Trojan.Starman.6442

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERaba5.dir00\svchost.exe.mdmp 16325836412032176

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERaba5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'69.#65.85.9':445
'69.##5.89.250':445
'69.##5.10.115':445
'69.##5.55.16':445
'69.##5.11.97':445
'69.##5.254.83':445
'69.##5.147.254':139
'69.##5.191.237':445
'69.#65.99.1':445
'69.##5.149.250':445
'69.#65.57.6':445
'69.##5.225.57':445
'69.##5.241.97':445
'69.##5.64.157':445
'69.##5.82.246':445
'69.##5.49.127':445
'69.##5.104.50':445
'69.#65.0.39':445
'69.##5.89.61':445
'69.##5.63.170':445
'69.##5.182.98':139
'69.##5.27.130':139
'69.##5.12.243':139
'69.##5.222.60':139
'69.##5.30.222':139
'69.##5.192.161':139
'69.##5.134.181':139
'69.##5.173.52':139
'69.##5.128.234':139
'69.##5.166.45':139
'69.##5.147.105':139
'69.##5.220.161':139
'69.##5.52.131':139
'69.##5.48.185':139
'69.##5.22.139':139
'69.##5.62.173':139
'69.##5.106.75':139
'69.##5.24.249':139
'69.##5.155.22':139
'69.##5.245.78':139
'69.##5.149.43':445
'69.##5.186.239':445
'69.##5.11.235':445
'69.##5.182.243':445
'69.##5.35.98':445
'69.##5.65.10':445
'69.##5.114.2':445
'69.##5.102.115':445
'69.##5.60.187':445
'69.#65.4.84':445
'69.##5.89.250':139
'69.#65.99.1':139
'69.#65.85.9':139
'69.##5.11.97':139
'69.##5.10.115':139
'69.##5.132.143':445
'69.##5.194.132':445
'69.##5.254.83':139
'69.##5.149.250':139
'69.##5.191.237':139
'69.##5.52.63':445
'69.##5.120.69':445
'69.##5.154.197':445
'69.##5.50.250':445
'69.##5.75.84':445
'69.##5.75.99':445
'69.##5.162.57':445
'69.##5.206.71':445
'69.##5.198.33':445
'69.##5.95.66':445
'69.##5.109.63':445
'69.##5.175.108':445
'69.#65.4.65':445
'69.##5.22.114':445
'69.##5.52.22':445
'69.##5.28.26':445
'69.##5.124.164':445
'69.##5.52.171':445
'69.##5.8.175':445
'69.##5.172.8':445
'69.##5.79.59':139
'69.##5.112.135':445
'69.##5.27.67':445
'69.##5.151.205':445
'69.##5.79.59':445
'69.##5.113.109':445
'69.##5.14.37':445
'69.#65.39.6':445
'69.##5.54.138':445
'69.##5.40.97':445
'69.##5.186.40':445
'69.##5.182.98':445
'69.##5.27.130':445
'69.##5.12.243':445
'69.##5.30.222':445
'69.##5.222.60':445
'69.##5.192.161':445
'69.##5.134.181':445
'69.##5.173.52':445
'69.##5.128.234':445
'69.##5.166.45':445
'69.##5.0.135':445
'69.##5.120.200':445
'69.##5.50.211':445
'69.##5.13.32':445
'69.##5.26.32':445
'69.##5.108.60':445
'69.##5.99.250':445
'69.##5.31.98':445
'69.##5.205.2':445
'69.##5.100.17':445
'69.##5.68.87':445
'69.##5.29.219':445
'69.##5.185.146':445
'69.##5.46.39':445
'69.##5.125.97':445
'69.##5.27.181':445
'69.##5.75.127':445
'69.##5.243.149':445
'69.##5.14.241':445
'69.##5.149.14':445
'69.##5.29.219':139
'69.##5.14.241':139
'69.##5.185.146':139
'69.##5.125.97':139
'69.##5.68.87':139
'69.##5.75.127':139
'69.##5.13.32':139
'69.##5.27.181':139
'69.##5.149.14':139
'69.##5.243.149':139
'69.##5.27.67':139
'69.##5.40.97':139
'69.##5.112.135':139
'69.##5.113.109':139
'69.##5.151.205':139
'69.#65.39.6':139
'69.##5.46.39':139
'69.##5.14.37':139
'69.##5.186.40':139
'69.##5.54.138':139
'69.##5.147.105':445
'69.##5.220.161':445
'69.##5.52.131':445
'69.##5.48.185':445
'69.##5.22.139':445
'69.##5.62.173':445
'69.##5.106.75':445
'69.##5.24.249':445
'69.##5.155.22':445
'69.##5.245.78':445
'69.##5.120.200':139
'69.##5.205.2':139
'69.##5.0.135':139
'69.##5.26.32':139
'69.##5.50.211':139
'69.##5.99.250':139
'69.##5.147.254':445
'69.##5.108.60':139
'69.##5.100.17':139
'69.##5.31.98':139
'69.##5.52.230':445
'69.##5.67.33':445
'69.##5.226.169':445
'69.##5.144.23':139
'69.##5.220.168':445
'69.##5.113.44':445
'69.##5.197.30':445
'69.##5.245.188':445
'69.##5.102.48':445
'69.##5.134.190':445
'69.##5.180.71':139
'69.##5.197.78':139
'69.##5.106.112':139
'69.##5.129.77':139
'69.##5.113.166':139
'69.##5.90.86':139
'69.##5.24.76':139
'69.##5.50.84':139
'69.##5.188.137':139
'69.##5.54.176':139
'69.##5.80.40':445
'69.##5.40.198':445
'69.##5.69.186':445
'69.##5.156.76':445
'69.##5.47.156':445
'69.##5.144.21':445
'69.##5.161.128':445
'69.##5.226.215':445
'69.##5.124.11':445
'69.##5.84.19':445
'69.##5.39.70':445
'69.##5.155.162':445
'69.##5.74.103':445
'69.##5.55.192':445
'69.##5.41.33':445
'69.##5.26.62':445
'69.##5.152.181':445
'69.##5.104.113':445
'69.##5.137.69':445
'69.##5.164.108':445
'69.##5.155.162':139
'69.##5.137.69':139
'69.##5.39.70':139
'69.##5.41.33':139
'69.##5.74.103':139
'69.##5.152.181':139
'69.##5.156.76':139
'69.##5.26.62':139
'69.##5.164.108':139
'69.##5.104.113':139
'69.##5.102.48':139
'69.##5.52.230':139
'69.##5.245.188':139
'69.##5.67.33':139
'69.##5.226.169':139
'69.##5.197.30':139
'69.##5.55.192':139
'69.##5.113.44':139
'69.##5.134.190':139
'69.##5.220.168':139
'69.##5.219.188':139
'69.##5.19.168':139
'69.##5.11.104':139
'69.##5.134.114':139
'69.##5.146.134':139
'69.##5.227.65':139
'69.##5.52.226':139
'69.#65.7.11':139
'69.##5.116.89':139
'69.##5.0.237':139
'69.##5.40.198':139
'69.##5.124.11':139
'69.##5.80.40':139
'69.##5.47.156':139
'69.##5.69.186':139
'69.##5.161.128':139
'69.##5.232.247':139
'69.##5.144.21':139
'69.##5.84.19':139
'69.##5.226.215':139
'69.##5.232.247':445
'69.##5.175.108':139
'69.##5.8.175':139
'69.##5.109.63':139
'69.##5.52.22':139
'69.#65.4.65':139
'69.##5.124.164':139
'69.##5.50.250':139
'69.##5.28.26':139
'69.##5.172.8':139
'69.##5.52.171':139
'69.##5.186.239':139
'69.##5.60.187':139
'69.##5.149.43':139
'69.##5.35.98':139
'69.##5.11.235':139
'69.##5.114.2':139
'69.##5.22.114':139
'69.##5.65.10':139
'69.#65.4.84':139
'69.##5.102.115':139
'69.##5.225.57':139
'69.##5.89.61':139
'69.#65.57.6':139
'69.##5.82.246':139
'69.##5.241.97':139
'69.##5.104.50':139
'69.##5.55.16':139
'69.##5.49.127':139
'69.##5.63.170':139
'69.#65.0.39':139
'69.##5.120.69':139
'69.##5.198.33':139
'69.##5.52.63':139
'69.##5.75.84':139
'69.##5.154.197':139
'69.##5.162.57':139
'69.##5.64.157':139
'69.##5.75.99':139
'69.##5.95.66':139
'69.##5.206.71':139
'69.##5.180.71':445
'69.##5.197.78':445
'69.##5.106.112':445
'69.##5.129.77':445
'69.##5.113.166':445
'69.##5.90.86':445
'69.##5.24.76':445
'69.##5.50.84':445
'69.##5.188.137':445
'69.##5.54.176':445
'69.##5.219.188':445
'69.##5.19.168':445
'69.##5.11.104':445
'69.##5.134.114':445
'69.##5.146.134':445
'69.##5.227.65':445
'69.##5.52.226':445
'69.#65.7.11':445
'69.##5.116.89':445
'69.##5.0.237':445
'69.##5.232.247':9988
'69.##5.11.104':9988
'69.##5.144.21':9988
'69.##5.84.19':9988
'69.##5.226.215':9988
'69.##5.194.132':139
'69.##5.182.243':139
'69.##5.132.143':139
'69.##5.19.168':9988
'69.#65.7.11':9988
'69.##5.220.168':9988
'69.##5.52.230':9988
'69.##5.245.188':9988
'69.##5.144.23':445
'69.##5.102.48':9988
'69.##5.104.113':9988
'69.##5.69.186':9988
'69.##5.137.69':9988
'69.##5.197.30':9988
'69.##5.155.162':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней