Trojan.Starman.6424

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERb5a9.dir00\svchost.exe.mdmp 16325836412032072

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb5a9.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'66.##5.34.198':139
'66.##5.250.82':139
'66.##5.21.41':139
'66.##5.255.177':139
'66.##5.213.87':139
'66.##5.18.222':139
'66.##5.98.105':139
'66.##5.119.117':139
'66.##5.161.155':139
'66.##5.6.211':139
'66.##5.32.119':139
'66.##5.212.9':139
'66.##5.147.72':139
'66.##5.242.124':139
'66.##5.34.102':139
'66.##5.79.219':139
'66.##5.180.159':139
'66.##5.53.87':139
'66.##5.62.243':139
'66.##5.16.42':139
'66.##5.6.242':139
'66.##5.33.200':139
'66.##5.32.174':445
'66.##5.51.20':445
'66.##5.127.4':445
'66.##5.17.226':445
'66.##5.102.233':445
'66.##5.73.216':445
'66.##5.167.232':445
'66.##5.10.204':445
'66.##5.99.228':445
'66.##5.11.52':445
'66.##5.228.22':445
'66.##5.193.112':139
'66.##5.72.92':139
'66.##5.106.37':139
'66.##5.36.224':139
'66.##5.68.160':139
'66.##5.2.177':139
'66.##5.37.220':445
'66.##5.187.196':445
'66.##5.221.50':139
'66.##5.176.221':139
'66.##5.166.148':139
'66.##5.219.57':445
'66.#95.2.35':445
'66.##5.154.77':445
'66.##5.1.191':445
'66.##5.223.217':445
'66.##5.5.231':445
'66.##5.161.101':139
'66.##5.128.77':139
'66.##5.63.230':139
'66.##5.205.223':445
'66.##5.230.205':139
'66.##5.159.98':445
'66.##5.33.146':445
'66.##5.15.68':445
'66.##5.91.197':445
'66.##5.226.83':445
'66.##5.6.111':445
'66.##5.181.202':445
'66.##5.50.181':445
'66.##5.202.157':445
'66.##5.45.73':445
'66.##5.197.9':445
'66.##5.51.20':139
'66.##5.73.216':139
'66.##5.32.174':139
'66.##5.102.233':139
'66.##5.127.4':139
'66.##5.11.52':139
'66.##5.10.204':139
'66.##5.174.28':139
'66.##5.167.232':139
'66.##5.228.22':139
'66.##5.99.228':139
'66.##5.63.230':445
'66.##5.161.101':445
'66.##5.230.205':445
'66.##5.103.243':139
'66.##5.252.103':139
'66.##5.128.77':445
'66.##5.187.196':139
'66.##5.17.226':139
'66.##5.37.220':139
'66.##5.103.243':445
'66.##5.252.103':445
'66.##5.174.28':445
'66.##5.133.166':139
'66.##5.249.77':139
'66.##5.180.7':139
'66.##5.90.124':139
'66.##5.104.33':139
'66.#95.8.93':139
'66.##5.20.12':139
'66.##5.42.26':139
'66.##5.207.228':139
'66.##5.182.184':139
'66.##5.253.210':139
'66.##5.62.139':139
'66.##5.12.37':139
'66.##5.63.206':139
'66.##5.71.143':139
'66.##5.30.204':139
'66.##5.26.230':139
'66.##5.60.13':139
'66.##5.124.205':139
'66.##5.102.170':139
'66.##5.197.237':139
'66.##5.252.231':139
'66.##5.42.207':139
'66.##5.126.181':139
'66.##5.170.197':139
'66.##5.200.178':139
'66.##5.212.200':139
'66.##5.173.42':139
'66.##5.33.48':139
'66.##5.187.1':139
'66.##5.33.120':139
'66.##5.45.129':139
'66.##5.94.181':139
'66.##5.211.161':139
'66.##5.214.62':139
'66.##5.169.75':139
'66.##5.21.189':139
'66.##5.75.117':139
'66.##5.151.142':139
'66.##5.208.65':139
'66.##5.178.208':139
'66.##5.65.212':139
'66.##5.166.122':139
'66.##5.69.34':139
'66.##5.34.198':445
'66.##5.250.82':445
'66.##5.21.41':445
'66.##5.255.177':445
'66.##5.213.87':445
'66.##5.18.222':445
'66.##5.98.105':445
'66.##5.119.117':445
'66.##5.161.155':445
'66.##5.6.211':445
'66.##5.32.119':445
'66.##5.212.9':445
'66.##5.147.72':445
'66.##5.242.124':445
'66.##5.34.102':445
'66.##5.79.219':445
'66.##5.180.159':445
'66.##5.53.87':445
'66.##5.62.243':445
'66.##5.16.42':445
'66.##5.6.242':445
'66.##5.33.200':445
'66.##5.246.159':139
'66.##5.230.35':445
'66.##5.254.84':139
'66.##5.3.105':139
'66.##5.33.133':139
'66.##5.11.109':445
'66.##5.246.159':445
'66.##5.186.32':139
'66.##5.254.84':445
'66.##5.3.105':445
'66.##5.33.133':445
'66.##5.193.112':445
'66.##5.72.92':445
'66.##5.106.37':445
'66.##5.36.224':445
'66.##5.68.160':445
'66.##5.2.177':445
'66.##5.230.35':139
'66.##5.11.109':139
'66.##5.221.50':445
'66.##5.176.221':445
'66.##5.166.148':445
'66.##5.42.228':445
'66.##5.242.252':445
'66.##5.228.220':445
'66.##5.200.118':445
'66.##5.0.123':445
'66.##5.50.248':445
'66.##5.144.254':445
'66.##5.36.38':445
'66.##5.20.242':445
'66.##5.123.213':445
'66.##5.78.172':445
'66.##5.104.39':139
'66.##5.122.160':139
'66.##5.204.253':139
'66.##5.107.184':139
'66.##5.50.234':139
'66.##5.185.178':139
'66.##5.63.210':445
'66.##5.151.42':445
'66.##5.248.166':445
'66.##5.89.221':139
'66.##5.118.134':445
'66.##5.168.99':445
'66.##5.77.109':445
'66.##5.228.225':445
'66.##5.28.98':445
'66.##5.164.11':445
'66.##5.48.66':445
'66.##5.94.40':445
'66.##5.9.243':445
'66.##5.53.207':445
'66.##5.128.157':445
'66.##5.177.211':445
'66.##5.6.151':445
'66.##5.129.55':445
'66.##5.88.250':445
'66.##5.220.88':445
'66.##5.10.144':445
'66.##5.17.214':445
'66.##5.124.33':445
'66.##5.180.177':445
'66.##5.229.87':445
'66.##5.14.18':445
'66.##5.232.69':445
'66.##5.36.38':139
'66.##5.220.88':139
'66.##5.144.254':139
'66.##5.78.172':139
'66.##5.20.242':139
'66.##5.10.144':139
'66.##5.17.214':139
'66.##5.14.18':139
'66.##5.129.55':139
'66.##5.88.250':139
'66.##5.6.151':139
'66.##5.63.210':139
'66.##5.42.228':139
'66.##5.118.134':139
'66.##5.228.220':139
'66.##5.151.42':139
'66.##5.248.166':139
'66.##5.50.248':139
'66.##5.123.213':139
'66.##5.242.252':139
'66.##5.200.118':139
'66.##5.0.123':139
'66.##5.9.243':139
'66.##5.29.239':139
'66.##5.94.40':139
'66.##5.177.211':139
'66.##5.53.207':139
'66.##5.86.196':139
'66.##5.23.250':139
'66.##5.221.33':139
'66.##5.60.66':139
'66.##5.255.107':139
'66.##5.208.254':139
'66.##5.180.177':139
'66.##5.28.98':139
'66.##5.124.33':139
'66.##5.232.69':139
'66.##5.229.87':139
'66.##5.164.11':139
'66.##5.48.66':139
'66.##5.128.157':139
'66.##5.77.109':139
'66.##5.228.225':139
'66.##5.168.99':139
'66.##5.29.239':445
'66.#95.2.35':139
'66.##5.5.231':139
'66.##5.219.57':139
'66.##5.223.217':139
'66.##5.154.77':139
'66.##5.205.223':139
'66.##5.23.148':445
'66.##5.10.24':445
'66.##5.148.99':445
'66.##5.110.89':445
'66.##5.99.109':445
'66.##5.33.146':139
'66.##5.6.111':139
'66.##5.159.98':139
'66.##5.226.83':139
'66.##5.15.68':139
'66.##5.45.73':139
'66.##5.50.181':139
'66.##5.1.191':139
'66.##5.181.202':139
'66.##5.197.9':139
'66.##5.202.157':139
'66.##5.85.109':445
'66.##5.122.228':445
'66.##5.104.106':445
'66.##5.58.39':445
'66.##5.141.135':445
'66.##5.238.121':445
'66.##5.0.184':445
'66.#95.62.1':445
'66.##5.26.89':445
'66.#95.6.2':445
'66.##5.103.27':445
'66.##5.82.253':445
'66.##5.251.82':445
'66.##5.43.194':445
'66.##5.58.42':445
'66.##5.77.14':445
'66.##5.75.219':445
'66.##5.210.151':445
'66.##5.107.182':445
'66.##5.27.129':445
'66.##5.213.203':445
'66.##5.168.213':445
'66.##5.177.211':9988
'66.##5.122.160':9988
'66.##5.118.134':9988
'66.##5.185.178':445
'66.##5.89.221':445
'66.##5.110.89':139
'66.##5.10.24':139
'66.##5.58.42':139
'66.##5.23.148':139
'66.##5.99.109':139
'66.##5.148.99':139
'66.##5.60.66':445
'66.##5.23.250':445
'66.##5.208.254':445
'66.##5.86.196':445
'66.##5.255.107':445
'66.##5.221.33':445
'66.##5.104.39':445
'66.##5.122.160':445
'66.##5.204.253':445
'66.##5.107.184':445
'66.##5.50.234':445
'66.##5.122.228':139
'66.##5.238.121':139
'66.##5.85.109':139
'66.##5.141.135':139
'66.##5.104.106':139
'66.#95.6.2':139
'66.#95.62.1':139
'66.##5.91.197':139
'66.##5.0.184':139
'66.##5.103.27':139
'66.##5.26.89':139
'66.##5.251.82':139
'66.##5.75.219':139
'66.##5.82.253':139
'66.##5.77.14':139
'66.##5.43.194':139
'66.##5.213.203':139
'66.##5.107.182':139
'66.##5.58.39':139
'66.##5.210.151':139
'66.##5.168.213':139
'66.##5.27.129':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней