Trojan.Starman.5951

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERbd79.dir00\svchost.exe.mdmp 16325836412032088

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERbd79.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'66.##5.226.170':139
'66.##5.160.162':139
'66.##5.75.76':139
'66.##5.196.145':139
'66.##5.195.215':139
'66.##5.56.71':139
'66.##5.132.72':139
'66.#15.37.5':445
'66.##5.33.219':445
'66.##5.119.162':139
'66.##5.80.60':139
'66.##5.216.62':139
'66.##5.215.110':139
'66.##5.90.92':139
'66.##5.37.46':139
'66.##5.58.143':139
'66.##5.32.111':139
'66.##5.79.171':139
'66.##5.70.75':139
'66.##5.87.143':139
'66.##5.24.39':139
'66.##5.103.76':139
'66.##5.137.15':139
'66.##5.16.221':139
'66.#15.30.0':139
'66.##5.91.169':445
'66.##5.247.200':445
'66.##5.235.184':445
'66.##5.34.142':445
'66.##5.143.96':445
'66.##5.246.52':445
'66.##5.212.201':445
'66.##5.135.213':445
'66.##5.13.136':445
'66.##5.170.141':445
'66.##5.101.30':445
'66.##5.201.246':445
'66.##5.25.90':445
'66.##5.78.151':445
'66.##5.194.194':445
'66.##5.175.28':445
'66.##5.244.29':445
'66.##5.127.90':445
'66.##5.188.8':445
'66.##5.20.248':445
'66.##5.60.193':445
'66.##5.130.25':445
'66.##5.106.120':445
'66.##5.60.62':445
'66.##5.96.16':445
'66.##5.47.178':445
'66.##5.109.65':445
'66.##5.32.59':445
'66.##5.38.181':445
'66.##5.0.224':445
'66.##5.155.198':445
'66.##5.145.51':445
'66.#15.37.5':139
'66.##5.33.219':139
'66.##5.150.54':445
'66.##5.51.143':445
'66.##5.145.51':139
'66.##5.54.15':445
'66.##5.64.28':445
'66.##5.253.121':445
'66.##5.139.166':445
'66.##5.98.193':445
'66.##5.1.234':445
'66.##5.245.211':445
'66.##5.33.164':445
'66.##5.179.23':445
'66.##5.15.111':445
'66.##5.16.234':445
'66.##5.24.17':445
'66.##5.248.213':445
'66.##5.91.169':139
'66.##5.247.200':139
'66.##5.235.184':139
'66.##5.34.142':139
'66.##5.143.96':139
'66.##5.246.52':139
'66.##5.212.201':139
'66.##5.135.213':139
'66.##5.13.136':139
'66.##5.170.141':139
'66.##5.101.30':139
'66.##5.201.246':139
'66.##5.25.90':139
'66.##5.78.151':139
'66.##5.194.194':139
'66.##5.175.28':139
'66.##5.244.29':139
'66.##5.127.90':139
'66.##5.188.8':139
'66.##5.20.248':139
'66.##5.60.193':139
'66.##5.130.25':139
'66.##5.106.120':139
'66.##5.60.62':139
'66.##5.96.16':139
'66.##5.32.111':445
'66.##5.55.95':139
'66.##5.107.38':139
'66.##5.49.186':139
'66.##5.53.70':139
'66.##5.86.253':139
'66.##5.10.206':139
'66.##5.25.148':139
'66.##5.251.34':139
'66.##5.182.226':445
'66.##5.164.18':139
'66.##5.50.240':139
'66.#15.2.49':139
'66.##5.215.91':139
'66.##5.196.77':139
'66.##5.172.18':139
'66.##5.18.165':139
'66.##5.233.166':139
'66.##5.203.58':139
'66.##5.122.253':139
'66.##5.110.207':139
'66.##5.1.224':139
'66.##5.39.163':139
'66.##5.130.246':139
'66.##5.40.197':139
'66.##5.30.96':139
'66.##5.49.189':445
'66.##5.28.54':445
'66.##5.189.37':445
'66.##5.111.17':445
'66.##5.136.118':445
'66.##5.114.198':445
'66.##5.146.222':445
'66.##5.11.40':445
'66.##5.76.149':445
'66.##5.86.114':445
'66.##5.185.238':445
'66.##5.181.95':445
'66.##5.66.98':445
'66.##5.179.84':445
'66.##5.55.251':445
'66.##5.205.55':445
'66.##5.220.95':445
'66.##5.126.101':445
'66.##5.46.222':445
'66.##5.234.4':445
'66.##5.116.2':445
'66.##5.150.208':445
'66.##5.115.205':445
'66.##5.172.120':445
'66.#15.85.9':445
'66.##5.160.162':445
'66.##5.75.76':445
'66.##5.119.162':445
'66.##5.195.215':445
'66.##5.56.71':445
'66.##5.226.170':445
'66.##5.7.168':139
'66.##5.7.168':445
'66.##5.182.226':139
'66.##5.80.60':445
'66.##5.216.62':445
'66.##5.132.72':445
'66.##5.196.145':445
'66.##5.37.46':445
'66.##5.58.143':445
'66.##5.137.15':445
'66.##5.79.171':445
'66.##5.70.75':445
'66.##5.90.92':445
'66.##5.24.39':445
'66.##5.103.76':445
'66.##5.215.110':445
'66.##5.16.221':445
'66.#15.30.0':445
'66.##5.87.143':445
'66.##5.49.189':139
'66.##5.28.54':139
'66.##5.189.37':139
'66.##5.111.17':139
'66.##5.136.118':139
'66.##5.114.198':139
'66.##5.146.222':139
'66.##5.11.40':139
'66.##5.76.149':139
'66.##5.86.114':139
'66.##5.185.238':139
'66.##5.181.95':139
'66.##5.66.98':139
'66.##5.179.84':139
'66.##5.55.251':139
'66.##5.205.55':139
'66.##5.220.95':139
'66.##5.126.101':139
'66.##5.46.222':139
'66.##5.234.4':139
'66.##5.116.2':139
'66.##5.150.208':139
'66.##5.115.205':139
'66.##5.172.120':139
'66.#15.85.9':139
'66.##5.178.227':445
'66.##5.190.96':445
'66.##5.204.47':445
'66.##5.233.32':445
'66.##5.165.53':445
'66.##5.233.105':445
'66.##5.75.29':445
'66.##5.99.115':445
'66.##5.155.0':445
'66.##5.230.93':445
'66.##5.67.181':445
'66.##5.97.12':445
'66.##5.76.164':445
'66.##5.122.63':445
'66.##5.204.1':445
'66.##5.42.111':445
'66.##5.18.137':445
'66.##5.2.234':139
'66.#15.82.0':445
'66.##5.108.157':445
'66.##5.237.23':445
'66.##5.182.249':445
'66.#15.0.81':445
'66.##5.29.86':445
'66.##5.162.28':445
'66.##5.121.168':445
'66.##5.222.219':445
'66.##5.116.77':445
'66.##5.142.37':445
'66.##5.119.196':445
'66.#15.6.85':445
'66.##5.247.112':445
'66.##5.29.197':445
'66.##5.167.214':445
'66.##5.100.167':445
'66.##5.160.204':445
'66.##5.58.197':445
'66.##5.153.58':445
'66.##5.200.204':445
'66.##5.76.237':445
'66.##5.106.76':445
'66.##5.255.105':445
'66.##5.164.213':445
'66.##5.138.68':445
'66.##5.237.111':445
'66.##5.52.31':445
'66.##5.156.239':445
'66.##5.109.88':445
'66.##5.84.238':445
'66.##5.111.72':445
'66.##5.34.14':445
'66.##5.204.47':139
'66.##5.233.32':139
'66.##5.67.181':139
'66.##5.233.105':139
'66.##5.75.29':139
'66.##5.190.96':139
'66.##5.230.93':139
'66.##5.155.0':139
'66.##5.164.213':139
'66.##5.97.12':139
'66.##5.76.164':139
'66.##5.99.115':139
'66.##5.165.53':139
'66.#15.82.0':139
'66.##5.42.111':139
'66.##5.18.137':139
'66.##5.108.157':139
'66.##5.121.168':139
'66.##5.204.1':139
'66.##5.237.23':139
'66.#15.0.81':139
'66.##5.122.63':139
'66.##5.29.86':139
'66.##5.162.28':139
'66.##5.182.249':139
'66.##5.116.77':139
'66.##5.142.37':139
'66.##5.160.204':139
'66.##5.119.196':139
'66.##5.247.112':139
'66.##5.222.219':139
'66.##5.167.214':139
'66.##5.100.167':139
'66.##5.233.100':139
'66.##5.58.197':139
'66.##5.153.58':139
'66.##5.29.197':139
'66.#15.6.85':139
'66.##5.106.76':139
'66.##5.255.105':139
'66.##5.84.238':139
'66.##5.138.68':139
'66.##5.237.111':139
'66.##5.76.237':139
'66.##5.156.239':139
'66.##5.109.88':139
'66.##5.200.204':139
'66.##5.111.72':139
'66.##5.34.14':139
'66.##5.52.31':139
'66.##5.233.100':445
'66.##5.155.198':139
'66.##5.47.178':139
'66.##5.109.65':139
'66.##5.54.15':139
'66.##5.38.181':139
'66.##5.0.224':139
'66.##5.17.136':445
'66.##5.225.78':445
'66.##5.251.179':445
'66.##5.32.59':139
'66.##5.150.54':139
'66.##5.51.143':139
'66.##5.15.111':139
'66.##5.245.211':139
'66.##5.64.28':139
'66.##5.253.121':139
'66.##5.178.227':139
'66.##5.98.193':139
'66.##5.1.234':139
'66.##5.248.213':139
'66.##5.33.164':139
'66.##5.179.23':139
'66.##5.139.166':139
'66.##5.16.234':139
'66.##5.24.17':139
'66.##5.136.41':445
'66.##5.116.135':445
'66.##5.51.242':445
'66.#15.8.50':445
'66.##5.154.247':445
'66.##5.49.81':445
'66.##5.25.61':445
'66.##5.148.214':445
'66.##5.174.149':445
'66.##5.125.85':445
'66.##5.204.0':445
'66.##5.21.47':445
'66.##5.68.247':445
'66.##5.64.84':445
'66.##5.110.64':445
'66.##5.180.109':445
'66.##5.182.84':445
'66.##5.85.81':445
'66.##5.84.31':445
'66.##5.28.101':445
'66.##5.54.250':445
'66.##5.15.129':445
'66.##5.196.179':445
'66.##5.71.91':445
'66.##5.100.211':445
'66.##5.164.213':9988
'66.##5.237.111':9988
'66.##5.76.237':9988
'66.##5.76.164':9988
'66.##5.99.115':9988
'66.##5.155.0':9988
'66.##5.17.136':139
'66.##5.225.78':139
'66.##5.251.179':139
'66.##5.255.105':9988
'66.#15.23.3':139
'66.#15.23.3':445
'66.##5.67.181':9988
'66.##5.162.28':9988
'66.#15.0.81':9988
'66.##5.122.63':9988
'66.##5.2.234':445
'66.##5.204.1':9988
'66.##5.42.111':9988
'66.##5.190.96':9988
'66.##5.204.47':9988
'66.##5.233.32':9988
'66.##5.233.105':9988
'66.##5.165.53':9988
'66.##5.75.29':9988
'66.##5.136.41':139
'66.##5.116.135':139
'66.##5.51.242':139
'66.#15.8.50':139
'66.##5.154.247':139
'66.##5.49.81':139
'66.##5.25.61':139
'66.##5.148.214':139
'66.##5.174.149':139
'66.##5.125.85':139
'66.##5.204.0':139
'66.##5.21.47':139
'66.##5.68.247':139
'66.##5.64.84':139
'66.##5.110.64':139
'66.##5.180.109':139
'66.##5.182.84':139
'66.##5.85.81':139
'66.##5.84.31':139
'66.##5.28.101':139
'66.##5.54.250':139
'66.##5.15.129':139
'66.##5.196.179':139
'66.##5.71.91':139
'66.##5.100.211':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней