Trojan.Starman.5662

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER5ee5.dir00\svchost.exe.mdmp 16325836412030196

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5ee5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##2.92.148':445
'60.##2.202.36':445
'60.##2.224.70':445
'60.##2.230.57':445
'60.##2.254.114':445
'60.##2.211.135':445
'60.##2.176.155':445
'60.##2.238.124':139
'60.##2.10.19':139
'60.##2.38.185':445
'60.##2.217.105':445
'60.##2.203.49':445
'60.##2.134.227':445
'60.##2.128.191':445
'60.##2.243.40':445
'60.##2.98.199':445
'60.##2.3.233':445
'60.##2.60.186':445
'60.##2.207.32':445
'60.##2.99.123':445
'60.##2.164.70':445
'60.##2.61.199':445
'60.##2.221.145':445
'60.##2.238.34':445
'60.##2.130.169':139
'60.##2.62.41':139
'60.##2.241.166':139
'60.##2.108.5':139
'60.##2.48.224':139
'60.##2.38.49':139
'60.##2.148.223':139
'60.##2.238.124':445
'60.##2.10.19':445
'60.##2.130.169':445
'60.##2.142.236':139
'60.##2.155.88':139
'60.##2.105.155':139
'60.##2.73.79':139
'60.##2.176.151':139
'60.##2.104.70':139
'60.##2.126.79':139
'60.##2.33.182':139
'60.##2.53.217':139
'60.##2.140.171':139
'60.##2.37.129':139
'60.##2.22.107':139
'60.##2.120.149':139
'60.##2.255.120':139
'60.##2.252.254':139
'60.##2.134.49':445
'60.##2.163.174':445
'60.##2.244.0':445
'60.##2.64.22':445
'60.##2.9.203':445
'60.#52.26.4':445
'60.##2.15.248':445
'60.##2.34.187':139
'60.##2.134.49':139
'60.##2.98.199':139
'60.##2.217.227':139
'60.##2.219.131':139
'60.##2.14.213':139
'60.##2.198.60':445
'60.##2.144.198':445
'60.##2.6.230':445
'60.##2.252.178':445
'60.##2.193.60':445
'60.##2.60.193':445
'60.##2.28.105':445
'60.##2.238.28':445
'60.##2.62.191':445
'60.##2.167.228':445
'60.##2.71.167':445
'60.##2.196.245':445
'60.##2.3.233':139
'60.##2.224.70':139
'60.##2.38.185':139
'60.##2.217.105':139
'60.##2.211.135':139
'60.##2.92.148':139
'60.##2.202.36':139
'60.##2.219.131':445
'60.##2.14.213':445
'60.##2.34.187':445
'60.##2.203.49':139
'60.##2.176.155':139
'60.##2.217.227':445
'60.##2.243.40':139
'60.##2.61.199':139
'60.##2.221.145':139
'60.##2.60.186':139
'60.##2.134.227':139
'60.##2.128.191':139
'60.##2.164.70':139
'60.##2.230.57':139
'60.##2.254.114':139
'60.##2.238.34':139
'60.##2.207.32':139
'60.##2.99.123':139
'60.##2.161.196':445
'60.##2.6.139':445
'60.##2.189.150':445
'60.##2.144.95':445
'60.##2.44.151':445
'60.##2.124.44':445
'60.##2.80.154':445
'60.##2.26.113':445
'60.##2.81.162':445
'60.##2.125.158':445
'60.##2.120.184':445
'60.##2.90.114':445
'60.##2.120.25':445
'60.##2.206.162':445
'60.##2.119.232':445
'60.##2.99.10':445
'60.##2.1.158':445
'60.##2.183.217':445
'60.##2.65.64':445
'60.##2.88.137':445
'60.##2.4.216':445
'60.##2.93.129':445
'60.##2.99.93':445
'60.##2.64.99':445
'60.##2.54.172':445
'60.##2.100.50':139
'60.##2.6.113':139
'60.##2.189.147':139
'60.##2.80.179':139
'60.##2.36.236':139
'60.##2.2.165':139
'60.##2.24.74':139
'60.##2.165.98':139
'60.##2.135.165':139
'60.##2.10.40':139
'60.##2.212.101':139
'60.##2.117.58':139
'60.##2.37.64':139
'60.##2.158.152':139
'60.##2.164.12':139
'60.##2.241.209':139
'60.##2.91.205':139
'60.##2.63.244':139
'60.##2.181.44':139
'60.##2.17.54':139
'60.##2.140.196':139
'60.##2.116.59':139
'60.##2.74.45':139
'60.##2.202.226':139
'60.##2.41.86':445
'60.##2.62.41':445
'60.##2.241.166':445
'60.##2.108.5':445
'60.##2.48.224':445
'60.##2.38.49':445
'60.##2.148.223':445
'60.##2.86.105':139
'60.##2.41.86':139
'60.##2.99.10':139
'60.##2.142.236':445
'60.##2.155.88':445
'60.##2.105.155':445
'60.##2.73.79':445
'60.##2.176.151':445
'60.##2.104.70':445
'60.##2.126.79':445
'60.##2.33.182':445
'60.##2.53.217':445
'60.##2.140.171':445
'60.##2.37.129':445
'60.##2.22.107':445
'60.##2.120.149':445
'60.##2.255.120':445
'60.##2.252.254':445
'60.##2.1.158':139
'60.##2.189.150':139
'60.##2.125.158':139
'60.##2.120.184':139
'60.##2.124.44':139
'60.##2.161.196':139
'60.##2.6.139':139
'60.##2.81.162':139
'60.##2.54.172':139
'60.##2.86.105':445
'60.##2.90.114':139
'60.##2.80.154':139
'60.##2.26.113':139
'60.##2.119.232':139
'60.##2.93.129':139
'60.##2.99.93':139
'60.##2.183.217':139
'60.##2.120.25':139
'60.##2.206.162':139
'60.##2.4.216':139
'60.##2.144.95':139
'60.##2.44.151':139
'60.##2.64.99':139
'60.##2.65.64':139
'60.##2.88.137':139
'60.##2.244.54':445
'60.##2.221.7':445
'60.##2.235.25':445
'60.##2.160.129':445
'60.##2.55.242':445
'60.##2.14.29':445
'60.##2.196.25':445
'60.##2.202.63':445
'60.##2.79.160':445
'60.##2.85.192':445
'60.##2.123.138':445
'60.##2.203.117':445
'60.##2.1.160':445
'60.#52.5.2':445
'60.##2.201.151':445
'60.##2.244.119':139
'60.#52.38.5':445
'60.##2.113.8':445
'60.##2.29.26':445
'60.##2.208.29':445
'60.##2.132.199':445
'60.##2.109.93':445
'60.##2.181.136':445
'60.#52.26.5':445
'60.##2.126.112':445
'60.##2.219.137':445
'60.##2.194.218':445
'60.##2.247.115':445
'60.##2.172.18':445
'60.##2.151.196':445
'60.##2.97.49':445
'60.##2.121.187':445
'60.##2.114.244':445
'60.##2.83.217':445
'60.##2.183.119':445
'60.##2.97.102':445
'60.##2.188.66':445
'60.##2.132.119':445
'60.##2.163.212':445
'60.##2.231.9':445
'60.##2.180.247':445
'60.##2.57.89':445
'60.##2.63.162':445
'60.##2.229.72':445
'60.##2.66.75':445
'60.##2.166.15':445
'60.##2.146.225':445
'60.##2.37.24':445
'60.##2.164.4':445
'60.##2.98.197':139
'60.##2.221.7':139
'60.##2.85.192':139
'60.##2.235.25':139
'60.##2.55.242':139
'60.##2.14.29':139
'60.##2.244.54':139
'60.##2.202.63':139
'60.##2.79.160':139
'60.##2.126.112':139
'60.##2.123.138':139
'60.##2.203.117':139
'60.##2.196.25':139
'60.##2.113.8':139
'60.##2.201.151':139
'60.##2.109.93':139
'60.#52.38.5':139
'60.##2.1.160':139
'60.#52.5.2':139
'60.##2.208.29':139
'60.##2.132.199':139
'60.##2.160.129':139
'60.##2.181.136':139
'60.#52.26.5':139
'60.##2.29.26':139
'60.##2.180.247':139
'60.##2.194.218':139
'60.##2.247.115':139
'60.##2.183.119':139
'60.##2.151.196':139
'60.##2.97.49':139
'60.##2.219.137':139
'60.##2.114.244':139
'60.##2.83.217':139
'60.##2.194.193':139
'60.##2.97.102':139
'60.##2.188.66':139
'60.##2.121.187':139
'60.##2.163.212':139
'60.##2.231.9':139
'60.##2.146.225':139
'60.##2.57.89':139
'60.##2.63.162':139
'60.##2.132.119':139
'60.##2.66.75':139
'60.##2.166.15':139
'60.##2.172.18':139
'60.##2.37.24':139
'60.##2.164.4':139
'60.##2.229.72':139
'60.##2.25.167':445
'60.#52.7.74':445
'60.##2.79.208':445
'60.##2.94.116':445
'60.##2.53.101':445
'60.##2.110.240':445
'60.##2.26.195':139
'60.##2.101.89':139
'60.##2.94.132':139
'60.##2.238.12':445
'60.##2.45.240':139
'60.##2.35.189':139
'60.##2.192.251':445
'60.##2.23.143':445
'60.##2.41.116':445
'60.##2.136.8':445
'60.##2.138.214':445
'60.##2.71.146':445
'60.##2.125.219':445
'60.##2.230.216':445
'60.##2.79.213':445
'60.##2.144.221':445
'60.#52.5.26':445
'60.##2.141.212':445
'60.##2.167.130':139
'60.##2.163.174':139
'60.##2.244.0':139
'60.##2.64.22':139
'60.##2.9.203':139
'60.#52.26.4':139
'60.##2.15.248':139
'60.##2.101.89':445
'60.##2.94.132':445
'60.##2.167.130':445
'60.##2.45.240':445
'60.##2.35.189':445
'60.##2.26.195':445
'60.##2.198.60':139
'60.##2.144.198':139
'60.##2.6.230':139
'60.##2.252.178':139
'60.##2.193.60':139
'60.##2.60.193':139
'60.##2.28.105':139
'60.##2.238.28':139
'60.##2.62.191':139
'60.##2.167.228':139
'60.##2.71.167':139
'60.##2.196.245':139
'60.##2.182.196':445
'60.##2.200.211':139
'60.##2.3.201':139
'60.#52.15.4':139
'60.##2.123.138':9988
'60.##2.85.192':9988
'60.##2.203.117':9988
'60.##2.237.119':139
'60.##2.182.196':139
'60.##2.136.8':139
'60.##2.213.21':139
'60.##2.66.91':139
'60.##2.49.50':139
'60.#52.5.2':9988
'60.##2.201.151':9988
'60.##2.109.93':9988
'60.##2.194.193':445
'60.##2.98.197':445
'60.##2.244.119':445
'60.##2.132.199':9988
'60.##2.160.129':9988
'60.##2.55.242':9988
'60.#52.26.5':9988
'60.##2.29.26':9988
'60.##2.208.29':9988
'60.##2.138.214':139
'60.##2.79.208':139
'60.##2.238.12':139
'60.##2.200.211':445
'60.##2.110.240':139
'60.##2.25.167':139
'60.#52.7.74':139
'60.##2.66.91':445
'60.##2.49.50':445
'60.##2.237.119':445
'60.##2.3.201':445
'60.#52.15.4':445
'60.##2.213.21':445
'60.##2.41.116':139
'60.##2.144.221':139
'60.#52.5.26':139
'60.##2.71.146':139
'60.##2.192.251':139
'60.##2.23.143':139
'60.##2.79.213':139
'60.##2.94.116':139
'60.##2.53.101':139
'60.##2.141.212':139
'60.##2.125.219':139
'60.##2.230.216':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней