Trojan.Starman.5467

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2c82.dir00\svchost.exe.mdmp 16325836412032368

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2c82.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##3.40.171':139
'62.##3.79.97':139
'62.##3.176.181':139
'62.##3.177.233':139
'62.##3.190.178':139
'62.##3.248.200':139
'62.##3.47.15':139
'62.##3.46.34':139
'62.##3.22.68':139
'62.##3.197.100':139
'62.#63.6.74':139
'62.##3.79.137':139
'62.##3.235.223':139
'62.#63.0.81':139
'62.##3.179.46':139
'62.##3.168.3':139
'62.##3.136.30':139
'62.##3.101.92':139
'62.##3.51.242':139
'62.##3.61.225':139
'62.##3.109.98':139
'62.##3.74.87':139
'62.##3.101.92':445
'62.#63.6.74':445
'62.##3.136.30':445
'62.##3.109.98':445
'62.##3.51.242':445
'62.##3.40.171':445
'62.##3.79.97':445
'62.##3.176.181':445
'62.##3.177.233':445
'62.##3.190.178':445
'62.##3.61.225':445
'62.##3.82.188':139
'62.##3.157.10':139
'62.##3.184.43':139
'62.##3.63.60':139
'62.##3.42.230':139
'62.##3.79.137':445
'62.##3.235.223':445
'62.#63.0.81':445
'62.##3.179.46':445
'62.##3.168.3':445
'62.##3.132.241':139
'62.##3.100.132':139
'62.##3.176.41':139
'62.##3.178.111':139
'62.##3.153.86':139
'62.##3.28.210':445
'62.#63.4.29':445
'62.##3.50.72':139
'62.##3.14.173':139
'62.##3.42.180':139
'62.##3.51.83':139
'62.##3.64.136':139
'62.##3.26.36':139
'62.##3.56.189':139
'62.##3.172.4':139
'62.##3.110.57':139
'62.##3.162.173':139
'62.##3.28.168':139
'62.##3.175.174':139
'62.##3.96.252':139
'62.##3.147.110':139
'62.##3.156.18':445
'62.##3.153.86':445
'62.##3.176.41':445
'62.##3.178.111':445
'62.##3.28.168':445
'62.##3.51.83':445
'62.##3.42.180':445
'62.##3.50.72':445
'62.##3.14.173':445
'62.##3.132.241':445
'62.##3.100.132':445
'62.##3.162.173':445
'62.##3.110.57':445
'62.##3.56.189':445
'62.##3.172.4':445
'62.##3.84.219':445
'62.##3.4.210':445
'62.##3.147.110':445
'62.##3.175.174':445
'62.##3.96.252':445
'62.##3.64.136':445
'62.##3.26.36':445
'62.#63.82.7':445
'62.##3.175.210':445
'62.##3.243.123':445
'62.##3.31.186':445
'62.##3.75.164':445
'62.##3.191.30':139
'62.##3.55.16':139
'62.##3.60.87':139
'62.##3.166.251':139
'62.##3.75.176':139
'62.##3.163.97':445
'62.##3.57.117':445
'62.##3.88.57':445
'62.##3.141.33':445
'62.##3.54.254':445
'62.##3.162.54':445
'62.#63.5.98':445
'62.##3.155.128':445
'62.##3.205.166':445
'62.##3.98.220':445
'62.#63.70.4':445
'62.##3.23.70':139
'62.##3.6.125':139
'62.##3.245.190':139
'62.##3.121.44':139
'62.#63.61.6':139
'62.##3.67.177':139
'62.##3.104.211':139
'62.##3.72.160':139
'62.##3.38.239':139
'62.##3.43.28':139
'62.##3.89.58':139
'62.##3.194.41':139
'62.##3.146.240':139
'62.##3.174.147':139
'62.##3.37.18':139
'62.##3.53.11':139
'62.##3.164.213':139
'62.##3.31.183':139
'62.##3.41.156':139
'62.##3.197.131':139
'62.##3.31.174':139
'62.##3.9.129':139
'62.##3.8.114':139
'62.##3.233.8':139
'62.##3.114.169':139
'62.##3.167.118':139
'62.##3.39.216':139
'62.##3.54.254':139
'62.##3.162.54':139
'62.##3.108.146':139
'62.#63.60.3':139
'62.##3.95.36':139
'62.##3.157.10':445
'62.##3.248.200':445
'62.##3.47.15':445
'62.##3.46.34':445
'62.##3.22.68':445
'62.##3.197.100':445
'62.##3.184.43':445
'62.##3.82.188':445
'62.##3.42.230':445
'62.##3.74.87':445
'62.##3.63.60':445
'62.##3.141.33':139
'62.##3.39.216':445
'62.##3.114.169':445
'62.##3.167.118':445
'62.#63.82.7':139
'62.##3.175.210':139
'62.##3.95.36':445
'62.##3.108.146':445
'62.#63.60.3':445
'62.##3.8.114':445
'62.##3.233.8':445
'62.##3.243.123':139
'62.#63.70.4':139
'62.##3.205.166':139
'62.##3.98.220':139
'62.##3.57.117':139
'62.##3.88.57':139
'62.##3.31.186':139
'62.##3.75.164':139
'62.##3.163.97':139
'62.#63.5.98':139
'62.##3.155.128':139
'62.##3.4.210':139
'62.##3.129.9':445
'62.##3.23.98':445
'62.##3.66.89':445
'62.##3.146.196':445
'62.##3.159.146':445
'62.##3.165.243':445
'62.##3.25.219':445
'62.##3.70.239':445
'62.##3.233.53':445
'62.##3.222.33':445
'62.##3.40.56':445
'62.##3.247.71':139
'62.##3.193.247':139
'62.##3.71.110':139
'62.##3.77.95':139
'62.##3.114.130':139
'62.##3.13.161':445
'62.##3.71.48':445
'62.##3.14.160':139
'62.##3.155.44':139
'62.##3.212.173':139
'62.##3.205.189':445
'62.##3.250.34':445
'62.##3.51.236':445
'62.##3.161.138':445
'62.##3.246.66':445
'62.##3.112.225':445
'62.##3.81.51':445
'62.##3.145.73':445
'62.#63.97.9':445
'62.##3.165.52':445
'62.##3.212.85':445
'62.##3.66.222':445
'62.##3.216.164':445
'62.##3.42.216':445
'62.##3.199.74':445
'62.##3.119.111':445
'62.##3.179.135':445
'62.##3.213.216':445
'62.##3.191.91':445
'62.##3.203.245':445
'62.##3.28.125':445
'62.##3.48.41':445
'62.##3.119.111':139
'62.##3.179.135':139
'62.##3.205.189':139
'62.##3.165.243':139
'62.##3.25.219':139
'62.##3.28.125':139
'62.##3.48.41':139
'62.##3.42.216':139
'62.##3.199.74':139
'62.##3.216.164':139
'62.##3.70.239':139
'62.##3.146.196':139
'62.##3.159.146':139
'62.##3.40.56':139
'62.##3.13.161':139
'62.##3.71.48':139
'62.##3.233.53':139
'62.##3.222.33':139
'62.##3.23.98':139
'62.##3.66.89':139
'62.##3.129.9':139
'62.##3.203.245':139
'62.##3.19.53':139
'62.##3.121.17':139
'62.##3.146.146':139
'62.##3.81.51':139
'62.##3.145.73':139
'62.##3.53.80':139
'62.##3.200.179':139
'62.##3.66.131':139
'62.##3.59.191':139
'62.##3.23.139':139
'62.#63.97.9':139
'62.##3.246.66':139
'62.##3.112.225':139
'62.##3.66.222':139
'62.##3.213.216':139
'62.##3.191.91':139
'62.##3.165.52':139
'62.##3.212.85':139
'62.##3.51.236':139
'62.##3.161.138':139
'62.##3.250.34':139
'62.##3.201.199':445
'62.##3.247.251':445
'62.##3.104.47':445
'62.##3.27.24':139
'62.##3.231.177':445
'62.##3.65.227':445
'62.##3.108.244':445
'62.##3.81.91':445
'62.##3.98.92':445
'62.##3.73.81':445
'62.##3.12.139':139
'62.##3.217.231':139
'62.#63.6.38':139
'62.##3.151.198':139
'62.##3.228.164':139
'62.##3.97.59':139
'62.##3.46.243':139
'62.##3.39.225':139
'62.##3.99.236':139
'62.#63.52.6':139
'62.##3.254.82':139
'62.##3.160.45':445
'62.##3.39.225':445
'62.##3.12.139':445
'62.##3.46.243':445
'62.##3.254.82':445
'62.##3.99.236':445
'62.##3.156.18':139
'62.##3.84.219':139
'62.#63.4.29':139
'62.##3.27.24':445
'62.##3.28.210':139
'62.#63.52.6':445
'62.##3.111.86':445
'62.##3.26.111':445
'62.#63.6.30':445
'62.##3.231.160':445
'62.#63.1.41':445
'62.##3.217.231':445
'62.#63.6.38':445
'62.##3.151.198':445
'62.##3.228.164':445
'62.##3.97.59':445
'62.##3.212.173':445
'62.##3.14.160':445
'62.##3.155.44':445
'62.##3.247.71':445
'62.##3.193.247':445
'62.##3.13.161':9988
'62.##3.129.9':9988
'62.##3.40.56':9988
'62.##3.146.196':9988
'62.##3.71.48':9988
'62.##3.71.110':445
'62.##3.59.191':445
'62.##3.23.139':445
'62.##3.121.17':445
'62.##3.146.146':445
'62.##3.19.53':445
'62.##3.77.95':445
'62.##3.114.130':445
'62.##3.200.179':445
'62.##3.66.131':445
'62.##3.53.80':445
'62.##3.233.53':9988
'62.##3.108.244':139
'62.##3.160.45':139
'62.##3.65.227':139
'62.##3.73.81':139
'62.##3.81.91':139
'62.##3.111.86':139
'62.##3.26.111':139
'62.#63.6.30':139
'62.##3.231.160':139
'62.#63.1.41':139
'62.##3.98.92':139
'62.##3.28.125':9988
'62.##3.246.66':9988
'62.##3.216.164':9988
'62.##3.222.33':9988
'62.##3.70.239':9988
'62.##3.201.199':139
'62.##3.247.251':139
'62.##3.104.47':139
'62.##3.165.52':9988
'62.##3.231.177':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней