Trojan.Starman.5612

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WERc237.dir00\svchost.exe.mdmp 16325836412029792

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc237.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'69.##.140.186':445
'69.##.134.251':445
'69.##.123.27':445
'69.##.35.253':445
'69.##.173.196':445
'69.##.95.164':139
'69.##.190.95':139
'69.##.92.193':445
'69.#1.15.84':445
'69.#1.7.253':445
'69.##.17.112':445
'69.#1.1.203':445
'69.#1.8.113':445
'69.##.112.79':445
'69.#1.29.3':445
'69.##.111.88':445
'69.##.208.226':445
'69.##.237.66':445
'69.#1.88.89':445
'69.##.117.132':139
'69.##.206.160':139
'69.##.122.12':139
'69.##.44.142':139
'69.##.159.150':139
'69.##.202.36':139
'69.##.166.100':139
'69.##.224.165':139
'69.##.197.124':139
'69.##.99.219':139
'69.##.141.208':139
'69.#1.28.50':139
'69.##.148.196':139
'69.##.203.223':139
'69.##.28.243':139
'69.##.184.35':139
'69.#1.5.216':139
'69.##.209.17':139
'69.##.112.165':139
'69.##.175.107':139
'69.##.206.105':445
'69.##.229.126':445
'69.##.182.156':445
'69.#1.5.45':445
'69.##.139.46':445
'69.##.190.199':445
'69.##.219.205':445
'69.##.221.232':445
'69.#1.38.79':445
'69.##.46.248':445
'69.##.195.95':445
'69.##.134.251':139
'69.##.173.196':139
'69.##.35.253':139
'69.##.140.186':139
'69.##.92.193':139
'69.#1.101.4':445
'69.#1.65.65':445
'69.#1.15.84':139
'69.##.162.183':445
'69.#1.2.84':445
'69.##.248.114':445
'69.##.72.213':445
'69.#1.69.25':445
'69.#1.45.69':445
'69.##.249.251':445
'69.##.183.73':445
'69.##.105.67':445
'69.##.189.249':445
'69.##.170.30':445
'69.##.23.222':445
'69.##.121.11':445
'69.##.145.39':445
'69.##.162.16':445
'69.#1.85.67':445
'69.##.55.174':445
'69.##.250.177':445
'69.##.183.250':445
'69.#1.97.84':445
'69.##.11.118':445
'69.##.17.111':139
'69.##.159.237':445
'69.##.183.233':445
'69.##.17.111':445
'69.#1.75.46':445
'69.##.69.184':445
'69.##.36.195':445
'69.##.68.126':445
'69.##.53.129':445
'69.#1.40.84':445
'69.##.224.165':445
'69.##.159.150':445
'69.##.206.160':445
'69.##.141.208':445
'69.##.44.142':445
'69.##.122.12':445
'69.##.99.219':445
'69.##.166.100':445
'69.##.202.36':445
'69.##.197.124':445
'69.##.129.123':445
'69.##.92.113':445
'69.##.66.112':445
'69.##.76.201':445
'69.##.175.193':445
'69.##.252.214':445
'69.##.118.219':445
'69.#1.98.5':445
'69.##.70.253':445
'69.#1.35.44':445
'69.##.237.213':445
'69.##.145.129':445
'69.##.119.244':445
'69.#1.98.57':445
'69.##.68.216':445
'69.##.118.77':445
'69.##.106.213':445
'69.#1.50.48':445
'69.#1.5.178':445
'69.##.213.49':445
'69.##.209.17':445
'69.##.119.244':139
'69.##.118.77':139
'69.##.68.216':139
'69.##.145.129':139
'69.#1.5.178':139
'69.#1.50.48':139
'69.##.237.213':139
'69.##.213.49':139
'69.##.106.213':139
'69.#1.98.57':139
'69.##.183.233':139
'69.##.69.184':139
'69.#1.75.46':139
'69.##.159.237':139
'69.##.53.129':139
'69.##.68.126':139
'69.##.129.123':139
'69.#1.40.84':139
'69.##.36.195':139
'69.##.76.201':139
'69.##.28.243':445
'69.#1.28.50':445
'69.##.117.132':445
'69.##.203.223':445
'69.##.148.196':445
'69.##.175.107':445
'69.#1.5.216':445
'69.##.184.35':445
'69.##.112.165':445
'69.##.190.95':445
'69.##.66.112':139
'69.##.252.214':139
'69.##.175.193':139
'69.##.92.113':139
'69.##.70.253':139
'69.#1.98.5':139
'69.##.95.164':445
'69.#1.35.44':139
'69.##.118.219':139
'69.##.123.27':139
'69.##.80.215':445
'69.##.248.132':445
'69.##.183.231':139
'69.##.219.72':445
'69.##.205.52':445
'69.#1.25.2':445
'69.##.149.175':445
'69.##.18.222':445
'69.##.250.211':445
'69.##.153.79':139
'69.##.22.157':139
'69.##.22.146':139
'69.#1.17.1':139
'69.#1.37.9':139
'69.#1.62.73':139
'69.##.222.130':139
'69.##.247.68':139
'69.##.101.239':139
'69.##.66.157':139
'69.##.31.193':445
'69.##.119.62':445
'69.#1.36.1':445
'69.##.116.158':445
'69.##.122.78':445
'69.##.85.140':445
'69.##.126.227':445
'69.##.76.211':445
'69.##.243.155':445
'69.##.108.60':445
'69.##.29.158':445
'69.#1.35.64':445
'69.##.109.242':445
'69.##.82.174':445
'69.##.240.198':445
'69.##.100.61':445
'69.#1.45.12':445
'69.##.21.196':445
'69.#1.53.3':445
'69.#1.65.47':445
'69.#1.1.123':139
'69.##.109.242':139
'69.##.100.61':139
'69.##.240.198':139
'69.#1.35.64':139
'69.#1.53.3':139
'69.##.21.196':139
'69.##.29.158':139
'69.#1.65.47':139
'69.#1.45.12':139
'69.##.82.174':139
'69.##.248.132':139
'69.##.205.52':139
'69.##.219.72':139
'69.##.80.215':139
'69.##.250.211':139
'69.##.149.175':139
'69.##.31.193':139
'69.##.18.222':139
'69.#1.25.2':139
'69.##.116.158':139
'69.#1.38.78':139
'69.##.175.70':139
'69.##.177.141':139
'69.##.77.177':139
'69.##.223.201':139
'69.##.78.191':139
'69.##.229.61':139
'69.##.153.199':139
'69.##.190.153':139
'69.##.193.243':139
'69.#1.36.1':139
'69.##.85.140':139
'69.##.122.78':139
'69.##.119.62':139
'69.##.243.155':139
'69.##.76.211':139
'69.#1.74.40':139
'69.##.108.60':139
'69.##.126.227':139
'69.#1.74.40':445
'69.##.145.39':139
'69.##.55.174':139
'69.#1.85.67':139
'69.##.121.11':139
'69.#1.97.84':139
'69.##.183.250':139
'69.##.23.222':139
'69.##.11.118':139
'69.##.250.177':139
'69.##.162.16':139
'69.##.182.156':139
'69.##.190.199':139
'69.##.139.46':139
'69.##.229.126':139
'69.#1.38.79':139
'69.##.221.232':139
'69.#1.2.84':139
'69.##.46.248':139
'69.##.219.205':139
'69.#1.69.25':139
'69.#1.1.203':139
'69.#1.29.3':139
'69.##.112.79':139
'69.##.17.112':139
'69.##.237.66':139
'69.##.208.226':139
'69.#1.7.253':139
'69.#1.88.89':139
'69.##.111.88':139
'69.#1.8.113':139
'69.##.72.213':139
'69.##.249.251':139
'69.#1.45.69':139
'69.##.248.114':139
'69.##.189.249':139
'69.##.105.67':139
'69.##.206.105':139
'69.##.170.30':139
'69.##.183.73':139
'69.#1.5.45':139
'69.#1.37.9':445
'69.##.22.157':445
'69.#1.1.123':445
'69.#1.17.1':445
'69.##.22.146':445
'69.##.66.157':445
'69.##.222.130':445
'69.#1.62.73':445
'69.##.101.239':445
'69.##.229.61':445
'69.##.77.177':445
'69.#1.38.78':445
'69.##.193.243':445
'69.##.177.141':445
'69.##.175.70':445
'69.##.190.153':445
'69.##.78.191':445
'69.##.223.201':445
'69.##.153.199':445
'69.##.247.68':445
'69.##.119.62':9988
'69.#1.36.1':9988
'69.#1.65.47':9988
'69.##.21.196':9988
'69.##.85.140':9988
'69.#1.65.65':139
'69.##.195.95':139
'69.##.162.183':139
'69.#1.101.4':139
'69.##.100.61':9988
'69.##.219.72':9988
'69.##.205.52':9988
'69.##.153.79':445
'69.##.183.231':445
'69.##.80.215':9988
'69.##.149.175':9988
'69.#1.35.64':9988
'69.##.250.211':9988
'69.#1.25.2':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней