Trojan.Starman.5465

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER9dad.dir00\svchost.exe.mdmp 16325836412032492

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##5.102.88':445
'65.##5.92.210':445
'65.##5.228.139':445
'65.##5.78.83':445
'65.##5.21.105':445
'65.##5.150.200':445
'65.##5.191.185':445
'65.##5.195.1':445
'65.#55.22.6':445
'65.##5.9.170':445
'65.##5.247.1':445
'65.##5.185.246':445
'65.##5.93.55':445
'65.##5.182.5':139
'65.##5.40.190':139
'65.##5.164.154':139
'65.##5.205.59':139
'65.##5.99.101':139
'65.##5.5.100':139
'65.##5.2.167':139
'65.##5.251.96':139
'65.##5.22.111':139
'65.##5.53.146':139
'65.##5.54.44':139
'65.##5.2.140':139
'65.##5.16.165':445
'65.##5.151.63':445
'65.##5.154.90':445
'65.##5.114.179':445
'65.##5.57.70':445
'65.##5.190.48':445
'65.##5.43.82':445
'65.##5.113.47':445
'65.##5.55.179':445
'65.##5.56.103':445
'65.##5.205.156':445
'65.##5.12.126':445
'65.##5.134.239':445
'65.##5.70.45':445
'65.##5.79.98':445
'65.##5.76.82':445
'65.##5.45.217':445
'65.##5.176.181':445
'65.##5.118.31':445
'65.##5.3.252':445
'65.##5.118.5':445
'65.##5.217.118':445
'65.##5.38.39':445
'65.##5.159.225':445
'65.##5.119.231':445
'65.##5.190.68':445
'65.##5.102.88':139
'65.##5.92.210':139
'65.##5.228.139':139
'65.##5.78.83':139
'65.##5.21.105':139
'65.##5.150.200':139
'65.##5.191.185':139
'65.##5.195.1':139
'65.#55.22.6':139
'65.##5.9.170':139
'65.##5.247.1':139
'65.##5.185.246':139
'65.##5.93.55':139
'65.##5.61.139':445
'65.##5.82.106':445
'65.##5.58.53':445
'65.##5.75.21':445
'65.##5.66.152':445
'65.##5.134.228':445
'65.##5.89.188':445
'65.##5.21.187':445
'65.##5.216.240':445
'65.##5.222.162':445
'65.##5.76.222':445
'65.##5.22.242':445
'65.##5.16.165':139
'65.##5.151.63':139
'65.##5.154.90':139
'65.##5.114.179':139
'65.##5.57.70':139
'65.##5.190.48':139
'65.##5.43.82':139
'65.##5.113.47':139
'65.##5.55.179':139
'65.##5.56.103':139
'65.##5.205.156':139
'65.##5.12.126':139
'65.##5.134.239':139
'65.##5.70.45':139
'65.##5.79.98':139
'65.##5.76.82':139
'65.##5.45.217':139
'65.##5.176.181':139
'65.##5.118.31':139
'65.##5.3.252':139
'65.##5.118.5':139
'65.##5.217.118':139
'65.##5.38.39':139
'65.##5.159.225':139
'65.##5.119.231':139
'65.##5.190.68':139
'65.##5.54.202':445
'65.##5.133.234':445
'65.##5.34.194':445
'65.##5.168.67':445
'65.##5.254.231':445
'65.##5.68.150':445
'65.##5.138.148':445
'65.##5.18.121':445
'65.##5.115.102':445
'65.#55.3.2':445
'65.##5.140.58':445
'65.#55.73.0':445
'65.##5.151.119':445
'65.##5.101.43':139
'65.##5.95.86':139
'65.##5.125.147':139
'65.##5.118.113':139
'65.##5.72.96':139
'65.##5.137.201':139
'65.##5.20.182':139
'65.##5.75.128':139
'65.##5.116.75':139
'65.##5.18.233':139
'65.##5.193.12':139
'65.##5.4.109':139
'65.##5.73.214':445
'65.##5.226.171':445
'65.##5.173.69':445
'65.#55.38.8':445
'65.##5.53.203':445
'65.##5.103.246':445
'65.##5.91.104':445
'65.#55.87.8':445
'65.##5.147.221':445
'65.##5.235.130':445
'65.##5.89.210':445
'65.##5.146.101':445
'65.##5.212.42':445
'65.##5.230.80':445
'65.##5.245.106':445
'65.#55.5.45':445
'65.##5.196.65':445
'65.##5.52.154':445
'65.##5.104.144':445
'65.##5.145.45':445
'65.##5.147.131':445
'65.##5.186.226':445
'65.##5.167.238':445
'65.##5.94.142':445
'65.##5.6.130':445
'65.##5.19.195':445
'65.##5.54.202':139
'65.##5.133.234':139
'65.##5.34.194':139
'65.##5.168.67':139
'65.##5.254.231':139
'65.##5.68.150':139
'65.##5.138.148':139
'65.##5.18.121':139
'65.##5.115.102':139
'65.#55.3.2':139
'65.##5.140.58':139
'65.#55.73.0':139
'65.##5.151.119':139
'65.##5.182.5':445
'65.##5.40.190':445
'65.##5.164.154':445
'65.##5.205.59':445
'65.##5.99.101':445
'65.##5.5.100':445
'65.##5.2.167':445
'65.##5.251.96':445
'65.##5.22.111':445
'65.##5.53.146':445
'65.##5.54.44':445
'65.##5.2.140':445
'65.##5.73.214':139
'65.##5.226.171':139
'65.##5.173.69':139
'65.#55.38.8':139
'65.##5.53.203':139
'65.##5.103.246':139
'65.##5.91.104':139
'65.#55.87.8':139
'65.##5.147.221':139
'65.##5.235.130':139
'65.##5.89.210':139
'65.##5.146.101':139
'65.##5.212.42':139
'65.##5.230.80':139
'65.##5.245.106':139
'65.#55.5.45':139
'65.##5.196.65':139
'65.##5.52.154':139
'65.##5.104.144':139
'65.##5.145.45':139
'65.##5.147.131':139
'65.##5.186.226':139
'65.##5.167.238':139
'65.##5.94.142':139
'65.##5.6.130':139
'65.##5.19.195':139
'65.##5.182.25':445
'65.##5.170.182':445
'65.##5.45.202':445
'65.##5.43.217':445
'65.##5.61.242':445
'65.##5.42.122':445
'65.##5.90.24':445
'65.##5.234.82':445
'65.##5.103.85':445
'65.##5.38.206':445
'65.##5.152.39':445
'65.##5.28.152':445
'65.##5.200.24':445
'65.##5.11.206':445
'65.##5.136.191':445
'65.##5.205.179':445
'65.##5.201.118':445
'65.##5.101.243':445
'65.##5.73.152':445
'65.##5.180.39':445
'65.##5.245.104':445
'65.##5.247.135':445
'65.##5.125.138':445
'65.##5.168.218':445
'65.##5.179.239':445
'65.##5.148.96':445
'65.##5.255.74':445
'65.##5.81.186':445
'65.#55.2.42':445
'65.##5.17.162':445
'65.##5.248.224':445
'65.##5.58.157':445
'65.#55.6.68':445
'65.##5.192.231':445
'65.##5.113.74':445
'65.##5.2.215':445
'65.##5.174.2':445
'65.##5.151.248':445
'65.##5.111.146':445
'65.##5.204.237':445
'65.##5.215.3':445
'65.##5.25.72':445
'65.##5.40.67':445
'65.##5.133.23':445
'65.##5.80.201':445
'65.##5.63.140':445
'65.##5.37.56':445
'65.#55.9.53':445
'65.##5.212.102':445
'65.##5.8.213':445
'65.##5.100.168':445
'65.##5.182.25':139
'65.##5.170.182':139
'65.##5.45.202':139
'65.##5.247.135':139
'65.##5.61.242':139
'65.##5.42.122':139
'65.##5.90.24':139
'65.##5.234.82':139
'65.##5.103.85':139
'65.##5.38.206':139
'65.##5.152.39':139
'65.##5.28.152':139
'65.##5.43.217':139
'65.##5.136.191':139
'65.##5.101.243':139
'65.##5.125.138':139
'65.##5.73.152':139
'65.##5.201.118':139
'65.##5.245.104':139
'65.##5.205.179':139
'65.##5.168.218':139
'65.##5.200.24':139
'65.##5.180.39':139
'65.##5.179.239':139
'65.##5.11.206':139
'65.##5.148.96':139
'65.##5.255.74':139
'65.##5.81.186':139
'65.#55.2.42':139
'65.##5.17.162':139
'65.##5.248.224':139
'65.##5.58.157':139
'65.#55.6.68':139
'65.##5.192.231':139
'65.##5.113.74':139
'65.##5.2.215':139
'65.##5.174.2':139
'65.##5.151.248':139
'65.##5.111.146':139
'65.##5.204.237':139
'65.##5.215.3':139
'65.##5.25.72':139
'65.##5.40.67':139
'65.##5.133.23':139
'65.##5.80.201':139
'65.##5.63.140':139
'65.##5.37.56':139
'65.#55.9.53':139
'65.##5.212.102':139
'65.##5.8.213':139
'65.##5.100.168':139
'65.##5.127.120':445
'65.##5.170.131':445
'65.##5.76.170':445
'65.#55.5.2':445
'65.##5.233.17':445
'65.##5.100.131':445
'65.##5.17.77':445
'65.##5.198.50':445
'65.##5.57.146':445
'65.##5.98.76':445
'65.#55.3.72':445
'65.##5.57.251':445
'65.##5.53.107':445
'65.##5.61.139':139
'65.##5.82.106':139
'65.##5.58.53':139
'65.##5.75.21':139
'65.##5.66.152':139
'65.##5.134.228':139
'65.##5.89.188':139
'65.##5.21.187':139
'65.##5.216.240':139
'65.##5.222.162':139
'65.##5.76.222':139
'65.##5.22.242':139
'65.##5.204.26':445
'65.##5.73.110':445
'65.##5.11.174':445
'65.##5.174.68':445
'65.##5.12.170':445
'65.##5.204.138':445
'65.##5.49.160':445
'65.##5.12.188':445
'65.##5.84.242':445
'65.##5.73.180':445
'65.##5.48.137':445
'65.##5.178.29':445
'65.##5.22.51':445
'65.##5.45.121':445
'65.##5.172.78':445
'65.##5.60.177':445
'65.##5.73.200':445
'65.##5.10.209':445
'65.##5.206.154':445
'65.##5.122.86':445
'65.##5.151.146':445
'65.##5.182.144':445
'65.##5.30.102':445
'65.#55.70.7':445
'65.##5.253.30':445
'65.##5.191.128':445
'65.##5.127.120':139
'65.##5.170.131':139
'65.##5.76.170':139
'65.#55.5.2':139
'65.##5.233.17':139
'65.##5.100.131':139
'65.##5.17.77':139
'65.##5.198.50':139
'65.##5.57.146':139
'65.##5.98.76':139
'65.#55.3.72':139
'65.##5.57.251':139
'65.##5.53.107':139
'65.##5.170.182':9988
'65.##5.45.202':9988
'65.##5.38.206':9988
'65.##5.101.243':9988
'65.##5.200.24':9988
'65.##5.182.25':9988
'65.##5.103.85':9988
'65.##5.148.96':9988
'65.##5.63.140':9988
'65.##5.152.39':9988
'65.##5.28.152':9988
'65.##5.90.24':9988
'65.##5.204.26':139
'65.##5.73.110':139
'65.##5.11.174':139
'65.##5.174.68':139
'65.##5.12.170':139
'65.##5.204.138':139
'65.##5.49.160':139
'65.##5.12.188':139
'65.##5.84.242':139
'65.##5.73.180':139
'65.##5.48.137':139
'65.##5.178.29':139
'65.##5.22.51':139
'65.##5.45.121':139
'65.##5.172.78':139
'65.##5.60.177':139
'65.##5.73.200':139
'65.##5.10.209':139
'65.##5.206.154':139
'65.##5.122.86':139
'65.##5.151.146':139
'65.##5.182.144':139
'65.##5.30.102':139
'65.#55.70.7':139
'65.##5.253.30':139
'65.##5.191.128':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней