Trojan.Starman.5196

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERbb54.dir00\svchost.exe.mdmp 16325836412030164

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERbb54.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'65.##5.80.187':445
'65.##5.101.80':139
'65.##5.109.153':445
'65.##5.90.246':445
'65.##5.73.183':139
'65.##5.101.80':445
'65.##5.73.183':445
'65.##5.61.179':139
'65.##5.104.10':139
'65.##5.197.92':445
'65.##5.68.106':445
'65.##5.75.126':445
'65.##5.59.48':445
'65.##5.3.254':445
'65.##5.165.113':445
'65.##5.221.163':445
'65.##5.92.221':445
'65.##5.1.191':445
'65.##5.163.214':445
'65.##5.61.179':445
'65.##5.64.125':139
'65.##5.199.207':139
'65.##5.191.124':139
'65.##5.7.123':139
'65.##5.225.38':139
'65.##5.236.184':139
'65.##5.185.3':139
'65.##5.37.225':139
'65.##5.185.37':139
'65.##5.141.102':139
'65.##5.224.246':139
'65.##5.59.147':139
'65.##5.104.10':445
'65.##5.147.246':139
'65.##5.94.223':139
'65.##5.153.6':139
'65.##5.202.6':139
'65.##5.240.42':139
'65.##5.19.98':139
'65.##5.23.91':445
'65.##5.56.82':445
'65.##5.252.52':445
'65.##5.223.46':445
'65.##5.132.249':445
'65.##5.56.80':445
'65.##5.52.156':445
'65.##5.153.181':445
'65.##5.32.162':445
'65.##5.75.38':445
'65.##5.47.123':445
'65.##5.197.92':139
'65.##5.109.153':139
'65.##5.221.163':139
'65.##5.92.221':139
'65.##5.90.246':139
'65.##5.226.119':445
'65.##5.76.185':445
'65.##5.80.187':139
'65.##5.225.126':445
'65.##5.187.52':445
'65.##5.18.87':445
'65.##5.54.91':445
'65.##5.247.7':445
'65.##5.8.106':445
'65.##5.189.167':445
'65.##5.8.162':445
'65.##5.191.139':445
'65.##5.152.189':445
'65.##5.53.132':445
'65.##5.198.43':445
'65.##5.165.126':445
'65.##5.143.92':445
'65.##5.29.188':445
'65.##5.209.175':445
'65.##5.161.55':445
'65.##5.165.146':445
'65.##5.13.219':445
'65.##5.17.78':445
'65.#15.1.16':445
'65.##5.233.12':139
'65.##5.73.171':445
'65.##5.251.73':445
'65.##5.23.53':445
'65.##5.59.211':445
'65.##5.12.251':445
'65.##5.231.140':445
'65.##5.233.231':445
'65.##5.186.12':445
'65.##5.22.141':445
'65.##5.172.87':445
'65.##5.37.225':445
'65.##5.185.37':445
'65.##5.199.207':445
'65.##5.225.38':445
'65.##5.236.184':445
'65.##5.70.14':445
'65.##5.109.121':445
'65.##5.185.3':445
'65.##5.233.12':445
'65.##5.4.168':445
'65.##5.139.143':445
'65.##5.111.185':445
'65.##5.159.192':445
'65.##5.101.109':445
'65.##5.115.77':445
'65.##5.37.111':139
'65.##5.46.142':139
'65.##5.157.116':139
'65.##5.140.107':139
'65.##5.224.205':445
'65.##5.177.16':445
'65.##5.71.91':445
'65.##5.141.185':445
'65.##5.11.250':445
'65.##5.170.62':445
'65.##5.21.21':445
'65.##5.31.132':445
'65.##5.147.65':445
'65.##5.246.147':445
'65.##5.64.125':445
'65.##5.4.168':139
'65.##5.141.185':139
'65.##5.231.140':139
'65.##5.233.231':139
'65.##5.11.250':139
'65.##5.170.62':139
'65.##5.147.65':139
'65.##5.177.16':139
'65.##5.71.91':139
'65.##5.22.141':139
'65.##5.172.87':139
'65.##5.23.53':139
'65.##5.70.14':139
'65.##5.109.121':139
'65.##5.59.211':139
'65.##5.12.251':139
'65.##5.186.12':139
'65.##5.73.171':139
'65.##5.251.73':139
'65.##5.246.147':139
'65.##5.240.42':445
'65.##5.19.98':445
'65.##5.59.147':445
'65.##5.94.223':445
'65.##5.153.6':445
'65.##5.191.124':445
'65.##5.7.123':445
'65.##5.202.6':445
'65.##5.141.102':445
'65.##5.224.246':445
'65.##5.224.205':139
'65.##5.159.192':139
'65.##5.21.21':139
'65.##5.31.132':139
'65.##5.101.109':139
'65.##5.115.77':139
'65.##5.147.246':445
'65.##5.139.143':139
'65.##5.111.185':139
'65.##5.163.214':139
'65.##5.209.247':445
'65.##5.54.184':445
'65.##5.52.87':139
'65.##5.33.118':445
'65.##5.68.129':445
'65.##5.139.181':445
'65.##5.169.177':445
'65.##5.208.166':445
'65.##5.222.167':445
'65.##5.237.54':139
'65.##5.203.13':139
'65.##5.23.42':139
'65.##5.139.250':139
'65.##5.14.56':139
'65.##5.19.222':139
'65.##5.202.186':139
'65.##5.100.106':139
'65.##5.25.95':139
'65.##5.104.145':139
'65.##5.138.47':445
'65.##5.212.122':445
'65.##5.8.202':445
'65.##5.42.72':445
'65.##5.122.244':445
'65.##5.24.220':445
'65.##5.84.104':445
'65.##5.139.79':445
'65.##5.64.68':445
'65.##5.184.205':445
'65.##5.245.136':445
'65.##5.143.32':445
'65.#15.9.77':445
'65.##5.1.108':445
'65.##5.165.40':445
'65.#15.1.22':445
'65.##5.4.229':445
'65.##5.62.34':445
'65.##5.121.133':445
'65.##5.69.197':445
'65.##5.191.145':139
'65.#15.9.77':139
'65.#15.1.22':139
'65.##5.165.40':139
'65.##5.143.32':139
'65.##5.121.133':139
'65.##5.62.34':139
'65.##5.245.136':139
'65.##5.69.197':139
'65.##5.4.229':139
'65.##5.1.108':139
'65.##5.68.129':139
'65.##5.209.247':139
'65.##5.138.47':139
'65.##5.54.184':139
'65.##5.139.181':139
'65.##5.222.167':139
'65.##5.169.177':139
'65.##5.208.166':139
'65.##5.33.118':139
'65.##5.42.72':139
'65.##5.63.194':139
'65.##5.80.66':139
'65.##5.127.219':139
'65.##5.26.91':139
'65.##5.189.172':139
'65.##5.175.52':139
'65.##5.53.93':139
'65.##5.70.76':139
'65.##5.141.74':139
'65.##5.16.240':139
'65.##5.8.202':139
'65.##5.24.220':139
'65.##5.122.244':139
'65.##5.212.122':139
'65.##5.64.68':139
'65.##5.139.79':139
'65.##5.129.92':139
'65.##5.184.205':139
'65.##5.84.104':139
'65.##5.129.92':445
'65.##5.187.52':139
'65.##5.29.188':139
'65.##5.52.156':139
'65.##5.153.181':139
'65.##5.209.175':139
'65.##5.161.55':139
'65.##5.17.78':139
'65.##5.165.126':139
'65.##5.143.92':139
'65.##5.75.38':139
'65.##5.47.123':139
'65.##5.223.46':139
'65.##5.226.119':139
'65.##5.76.185':139
'65.##5.132.249':139
'65.##5.56.80':139
'65.##5.32.162':139
'65.##5.56.82':139
'65.##5.252.52':139
'65.#15.1.16':139
'65.##5.23.91':139
'65.##5.59.48':139
'65.##5.8.162':139
'65.##5.191.139':139
'65.##5.3.254':139
'65.##5.165.113':139
'65.##5.1.191':139
'65.##5.68.106':139
'65.##5.75.126':139
'65.##5.53.132':139
'65.##5.198.43':139
'65.##5.247.7':139
'65.##5.165.146':139
'65.##5.13.219':139
'65.##5.8.106':139
'65.##5.189.167':139
'65.##5.152.189':139
'65.##5.18.87':139
'65.##5.54.91':139
'65.##5.225.126':139
'65.##5.14.56':445
'65.##5.203.13':445
'65.##5.191.145':445
'65.##5.139.250':445
'65.##5.23.42':445
'65.##5.104.145':445
'65.##5.202.186':445
'65.##5.19.222':445
'65.##5.25.95':445
'65.##5.53.93':445
'65.##5.26.91':445
'65.##5.63.194':445
'65.##5.16.240':445
'65.##5.127.219':445
'65.##5.80.66':445
'65.##5.175.52':445
'65.##5.141.74':445
'65.##5.189.172':445
'65.##5.70.76':445
'65.##5.237.54':445
'65.##5.64.68':9988
'65.##5.84.104':9988
'65.##5.212.122':9988
'65.##5.24.220':9988
'65.##5.139.79':9988
'65.##5.53.93':9988
'65.##5.139.250':9988
'65.##5.16.240':9988
'65.##5.70.76':9988
'65.##5.222.167':9988
'65.##5.169.177':9988
'65.##5.54.184':9988
'65.##5.100.106':445
'65.##5.52.87':445
'65.##5.138.47':9988
'65.##5.143.32':9988
'65.##5.42.72':9988
'65.##5.139.181':9988
'65.##5.165.40':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней