Trojan.Starman.6522

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER5084.dir00\svchost.exe.mdmp 16325836412032268

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5084.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'58.##4.132.119':139
'58.##4.83.156':139
'58.##4.222.122':139
'58.##4.152.170':139
'58.##4.75.32':139
'58.##4.36.232':139
'58.##4.207.193':139
'58.##4.50.247':139
'58.##4.31.57':139
'58.##4.127.103':139
'58.##4.178.18':139
'58.##4.200.201':139
'58.#54.25.6':139
'58.##4.201.147':139
'58.##4.136.134':139
'58.##4.147.142':139
'58.##4.196.154':139
'58.##4.207.14':139
'58.##4.90.75':139
'58.##4.94.152':139
'58.##4.188.88':139
'58.##4.54.249':139
'58.##4.200.201':445
'58.#54.25.6':445
'58.##4.201.147':445
'58.##4.136.134':445
'58.##4.147.142':445
'58.##4.196.154':445
'58.##4.207.14':445
'58.##4.90.75':445
'58.##4.94.152':445
'58.##4.188.88':445
'58.##4.31.152':445
'58.##4.172.67':139
'58.#54.20.8':139
'58.##4.16.115':139
'58.##4.180.54':139
'58.##4.104.179':139
'58.##4.41.234':445
'58.##4.158.130':445
'58.##4.233.249':445
'58.##4.10.183':139
'58.##4.26.225':139
'58.##4.31.152':139
'58.##4.43.84':139
'58.##4.25.43':139
'58.##4.84.79':139
'58.##4.44.170':139
'58.##4.109.124':139
'58.##4.41.186':139
'58.##4.144.224':139
'58.##4.38.15':139
'58.##4.135.56':139
'58.##4.212.131':139
'58.##4.4.142':139
'58.##4.247.169':445
'58.#54.7.30':139
'58.##4.162.108':445
'58.##4.48.118':445
'58.##4.145.31':445
'58.##4.186.172':139
'58.##4.195.104':139
'58.##4.143.177':139
'58.##4.67.32':139
'58.##4.165.4':139
'58.##4.249.240':139
'58.##4.38.15':445
'58.##4.41.186':445
'58.##4.212.131':445
'58.##4.25.43':445
'58.##4.135.56':445
'58.##4.41.234':139
'58.##4.158.130':139
'58.##4.233.249':139
'58.##4.144.224':445
'58.##4.249.240':445
'58.##4.43.84':445
'58.##4.143.177':445
'58.##4.186.172':445
'58.##4.165.4':445
'58.#54.7.30':445
'58.##4.67.32':445
'58.##4.109.124':445
'58.##4.84.79':445
'58.##4.44.170':445
'58.##4.195.104':445
'58.##4.4.142':445
'58.##4.178.18':445
'58.##4.174.111':139
'58.##4.181.142':139
'58.##4.174.40':139
'58.##4.184.16':139
'58.##4.220.41':139
'58.##4.224.170':139
'58.##4.199.224':139
'58.##4.170.116':139
'58.##4.15.147':139
'58.##4.179.84':139
'58.##4.103.90':139
'58.##4.94.66':445
'58.##4.179.146':445
'58.##4.173.207':445
'58.##4.91.216':445
'58.##4.7.139':445
'58.##4.230.212':445
'58.##4.90.59':445
'58.##4.128.40':445
'58.#54.8.63':445
'58.##4.204.142':445
'58.##4.217.94':139
'58.##4.187.208':139
'58.##4.210.217':139
'58.##4.35.234':139
'58.##4.56.79':139
'58.##4.70.30':139
'58.##4.154.102':139
'58.##4.106.55':139
'58.##4.58.198':139
'58.##4.106.180':139
'58.##4.94.135':139
'58.##4.157.59':139
'58.##4.99.248':139
'58.##4.197.99':139
'58.##4.13.47':139
'58.##4.213.11':139
'58.##4.159.228':139
'58.##4.60.17':139
'58.##4.1.238':139
'58.##4.17.70':139
'58.##4.71.158':139
'58.##4.116.112':139
'58.##4.244.208':445
'58.##4.172.67':445
'58.#54.20.8':445
'58.##4.16.115':445
'58.##4.180.54':445
'58.##4.104.179':445
'58.##4.90.149':139
'58.##4.118.34':139
'58.##4.149.78':139
'58.##4.10.183':445
'58.##4.26.225':445
'58.##4.54.249':445
'58.##4.132.119':445
'58.##4.83.156':445
'58.##4.222.122':445
'58.##4.152.170':445
'58.##4.75.32':445
'58.##4.36.232':445
'58.##4.207.193':445
'58.##4.50.247':445
'58.##4.31.57':445
'58.##4.127.103':445
'58.##4.220.197':139
'58.##4.149.78':445
'58.##4.90.149':445
'58.##4.90.59':139
'58.##4.128.40':139
'58.##4.230.212':139
'58.##4.184.13':445
'58.##4.229.75':445
'58.##4.183.220':445
'58.##4.118.34':445
'58.##4.220.197':445
'58.##4.204.142':139
'58.##4.244.208':139
'58.##4.91.216':139
'58.##4.229.75':139
'58.##4.183.220':139
'58.##4.184.13':139
'58.##4.179.146':139
'58.#54.8.63':139
'58.##4.94.66':139
'58.##4.7.139':139
'58.##4.173.207':139
'58.##4.162.79':445
'58.##4.253.223':445
'58.##4.53.254':445
'58.##4.224.46':445
'58.#54.32.6':445
'58.##4.152.164':445
'58.##4.6.143':445
'58.#54.93.1':445
'58.##4.219.26':445
'58.##4.226.53':445
'58.##4.181.8':445
'58.##4.143.2':445
'58.##4.253.181':139
'58.##4.128.177':139
'58.##4.180.152':139
'58.##4.153.106':139
'58.##4.15.212':139
'58.##4.156.21':445
'58.##4.160.41':445
'58.##4.196.98':445
'58.##4.148.219':139
'58.##4.148.166':139
'58.##4.57.209':445
'58.##4.26.27':445
'58.##4.48.160':445
'58.##4.181.109':445
'58.##4.3.240':445
'58.##4.77.37':445
'58.##4.49.78':445
'58.##4.37.49':445
'58.##4.78.38':445
'58.##4.89.253':445
'58.##4.254.149':445
'58.##4.248.194':445
'58.##4.200.76':445
'58.##4.42.38':445
'58.#54.3.19':445
'58.##4.250.163':445
'58.##4.18.251':445
'58.##4.68.141':445
'58.##4.190.64':445
'58.##4.26.145':445
'58.##4.120.8':445
'58.##4.108.2':445
'58.##4.45.44':139
'58.##4.57.209':139
'58.##4.250.163':139
'58.#54.93.1':139
'58.##4.219.26':139
'58.##4.6.143':139
'58.##4.42.38':139
'58.##4.120.8':139
'58.##4.200.76':139
'58.##4.18.251':139
'58.#54.3.19':139
'58.##4.181.8':139
'58.##4.196.98':139
'58.##4.143.2':139
'58.#54.32.6':139
'58.##4.156.21':139
'58.##4.152.164':139
'58.##4.53.254':139
'58.##4.226.53':139
'58.##4.253.223':139
'58.##4.160.41':139
'58.##4.224.46':139
'58.##4.108.2':139
'58.##4.75.66':139
'58.##4.33.230':139
'58.##4.37.49':139
'58.##4.78.38':139
'58.##4.49.78':139
'58.##4.51.62':139
'58.##4.116.250':139
'58.##4.61.202':139
'58.##4.124.146':139
'58.##4.121.188':139
'58.##4.254.149':139
'58.##4.248.194':139
'58.##4.3.240':139
'58.##4.190.64':139
'58.##4.26.145':139
'58.##4.68.141':139
'58.##4.48.160':139
'58.##4.89.253':139
'58.##4.26.27':139
'58.##4.77.37':139
'58.##4.181.109':139
'58.##4.75.66':445
'58.##4.247.169':139
'58.##4.218.137':445
'58.##4.162.108':139
'58.##4.48.118':139
'58.##4.145.31':139
'58.##4.35.47':445
'58.#54.88.1':445
'58.##4.35.176':445
'58.##4.128.218':445
'58.##4.140.108':445
'58.##4.162.79':139
'58.##4.7.206':139
'58.#54.70.2':139
'58.##4.211.206':139
'58.##4.68.24':139
'58.##4.167.67':139
'58.##4.136.140':139
'58.##4.30.174':139
'58.##4.114.100':139
'58.##4.66.17':139
'58.##4.143.200':139
'58.##4.152.172':445
'58.##4.7.206':445
'58.#54.70.2':445
'58.##4.211.206':445
'58.##4.68.24':445
'58.##4.167.67':445
'58.##4.136.140':445
'58.##4.30.174':445
'58.##4.114.100':445
'58.##4.66.17':445
'58.##4.143.200':445
'58.##4.36.217':445
'58.##4.174.53':445
'58.##4.119.50':445
'58.##4.52.144':445
'58.##4.212.151':445
'58.##4.231.142':445
'58.##4.139.240':445
'58.##4.91.240':445
'58.##4.175.130':445
'58.##4.224.119':445
'58.##4.60.218':445
'58.##4.36.217':139
'58.##4.42.38':9988
'58.##4.224.46':9988
'58.##4.148.166':445
'58.##4.128.177':445
'58.##4.148.219':445
'58.#54.3.19':9988
'58.##4.196.98':9988
'58.##4.156.21':9988
'58.##4.53.254':9988
'58.#54.93.1':9988
'58.##4.253.181':445
'58.##4.61.202':445
'58.##4.51.62':445
'58.##4.121.188':445
'58.##4.33.230':445
'58.##4.124.146':445
'58.##4.15.212':445
'58.##4.180.152':445
'58.##4.153.106':445
'58.##4.116.250':445
'58.##4.45.44':445
'58.##4.181.8':9988
'58.##4.174.53':139
'58.##4.119.50':139
'58.##4.52.144':139
'58.##4.212.151':139
'58.##4.231.142':139
'58.##4.175.130':139
'58.##4.91.240':139
'58.##4.139.240':139
'58.##4.224.119':139
'58.##4.60.218':139
'58.##4.152.172':139
'58.##4.45.44':9988
'58.##4.218.137':139
'58.##4.124.146':9988
'58.##4.3.240':9988
'58.##4.37.49':9988
'58.##4.35.47':139
'58.#54.88.1':139
'58.##4.35.176':139
'58.##4.128.218':139
'58.##4.140.108':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней