Trojan.Starman.5412

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc31c.dir00\svchost.exe.mdmp 16325836412032304

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc31c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##.218.163':445
'65.##.119.49':445
'65.##.214.137':445
'65.##.14.160':445
'65.##.255.208':445
'65.##.12.181':139
'65.##.64.133':139
'65.#4.36.64':139
'65.#4.10.96':139
'65.##.174.109':445
'65.##.159.178':445
'65.##.58.144':445
'65.##.120.60':445
'65.##.32.111':445
'65.##.187.162':445
'65.#4.4.0':445
'65.##.213.83':445
'65.##.238.204':445
'65.##.22.139':445
'65.##.124.54':139
'65.##.76.236':139
'65.##.135.242':139
'65.##.101.26':139
'65.##.91.182':139
'65.##.63.233':139
'65.#4.61.21':139
'65.##.24.224':139
'65.##.40.222':139
'65.##.41.215':139
'65.##.71.218':139
'65.#4.86.4':139
'65.##.84.127':139
'65.#4.36.27':139
'65.##.123.80':139
'65.##.181.22':139
'65.##.100.166':139
'65.##.74.149':139
'65.##.144.170':139
'65.#4.7.70':139
'65.##.252.10':445
'65.##.116.222':445
'65.##.110.38':445
'65.##.10.110':445
'65.##.81.196':445
'65.#4.61.34':445
'65.##.241.191':445
'65.##.109.81':445
'65.##.123.37':445
'65.##.38.137':445
'65.##.255.208':139
'65.##.179.240':445
'65.##.218.163':139
'65.##.119.49':139
'65.##.48.205':445
'65.##.191.113':445
'65.#4.48.16':445
'65.##.247.243':445
'65.##.114.159':445
'65.#4.25.52':445
'65.#4.33.7':445
'65.##.57.147':445
'65.##.144.142':445
'65.#4.220.9':445
'65.#4.27.29':445
'65.##.89.203':445
'65.##.59.201':445
'65.#4.7.148':445
'65.#4.1.8':445
'65.#4.31.73':445
'65.##.161.168':445
'65.##.122.90':445
'65.##.216.24':445
'65.##.78.205':445
'65.##.125.108':445
'65.#4.59.48':445
'65.##.99.231':445
'65.##.188.126':445
'65.##.31.116':445
'65.##.151.36':445
'65.#4.53.79':445
'65.#4.61.21':445
'65.##.24.224':445
'65.##.169.209':445
'65.##.104.216':445
'65.##.98.104':445
'65.##.137.170':445
'65.##.216.137':445
'65.##.41.215':445
'65.##.71.218':445
'65.##.101.26':445
'65.##.100.166':445
'65.##.74.149':445
'65.##.91.182':445
'65.##.63.233':445
'65.##.40.222':445
'65.##.76.236':445
'65.##.135.242':445
'65.#4.234.4':445
'65.##.230.73':445
'65.##.162.135':445
'65.#4.18.81':445
'65.#4.90.0':445
'65.##.105.183':445
'65.#4.77.34':445
'65.#4.15.16':445
'65.##.92.103':445
'65.#4.53.4':445
'65.##.26.174':445
'65.#4.61.25':445
'65.##.73.201':445
'65.#4.49.66':445
'65.##.170.128':445
'65.##.117.174':445
'65.##.216.98':445
'65.#4.3.217':445
'65.##.30.153':445
'65.##.99.105':445
'65.##.117.174':139
'65.##.30.153':139
'65.#4.61.25':139
'65.##.73.201':139
'65.##.99.105':139
'65.##.26.174':139
'65.#4.18.81':139
'65.##.216.98':139
'65.#4.3.217':139
'65.##.170.128':139
'65.##.169.209':139
'65.##.137.170':139
'65.##.151.36':139
'65.#4.53.79':139
'65.##.216.137':139
'65.#4.234.4':139
'65.#4.49.66':139
'65.##.104.216':139
'65.##.98.104':139
'65.#4.90.0':139
'65.#4.36.27':445
'65.##.123.80':445
'65.##.64.133':445
'65.##.124.54':445
'65.#4.86.4':445
'65.##.144.170':445
'65.#4.7.70':445
'65.##.84.127':445
'65.##.181.22':445
'65.##.12.181':445
'65.##.105.183':139
'65.##.92.103':139
'65.##.230.73':139
'65.##.162.135':139
'65.#4.53.4':139
'65.#4.36.64':445
'65.#4.10.96':445
'65.#4.77.34':139
'65.#4.15.16':139
'65.##.14.160':139
'65.##.221.203':445
'65.##.238.237':445
'65.##.103.116':139
'65.##.227.102':139
'65.##.124.70':445
'65.##.204.75':445
'65.#4.97.45':445
'65.##.90.147':445
'65.#4.13.60':445
'65.##.116.184':139
'65.#4.9.168':139
'65.##.185.145':139
'65.##.155.222':139
'65.##.250.103':139
'65.##.241.184':139
'65.##.161.31':139
'65.##.145.100':139
'65.#4.102.2':139
'65.#4.44.8':139
'65.#4.98.21':445
'65.##.231.204':445
'65.##.67.232':445
'65.#4.103.3':445
'65.#4.63.34':445
'65.#4.10.94':445
'65.##.201.179':445
'65.#4.10.20':445
'65.##.165.139':445
'65.##.201.183':445
'65.##.192.89':445
'65.##.147.38':445
'65.##.37.183':445
'65.##.227.43':445
'65.##.182.149':445
'65.##.58.211':445
'65.##.85.123':445
'65.##.154.85':445
'65.##.121.124':445
'65.#4.1.95':445
'65.##.58.211':139
'65.##.121.124':139
'65.##.37.183':139
'65.##.147.38':139
'65.#4.1.95':139
'65.##.192.89':139
'65.#4.103.3':139
'65.##.85.123':139
'65.##.154.85':139
'65.##.182.149':139
'65.#4.13.60':139
'65.#4.97.45':139
'65.##.204.75':139
'65.##.221.203':139
'65.##.124.70':139
'65.#4.98.21':139
'65.##.227.43':139
'65.##.238.237':139
'65.##.90.147':139
'65.#4.63.34':139
'65.##.153.161':139
'65.##.156.177':139
'65.##.159.36':139
'65.##.139.219':139
'65.##.104.74':139
'65.##.185.166':139
'65.##.56.155':139
'65.##.61.104':139
'65.#4.35.62':139
'65.##.121.194':139
'65.##.165.139':139
'65.#4.10.94':139
'65.##.231.204':139
'65.##.67.232':139
'65.##.201.183':139
'65.##.181.164':139
'65.##.150.181':139
'65.##.201.179':139
'65.#4.10.20':139
'65.##.122.90':139
'65.##.125.108':139
'65.##.78.205':139
'65.##.161.168':139
'65.##.188.126':139
'65.##.99.231':139
'65.#4.31.73':139
'65.##.31.116':139
'65.#4.59.48':139
'65.##.216.24':139
'65.##.116.222':139
'65.##.81.196':139
'65.##.10.110':139
'65.##.252.10':139
'65.##.109.81':139
'65.##.241.191':139
'65.#4.25.52':139
'65.##.123.37':139
'65.#4.61.34':139
'65.##.144.142':139
'65.##.187.162':139
'65.##.238.204':139
'65.##.159.178':139
'65.##.58.144':139
'65.##.22.139':139
'65.##.174.109':139
'65.##.214.137':139
'65.#4.4.0':139
'65.##.213.83':139
'65.##.32.111':139
'65.##.57.147':139
'65.#4.27.29':139
'65.#4.220.9':139
'65.#4.33.7':139
'65.#4.7.148':139
'65.##.59.201':139
'65.##.120.60':139
'65.#4.1.8':139
'65.##.89.203':139
'65.##.56.155':445
'65.##.250.103':445
'65.##.185.166':445
'65.##.155.222':445
'65.##.185.145':445
'65.#4.102.2':445
'65.#4.44.8':445
'65.##.241.184':445
'65.#4.9.168':445
'65.#4.35.62':445
'65.##.121.194':445
'65.##.139.219':445
'65.##.181.164':445
'65.##.150.181':445
'65.##.159.36':445
'65.##.104.74':445
'65.##.61.104':445
'65.##.156.177':445
'65.##.153.161':445
'65.##.161.31':445
'65.##.48.205':139
'65.##.247.243':139
'65.##.56.155':9988
'65.##.179.240':139
'65.##.114.159':139
'65.##.38.137':139
'65.##.110.38':139
'65.##.191.113':139
'65.#4.48.16':139
'65.#4.63.34':9988
'65.##.103.116':445
'65.##.227.102':445
'65.##.145.100':445
'65.##.116.184':445
'65.##.182.149':9988
'65.#4.97.45':9988
'65.##.221.203':9988
'65.##.58.211':9988
'65.##.238.237':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней