Trojan.Starman.5336

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2d2b.dir00\svchost.exe.mdmp 16325836412032196

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2d2b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'65.##.107.58':139
'65.##.222.213':139
'65.##.63.230':139
'65.##.173.48':139
'65.#3.9.122':139
'65.##.168.211':139
'65.##.48.102':139
'65.##.103.229':139
'65.##.174.202':139
'65.#3.130.7':139
'65.##.147.130':139
'65.##.63.165':139
'65.##.233.154':139
'65.##.213.84':139
'65.##.30.168':139
'65.##.174.242':139
'65.##.189.226':139
'65.##.168.180':139
'65.#3.50.83':139
'65.##.100.120':139
'65.##.229.175':139
'65.##.120.253':139
'65.##.200.97':139
'65.##.30.171':445
'65.##.248.249':445
'65.##.28.233':445
'65.##.84.217':445
'65.##.103.42':445
'65.##.234.108':445
'65.##.125.102':445
'65.#3.56.24':445
'65.##.40.184':445
'65.##.134.189':445
'65.##.214.134':445
'65.##.80.105':139
'65.##.203.89':139
'65.##.253.170':139
'65.##.76.157':139
'65.##.170.52':139
'65.##.124.253':139
'65.##.43.215':139
'65.##.53.172':445
'65.##.68.251':139
'65.##.11.107':139
'65.##.140.233':139
'65.#3.8.87':445
'65.##.88.132':445
'65.#3.95.16':445
'65.#3.84.91':445
'65.##.164.84':445
'65.#3.6.250':445
'65.##.222.158':445
'65.##.43.214':445
'65.##.59.202':445
'65.#3.140.7':445
'65.##.89.200':445
'65.#3.62.70':445
'65.#3.98.73':445
'65.##.232.65':445
'65.#3.9.89':445
'65.##.229.40':445
'65.#3.13.85':445
'65.##.40.141':445
'65.#3.89.31':445
'65.##.218.34':445
'65.#3.8.77':445
'65.##.37.208':445
'65.##.202.22':445
'65.##.125.102':139
'65.#3.56.24':139
'65.##.40.184':139
'65.##.134.189':139
'65.##.214.134':139
'65.##.15.242':139
'65.##.98.148':139
'65.##.168.98':139
'65.##.148.185':139
'65.##.101.178':139
'65.#3.81.35':139
'65.##.72.195':445
'65.##.53.172':139
'65.##.195.80':445
'65.#3.99.49':445
'65.##.225.209':445
'65.##.84.217':139
'65.##.248.249':139
'65.##.234.108':139
'65.##.30.171':139
'65.##.103.42':139
'65.##.28.233':139
'65.##.142.29':139
'65.##.227.142':139
'65.##.254.31':139
'65.##.116.108':139
'65.##.235.115':139
'65.##.210.232':139
'65.##.233.135':139
'65.##.96.116':139
'65.##.188.80':139
'65.#3.22.85':139
'65.##.147.222':139
'65.##.246.233':139
'65.#3.30.27':139
'65.##.233.126':139
'65.##.235.132':139
'65.##.32.239':139
'65.##.140.207':139
'65.##.143.61':139
'65.##.122.17':139
'65.##.61.146':139
'65.##.160.184':139
'65.##.248.221':139
'65.##.250.126':139
'65.##.95.245':139
'65.##.225.143':139
'65.##.186.158':139
'65.##.119.64':139
'65.##.195.119':139
'65.##.220.31':139
'65.##.132.136':139
'65.##.188.227':139
'65.##.197.57':139
'65.##.76.251':139
'65.#3.244.9':139
'65.#3.4.73':139
'65.#3.1.239':139
'65.#3.77.42':139
'65.##.115.108':139
'65.#3.32.32':139
'65.##.154.75':139
'65.#3.9.155':139
'65.#3.65.9':139
'65.##.155.25':139
'65.##.104.76':139
'65.#3.7.147':139
'65.##.100.120':445
'65.##.168.180':445
'65.##.120.253':445
'65.##.189.226':445
'65.##.229.175':445
'65.#3.50.83':445
'65.##.107.58':445
'65.##.222.213':445
'65.##.63.230':445
'65.##.173.48':445
'65.#3.9.122':445
'65.##.148.185':445
'65.##.98.148':445
'65.#3.81.35':445
'65.##.15.242':445
'65.##.101.178':445
'65.##.168.98':445
'65.##.63.165':445
'65.##.233.154':445
'65.##.213.84':445
'65.##.30.168':445
'65.##.174.242':445
'65.##.168.211':445
'65.##.68.251':445
'65.##.43.215':445
'65.##.140.233':445
'65.##.124.253':445
'65.##.11.107':445
'65.##.62.135':139
'65.##.46.168':139
'65.##.167.116':139
'65.#3.99.46':139
'65.##.51.149':139
'65.##.143.168':139
'65.##.48.102':445
'65.##.103.229':445
'65.##.174.202':445
'65.#3.130.7':445
'65.##.147.130':445
'65.##.200.97':445
'65.##.80.105':445
'65.##.203.89':445
'65.##.253.170':445
'65.##.76.157':445
'65.##.170.52':445
'65.##.188.134':445
'65.##.226.221':445
'65.##.191.234':445
'65.##.131.178':445
'65.##.222.107':445
'65.##.121.226':445
'65.##.195.60':445
'65.#3.100.4':445
'65.##.81.156':445
'65.##.148.121':445
'65.##.134.148':445
'65.##.13.218':139
'65.##.123.200':139
'65.#3.8.199':139
'65.##.206.189':139
'65.##.25.207':139
'65.#3.82.65':139
'65.##.205.92':445
'65.##.208.133':445
'65.##.115.192':445
'65.##.233.131':445
'65.##.235.65':445
'65.##.115.167':445
'65.#3.8.68':445
'65.##.196.56':445
'65.##.67.244':445
'65.#3.9.118':445
'65.##.243.252':445
'65.#3.56.34':445
'65.##.30.157':445
'65.##.124.36':445
'65.#3.36.90':445
'65.##.118.56':445
'65.##.90.118':445
'65.#3.22.32':445
'65.##.31.199':445
'65.##.199.202':445
'65.##.141.28':445
'65.##.21.218':445
'65.#3.41.3':445
'65.##.189.192':445
'65.#3.2.218':445
'65.#3.99.17':445
'65.##.192.212':445
'65.##.102.54':445
'65.##.195.60':139
'65.#3.100.4':139
'65.##.81.156':139
'65.##.148.121':139
'65.##.134.148':139
'65.##.115.167':139
'65.#3.22.32':139
'65.##.31.199':139
'65.##.199.202':139
'65.##.141.28':139
'65.##.21.218':139
'65.##.131.178':139
'65.##.208.133':139
'65.##.191.234':139
'65.##.235.65':139
'65.##.188.134':139
'65.##.115.192':139
'65.##.226.221':139
'65.##.121.226':139
'65.##.222.107':139
'65.##.233.131':139
'65.##.205.92':139
'65.#3.41.3':139
'65.##.124.36':139
'65.##.30.157':139
'65.#3.36.90':139
'65.##.118.56':139
'65.##.90.118':139
'65.##.22.239':139
'65.##.123.27':139
'65.##.112.156':139
'65.##.159.152':139
'65.#3.45.63':139
'65.#3.6.85':139
'65.##.189.192':139
'65.#3.9.118':139
'65.##.192.212':139
'65.#3.99.17':139
'65.##.102.54':139
'65.#3.2.218':139
'65.##.196.56':139
'65.#3.56.34':139
'65.#3.8.68':139
'65.##.243.252':139
'65.##.67.244':139
'65.##.222.158':139
'65.##.43.214':139
'65.##.59.202':139
'65.#3.140.7':139
'65.##.89.200':139
'65.##.202.22':139
'65.##.72.195':139
'65.##.32.254':445
'65.##.195.80':139
'65.#3.99.49':139
'65.##.225.209':139
'65.##.40.141':139
'65.#3.89.31':139
'65.##.218.34':139
'65.#3.8.77':139
'65.##.37.208':139
'65.#3.84.91':139
'65.##.88.132':139
'65.#3.6.250':139
'65.#3.8.87':139
'65.##.164.84':139
'65.#3.95.16':139
'65.##.210.32':445
'65.##.42.122':445
'65.##.127.178':445
'65.##.150.144':445
'65.##.221.143':445
'65.##.212.90':445
'65.##.235.161':445
'65.##.118.57':445
'65.#3.82.63':445
'65.#3.58.62':445
'65.##.80.125':445
'65.#3.62.80':445
'65.##.111.245':445
'65.##.24.237':445
'65.##.100.89':445
'65.#3.76.53':445
'65.##.225.117':445
'65.##.97.174':445
'65.##.76.234':445
'65.##.76.120':445
'65.#3.57.53':445
'65.##.73.239':445
'65.##.119.121':445
'65.#3.8.199':9988
'65.##.32.254':139
'65.##.131.178':9988
'65.#3.82.65':445
'65.##.115.192':9988
'65.##.210.32':139
'65.##.111.245':139
'65.##.24.237':139
'65.##.100.89':139
'65.#3.76.53':139
'65.##.225.117':139
'65.##.159.152':445
'65.##.123.27':445
'65.#3.6.85':445
'65.##.22.239':445
'65.#3.45.63':445
'65.##.112.156':445
'65.##.123.200':445
'65.##.13.218':445
'65.#3.8.199':445
'65.##.206.189':445
'65.##.25.207':445
'65.##.97.174':139
'65.##.118.57':139
'65.#3.82.63':139
'65.#3.58.62':139
'65.##.80.125':139
'65.#3.62.80':139
'65.#3.9.89':139
'65.#3.98.73':139
'65.#3.13.85':139
'65.#3.62.70':139
'65.##.229.40':139
'65.##.232.65':139
'65.##.76.234':139
'65.##.76.120':139
'65.#3.57.53':139
'65.##.73.239':139
'65.##.119.121':139
'65.##.221.143':139
'65.##.127.178':139
'65.##.235.161':139
'65.##.42.122':139
'65.##.212.90':139
'65.##.150.144':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней