Trojan.Starman.5218

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3f21.dir00\svchost.exe.mdmp 16325836412032168

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'66.##5.32.178':445
'66.##5.66.24':445
'66.##5.135.211':445
'66.##5.1.102':445
'66.#35.50.5':445
'66.##5.118.96':445
'66.##5.244.102':445
'66.##5.153.0':445
'66.##5.103.152':445
'66.##5.114.116':445
'66.##5.227.40':445
'66.##5.60.105':445
'66.##5.94.169':445
'66.##5.28.207':445
'66.##5.132.253':445
'66.##5.207.14':445
'66.##5.115.118':445
'66.##5.37.238':445
'66.##5.153.202':445
'66.##5.39.214':445
'66.##5.96.115':445
'66.##5.36.182':445
'66.##5.234.214':445
'66.##5.66.243':139
'66.##5.16.147':139
'66.##5.242.167':139
'66.##5.181.143':445
'66.##5.177.185':139
'66.##5.238.34':139
'66.##5.20.156':139
'66.##5.27.202':139
'66.##5.155.247':139
'66.##5.140.167':139
'66.##5.95.88':139
'66.##5.146.183':445
'66.##5.15.168':445
'66.##5.30.116':445
'66.##5.37.48':445
'66.##5.116.223':445
'66.##5.82.215':445
'66.##5.181.143':139
'66.##5.24.166':445
'66.##5.24.166':139
'66.##5.83.194':445
'66.##5.166.84':445
'66.##5.227.40':139
'66.##5.103.152':139
'66.##5.114.116':139
'66.##5.66.24':139
'66.##5.118.96':139
'66.##5.244.102':139
'66.##5.116.223':139
'66.##5.30.116':139
'66.##5.37.48':139
'66.##5.153.0':139
'66.##5.234.214':139
'66.##5.36.182':139
'66.##5.39.214':139
'66.##5.96.115':139
'66.##5.94.169':139
'66.##5.115.118':139
'66.##5.37.238':139
'66.##5.135.211':139
'66.##5.32.178':139
'66.#35.50.5':139
'66.##5.153.202':139
'66.##5.1.102':139
'66.##5.146.183':139
'66.##5.164.162':445
'66.##5.53.214':445
'66.##5.49.73':445
'66.##5.126.69':445
'66.##5.174.46':445
'66.##5.141.18':445
'66.##5.177.122':445
'66.#35.64.1':445
'66.##5.232.33':445
'66.##5.138.93':445
'66.##5.39.138':445
'66.##5.166.84':139
'66.#35.64.8':445
'66.##5.83.194':139
'66.##5.15.168':139
'66.##5.82.215':139
'66.##5.71.81':445
'66.##5.172.152':445
'66.##5.36.49':445
'66.##5.29.112':445
'66.##5.79.230':445
'66.##5.49.115':445
'66.##5.58.179':445
'66.##5.44.200':445
'66.##5.176.71':445
'66.##5.232.163':445
'66.##5.59.80':445
'66.##5.107.201':445
'66.##5.74.95':445
'66.##5.17.87':445
'66.##5.241.140':445
'66.##5.121.140':445
'66.##5.80.155':445
'66.##5.27.202':445
'66.##5.146.224':445
'66.##5.20.156':445
'66.##5.95.88':445
'66.##5.155.247':445
'66.##5.109.3':445
'66.##5.67.165':445
'66.##5.20.137':445
'66.##5.77.105':445
'66.##5.62.124':445
'66.##5.20.129':445
'66.##5.51.73':445
'66.##5.200.130':445
'66.##5.179.147':445
'66.##5.130.22':445
'66.##5.23.13':445
'66.##5.185.253':445
'66.##5.254.235':445
'66.##5.157.115':139
'66.##5.62.234':139
'66.##5.71.227':445
'66.##5.240.18':445
'66.##5.90.239':445
'66.##5.251.117':445
'66.##5.193.242':445
'66.##5.157.20':445
'66.##5.236.132':445
'66.##5.1.228':445
'66.##5.224.193':445
'66.##5.51.164':445
'66.##5.215.50':445
'66.##5.44.101':445
'66.##5.139.27':445
'66.##5.22.103':445
'66.##5.80.155':139
'66.##5.241.140':139
'66.##5.121.140':139
'66.##5.44.200':139
'66.##5.107.201':139
'66.##5.74.95':139
'66.##5.1.228':139
'66.##5.157.20':139
'66.##5.236.132':139
'66.##5.17.87':139
'66.##5.51.73':139
'66.##5.20.129':139
'66.##5.77.105':139
'66.##5.62.124':139
'66.##5.146.224':139
'66.##5.109.3':139
'66.##5.67.165':139
'66.##5.176.71':139
'66.##5.58.179':139
'66.##5.59.80':139
'66.##5.20.137':139
'66.##5.232.163':139
'66.##5.251.117':139
'66.##5.90.239':139
'66.##5.71.227':139
'66.##5.240.18':139
'66.##5.179.147':139
'66.##5.254.235':139
'66.##5.177.185':445
'66.##5.238.34':445
'66.##5.140.167':445
'66.##5.16.147':445
'66.##5.242.167':445
'66.##5.66.243':445
'66.##5.22.103':139
'66.##5.44.101':139
'66.##5.139.27':139
'66.##5.193.242':139
'66.##5.224.193':139
'66.##5.51.164':139
'66.##5.130.22':139
'66.##5.200.130':139
'66.##5.185.253':139
'66.##5.215.50':139
'66.##5.23.13':139
'66.##5.60.105':139
'66.##5.99.66':445
'66.##5.186.99':445
'66.##5.73.215':445
'66.##5.198.51':445
'66.##5.38.153':445
'66.##5.213.185':445
'66.##5.159.239':445
'66.##5.33.174':445
'66.##5.117.208':445
'66.##5.240.212':445
'66.##5.137.240':445
'66.##5.2.165':139
'66.##5.174.98':139
'66.##5.114.178':139
'66.##5.43.117':139
'66.##5.165.208':139
'66.##5.83.74':139
'66.##5.94.100':445
'66.##5.23.221':445
'66.##5.44.47':445
'66.##5.174.206':445
'66.##5.197.105':445
'66.##5.89.97':445
'66.##5.112.26':445
'66.##5.172.17':445
'66.##5.178.8':445
'66.##5.62.34':445
'66.##5.41.120':445
'66.##5.178.98':445
'66.##5.204.172':445
'66.##5.53.98':445
'66.##5.85.233':445
'66.##5.129.144':445
'66.##5.165.165':445
'66.##5.194.22':445
'66.##5.163.57':445
'66.##5.131.127':445
'66.##5.13.231':445
'66.##5.73.35':445
'66.##5.20.42':445
'66.#35.8.77':445
'66.##5.76.27':445
'66.##5.102.83':445
'66.##5.85.84':445
'66.##5.171.225':445
'66.##5.159.239':139
'66.##5.33.174':139
'66.##5.117.208':139
'66.##5.240.212':139
'66.##5.137.240':139
'66.##5.89.97':139
'66.##5.163.57':139
'66.##5.194.22':139
'66.##5.131.127':139
'66.##5.13.231':139
'66.##5.73.35':139
'66.##5.44.47':139
'66.##5.197.105':139
'66.##5.23.221':139
'66.##5.94.100':139
'66.##5.174.206':139
'66.##5.198.51':139
'66.##5.186.99':139
'66.##5.213.185':139
'66.##5.99.66':139
'66.##5.38.153':139
'66.##5.73.215':139
'66.##5.20.42':139
'66.##5.204.172':139
'66.##5.53.98':139
'66.##5.85.233':139
'66.##5.129.144':139
'66.##5.165.165':139
'66.##5.216.217':139
'66.##5.119.4':139
'66.##5.36.200':139
'66.##5.17.246':139
'66.##5.22.231':139
'66.##5.116.152':139
'66.##5.76.27':139
'66.#35.8.77':139
'66.##5.102.83':139
'66.##5.85.84':139
'66.##5.171.225':139
'66.##5.62.34':139
'66.##5.172.17':139
'66.##5.178.98':139
'66.##5.112.26':139
'66.##5.41.120':139
'66.##5.178.8':139
'66.#35.8.73':445
'66.##5.141.91':445
'66.##5.14.128':445
'66.##5.155.242':445
'66.##5.240.143':445
'66.##5.33.220':445
'66.##5.190.164':139
'66.##5.53.191':139
'66.##5.164.241':445
'66.##5.72.24':445
'66.##5.126.0':445
'66.##5.165.133':445
'66.##5.58.166':445
'66.##5.79.39':445
'66.##5.164.241':139
'66.##5.38.225':445
'66.##5.224.67':445
'66.##5.54.134':445
'66.##5.101.244':445
'66.##5.199.45':445
'66.##5.27.176':445
'66.##5.211.38':445
'66.##5.190.164':445
'66.##5.138.93':139
'66.##5.39.138':139
'66.##5.141.18':139
'66.##5.164.162':139
'66.##5.53.214':139
'66.##5.232.33':139
'66.##5.207.14':139
'66.##5.28.207':139
'66.##5.132.253':139
'66.##5.177.122':139
'66.#35.64.1':139
'66.##5.79.230':139
'66.##5.49.115':139
'66.##5.71.81':139
'66.##5.53.191':445
'66.#35.64.8':139
'66.##5.29.112':139
'66.##5.174.46':139
'66.##5.49.73':139
'66.##5.126.69':139
'66.##5.172.152':139
'66.##5.36.49':139
'66.##5.240.212':9988
'66.##5.73.35':9988
'66.##5.99.66':9988
'66.##5.83.74':445
'66.##5.13.231':9988
'66.##5.73.215':9988
'66.##5.186.99':9988
'66.##5.117.208':9988
'66.##5.174.206':9988
'66.##5.213.185':9988
'66.##5.33.174':9988
'66.##5.17.246':445
'66.##5.119.4':445
'66.##5.116.152':445
'66.##5.216.217':445
'66.##5.22.231':445
'66.##5.36.200':445
'66.##5.2.165':445
'66.##5.174.98':445
'66.##5.114.178':445
'66.##5.43.117':445
'66.##5.165.208':445
'66.##5.94.100':9988
'66.##5.155.242':139
'66.##5.240.143':139
'66.##5.101.244':139
'66.##5.199.45':139
'66.##5.54.134':139
'66.##5.14.128':139
'66.##5.72.24':139
'66.##5.126.0':139
'66.##5.33.220':139
'66.#35.8.73':139
'66.##5.141.91':139
'66.##5.198.51':9988
'66.##5.38.225':139
'66.##5.89.97':9988
'66.##5.137.240':9988
'66.##5.131.127':9988
'66.##5.79.39':139
'66.##5.27.176':139
'66.##5.211.38':139
'66.##5.224.67':139
'66.##5.165.133':139
'66.##5.58.166':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней