Trojan.Starman.5799

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER1afb.dir00\svchost.exe.mdmp 16325836412032156

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1afb.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'14.##.94.178':139
'14.##.106.208':139
'14.##.188.118':139
'14.##.171.152':139
'14.##.140.171':139
'14.#1.56.84':139
'14.##.23.147':139
'14.##.171.38':139
'14.##.120.38':139
'14.##.18.120':139
'14.##.152.211':139
'14.##.138.32':139
'14.##.30.151':139
'14.##.195.195':139
'14.##.94.133':139
'14.#1.15.95':139
'14.##.184.32':139
'14.##.108.116':139
'14.#1.84.59':139
'14.##.123.145':139
'14.##.166.93':139
'14.##.191.22':139
'14.#1.15.95':445
'14.##.195.195':445
'14.##.94.133':445
'14.#1.93.38':445
'14.##.135.144':445
'14.##.166.93':445
'14.#1.84.59':445
'14.##.123.145':445
'14.##.138.32':445
'14.##.30.151':445
'14.##.150.126':445
'14.##.47.223':139
'14.#1.16.71':139
'14.##.223.201':139
'14.##.78.253':139
'14.#1.111.8':139
'14.#1.210.6':445
'14.#1.8.197':445
'14.##.200.117':445
'14.##.23.182':139
'14.##.126.34':445
'14.#1.43.10':139
'14.##.255.241':139
'14.#1.6.117':139
'14.##.140.169':139
'14.##.73.141':139
'14.##.189.144':139
'14.##.40.126':445
'14.##.144.177':139
'14.##.159.135':139
'14.##.177.125':139
'14.##.169.159':139
'14.##.136.66':445
'14.##.40.126':139
'14.##.82.144':445
'14.##.201.84':445
'14.#1.229.9':445
'14.#1.50.80':139
'14.##.159.50':139
'14.##.224.172':139
'14.##.49.106':139
'14.##.50.132':139
'14.##.49.106':445
'14.##.126.34':139
'14.##.200.117':139
'14.##.189.144':445
'14.##.177.125':445
'14.##.144.177':445
'14.#1.93.38':139
'14.##.135.144':139
'14.##.150.126':139
'14.#1.210.6':139
'14.#1.8.197':139
'14.##.159.135':445
'14.##.159.50':445
'14.##.169.159':445
'14.#1.50.80':445
'14.##.50.132':445
'14.##.224.172':445
'14.#1.43.10':445
'14.##.255.241':445
'14.#1.6.117':445
'14.##.140.169':445
'14.##.73.141':445
'14.##.184.32':445
'14.#1.72.53':139
'14.##.160.180':139
'14.##.14.200':139
'14.##.119.173':139
'14.##.127.65':139
'14.##.236.116':139
'14.##.104.240':139
'14.##.131.245':139
'14.#1.47.51':139
'14.##.137.66':139
'14.##.170.23':139
'14.##.125.166':445
'14.##.105.115':445
'14.#1.24.1':445
'14.##.69.183':445
'14.##.228.69':445
'14.#1.234.6':139
'14.##.218.158':139
'14.##.109.134':445
'14.#1.130.6':445
'14.##.115.51':445
'14.##.51.105':139
'14.##.240.198':139
'14.##.151.136':139
'14.##.57.124':139
'14.##.153.216':139
'14.##.119.153':139
'14.#1.182.8':139
'14.#1.2.134':139
'14.##.130.108':139
'14.##.244.35':139
'14.#1.47.63':139
'14.##.236.66':139
'14.##.103.226':139
'14.#1.28.94':139
'14.#1.64.93':139
'14.##.98.181':139
'14.##.205.196':139
'14.##.151.39':139
'14.##.176.66':139
'14.##.187.182':139
'14.##.44.150':139
'14.#1.123.9':139
'14.#1.111.8':445
'14.##.223.201':445
'14.##.78.253':445
'14.##.23.147':445
'14.##.191.22':445
'14.##.192.124':139
'14.##.238.202':139
'14.##.23.182':445
'14.##.47.223':445
'14.#1.16.71':445
'14.#1.56.84':445
'14.##.140.171':445
'14.##.188.118':445
'14.##.171.152':445
'14.##.108.116':445
'14.##.152.211':445
'14.##.18.120':445
'14.##.171.38':445
'14.##.120.38':445
'14.##.94.178':445
'14.##.106.208':445
'14.#1.85.37':139
'14.##.238.202':445
'14.#1.85.37':445
'14.##.192.124':445
'14.##.115.51':139
'14.##.109.134':139
'14.##.76.215':445
'14.#1.54.96':445
'14.##.17.105':445
'14.##.133.148':445
'14.##.99.167':445
'14.#1.130.6':139
'14.##.76.215':139
'14.#1.54.96':139
'14.##.17.105':139
'14.##.133.148':139
'14.##.99.167':139
'14.##.125.166':139
'14.##.105.115':139
'14.#1.24.1':139
'14.##.69.183':139
'14.##.228.69':139
'14.##.126.82':445
'14.##.168.196':445
'14.##.232.157':445
'14.##.160.37':445
'14.##.192.58':445
'14.##.47.201':445
'14.##.125.172':445
'14.##.141.197':445
'14.##.91.215':445
'14.##.86.152':445
'14.##.166.65':445
'14.##.84.228':139
'14.##.115.25':139
'14.##.168.36':139
'14.##.47.127':139
'14.##.74.244':139
'14.#1.20.44':445
'14.##.31.228':445
'14.##.169.236':139
'14.##.64.165':139
'14.##.107.251':139
'14.##.102.225':445
'14.##.202.70':445
'14.##.118.68':445
'14.##.232.11':445
'14.##.84.190':445
'14.#1.44.86':445
'14.##.41.143':445
'14.##.134.104':445
'14.##.216.78':445
'14.#1.34.24':445
'14.##.78.121':445
'14.##.155.205':445
'14.##.16.122':445
'14.#1.34.17':445
'14.#1.50.14':445
'14.##.112.13':445
'14.##.251.128':445
'14.#1.59.77':445
'14.##.205.153':445
'14.#1.6.14':445
'14.##.230.33':445
'14.##.43.187':445
'14.##.112.13':139
'14.##.251.128':139
'14.##.102.225':139
'14.##.47.201':139
'14.##.125.172':139
'14.##.230.33':139
'14.##.43.187':139
'14.#1.34.17':139
'14.#1.50.14':139
'14.##.16.122':139
'14.##.141.197':139
'14.##.160.37':139
'14.##.192.58':139
'14.##.166.65':139
'14.##.31.228':139
'14.#1.20.44':139
'14.##.91.215':139
'14.##.86.152':139
'14.##.168.196':139
'14.##.232.157':139
'14.##.126.82':139
'14.#1.6.14':139
'14.##.221.96':139
'14.#1.67.29':139
'14.##.194.176':139
'14.##.41.143':139
'14.##.134.104':139
'14.##.160.211':139
'14.##.71.161':139
'14.##.52.179':139
'14.##.195.197':139
'14.##.66.150':139
'14.##.216.78':139
'14.##.84.190':139
'14.#1.44.86':139
'14.##.155.205':139
'14.#1.59.77':139
'14.##.205.153':139
'14.#1.34.24':139
'14.##.78.121':139
'14.##.118.68':139
'14.##.232.11':139
'14.##.202.70':139
'14.##.194.176':445
'14.##.17.160':445
'14.##.191.115':445
'14.##.136.66':139
'14.#1.229.9':139
'14.##.82.144':139
'14.##.208.103':445
'14.##.39.146':445
'14.##.31.147':445
'14.##.40.118':445
'14.#1.3.65':445
'14.##.201.84':139
'14.#1.22.18':139
'14.##.118.121':139
'14.##.39.143':139
'14.#1.48.26':139
'14.##.90.238':139
'14.##.134.58':139
'14.#1.134.3':139
'14.##.121.115':139
'14.##.232.117':139
'14.##.40.121':139
'14.##.234.49':445
'14.#1.22.18':445
'14.##.118.121':445
'14.##.39.143':445
'14.#1.48.26':445
'14.##.90.238':445
'14.##.134.58':445
'14.#1.134.3':445
'14.##.121.115':445
'14.##.232.117':445
'14.##.40.121':445
'14.#1.51.35':445
'14.##.106.108':445
'14.##.168.148':445
'14.##.107.154':445
'14.##.198.198':445
'14.##.51.226':445
'14.##.104.156':445
'14.##.237.249':445
'14.##.124.110':445
'14.##.232.223':445
'14.##.70.232':445
'14.##.169.236':445
'14.##.166.65':9988
'14.##.107.251':445
'14.##.115.25':445
'14.##.64.165':445
'14.##.86.152':9988
'14.#1.50.14':9988
'14.##.126.82':9988
'14.#1.20.44':9988
'14.##.31.228':9988
'14.##.84.228':445
'14.##.66.150':445
'14.##.52.179':445
'14.##.195.197':445
'14.##.221.96':445
'14.#1.67.29':445
'14.##.74.244':445
'14.##.168.36':445
'14.##.47.127':445
'14.##.160.211':445
'14.##.71.161':445
'14.#1.34.17':9988
'14.##.168.148':139
'14.##.232.223':139
'14.##.106.108':139
'14.##.51.226':139
'14.##.107.154':139
'14.##.237.249':139
'14.#1.51.35':139
'14.##.104.156':139
'14.##.70.232':139
'14.##.124.110':139
'14.##.198.198':139
'14.##.191.115':139
'14.##.40.118':139
'14.##.17.160':139
'14.##.205.153':9988
'14.##.41.143':9988
'14.##.39.146':139
'14.##.234.49':139
'14.##.208.103':139
'14.#1.3.65':139
'14.##.31.147':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней