Trojan.Starman.5439

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER5420.dir00\svchost.exe.mdmp 16325836412032164

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5420.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'24.##.152.184':139
'24.##.131.66':139
'24.##.210.127':139
'24.#7.45.44':139
'24.##.128.43':139
'24.#7.32.61':139
'24.##.156.99':139
'24.##.31.181':139
'24.##.221.65':139
'24.##.181.221':139
'24.##.225.96':139
'24.##.192.56':139
'24.##.191.199':139
'24.##.254.139':139
'24.##.135.21':139
'24.##.74.135':139
'24.#7.32.14':139
'24.#7.97.90':139
'24.##.101.67':139
'24.##.19.237':139
'24.##.101.47':139
'24.##.19.110':139
'24.##.101.67':445
'24.#7.32.14':445
'24.##.101.47':445
'24.##.191.199':445
'24.##.19.237':445
'24.##.128.43':445
'24.##.210.127':445
'24.#7.45.44':445
'24.#7.97.90':445
'24.##.225.96':445
'24.##.192.56':445
'24.##.213.27':139
'24.#7.42.15':139
'24.##.122.239':139
'24.##.138.29':139
'24.##.55.242':139
'24.##.74.135':445
'24.##.254.139':445
'24.##.135.21':445
'24.#7.32.73':139
'24.#7.4.10':445
'24.##.244.110':139
'24.##.208.243':139
'24.##.111.98':139
'24.##.179.184':139
'24.##.98.179':139
'24.#7.189.5':139
'24.##.146.158':445
'24.##.236.149':139
'24.##.166.208':139
'24.##.62.176':139
'24.##.161.22':139
'24.##.77.243':139
'24.##.181.251':139
'24.##.62.165':139
'24.##.184.160':139
'24.##.248.94':139
'24.##.90.230':139
'24.##.185.59':139
'24.##.140.185':139
'24.##.118.132':139
'24.##.130.118':139
'24.##.19.251':445
'24.##.244.110':445
'24.##.208.243':445
'24.##.111.98':445
'24.##.179.184':445
'24.##.98.179':445
'24.#7.189.5':445
'24.#7.4.10':139
'24.##.236.149':445
'24.##.166.208':445
'24.##.62.176':445
'24.##.161.22':445
'24.##.77.243':445
'24.##.181.251':445
'24.##.62.165':445
'24.##.184.160':445
'24.##.248.94':445
'24.##.90.230':445
'24.##.185.59':445
'24.##.140.185':445
'24.##.118.132':445
'24.##.130.118':445
'24.##.152.184':445
'24.##.183.123':139
'24.##.160.101':139
'24.##.53.182':445
'24.#7.93.10':445
'24.##.25.104':445
'24.#7.63.19':139
'24.##.10.190':139
'24.##.155.144':139
'24.##.223.195':139
'24.##.144.201':139
'24.#7.10.66':445
'24.#7.11.6':445
'24.##.21.199':445
'24.#7.85.20':445
'24.##.230.214':445
'24.##.104.231':445
'24.##.230.139':445
'24.##.211.101':445
'24.##.139.182':445
'24.##.189.237':445
'24.#7.255.3':445
'24.#7.8.206':139
'24.##.120.42':139
'24.##.83.120':139
'24.##.208.33':139
'24.##.125.152':139
'24.##.146.204':139
'24.#7.98.77':139
'24.##.190.98':139
'24.##.130.98':139
'24.##.112.83':139
'24.##.76.123':139
'24.##.152.101':139
'24.##.120.116':139
'24.##.100.32':139
'24.##.181.181':139
'24.##.83.218':139
'24.##.12.244':139
'24.##.235.200':139
'24.##.151.118':139
'24.#7.45.57':139
'24.##.160.12':139
'24.##.205.53':139
'24.##.70.136':139
'24.##.221.79':139
'24.##.87.184':139
'24.#7.42.15':445
'24.#7.32.73':445
'24.##.217.236':139
'24.##.214.144':139
'24.##.80.149':139
'24.##.36.221':139
'24.#7.77.79':139
'24.##.213.27':445
'24.##.31.181':445
'24.#7.32.61':445
'24.##.181.221':445
'24.##.131.66':445
'24.##.221.65':445
'24.##.55.242':445
'24.##.122.239':445
'24.##.138.29':445
'24.##.156.99':445
'24.##.19.110':445
'24.##.230.214':139
'24.##.70.136':445
'24.##.221.79':445
'24.##.87.184':445
'24.##.25.104':139
'24.##.53.182':139
'24.##.217.236':445
'24.##.214.144':445
'24.##.80.149':445
'24.##.36.221':445
'24.#7.77.79':445
'24.#7.93.10':139
'24.##.21.199':139
'24.##.189.237':139
'24.#7.11.6':139
'24.##.104.231':139
'24.#7.85.20':139
'24.##.211.101':139
'24.#7.10.66':139
'24.##.230.139':139
'24.#7.255.3':139
'24.##.139.182':139
'24.##.95.136':445
'24.##.167.51':445
'24.##.13.226':445
'24.##.198.41':445
'24.##.142.154':445
'24.##.170.93':445
'24.##.74.152':445
'24.##.175.74':445
'24.##.143.149':445
'24.##.94.145':445
'24.#7.68.33':445
'24.##.31.188':139
'24.##.236.31':139
'24.##.89.202':139
'24.##.83.141':139
'24.##.202.83':139
'24.#7.70.79':445
'24.##.154.186':445
'24.##.205.72':139
'24.#7.14.9':139
'24.#7.93.25':139
'24.#7.47.80':445
'24.#7.99.95':445
'24.##.90.198':445
'24.#7.96.24':445
'24.##.165.195':445
'24.##.216.156':445
'24.##.217.231':445
'24.##.18.218':445
'24.##.245.96':445
'24.##.131.18':445
'24.##.54.165':445
'24.##.48.181':445
'24.##.168.192':445
'24.##.125.240':445
'24.#7.1.242':445
'24.#7.39.74':445
'24.##.112.90':445
'24.##.160.123':445
'24.##.181.108':445
'24.##.82.210':445
'24.##.11.119':445
'24.##.85.168':445
'24.#7.39.74':139
'24.##.112.90':139
'24.#7.47.80':139
'24.##.170.93':139
'24.##.74.152':139
'24.##.11.119':139
'24.##.85.168':139
'24.##.125.240':139
'24.#7.1.242':139
'24.##.168.192':139
'24.##.175.74':139
'24.##.154.186':139
'24.#7.70.79':139
'24.##.142.154':139
'24.#7.68.33':139
'24.##.13.226':139
'24.##.143.149':139
'24.##.94.145':139
'24.##.167.51':139
'24.##.198.41':139
'24.##.95.136':139
'24.##.82.210':139
'24.##.165.108':139
'24.##.93.194':139
'24.##.129.19':139
'24.##.217.231':139
'24.##.18.218':139
'24.#7.17.39':139
'24.##.25.249':139
'24.##.57.196':139
'24.##.85.196':139
'24.##.179.85':139
'24.##.245.96':139
'24.##.165.195':139
'24.##.216.156':139
'24.##.48.181':139
'24.##.160.123':139
'24.##.181.108':139
'24.##.131.18':139
'24.##.54.165':139
'24.##.90.198':139
'24.#7.96.24':139
'24.#7.99.95':139
'24.##.129.19':445
'24.##.182.171':445
'24.##.156.38':445
'24.##.166.211':445
'24.##.42.194':139
'24.##.211.204':445
'24.##.102.59':445
'24.##.217.51':445
'24.##.176.168':445
'24.##.103.78':445
'24.##.168.201':445
'24.#7.32.84':139
'24.##.61.172':139
'24.#7.20.44':139
'24.##.183.106':139
'24.##.83.231':139
'24.##.195.11':139
'24.##.182.50':139
'24.#7.59.85':139
'24.#7.57.10':139
'24.##.146.75':139
'24.##.153.162':139
'24.##.105.84':445
'24.#7.57.10':445
'24.##.182.50':445
'24.##.153.162':445
'24.#7.20.44':445
'24.##.146.75':445
'24.##.146.158':139
'24.##.19.251':139
'24.##.42.194':445
'24.#7.59.85':445
'24.#7.32.84':445
'24.##.61.172':445
'24.##.152.152':445
'24.##.61.120':445
'24.##.127.47':445
'24.#7.90.15':445
'24.#7.47.90':445
'24.##.195.11':445
'24.##.183.106':445
'24.##.83.231':445
'24.##.116.86':445
'24.##.118.99':445
'24.##.205.72':445
'24.##.154.186':9988
'24.#7.93.25':445
'24.##.236.31':445
'24.#7.14.9':445
'24.##.112.90':9988
'24.#7.1.242':9988
'24.#7.39.74':9988
'24.##.13.226':9988
'24.##.170.93':9988
'24.##.31.188':445
'24.##.179.85':445
'24.##.57.196':445
'24.##.85.196':445
'24.##.165.108':445
'24.##.93.194':445
'24.##.202.83':445
'24.##.89.202':445
'24.##.83.141':445
'24.#7.17.39':445
'24.##.25.249':445
'24.##.168.192':9988
'24.#7.90.15':139
'24.#7.47.90':139
'24.##.105.84':139
'24.##.102.59':139
'24.##.217.51':139
'24.##.116.86':139
'24.##.118.99':139
'24.##.61.120':139
'24.##.127.47':139
'24.##.152.152':139
'24.##.176.168':139
'24.##.131.18':9988
'24.##.211.204':139
'24.##.90.198':9988
'24.##.125.240':9988
'24.##.165.195':9988
'24.##.103.78':139
'24.##.168.201':139
'24.##.156.38':139
'24.##.166.211':139
'24.##.182.171':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней