Trojan.Starman.5940

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER1a49.dir00\svchost.exe.mdmp 16325836412032240

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1a49.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'66.##5.202.154':139
'66.##5.123.243':139
'66.##5.90.201':139
'66.##5.65.111':139
'66.##5.6.129':139
'66.##5.201.154':139
'66.##5.8.154':139
'66.##5.32.23':139
'66.##5.91.154':139
'66.##5.93.125':139
'66.##5.136.104':139
'66.##5.212.217':445
'66.##5.222.206':445
'66.##5.153.230':445
'66.#35.77.5':445
'66.##5.55.77':445
'66.##5.48.221':139
'66.##5.104.230':139
'66.##5.47.22':445
'66.##5.44.181':445
'66.##5.126.34':445
'66.##5.32.23':445
'66.##5.201.154':445
'66.##5.93.125':445
'66.##5.123.243':445
'66.##5.91.154':445
'66.##5.159.43':445
'66.##5.138.214':445
'66.##5.43.191':445
'66.##5.8.154':445
'66.##5.69.90':445
'66.##5.202.154':445
'66.##5.138.214':139
'66.##5.48.221':445
'66.##5.159.43':139
'66.##5.69.90':139
'66.##5.43.191':139
'66.##5.6.129':445
'66.##5.90.201':445
'66.##5.65.111':445
'66.##5.104.230':445
'66.##5.136.104':445
'66.##5.11.207':445
'66.##5.44.181':139
'66.##5.126.34':139
'66.##5.222.206':139
'66.##5.153.230':139
'66.##5.212.217':139
'66.##5.198.63':445
'66.##5.176.198':445
'66.##5.64.20':445
'66.##5.47.22':139
'66.##5.239.67':445
'66.##5.55.77':139
'66.##5.214.39':139
'66.##5.160.214':139
'66.#35.0.51':139
'66.##5.66.91':139
'66.##5.106.61':139
'66.##5.11.207':139
'66.#35.77.5':139
'66.#35.8.80':139
'66.##5.83.187':139
'66.##5.103.118':139
'66.##5.106.61':445
'66.#35.0.51':445
'66.##5.66.91':445
'66.##5.241.28':445
'66.##5.91.19':445
'66.##5.103.118':445
'66.#35.8.80':445
'66.##5.83.187':445
'66.##5.214.39':445
'66.##5.160.214':445
'66.##5.186.162':445
'66.##5.57.147':445
'66.##5.0.138':445
'66.##5.13.131':445
'66.##5.139.43':445
'66.##5.22.85':445
'66.##5.38.243':445
'66.##5.70.196':445
'66.#35.7.5':445
'66.##5.26.218':445
'66.##5.54.196':445
'66.##5.194.86':445
'66.##5.150.120':445
'66.##5.185.74':445
'66.##5.145.2':445
'66.##5.107.245':445
'66.#35.2.74':445
'66.##5.72.161':445
'66.##5.207.225':445
'66.##5.198.32':445
'66.##5.86.120':445
'66.#35.2.82':445
'66.##5.71.23':445
'66.##5.170.70':445
'66.##5.23.15':445
'66.#35.43.9':445
'66.##5.136.46':445
'66.##5.229.215':445
'66.##5.31.39':445
'66.##5.122.104':445
'66.##5.206.228':445
'66.##5.26.59':445
'66.##5.253.229':139
'66.##5.128.15':139
'66.##5.229.247':139
'66.##5.177.28':139
'66.##5.247.176':139
'66.##5.25.175':139
'66.##5.42.112':139
'66.##5.56.194':139
'66.##5.36.62':139
'66.##5.80.34':139
'66.##5.37.59':139
'66.##5.86.150':445
'66.##5.133.117':139
'66.##5.73.202':445
'66.##5.95.35':445
'66.##5.178.94':445
'66.##5.114.0':139
'66.##5.191.123':139
'66.##5.45.125':139
'66.##5.26.92':139
'66.##5.218.209':139
'66.##5.13.64':445
'66.##5.206.228':139
'66.##5.26.59':139
'66.##5.170.70':139
'66.##5.23.15':139
'66.##5.71.23':139
'66.#35.2.82':139
'66.##5.145.2':139
'66.##5.31.39':139
'66.##5.122.104':139
'66.##5.229.215':139
'66.##5.136.46':139
'66.##5.68.209':139
'66.##5.90.236':139
'66.##5.8.196':139
'66.##5.191.167':139
'66.##5.225.250':139
'66.##5.13.64':139
'66.#35.43.9':139
'66.#35.9.46':139
'66.##5.243.51':139
'66.##5.46.68':139
'66.##5.225.250':445
'66.##5.8.196':445
'66.##5.191.167':445
'66.##5.73.202':139
'66.##5.86.150':139
'66.##5.46.68':445
'66.#35.9.46':445
'66.##5.243.51':445
'66.##5.68.209':445
'66.##5.90.236':445
'66.##5.178.94':139
'66.##5.150.120':139
'66.##5.198.32':139
'66.##5.194.86':139
'66.##5.107.245':139
'66.##5.185.74':139
'66.##5.72.161':139
'66.##5.95.35':139
'66.#35.2.74':139
'66.##5.86.120':139
'66.##5.207.225':139
'66.##5.46.143':445
'66.##5.223.44':445
'66.##5.205.187':445
'66.##5.3.232':445
'66.##5.185.147':445
'66.#35.18.1':445
'66.##5.59.190':445
'66.##5.220.209':445
'66.##5.39.223':445
'66.##5.29.13':445
'66.##5.232.41':445
'66.##5.129.214':139
'66.##5.73.29':139
'66.##5.57.96':139
'66.##5.107.227':139
'66.##5.120.144':139
'66.##5.206.207':445
'66.##5.50.55':445
'66.##5.39.161':139
'66.##5.22.200':139
'66.##5.160.218':139
'66.##5.228.251':445
'66.##5.76.49':445
'66.##5.127.122':445
'66.##5.36.254':445
'66.##5.11.79':445
'66.##5.38.206':445
'66.##5.131.82':445
'66.##5.104.27':445
'66.##5.13.172':445
'66.##5.31.131':445
'66.##5.215.241':445
'66.##5.15.68':445
'66.##5.178.43':445
'66.##5.67.49':445
'66.##5.102.181':445
'66.##5.31.144':445
'66.##5.156.183':445
'66.##5.44.251':445
'66.##5.183.34':445
'66.##5.113.102':445
'66.##5.34.87':445
'66.##5.227.94':139
'66.##5.31.144':139
'66.##5.67.49':139
'66.##5.102.181':139
'66.#35.18.1':139
'66.##5.59.190':139
'66.##5.34.87':139
'66.##5.183.34':139
'66.##5.113.102':139
'66.##5.15.68':139
'66.##5.178.43':139
'66.##5.220.209':139
'66.##5.3.232':139
'66.##5.185.147':139
'66.##5.232.41':139
'66.##5.206.207':139
'66.##5.50.55':139
'66.##5.39.223':139
'66.##5.29.13':139
'66.##5.223.44':139
'66.##5.205.187':139
'66.##5.46.143':139
'66.##5.240.32':139
'66.##5.48.252':139
'66.##5.20.239':139
'66.##5.38.206':139
'66.##5.131.82':139
'66.##5.254.211':139
'66.#35.95.5':139
'66.##5.69.14':139
'66.##5.195.72':139
'66.##5.35.252':139
'66.##5.104.27':139
'66.##5.36.254':139
'66.##5.11.79':139
'66.##5.215.241':139
'66.##5.156.183':139
'66.##5.44.251':139
'66.##5.13.172':139
'66.##5.31.131':139
'66.##5.76.49':139
'66.##5.127.122':139
'66.##5.228.251':139
'66.##5.115.76':445
'66.##5.174.207':445
'66.##5.133.164':445
'66.##5.179.222':445
'66.##5.21.249':445
'66.##5.27.246':445
'66.##5.29.181':445
'66.##5.63.232':445
'66.##5.113.118':445
'66.##5.74.113':445
'66.##5.161.229':445
'66.##5.29.181':139
'66.##5.222.9':139
'66.##5.27.246':139
'66.##5.74.113':139
'66.##5.63.232':139
'66.##5.251.38':445
'66.##5.242.128':445
'66.##5.88.103':139
'66.##5.178.126':139
'66.##5.20.54':139
'66.##5.54.196':139
'66.#35.7.5':139
'66.##5.26.218':139
'66.##5.57.147':139
'66.##5.0.138':139
'66.##5.241.28':139
'66.##5.91.19':139
'66.##5.186.162':139
'66.##5.38.243':139
'66.##5.70.196':139
'66.##5.13.131':139
'66.##5.88.103':445
'66.##5.239.67':139
'66.##5.20.54':445
'66.##5.222.9':445
'66.##5.178.126':445
'66.##5.139.43':139
'66.##5.22.85':139
'66.##5.176.198':139
'66.##5.64.20':139
'66.##5.198.63':139
'66.##5.113.118':139
'66.##5.22.200':445
'66.##5.160.218':445
'66.##5.73.29':445
'66.##5.57.96':445
'66.##5.129.214':445
'66.##5.232.41':9988
'66.##5.3.232':9988
'66.##5.206.207':9988
'66.##5.39.161':445
'66.##5.50.55':9988
'66.##5.120.144':445
'66.##5.195.72':445
'66.##5.35.252':445
'66.##5.48.252':445
'66.##5.20.239':445
'66.##5.240.32':445
'66.##5.227.94':445
'66.##5.107.227':445
'66.#35.95.5':445
'66.##5.69.14':445
'66.##5.254.211':445
'66.##5.242.128':139
'66.##5.161.229':139
'66.##5.251.38':139
'66.##5.156.183':9988
'66.##5.13.172':9988
'66.##5.115.76':139
'66.##5.174.207':139
'66.##5.133.164':139
'66.##5.179.222':139
'66.##5.21.249':139
'66.##5.183.34':9988
'66.##5.39.223':9988
'66.##5.29.13':9988
'66.##5.46.143':9988
'66.##5.185.147':9988
'66.##5.205.187':9988
'66.##5.113.102':9988
'66.##5.34.87':9988
'66.##5.178.43':9988
'66.##5.102.181':9988
'66.##5.15.68':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней