Trojan.Starman.5596

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER4043.dir00\svchost.exe.mdmp 16325836412032188

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER4043.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'14.#3.81.42':139
'14.#3.28.46':139
'14.##.74.184':139
'14.##.76.213':139
'14.##.185.53':139
'14.#3.10.42':139
'14.##.104.139':139
'14.##.123.176':139
'14.##.200.28':139
'14.##.18.174':139
'14.#3.185.2':139
'14.##.139.248':139
'14.##.39.101':139
'14.##.149.189':139
'14.##.175.250':139
'14.##.166.99':139
'14.##.56.246':139
'14.##.208.134':139
'14.##.102.110':139
'14.#3.8.39':139
'14.#3.26.56':139
'14.##.63.117':139
'14.#3.8.39':445
'14.#3.26.56':445
'14.##.39.101':445
'14.##.149.189':445
'14.##.139.248':445
'14.#3.185.2':445
'14.##.76.213':445
'14.##.208.134':445
'14.##.102.110':445
'14.##.56.246':445
'14.##.166.99':445
'14.##.98.162':139
'14.##.111.170':139
'14.#3.63.43':139
'14.#3.95.64':139
'14.#3.43.96':139
'14.##.152.153':445
'14.##.175.250':445
'14.##.199.250':445
'14.##.93.115':139
'14.##.113.22':445
'14.##.12.203':139
'14.##.107.226':139
'14.##.180.189':139
'14.##.215.31':139
'14.##.168.214':139
'14.##.140.242':139
'14.##.55.210':445
'14.##.242.183':139
'14.##.189.174':139
'14.#3.9.29':139
'14.#3.31.13':139
'14.##.58.243':139
'14.#3.0.254':139
'14.##.39.183':139
'14.##.55.210':139
'14.##.151.167':139
'14.##.32.188':139
'14.##.13.221':139
'14.##.191.143':139
'14.##.247.58':139
'14.##.250.194':139
'14.##.151.167':445
'14.##.189.174':445
'14.#3.9.29':445
'14.##.107.226':445
'14.##.180.189':445
'14.##.12.203':445
'14.##.199.250':139
'14.##.152.153':139
'14.##.113.22':139
'14.##.242.183':445
'14.##.140.242':445
'14.##.168.214':445
'14.##.247.58':445
'14.##.250.194':445
'14.#3.0.254':445
'14.##.39.183':445
'14.##.58.243':445
'14.#3.31.13':445
'14.##.215.31':445
'14.##.13.221':445
'14.##.191.143':445
'14.##.32.188':445
'14.##.185.53':445
'14.##.99.201':139
'14.#3.92.60':139
'14.#3.84.66':139
'14.##.199.123':445
'14.##.137.137':139
'14.#3.78.88':139
'14.##.151.217':139
'14.##.142.239':139
'14.#3.87.95':139
'14.##.21.205':139
'14.##.100.48':445
'14.##.194.252':445
'14.##.111.19':445
'14.#3.41.41':445
'14.##.211.124':445
'14.##.41.211':445
'14.#3.84.82':445
'14.##.139.39':445
'14.##.16.248':445
'14.##.55.194':445
'14.#3.21.65':445
'14.##.138.22':139
'14.##.37.138':139
'14.#3.81.34':139
'14.#3.22.74':139
'14.##.90.162':139
'14.##.17.248':139
'14.##.74.220':139
'14.##.30.212':139
'14.##.65.209':139
'14.##.202.16':139
'14.#3.18.28':139
'14.##.162.27':139
'14.##.121.236':139
'14.#3.191.8':139
'14.##.226.93':139
'14.##.89.114':139
'14.##.25.237':139
'14.##.125.121':139
'14.##.255.244':139
'14.##.178.50':139
'14.##.200.110':139
'14.##.232.131':139
'14.##.93.115':445
'14.#3.3.11':139
'14.##.111.170':445
'14.#3.63.43':445
'14.##.98.162':445
'14.##.24.145':139
'14.##.138.86':139
'14.##.65.100':139
'14.##.178.26':139
'14.#3.85.23':139
'14.#3.43.96':445
'14.##.200.28':445
'14.##.18.174':445
'14.#3.28.46':445
'14.##.74.184':445
'14.#3.81.42':445
'14.##.63.117':445
'14.#3.95.64':445
'14.##.104.139':445
'14.##.123.176':445
'14.#3.10.42':445
'14.##.68.218':139
'14.##.178.26':445
'14.#3.85.23':445
'14.#3.3.11':445
'14.##.100.48':139
'14.##.199.123':139
'14.##.68.218':445
'14.##.124.68':445
'14.##.138.86':445
'14.##.65.100':445
'14.##.24.145':445
'14.##.139.39':139
'14.#3.41.41':139
'14.##.194.252':139
'14.##.41.211':139
'14.##.124.68':139
'14.##.211.124':139
'14.##.16.248':139
'14.#3.84.82':139
'14.#3.21.65':139
'14.##.111.19':139
'14.##.55.194':139
'14.##.95.205':445
'14.##.100.155':445
'14.##.155.12':445
'14.#3.64.82':445
'14.##.103.124':445
'14.##.179.70':445
'14.##.137.162':445
'14.#3.42.83':445
'14.##.75.204':445
'14.##.96.141':445
'14.##.205.241':445
'14.##.75.129':445
'14.##.177.16':139
'14.##.51.175':139
'14.##.170.210':139
'14.#3.66.11':139
'14.##.210.63':139
'14.##.167.158':445
'14.##.13.170':445
'14.##.93.139':139
'14.#3.40.51':139
'14.#3.43.40':139
'14.##.62.110':445
'14.##.112.229':445
'14.#3.58.7':445
'14.##.14.209':445
'14.#3.14.51':445
'14.##.29.102':445
'14.##.116.41':445
'14.##.177.76':445
'14.##.137.151':445
'14.##.14.254':445
'14.##.85.243':445
'14.##.56.238':445
'14.##.80.161':445
'14.##.168.80':445
'14.##.160.215':445
'14.##.40.112':445
'14.##.145.145':445
'14.##.231.36':445
'14.##.238.205':445
'14.##.15.245':445
'14.##.126.34':445
'14.##.152.129':445
'14.##.40.112':139
'14.##.145.145':139
'14.##.62.110':139
'14.##.137.162':139
'14.#3.42.83':139
'14.##.126.34':139
'14.##.152.129':139
'14.##.168.80':139
'14.##.160.215':139
'14.##.80.161':139
'14.##.75.204':139
'14.##.13.170':139
'14.##.103.124':139
'14.##.75.129':139
'14.##.179.70':139
'14.##.167.158':139
'14.##.96.141':139
'14.##.205.241':139
'14.##.155.12':139
'14.#3.64.82':139
'14.##.100.155':139
'14.##.15.245':139
'14.#3.92.92':139
'14.#3.7.54':139
'14.##.91.221':139
'14.##.116.41':139
'14.##.177.76':139
'14.##.119.185':139
'14.##.40.176':139
'14.#3.38.66':139
'14.##.97.149':139
'14.##.109.22':139
'14.##.137.151':139
'14.#3.14.51':139
'14.##.14.209':139
'14.##.56.238':139
'14.##.231.36':139
'14.##.238.205':139
'14.##.14.254':139
'14.##.85.243':139
'14.#3.58.7':139
'14.##.29.102':139
'14.##.112.229':139
'14.##.91.221':445
'14.##.217.28':445
'14.#3.62.1':445
'14.##.66.182':445
'14.#3.49.69':139
'14.##.95.205':139
'14.##.64.247':445
'14.##.166.194':445
'14.##.216.70':445
'14.##.125.129':445
'14.##.66.243':445
'14.##.164.115':139
'14.#3.27.18':139
'14.##.79.209':139
'14.##.18.183':139
'14.##.239.195':139
'14.##.28.210':139
'14.##.135.54':139
'14.##.115.172':139
'14.##.80.119':139
'14.##.106.151':139
'14.#3.79.75':139
'14.##.233.57':445
'14.##.106.151':445
'14.#3.79.75':445
'14.##.79.209':445
'14.##.18.183':445
'14.#3.27.18':445
'14.##.164.115':445
'14.#3.49.69':445
'14.##.115.172':445
'14.##.80.119':445
'14.##.135.54':445
'14.##.28.210':445
'14.##.50.205':445
'14.##.117.85':445
'14.#3.9.16':445
'14.##.202.142':445
'14.##.13.187':445
'14.#3.9.189':445
'14.##.239.195':445
'14.#3.34.66':445
'14.##.182.202':445
'14.##.96.183':445
'14.##.93.139':445
'14.##.103.124':9988
'14.#3.43.40':445
'14.##.51.175':445
'14.#3.40.51':445
'14.##.205.241':9988
'14.##.75.204':9988
'14.#3.64.82':9988
'14.##.75.129':9988
'14.##.13.170':9988
'14.##.177.16':445
'14.##.109.22':445
'14.#3.38.66':445
'14.##.97.149':445
'14.#3.92.92':445
'14.#3.7.54':445
'14.##.210.63':445
'14.##.170.210':445
'14.#3.66.11':445
'14.##.119.185':445
'14.##.40.176':445
'14.##.40.112':9988
'14.#3.9.16':139
'14.##.50.205':139
'14.##.13.187':139
'14.##.233.57':139
'14.##.202.142':139
'14.#3.34.66':139
'14.#3.9.189':139
'14.##.96.183':139
'14.##.117.85':139
'14.##.182.202':139
'14.##.166.194':139
'14.##.66.182':139
'14.##.217.28':139
'14.##.168.80':9988
'14.##.160.215':9988
'14.##.80.161':9988
'14.##.216.70':139
'14.##.64.247':139
'14.##.66.243':139
'14.#3.62.1':139
'14.##.125.129':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней