Trojan.Starman.5740

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3722.dir00\svchost.exe.mdmp 16325836412032184

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3722.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'12.##.175.237':139
'12.##.80.199':139
'12.##.199.211':139
'12.#9.37.60':139
'12.##.248.58':139
'12.##.37.153':139
'12.##.162.21':139
'12.##.230.196':139
'12.#9.40.30':139
'12.##.59.144':139
'12.##.172.187':139
'12.##.184.119':139
'12.##.109.253':139
'12.##.121.29':139
'12.##.246.97':139
'12.##.113.163':139
'12.##.53.224':139
'12.##.115.54':139
'12.##.58.196':139
'12.##.24.155':139
'12.##.168.77':139
'12.#9.50.19':139
'12.##.184.119':445
'12.##.109.253':445
'12.##.121.29':445
'12.##.246.97':445
'12.##.113.163':445
'12.##.53.224':445
'12.##.115.54':445
'12.##.58.196':445
'12.##.24.155':445
'12.##.168.77':445
'12.##.211.209':445
'12.#9.241.9':139
'12.#9.62.52':139
'12.##.88.142':139
'12.##.92.189':139
'12.##.72.203':139
'12.##.196.67':445
'12.##.60.173':445
'12.##.231.109':445
'12.##.18.120':139
'12.#9.4.61':445
'12.##.211.209':139
'12.##.195.167':139
'12.##.84.172':139
'12.##.168.43':139
'12.##.150.52':139
'12.##.101.84':139
'12.##.138.72':139
'12.#9.44.28':139
'12.#9.5.12':139
'12.##.120.120':139
'12.##.247.114':139
'12.##.109.235':139
'12.##.57.200':139
'12.##.46.222':139
'12.#9.12.15':445
'12.##.152.193':445
'12.#9.39.18':445
'12.#9.27.35':139
'12.#9.2.47':139
'12.##.185.217':139
'12.#9.246.8':139
'12.##.90.252':139
'12.##.57.200':445
'12.#9.5.12':445
'12.##.138.72':445
'12.##.247.114':445
'12.##.84.172':445
'12.##.120.120':445
'12.##.196.67':139
'12.##.60.173':139
'12.##.231.109':139
'12.#9.44.28':445
'12.#9.4.61':139
'12.##.195.167':445
'12.##.185.217':445
'12.#9.27.35':445
'12.##.90.252':445
'12.##.46.222':445
'12.#9.246.8':445
'12.##.101.84':445
'12.##.168.43':445
'12.##.150.52':445
'12.#9.2.47':445
'12.##.109.235':445
'12.##.172.154':139
'12.##.252.123':139
'12.##.246.137':139
'12.##.62.127':139
'12.##.176.170':139
'12.##.156.158':139
'12.##.115.97':139
'12.##.110.69':139
'12.##.66.227':139
'12.##.246.144':139
'12.##.128.53':139
'12.#9.25.62':445
'12.##.156.88':445
'12.##.62.228':445
'12.##.215.17':445
'12.##.155.53':445
'12.##.136.64':445
'12.##.53.136':445
'12.##.63.235':445
'12.##.97.224':445
'12.##.142.200':445
'12.##.112.46':139
'12.##.158.192':139
'12.#9.5.85':139
'12.##.192.77':139
'12.##.211.104':139
'12.##.253.130':139
'12.##.232.215':139
'12.##.35.233':139
'12.##.151.194':139
'12.##.176.39':139
'12.#9.57.65':139
'12.##.140.16':139
'12.##.216.34':139
'12.##.68.130':139
'12.##.156.77':139
'12.##.188.111':139
'12.##.77.188':139
'12.#9.28.58':139
'12.#9.27.14':139
'12.##.205.78':139
'12.##.125.42':139
'12.##.87.190':139
'12.##.103.52':445
'12.##.88.142':445
'12.#9.241.9':445
'12.##.72.203':445
'12.#9.50.19':445
'12.##.92.189':445
'12.#9.98.28':139
'12.#9.67.98':139
'12.##.28.111':139
'12.#9.62.52':445
'12.##.18.120':445
'12.##.162.21':445
'12.##.199.211':445
'12.##.175.237':445
'12.##.248.58':445
'12.##.172.187':445
'12.#9.37.60':445
'12.##.230.196':445
'12.##.37.153':445
'12.##.59.144':445
'12.##.80.199':445
'12.#9.40.30':445
'12.##.141.167':139
'12.##.28.111':445
'12.#9.98.28':445
'12.##.53.136':139
'12.##.63.235':139
'12.##.136.64':139
'12.##.223.127':445
'12.#9.6.177':445
'12.##.157.81':445
'12.#9.67.98':445
'12.##.141.167':445
'12.##.142.200':139
'12.##.103.52':139
'12.##.215.17':139
'12.#9.6.177':139
'12.##.157.81':139
'12.##.223.127':139
'12.##.156.88':139
'12.##.97.224':139
'12.#9.25.62':139
'12.##.155.53':139
'12.##.62.228':139
'12.##.111.223':445
'12.##.22.114':445
'12.#9.89.76':445
'12.##.114.113':445
'12.##.43.121':445
'12.##.151.91':445
'12.##.178.137':445
'12.##.138.133':445
'12.##.226.33':445
'12.##.248.61':445
'12.##.113.65':445
'12.##.182.250':139
'12.##.180.182':139
'12.##.75.199':139
'12.##.65.112':139
'12.##.173.138':139
'12.#9.42.63':445
'12.##.55.174':445
'12.##.70.113':445
'12.##.190.180':139
'12.##.146.94':139
'12.#9.11.35':445
'12.#9.35.95':445
'12.##.71.246':445
'12.#9.66.57':445
'12.##.102.222':445
'12.##.56.102':445
'12.##.41.148':445
'12.##.235.250':445
'12.##.187.74':445
'12.#9.56.81':445
'12.#9.99.72':445
'12.##.104.216':445
'12.##.243.253':445
'12.##.52.203':445
'12.##.236.246':445
'12.##.123.51':445
'12.##.246.187':445
'12.##.185.140':445
'12.##.225.108':445
'12.#9.40.24':445
'12.##.210.119':445
'12.##.22.226':445
'12.##.35.136':139
'12.#9.11.35':139
'12.##.123.51':139
'12.##.178.137':139
'12.##.138.133':139
'12.##.151.91':139
'12.##.52.203':139
'12.##.210.119':139
'12.##.243.253':139
'12.##.246.187':139
'12.##.236.246':139
'12.##.248.61':139
'12.##.113.65':139
'12.##.55.174':139
'12.##.70.113':139
'12.#9.42.63':139
'12.##.43.121':139
'12.##.22.114':139
'12.##.226.33':139
'12.##.111.223':139
'12.##.114.113':139
'12.#9.89.76':139
'12.##.22.226':139
'12.##.63.197':139
'12.##.114.96':139
'12.##.235.250':139
'12.##.187.74':139
'12.##.41.148':139
'12.#9.64.67':139
'12.##.73.146':139
'12.#9.23.67':139
'12.##.90.114':139
'12.##.187.127':139
'12.#9.56.81':139
'12.##.104.216':139
'12.##.102.222':139
'12.##.225.108':139
'12.#9.40.24':139
'12.##.185.140':139
'12.##.71.246':139
'12.#9.99.72':139
'12.#9.35.95':139
'12.##.56.102':139
'12.#9.66.57':139
'12.##.201.12':445
'12.#9.1.137':445
'12.##.48.216':445
'12.#9.39.18':139
'12.#9.12.15':139
'12.##.150.223':445
'12.##.159.15':445
'12.##.208.175':445
'12.##.153.167':445
'12.#9.28.22':445
'12.##.152.193':139
'12.#9.94.35':139
'12.##.21.210':139
'12.##.133.253':139
'12.#9.53.9':139
'12.##.59.142':139
'12.##.126.99':139
'12.##.152.238':139
'12.##.166.237':139
'12.##.44.189':139
'12.#9.98.48':139
'12.#9.6.144':445
'12.#9.94.35':445
'12.##.21.210':445
'12.##.133.253':445
'12.#9.53.9':445
'12.##.59.142':445
'12.##.126.99':445
'12.##.152.238':445
'12.##.166.237':445
'12.##.44.189':445
'12.#9.98.48':445
'12.##.225.152':445
'12.##.49.100':445
'12.##.190.142':445
'12.##.201.184':445
'12.##.16.241':445
'12.##.105.34':445
'12.##.173.202':445
'12.##.91.132':445
'12.##.102.146':445
'12.##.106.128':445
'12.##.166.129':445
'12.##.225.152':139
'12.##.146.94':445
'12.##.43.121':9988
'12.##.190.180':445
'12.##.182.250':445
'12.##.180.182':445
'12.##.151.91':9988
'12.##.123.51':9988
'12.##.226.33':9988
'12.#9.89.76':9988
'12.#9.42.63':9988
'12.##.75.199':445
'12.##.187.127':445
'12.#9.23.67':445
'12.##.90.114':445
'12.##.63.197':445
'12.##.114.96':445
'12.##.65.112':445
'12.##.173.138':445
'12.##.35.136':445
'12.#9.64.67':445
'12.##.73.146':445
'12.##.243.253':9988
'12.##.49.100':139
'12.##.190.142':139
'12.##.201.184':139
'12.##.16.241':139
'12.##.105.34':139
'12.##.173.202':139
'12.##.91.132':139
'12.##.102.146':139
'12.##.106.128':139
'12.##.166.129':139
'12.#9.6.144':139
'12.##.201.12':139
'12.#9.1.137':139
'12.##.48.216':139
'12.##.52.203':9988
'12.#9.40.24':9988
'12.##.150.223':139
'12.##.159.15':139
'12.##.208.175':139
'12.##.153.167':139
'12.#9.28.22':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней