Trojan.Starman.5962

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER3830.dir00\svchost.exe.mdmp 16325836412027416

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3830.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'62.##0.1.167':139
'62.##0.177.1':139
'62.##0.66.156':139
'62.##0.198.201':139
'62.##0.47.103':139
'62.##0.74.81':139
'62.##0.87.243':139
'62.##0.63.226':139
'62.##0.53.88':139
'62.##0.10.52':139
'62.##0.188.244':139
'62.##0.209.143':139
'62.##0.92.101':139
'62.##0.107.35':139
'62.##0.202.236':139
'62.##0.67.117':139
'62.##0.84.249':139
'62.##0.196.138':139
'62.##0.121.18':139
'62.##0.21.195':139
'62.##0.92.220':139
'62.##0.221.43':139
'62.##0.9.142':445
'62.##0.202.236':445
'62.##0.17.184':445
'62.##0.94.61':445
'62.##0.116.89':445
'62.##0.92.101':445
'62.##0.21.195':445
'62.##0.209.143':445
'62.##0.67.117':445
'62.##0.107.35':445
'62.##0.79.92':445
'62.##0.185.189':139
'62.##0.146.186':139
'62.##0.189.245':139
'62.##0.141.9':139
'62.#30.42.4':139
'62.##0.245.82':445
'62.##0.113.52':445
'62.##0.193.55':445
'62.#30.37.6':139
'62.##0.235.55':139
'62.##0.9.142':139
'62.##0.246.210':139
'62.##0.52.21':139
'62.##0.168.221':139
'62.##0.176.250':139
'62.##0.185.45':139
'62.##0.163.23':139
'62.##0.168.92':139
'62.##0.209.136':139
'62.##0.114.52':139
'62.##0.153.114':139
'62.##0.156.105':139
'62.##0.82.52':445
'62.##0.109.11':445
'62.##0.50.63':445
'62.##0.4.195':445
'62.##0.18.34':445
'62.##0.4.184':139
'62.##0.233.4':139
'62.##0.90.139':445
'62.##0.190.40':445
'62.##0.130.31':445
'62.##0.100.161':139
'62.##0.193.55':139
'62.##0.245.82':139
'62.##0.100.161':445
'62.##0.163.23':445
'62.##0.168.92':445
'62.##0.116.89':139
'62.##0.17.184':139
'62.##0.94.61':139
'62.##0.113.52':139
'62.##0.79.92':139
'62.##0.209.136':445
'62.##0.176.250':445
'62.##0.185.45':445
'62.##0.156.105':445
'62.##0.4.184':445
'62.##0.233.4':445
'62.##0.114.52':445
'62.##0.153.114':445
'62.##0.52.21':445
'62.##0.168.221':445
'62.##0.246.210':445
'62.##0.92.220':445
'62.##0.70.100':139
'62.##0.0.206':139
'62.##0.100.188':139
'62.##0.90.187':139
'62.##0.220.133':139
'62.##0.206.29':139
'62.##0.214.13':139
'62.##0.225.181':139
'62.##0.169.180':139
'62.##0.124.195':139
'62.##0.250.72':139
'62.##0.170.79':445
'62.##0.254.66':445
'62.#30.7.8':445
'62.##0.43.224':445
'62.##0.70.52':445
'62.##0.135.122':139
'62.##0.72.85':139
'62.#30.12.1':139
'62.##0.150.15':445
'62.##0.255.234':139
'62.##0.43.29':139
'62.##0.45.42':139
'62.##0.53.74':139
'62.##0.140.8':139
'62.##0.99.28':139
'62.##0.100.17':139
'62.##0.55.230':139
'62.##0.57.19':139
'62.##0.190.28':139
'62.##0.122.118':139
'62.#30.39.8':139
'62.##0.99.54':139
'62.##0.57.48':139
'62.##0.141.117':139
'62.##0.59.100':139
'62.##0.116.69':139
'62.##0.160.196':139
'62.##0.137.216':139
'62.##0.74.16':139
'62.##0.8.103':139
'62.##0.239.68':139
'62.##0.12.239':139
'62.##0.94.80':445
'62.##0.221.43':445
'62.##0.141.9':445
'62.##0.87.243':445
'62.##0.63.226':445
'62.##0.74.81':445
'62.##0.146.186':445
'62.#30.37.6':445
'62.##0.185.189':445
'62.#30.42.4':445
'62.##0.189.245':445
'62.##0.10.52':445
'62.##0.188.244':445
'62.##0.198.201':445
'62.##0.196.138':445
'62.##0.121.18':445
'62.##0.84.249':445
'62.##0.177.1':445
'62.##0.53.88':445
'62.##0.1.167':445
'62.##0.47.103':445
'62.##0.66.156':445
'62.##0.235.55':445
'62.##0.18.36':445
'62.##0.172.159':445
'62.##0.150.15':139
'62.##0.170.79':139
'62.##0.254.66':139
'62.##0.23.184':445
'62.##0.219.23':445
'62.##0.2.143':445
'62.##0.215.172':445
'62.##0.153.108':445
'62.#30.7.8':139
'62.##0.153.108':139
'62.##0.2.143':139
'62.##0.215.172':139
'62.##0.18.36':139
'62.##0.172.159':139
'62.##0.43.224':139
'62.##0.70.52':139
'62.##0.94.80':139
'62.##0.23.184':139
'62.##0.219.23':139
'62.##0.79.132':445
'62.##0.38.182':445
'62.##0.198.137':445
'62.##0.125.242':445
'62.##0.49.205':445
'62.##0.85.127':445
'62.##0.249.148':445
'62.##0.149.145':445
'62.##0.127.229':445
'62.##0.249.46':445
'62.##0.60.10':445
'62.##0.93.74':139
'62.##0.177.150':139
'62.##0.220.28':139
'62.##0.161.238':139
'62.##0.197.104':139
'62.##0.145.21':445
'62.##0.115.167':445
'62.##0.41.89':445
'62.##0.12.178':139
'62.##0.250.31':139
'62.##0.218.249':445
'62.##0.152.189':445
'62.##0.165.11':445
'62.##0.188.204':445
'62.##0.123.3':445
'62.##0.204.173':445
'62.##0.114.172':445
'62.##0.223.113':445
'62.##0.89.29':445
'62.##0.197.71':445
'62.##0.110.196':445
'62.##0.42.239':445
'62.##0.187.168':445
'62.##0.66.166':445
'62.##0.168.113':445
'62.#30.0.89':445
'62.#30.0.47':445
'62.##0.185.138':445
'62.##0.99.18':445
'62.##0.73.88':445
'62.##0.191.218':445
'62.##0.163.200':445
'62.##0.238.82':139
'62.##0.218.249':139
'62.#30.0.89':139
'62.##0.249.148':139
'62.##0.85.127':139
'62.##0.149.145':139
'62.##0.66.166':139
'62.##0.191.218':139
'62.##0.187.168':139
'62.#30.0.47':139
'62.##0.168.113':139
'62.##0.249.46':139
'62.##0.41.89':139
'62.##0.125.242':139
'62.##0.115.167':139
'62.##0.145.21':139
'62.##0.60.10':139
'62.##0.38.182':139
'62.##0.127.229':139
'62.##0.79.132':139
'62.##0.49.205':139
'62.##0.198.137':139
'62.##0.163.200':139
'62.##0.65.130':139
'62.##0.198.169':139
'62.##0.223.113':139
'62.##0.89.29':139
'62.##0.114.172':139
'62.##0.96.237':139
'62.##0.213.64':139
'62.##0.26.231':139
'62.##0.238.198':139
'62.##0.74.220':139
'62.##0.110.196':139
'62.##0.42.239':139
'62.##0.123.3':139
'62.##0.99.18':139
'62.##0.73.88':139
'62.##0.185.138':139
'62.##0.165.11':139
'62.##0.197.71':139
'62.##0.152.189':139
'62.##0.204.173':139
'62.##0.188.204':139
'62.##0.65.130':445
'62.##0.127.171':445
'62.##0.106.254':445
'62.##0.90.139':139
'62.##0.190.40':139
'62.##0.130.31':139
'62.##0.141.218':445
'62.##0.35.252':445
'62.##0.195.85':445
'62.##0.6.108':445
'62.#30.85.6':445
'62.##0.109.11':139
'62.##0.143.188':139
'62.##0.226.143':139
'62.##0.188.100':139
'62.##0.108.198':139
'62.##0.100.51':139
'62.##0.50.63':139
'62.##0.82.52':139
'62.##0.18.34':139
'62.##0.44.167':139
'62.##0.4.195':139
'62.##0.166.35':445
'62.##0.242.223':445
'62.##0.108.198':445
'62.##0.166.195':445
'62.##0.235.5':445
'62.#30.96.3':445
'62.##0.226.143':445
'62.##0.44.167':445
'62.##0.143.188':445
'62.##0.100.51':445
'62.##0.188.100':445
'62.##0.77.70':445
'62.#30.72.2':445
'62.##0.100.40':445
'62.##0.117.40':445
'62.##0.185.204':445
'62.##0.143.16':445
'62.##0.163.54':445
'62.##0.1.181':445
'62.##0.167.0':445
'62.##0.38.97':445
'62.##0.105.21':445
'62.##0.242.223':139
'62.##0.60.10':9988
'62.##0.145.21':9988
'62.##0.250.31':445
'62.##0.177.150':445
'62.##0.12.178':445
'62.##0.85.127':9988
'62.##0.66.166':9988
'62.##0.218.249':9988
'62.##0.38.182':9988
'62.##0.249.46':9988
'62.##0.93.74':445
'62.##0.26.231':445
'62.##0.96.237':445
'62.##0.74.220':445
'62.##0.198.169':445
'62.##0.238.198':445
'62.##0.197.104':445
'62.##0.220.28':445
'62.##0.161.238':445
'62.##0.213.64':445
'62.##0.238.82':445
'62.##0.127.171':139
'62.##0.167.0':139
'62.##0.163.54':139
'62.##0.105.21':139
'62.##0.100.40':139
'62.##0.38.97':139
'62.#30.96.3':139
'62.##0.166.195':139
'62.##0.235.5':139
'62.##0.1.181':139
'62.##0.77.70':139
'62.#30.72.2':139
'62.##0.195.85':139
'62.##0.141.218':139
'62.#30.85.6':139
'62.##0.106.254':139
'62.##0.6.108':139
'62.##0.143.16':139
'62.##0.117.40':139
'62.##0.185.204':139
'62.##0.35.252':139
'62.##0.166.35':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней