Trojan.Starman.5894

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1f8a.dir00\svchost.exe.mdmp 16325836412032252

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1f8a.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'61.##9.113.63':139
'61.##9.72.215':139
'61.##9.63.50':139
'61.##9.235.153':139
'61.##9.112.11':139
'61.##9.75.238':139
'61.##9.7.192':139
'61.##9.25.46':139
'61.##9.210.138':139
'61.##9.2.218':139
'61.##9.63.238':139
'61.##9.226.171':139
'61.##9.57.122':139
'61.##9.118.17':139
'61.##9.132.117':139
'61.##9.186.173':139
'61.##9.8.213':139
'61.#39.50.2':139
'61.##9.45.181':139
'61.##9.211.56':139
'61.##9.184.210':139
'61.##9.43.144':139
'61.##9.211.56':445
'61.##9.184.210':445
'61.##9.57.122':445
'61.##9.118.17':445
'61.##9.226.171':445
'61.##9.63.238':445
'61.##9.235.153':445
'61.#39.50.2':445
'61.##9.45.181':445
'61.##9.8.213':445
'61.##9.186.173':445
'61.##9.157.87':139
'61.##9.142.253':139
'61.##9.136.160':139
'61.##9.49.210':139
'61.##9.78.122':139
'61.##9.57.199':445
'61.##9.132.117':445
'61.##9.143.123':445
'61.##9.24.156':139
'61.##9.213.98':445
'61.##9.242.161':139
'61.##9.208.191':139
'61.##9.41.233':139
'61.##9.41.108':139
'61.##9.59.114':139
'61.##9.151.34':139
'61.##9.120.202':445
'61.##9.165.99':139
'61.##9.36.175':139
'61.##9.119.88':139
'61.##9.66.167':139
'61.##9.52.231':139
'61.##9.175.169':139
'61.##9.99.28':139
'61.##9.120.202':139
'61.##9.10.211':139
'61.##9.89.197':139
'61.##9.187.91':139
'61.##9.41.119':139
'61.##9.140.25':139
'61.#39.9.67':139
'61.##9.10.211':445
'61.##9.36.175':445
'61.##9.119.88':445
'61.##9.208.191':445
'61.##9.41.233':445
'61.##9.242.161':445
'61.##9.143.123':139
'61.##9.57.199':139
'61.##9.213.98':139
'61.##9.165.99':445
'61.##9.151.34':445
'61.##9.59.114':445
'61.##9.140.25':445
'61.#39.9.67':445
'61.##9.175.169':445
'61.##9.99.28':445
'61.##9.52.231':445
'61.##9.66.167':445
'61.##9.41.108':445
'61.##9.187.91':445
'61.##9.41.119':445
'61.##9.89.197':445
'61.##9.112.11':445
'61.##9.199.89':139
'61.##9.200.157':139
'61.##9.89.207':139
'61.##9.175.73':445
'61.##9.207.116':139
'61.##9.90.88':139
'61.##9.13.153':139
'61.##9.45.159':139
'61.##9.91.102':139
'61.##9.156.42':139
'61.##9.27.141':445
'61.##9.60.190':445
'61.##9.129.28':445
'61.##9.53.79':445
'61.##9.51.153':445
'61.#39.5.80':445
'61.##9.118.236':445
'61.##9.106.30':445
'61.##9.109.200':445
'61.##9.31.175':445
'61.##9.35.137':445
'61.##9.254.185':139
'61.##9.42.135':139
'61.##9.28.221':139
'61.##9.20.31':139
'61.##9.127.177':139
'61.##9.56.122':139
'61.##9.246.236':139
'61.##9.12.247':139
'61.##9.236.195':139
'61.##9.102.72':139
'61.##9.219.242':139
'61.##9.76.167':139
'61.##9.83.123':139
'61.##9.23.53':139
'61.##9.116.136':139
'61.##9.55.203':139
'61.##9.48.98':139
'61.##9.210.109':139
'61.##9.255.33':139
'61.##9.151.168':139
'61.##9.147.123':139
'61.##9.99.63':139
'61.##9.24.156':445
'61.##9.133.207':139
'61.##9.142.253':445
'61.##9.136.160':445
'61.##9.157.87':445
'61.##9.72.213':139
'61.##9.29.122':139
'61.##9.111.155':139
'61.##9.132.67':139
'61.##9.155.90':139
'61.##9.78.122':445
'61.##9.210.138':445
'61.##9.2.218':445
'61.##9.72.215':445
'61.##9.63.50':445
'61.##9.113.63':445
'61.##9.43.144':445
'61.##9.49.210':445
'61.##9.7.192':445
'61.##9.25.46':445
'61.##9.75.238':445
'61.##9.66.69':139
'61.##9.132.67':445
'61.##9.155.90':445
'61.##9.133.207':445
'61.##9.27.141':139
'61.##9.175.73':139
'61.##9.66.69':445
'61.##9.99.222':445
'61.##9.29.122':445
'61.##9.111.155':445
'61.##9.72.213':445
'61.##9.106.30':139
'61.##9.53.79':139
'61.##9.60.190':139
'61.#39.5.80':139
'61.##9.99.222':139
'61.##9.51.153':139
'61.##9.109.200':139
'61.##9.118.236':139
'61.##9.35.137':139
'61.##9.129.28':139
'61.##9.31.175':139
'61.##9.176.130':445
'61.##9.25.128':445
'61.##9.66.43':445
'61.##9.142.178':445
'61.##9.54.147':445
'61.##9.177.2':445
'61.##9.59.180':445
'61.##9.17.60':445
'61.##9.66.236':445
'61.##9.205.0':445
'61.##9.78.205':445
'61.##9.135.143':445
'61.##9.110.200':139
'61.##9.239.208':139
'61.##9.87.46':139
'61.##9.171.81':139
'61.##9.62.171':139
'61.##9.145.159':445
'61.##9.67.239':445
'61.##9.18.12':139
'61.##9.29.235':139
'61.##9.11.203':139
'61.#39.30.2':445
'61.##9.224.145':445
'61.##9.56.105':445
'61.##9.20.134':445
'61.##9.241.135':445
'61.##9.145.243':445
'61.##9.139.212':445
'61.##9.101.114':445
'61.##9.30.221':445
'61.##9.118.191':445
'61.##9.200.78':445
'61.##9.93.70':445
'61.##9.202.8':445
'61.#39.9.29':445
'61.##9.29.57':445
'61.##9.15.152':445
'61.##9.57.16':445
'61.##9.35.243':445
'61.##9.176.16':445
'61.##9.123.15':445
'61.##9.24.60':445
'61.##9.62.113':445
'61.##9.15.152':139
'61.##9.57.16':139
'61.#39.30.2':139
'61.##9.59.180':139
'61.##9.17.60':139
'61.##9.24.60':139
'61.##9.62.113':139
'61.##9.202.8':139
'61.##9.29.57':139
'61.#39.9.29':139
'61.##9.66.236':139
'61.##9.142.178':139
'61.##9.67.239':139
'61.##9.177.2':139
'61.##9.25.128':139
'61.##9.54.147':139
'61.##9.205.0':139
'61.##9.78.205':139
'61.##9.66.43':139
'61.##9.145.159':139
'61.##9.135.143':139
'61.##9.123.15':139
'61.##9.224.219':139
'61.##9.35.211':139
'61.##9.120.143':139
'61.##9.139.212':139
'61.##9.101.114':139
'61.##9.129.20':139
'61.##9.81.202':139
'61.##9.143.43':139
'61.##9.62.208':139
'61.##9.236.62':139
'61.##9.30.221':139
'61.##9.241.135':139
'61.##9.20.134':139
'61.##9.93.70':139
'61.##9.35.243':139
'61.##9.176.16':139
'61.##9.118.191':139
'61.##9.200.78':139
'61.##9.56.105':139
'61.##9.145.243':139
'61.##9.224.145':139
'61.##9.120.143':445
'61.##9.200.22':445
'61.##9.97.64':445
'61.##9.143.69':445
'61.##9.67.206':139
'61.##9.176.130':139
'61.##9.16.226':445
'61.##9.153.140':445
'61.##9.52.178':445
'61.##9.203.178':445
'61.##9.53.219':445
'61.##9.47.86':139
'61.##9.28.199':139
'61.##9.85.26':139
'61.##9.198.149':139
'61.##9.27.85':139
'61.##9.17.238':139
'61.##9.53.51':139
'61.##9.71.53':139
'61.##9.187.43':139
'61.##9.196.38':139
'61.##9.9.230':139
'61.##9.99.153':445
'61.##9.196.38':445
'61.##9.9.230':445
'61.##9.85.26':445
'61.##9.198.149':445
'61.##9.28.199':445
'61.##9.47.86':445
'61.##9.67.206':445
'61.##9.71.53':445
'61.##9.187.43':445
'61.##9.53.51':445
'61.##9.17.238':445
'61.##9.183.247':445
'61.##9.137.129':445
'61.##9.247.112':445
'61.##9.24.100':445
'61.##9.140.7':445
'61.##9.35.53':445
'61.##9.27.85':445
'61.##9.159.239':445
'61.##9.129.238':445
'61.##9.224.185':445
'61.##9.18.12':445
'61.##9.142.178':9988
'61.##9.11.203':445
'61.##9.239.208':445
'61.##9.29.235':445
'61.##9.57.16':9988
'61.##9.29.57':9988
'61.#39.30.2':9988
'61.##9.66.43':9988
'61.##9.25.128':9988
'61.##9.110.200':445
'61.##9.236.62':445
'61.##9.143.43':445
'61.##9.62.208':445
'61.##9.224.219':445
'61.##9.35.211':445
'61.##9.62.171':445
'61.##9.87.46':445
'61.##9.171.81':445
'61.##9.129.20':445
'61.##9.81.202':445
'61.#39.9.29':9988
'61.##9.247.112':139
'61.##9.183.247':139
'61.##9.140.7':139
'61.##9.99.153':139
'61.##9.24.100':139
'61.##9.159.239':139
'61.##9.35.53':139
'61.##9.224.185':139
'61.##9.137.129':139
'61.##9.129.238':139
'61.##9.153.140':139
'61.##9.143.69':139
'61.##9.200.22':139
'61.##9.35.243':9988
'61.##9.24.60':9988
'61.##9.62.113':9988
'61.##9.52.178':139
'61.##9.16.226':139
'61.##9.53.219':139
'61.##9.97.64':139
'61.##9.203.178':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней