Trojan.Starman.5702

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER54ad.dir00\svchost.exe.mdmp 16325836412032132

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER54ad.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##.244.20':139
'61.##.69.140':139
'61.#8.0.91':139
'61.##.51.184':139
'61.##.40.111':139
'61.#8.88.53':139
'61.##.153.88':139
'61.##.39.120':139
'61.##.161.192':139
'61.#8.29.54':139
'61.##.229.18':139
'61.#8.4.54':139
'61.#8.8.238':139
'61.##.100.253':139
'61.##.84.177':139
'61.##.48.168':139
'61.##.11.141':139
'61.#8.62.60':139
'61.##.141.102':139
'61.##.209.78':139
'61.##.102.165':139
'61.##.102.165':445
'61.##.141.102':445
'61.##.209.78':445
'61.#8.4.54':445
'61.#8.8.238':445
'61.##.51.184':445
'61.##.40.111':445
'61.##.229.18':445
'61.##.11.141':445
'61.#8.62.60':445
'61.##.100.253':445
'61.#8.12.12':139
'61.#8.55.86':139
'61.##.149.225':139
'61.##.125.153':139
'61.##.20.126':139
'61.##.84.177':445
'61.##.48.168':445
'61.##.20.186':445
'61.##.131.94':445
'61.##.118.207':445
'61.##.20.186':139
'61.#8.229.0':139
'61.##.170.228':139
'61.#8.1.181':139
'61.##.21.182':139
'61.#8.181.0':139
'61.#8.57.67':445
'61.##.100.246':445
'61.##.12.208':445
'61.##.114.249':139
'61.##.142.194':139
'61.#8.48.94':139
'61.##.150.103':139
'61.##.214.218':139
'61.#8.51.44':139
'61.##.118.99':139
'61.##.218.117':139
'61.#8.34.80':139
'61.#8.94.18':139
'61.##.119.75':139
'61.#8.15.9':139
'61.#8.55.15':139
'61.#8.1.181':445
'61.#8.229.0':445
'61.#8.181.0':445
'61.#8.48.94':445
'61.##.21.182':445
'61.##.131.94':139
'61.##.118.207':139
'61.##.142.194':445
'61.##.170.228':445
'61.##.114.249':445
'61.#8.94.18':445
'61.#8.51.44':445
'61.##.150.103':445
'61.##.218.117':445
'61.##.48.239':445
'61.##.118.99':445
'61.##.119.75':445
'61.#8.34.80':445
'61.#8.55.15':445
'61.##.214.218':445
'61.#8.15.9':445
'61.#8.0.91':445
'61.##.96.183':139
'61.##.108.105':139
'61.##.18.233':139
'61.##.55.105':445
'61.##.96.135':445
'61.#8.57.83':139
'61.#8.20.58':139
'61.#8.24.81':139
'61.#8.2.80':139
'61.##.142.50':139
'61.#8.2.31':445
'61.##.249.244':445
'61.##.156.118':445
'61.##.165.35':445
'61.##.80.136':445
'61.##.190.185':445
'61.##.187.158':445
'61.##.191.88':445
'61.##.126.85':445
'61.##.108.173':445
'61.#8.68.25':445
'61.##.15.139':139
'61.##.157.94':139
'61.##.165.10':139
'61.##.187.129':139
'61.##.14.188':139
'61.#8.220.9':139
'61.##.17.115':139
'61.#8.48.56':139
'61.##.230.156':139
'61.##.107.60':139
'61.##.150.236':139
'61.#8.42.70':139
'61.##.101.45':139
'61.#8.0.182':139
'61.##.243.20':139
'61.##.45.243':139
'61.##.205.66':139
'61.##.72.179':139
'61.##.66.230':139
'61.##.99.101':139
'61.##.61.189':139
'61.##.108.235':445
'61.##.172.60':139
'61.##.152.154':139
'61.##.198.233':139
'61.#8.55.86':445
'61.#8.31.61':139
'61.##.235.129':139
'61.##.108.235':139
'61.##.21.224':139
'61.##.240.32':139
'61.##.157.90':139
'61.#8.12.12':445
'61.#8.29.54':445
'61.##.39.120':445
'61.##.161.192':445
'61.##.244.20':445
'61.##.69.140':445
'61.##.20.126':445
'61.##.149.225':445
'61.##.125.153':445
'61.#8.88.53':445
'61.##.153.88':445
'61.##.198.233':445
'61.##.172.60':445
'61.#8.31.61':445
'61.##.55.105':139
'61.##.96.135':139
'61.##.21.224':445
'61.##.235.129':445
'61.##.157.90':445
'61.##.152.154':445
'61.##.240.32':445
'61.#8.2.31':139
'61.##.249.244':139
'61.##.156.118':139
'61.##.165.35':139
'61.##.80.136':139
'61.##.190.185':139
'61.##.187.158':139
'61.##.191.88':139
'61.##.126.85':139
'61.##.108.173':139
'61.#8.68.25':139
'61.##.48.239':139
'61.##.210.72':445
'61.##.133.146':445
'61.##.50.212':445
'61.##.138.176':445
'61.##.216.131':445
'61.#8.151.6':445
'61.##.28.223':445
'61.##.41.237':445
'61.##.241.105':445
'61.##.25.103':445
'61.##.69.137':445
'61.##.65.114':139
'61.##.88.187':139
'61.##.68.235':139
'61.##.114.252':139
'61.##.131.73':139
'61.##.176.164':445
'61.##.162.29':445
'61.##.105.96':139
'61.##.134.203':139
'61.#8.0.93':139
'61.##.153.122':445
'61.##.38.101':445
'61.##.122.150':445
'61.##.23.200':445
'61.##.150.52':445
'61.##.161.121':445
'61.#8.11.24':445
'61.#8.78.62':445
'61.##.89.148':445
'61.##.55.112':445
'61.#8.57.19':445
'61.##.129.211':445
'61.##.149.159':445
'61.##.254.83':445
'61.##.201.44':445
'61.#8.13.64':445
'61.#8.9.139':445
'61.##.15.146':445
'61.##.217.179':445
'61.##.118.25':445
'61.##.195.46':445
'61.##.247.205':139
'61.#8.13.64':139
'61.##.254.83':139
'61.##.201.44':139
'61.#8.151.6':139
'61.##.28.223':139
'61.##.195.46':139
'61.##.217.179':139
'61.##.118.25':139
'61.##.129.211':139
'61.##.149.159':139
'61.##.41.237':139
'61.##.162.29':139
'61.##.138.176':139
'61.##.69.137':139
'61.##.216.131':139
'61.##.176.164':139
'61.##.241.105':139
'61.##.25.103':139
'61.##.133.146':139
'61.##.50.212':139
'61.##.210.72':139
'61.##.196.224':139
'61.#8.41.52':139
'61.##.132.90':139
'61.##.161.121':139
'61.#8.11.24':139
'61.#8.137.4':139
'61.#8.73.74':139
'61.##.148.37':139
'61.##.195.76':139
'61.##.227.195':139
'61.#8.78.62':139
'61.##.23.200':139
'61.##.150.52':139
'61.#8.57.19':139
'61.#8.9.139':139
'61.##.15.146':139
'61.##.89.148':139
'61.##.55.112':139
'61.##.38.101':139
'61.##.122.150':139
'61.##.153.122':139
'61.##.132.90':445
'61.##.108.41':445
'61.#8.16.50':445
'61.#8.29.87':445
'61.#8.197.8':139
'61.#8.54.13':445
'61.##.120.122':445
'61.##.29.120':445
'61.##.121.174':445
'61.##.137.75':445
'61.##.174.155':445
'61.##.181.253':139
'61.#8.7.227':139
'61.##.72.231':139
'61.##.245.220':139
'61.##.182.79':139
'61.##.85.141':139
'61.##.83.159':139
'61.##.253.123':139
'61.##.207.60':139
'61.##.209.158':139
'61.##.96.212':139
'61.##.83.159':445
'61.##.253.123':445
'61.##.207.60':445
'61.##.209.158':445
'61.##.96.212':445
'61.#8.57.67':139
'61.##.100.246':139
'61.##.12.208':139
'61.##.181.253':445
'61.#8.197.8':445
'61.##.72.231':445
'61.##.244.197':445
'61.##.119.245':445
'61.#8.94.57':445
'61.#8.41.29':445
'61.#8.18.41':445
'61.##.245.220':445
'61.#8.7.227':445
'61.##.85.141':445
'61.##.132.29':445
'61.##.182.79':445
'61.##.132.29':139
'61.#8.0.93':445
'61.##.105.96':445
'61.##.134.203':445
'61.##.65.114':445
'61.##.88.187':445
'61.#8.151.6':9988
'61.##.201.44':9988
'61.##.241.105':9988
'61.##.133.146':9988
'61.##.138.176':9988
'61.##.68.235':445
'61.##.227.195':445
'61.##.148.37':445
'61.##.195.76':445
'61.##.196.224':445
'61.#8.41.52':445
'61.##.114.252':445
'61.##.131.73':445
'61.##.247.205':445
'61.#8.137.4':445
'61.#8.73.74':445
'61.##.120.122':139
'61.##.29.120':139
'61.##.121.174':139
'61.##.137.75':139
'61.##.174.155':139
'61.##.244.197':139
'61.##.119.245':139
'61.#8.94.57':139
'61.#8.41.29':139
'61.#8.18.41':139
'61.#8.16.50':139
'61.#8.57.19':9988
'61.##.23.200':9988
'61.##.195.46':9988
'61.##.149.159':9988
'61.##.118.25':9988
'61.#8.29.87':139
'61.##.108.41':139
'61.#8.54.13':139
'61.##.153.122':9988
'61.##.132.90':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней