7.43.88':139
'68.##7.170.200':139
'68.##7.19.176':139
'68.##7.224.106':445
'68.##7.67.236':445
'68.##7.87.223':445
'68.##7.89.230':139
'68.##7.39.187':445
'68.##7.160.249':139
'68.##7.89.16':139
'68.##7.250.73':139
'68.##7.141.8':139
'68.##7.141.237':139
'68.##7.94.87':139
'68.##7.29.184':445
'68.##7.120.142':139
'68.##7.153.16':139
'68.##7.26.172':139
'68.##7.153.200':139
'68.##7.142.97':139
'68.##7.107.109':139
'68.##7.79.242':139
'68.##7.65.60':139
'68.##7.31.143':139
'68.##7.43.142':139
'68.##7.248.239':139
'68.##7.244.24':139
'68.##7.11.150':139
'68.##7.36.11':139
'68.##7.81.118':445
'68.##7.160.249':445
'68.##7.89.16':445
'68.##7.250.73':445
'68.##7.141.8':445
'68.##7.141.237':445
'68.##7.94.87':445
'68.##7.39.187':139
'68.##7.120.142':445
'68.##7.153.16':445
'68.##7.26.172':445
'68.##7.153.200':445
'68.##7.142.97':445
'68.##7.107.109':445
'68.##7.79.242':445
'68.##7.65.60':445
'68.##7.31.143':445
'68.##7.43.142':445
'68.##7.248.239':445
'68.##7.244.24':445
'68.##7.11.150':445
'68.##7.36.11':445
'68.##7.66.126':445
'68.##7.8.132':139
'68.##7.143.9':139
'68.##7.118.48':445
'68.##7.135.79':445
'68.##7.210.0':445
'68.##7.149.25':139
'68.##7.142.67':139
'68.##7.157.253':139
'68.##7.140.233':139
'68.##7.62.81':139
'68.##7.176.202':445
'68.##7.14.235':445
'68.##7.251.182':445
'68.##7.204.11':445
'68.##7.96.167':445
'68.##7.16.40':445
'68.#77.28.0':445
'68.##7.255.27':445
'68.##7.136.2':445
'68.##7.56.68':445
'68.##7.112.193':445
'68.##7.95.151':139
'68.##7.67.226':139
'68.##7.119.81':139
'68.##7.226.154':139
'68.##7.73.119':139
'68.##7.155.8':139
'68.##7.127.127':139
'68.#77.8.97':139
'68.##7.165.246':139
'68.##7.130.171':139
'68.##7.62.235':139
'68.##7.128.209':139
'68.##7.72.94':139
'68.##7.25.148':139
'68.##7.71.194':139
'68.##7.241.68':139
'68.#77.59.4':139
'68.##7.60.53':139
'68.##7.119.117':139
'68.##7.52.139':139
'68.##7.239.51':139
'68.##7.74.178':139
'68.##7.243.128':139
'68.##7.165.228':139
'68.##7.128.102':139
'68.##7.240.51':445
'68.##7.89.230':445
'68.##7.164.63':139
'68.##7.59.120':139
'68.##7.18.114':139
'68.##7.165.98':139
'68.##7.8.145':139
'68.##7.162.42':445
'68.##7.97.193':445
'68.##7.25.159':445
'68.##7.162.119':445
'68.##7.160.144':445
'68.##7.237.230':445
'68.##7.19.176':445
'68.##7.43.88':445
'68.##7.170.200':445
'68.##7.212.124':445
'68.##7.223.52':445
'68.##7.96.167':139
'68.##7.243.128':445
'68.##7.165.228':445
'68.##7.128.102':445
'68.##7.210.0':139
'68.##7.118.48':139
'68.##7.164.63':445
'68.##7.59.120':445
'68.##7.18.114':445
'68.##7.165.98':445
'68.##7.8.145':445
'68.##7.135.79':139
'68.##7.251.182':139
'68.##7.56.68':139
'68.##7.14.235':139
'68.##7.16.40':139
'68.##7.204.11':139
'68.##7.255.27':139
'68.##7.176.202':139
'68.#77.28.0':139
'68.##7.112.193':139
'68.##7.136.2':139
'68.##7.59.200':445
'68.##7.234.58':445
'68.##7.78.225':445
'68.##7.205.87':445
'68.##7.167.22':445
'68.##7.46.77':445
'68.##7.68.233':445
'68.##7.247.206':445
'68.##7.33.233':445
'68.##7.43.155':445
'68.##7.88.59':445
'68.##7.37.233':139
'68.##7.173.137':139
'68.##7.117.177':139
'68.##7.207.25':139
'68.##7.158.0':139
'68.##7.172.82':445
'68.##7.12.41':445
'68.##7.162.159':139
'68.##7.110.80':139
'68.##7.93.228':139
'68.##7.241.67':445
'68.##7.215.30':445
'68.##7.181.47':445
'68.##7.100.122':445
'68.##7.204.48':445
'68.##7.32.210':445
'68.##7.107.186':445
'68.##7.0.225':445
'68.##7.173.54':445
'68.##7.204.99':445
'68.##7.54.204':445
'68.##7.48.16':445
'68.##7.172.76':445
'68.##7.41.83':445
'68.##7.242.55':445
'68.##7.83.52':445
'68.##7.156.207':445
'68.##7.116.228':445
'68.##7.211.82':445
'68.##7.173.197':445
'68.##7.89.151':445
'68.##7.120.224':445
'68.##7.83.52':139
'68.##7.156.207':139
'68.##7.241.67':139
'68.##7.46.77':139
'68.##7.68.233':139
'68.##7.89.151':139
'68.##7.120.224':139
'68.##7.41.83':139
'68.##7.242.55':139
'68.##7.172.76':139
'68.##7.247.206':139
'68.##7.205.87':139
'68.##7.167.22':139
'68.##7.88.59':139
'68.##7.172.82':139
'68.##7.12.41':139
'68.##7.33.233':139
'68.##7.43.155':139
'68.##7.234.58':139
'68.##7.78.225':139
'68.##7.59.200':139
'68.##7.173.197':139
'68.##7.1.246':139
'68.##7.104.118':139
'68.#77.33.1':139
'68.##7.107.186':139
'68.##7.0.225':139
'68.##7.24.137':139
'68.##7.116.122':139
'68.##7.13.192':139
'68.##7.159.103':139
'68.##7.247.84':139
'68.##7.173.54':139
'68.##7.204.48':139
'68.##7.32.210':139
'68.##7.48.16':139
'68.##7.116.228':139
'68.##7.211.82':139
'68.##7.204.99':139
'68.##7.54.204':139
'68.##7.181.47':139
'68.##7.100.122':139
'68.##7.215.30':139
'68.#77.33.1':445
'68.##7.24.254':445
'68.##7.247.43':445
'68.#77.86.9':445
'68.##7.25.27':139
'68.##7.145.38':445
'68.##7.86.192':445
'68.#77.61.6':445
'68.##7.191.172':445
'68.##7.218.247':445
'68.##7.105.140':445
'68.##7.146.3':139
'68.##7.160.22':139
'68.##7.149.213':139
'68.##7.19.219':139
'68.##7.157.246':139
'68.##7.161.42':139
'68.##7.56.60':139
'68.##7.26.108':139
'68.##7.95.31':139
'68.##7.119.0':139
'68.##7.56.43':139
'68.##7.33.130':445
'68.##7.95.31':445
'68.##7.56.60':445
'68.##7.56.43':445
'68.##7.149.213':445
'68.##7.119.0':445
'68.##7.29.184':139
'68.##7.81.118':139
'68.##7.25.27':445
'68.##7.26.108':445
'68.##7.146.3':445
'68.##7.160.22':445
'68.##7.131.123':445
'68.##7.39.131':445
'68.##7.203.103':445
'68.##7.18.235':445
'68.##7.140.2':445
'68.##7.161.42':445
'68.##7.19.219':445
'68.##7.157.246':445
'68.##7.120.157':445
'68.##7.252.41':445
'68.##7.162.159':445
'68.##7.12.41':9988
'68.##7.93.228':445
'68.##7.173.137':445
'68.##7.110.80':445
'68.##7.241.67':9988
'68.##7.172.76':9988
'68.##7.68.233':9988
'68.##7.172.82':9988
'68.##7.46.77':9988
'68.##7.37.233':445
'68.##7.247.84':445
'68.##7.13.192':445
'68.##7.159.103':445
'68.##7.1.246':445
'68.##7.104.118':445
'68.##7.158.0':445
'68.##7.117.177':445
'68.##7.207.25':445
'68.##7.24.137':445
'68.##7.116.122':445
'68.##7.41.83':9988
'68.##7.18.235':139
'68.##7.140.2':139
'68.##7.33.130':139
'68.##7.86.192':139
'68.#77.61.6':139
'68.##7.120.157':139
'68.##7.252.41':139
'68.##7.39.131':139
'68.##7.203.103':139
'68.##7.131.123':139
'68.##7.191.172':139
'68.##7.211.82':9988
'68.##7.145.38':139
'68.##7.116.228':9988
'68.##7.120.224':9988
'68.##7.173.197':9988
'68.##7.218.247':139
'68.##7.105.140':139
'68.##7.247.43':139
'68.#77.86.9':139
'68.##7.24.254':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней