Trojan.Starman.6579

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER366e.dir00\svchost.exe.mdmp 16325836412032192

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER366e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'69.##.11.196':139
'69.#4.13.39':139
'69.##.218.234':139
'69.##.103.160':139
'69.#4.59.40':139
'69.##.95.154':139
'69.##.77.209':139
'69.##.244.55':139
'69.##.112.203':139
'69.##.40.176':139
'69.##.127.82':139
'69.#4.24.82':139
'69.#4.95.29':139
'69.##.16.115':139
'69.#4.59.90':445
'69.#4.24.52':445
'69.##.108.254':139
'69.#4.189.4':139
'69.##.78.198':139
'69.##.68.178':139
'69.##.231.124':139
'69.##.178.78':139
'69.##.103.160':445
'69.#4.59.40':445
'69.##.127.82':445
'69.##.108.254':445
'69.#4.189.4':445
'69.##.112.203':445
'69.##.40.176':445
'69.#4.13.39':445
'69.##.218.234':445
'69.##.11.196':445
'69.##.78.198':445
'69.##.175.227':139
'69.##.118.76':139
'69.##.129.155':139
'69.##.230.247':139
'69.##.152.45':139
'69.##.68.178':445
'69.##.231.124':445
'69.#4.95.29':445
'69.##.16.115':445
'69.#4.24.82':445
'69.##.24.142':139
'69.##.204.219':139
'69.##.152.209':139
'69.##.150.240':139
'69.##.94.146':139
'69.##.225.248':445
'69.##.52.156':445
'69.#4.24.52':139
'69.#4.25.9':139
'69.#4.59.90':139
'69.#4.253.4':139
'69.##.90.154':139
'69.##.98.152':139
'69.##.47.115':139
'69.##.159.133':139
'69.##.115.77':139
'69.##.176.93':139
'69.#4.5.62':139
'69.##.118.37':139
'69.##.48.173':139
'69.##.92.241':139
'69.#4.46.35':445
'69.#4.253.4':445
'69.##.150.240':445
'69.#4.5.62':445
'69.##.118.37':445
'69.##.176.93':445
'69.##.204.219':445
'69.#4.25.9':445
'69.##.24.142':445
'69.##.94.146':445
'69.##.152.209':445
'69.##.92.241':445
'69.##.26.204':445
'69.##.159.133':445
'69.##.204.195':445
'69.##.235.67':445
'69.##.254.176':445
'69.##.98.152':445
'69.##.48.173':445
'69.##.90.154':445
'69.##.115.77':445
'69.##.47.115':445
'69.#4.5.235':445
'69.#4.163.8':445
'69.##.77.117':445
'69.##.77.151':445
'69.##.165.82':445
'69.##.123.42':139
'69.##.35.174':139
'69.##.51.188':139
'69.#4.62.88':445
'69.##.177.240':445
'69.##.228.60':445
'69.##.143.57':445
'69.#4.58.66':445
'69.#4.57.25':445
'69.##.192.153':445
'69.##.59.185':445
'69.#4.0.163':445
'69.##.172.108':445
'69.#4.0.19':445
'69.##.245.47':445
'69.##.175.88':445
'69.##.167.98':139
'69.##.93.175':139
'69.##.146.93':139
'69.##.107.34':139
'69.##.183.209':139
'69.##.16.147':139
'69.#4.3.79':139
'69.##.100.34':139
'69.##.190.180':139
'69.#4.58.54':139
'69.##.28.241':139
'69.##.134.103':139
'69.##.207.101':139
'69.##.139.194':139
'69.##.99.203':139
'69.##.152.236':139
'69.##.211.61':139
'69.##.22.118':139
'69.#4.72.59':139
'69.##.162.141':139
'69.##.237.146':139
'69.##.112.200':139
'69.##.130.90':139
'69.##.162.133':139
'69.##.61.106':139
'69.##.213.242':139
'69.#4.80.62':139
'69.#4.57.25':139
'69.##.143.57':139
'69.##.59.185':139
'69.#4.13.25':139
'69.##.192.153':139
'69.##.242.168':139
'69.##.178.78':445
'69.##.230.247':445
'69.##.77.209':445
'69.##.244.55':445
'69.##.95.154':445
'69.##.118.76':445
'69.##.73.205':139
'69.##.175.227':445
'69.##.152.45':445
'69.##.129.155':445
'69.#4.58.66':139
'69.##.242.168':445
'69.##.213.242':445
'69.##.73.205':445
'69.#4.62.88':139
'69.##.177.240':139
'69.##.162.133':445
'69.#4.13.25':445
'69.##.130.90':445
'69.#4.80.62':445
'69.##.61.106':445
'69.#4.163.8':139
'69.#4.0.163':139
'69.##.172.108':139
'69.#4.0.19':139
'69.##.245.47':139
'69.##.175.88':139
'69.##.77.117':139
'69.#4.5.235':139
'69.##.165.82':139
'69.##.228.60':139
'69.##.77.151':139
'69.##.130.94':445
'69.#4.15.1':445
'69.##.199.130':445
'69.##.120.221':445
'69.#4.5.73':445
'69.##.159.107':445
'69.#4.32.11':445
'69.#4.68.94':445
'69.##.115.195':445
'69.##.178.75':445
'69.##.140.236':445
'69.#4.53.48':139
'69.##.78.147':139
'69.##.130.57':139
'69.##.184.43':139
'69.##.209.184':139
'69.##.166.45':445
'69.##.123.125':445
'69.##.240.203':139
'69.##.151.54':139
'69.##.245.13':139
'69.#4.21.5':445
'69.##.73.119':445
'69.##.57.216':445
'69.##.114.22':445
'69.##.113.114':445
'69.##.22.113':445
'69.##.206.31':445
'69.##.20.206':445
'69.##.31.178':445
'69.##.165.169':445
'69.##.88.156':445
'69.##.44.237':445
'69.##.98.115':445
'69.#4.1.249':445
'69.##.53.209':445
'69.##.192.142':445
'69.##.25.149':445
'69.##.142.173':445
'69.##.205.142':445
'69.##.36.218':445
'69.#4.29.40':445
'69.##.201.75':445
'69.##.192.142':139
'69.##.25.149':139
'69.#4.21.5':139
'69.##.159.107':139
'69.#4.32.11':139
'69.#4.29.40':139
'69.##.201.75':139
'69.#4.1.249':139
'69.##.53.209':139
'69.##.98.115':139
'69.#4.68.94':139
'69.##.166.45':139
'69.##.120.221':139
'69.##.140.236':139
'69.##.123.125':139
'69.#4.5.73':139
'69.##.115.195':139
'69.##.178.75':139
'69.#4.15.1':139
'69.##.199.130':139
'69.##.130.94':139
'69.##.36.218':139
'69.#4.5.23':139
'69.##.87.206':139
'69.##.61.179':139
'69.##.206.31':139
'69.##.20.206':139
'69.##.32.188':139
'69.##.43.220':139
'69.#4.12.99':139
'69.##.88.194':139
'69.##.118.186':139
'69.##.31.178':139
'69.##.113.114':139
'69.##.22.113':139
'69.##.44.237':139
'69.##.142.173':139
'69.##.205.142':139
'69.##.165.169':139
'69.##.88.156':139
'69.##.57.216':139
'69.##.114.22':139
'69.##.73.119':139
'69.##.175.126':445
'69.#4.22.67':445
'69.##.136.157':445
'69.##.89.235':445
'69.##.209.197':445
'69.#4.88.39':445
'69.##.13.104':445
'69.##.253.62':445
'69.#4.8.19':445
'69.##.115.125':445
'69.##.253.110':139
'69.##.153.174':139
'69.##.232.197':139
'69.##.232.71':139
'69.##.253.238':139
'69.##.163.12':139
'69.##.19.110':139
'69.##.110.194':139
'69.#4.76.49':139
'69.##.21.221':139
'69.##.167.67':139
'69.#4.13.9':445
'69.##.225.248':139
'69.##.52.156':139
'69.##.253.110':445
'69.##.19.110':445
'69.##.110.194':445
'69.##.204.195':139
'69.##.26.204':139
'69.##.254.176':139
'69.#4.46.35':139
'69.##.235.67':139
'69.#4.76.49':445
'69.##.253.238':445
'69.##.163.12':445
'69.#4.46.2':445
'69.##.49.231':445
'69.#4.64.32':445
'69.##.21.221':445
'69.##.167.67':445
'69.##.232.197':445
'69.##.232.71':445
'69.##.153.174':445
'69.##.245.13':445
'69.##.240.203':445
'69.##.151.54':445
'69.#4.53.48':445
'69.##.78.147':445
'69.##.123.125':9988
'69.#4.15.1':9988
'69.##.140.236':9988
'69.#4.5.73':9988
'69.##.120.221':9988
'69.##.130.57':445
'69.##.88.194':445
'69.##.118.186':445
'69.##.87.206':445
'69.##.61.179':445
'69.#4.5.23':445
'69.##.184.43':445
'69.##.209.184':445
'69.##.43.220':445
'69.#4.12.99':445
'69.##.32.188':445
'69.##.130.94':9988
'69.##.253.62':139
'69.#4.88.39':139
'69.##.115.125':139
'69.#4.22.67':139
'69.#4.8.19':139
'69.#4.64.32':139
'69.#4.46.2':139
'69.##.49.231':139
'69.##.13.104':139
'69.#4.13.9':139
'69.##.175.126':139
'69.#4.32.11':9988
'69.##.98.115':9988
'69.##.159.107':9988
'69.##.178.75':9988
'69.#4.68.94':9988
'69.##.209.197':139
'69.##.136.157':139
'69.##.89.235':139
'69.##.201.75':9988
'69.#4.29.40':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней