Trojan.Starman.6066

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER99bc.dir00\svchost.exe.mdmp 16325836412032140

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER99bc.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'66.##0.3.190':139
'66.##0.62.103':139
'66.##0.148.20':445
'66.##0.220.246':445
'66.##0.79.89':139
'66.##0.62.103':445
'66.##0.79.89':445
'66.##0.22.99':139
'66.##0.3.190':445
'66.##0.46.52':445
'66.##0.202.181':445
'66.##0.23.135':445
'66.##0.235.202':445
'66.##0.33.176':445
'66.##0.156.174':445
'66.##0.159.115':445
'66.##0.207.100':445
'66.##0.13.138':445
'66.##0.83.199':445
'66.##0.22.99':445
'66.##0.154.225':139
'66.##0.76.51':139
'66.##0.115.108':139
'66.##0.225.114':139
'66.##0.173.240':139
'66.##0.82.79':139
'66.##0.233.125':139
'66.##0.212.128':139
'66.##0.207.19':139
'66.##0.107.227':139
'66.##0.190.187':139
'66.##0.45.191':139
'66.##0.212.170':139
'66.##0.187.212':139
'66.##0.221.104':139
'66.##0.177.33':139
'66.##0.29.153':139
'66.##0.57.215':139
'66.##0.180.89':139
'66.##0.206.147':445
'66.##0.51.133':445
'66.#40.2.42':445
'66.##0.186.27':445
'66.##0.44.129':445
'66.##0.138.115':445
'66.##0.170.120':445
'66.##0.253.142':445
'66.##0.53.67':445
'66.##0.87.247':445
'66.##0.148.20':139
'66.##0.220.246':139
'66.##0.207.100':139
'66.##0.46.52':139
'66.##0.42.251':445
'66.##0.52.128':445
'66.##0.156.184':445
'66.##0.142.42':445
'66.##0.128.142':445
'66.##0.16.19':445
'66.##0.0.177':445
'66.##0.109.17':445
'66.##0.15.46':445
'66.##0.10.80':445
'66.##0.34.159':445
'66.##0.103.19':445
'66.##0.203.51':445
'66.##0.95.44':445
'66.##0.73.37':445
'66.##0.133.157':445
'66.##0.222.202':445
'66.##0.221.158':445
'66.##0.30.162':445
'66.##0.252.30':445
'66.##0.132.181':445
'66.##0.171.101':445
'66.##0.192.64':445
'66.##0.138.15':445
'66.##0.61.155':445
'66.##0.180.250':139
'66.##0.199.148':445
'66.##0.85.190':445
'66.##0.5.122':445
'66.##0.94.69':445
'66.##0.48.86':445
'66.#40.6.56':445
'66.#40.23.6':445
'66.##0.77.63':445
'66.##0.55.185':445
'66.##0.178.218':445
'66.##0.173.240':445
'66.##0.212.128':445
'66.##0.154.225':445
'66.##0.76.51':445
'66.##0.207.19':445
'66.##0.180.250':445
'66.##0.123.128':445
'66.##0.82.79':445
'66.##0.233.125':445
'66.##0.194.233':445
'66.##0.191.43':445
'66.##0.59.63':445
'66.##0.133.104':445
'66.##0.202.215':445
'66.##0.219.84':445
'66.##0.191.22':139
'66.##0.34.46':139
'66.##0.87.186':139
'66.##0.22.252':139
'66.##0.70.212':445
'66.##0.74.79':445
'66.##0.126.126':445
'66.##0.83.14':445
'66.##0.125.82':445
'66.##0.97.126':445
'66.##0.0.128':445
'66.##0.252.187':445
'66.##0.180.64':445
'66.##0.249.94':445
'66.##0.83.14':139
'66.##0.125.82':139
'66.#40.23.6':139
'66.##0.194.233':139
'66.##0.74.79':139
'66.##0.180.64':139
'66.##0.249.94':139
'66.##0.126.126':139
'66.##0.97.126':139
'66.#40.6.56':139
'66.##0.5.122':139
'66.##0.94.69':139
'66.##0.123.128':139
'66.##0.178.218':139
'66.##0.199.148':139
'66.##0.77.63':139
'66.##0.55.185':139
'66.##0.85.190':139
'66.##0.48.86':139
'66.##0.0.128':139
'66.##0.57.215':445
'66.##0.180.89':445
'66.##0.45.191':445
'66.##0.221.104':445
'66.##0.177.33':445
'66.##0.115.108':445
'66.##0.225.114':445
'66.##0.29.153':445
'66.##0.107.227':445
'66.##0.190.187':445
'66.##0.133.104':139
'66.##0.202.215':139
'66.##0.252.187':139
'66.##0.70.212':139
'66.##0.191.43':139
'66.##0.212.170':445
'66.##0.187.212':445
'66.##0.59.63':139
'66.##0.219.84':139
'66.#40.33.5':445
'66.##0.49.127':445
'66.##0.146.213':139
'66.##0.251.146':139
'66.##0.126.45':445
'66.##0.77.25':445
'66.##0.230.190':445
'66.##0.83.104':445
'66.##0.2.109':445
'66.##0.214.67':139
'66.##0.131.34':139
'66.##0.218.138':139
'66.##0.171.120':139
'66.##0.18.172':139
'66.##0.203.157':139
'66.##0.124.242':139
'66.##0.40.118':139
'66.##0.142.201':139
'66.##0.242.155':139
'66.##0.37.22':445
'66.##0.133.71':445
'66.##0.239.215':445
'66.##0.96.138':445
'66.##0.141.69':445
'66.##0.97.167':445
'66.#40.65.6':445
'66.##0.119.137':445
'66.##0.220.56':445
'66.##0.89.25':445
'66.##0.119.50':445
'66.##0.42.86':445
'66.##0.253.42':445
'66.##0.48.117':445
'66.##0.67.135':445
'66.##0.62.171':445
'66.#40.8.53':445
'66.##0.144.188':445
'66.##0.39.25':445
'66.##0.253.114':445
'66.##0.62.171':139
'66.##0.39.25':139
'66.##0.42.86':139
'66.##0.253.42':139
'66.##0.253.114':139
'66.##0.119.50':139
'66.##0.96.138':139
'66.#40.8.53':139
'66.##0.144.188':139
'66.##0.67.135':139
'66.#40.33.5':139
'66.##0.83.104':139
'66.##0.49.127':139
'66.##0.126.45':139
'66.##0.2.109':139
'66.##0.37.22':139
'66.##0.48.117':139
'66.##0.77.25':139
'66.##0.230.190':139
'66.##0.141.69':139
'66.##0.233.54':139
'66.#40.67.7':139
'66.##0.28.13':139
'66.#40.7.3':139
'66.##0.165.21':139
'66.##0.151.156':139
'66.##0.194.0':139
'66.##0.111.63':139
'66.##0.156.168':139
'66.##0.215.173':139
'66.##0.97.167':139
'66.##0.220.56':139
'66.##0.133.71':139
'66.##0.239.215':139
'66.##0.89.25':139
'66.##0.39.248':139
'66.##0.202.239':139
'66.#40.65.6':139
'66.##0.119.137':139
'66.##0.39.248':445
'66.##0.30.162':139
'66.##0.252.30':139
'66.##0.170.120':139
'66.##0.16.19':139
'66.##0.222.202':139
'66.##0.138.15':139
'66.##0.61.155':139
'66.##0.221.158':139
'66.##0.132.181':139
'66.##0.138.115':139
'66.#40.2.42':139
'66.##0.186.27':139
'66.##0.156.184':139
'66.##0.87.247':139
'66.##0.206.147':139
'66.##0.253.142':139
'66.##0.53.67':139
'66.##0.51.133':139
'66.##0.44.129':139
'66.##0.171.101':139
'66.##0.33.176':139
'66.##0.202.181':139
'66.##0.203.51':139
'66.##0.235.202':139
'66.##0.23.135':139
'66.##0.83.199':139
'66.##0.159.115':139
'66.##0.156.174':139
'66.##0.13.138':139
'66.##0.103.19':139
'66.##0.15.46':139
'66.##0.10.80':139
'66.##0.192.64':139
'66.##0.133.157':139
'66.##0.0.177':139
'66.##0.34.159':139
'66.##0.73.37':139
'66.##0.109.17':139
'66.##0.95.44':139
'66.##0.18.172':445
'66.##0.131.34':445
'66.##0.194.0':445
'66.##0.171.120':445
'66.##0.218.138':445
'66.##0.242.155':445
'66.##0.124.242':445
'66.##0.203.157':445
'66.##0.142.201':445
'66.##0.151.156':445
'66.##0.28.13':445
'66.#40.7.3':445
'66.##0.202.239':445
'66.##0.215.173':445
'66.##0.233.54':445
'66.##0.111.63':445
'66.##0.156.168':445
'66.#40.67.7':445
'66.##0.165.21':445
'66.##0.40.118':445
'66.##0.165.21':9988
'66.##0.151.156':9988
'66.##0.89.25':9988
'66.##0.215.173':9988
'66.##0.171.120':9988
'66.##0.128.142':139
'66.##0.52.128':139
'66.##0.42.251':139
'66.##0.142.42':139
'66.##0.141.69':9988
'66.##0.251.146':445
'66.##0.83.104':9988
'66.##0.214.67':445
'66.##0.146.213':445
'66.##0.2.109':9988
'66.##0.119.50':9988
'66.##0.96.138':9988
'66.##0.77.25':9988
'66.##0.42.86':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней