Trojan.Starman.5189

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa787.dir00\svchost.exe.mdmp 16325836412032204

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##1.197.212':139
'69.##1.52.34':139
'69.##1.205.239':139
'69.##1.152.233':139
'69.##1.46.72':139
'69.##1.75.247':139
'69.##1.42.197':139
'69.##1.54.100':139
'69.##1.151.28':139
'69.##1.136.151':139
'69.##1.233.196':139
'69.##1.121.172':445
'69.##1.169.221':445
'69.##1.73.185':445
'69.##1.47.124':445
'69.##1.118.132':445
'69.##1.176.122':139
'69.##1.196.175':139
'69.##1.60.58':139
'69.##1.20.18':139
'69.#51.5.20':139
'69.##1.197.212':445
'69.##1.52.34':445
'69.##1.205.239':445
'69.##1.152.233':445
'69.##1.46.72':445
'69.##1.75.247':445
'69.##1.42.197':445
'69.##1.54.100':445
'69.##1.151.28':445
'69.##1.136.151':445
'69.##1.233.196':445
'69.##1.230.246':139
'69.##1.201.190':139
'69.##1.101.150':139
'69.##1.145.127':139
'69.##1.40.89':139
'69.##1.176.122':445
'69.##1.196.175':445
'69.##1.60.58':445
'69.##1.20.18':445
'69.#51.5.20':445
'69.##1.40.104':445
'69.##1.118.132':139
'69.##1.73.185':139
'69.##1.47.124':139
'69.##1.222.120':139
'69.##1.40.104':139
'69.##1.200.32':445
'69.##1.224.228':445
'69.##1.114.6':445
'69.##1.121.172':139
'69.##1.169.221':139
'69.##1.36.150':139
'69.##1.24.181':139
'69.##1.144.159':139
'69.##1.117.253':139
'69.##1.194.157':139
'69.##1.63.31':139
'69.##1.74.228':139
'69.##1.232.93':139
'69.##1.93.39':139
'69.##1.115.21':139
'69.##1.10.156':139
'69.##1.115.21':445
'69.##1.10.156':445
'69.##1.144.159':445
'69.##1.117.253':445
'69.##1.24.181':445
'69.##1.36.150':445
'69.##1.222.120':445
'69.##1.232.93':445
'69.##1.93.39':445
'69.##1.74.228':445
'69.##1.63.31':445
'69.#51.49.5':445
'69.##1.162.205':445
'69.##1.44.234':445
'69.##1.15.52':445
'69.##1.234.65':445
'69.##1.98.220':445
'69.##1.194.157':445
'69.##1.26.15':445
'69.##1.140.87':445
'69.##1.67.119':445
'69.##1.145.127':445
'69.##1.46.55':445
'69.##1.101.212':445
'69.##1.109.242':445
'69.##1.190.34':445
'69.##1.71.13':445
'69.##1.215.78':445
'69.##1.121.246':445
'69.##1.21.223':445
'69.##1.52.198':445
'69.##1.57.150':445
'69.##1.106.210':445
'69.##1.78.103':445
'69.##1.27.26':445
'69.##1.1.183':445
'69.##1.74.137':445
'69.##1.230.84':445
'69.##1.96.129':445
'69.##1.119.33':445
'69.##1.196.192':445
'69.##1.78.222':445
'69.##1.180.71':445
'69.##1.23.128':139
'69.##1.185.125':139
'69.##1.128.36':139
'69.##1.240.47':139
'69.##1.85.154':139
'69.##1.224.134':139
'69.##1.50.59':139
'69.##1.134.110':139
'69.##1.66.34':139
'69.##1.49.249':139
'69.##1.212.144':139
'69.##1.97.248':139
'69.##1.56.208':139
'69.##1.88.59':139
'69.##1.199.45':139
'69.##1.126.182':139
'69.##1.134.158':139
'69.##1.177.27':139
'69.##1.221.96':139
'69.##1.187.203':139
'69.##1.113.182':139
'69.##1.5.212':445
'69.##1.230.84':139
'69.##1.1.183':139
'69.##1.74.137':139
'69.##1.211.249':139
'69.##1.5.212':139
'69.##1.180.71':139
'69.##1.196.192':139
'69.##1.78.222':139
'69.##1.78.103':139
'69.##1.27.26':139
'69.##1.142.199':139
'69.##1.201.190':445
'69.##1.250.132':139
'69.##1.230.246':445
'69.##1.40.89':445
'69.##1.101.150':445
'69.##1.16.183':139
'69.##1.239.15':139
'69.##1.81.142':139
'69.##1.188.250':139
'69.##1.22.223':139
'69.##1.188.250':445
'69.##1.22.223':445
'69.##1.250.132':445
'69.##1.215.78':139
'69.##1.121.246':139
'69.##1.142.199':445
'69.##1.211.249':445
'69.##1.239.15':445
'69.##1.81.142':445
'69.##1.16.183':445
'69.##1.21.223':139
'69.##1.190.34':139
'69.##1.71.13':139
'69.##1.106.210':139
'69.##1.96.129':139
'69.##1.119.33':139
'69.##1.52.198':139
'69.##1.57.150':139
'69.##1.101.212':139
'69.##1.109.242':139
'69.##1.46.55':139
'69.##1.187.237':445
'69.##1.183.187':445
'69.##1.55.76':445
'69.##1.129.215':445
'69.##1.240.129':445
'69.##1.10.75':445
'69.##1.75.10':445
'69.##1.187.253':445
'69.##1.222.192':445
'69.##1.19.247':445
'69.##1.215.152':445
'69.##1.215.95':139
'69.##1.26.107':139
'69.##1.205.102':139
'69.#51.74.3':139
'69.##1.73.127':139
'69.##1.17.85':445
'69.##1.52.204':445
'69.##1.252.20':139
'69.##1.57.187':139
'69.##1.40.58':139
'69.##1.159.203':445
'69.##1.143.175':445
'69.##1.96.73':445
'69.##1.41.141':445
'69.##1.37.195':445
'69.##1.85.238':445
'69.##1.53.85':445
'69.##1.106.207':445
'69.##1.42.170':445
'69.##1.129.210':445
'69.##1.213.41':445
'69.##1.21.229':445
'69.##1.104.224':445
'69.##1.66.224':445
'69.##1.20.75':445
'69.##1.103.146':445
'69.##1.251.3':445
'69.##1.226.113':445
'69.##1.35.204':445
'69.##1.9.224':445
'69.##1.254.121':445
'69.##1.3.138':139
'69.##1.103.146':139
'69.##1.66.224':139
'69.##1.20.75':139
'69.##1.10.75':139
'69.##1.75.10':139
'69.##1.254.121':139
'69.##1.35.204':139
'69.##1.9.224':139
'69.##1.21.229':139
'69.##1.104.224':139
'69.##1.187.253':139
'69.##1.129.215':139
'69.##1.240.129':139
'69.##1.215.152':139
'69.##1.52.204':139
'69.##1.17.85':139
'69.##1.222.192':139
'69.##1.19.247':139
'69.##1.183.187':139
'69.##1.55.76':139
'69.##1.187.237':139
'69.##1.59.131':139
'69.##1.96.31':139
'69.##1.109.245':139
'69.##1.85.238':139
'69.##1.53.85':139
'69.##1.155.198':139
'69.#51.9.32':139
'69.##1.183.66':139
'69.##1.94.156':139
'69.##1.14.198':139
'69.##1.106.207':139
'69.##1.41.141':139
'69.##1.37.195':139
'69.##1.213.41':139
'69.##1.251.3':139
'69.##1.226.113':139
'69.##1.42.170':139
'69.##1.129.210':139
'69.##1.143.175':139
'69.##1.96.73':139
'69.##1.159.203':139
'69.##1.109.245':445
'69.##1.90.252':445
'69.##1.99.33':445
'69.##1.65.243':445
'69.#51.96.3':445
'69.##1.128.161':445
'69.##1.163.180':445
'69.##1.83.19':445
'69.##1.239.0':445
'69.##1.82.42':445
'69.##1.22.92':445
'69.##1.247.213':445
'69.##1.1.203':139
'69.##1.191.104':139
'69.##1.14.243':139
'69.##1.118.59':139
'69.#51.7.88':139
'69.##1.0.145':139
'69.##1.86.162':445
'69.#51.7.67':139
'69.##1.75.70':139
'69.##1.66.87':139
'69.##1.44.234':139
'69.#51.49.5':139
'69.##1.234.65':139
'69.##1.224.228':139
'69.##1.15.52':139
'69.##1.26.15':139
'69.##1.98.220':139
'69.##1.67.119':139
'69.##1.162.205':139
'69.##1.140.87':139
'69.##1.200.32':139
'69.##1.1.203':445
'69.##1.191.104':445
'69.##1.14.243':445
'69.##1.118.59':445
'69.#51.7.88':445
'69.##1.0.145':445
'69.##1.114.6':139
'69.#51.7.67':445
'69.##1.75.70':445
'69.##1.66.87':445
'69.##1.83.19':139
'69.##1.40.58':445
'69.##1.252.20':445
'69.##1.57.187':445
'69.##1.215.95':445
'69.##1.26.107':445
'69.##1.129.215':9988
'69.##1.240.129':9988
'69.##1.215.152':9988
'69.##1.17.85':9988
'69.##1.52.204':9988
'69.##1.205.102':445
'69.##1.14.198':445
'69.##1.183.66':445
'69.##1.94.156':445
'69.##1.59.131':445
'69.##1.96.31':445
'69.#51.74.3':445
'69.##1.73.127':445
'69.##1.3.138':445
'69.##1.155.198':445
'69.#51.9.32':445
'69.##1.65.243':139
'69.##1.90.252':139
'69.##1.128.161':139
'69.##1.247.213':139
'69.#51.96.3':139
'69.##1.239.0':139
'69.##1.163.180':139
'69.##1.22.92':139
'69.##1.99.33':139
'69.##1.82.42':139
'69.##1.86.162':139
'69.##1.21.229':9988
'69.##1.104.224':9988
'69.##1.66.224':9988
'69.##1.55.76':9988
'69.##1.187.253':9988
'69.##1.37.195':9988
'69.##1.143.175':9988
'69.##1.42.170':9988
'69.##1.251.3':9988
'69.##1.213.41':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней