Trojan.Starman.5448

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER4f1b.dir00\svchost.exe.mdmp 16325836412030180

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER4f1b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'81.##5.89.253':139
'81.##5.217.89':139
'81.##5.39.226':139
'81.##5.41.122':139
'81.##5.192.46':139
'81.##5.53.10':139
'81.##5.44.241':139
'81.##5.100.235':139
'81.##5.31.217':139
'81.##5.186.31':139
'81.##5.9.141':139
'81.##5.207.183':445
'81.##5.39.240':445
'81.##5.183.214':445
'81.##5.109.147':445
'81.##5.82.174':445
'81.##5.251.130':139
'81.##5.101.104':139
'81.##5.38.202':139
'81.##5.20.244':445
'81.##5.33.45':139
'81.##5.31.217':445
'81.##5.186.31':445
'81.##5.217.89':445
'81.##5.39.226':445
'81.##5.89.253':445
'81.##5.38.92':445
'81.##5.47.198':445
'81.##5.44.241':445
'81.##5.100.235':445
'81.##5.53.10':445
'81.##5.192.46':445
'81.##5.20.193':139
'81.##5.33.45':445
'81.##5.41.101':139
'81.##5.38.92':139
'81.##5.47.198':139
'81.##5.9.141':445
'81.##5.41.122':445
'81.##5.101.104':445
'81.##5.38.202':445
'81.##5.251.130':445
'81.##5.96.111':445
'81.##5.207.183':139
'81.##5.39.240':139
'81.##5.183.214':139
'81.##5.109.147':139
'81.##5.82.174':139
'81.##5.158.10':445
'81.##5.243.94':445
'81.##5.68.23':445
'81.##5.20.244':139
'81.##5.66.164':445
'81.##5.96.111':139
'81.##5.57.153':139
'81.##5.24.209':139
'81.##5.119.52':139
'81.##5.149.126':139
'81.##5.131.141':139
'81.##5.27.221':139
'81.##5.253.243':139
'81.##5.131.184':139
'81.##5.53.159':139
'81.##5.15.42':139
'81.##5.57.153':445
'81.##5.24.209':445
'81.##5.119.52':445
'81.##5.149.126':445
'81.##5.131.141':445
'81.##5.27.221':445
'81.##5.253.243':445
'81.##5.131.184':445
'81.##5.53.159':445
'81.##5.15.42':445
'81.##5.115.231':445
'81.##5.79.72':445
'81.##5.241.243':445
'81.##5.11.27':445
'81.##5.32.132':445
'81.##5.5.212':445
'81.##5.21.240':445
'81.#65.5.92':445
'81.##5.234.229':445
'81.##5.62.241':445
'81.##5.119.62':445
'81.##5.64.245':445
'81.##5.10.30':445
'81.##5.3.191':445
'81.##5.251.117':445
'81.##5.123.184':445
'81.##5.61.129':445
'81.##5.23.83':445
'81.##5.121.102':445
'81.##5.81.56':445
'81.##5.101.168':445
'81.##5.118.3':445
'81.##5.90.229':445
'81.##5.114.171':445
'81.##5.154.78':445
'81.##5.132.38':445
'81.##5.31.218':445
'81.##5.81.64':445
'81.##5.2.178':445
'81.##5.25.12':445
'81.##5.41.252':445
'81.##5.33.224':445
'81.##5.140.45':139
'81.##5.125.59':139
'81.##5.72.42':139
'81.##5.182.10':139
'81.##5.187.181':139
'81.##5.203.214':139
'81.##5.115.69':139
'81.##5.215.109':139
'81.##5.124.5':139
'81.##5.35.211':139
'81.##5.44.175':139
'81.##5.235.1':139
'81.##5.37.235':139
'81.#65.2.8':139
'81.##5.184.101':445
'81.#65.3.88':445
'81.##5.92.186':139
'81.##5.23.190':139
'81.##5.241.12':139
'81.##5.131.116':139
'81.##5.49.158':139
'81.##5.13.75':445
'81.##5.90.229':139
'81.##5.114.171':139
'81.##5.154.78':139
'81.##5.132.38':139
'81.##5.31.218':139
'81.##5.81.64':139
'81.##5.2.178':139
'81.##5.25.12':139
'81.##5.41.252':139
'81.##5.33.224':139
'81.##5.13.75':139
'81.##5.154.79':139
'81.##5.105.127':139
'81.#65.8.76':139
'81.##5.41.101':445
'81.##5.20.193':445
'81.##5.132.242':139
'81.##5.146.32':139
'81.##5.175.174':139
'81.##5.106.132':139
'81.##5.71.210':139
'81.##5.154.79':445
'81.##5.105.127':445
'81.#65.8.76':445
'81.##5.184.101':139
'81.#65.3.88':139
'81.##5.132.242':445
'81.##5.146.32':445
'81.##5.175.174':445
'81.##5.106.132':445
'81.##5.71.210':445
'81.##5.23.83':139
'81.##5.3.191':139
'81.##5.64.245':139
'81.##5.123.184':139
'81.##5.118.3':139
'81.##5.251.117':139
'81.##5.121.102':139
'81.##5.61.129':139
'81.##5.101.168':139
'81.##5.10.30':139
'81.##5.81.56':139
'81.##5.115.231':139
'81.##5.189.41':445
'81.##5.54.189':445
'81.##5.100.202':445
'81.##5.182.140':445
'81.##5.56.144':445
'81.##5.20.187':445
'81.##5.102.78':445
'81.##5.187.215':445
'81.##5.154.148':445
'81.#65.23.6':445
'81.##5.64.251':445
'81.##5.255.143':139
'81.##5.142.54':139
'81.##5.156.100':139
'81.##5.157.32':139
'81.##5.140.179':139
'81.##5.35.78':445
'81.##5.159.100':445
'81.##5.133.78':139
'81.##5.223.45':139
'81.##5.72.223':139
'81.##5.54.134':445
'81.##5.81.11':445
'81.##5.48.80':445
'81.##5.109.171':445
'81.##5.229.73':445
'81.##5.197.224':445
'81.##5.90.30':445
'81.##5.224.172':445
'81.##5.87.43':445
'81.##5.172.86':445
'81.##5.54.234':445
'81.##5.30.74':445
'81.##5.54.30':445
'81.##5.154.164':445
'81.##5.184.240':445
'81.##5.137.154':445
'81.##5.244.106':445
'81.##5.47.145':445
'81.##5.227.48':445
'81.#65.9.2':445
'81.##5.48.210':445
'81.##5.178.72':139
'81.##5.137.154':139
'81.##5.154.164':139
'81.##5.184.240':139
'81.##5.20.187':139
'81.##5.102.78':139
'81.##5.48.210':139
'81.##5.227.48':139
'81.#65.9.2':139
'81.##5.30.74':139
'81.##5.54.30':139
'81.##5.187.215':139
'81.##5.182.140':139
'81.##5.56.144':139
'81.##5.64.251':139
'81.##5.35.78':139
'81.##5.159.100':139
'81.##5.154.148':139
'81.#65.23.6':139
'81.##5.54.189':139
'81.##5.100.202':139
'81.##5.189.41':139
'81.##5.112.195':139
'81.##5.15.235':139
'81.##5.24.202':139
'81.##5.197.224':139
'81.##5.90.30':139
'81.##5.10.160':139
'81.##5.15.222':139
'81.#65.4.77':139
'81.##5.53.78':139
'81.##5.188.36':139
'81.##5.224.172':139
'81.##5.109.171':139
'81.##5.229.73':139
'81.##5.54.234':139
'81.##5.244.106':139
'81.##5.47.145':139
'81.##5.87.43':139
'81.##5.172.86':139
'81.##5.81.11':139
'81.##5.48.80':139
'81.##5.54.134':139
'81.##5.126.251':445
'81.##5.71.126':445
'81.##5.251.202':445
'81.##5.154.220':445
'81.##5.41.170':445
'81.##5.174.212':445
'81.##5.112.158':445
'81.##5.212.110':445
'81.##5.98.72':445
'81.##5.110.59':445
'81.##5.184.46':445
'81.##5.189.175':139
'81.##5.62.117':139
'81.##5.223.15':139
'81.##5.174.212':139
'81.##5.112.158':139
'81.##5.52.197':139
'81.##5.150.215':445
'81.##5.17.190':139
'81.##5.59.157':139
'81.##5.128.47':139
'81.##5.79.72':139
'81.##5.241.243':139
'81.##5.11.27':139
'81.##5.32.132':139
'81.##5.5.212':139
'81.##5.21.240':139
'81.#65.5.92':139
'81.##5.234.229':139
'81.##5.62.241':139
'81.##5.119.62':139
'81.##5.243.94':139
'81.##5.59.157':445
'81.##5.128.47':445
'81.##5.62.117':445
'81.##5.223.15':445
'81.##5.189.175':445
'81.##5.68.23':139
'81.##5.158.10':139
'81.##5.66.164':139
'81.##5.17.190':445
'81.##5.52.197':445
'81.##5.212.110':139
'81.##5.223.45':445
'81.##5.72.223':445
'81.##5.142.54':445
'81.##5.156.100':445
'81.##5.255.143':445
'81.##5.64.251':9988
'81.##5.100.202':9988
'81.##5.35.78':9988
'81.##5.133.78':445
'81.##5.159.100':9988
'81.##5.140.179':445
'81.##5.53.78':445
'81.##5.188.36':445
'81.##5.15.235':445
'81.##5.24.202':445
'81.##5.112.195':445
'81.##5.178.72':445
'81.##5.157.32':445
'81.##5.15.222':445
'81.#65.4.77':445
'81.##5.10.160':445
'81.##5.154.220':139
'81.##5.41.170':139
'81.##5.184.46':139
'81.##5.224.172':9988
'81.##5.150.215':139
'81.##5.98.72':139
'81.##5.110.59':139
'81.##5.71.126':139
'81.##5.251.202':139
'81.##5.126.251':139
'81.##5.227.48':9988
'81.#65.23.6':9988
'81.##5.187.215':9988
'81.##5.154.148':9988
'81.##5.189.41':9988
'81.##5.54.189':9988
'81.##5.154.164':9988
'81.##5.30.74':9988
'81.##5.137.154':9988
'81.##5.20.187':9988
'81.##5.102.78':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней