Trojan.Starman.5891

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER3777.dir00\svchost.exe.mdmp 16325836412032068

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3777.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'89.##.80.239':139
'89.##.29.253':139
'89.#5.147.2':139
'89.#5.43.16':139
'89.##.56.215':139
'89.##.241.15':139
'89.##.46.230':139
'89.##.253.106':139
'89.##.226.55':139
'89.##.113.119':139
'89.##.31.161':139
'89.##.69.123':139
'89.#5.45.69':139
'89.##.122.235':139
'89.##.120.107':445
'89.#5.87.47':445
'89.##.167.188':139
'89.##.233.44':139
'89.##.115.71':139
'89.##.63.100':139
'89.##.100.82':139
'89.##.90.114':139
'89.#5.43.16':445
'89.##.56.215':445
'89.##.31.161':445
'89.##.167.188':445
'89.##.233.44':445
'89.##.226.55':445
'89.##.113.119':445
'89.##.29.253':445
'89.#5.147.2':445
'89.##.80.239':445
'89.##.115.71':445
'89.##.212.76':139
'89.##.210.251':139
'89.##.156.205':139
'89.#5.82.71':139
'89.##.216.53':139
'89.##.63.100':445
'89.##.100.82':445
'89.#5.45.69':445
'89.##.122.235':445
'89.##.69.123':445
'89.##.150.220':139
'89.#5.11.88':139
'89.#5.78.84':139
'89.#5.50.75':139
'89.##.227.78':139
'89.##.196.240':445
'89.##.215.34':445
'89.#5.87.47':139
'89.##.253.249':139
'89.##.120.107':139
'89.##.134.113':139
'89.#5.1.137':139
'89.##.71.207':139
'89.#5.4.23':139
'89.##.214.39':139
'89.##.237.144':139
'89.#5.93.30':139
'89.##.200.247':139
'89.##.167.105':139
'89.##.47.223':139
'89.##.135.55':139
'89.##.125.215':445
'89.##.134.113':445
'89.#5.50.75':445
'89.##.200.247':445
'89.##.167.105':445
'89.#5.93.30':445
'89.#5.11.88':445
'89.##.253.249':445
'89.##.150.220':445
'89.##.227.78':445
'89.#5.78.84':445
'89.##.135.55':445
'89.##.166.59':445
'89.##.214.39':445
'89.##.200.136':445
'89.##.104.126':445
'89.##.219.103':445
'89.##.71.207':445
'89.##.47.223':445
'89.#5.1.137':445
'89.##.237.144':445
'89.#5.4.23':445
'89.#5.8.40':445
'89.##.30.133':445
'89.##.250.88':445
'89.##.37.250':445
'89.##.88.217':445
'89.##.192.247':139
'89.##.116.145':139
'89.#5.215.2':139
'89.##.102.217':445
'89.#5.2.7':445
'89.##.160.167':445
'89.##.211.49':445
'89.#5.0.59':445
'89.##.173.120':445
'89.##.22.240':445
'89.##.121.23':445
'89.##.112.223':445
'89.#5.12.94':445
'89.#5.15.71':445
'89.#5.74.59':445
'89.##.195.177':445
'89.##.120.36':139
'89.##.139.53':139
'89.#5.12.77':139
'89.##.121.83':139
'89.##.139.238':139
'89.##.155.217':139
'89.##.21.124':139
'89.##.63.205':139
'89.##.93.115':139
'89.#5.10.97':139
'89.#5.3.83':139
'89.##.235.16':139
'89.##.195.86':139
'89.##.22.175':139
'89.#5.16.82':139
'89.#5.66.46':139
'89.#5.82.63':139
'89.##.246.98':139
'89.##.141.177':139
'89.##.79.146':139
'89.##.181.22':139
'89.#5.65.95':139
'89.##.243.219':139
'89.##.55.127':139
'89.##.210.143':139
'89.##.88.223':139
'89.#5.48.31':139
'89.##.173.120':139
'89.##.211.49':139
'89.##.121.23':139
'89.#5.0.116':139
'89.##.22.240':139
'89.##.208.100':139
'89.##.90.114':445
'89.#5.82.71':445
'89.##.46.230':445
'89.##.253.106':445
'89.##.241.15':445
'89.##.210.251':445
'89.##.206.123':139
'89.##.212.76':445
'89.##.216.53':445
'89.##.156.205':445
'89.#5.0.59':139
'89.##.208.100':445
'89.##.88.223':445
'89.##.206.123':445
'89.##.102.217':139
'89.#5.2.7':139
'89.##.55.127':445
'89.#5.0.116':445
'89.##.243.219':445
'89.#5.48.31':445
'89.##.210.143':445
'89.##.30.133':139
'89.##.112.223':139
'89.#5.12.94':139
'89.#5.15.71':139
'89.#5.74.59':139
'89.##.195.177':139
'89.##.250.88':139
'89.#5.8.40':139
'89.##.88.217':139
'89.##.160.167':139
'89.##.37.250':139
'89.##.242.26':445
'89.##.69.158':445
'89.##.31.107':445
'89.##.241.105':445
'89.#5.24.59':445
'89.##.49.231':445
'89.##.53.185':445
'89.##.72.194':445
'89.##.16.140':445
'89.##.161.114':445
'89.##.134.236':445
'89.#5.55.37':139
'89.#5.1.124':139
'89.##.136.200':139
'89.##.18.207':139
'89.##.100.65':139
'89.##.233.45':445
'89.##.98.194':445
'89.##.85.143':139
'89.##.137.253':139
'89.##.230.198':139
'89.##.126.79':445
'89.##.149.139':445
'89.##.14.195':445
'89.##.148.83':445
'89.##.134.254':445
'89.##.81.134':445
'89.##.61.161':445
'89.##.116.19':445
'89.##.224.225':445
'89.#5.66.16':445
'89.##.225.241':445
'89.##.225.43':445
'89.##.41.157':445
'89.##.163.133':445
'89.##.124.246':445
'89.##.11.108':445
'89.#5.111.3':445
'89.##.194.147':445
'89.##.65.194':445
'89.##.147.176':445
'89.##.54.171':445
'89.##.176.124':445
'89.##.11.108':139
'89.#5.111.3':139
'89.##.126.79':139
'89.##.49.231':139
'89.##.53.185':139
'89.##.54.171':139
'89.##.176.124':139
'89.##.163.133':139
'89.##.124.246':139
'89.##.41.157':139
'89.##.72.194':139
'89.##.241.105':139
'89.##.31.107':139
'89.##.233.45':139
'89.##.134.236':139
'89.##.98.194':139
'89.##.16.140':139
'89.##.161.114':139
'89.##.69.158':139
'89.#5.24.59':139
'89.##.242.26':139
'89.##.147.176':139
'89.##.195.60':139
'89.##.254.161':139
'89.##.177.20':139
'89.##.61.161':139
'89.##.116.19':139
'89.##.46.244':139
'89.##.232.46':139
'89.##.215.244':139
'89.##.244.254':139
'89.##.130.24':139
'89.##.224.225':139
'89.##.134.254':139
'89.##.81.134':139
'89.##.225.43':139
'89.##.194.147':139
'89.##.65.194':139
'89.#5.66.16':139
'89.##.225.241':139
'89.##.14.195':139
'89.##.148.83':139
'89.##.149.139':139
'89.##.63.216':445
'89.#5.8.54':445
'89.#5.9.35':445
'89.##.162.147':445
'89.##.103.128':445
'89.#5.7.121':445
'89.##.139.77':445
'89.##.199.219':445
'89.##.161.242':445
'89.##.236.147':445
'89.##.51.110':139
'89.##.250.128':139
'89.##.196.228':139
'89.##.221.187':139
'89.#5.75.39':139
'89.##.71.213':139
'89.##.191.210':139
'89.#5.16.29':139
'89.##.183.102':139
'89.#5.40.32':139
'89.##.103.39':139
'89.##.222.18':445
'89.##.196.240':139
'89.##.215.34':139
'89.##.51.110':445
'89.##.191.210':445
'89.#5.16.29':445
'89.##.200.136':139
'89.##.166.59':139
'89.##.219.103':139
'89.##.125.215':139
'89.##.104.126':139
'89.##.183.102':445
'89.#5.75.39':445
'89.##.71.213':445
'89.##.126.111':445
'89.##.58.221':445
'89.##.111.71':445
'89.#5.40.32':445
'89.##.103.39':445
'89.##.196.228':445
'89.##.221.187':445
'89.##.250.128':445
'89.##.230.198':445
'89.##.85.143':445
'89.##.137.253':445
'89.#5.55.37':445
'89.#5.1.124':445
'89.##.41.157':9988
'89.##.163.133':9988
'89.#5.24.59':9988
'89.##.16.140':9988
'89.##.241.105':9988
'89.##.136.200':445
'89.##.244.254':445
'89.##.130.24':445
'89.##.254.161':445
'89.##.177.20':445
'89.##.195.60':445
'89.##.18.207':445
'89.##.100.65':445
'89.##.232.46':445
'89.##.215.244':445
'89.##.46.244':445
'89.##.54.171':9988
'89.##.199.219':139
'89.#5.7.121':139
'89.##.236.147':139
'89.#5.8.54':139
'89.##.161.242':139
'89.##.111.71':139
'89.##.126.111':139
'89.##.58.221':139
'89.##.139.77':139
'89.##.222.18':139
'89.##.63.216':139
'89.##.134.254':9988
'89.##.149.139':9988
'89.##.225.43':9988
'89.##.176.124':9988
'89.##.194.147':9988
'89.##.103.128':139
'89.#5.9.35':139
'89.##.162.147':139
'89.##.14.195':9988
'89.##.225.241':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней