Trojan.Starman.5638

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER3b25.dir00\svchost.exe.mdmp 16325836412032244

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3b25.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'62.##2.192.232':139
'62.##2.131.1':139
'62.##2.105.121':139
'62.##2.75.204':139
'62.##2.67.129':139
'62.##2.93.18':139
'62.##2.138.117':139
'62.##2.34.22':139
'62.##2.108.19':139
'62.##2.230.235':139
'62.#62.6.23':139
'62.##2.230.40':139
'62.##2.63.132':139
'62.##2.18.221':139
'62.##2.43.244':139
'62.##2.40.14':139
'62.##2.68.43':139
'62.##2.23.68':139
'62.##2.43.71':139
'62.##2.138.112':139
'62.##2.112.200':139
'62.##2.129.243':139
'62.##2.23.68':445
'62.#62.6.23':445
'62.##2.68.43':445
'62.##2.112.200':445
'62.##2.43.71':445
'62.##2.192.232':445
'62.##2.131.1':445
'62.##2.105.121':445
'62.##2.75.204':445
'62.##2.67.129':445
'62.##2.138.112':445
'62.##2.30.88':139
'62.##2.157.49':139
'62.##2.74.219':139
'62.##2.95.148':139
'62.##2.120.220':139
'62.##2.230.40':445
'62.##2.63.132':445
'62.##2.18.221':445
'62.##2.43.244':445
'62.##2.40.14':445
'62.##2.20.30':139
'62.##2.57.79':139
'62.##2.160.205':139
'62.#62.6.57':139
'62.##2.111.76':139
'62.##2.177.220':445
'62.##2.82.221':445
'62.##2.225.42':139
'62.##2.67.158':139
'62.##2.247.67':139
'62.##2.27.140':139
'62.##2.40.62':139
'62.##2.12.59':139
'62.##2.66.201':139
'62.##2.98.226':139
'62.##2.153.198':139
'62.##2.181.28':139
'62.##2.210.242':139
'62.##2.15.196':139
'62.##2.138.68':139
'62.##2.232.134':139
'62.##2.195.212':445
'62.##2.111.76':445
'62.##2.160.205':445
'62.#62.6.57':445
'62.##2.210.242':445
'62.##2.27.140':445
'62.##2.247.67':445
'62.##2.225.42':445
'62.##2.67.158':445
'62.##2.20.30':445
'62.##2.57.79':445
'62.##2.181.28':445
'62.##2.153.198':445
'62.##2.66.201':445
'62.##2.98.226':445
'62.##2.193.88':445
'62.##2.117.39':445
'62.##2.232.134':445
'62.##2.15.196':445
'62.##2.138.68':445
'62.##2.40.62':445
'62.##2.12.59':445
'62.##2.140.227':445
'62.##2.210.215':445
'62.##2.145.64':445
'62.##2.61.29':445
'62.##2.63.203':445
'62.##2.43.162':139
'62.##2.26.28':139
'62.##2.183.213':139
'62.##2.125.211':139
'62.##2.67.103':139
'62.##2.113.95':445
'62.##2.20.119':445
'62.##2.229.59':445
'62.##2.217.18':445
'62.#62.2.4':445
'62.##2.234.246':445
'62.##2.60.239':445
'62.##2.54.212':445
'62.##2.71.65':445
'62.##2.110.70':445
'62.##2.143.174':445
'62.##2.25.137':139
'62.##2.151.161':139
'62.##2.35.203':139
'62.##2.74.29':139
'62.##2.46.87':139
'62.##2.51.193':139
'62.##2.85.164':139
'62.##2.142.75':139
'62.##2.151.87':139
'62.##2.10.181':139
'62.##2.180.173':139
'62.##2.81.39':139
'62.##2.176.94':139
'62.##2.175.32':139
'62.##2.103.42':139
'62.##2.182.199':139
'62.##2.22.27':139
'62.##2.238.140':139
'62.##2.194.130':139
'62.##2.125.126':139
'62.##2.156.59':139
'62.##2.124.156':139
'62.##2.246.118':139
'62.##2.56.12':139
'62.##2.19.197':139
'62.##2.58.242':139
'62.##2.34.244':139
'62.#62.2.4':139
'62.##2.234.246':139
'62.##2.65.117':139
'62.##2.255.193':139
'62.##2.232.87':139
'62.##2.157.49':445
'62.##2.93.18':445
'62.##2.138.117':445
'62.##2.34.22':445
'62.##2.108.19':445
'62.##2.230.235':445
'62.##2.74.219':445
'62.##2.30.88':445
'62.##2.120.220':445
'62.##2.129.243':445
'62.##2.95.148':445
'62.##2.217.18':139
'62.##2.34.244':445
'62.##2.19.197':445
'62.##2.58.242':445
'62.##2.140.227':139
'62.##2.210.215':139
'62.##2.232.87':445
'62.##2.65.117':445
'62.##2.255.193':445
'62.##2.246.118':445
'62.##2.56.12':445
'62.##2.145.64':139
'62.##2.143.174':139
'62.##2.71.65':139
'62.##2.110.70':139
'62.##2.20.119':139
'62.##2.229.59':139
'62.##2.61.29':139
'62.##2.63.203':139
'62.##2.113.95':139
'62.##2.60.239':139
'62.##2.54.212':139
'62.##2.117.39':139
'62.##2.31.41':445
'62.##2.95.30':445
'62.#62.3.89':445
'62.##2.142.234':445
'62.##2.252.20':445
'62.##2.65.191':445
'62.##2.215.96':445
'62.##2.129.138':445
'62.#62.7.29':445
'62.##2.141.26':445
'62.##2.47.123':445
'62.#62.58.3':139
'62.##2.71.241':139
'62.##2.29.21':139
'62.##2.133.126':139
'62.##2.92.105':139
'62.##2.146.147':445
'62.##2.58.60':445
'62.##2.25.135':139
'62.##2.143.157':139
'62.##2.235.163':139
'62.##2.5.215':445
'62.##2.12.201':445
'62.##2.114.217':445
'62.##2.21.137':445
'62.##2.54.198':445
'62.##2.134.168':445
'62.##2.210.66':445
'62.##2.0.111':445
'62.##2.66.116':445
'62.##2.29.180':445
'62.##2.116.30':445
'62.##2.203.90':445
'62.##2.226.51':445
'62.##2.81.110':445
'62.##2.195.117':445
'62.##2.80.109':445
'62.##2.138.136':445
'62.##2.34.252':445
'62.##2.49.140':445
'62.##2.251.147':445
'62.##2.166.120':445
'62.##2.108.133':445
'62.##2.80.109':139
'62.##2.138.136':139
'62.##2.5.215':139
'62.##2.65.191':139
'62.##2.215.96':139
'62.##2.166.120':139
'62.##2.108.133':139
'62.##2.81.110':139
'62.##2.195.117':139
'62.##2.226.51':139
'62.##2.129.138':139
'62.##2.58.60':139
'62.##2.146.147':139
'62.##2.252.20':139
'62.##2.142.234':139
'62.##2.47.123':139
'62.#62.7.29':139
'62.##2.141.26':139
'62.##2.95.30':139
'62.#62.3.89':139
'62.##2.31.41':139
'62.##2.251.147':139
'62.##2.175.31':139
'62.##2.212.126':139
'62.##2.40.251':139
'62.##2.210.66':139
'62.##2.0.111':139
'62.##2.157.223':139
'62.##2.75.158':139
'62.##2.108.7':139
'62.##2.69.125':139
'62.##2.210.111':139
'62.##2.66.116':139
'62.##2.54.198':139
'62.##2.134.168':139
'62.##2.203.90':139
'62.##2.34.252':139
'62.##2.49.140':139
'62.##2.29.180':139
'62.##2.116.30':139
'62.##2.114.217':139
'62.##2.21.137':139
'62.##2.12.201':139
'62.##2.20.91':445
'62.##2.26.62':445
'62.##2.54.160':445
'62.##2.187.216':139
'62.##2.115.58':445
'62.##2.14.193':445
'62.##2.60.197':445
'62.##2.40.175':445
'62.##2.105.203':445
'62.##2.84.116':445
'62.##2.216.39':139
'62.##2.42.188':139
'62.##2.187.4':139
'62.##2.131.62':139
'62.##2.165.134':139
'62.##2.8.226':139
'62.##2.27.192':139
'62.##2.24.191':139
'62.##2.231.195':139
'62.##2.6.164':139
'62.##2.212.174':139
'62.##2.112.231':445
'62.##2.24.191':445
'62.##2.216.39':445
'62.##2.27.192':445
'62.##2.212.174':445
'62.##2.231.195':445
'62.##2.195.212':139
'62.##2.193.88':139
'62.##2.82.221':139
'62.##2.187.216':445
'62.##2.177.220':139
'62.##2.6.164':445
'62.##2.155.131':445
'62.##2.126.218':445
'62.##2.53.220':445
'62.##2.140.118':445
'62.##2.131.121':445
'62.##2.42.188':445
'62.##2.187.4':445
'62.##2.131.62':445
'62.##2.165.134':445
'62.##2.8.226':445
'62.##2.235.163':445
'62.##2.25.135':445
'62.##2.143.157':445
'62.#62.58.3':445
'62.##2.71.241':445
'62.##2.141.26':9988
'62.##2.129.138':9988
'62.#62.7.29':9988
'62.##2.146.147':9988
'62.##2.95.30':9988
'62.##2.29.21':445
'62.##2.69.125':445
'62.##2.210.111':445
'62.##2.212.126':445
'62.##2.40.251':445
'62.##2.175.31':445
'62.##2.133.126':445
'62.##2.92.105':445
'62.##2.75.158':445
'62.##2.108.7':445
'62.##2.157.223':445
'62.##2.65.191':9988
'62.##2.60.197':139
'62.##2.112.231':139
'62.##2.14.193':139
'62.##2.84.116':139
'62.##2.40.175':139
'62.##2.155.131':139
'62.##2.126.218':139
'62.##2.53.220':139
'62.##2.140.118':139
'62.##2.131.121':139
'62.##2.105.203':139
'62.##2.34.252':9988
'62.##2.203.90':9988
'62.##2.166.120':9988
'62.##2.215.96':9988
'62.##2.5.215':9988
'62.##2.20.91':139
'62.##2.26.62':139
'62.##2.54.160':139
'62.##2.54.198':9988
'62.##2.115.58':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней