Trojan.Starman.5751

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1d4b.dir00\svchost.exe.mdmp 16325836412032232

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1d4b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'81.##1.159.157':139
'81.##1.240.205':139
'81.##1.157.176':139
'81.##1.207.231':445
'81.##1.147.45':139
'81.##1.61.86':139
'81.##1.32.57':139
'81.##1.89.32':139
'81.##1.235.35':139
'81.##1.254.71':139
'81.##1.231.165':445
'81.##1.34.251':445
'81.##1.60.12':445
'81.##1.223.153':445
'81.##1.238.242':445
'81.##1.222.120':445
'81.##1.13.220':445
'81.##1.93.193':445
'81.##1.32.111':445
'81.#01.9.48':445
'81.##1.78.221':445
'81.##1.223.194':445
'81.##1.95.50':445
'81.##1.194.206':445
'81.##1.61.86':445
'81.##1.32.57':445
'81.##1.140.148':139
'81.##1.162.14':139
'81.##1.56.131':139
'81.##1.120.237':445
'81.##1.58.116':139
'81.##1.89.32':445
'81.##1.120.237':139
'81.##1.147.45':445
'81.##1.95.50':139
'81.##1.194.206':139
'81.##1.223.194':139
'81.##1.235.35':445
'81.##1.254.71':445
'81.##1.240.205':445
'81.##1.157.176':445
'81.##1.159.157':445
'81.##1.231.165':139
'81.##1.207.231':139
'81.##1.93.193':139
'81.##1.32.111':139
'81.##1.13.220':139
'81.##1.32.108':445
'81.##1.173.201':445
'81.##1.78.133':445
'81.##1.204.120':445
'81.##1.122.38':445
'81.##1.78.221':139
'81.##1.247.248':139
'81.##1.238.242':139
'81.##1.249.65':139
'81.##1.242.173':139
'81.##1.66.33':139
'81.##1.60.12':139
'81.#01.9.48':139
'81.##1.34.251':139
'81.##1.222.120':139
'81.##1.223.153':139
'81.##1.15.234':445
'81.##1.34.38':445
'81.##1.148.1':445
'81.##1.226.244':445
'81.##1.168.22':445
'81.##1.249.65':445
'81.##1.247.248':445
'81.##1.66.33':445
'81.##1.79.248':445
'81.##1.242.173':445
'81.##1.111.81':445
'81.##1.15.55':445
'81.##1.230.92':445
'81.##1.77.149':445
'81.##1.177.83':445
'81.##1.159.174':445
'81.##1.251.254':445
'81.##1.36.24':445
'81.##1.188.84':445
'81.##1.172.172':445
'81.##1.154.210':445
'81.##1.230.64':139
'81.##1.56.104':445
'81.##1.102.56':445
'81.##1.135.248':445
'81.#01.95.5':445
'81.##1.177.66':445
'81.##1.24.77':445
'81.##1.119.117':445
'81.##1.77.114':445
'81.##1.62.118':445
'81.##1.41.225':445
'81.##1.73.20':445
'81.#01.29.4':445
'81.##1.27.57':445
'81.##1.3.206':445
'81.##1.249.250':445
'81.##1.161.17':445
'81.##1.69.65':445
'81.##1.134.44':445
'81.##1.37.95':445
'81.##1.150.50':445
'81.##1.29.254':445
'81.##1.212.217':139
'81.##1.61.15':139
'81.##1.48.64':139
'81.##1.137.75':139
'81.##1.231.199':139
'81.##1.75.32':139
'81.##1.179.145':139
'81.##1.132.133':139
'81.##1.12.48':139
'81.##1.251.205':139
'81.##1.71.19':139
'81.##1.5.126':445
'81.##1.109.5':445
'81.##1.126.25':445
'81.##1.11.13':445
'81.##1.30.236':445
'81.##1.87.82':139
'81.##1.18.87':139
'81.##1.82.171':445
'81.##1.123.125':445
'81.##1.65.142':445
'81.##1.73.20':139
'81.#01.95.5':139
'81.##1.134.44':139
'81.##1.37.95':139
'81.##1.69.65':139
'81.##1.102.56':139
'81.##1.62.118':139
'81.##1.56.104':139
'81.##1.177.66':139
'81.##1.135.248':139
'81.##1.29.254':139
'81.##1.0.210':139
'81.##1.249.250':139
'81.##1.180.180':139
'81.##1.112.119':139
'81.##1.96.101':139
'81.##1.27.57':139
'81.##1.150.50':139
'81.#01.29.4':139
'81.##1.161.17':139
'81.##1.3.206':139
'81.##1.140.148':445
'81.##1.162.14':445
'81.##1.56.131':445
'81.##1.82.171':139
'81.##1.58.116':445
'81.##1.180.180':445
'81.##1.0.210':445
'81.##1.96.101':445
'81.##1.230.64':445
'81.##1.112.119':445
'81.##1.65.142':139
'81.##1.119.117':139
'81.##1.11.13':139
'81.##1.24.77':139
'81.##1.41.225':139
'81.##1.77.114':139
'81.##1.109.5':139
'81.##1.123.125':139
'81.##1.5.126':139
'81.##1.30.236':139
'81.##1.126.25':139
'81.##1.193.12':445
'81.##1.39.19':445
'81.##1.12.155':445
'81.##1.59.166':445
'81.##1.129.159':445
'81.##1.121.95':445
'81.##1.83.102':445
'81.#01.57.5':445
'81.##1.185.10':445
'81.##1.96.97':445
'81.##1.73.192':445
'81.##1.124.79':139
'81.##1.200.123':139
'81.##1.100.97':139
'81.##1.51.57':139
'81.##1.67.93':139
'81.##1.164.173':139
'81.##1.89.145':445
'81.##1.75.152':139
'81.##1.127.26':139
'81.##1.249.39':139
'81.##1.80.68':445
'81.##1.148.81':445
'81.##1.18.156':445
'81.##1.176.177':445
'81.##1.42.179':445
'81.##1.53.159':445
'81.##1.68.184':445
'81.##1.218.248':445
'81.##1.239.52':445
'81.##1.248.221':445
'81.##1.177.190':445
'81.##1.183.239':445
'81.##1.75.141':445
'81.##1.77.173':445
'81.##1.70.92':445
'81.##1.59.232':445
'81.##1.176.199':445
'81.#01.75.1':445
'81.##1.3.211':445
'81.##1.56.156':445
'81.##1.173.68':445
'81.##1.77.173':139
'81.##1.183.239':139
'81.##1.59.232':139
'81.##1.83.102':139
'81.##1.70.92':139
'81.##1.3.211':139
'81.##1.176.199':139
'81.##1.173.68':139
'81.##1.75.141':139
'81.##1.56.156':139
'81.##1.121.95':139
'81.##1.129.159':139
'81.##1.12.155':139
'81.##1.59.166':139
'81.##1.89.145':139
'81.##1.73.192':139
'81.##1.96.97':139
'81.#01.57.5':139
'81.##1.185.10':139
'81.##1.193.12':139
'81.##1.39.19':139
'81.##1.23.95':139
'81.##1.98.112':139
'81.##1.102.32':139
'81.##1.68.184':139
'81.##1.32.69':139
'81.##1.15.15':139
'81.##1.42.94':139
'81.##1.33.128':139
'81.##1.52.29':139
'81.##1.217.205':139
'81.##1.53.159':139
'81.##1.42.179':139
'81.##1.18.156':139
'81.##1.176.177':139
'81.#01.75.1':139
'81.##1.177.190':139
'81.##1.248.221':139
'81.##1.218.248':139
'81.##1.239.52':139
'81.##1.80.68':139
'81.##1.148.81':139
'81.##1.32.69':445
'81.##1.132.168':445
'81.##1.194.132':445
'81.##1.156.2':445
'81.##1.122.140':445
'81.##1.196.34':445
'81.##1.120.175':445
'81.##1.204.120':139
'81.##1.175.151':445
'81.##1.248.194':445
'81.##1.150.248':445
'81.##1.61.128':445
'81.##1.248.194':139
'81.##1.150.248':139
'81.##1.194.132':139
'81.##1.156.2':139
'81.##1.132.168':139
'81.##1.19.84':445
'81.##1.125.166':445
'81.##1.39.227':445
'81.##1.175.151':139
'81.##1.120.175':139
'81.##1.111.81':139
'81.##1.226.244':139
'81.##1.36.24':139
'81.##1.188.84':139
'81.##1.251.254':139
'81.##1.34.38':139
'81.##1.79.248':139
'81.##1.15.234':139
'81.##1.168.22':139
'81.##1.148.1':139
'81.##1.154.210':139
'81.##1.173.201':139
'81.##1.177.83':139
'81.##1.32.108':139
'81.##1.122.38':139
'81.##1.78.133':139
'81.##1.230.92':139
'81.##1.172.172':139
'81.##1.15.55':139
'81.##1.159.174':139
'81.##1.77.149':139
'81.##1.249.39':445
'81.##1.75.152':445
'81.##1.127.26':445
'81.##1.124.79':445
'81.##1.200.123':445
'81.##1.59.166':9988
'81.##1.129.159':9988
'81.##1.89.145':9988
'81.##1.164.173':445
'81.##1.12.155':9988
'81.##1.100.97':445
'81.##1.52.29':445
'81.##1.217.205':445
'81.##1.98.112':445
'81.##1.102.32':445
'81.##1.23.95':445
'81.##1.51.57':445
'81.##1.67.93':445
'81.##1.42.94':445
'81.##1.33.128':445
'81.##1.15.15':445
'81.##1.42.179':9988
'81.##1.39.227':139
'81.##1.176.177':9988
'81.#01.75.1':9988
'81.##1.177.190':9988
'81.##1.122.140':139
'81.##1.196.34':139
'81.##1.61.128':139
'81.##1.19.84':139
'81.##1.125.166':139
'81.##1.176.199':9988
'81.##1.96.97':9988
'81.##1.121.95':9988
'81.##1.185.10':9988
'81.##1.73.192':9988
'81.##1.39.19':9988
'81.##1.183.239':9988
'81.##1.173.68':9988
'81.##1.77.173':9988
'81.##1.83.102':9988
'81.##1.59.232':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней