Trojan.Starman.5963

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa4eb.dir00\svchost.exe.mdmp 16325836412029676

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa4eb.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'88.##.125.118':139
'88.##.248.201':139
'88.##.174.37':139
'88.##.120.83':139
'88.##.183.212':139
'88.##.191.181':139
'88.##.223.191':139
'88.##.182.72':139
'88.#6.8.167':139
'88.##.30.216':139
'88.##.83.200':139
'88.##.46.124':139
'88.##.237.252':139
'88.##.98.184':139
'88.##.166.117':139
'88.##.59.127':139
'88.##.239.78':139
'88.#6.56.58':139
'88.##.210.62':139
'88.##.126.108':139
'88.##.163.143':139
'88.##.157.121':445
'88.##.138.55':445
'88.##.226.45':445
'88.#6.50.37':445
'88.##.78.208':445
'88.##.162.178':445
'88.##.114.50':445
'88.##.191.43':445
'88.#6.76.40':445
'88.##.43.116':445
'88.##.251.51':445
'88.#6.3.251':445
'88.##.51.117':445
'88.##.200.226':139
'88.##.117.195':445
'88.##.53.235':445
'88.##.110.120':445
'88.##.235.248':445
'88.#6.245.3':445
'88.##.248.244':445
'88.#6.57.41':139
'88.##.41.170':445
'88.##.165.242':445
'88.#6.3.110':139
'88.##.188.12':139
'88.##.45.146':139
'88.##.188.12':445
'88.##.45.146':445
'88.#6.21.74':445
'88.##.220.130':445
'88.##.194.26':445
'88.##.87.241':445
'88.##.169.113':445
'88.#6.5.140':445
'88.##.84.192':445
'88.##.140.84':445
'88.##.194.26':139
'88.#6.21.74':139
'88.##.220.130':139
'88.##.41.170':139
'88.##.165.242':139
'88.#6.3.110':445
'88.##.138.55':139
'88.#6.76.40':139
'88.##.157.121':139
'88.##.78.208':139
'88.##.226.45':139
'88.##.114.50':139
'88.##.172.100':139
'88.##.162.178':139
'88.##.43.116':139
'88.##.191.43':139
'88.#6.3.251':139
'88.#6.245.3':139
'88.##.251.51':139
'88.##.117.195':139
'88.##.51.117':139
'88.##.110.120':139
'88.#6.50.37':139
'88.##.53.235':139
'88.##.248.244':139
'88.##.235.248':139
'88.##.65.188':139
'88.##.58.117':139
'88.##.218.169':139
'88.##.119.119':139
'88.##.22.119':139
'88.##.134.58':139
'88.##.33.135':139
'88.##.200.219':139
'88.#6.8.200':139
'88.#6.8.90':139
'88.#6.201.7':139
'88.##.169.221':139
'88.##.241.11':139
'88.##.74.126':139
'88.##.89.238':139
'88.##.233.30':139
'88.##.98.183':139
'88.##.30.238':139
'88.##.72.185':139
'88.#6.35.2':139
'88.#6.2.34':139
'88.##.18.126':139
'88.#6.18.44':139
'88.##.184.213':139
'88.##.35.232':139
'88.##.17.140':139
'88.##.103.111':139
'88.##.90.119':139
'88.##.111.87':139
'88.#6.86.65':139
'88.##.166.141':139
'88.##.18.143':139
'88.##.122.220':139
'88.##.119.180':139
'88.#6.8.104':139
'88.##.131.23':139
'88.##.235.180':139
'88.##.46.136':139
'88.##.190.38':139
'88.##.51.202':139
'88.##.140.103':139
'88.##.218.106':139
'88.##.183.212':445
'88.##.174.37':445
'88.##.120.83':445
'88.##.59.127':445
'88.##.239.78':445
'88.##.30.216':445
'88.##.182.72':445
'88.#6.8.167':445
'88.##.125.118':445
'88.##.248.201':445
'88.##.166.117':445
'88.##.237.252':445
'88.##.98.184':445
'88.##.172.100':445
'88.#6.57.41':445
'88.##.126.108':445
'88.#6.56.58':445
'88.##.210.62':445
'88.##.83.200':445
'88.##.46.124':445
'88.##.191.181':445
'88.##.108.33':445
'88.##.251.39':445
'88.##.222.66':445
'88.##.113.82':139
'88.##.20.201':445
'88.##.113.82':445
'88.##.117.165':139
'88.##.160.76':445
'88.##.247.251':445
'88.##.102.248':445
'88.##.20.201':139
'88.##.222.66':139
'88.##.200.226':445
'88.##.223.191':445
'88.##.163.143':445
'88.##.102.248':139
'88.##.160.76':139
'88.##.247.251':139
'88.##.108.33':139
'88.##.251.39':139
'88.#6.60.61':445
'88.##.53.118':445
'88.##.66.239':445
'88.##.107.25':445
'88.#6.8.87':445
'88.##.37.136':445
'88.##.187.37':445
'88.##.89.199':445
'88.#6.126.6':445
'88.##.142.249':445
'88.##.135.122':139
'88.##.131.211':139
'88.##.107.213':139
'88.##.63.170':139
'88.#6.162.9':139
'88.##.55.135':139
'88.##.249.106':445
'88.##.134.185':139
'88.##.78.149':139
'88.##.185.92':139
'88.##.176.187':445
'88.##.60.135':445
'88.##.15.139':445
'88.##.169.118':445
'88.##.121.32':445
'88.##.200.218':445
'88.##.30.245':445
'88.##.209.184':445
'88.##.199.50':445
'88.##.94.132':445
'88.##.248.100':445
'88.##.61.100':445
'88.##.78.247':445
'88.##.18.141':445
'88.##.196.176':445
'88.##.197.230':445
'88.##.176.198':445
'88.#6.2.68':445
'88.##.197.192':445
'88.#6.11.92':445
'88.##.232.20':445
'88.##.28.194':139
'88.##.197.230':139
'88.##.18.141':139
'88.##.196.176':139
'88.##.187.37':139
'88.##.176.187':139
'88.##.232.20':139
'88.##.197.192':139
'88.#6.11.92':139
'88.##.61.100':139
'88.##.78.247':139
'88.##.66.239':139
'88.#6.60.61':139
'88.#6.8.87':139
'88.##.107.25':139
'88.##.249.106':139
'88.##.89.199':139
'88.##.37.136':139
'88.##.142.249':139
'88.##.53.118':139
'88.#6.126.6':139
'88.##.176.198':139
'88.##.145.193':139
'88.##.18.157':139
'88.##.59.210':139
'88.##.209.184':139
'88.##.244.62':139
'88.##.174.39':139
'88.##.250.172':139
'88.##.82.112':139
'88.#6.3.88':139
'88.#6.6.212':139
'88.##.169.118':139
'88.##.60.135':139
'88.##.200.218':139
'88.#6.2.68':139
'88.##.121.32':139
'88.##.199.50':139
'88.##.30.245':139
'88.##.248.100':139
'88.##.15.139':139
'88.##.94.132':139
'88.##.140.84':139
'88.#6.5.140':139
'88.##.84.192':139
'88.##.27.165':139
'88.##.36.233':139
'88.##.213.10':445
'88.#6.0.167':445
'88.#6.45.55':445
'88.##.87.241':139
'88.##.169.113':139
'88.#6.22.43':139
'88.##.120.22':139
'88.#6.43.73':139
'88.##.84.226':139
'88.##.69.186':139
'88.#6.8.178':139
'88.##.124.115':139
'88.##.29.120':139
'88.##.193.71':139
'88.##.29.162':139
'88.##.42.251':445
'88.##.193.71':445
'88.##.29.162':445
'88.##.120.22':445
'88.#6.43.73':445
'88.#6.22.43':445
'88.##.27.165':445
'88.##.36.233':445
'88.##.124.115':445
'88.##.29.120':445
'88.#6.8.178':445
'88.##.147.43':445
'88.##.206.218':445
'88.##.28.216':445
'88.##.255.60':445
'88.##.241.199':445
'88.##.84.226':445
'88.##.69.186':445
'88.##.235.211':445
'88.##.156.54':445
'88.##.211.158':445
'88.##.235.211':139
'88.##.135.122':445
'88.##.78.149':445
'88.##.107.213':445
'88.##.63.170':445
'88.#6.162.9':445
'88.##.55.135':445
'88.##.53.118':9988
'88.##.134.185':445
'88.##.131.211':445
'88.##.185.92':445
'88.##.18.157':445
'88.#6.3.88':445
'88.##.145.193':445
'88.##.244.62':445
'88.##.59.210':445
'88.##.250.172':445
'88.##.28.194':445
'88.##.174.39':445
'88.#6.6.212':445
'88.##.82.112':445
'88.##.66.239':9988
'88.##.255.60':139
'88.##.241.199':139
'88.##.42.251':139
'88.##.213.10':139
'88.#6.0.167':139
'88.##.156.54':139
'88.##.211.158':139
'88.##.206.218':139
'88.##.28.216':139
'88.##.147.43':139
'88.##.199.50':9988
'88.##.248.100':9988
'88.##.94.132':9988
'88.##.176.187':9988
'88.##.176.198':9988
'88.##.55.135':9988
'88.#6.45.55':139
'88.#6.162.9':9988
'88.##.82.112':9988
'88.##.174.39':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней