Trojan.Starman.5059

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1c1f.dir00\svchost.exe.mdmp 16325836412032136

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1c1f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'62.##.61.216':139
'62.##.119.74':139
'62.##.231.98':139
'62.##.135.47':139
'62.##.133.135':139
'62.##.220.240':139
'62.##.54.221':139
'62.##.240.171':139
'62.##.110.203':139
'62.#6.20.67':139
'62.##.254.228':139
'62.##.65.112':139
'62.#6.45.16':139
'62.##.155.240':139
'62.##.60.204':139
'62.#6.71.90':139
'62.##.187.160':139
'62.##.229.187':139
'62.##.160.50':139
'62.##.76.102':139
'62.#6.50.84':139
'62.##.45.234':139
'62.##.160.50':445
'62.##.187.160':445
'62.#6.50.84':445
'62.#6.45.16':445
'62.##.76.102':445
'62.##.133.135':445
'62.##.231.98':445
'62.##.135.47':445
'62.##.229.187':445
'62.##.254.228':445
'62.##.65.112':445
'62.#6.59.95':139
'62.##.139.32':139
'62.##.230.144':139
'62.##.174.206':139
'62.##.84.199':139
'62.#6.71.90':445
'62.##.155.240':445
'62.##.60.204':445
'62.#6.93.6':139
'62.#6.7.138':445
'62.##.248.100':139
'62.##.53.221':139
'62.##.61.147':139
'62.##.125.172':139
'62.##.73.211':139
'62.##.245.179':139
'62.#6.74.89':445
'62.#6.43.81':139
'62.##.234.53':139
'62.##.111.234':139
'62.##.150.246':139
'62.##.12.218':139
'62.##.193.13':139
'62.##.139.250':139
'62.##.64.237':139
'62.#6.13.77':139
'62.##.36.133':139
'62.##.236.135':139
'62.##.162.161':139
'62.##.161.130':139
'62.##.161.213':139
'62.##.14.206':445
'62.##.248.100':445
'62.##.53.221':445
'62.##.61.147':445
'62.##.125.172':445
'62.##.73.211':445
'62.##.245.179':445
'62.#6.7.138':139
'62.#6.43.81':445
'62.##.234.53':445
'62.##.111.234':445
'62.##.150.246':445
'62.##.12.218':445
'62.##.193.13':445
'62.##.139.250':445
'62.##.64.237':445
'62.#6.13.77':445
'62.##.36.133':445
'62.##.236.135':445
'62.##.162.161':445
'62.##.161.130':445
'62.##.161.213':445
'62.##.61.216':445
'62.##.109.248':139
'62.#6.16.21':139
'62.##.248.47':445
'62.##.234.252':445
'62.##.158.239':445
'62.##.194.11':139
'62.##.228.39':139
'62.##.156.180':139
'62.##.121.213':139
'62.#6.56.84':139
'62.##.66.215':445
'62.#6.64.55':445
'62.#6.158.9':445
'62.##.116.55':445
'62.#6.30.38':445
'62.#6.66.86':445
'62.##.186.219':445
'62.#6.22.67':445
'62.##.110.228':445
'62.##.253.56':445
'62.##.36.253':445
'62.##.246.201':139
'62.##.173.82':139
'62.##.138.152':139
'62.##.213.74':139
'62.#6.14.57':139
'62.##.12.185':139
'62.##.52.129':139
'62.##.149.233':139
'62.##.177.114':139
'62.##.162.226':139
'62.##.22.220':139
'62.##.125.42':139
'62.##.116.62':139
'62.##.91.177':139
'62.#6.44.6':139
'62.#6.57.67':139
'62.##.205.85':139
'62.##.149.225':139
'62.#6.72.74':139
'62.##.251.51':139
'62.##.207.68':139
'62.##.40.193':139
'62.##.179.251':139
'62.#6.57.3':139
'62.##.245.22':139
'62.##.139.32':445
'62.#6.93.6':445
'62.##.153.202':139
'62.##.174.82':139
'62.##.213.100':139
'62.##.131.117':139
'62.##.153.237':139
'62.#6.59.95':445
'62.##.240.171':445
'62.##.220.240':445
'62.#6.20.67':445
'62.##.119.74':445
'62.##.110.203':445
'62.##.84.199':445
'62.##.230.144':445
'62.##.174.206':445
'62.##.54.221':445
'62.##.45.234':445
'62.#6.30.38':139
'62.##.179.251':445
'62.#6.57.3':445
'62.##.245.22':445
'62.##.158.239':139
'62.##.248.47':139
'62.##.153.202':445
'62.##.174.82':445
'62.##.213.100':445
'62.##.131.117':445
'62.##.153.237':445
'62.##.234.252':139
'62.#6.158.9':139
'62.##.253.56':139
'62.#6.64.55':139
'62.#6.66.86':139
'62.##.116.55':139
'62.#6.22.67':139
'62.##.66.215':139
'62.##.186.219':139
'62.##.36.253':139
'62.##.110.228':139
'62.##.45.163':445
'62.##.124.45':445
'62.##.163.87':445
'62.##.249.197':445
'62.##.255.163':445
'62.##.31.227':445
'62.#6.60.87':445
'62.##.207.100':445
'62.##.90.211':445
'62.##.63.163':445
'62.##.86.147':445
'62.##.89.116':139
'62.##.112.159':139
'62.##.195.16':139
'62.##.85.188':139
'62.##.161.89':139
'62.##.147.71':445
'62.##.237.202':445
'62.##.218.175':139
'62.##.223.113':139
'62.##.12.200':139
'62.##.170.134':445
'62.##.118.140':445
'62.##.102.118':445
'62.##.71.196':445
'62.#6.33.23':445
'62.##.149.93':445
'62.##.198.229':445
'62.#6.42.70':445
'62.#6.245.8':445
'62.##.139.183':445
'62.#6.8.185':445
'62.##.154.28':445
'62.#6.97.23':445
'62.##.223.27':445
'62.##.170.54':445
'62.#6.1.101':445
'62.##.167.159':445
'62.##.121.66':445
'62.##.122.121':445
'62.#6.65.27':445
'62.##.244.181':445
'62.##.251.184':445
'62.##.170.134':139
'62.##.167.159':139
'62.#6.1.101':139
'62.##.31.227':139
'62.#6.60.87':139
'62.##.244.181':139
'62.##.251.184':139
'62.##.223.27':139
'62.##.170.54':139
'62.#6.97.23':139
'62.##.207.100':139
'62.##.147.71':139
'62.##.255.163':139
'62.##.86.147':139
'62.##.237.202':139
'62.##.249.197':139
'62.##.90.211':139
'62.##.63.163':139
'62.##.124.45':139
'62.##.163.87':139
'62.##.45.163':139
'62.#6.65.27':139
'62.##.60.117':139
'62.#6.6.220':139
'62.#6.9.225':139
'62.##.198.229':139
'62.#6.42.70':139
'62.##.241.85':139
'62.##.115.153':139
'62.##.178.152':139
'62.##.39.178':139
'62.#6.25.15':139
'62.#6.245.8':139
'62.##.149.93':139
'62.#6.33.23':139
'62.##.154.28':139
'62.##.121.66':139
'62.##.122.121':139
'62.##.139.183':139
'62.#6.8.185':139
'62.##.102.118':139
'62.##.71.196':139
'62.##.118.140':139
'62.#6.9.225':445
'62.##.217.13':445
'62.#6.38.88':445
'62.##.208.193':445
'62.##.156.184':139
'62.##.185.14':445
'62.##.177.99':445
'62.##.108.204':445
'62.#6.9.183':445
'62.##.98.110':445
'62.##.12.139':445
'62.##.109.253':139
'62.##.224.17':139
'62.##.159.17':139
'62.##.17.220':139
'62.##.221.204':139
'62.##.220.221':139
'62.##.43.191':139
'62.#6.98.77':139
'62.##.187.101':139
'62.##.160.55':139
'62.#6.37.26':139
'62.#6.12.20':445
'62.##.187.101':445
'62.##.43.191':445
'62.#6.37.26':445
'62.##.159.17':445
'62.##.160.55':445
'62.#6.74.89':139
'62.##.14.206':139
'62.##.156.184':445
'62.#6.98.77':445
'62.##.109.253':445
'62.##.224.17':445
'62.#6.4.250':445
'62.##.218.105':445
'62.#6.72.10':445
'62.##.134.79':445
'62.##.143.139':445
'62.##.220.221':445
'62.##.17.220':445
'62.##.221.204':445
'62.##.168.88':445
'62.##.205.168':445
'62.##.218.175':445
'62.##.249.197':9988
'62.##.12.200':445
'62.##.112.159':445
'62.##.223.113':445
'62.##.170.134':9988
'62.#6.97.23':9988
'62.##.163.87':9988
'62.##.86.147':9988
'62.##.45.163':9988
'62.##.89.116':445
'62.#6.25.15':445
'62.##.178.152':445
'62.##.39.178':445
'62.##.60.117':445
'62.#6.6.220':445
'62.##.161.89':445
'62.##.195.16':445
'62.##.85.188':445
'62.##.241.85':445
'62.##.115.153':445
'62.##.170.54':9988
'62.##.134.79':139
'62.##.143.139':139
'62.#6.12.20':139
'62.##.177.99':139
'62.##.108.204':139
'62.##.168.88':139
'62.##.205.168':139
'62.##.218.105':139
'62.#6.72.10':139
'62.#6.4.250':139
'62.#6.9.183':139
'62.##.121.66':9988
'62.##.185.14':139
'62.##.251.184':9988
'62.##.223.27':9988
'62.#6.65.27':9988
'62.##.98.110':139
'62.##.12.139':139
'62.##.217.13':139
'62.##.208.193':139
'62.#6.38.88':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней