Trojan.Starman.5338

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER54ff.dir00\svchost.exe.mdmp 16325836412032252

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER54ff.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'69.##4.103.251':139
'69.##4.50.251':139
'69.##4.252.47':139
'69.##4.4.254':139
'69.##4.47.125':139
'69.##4.161.8':139
'69.##4.65.50':139
'69.##4.95.35':139
'69.##4.32.67':139
'69.##4.34.173':139
'69.##4.228.181':139
'69.##4.75.62':445
'69.##4.243.184':445
'69.##4.11.213':445
'69.##4.218.45':445
'69.##4.125.213':445
'69.##4.188.129':139
'69.##4.215.16':139
'69.##4.142.125':139
'69.##4.88.34':445
'69.##4.109.8':139
'69.##4.32.67':445
'69.##4.34.173':445
'69.##4.50.251':445
'69.##4.252.47':445
'69.##4.103.251':445
'69.##4.181.63':445
'69.##4.13.223':445
'69.##4.65.50':445
'69.##4.95.35':445
'69.##4.161.8':445
'69.##4.47.125':445
'69.##4.205.124':139
'69.##4.109.8':445
'69.##4.124.191':139
'69.##4.181.63':139
'69.##4.13.223':139
'69.##4.228.181':445
'69.##4.4.254':445
'69.##4.215.16':445
'69.##4.142.125':445
'69.##4.188.129':445
'69.##4.232.2':445
'69.##4.75.62':139
'69.##4.243.184':139
'69.##4.11.213':139
'69.##4.218.45':139
'69.##4.125.213':139
'69.##4.76.160':445
'69.##4.146.93':445
'69.##4.47.77':445
'69.##4.88.34':139
'69.#54.43.6':445
'69.##4.232.2':139
'69.##4.239.95':139
'69.##4.9.173':139
'69.##4.3.238':139
'69.##4.115.192':139
'69.##4.52.60':139
'69.##4.109.195':139
'69.##4.235.195':139
'69.##4.91.181':139
'69.##4.18.145':139
'69.##4.70.136':139
'69.##4.239.95':445
'69.##4.9.173':445
'69.##4.3.238':445
'69.##4.115.192':445
'69.##4.52.60':445
'69.##4.109.195':445
'69.##4.235.195':445
'69.##4.91.181':445
'69.##4.18.145':445
'69.##4.70.136':445
'69.##4.1.206':445
'69.##4.42.138':445
'69.##4.199.103':445
'69.##4.170.100':445
'69.##4.201.78':445
'69.##4.81.30':445
'69.##4.49.196':445
'69.##4.205.82':445
'69.##4.196.78':445
'69.##4.103.199':445
'69.##4.79.103':445
'69.##4.92.53':445
'69.##4.155.92':445
'69.#54.12.3':445
'69.##4.52.78':445
'69.##4.131.73':445
'69.##4.167.199':445
'69.##4.50.22':445
'69.##4.7.137':445
'69.##4.178.155':445
'69.##4.117.138':445
'69.##4.203.175':445
'69.##4.11.253':445
'69.##4.174.115':445
'69.##4.35.209':445
'69.##4.67.174':445
'69.##4.231.206':445
'69.##4.190.12':445
'69.##4.176.189':445
'69.##4.12.99':445
'69.##4.186.34':445
'69.##4.98.186':445
'69.##4.121.90':139
'69.##4.105.121':139
'69.##4.89.227':139
'69.##4.229.78':139
'69.##4.227.20':139
'69.##4.193.216':139
'69.##4.118.139':139
'69.##4.216.145':139
'69.##4.192.104':139
'69.##4.27.172':139
'69.##4.155.169':139
'69.##4.146.226':139
'69.##4.147.183':139
'69.##4.59.180':139
'69.##4.92.198':445
'69.##4.232.92':445
'69.##4.23.200':139
'69.##4.118.153':139
'69.##4.200.87':139
'69.##4.125.140':139
'69.##4.87.253':139
'69.##4.121.206':445
'69.##4.11.253':139
'69.##4.174.115':139
'69.##4.35.209':139
'69.##4.67.174':139
'69.##4.231.206':139
'69.##4.190.12':139
'69.##4.176.189':139
'69.##4.12.99':139
'69.##4.186.34':139
'69.##4.98.186':139
'69.##4.121.206':139
'69.##4.79.233':139
'69.##4.197.192':139
'69.##4.232.204':139
'69.##4.124.191':445
'69.##4.205.124':445
'69.#54.32.0':139
'69.#54.46.4':139
'69.##4.224.120':139
'69.##4.197.34':139
'69.##4.121.154':139
'69.##4.79.233':445
'69.##4.197.192':445
'69.##4.232.204':445
'69.##4.92.198':139
'69.##4.232.92':139
'69.#54.32.0':445
'69.#54.46.4':445
'69.##4.224.120':445
'69.##4.197.34':445
'69.##4.121.154':445
'69.##4.50.22':139
'69.#54.12.3':139
'69.##4.92.53':139
'69.##4.131.73':139
'69.##4.203.175':139
'69.##4.52.78':139
'69.##4.7.137':139
'69.##4.167.199':139
'69.##4.117.138':139
'69.##4.155.92':139
'69.##4.178.155':139
'69.##4.1.206':139
'69.##4.199.68':445
'69.##4.177.146':445
'69.##4.226.200':445
'69.##4.167.81':445
'69.##4.153.248':445
'69.##4.118.194':445
'69.##4.48.119':445
'69.##4.194.228':445
'69.##4.114.158':445
'69.##4.70.166':445
'69.##4.165.245':445
'69.##4.92.15':139
'69.##4.240.68':139
'69.##4.64.198':139
'69.##4.194.152':139
'69.##4.251.193':139
'69.##4.61.154':445
'69.##4.248.228':445
'69.##4.191.0':139
'69.##4.197.240':139
'69.##4.227.197':139
'69.##4.80.168':445
'69.##4.28.20':445
'69.##4.68.218':445
'69.##4.56.234':445
'69.##4.226.16':445
'69.##4.16.138':445
'69.##4.90.18':445
'69.##4.130.131':445
'69.##4.7.244':445
'69.##4.131.116':445
'69.#54.72.4':445
'69.##4.186.237':445
'69.##4.94.249':445
'69.##4.69.12':445
'69.##4.241.48':445
'69.##4.236.96':445
'69.##4.90.54':445
'69.##4.1.199':445
'69.##4.255.119':445
'69.##4.137.246':445
'69.##4.74.137':445
'69.##4.152.216':139
'69.##4.236.96':139
'69.##4.69.12':139
'69.##4.241.48':139
'69.##4.118.194':139
'69.##4.48.119':139
'69.##4.74.137':139
'69.##4.255.119':139
'69.##4.137.246':139
'69.##4.186.237':139
'69.##4.94.249':139
'69.##4.194.228':139
'69.##4.248.228':139
'69.##4.165.245':139
'69.##4.167.81':139
'69.##4.61.154':139
'69.##4.153.248':139
'69.##4.114.158':139
'69.##4.70.166':139
'69.##4.177.146':139
'69.##4.226.200':139
'69.##4.199.68':139
'69.##4.192.10':139
'69.##4.91.191':139
'69.##4.11.130':139
'69.##4.16.138':139
'69.##4.90.18':139
'69.##4.4.177':139
'69.##4.217.211':139
'69.#54.0.53':139
'69.##4.156.91':139
'69.##4.242.170':139
'69.##4.130.131':139
'69.##4.56.234':139
'69.##4.226.16':139
'69.#54.72.4':139
'69.##4.90.54':139
'69.##4.1.199':139
'69.##4.7.244':139
'69.##4.131.116':139
'69.##4.28.20':139
'69.##4.68.218':139
'69.##4.80.168':139
'69.##4.212.243':445
'69.##4.169.209':445
'69.##4.106.216':445
'69.##4.156.173':445
'69.##4.235.214':445
'69.#54.64.5':445
'69.##4.52.64':445
'69.##4.29.70':445
'69.##4.102.105':445
'69.##4.53.102':445
'69.##4.149.232':445
'69.##4.61.184':139
'69.##4.13.141':139
'69.##4.9.190':139
'69.#54.64.5':139
'69.##4.52.64':139
'69.##4.215.169':139
'69.##4.19.11':445
'69.##4.176.63':139
'69.##4.98.180':139
'69.##4.39.202':139
'69.##4.42.138':139
'69.##4.199.103':139
'69.##4.170.100':139
'69.##4.201.78':139
'69.##4.81.30':139
'69.##4.49.196':139
'69.##4.205.82':139
'69.##4.196.78':139
'69.##4.103.199':139
'69.##4.79.103':139
'69.##4.146.93':139
'69.##4.98.180':445
'69.##4.39.202':445
'69.##4.13.141':445
'69.##4.9.190':445
'69.##4.61.184':445
'69.##4.47.77':139
'69.##4.76.160':139
'69.#54.43.6':139
'69.##4.176.63':445
'69.##4.215.169':445
'69.##4.29.70':139
'69.##4.197.240':445
'69.##4.227.197':445
'69.##4.240.68':445
'69.##4.64.198':445
'69.##4.92.15':445
'69.##4.177.146':9988
'69.##4.114.158':9988
'69.##4.199.68':9988
'69.##4.191.0':445
'69.##4.165.245':9988
'69.##4.251.193':445
'69.##4.156.91':445
'69.##4.242.170':445
'69.##4.91.191':445
'69.##4.11.130':445
'69.##4.192.10':445
'69.##4.152.216':445
'69.##4.194.152':445
'69.##4.217.211':445
'69.#54.0.53':445
'69.##4.4.177':445
'69.##4.156.173':139
'69.##4.235.214':139
'69.##4.149.232':139
'69.##4.28.20':9988
'69.##4.19.11':139
'69.##4.102.105':139
'69.##4.53.102':139
'69.##4.169.209':139
'69.##4.106.216':139
'69.##4.212.243':139
'69.##4.68.218':9988
'69.##4.186.237':9988
'69.##4.94.249':9988
'69.##4.69.12':9988
'69.##4.70.166':9988
'69.##4.236.96':9988
'69.##4.90.54':9988
'69.#54.72.4':9988
'69.##4.255.119':9988
'69.##4.137.246':9988
'69.##4.74.137':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней