Trojan.Starman.5262

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERbd1b.dir00\svchost.exe.mdmp 16325836412029684

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERbd1b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'68.##.116.66':139
'68.##.221.166':139
'68.##.38.233':139
'68.##.69.183':139
'68.##.87.175':139
'68.##.110.160':139
'68.#2.71.8':139
'68.##.20.153':139
'68.##.97.115':139
'68.##.74.246':139
'68.##.32.214':139
'68.##.10.226':139
'68.##.37.156':139
'68.##.139.231':139
'68.##.128.10':139
'68.##.132.175':139
'68.##.200.221':139
'68.##.158.87':139
'68.##.182.10':139
'68.##.45.249':139
'68.##.128.173':139
'68.##.139.44':139
'68.##.205.20':139
'68.##.169.54':445
'68.##.152.168':445
'68.#2.83.95':445
'68.##.131.31':445
'68.##.199.96':445
'68.#2.24.32':445
'68.##.205.133':445
'68.##.155.244':445
'68.#2.38.8':445
'68.##.150.175':445
'68.##.131.29':445
'68.##.134.189':139
'68.#2.3.136':139
'68.#2.52.48':139
'68.##.42.115':139
'68.##.126.33':139
'68.##.148.208':139
'68.##.128.161':139
'68.##.31.170':445
'68.##.153.174':139
'68.#2.133.3':139
'68.#2.3.196':139
'68.##.209.249':445
'68.##.239.30':445
'68.##.172.96':445
'68.##.47.154':445
'68.#2.97.48':445
'68.#2.184.8':445
'68.##.221.163':445
'68.##.106.58':445
'68.#2.62.10':445
'68.##.70.184':445
'68.##.29.148':445
'68.#2.58.12':445
'68.##.49.223':445
'68.##.81.116':445
'68.##.180.118':445
'68.##.35.206':445
'68.##.242.14':445
'68.##.13.234':445
'68.##.153.204':445
'68.##.137.213':445
'68.##.120.114':445
'68.#2.1.55':445
'68.##.103.91':445
'68.##.205.133':139
'68.##.155.244':139
'68.#2.38.8':139
'68.##.150.175':139
'68.##.131.29':139
'68.##.196.188':139
'68.##.143.86':139
'68.##.96.180':139
'68.##.58.123':139
'68.##.186.10':139
'68.##.91.145':139
'68.#2.96.30':445
'68.##.31.170':139
'68.##.155.126':445
'68.##.116.49':445
'68.##.90.235':445
'68.##.131.31':139
'68.##.152.168':139
'68.#2.24.32':139
'68.##.169.54':139
'68.##.199.96':139
'68.#2.83.95':139
'68.#2.234.9':139
'68.##.120.100':139
'68.#2.9.91':139
'68.##.171.68':139
'68.##.91.183':139
'68.#2.17.9':139
'68.##.118.70':139
'68.##.176.140':139
'68.#2.0.91':139
'68.##.127.194':139
'68.##.192.98':139
'68.##.21.130':139
'68.#2.47.27':139
'68.##.224.234':139
'68.#2.50.25':139
'68.##.234.202':139
'68.#2.61.88':139
'68.##.121.118':139
'68.#2.6.23':139
'68.##.16.207':139
'68.#2.38.36':139
'68.##.146.89':139
'68.##.114.171':139
'68.##.130.226':139
'68.##.14.171':139
'68.##.57.121':139
'68.##.11.168':139
'68.##.232.143':139
'68.##.35.222':139
'68.#2.57.23':139
'68.##.62.214':139
'68.##.235.122':139
'68.##.255.41':139
'68.#2.123.5':139
'68.#2.85.24':139
'68.#2.22.92':139
'68.##.110.45':139
'68.##.212.234':139
'68.#2.138.5':139
'68.##.104.244':139
'68.##.133.209':139
'68.##.22.230':139
'68.##.197.228':139
'68.##.165.102':139
'68.#2.92.59':139
'68.##.45.249':445
'68.##.158.87':445
'68.##.139.44':445
'68.##.200.221':445
'68.##.128.173':445
'68.##.182.10':445
'68.##.116.66':445
'68.##.221.166':445
'68.##.38.233':445
'68.##.69.183':445
'68.##.87.175':445
'68.##.58.123':445
'68.##.143.86':445
'68.##.91.145':445
'68.##.196.188':445
'68.##.186.10':445
'68.##.96.180':445
'68.##.10.226':445
'68.##.37.156':445
'68.##.139.231':445
'68.##.128.10':445
'68.##.132.175':445
'68.##.110.160':445
'68.##.153.174':445
'68.##.128.161':445
'68.#2.3.196':445
'68.##.148.208':445
'68.#2.133.3':445
'68.##.214.25':139
'68.#2.52.64':139
'68.##.191.71':139
'68.#2.98.86':139
'68.##.196.165':139
'68.##.86.133':139
'68.#2.71.8':445
'68.##.20.153':445
'68.##.97.115':445
'68.##.74.246':445
'68.##.32.214':445
'68.##.205.20':445
'68.##.134.189':445
'68.#2.3.136':445
'68.#2.52.48':445
'68.##.42.115':445
'68.##.126.33':445
'68.#2.44.10':445
'68.##.230.22':445
'68.##.187.106':445
'68.##.45.110':445
'68.##.110.209':445
'68.##.79.250':445
'68.##.67.130':445
'68.##.117.142':445
'68.##.141.117':445
'68.##.249.179':445
'68.##.180.67':445
'68.##.32.143':445
'68.#2.47.35':139
'68.#2.66.81':139
'68.#2.27.44':139
'68.##.112.246':139
'68.##.33.237':139
'68.#2.56.78':139
'68.##.134.100':445
'68.##.109.88':445
'68.##.58.110':445
'68.##.238.43':445
'68.#2.29.82':445
'68.##.138.245':445
'68.##.102.112':445
'68.##.122.40':445
'68.##.144.48':445
'68.##.169.165':445
'68.#2.3.170':445
'68.##.81.121':445
'68.#2.23.13':445
'68.##.147.118':445
'68.##.252.212':445
'68.##.80.107':445
'68.##.83.166':445
'68.##.102.34':445
'68.##.44.224':445
'68.##.135.111':445
'68.##.167.229':445
'68.##.221.252':445
'68.#2.44.26':445
'68.#2.94.22':445
'68.##.31.118':445
'68.##.149.221':445
'68.##.93.226':445
'68.##.117.149':445
'68.##.117.142':139
'68.##.141.117':139
'68.##.32.143':139
'68.##.180.67':139
'68.##.249.179':139
'68.##.138.245':139
'68.##.102.34':139
'68.##.44.224':139
'68.##.135.111':139
'68.##.167.229':139
'68.##.221.252':139
'68.##.58.110':139
'68.#2.29.82':139
'68.##.79.250':139
'68.##.109.88':139
'68.##.110.209':139
'68.##.134.100':139
'68.##.187.106':139
'68.##.67.130':139
'68.##.230.22':139
'68.##.238.43':139
'68.##.45.110':139
'68.#2.44.26':139
'68.#2.23.13':139
'68.##.147.118':139
'68.##.252.212':139
'68.##.80.107':139
'68.##.83.166':139
'68.##.193.80':139
'68.#2.1.16':139
'68.##.131.17':139
'68.#2.155.6':139
'68.##.170.206':139
'68.#2.128.5':139
'68.##.31.118':139
'68.#2.94.22':139
'68.##.117.149':139
'68.##.93.226':139
'68.##.149.221':139
'68.##.169.165':139
'68.##.122.40':139
'68.##.81.121':139
'68.##.102.112':139
'68.#2.3.170':139
'68.##.144.48':139
'68.#2.62.10':139
'68.##.221.163':139
'68.##.29.148':139
'68.#2.184.8':139
'68.##.70.184':139
'68.##.106.58':139
'68.##.155.126':139
'68.#2.96.30':139
'68.##.90.235':139
'68.##.103.91':139
'68.##.116.49':139
'68.##.137.213':139
'68.##.13.234':139
'68.#2.1.55':139
'68.##.242.14':139
'68.##.120.114':139
'68.##.153.204':139
'68.##.209.249':139
'68.##.239.30':139
'68.##.172.96':139
'68.##.47.154':139
'68.#2.97.48':139
'68.##.143.235':445
'68.##.95.123':445
'68.##.213.52':445
'68.##.203.175':445
'68.#2.95.35':445
'68.#2.4.25':445
'68.##.65.222':445
'68.##.149.233':445
'68.#2.3.209':445
'68.##.223.33':445
'68.##.251.65':445
'68.##.48.191':445
'68.##.244.38':445
'68.##.64.108':445
'68.#2.39.32':445
'68.##.214.21':445
'68.#2.31.95':445
'68.##.131.194':445
'68.##.18.137':445
'68.##.21.131':445
'68.##.134.243':445
'68.##.130.131':445
'68.##.161.238':445
'68.##.117.149':9988
'68.##.83.166':9988
'68.##.79.250':9988
'68.#2.56.78':445
'68.##.58.110':9988
'68.##.143.235':139
'68.##.244.38':139
'68.##.64.108':139
'68.#2.39.32':139
'68.##.214.21':139
'68.#2.31.95':139
'68.#2.155.6':445
'68.#2.1.16':445
'68.#2.128.5':445
'68.##.193.80':445
'68.##.170.206':445
'68.##.131.17':445
'68.#2.47.35':445
'68.#2.66.81':445
'68.#2.27.44':445
'68.##.112.246':445
'68.##.33.237':445
'68.##.131.194':139
'68.##.149.233':139
'68.#2.3.209':139
'68.##.223.33':139
'68.##.251.65':139
'68.##.48.191':139
'68.#2.44.10':139
'68.#2.58.12':139
'68.##.49.223':139
'68.##.81.116':139
'68.##.180.118':139
'68.##.35.206':139
'68.##.18.137':139
'68.##.21.131':139
'68.##.134.243':139
'68.##.130.131':139
'68.##.161.238':139
'68.#2.95.35':139
'68.##.213.52':139
'68.##.65.222':139
'68.##.95.123':139
'68.#2.4.25':139
'68.##.203.175':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней