Trojan.Starman.6397

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER3806.dir00\svchost.exe.mdmp 16325836412032180

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER3806.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'69.##7.166.16':139
'69.##7.30.111':139
'69.##7.223.162':139
'69.##7.70.190':139
'69.##7.56.85':139
'69.##7.41.52':139
'69.##7.66.178':139
'69.##7.112.165':139
'69.##7.182.164':139
'69.##7.165.147':139
'69.##7.124.36':139
'69.##7.12.138':139
'69.##7.116.20':139
'69.##7.165.217':139
'69.##7.133.68':445
'69.##7.121.1':445
'69.##7.163.220':139
'69.##7.21.185':139
'69.##7.73.115':139
'69.##7.64.200':139
'69.##7.4.202':139
'69.##7.137.203':139
'69.##7.70.190':445
'69.##7.56.85':445
'69.##7.124.36':445
'69.##7.163.220':445
'69.##7.21.185':445
'69.##7.182.164':445
'69.##7.165.147':445
'69.##7.30.111':445
'69.##7.223.162':445
'69.##7.166.16':445
'69.##7.73.115':445
'69.##7.211.115':139
'69.##7.225.210':139
'69.##7.115.128':139
'69.##7.175.181':139
'69.#77.8.84':139
'69.##7.64.200':445
'69.##7.4.202':445
'69.##7.116.20':445
'69.##7.165.217':445
'69.##7.12.138':445
'69.##7.236.35':139
'69.##7.244.212':139
'69.##7.36.50':139
'69.##7.20.242':139
'69.##7.198.37':139
'69.##7.69.118':445
'69.##7.251.112':445
'69.##7.121.1':139
'69.##7.28.16':139
'69.##7.133.68':139
'69.##7.129.19':139
'69.##7.80.214':139
'69.##7.145.50':139
'69.##7.82.59':139
'69.##7.209.217':139
'69.##7.236.107':139
'69.#77.70.1':139
'69.##7.248.69':139
'69.##7.54.150':139
'69.##7.8.212':139
'69.##7.149.75':139
'69.##7.206.133':445
'69.##7.129.19':445
'69.##7.20.242':445
'69.##7.248.69':445
'69.##7.54.150':445
'69.#77.70.1':445
'69.##7.244.212':445
'69.##7.28.16':445
'69.##7.236.35':445
'69.##7.198.37':445
'69.##7.36.50':445
'69.##7.149.75':445
'69.##7.224.89':445
'69.##7.209.217':445
'69.##7.99.203':445
'69.##7.96.154':445
'69.##7.201.22':445
'69.##7.145.50':445
'69.##7.8.212':445
'69.##7.80.214':445
'69.##7.236.107':445
'69.##7.82.59':445
'69.##7.220.32':445
'69.##7.205.144':445
'69.##7.150.55':445
'69.##7.81.51':445
'69.##7.103.147':445
'69.##7.82.172':139
'69.##7.179.204':139
'69.##7.151.236':139
'69.##7.52.216':445
'69.#77.5.68':445
'69.##7.45.65':445
'69.##7.183.138':445
'69.##7.1.252':445
'69.##7.26.70':445
'69.##7.79.201':445
'69.##7.187.79':445
'69.##7.242.95':445
'69.##7.86.143':445
'69.##7.152.242':445
'69.##7.32.155':445
'69.##7.74.11':445
'69.##7.147.180':139
'69.##7.207.246':139
'69.##7.25.34':139
'69.##7.19.138':139
'69.##7.238.94':139
'69.##7.61.109':139
'69.##7.132.68':139
'69.##7.148.211':139
'69.##7.14.214':139
'69.#77.2.78':139
'69.##7.8.150':139
'69.##7.29.203':139
'69.##7.190.145':139
'69.##7.240.189':139
'69.##7.158.128':139
'69.##7.73.57':139
'69.##7.25.72':139
'69.##7.148.164':139
'69.##7.203.148':139
'69.##7.122.126':139
'69.##7.174.240':139
'69.##7.48.142':139
'69.##7.39.148':139
'69.##7.40.75':139
'69.##7.29.206':139
'69.##7.217.210':139
'69.##7.114.236':139
'69.##7.26.70':139
'69.##7.183.138':139
'69.##7.187.79':139
'69.##7.62.84':139
'69.##7.79.201':139
'69.##7.136.144':139
'69.##7.137.203':445
'69.##7.175.181':445
'69.##7.66.178':445
'69.##7.112.165':445
'69.##7.41.52':445
'69.##7.225.210':445
'69.##7.54.107':139
'69.##7.211.115':445
'69.#77.8.84':445
'69.##7.115.128':445
'69.##7.1.252':139
'69.##7.136.144':445
'69.##7.217.210':445
'69.##7.54.107':445
'69.##7.52.216':139
'69.#77.5.68':139
'69.##7.40.75':445
'69.##7.62.84':445
'69.##7.39.148':445
'69.##7.114.236':445
'69.##7.29.206':445
'69.##7.205.144':139
'69.##7.242.95':139
'69.##7.86.143':139
'69.##7.152.242':139
'69.##7.32.155':139
'69.##7.74.11':139
'69.##7.150.55':139
'69.##7.220.32':139
'69.##7.103.147':139
'69.##7.45.65':139
'69.##7.81.51':139
'69.##7.67.225':445
'69.##7.171.25':445
'69.##7.90.15':445
'69.#77.4.24':445
'69.##7.185.91':445
'69.##7.2.100':445
'69.##7.189.181':445
'69.##7.99.177':445
'69.##7.198.170':445
'69.##7.165.114':445
'69.##7.95.132':445
'69.##7.145.57':139
'69.##7.128.234':139
'69.#77.7.49':139
'69.##7.99.168':139
'69.##7.177.99':139
'69.##7.224.212':445
'69.##7.51.60':445
'69.##7.91.129':139
'69.#77.9.1':139
'69.##7.19.130':139
'69.##7.93.163':445
'69.##7.51.232':445
'69.##7.65.63':445
'69.##7.92.243':445
'69.##7.176.204':445
'69.##7.237.184':445
'69.##7.250.199':445
'69.#77.66.8':445
'69.##7.126.211':445
'69.##7.24.46':445
'69.##7.195.201':445
'69.##7.108.123':445
'69.##7.137.7':445
'69.##7.209.246':445
'69.##7.201.66':445
'69.##7.218.92':445
'69.##7.64.144':445
'69.##7.127.168':445
'69.##7.9.195':445
'69.##7.74.108':445
'69.##7.125.41':445
'69.##7.202.190':445
'69.##7.218.92':139
'69.##7.64.144':139
'69.##7.93.163':139
'69.##7.2.100':139
'69.##7.189.181':139
'69.##7.125.41':139
'69.##7.202.190':139
'69.##7.209.246':139
'69.##7.201.66':139
'69.##7.137.7':139
'69.##7.99.177':139
'69.##7.95.132':139
'69.##7.51.60':139
'69.##7.90.15':139
'69.##7.224.212':139
'69.#77.4.24':139
'69.##7.198.170':139
'69.##7.165.114':139
'69.##7.171.25':139
'69.##7.185.91':139
'69.##7.67.225':139
'69.##7.74.108':139
'69.##7.112.73':139
'69.##7.62.152':139
'69.##7.74.65':139
'69.##7.250.199':139
'69.#77.66.8':139
'69.##7.19.195':139
'69.##7.167.204':139
'69.##7.217.100':139
'69.##7.39.124':139
'69.##7.237.80':139
'69.##7.126.211':139
'69.##7.176.204':139
'69.##7.237.184':139
'69.##7.108.123':139
'69.##7.127.168':139
'69.##7.9.195':139
'69.##7.24.46':139
'69.##7.195.201':139
'69.##7.65.63':139
'69.##7.92.243':139
'69.##7.51.232':139
'69.##7.161.10':445
'69.##7.161.183':445
'69.##7.85.92':445
'69.##7.31.81':445
'69.##7.224.73':445
'69.##7.116.46':445
'69.##7.165.88':445
'69.##7.247.206':445
'69.##7.125.143':445
'69.##7.188.200':445
'69.##7.27.253':139
'69.##7.87.101':139
'69.##7.3.239':139
'69.##7.65.240':139
'69.##7.83.116':139
'69.##7.58.78':139
'69.##7.67.37':139
'69.##7.252.133':139
'69.##7.21.209':139
'69.##7.9.120':139
'69.##7.78.87':139
'69.##7.139.28':445
'69.##7.69.118':139
'69.##7.251.112':139
'69.##7.27.253':445
'69.##7.67.37':445
'69.##7.252.133':445
'69.##7.99.203':139
'69.##7.224.89':139
'69.##7.201.22':139
'69.##7.206.133':139
'69.##7.96.154':139
'69.##7.21.209':445
'69.##7.83.116':445
'69.##7.58.78':445
'69.#77.9.96':445
'69.##7.31.18':445
'69.##7.249.117':445
'69.##7.9.120':445
'69.##7.78.87':445
'69.##7.3.239':445
'69.##7.65.240':445
'69.##7.87.101':445
'69.##7.19.130':445
'69.##7.91.129':445
'69.#77.9.1':445
'69.##7.145.57':445
'69.##7.128.234':445
'69.##7.185.91':9988
'69.##7.90.15':9988
'69.##7.51.60':9988
'69.##7.95.132':9988
'69.##7.224.212':9988
'69.#77.7.49':445
'69.##7.39.124':445
'69.##7.237.80':445
'69.##7.62.152':445
'69.##7.74.65':445
'69.##7.112.73':445
'69.##7.99.168':445
'69.##7.177.99':445
'69.##7.167.204':445
'69.##7.217.100':445
'69.##7.19.195':445
'69.##7.67.225':9988
'69.##7.247.206':139
'69.##7.116.46':139
'69.##7.188.200':139
'69.##7.161.183':139
'69.##7.125.143':139
'69.##7.249.117':139
'69.#77.9.96':139
'69.##7.31.18':139
'69.##7.165.88':139
'69.##7.139.28':139
'69.##7.161.10':139
'69.##7.189.181':9988
'69.##7.218.92':9988
'69.##7.99.177':9988
'69.##7.198.170':9988
'69.##7.2.100':9988
'69.##7.224.73':139
'69.##7.85.92':139
'69.##7.31.81':139
'69.##7.64.144':9988
'69.##7.201.66':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней