Trojan.Starman.6317

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERc81a.dir00\svchost.exe.mdmp 16325836412030552

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc81a.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'72.##8.78.41':139
'72.##8.150.202':139
'72.##8.94.44':139
'72.##8.125.164':139
'72.##8.69.72':139
'72.##8.5.112':139
'72.##8.100.216':139
'72.##8.79.77':139
'72.##8.56.101':139
'72.##8.63.197':139
'72.##8.200.143':139
'72.##8.11.75':139
'72.##8.180.197':139
'72.##8.87.43':139
'72.##8.33.152':139
'72.##8.27.151':139
'72.##8.109.142':139
'72.##8.252.91':139
'72.##8.35.65':139
'72.##8.223.191':139
'72.##8.208.94':139
'72.#08.27.2':139
'72.##8.253.229':445
'72.##8.42.254':445
'72.##8.230.9':445
'72.##8.90.55':445
'72.#08.47.0':445
'72.##8.234.42':445
'72.##8.92.224':445
'72.##8.143.18':445
'72.##8.224.43':445
'72.##8.236.229':445
'72.##8.43.105':445
'72.##8.81.155':139
'72.##8.208.76':139
'72.##8.223.80':139
'72.##8.212.237':139
'72.#08.81.2':139
'72.##8.243.208':139
'72.##8.166.120':445
'72.##8.95.167':445
'72.##8.87.193':139
'72.##8.19.208':139
'72.##8.193.128':139
'72.##8.55.55':445
'72.##8.90.240':445
'72.##8.201.80':445
'72.##8.139.114':445
'72.##8.173.205':445
'72.##8.121.2':445
'72.##8.162.209':139
'72.##8.30.125':139
'72.##8.38.134':139
'72.##8.211.147':445
'72.##8.49.170':139
'72.##8.189.232':445
'72.##8.101.1':445
'72.##8.67.144':445
'72.##8.75.61':445
'72.##8.144.91':445
'72.##8.35.246':445
'72.##8.76.97':445
'72.##8.114.147':445
'72.##8.239.57':445
'72.##8.155.246':445
'72.##8.173.98':445
'72.##8.42.254':139
'72.##8.234.42':139
'72.##8.253.229':139
'72.#08.47.0':139
'72.##8.230.9':139
'72.##8.236.229':139
'72.##8.143.18':139
'72.##8.34.152':139
'72.##8.92.224':139
'72.##8.43.105':139
'72.##8.224.43':139
'72.##8.38.134':445
'72.##8.162.209':445
'72.##8.49.170':445
'72.##8.123.129':139
'72.##8.198.27':139
'72.##8.30.125':445
'72.##8.95.167':139
'72.##8.90.55':139
'72.##8.166.120':139
'72.##8.123.129':445
'72.##8.198.27':445
'72.##8.87.43':445
'72.##8.36.203':139
'72.##8.53.250':139
'72.##8.31.155':139
'72.##8.215.148':139
'72.##8.16.141':139
'72.##8.21.84':139
'72.##8.242.21':139
'72.##8.114.35':139
'72.##8.21.248':139
'72.##8.13.235':139
'72.##8.226.33':139
'72.##8.170.80':139
'72.##8.115.74':139
'72.##8.115.16':139
'72.##8.76.225':139
'72.##8.91.50':139
'72.##8.121.36':139
'72.##8.5.207':139
'72.##8.148.146':139
'72.##8.59.160':139
'72.##8.111.61':139
'72.##8.21.237':139
'72.##8.52.52':139
'72.##8.88.217':139
'72.##8.51.240':139
'72.##8.47.102':139
'72.##8.9.251':139
'72.##8.81.99':139
'72.##8.122.165':139
'72.##8.41.89':139
'72.##8.97.63':139
'72.##8.171.77':139
'72.#08.6.57':139
'72.##8.209.84':139
'72.##8.219.98':139
'72.##8.162.136':139
'72.##8.99.83':139
'72.##8.117.245':139
'72.##8.138.69':139
'72.#08.0.13':139
'72.##8.66.166':139
'72.##8.215.71':139
'72.##8.94.246':139
'72.##8.4.203':139
'72.##8.78.41':445
'72.##8.150.202':445
'72.##8.94.44':445
'72.##8.125.164':445
'72.##8.69.72':445
'72.##8.5.112':445
'72.##8.79.77':445
'72.##8.100.216':445
'72.##8.56.101':445
'72.##8.63.197':445
'72.##8.200.143':445
'72.##8.11.75':445
'72.##8.180.197':445
'72.##8.27.151':445
'72.##8.34.152':445
'72.##8.33.152':445
'72.##8.109.142':445
'72.##8.252.91':445
'72.##8.35.65':445
'72.##8.223.191':445
'72.##8.208.94':445
'72.#08.27.2':445
'72.##8.69.209':139
'72.##8.3.120':445
'72.##8.163.65':139
'72.##8.13.121':139
'72.##8.120.102':139
'72.##8.0.167':445
'72.##8.69.209':445
'72.##8.227.177':139
'72.##8.163.65':445
'72.##8.13.121':445
'72.##8.120.102':445
'72.##8.19.208':445
'72.##8.243.208':445
'72.##8.223.80':445
'72.##8.212.237':445
'72.#08.81.2':445
'72.##8.81.155':445
'72.##8.3.120':139
'72.##8.0.167':139
'72.##8.87.193':445
'72.##8.208.76':445
'72.##8.193.128':445
'72.##8.21.167':445
'72.##8.179.254':445
'72.##8.226.44':445
'72.##8.27.154':445
'72.##8.44.208':445
'72.##8.5.126':445
'72.##8.98.201':445
'72.##8.249.97':445
'72.##8.79.144':445
'72.##8.95.249':445
'72.##8.89.96':445
'72.##8.126.84':139
'72.##8.13.156':139
'72.##8.223.204':139
'72.##8.211.108':139
'72.##8.139.216':139
'72.##8.148.251':139
'72.##8.223.231':445
'72.##8.157.126':445
'72.##8.192.146':445
'72.##8.41.62':139
'72.##8.58.87':445
'72.##8.196.219':445
'72.##8.251.67':445
'72.##8.213.187':445
'72.##8.13.142':445
'72.##8.150.113':445
'72.##8.155.191':445
'72.##8.110.198':445
'72.##8.128.58':445
'72.##8.45.28':445
'72.##8.63.192':445
'72.##8.68.54':445
'72.##8.79.148':445
'72.##8.197.199':445
'72.##8.67.196':445
'72.##8.63.118':445
'72.##8.21.152':445
'72.##8.126.72':445
'72.##8.192.69':445
'72.##8.59.38':445
'72.##8.177.241':445
'72.##8.133.105':445
'72.##8.50.113':445
'72.##8.249.97':139
'72.##8.63.118':139
'72.##8.98.201':139
'72.##8.89.96':139
'72.##8.79.144':139
'72.##8.21.152':139
'72.##8.126.72':139
'72.##8.133.105':139
'72.##8.197.199':139
'72.##8.67.196':139
'72.##8.79.148':139
'72.##8.157.126':139
'72.##8.27.154':139
'72.##8.223.231':139
'72.##8.58.87':139
'72.##8.192.146':139
'72.##8.44.208':139
'72.##8.5.126':139
'72.##8.95.249':139
'72.##8.179.254':139
'72.##8.226.44':139
'72.##8.21.167':139
'72.##8.128.58':139
'72.##8.189.26':139
'72.##8.110.198':139
'72.##8.68.54':139
'72.##8.45.28':139
'72.##8.161.141':139
'72.##8.186.136':139
'72.##8.56.178':139
'72.##8.35.102':139
'72.##8.158.74':139
'72.##8.255.158':139
'72.##8.59.38':139
'72.##8.13.142':139
'72.##8.192.69':139
'72.##8.50.113':139
'72.##8.177.241':139
'72.##8.150.113':139
'72.##8.155.191':139
'72.##8.63.192':139
'72.##8.251.67':139
'72.##8.213.187':139
'72.##8.196.219':139
'72.##8.189.26':445
'72.##8.90.240':139
'72.##8.121.2':139
'72.##8.55.55':139
'72.##8.173.205':139
'72.##8.201.80':139
'72.##8.211.147':139
'72.##8.83.233':445
'72.##8.188.83':445
'72.##8.233.96':445
'72.##8.39.207':445
'72.##8.97.39':445
'72.##8.101.1':139
'72.##8.35.246':139
'72.##8.189.232':139
'72.##8.144.91':139
'72.##8.67.144':139
'72.##8.155.246':139
'72.##8.114.147':139
'72.##8.139.114':139
'72.##8.76.97':139
'72.##8.173.98':139
'72.##8.239.57':139
'72.##8.199.138':445
'72.##8.11.13':445
'72.##8.115.233':445
'72.##8.38.202':445
'72.##8.25.189':445
'72.##8.233.47':445
'72.##8.221.93':445
'72.##8.87.149':445
'72.##8.94.30':445
'72.##8.54.233':445
'72.##8.30.55':445
'72.##8.142.201':445
'72.##8.59.195':445
'72.##8.17.229':445
'72.##8.56.89':445
'72.#08.25.9':445
'72.##8.16.218':445
'72.##8.195.203':445
'72.##8.32.100':445
'72.##8.11.156':445
'72.##8.174.24':445
'72.##8.143.106':445
'72.##8.27.154':9988
'72.##8.63.118':9988
'72.##8.58.87':9988
'72.##8.148.251':445
'72.##8.41.62':445
'72.##8.39.207':139
'72.##8.188.83':139
'72.##8.56.89':139
'72.##8.83.233':139
'72.##8.97.39':139
'72.##8.233.96':139
'72.##8.35.102':445
'72.##8.186.136':445
'72.##8.255.158':445
'72.##8.161.141':445
'72.##8.158.74':445
'72.##8.56.178':445
'72.##8.126.84':445
'72.##8.13.156':445
'72.##8.223.204':445
'72.##8.211.108':445
'72.##8.139.216':445
'72.##8.11.13':139
'72.##8.233.47':139
'72.##8.199.138':139
'72.##8.25.189':139
'72.##8.115.233':139
'72.##8.54.233':139
'72.##8.87.149':139
'72.##8.75.61':139
'72.##8.221.93':139
'72.##8.30.55':139
'72.##8.94.30':139
'72.##8.59.195':139
'72.##8.16.218':139
'72.##8.142.201':139
'72.#08.25.9':139
'72.##8.17.229':139
'72.##8.174.24':139
'72.##8.32.100':139
'72.##8.38.202':139
'72.##8.11.156':139
'72.##8.143.106':139
'72.##8.195.203':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней