Trojan.Starman.5213

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER31de.dir00\svchost.exe.mdmp 16325836412032252

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER31de.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'63.##4.168.237':139
'63.##4.196.228':139
'63.##4.8.209':139
'63.##4.23.52':139
'63.##4.62.45':139
'63.##4.186.200':139
'63.##4.37.87':139
'63.##4.49.10':139
'63.##4.95.25':139
'63.##4.42.247':139
'63.##4.125.159':139
'63.##4.244.40':139
'63.##4.52.252':139
'63.##4.5.143':139
'63.##4.27.73':139
'63.##4.5.253':139
'63.##4.30.48':139
'63.##4.126.194':139
'63.##4.121.42':139
'63.##4.91.52':139
'63.##4.55.112':139
'63.##4.207.99':139
'63.##4.126.194':445
'63.##4.125.159':445
'63.##4.30.48':445
'63.##4.55.112':445
'63.##4.121.42':445
'63.##4.168.237':445
'63.##4.196.228':445
'63.##4.8.209':445
'63.##4.23.52':445
'63.##4.62.45':445
'63.##4.91.52':445
'63.##4.47.165':139
'63.##4.92.219':139
'63.##4.238.108':139
'63.##4.221.119':139
'63.##4.64.159':139
'63.##4.244.40':445
'63.##4.52.252':445
'63.##4.5.143':445
'63.##4.27.73':445
'63.##4.5.253':445
'63.##4.168.132':139
'63.##4.194.212':139
'63.##4.18.161':139
'63.##4.122.35':139
'63.##4.93.35':139
'63.##4.67.53':445
'63.##4.105.199':445
'63.##4.170.32':139
'63.##4.109.78':139
'63.##4.12.72':139
'63.##4.208.250':139
'63.##4.63.136':139
'63.##4.43.115':139
'63.##4.16.159':139
'63.##4.38.139':139
'63.##4.51.119':139
'63.##4.179.154':139
'63.##4.76.71':139
'63.##4.121.0':139
'63.#34.5.57':139
'63.##4.96.243':139
'63.##4.242.63':445
'63.##4.93.35':445
'63.##4.18.161':445
'63.##4.122.35':445
'63.##4.76.71':445
'63.##4.208.250':445
'63.##4.12.72':445
'63.##4.170.32':445
'63.##4.109.78':445
'63.##4.168.132':445
'63.##4.194.212':445
'63.##4.179.154':445
'63.##4.51.119':445
'63.##4.16.159':445
'63.##4.38.139':445
'63.##4.210.60':445
'63.##4.33.191':445
'63.##4.96.243':445
'63.##4.121.0':445
'63.#34.5.57':445
'63.##4.63.136':445
'63.##4.43.115':445
'63.##4.253.93':445
'63.##4.228.162':445
'63.##4.94.116':445
'63.##4.159.168':445
'63.##4.39.84':445
'63.##4.41.87':139
'63.##4.203.41':139
'63.##4.82.254':139
'63.##4.63.16':139
'63.##4.132.151':139
'63.##4.100.165':445
'63.##4.0.253':445
'63.##4.112.84':445
'63.##4.41.172':445
'63.##4.14.161':445
'63.##4.120.216':445
'63.##4.154.21':445
'63.##4.162.7':445
'63.##4.22.44':445
'63.##4.69.112':445
'63.##4.95.169':445
'63.##4.188.239':139
'63.##4.115.202':139
'63.##4.121.162':139
'63.##4.75.76':139
'63.##4.31.190':139
'63.#34.40.2':139
'63.##4.7.141':139
'63.#34.20.7':139
'63.##4.242.170':139
'63.##4.45.106':139
'63.##4.131.144':139
'63.##4.177.54':139
'63.##4.80.139':139
'63.##4.232.121':139
'63.##4.165.68':139
'63.##4.160.132':139
'63.##4.16.140':139
'63.##4.117.62':139
'63.##4.54.144':139
'63.#34.47.6':139
'63.##4.118.61':139
'63.#34.6.14':139
'63.##4.65.150':139
'63.##4.132.126':139
'63.##4.249.6':139
'63.##4.187.27':139
'63.##4.176.187':139
'63.##4.14.161':139
'63.##4.120.216':139
'63.##4.161.3':139
'63.##4.222.214':139
'63.##4.3.223':139
'63.##4.92.219':445
'63.##4.186.200':445
'63.##4.37.87':445
'63.##4.49.10':445
'63.##4.95.25':445
'63.##4.42.247':445
'63.##4.238.108':445
'63.##4.47.165':445
'63.##4.64.159':445
'63.##4.207.99':445
'63.##4.221.119':445
'63.##4.41.172':139
'63.##4.176.187':445
'63.##4.249.6':445
'63.##4.187.27':445
'63.##4.253.93':139
'63.##4.228.162':139
'63.##4.3.223':445
'63.##4.161.3':445
'63.##4.222.214':445
'63.##4.65.150':445
'63.##4.132.126':445
'63.##4.94.116':139
'63.##4.95.169':139
'63.##4.22.44':139
'63.##4.69.112':139
'63.##4.0.253':139
'63.##4.112.84':139
'63.##4.159.168':139
'63.##4.39.84':139
'63.##4.100.165':139
'63.##4.154.21':139
'63.##4.162.7':139
'63.##4.33.191':139
'63.##4.32.75':445
'63.#34.9.51':445
'63.##4.52.232':445
'63.##4.26.29':445
'63.##4.74.98':445
'63.##4.100.123':445
'63.##4.8.100':445
'63.##4.54.145':445
'63.##4.29.152':445
'63.##4.198.75':445
'63.##4.83.65':445
'63.##4.135.206':139
'63.##4.52.142':139
'63.##4.246.49':139
'63.##4.229.158':139
'63.##4.204.190':139
'63.##4.232.26':445
'63.##4.69.176':445
'63.##4.124.206':139
'63.##4.202.250':139
'63.##4.154.115':139
'63.##4.41.110':445
'63.##4.34.96':445
'63.##4.16.67':445
'63.##4.56.14':445
'63.##4.145.241':445
'63.#34.87.2':445
'63.##4.241.37':445
'63.##4.173.249':445
'63.##4.35.155':445
'63.##4.59.84':445
'63.##4.93.131':445
'63.##4.58.131':445
'63.##4.62.105':445
'63.##4.61.236':445
'63.##4.46.246':445
'63.##4.231.197':445
'63.##4.246.132':445
'63.##4.36.215':445
'63.##4.132.203':445
'63.##4.48.128':445
'63.##4.23.102':445
'63.##4.33.123':445
'63.##4.231.197':139
'63.##4.246.132':139
'63.##4.41.110':139
'63.##4.100.123':139
'63.##4.8.100':139
'63.##4.23.102':139
'63.##4.33.123':139
'63.##4.61.236':139
'63.##4.46.246':139
'63.##4.62.105':139
'63.##4.54.145':139
'63.##4.232.26':139
'63.##4.69.176':139
'63.##4.26.29':139
'63.##4.83.65':139
'63.##4.52.232':139
'63.##4.29.152':139
'63.##4.198.75':139
'63.#34.9.51':139
'63.##4.74.98':139
'63.##4.32.75':139
'63.##4.48.128':139
'63.##4.175.76':139
'63.##4.33.102':139
'63.##4.14.248':139
'63.##4.241.37':139
'63.##4.173.249':139
'63.##4.173.217':139
'63.##4.15.169':139
'63.##4.170.88':139
'63.##4.201.15':139
'63.##4.125.32':139
'63.##4.35.155':139
'63.#34.87.2':139
'63.##4.145.241':139
'63.##4.58.131':139
'63.##4.132.203':139
'63.##4.36.215':139
'63.##4.59.84':139
'63.##4.93.131':139
'63.##4.16.67':139
'63.##4.56.14':139
'63.##4.34.96':139
'63.##4.138.144':445
'63.##4.40.138':445
'63.##4.144.189':445
'63.##4.194.218':139
'63.##4.86.225':445
'63.##4.42.235':445
'63.#34.77.7':445
'63.##4.228.92':445
'63.##4.30.173':445
'63.##4.24.222':445
'63.##4.70.175':139
'63.##4.89.22':139
'63.##4.49.147':139
'63.##4.18.243':139
'63.##4.236.89':139
'63.##4.115.1':139
'63.##4.45.247':139
'63.##4.16.117':139
'63.##4.247.105':139
'63.##4.155.203':139
'63.##4.111.105':139
'63.##4.22.189':445
'63.##4.16.117':445
'63.##4.70.175':445
'63.##4.45.247':445
'63.##4.111.105':445
'63.##4.247.105':445
'63.##4.242.63':139
'63.##4.210.60':139
'63.##4.105.199':139
'63.##4.194.218':445
'63.##4.67.53':139
'63.##4.155.203':445
'63.##4.127.115':445
'63.##4.64.134':445
'63.##4.109.169':445
'63.##4.5.126':445
'63.##4.58.197':445
'63.##4.89.22':445
'63.##4.49.147':445
'63.##4.18.243':445
'63.##4.236.89':445
'63.##4.115.1':445
'63.##4.154.115':445
'63.##4.124.206':445
'63.##4.202.250':445
'63.##4.135.206':445
'63.##4.52.142':445
'63.#34.9.51':9988
'63.##4.29.152':9988
'63.##4.32.75':9988
'63.##4.74.98':9988
'63.##4.69.176':9988
'63.##4.204.190':445
'63.##4.201.15':445
'63.##4.125.32':445
'63.##4.33.102':445
'63.##4.14.248':445
'63.##4.175.76':445
'63.##4.229.158':445
'63.##4.246.49':445
'63.##4.15.169':445
'63.##4.170.88':445
'63.##4.173.217':445
'63.##4.198.75':9988
'63.#34.77.7':139
'63.##4.22.189':139
'63.##4.42.235':139
'63.##4.24.222':139
'63.##4.228.92':139
'63.##4.127.115':139
'63.##4.64.134':139
'63.##4.109.169':139
'63.##4.5.126':139
'63.##4.58.197':139
'63.##4.30.173':139
'63.##4.46.246':9988
'63.##4.61.236':9988
'63.##4.246.132':9988
'63.##4.41.110':9988
'63.##4.231.197':9988
'63.##4.138.144':139
'63.##4.40.138':139
'63.##4.144.189':139
'63.##4.48.128':9988
'63.##4.86.225':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней