Trojan.Starman.5182

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3e48.dir00\svchost.exe.mdmp 16325836412029012

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3e48.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'88.#3.208.9':139
'88.#3.4.250':139
'88.#3.10.74':139
'88.##.112.118':139
'88.#3.193.9':139
'88.##.205.175':139
'88.#3.41.99':139
'88.##.236.65':139
'88.##.59.104':139
'88.##.118.64':139
'88.##.254.178':139
'88.##.25.136':445
'88.##.235.145':445
'88.##.136.24':445
'88.##.191.167':445
'88.##.23.159':445
'88.#3.3.97':445
'88.##.179.78':445
'88.##.221.127':445
'88.##.223.187':445
'88.##.224.82':445
'88.#3.41.99':445
'88.#3.7.34':445
'88.##.205.175':445
'88.##.118.64':445
'88.##.236.65':445
'88.##.145.173':139
'88.##.201.102':139
'88.#3.94.0':445
'88.#3.80.6':445
'88.##.189.125':445
'88.##.59.104':445
'88.#3.94.0':139
'88.##.254.178':445
'88.##.189.125':139
'88.#3.7.34':139
'88.#3.80.6':139
'88.#3.208.9':445
'88.#3.4.250':445
'88.#3.10.74':445
'88.##.112.118':445
'88.#3.193.9':445
'88.#3.3.97':139
'88.##.179.78':139
'88.##.221.127':139
'88.##.223.187':139
'88.##.224.82':139
'88.##.89.151':445
'88.##.143.32':445
'88.##.187.198':445
'88.##.99.184':445
'88.#3.10.88':445
'88.##.235.145':139
'88.#3.9.213':139
'88.##.165.87':139
'88.##.102.23':139
'88.##.57.222':139
'88.#3.3.172':139
'88.##.136.24':139
'88.##.25.136':139
'88.##.23.159':139
'88.#3.84.7':139
'88.##.191.167':139
'88.##.122.243':445
'88.##.57.222':445
'88.##.219.223':445
'88.#3.18.1':445
'88.##.152.253':445
'88.##.165.87':445
'88.#3.84.7':445
'88.#3.9.213':445
'88.#3.3.172':445
'88.##.102.23':445
'88.##.210.56':445
'88.##.131.222':445
'88.##.52.159':445
'88.##.193.27':445
'88.##.189.80':445
'88.##.27.190':445
'88.##.157.97':445
'88.#3.17.13':445
'88.#3.43.31':445
'88.##.133.238':445
'88.##.131.203':445
'88.##.67.208':139
'88.##.109.196':445
'88.#3.94.73':445
'88.##.196.55':445
'88.#3.70.74':445
'88.##.147.214':445
'88.##.113.181':445
'88.##.152.113':445
'88.##.114.198':445
'88.#3.78.14':445
'88.##.169.189':445
'88.#3.52.90':445
'88.#3.33.46':445
'88.##.159.33':445
'88.##.133.72':445
'88.##.183.173':445
'88.##.19.184':445
'88.#3.14.59':445
'88.##.161.161':445
'88.##.29.112':445
'88.##.94.159':445
'88.#3.2.69':445
'88.##.120.207':139
'88.##.106.101':139
'88.##.88.170':139
'88.#3.134.5':139
'88.#3.28.78':139
'88.##.143.74':139
'88.##.41.194':139
'88.#3.97.54':139
'88.#3.62.65':139
'88.##.82.211':139
'88.##.166.69':139
'88.##.44.105':445
'88.##.191.21':445
'88.##.49.146':445
'88.##.164.251':445
'88.##.171.107':445
'88.##.240.25':139
'88.##.126.227':139
'88.##.93.102':139
'88.##.34.232':445
'88.##.49.140':139
'88.#3.14.59':139
'88.##.161.161':139
'88.##.29.112':139
'88.##.94.159':139
'88.#3.2.69':139
'88.##.196.55':139
'88.##.109.196':139
'88.##.147.214':139
'88.#3.52.90':139
'88.#3.70.74':139
'88.##.159.33':139
'88.##.171.220':139
'88.##.111.169':139
'88.##.57.154':139
'88.#3.40.68':139
'88.##.115.149':139
'88.##.133.72':139
'88.#3.33.46':139
'88.##.19.184':139
'88.##.188.195':139
'88.##.183.173':139
'88.##.67.208':445
'88.#3.40.68':445
'88.##.201.102':445
'88.##.34.232':139
'88.##.145.173':445
'88.##.111.169':445
'88.##.188.195':445
'88.##.171.220':445
'88.##.115.149':445
'88.##.57.154':445
'88.##.191.21':139
'88.##.114.198':139
'88.##.113.181':139
'88.##.169.189':139
'88.#3.94.73':139
'88.#3.78.14':139
'88.##.49.146':139
'88.##.44.105':139
'88.##.171.107':139
'88.##.152.113':139
'88.##.164.251':139
'88.##.122.243':139
'88.##.16.127':445
'88.##.25.181':445
'88.##.135.227':445
'88.#3.17.28':445
'88.##.228.42':445
'88.##.130.254':445
'88.#3.85.94':445
'88.##.179.79':445
'88.##.204.44':445
'88.##.74.229':445
'88.##.85.104':445
'88.##.244.54':139
'88.##.91.212':139
'88.##.110.47':139
'88.#3.233.1':139
'88.##.39.106':139
'88.##.162.116':139
'88.##.59.252':445
'88.#3.96.42':139
'88.##.25.128':139
'88.##.254.179':139
'88.#3.4.92':445
'88.##.161.208':445
'88.##.15.172':445
'88.#3.3.10':445
'88.#3.53.59':445
'88.##.185.90':445
'88.##.252.188':445
'88.##.183.246':445
'88.##.103.57':445
'88.##.192.129':445
'88.##.25.132':445
'88.##.16.200':445
'88.##.89.240':445
'88.#3.20.6':445
'88.##.124.84':445
'88.#3.6.124':445
'88.##.106.133':445
'88.##.131.192':445
'88.##.206.144':445
'88.#3.9.14':445
'88.#3.8.135':445
'88.#3.20.6':139
'88.##.16.200':139
'88.#3.6.124':139
'88.#3.85.94':139
'88.##.124.84':139
'88.##.206.144':139
'88.##.106.133':139
'88.#3.8.135':139
'88.##.89.240':139
'88.#3.9.14':139
'88.##.130.254':139
'88.##.228.42':139
'88.#3.17.28':139
'88.##.85.104':139
'88.##.16.127':139
'88.##.59.252':139
'88.##.74.229':139
'88.##.179.79':139
'88.##.204.44':139
'88.##.135.227':139
'88.##.25.181':139
'88.##.219.251':139
'88.##.18.224':139
'88.##.170.160':139
'88.##.252.188':139
'88.#3.9.71':139
'88.##.95.102':139
'88.#3.12.58':139
'88.##.229.154':139
'88.##.35.172':139
'88.##.98.132':139
'88.##.185.90':139
'88.#3.53.59':139
'88.##.15.172':139
'88.#3.3.10':139
'88.##.131.192':139
'88.##.25.132':139
'88.##.192.129':139
'88.##.183.246':139
'88.##.103.57':139
'88.#3.4.92':139
'88.##.161.208':139
'88.#3.9.71':445
'88.##.217.49':445
'88.##.138.216':445
'88.#3.50.57':445
'88.##.135.225':445
'88.##.147.57':445
'88.##.84.158':445
'88.##.191.177':445
'88.#3.70.81':445
'88.##.36.204':445
'88.##.209.214':445
'88.#3.55.95':445
'88.#3.70.81':139
'88.##.84.158':139
'88.##.209.214':139
'88.##.138.216':139
'88.##.36.204':139
'88.##.148.216':445
'88.##.81.148':445
'88.##.136.73':139
'88.##.191.177':139
'88.##.103.84':139
'88.#3.43.31':139
'88.##.157.97':139
'88.##.131.203':139
'88.##.52.159':139
'88.##.133.238':139
'88.##.152.253':139
'88.##.219.223':139
'88.#3.18.1':139
'88.#3.17.13':139
'88.##.210.56':139
'88.##.131.222':139
'88.#3.10.88':139
'88.##.187.198':139
'88.##.99.184':139
'88.##.103.84':445
'88.##.136.73':445
'88.##.27.190':139
'88.##.193.27':139
'88.##.189.80':139
'88.##.89.151':139
'88.##.143.32':139
'88.##.254.179':445
'88.#3.96.42':445
'88.##.25.128':445
'88.##.244.54':445
'88.##.91.212':445
'88.##.85.104':9988
'88.#3.17.28':9988
'88.##.16.127':9988
'88.##.162.116':445
'88.##.59.252':9988
'88.##.110.47':445
'88.##.35.172':445
'88.##.98.132':445
'88.##.18.224':445
'88.##.170.160':445
'88.##.219.251':445
'88.#3.233.1':445
'88.##.39.106':445
'88.#3.12.58':445
'88.##.229.154':445
'88.##.95.102':445
'88.##.148.216':139
'88.##.81.148':139
'88.#3.53.59':9988
'88.##.25.132':9988
'88.#3.3.10':9988
'88.#3.50.57':139
'88.##.217.49':139
'88.##.147.57':139
'88.#3.55.95':139
'88.##.135.225':139
'88.##.106.133':9988
'88.##.124.84':9988
'88.#3.6.124':9988
'88.##.179.79':9988
'88.##.25.181':9988
'88.##.204.44':9988
'88.#3.9.14':9988
'88.##.206.144':9988
'88.##.89.240':9988
'88.#3.20.6':9988
'88.##.16.200':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней