Trojan.Starman.5303

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3481.dir00\svchost.exe.mdmp 16325836412032180

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3481.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'83.#0.75.85':139
'83.#0.143.9':139
'83.##.15.194':139
'83.##.242.189':139
'83.##.235.106':139
'83.##.250.38':139
'83.##.36.250':139
'83.##.150.204':139
'83.##.175.158':139
'83.##.185.102':139
'83.##.100.209':139
'83.##.32.186':139
'83.#0.49.56':139
'83.##.232.245':139
'83.##.209.175':139
'83.##.192.119':139
'83.##.205.198':139
'83.##.52.208':139
'83.##.221.144':139
'83.#0.40.65':139
'83.##.115.202':139
'83.##.170.36':139
'83.##.32.186':445
'83.#0.49.56':445
'83.##.232.245':445
'83.##.209.175':445
'83.##.192.119':445
'83.##.205.198':445
'83.##.52.208':445
'83.##.221.144':445
'83.#0.40.65':445
'83.##.115.202':445
'83.#0.46.54':445
'83.#0.99.62':139
'83.##.155.44':139
'83.##.43.233':139
'83.##.219.170':139
'83.##.13.220':139
'83.#0.9.69':445
'83.##.182.164':445
'83.##.231.216':445
'83.##.83.155':139
'83.##.14.187':445
'83.#0.46.54':139
'83.##.194.32':139
'83.#0.19.59':139
'83.##.173.70':139
'83.##.184.132':139
'83.##.218.230':139
'83.#0.56.38':139
'83.##.155.46':139
'83.##.39.178':139
'83.##.233.225':139
'83.##.177.152':139
'83.#0.5.105':139
'83.##.133.136':139
'83.#0.84.36':139
'83.#0.63.58':445
'83.##.117.63':445
'83.#0.35.71':445
'83.##.65.241':139
'83.##.219.40':139
'83.##.67.196':139
'83.##.248.166':139
'83.##.50.118':139
'83.##.133.136':445
'83.##.39.178':445
'83.#0.56.38':445
'83.##.177.152':445
'83.#0.19.59':445
'83.##.233.225':445
'83.#0.9.69':139
'83.##.182.164':139
'83.##.231.216':139
'83.##.155.46':445
'83.##.14.187':139
'83.##.194.32':445
'83.##.67.196':445
'83.##.65.241':445
'83.##.50.118':445
'83.#0.84.36':445
'83.##.248.166':445
'83.##.218.230':445
'83.##.173.70':445
'83.##.184.132':445
'83.##.219.40':445
'83.#0.5.105':445
'83.##.229.14':139
'83.##.50.193':139
'83.#0.99.61':139
'83.##.48.181':139
'83.#0.67.36':139
'83.#0.21.31':139
'83.##.236.111':139
'83.##.56.239':139
'83.##.169.124':139
'83.##.211.204':139
'83.##.156.223':139
'83.##.83.112':445
'83.#0.35.0':445
'83.##.199.160':445
'83.##.26.131':445
'83.##.120.249':445
'83.##.166.246':445
'83.##.177.26':445
'83.##.248.26':445
'83.##.97.224':445
'83.##.112.210':445
'83.##.122.226':139
'83.##.57.147':139
'83.#0.8.232':139
'83.##.119.42':139
'83.##.77.151':139
'83.#0.5.31':139
'83.##.24.241':139
'83.##.187.223':139
'83.#0.40.13':139
'83.##.73.111':139
'83.#0.88.90':139
'83.##.134.32':139
'83.##.54.239':139
'83.##.27.235':139
'83.##.16.129':139
'83.#0.90.90':139
'83.##.31.141':139
'83.##.67.150':139
'83.#0.33.96':139
'83.##.37.118':139
'83.##.126.71':139
'83.#0.60.22':139
'83.#0.27.78':445
'83.##.43.233':445
'83.#0.99.62':445
'83.##.13.220':445
'83.##.170.36':445
'83.##.219.170':445
'83.##.120.229':139
'83.##.122.68':139
'83.##.238.208':139
'83.##.155.44':445
'83.##.83.155':445
'83.##.36.250':445
'83.##.15.194':445
'83.#0.75.85':445
'83.##.235.106':445
'83.##.100.209':445
'83.##.242.189':445
'83.##.150.204':445
'83.##.250.38':445
'83.##.185.102':445
'83.#0.143.9':445
'83.##.175.158':445
'83.##.86.167':139
'83.##.238.208':445
'83.##.120.229':445
'83.##.177.26':139
'83.##.248.26':139
'83.##.166.246':139
'83.##.206.45':445
'83.##.91.205':445
'83.##.49.183':445
'83.##.122.68':445
'83.##.86.167':445
'83.##.112.210':139
'83.#0.27.78':139
'83.##.26.131':139
'83.##.91.205':139
'83.##.49.183':139
'83.##.206.45':139
'83.#0.35.0':139
'83.##.97.224':139
'83.##.83.112':139
'83.##.120.249':139
'83.##.199.160':139
'83.#0.5.94':445
'83.#0.149.5':445
'83.##.215.231':445
'83.##.42.104':445
'83.#0.12.35':445
'83.##.147.247':445
'83.##.122.22':445
'83.##.237.164':445
'83.##.157.86':445
'83.#0.16.59':445
'83.##.174.54':445
'83.##.146.89':139
'83.##.167.189':139
'83.#0.98.94':139
'83.##.118.214':139
'83.##.23.148':139
'83.##.160.204':445
'83.##.135.40':445
'83.##.78.167':445
'83.#0.92.31':139
'83.##.104.72':139
'83.#0.35.42':445
'83.##.147.160':445
'83.##.205.150':445
'83.##.222.21':445
'83.##.238.12':445
'83.##.144.222':445
'83.##.155.125':445
'83.##.161.47':445
'83.##.167.47':445
'83.#0.5.185':445
'83.##.15.216':445
'83.##.86.191':445
'83.#0.10.74':445
'83.#0.26.70':445
'83.##.251.125':445
'83.##.48.215':445
'83.##.126.33':445
'83.##.219.76':445
'83.##.117.139':445
'83.##.73.215':445
'83.#0.25.61':445
'83.##.81.248':445
'83.##.240.122':139
'83.#0.35.42':139
'83.##.48.215':139
'83.##.122.22':139
'83.##.237.164':139
'83.##.147.247':139
'83.#0.26.70':139
'83.#0.25.61':139
'83.#0.10.74':139
'83.##.126.33':139
'83.##.251.125':139
'83.#0.16.59':139
'83.##.174.54':139
'83.##.42.104':139
'83.##.78.167':139
'83.##.160.204':139
'83.##.135.40':139
'83.#0.149.5':139
'83.##.157.86':139
'83.#0.5.94':139
'83.#0.12.35':139
'83.##.215.231':139
'83.##.81.248':139
'83.##.85.208':139
'83.#0.5.221':139
'83.##.161.47':139
'83.##.167.47':139
'83.##.155.125':139
'83.##.30.152':139
'83.##.13.241':139
'83.##.172.249':139
'83.##.49.221':139
'83.##.209.149':139
'83.##.15.216':139
'83.##.86.191':139
'83.##.238.12':139
'83.##.117.139':139
'83.##.73.215':139
'83.##.219.76':139
'83.##.205.150':139
'83.#0.5.185':139
'83.##.147.160':139
'83.##.144.222':139
'83.##.222.21':139
'83.##.215.235':445
'83.##.93.137':445
'83.##.166.223':445
'83.#0.35.71':139
'83.#0.63.58':139
'83.##.43.143':445
'83.##.18.232':445
'83.##.143.96':445
'83.##.115.127':445
'83.##.96.110':445
'83.##.117.63':139
'83.#0.20.3':139
'83.##.119.176':139
'83.##.152.171':139
'83.##.120.180':139
'83.##.165.93':139
'83.##.215.94':139
'83.##.167.50':139
'83.##.63.154':139
'83.#0.75.88':139
'83.#0.83.21':139
'83.##.140.231':445
'83.#0.20.3':445
'83.##.119.176':445
'83.##.152.171':445
'83.##.120.180':445
'83.##.165.93':445
'83.##.215.94':445
'83.##.167.50':445
'83.##.63.154':445
'83.#0.75.88':445
'83.#0.83.21':445
'83.##.134.137':445
'83.#0.31.16':445
'83.##.74.105':445
'83.##.12.128':445
'83.##.245.243':445
'83.##.173.249':445
'83.#0.40.76':445
'83.##.60.106':445
'83.##.125.18':445
'83.##.121.46':445
'83.##.27.151':445
'83.##.134.137':139
'83.##.104.72':445
'83.##.78.167':9988
'83.#0.92.31':445
'83.##.146.89':445
'83.##.167.189':445
'83.#0.149.5':9988
'83.##.147.247':9988
'83.#0.5.94':9988
'83.##.42.104':9988
'83.##.215.231':9988
'83.#0.98.94':445
'83.##.209.149':445
'83.##.172.249':445
'83.##.49.221':445
'83.##.85.208':445
'83.#0.5.221':445
'83.##.118.214':445
'83.##.23.148':445
'83.##.240.122':445
'83.##.30.152':445
'83.##.13.241':445
'83.##.122.22':9988
'83.#0.31.16':139
'83.##.74.105':139
'83.##.12.128':139
'83.##.245.243':139
'83.##.173.249':139
'83.#0.40.76':139
'83.##.60.106':139
'83.##.125.18':139
'83.##.121.46':139
'83.##.27.151':139
'83.##.140.231':139
'83.##.215.235':139
'83.##.93.137':139
'83.##.166.223':139
'83.##.251.125':9988
'83.#0.10.74':9988
'83.##.43.143':139
'83.##.18.232':139
'83.##.143.96':139
'83.##.115.127':139
'83.##.96.110':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней