Trojan.Starman.5966

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER3685.dir00\svchost.exe.mdmp 16325836412032304

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.#75.2.75':445
'69.##5.6.184':445
'69.##5.75.19':445
'69.##5.235.44':445
'69.##5.116.146':445
'69.##5.65.79':445
'69.##5.183.193':445
'69.##5.115.219':445
'69.##5.33.205':445
'69.##5.3.117':445
'69.##5.24.168':445
'69.##5.52.92':445
'69.##5.127.95':445
'69.##5.208.126':445
'69.##5.46.63':445
'69.##5.58.65':445
'69.##5.29.15':445
'69.##5.66.47':445
'69.##5.101.21':445
'69.##5.55.46':445
'69.##5.252.181':445
'69.##5.17.63':445
'69.##5.94.81':445
'69.##5.20.129':445
'69.##5.80.201':445
'69.##5.179.23':445
'69.##5.154.211':445
'69.##5.23.66':445
'69.##5.11.235':445
'69.##5.167.58':445
'69.##5.89.144':445
'69.##5.103.248':445
'69.##5.57.225':445
'69.##5.102.177':445
'69.##5.165.89':445
'69.##5.48.98':445
'69.##5.99.37':445
'69.##5.30.91':445
'69.##5.74.244':445
'69.##5.191.74':445
'69.##5.241.128':445
'69.##5.89.144':139
'69.##5.103.248':139
'69.##5.57.225':139
'69.##5.102.177':139
'69.##5.165.89':139
'69.##5.48.98':139
'69.##5.99.37':139
'69.##5.30.91':139
'69.##5.74.244':139
'69.##5.191.74':139
'69.#75.2.75':139
'69.##5.6.184':139
'69.##5.75.19':139
'69.##5.235.44':139
'69.##5.116.146':139
'69.##5.65.79':139
'69.##5.183.193':139
'69.##5.115.219':139
'69.##5.33.205':139
'69.##5.3.117':139
'69.##5.5.103':139
'69.##5.42.34':139
'69.##5.61.18':139
'69.##5.3.125':139
'69.##5.74.133':139
'69.##5.28.209':445
'69.##5.0.234':445
'69.##5.49.252':445
'69.##5.232.111':139
'69.##5.17.104':445
'69.##5.252.181':139
'69.##5.17.63':139
'69.##5.94.81':139
'69.##5.20.129':139
'69.##5.80.201':139
'69.##5.179.23':139
'69.##5.154.211':139
'69.##5.23.66':139
'69.##5.11.235':139
'69.##5.167.58':139
'69.##5.42.26':139
'69.##5.27.42':139
'69.##5.151.95':139
'69.##5.106.64':139
'69.##5.10.110':139
'69.##5.74.177':445
'69.##5.19.223':445
'69.##5.132.252':445
'69.##5.156.192':139
'69.##5.247.134':445
'69.##5.141.158':139
'69.##5.45.72':139
'69.##5.57.197':139
'69.##5.189.15':139
'69.##5.42.242':139
'69.##5.83.192':139
'69.##5.63.231':139
'69.##5.111.52':139
'69.##5.17.106':139
'69.##5.27.155':139
'69.##5.44.134':445
'69.##5.54.44':445
'69.##5.75.20':445
'69.##5.101.75':445
'69.##5.69.160':445
'69.##5.81.168':445
'69.#75.3.23':445
'69.##5.71.241':445
'69.##5.4.194':445
'69.##5.80.126':445
'69.##5.25.222':445
'69.##5.30.154':445
'69.##5.230.183':445
'69.##5.43.18':445
'69.##5.210.143':445
'69.##5.32.254':445
'69.##5.25.234':445
'69.##5.147.85':445
'69.##5.206.218':445
'69.##5.108.207':445
'69.##5.235.160':139
'69.##5.25.222':139
'69.##5.30.154':139
'69.##5.230.183':139
'69.##5.43.18':139
'69.##5.210.143':139
'69.##5.32.254':139
'69.##5.25.234':139
'69.##5.147.85':139
'69.##5.206.218':139
'69.##5.108.207':139
'69.##5.5.103':445
'69.##5.42.34':445
'69.##5.61.18':445
'69.##5.3.125':445
'69.##5.74.133':445
'69.##5.74.177':139
'69.##5.19.223':139
'69.##5.132.252':139
'69.##5.232.111':445
'69.##5.247.134':139
'69.##5.91.69':139
'69.##5.179.90':139
'69.##5.132.119':139
'69.##5.101.146':139
'69.##5.4.162':139
'69.##5.110.229':139
'69.##5.12.253':139
'69.##5.26.22':139
'69.##5.116.80':139
'69.##5.37.251':139
'69.##5.44.134':139
'69.##5.54.44':139
'69.##5.75.20':139
'69.##5.101.75':139
'69.##5.69.160':139
'69.##5.81.168':139
'69.#75.3.23':139
'69.##5.71.241':139
'69.##5.4.194':139
'69.##5.80.126':139
'69.##5.159.179':445
'69.##5.219.100':445
'69.##5.179.171':445
'69.##5.13.195':445
'69.##5.171.174':445
'69.##5.250.24':445
'69.##5.122.74':445
'69.##5.123.166':445
'69.##5.183.50':445
'69.##5.127.154':445
'69.##5.214.174':139
'69.##5.132.197':139
'69.##5.68.234':139
'69.##5.133.91':139
'69.##5.234.132':139
'69.##5.2.188':139
'69.##5.107.135':139
'69.##5.246.12':139
'69.##5.42.66':139
'69.##5.7.230':139
'69.##5.3.227':445
'69.##5.131.101':445
'69.##5.237.20':445
'69.##5.63.53':445
'69.##5.18.205':445
'69.##5.102.182':445
'69.##5.66.61':445
'69.##5.14.69':445
'69.##5.159.247':445
'69.##5.244.8':445
'69.##5.2.150':445
'69.##5.136.2':445
'69.##5.33.77':445
'69.##5.186.226':445
'69.##5.13.151':445
'69.##5.68.184':445
'69.##5.78.24':445
'69.##5.184.39':445
'69.##5.52.56':445
'69.##5.107.68':445
'69.##5.224.91':139
'69.##5.2.150':139
'69.##5.136.2':139
'69.##5.33.77':139
'69.##5.186.226':139
'69.##5.13.151':139
'69.##5.68.184':139
'69.##5.78.24':139
'69.##5.184.39':139
'69.##5.52.56':139
'69.##5.107.68':139
'69.##5.159.179':139
'69.##5.219.100':139
'69.##5.179.171':139
'69.##5.171.174':139
'69.##5.13.195':139
'69.##5.250.24':139
'69.##5.122.74':139
'69.##5.123.166':139
'69.##5.183.50':139
'69.##5.127.154':139
'69.##5.24.214':139
'69.##5.168.143':139
'69.##5.152.72':139
'69.##5.156.165':139
'69.##5.18.110':139
'69.##5.249.12':139
'69.##5.93.198':139
'69.#75.9.43':139
'69.##5.93.70':139
'69.##5.23.145':139
'69.##5.3.227':139
'69.##5.131.101':139
'69.##5.237.20':139
'69.##5.63.53':139
'69.##5.18.205':139
'69.##5.102.182':139
'69.##5.66.61':139
'69.##5.14.69':139
'69.##5.159.247':139
'69.##5.244.8':139
'69.##5.123.65':445
'69.##5.232.203':445
'69.##5.138.104':445
'69.##5.54.121':139
'69.##5.227.22':139
'69.##5.23.176':445
'69.##5.169.30':445
'69.##5.243.88':445
'69.##5.235.220':445
'69.##5.206.158':445
'69.##5.206.158':139
'69.##5.243.88':139
'69.##5.235.220':139
'69.##5.123.65':139
'69.##5.232.203':139
'69.##5.122.168':139
'69.##5.70.55':139
'69.##5.226.158':139
'69.##5.23.176':139
'69.##5.169.30':139
'69.##5.24.168':139
'69.##5.52.92':139
'69.##5.127.95':139
'69.##5.208.126':139
'69.##5.46.63':139
'69.##5.58.65':139
'69.##5.29.15':139
'69.##5.66.47':139
'69.##5.101.21':139
'69.##5.55.46':139
'69.##5.54.121':445
'69.##5.227.22':445
'69.##5.70.55':445
'69.##5.226.158':445
'69.##5.122.168':445
'69.##5.0.234':139
'69.##5.241.128':139
'69.##5.28.209':139
'69.##5.17.104':139
'69.##5.49.252':139
'69.##5.138.104':139
'69.##5.68.234':445
'69.##5.214.174':445
'69.##5.234.132':445
'69.##5.224.91':445
'69.##5.133.91':445
'69.##5.246.12':445
'69.##5.2.188':445
'69.##5.7.230':445
'69.##5.132.197':445
'69.##5.42.66':445
'69.##5.24.214':445
'69.##5.168.143':445
'69.##5.152.72':445
'69.##5.156.165':445
'69.##5.18.110':445
'69.##5.249.12':445
'69.##5.93.198':445
'69.#75.9.43':445
'69.##5.93.70':445
'69.##5.23.145':445
'69.##5.78.24':9988
'69.##5.156.165':9988
'69.##5.68.184':9988
'69.##5.107.68':9988
'69.##5.184.39':9988
'69.##5.93.198':9988
'69.##5.224.91':9988
'69.##5.249.12':9988
'69.##5.24.214':9988
'69.##5.14.69':9988
'69.##5.171.174':9988
'69.##5.159.179':9988
'69.##5.179.171':9988
'69.##5.107.135':445
'69.##5.13.195':9988
'69.##5.2.150':9988
'69.##5.52.56':9988
'69.##5.122.74':9988
'69.##5.219.100':9988
'69.##5.183.50':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней