Trojan.Starman.6400

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERabc6.dir00\svchost.exe.mdmp 16325836412029548

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERabc6.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##5.56.183':139
'69.##5.193.119':139
'69.##5.37.121':139
'69.##5.154.93':139
'69.##5.78.85':139
'69.##5.116.31':139
'69.##5.245.115':139
'69.##5.65.201':139
'69.##5.224.112':139
'69.##5.120.243':139
'69.##5.251.88':445
'69.#95.88.9':139
'69.#95.69.3':445
'69.##5.248.76':445
'69.##5.176.27':445
'69.##5.252.45':139
'69.##5.166.161':139
'69.##5.46.88':445
'69.##5.46.88':139
'69.#95.88.9':445
'69.##5.133.240':139
'69.##5.61.73':139
'69.##5.178.32':139
'69.##5.27.192':139
'69.##5.133.80':139
'69.##5.230.95':139
'69.##5.0.228':139
'69.##5.204.239':139
'69.##5.50.58':139
'69.##5.1.253':139
'69.##5.247.106':139
'69.##5.1.247':139
'69.##5.224.188':139
'69.##5.41.246':139
'69.##5.197.41':139
'69.##5.124.84':139
'69.##5.249.90':139
'69.##5.27.209':139
'69.##5.211.129':139
'69.##5.33.131':139
'69.##5.129.114':445
'69.##5.121.110':445
'69.##5.199.220':445
'69.##5.155.184':445
'69.##5.1.205':445
'69.##5.245.41':445
'69.##5.198.133':445
'69.##5.247.47':445
'69.##5.95.77':445
'69.##5.77.235':445
'69.##5.201.53':445
'69.##5.126.244':445
'69.##5.101.107':445
'69.##5.115.144':445
'69.##5.107.173':445
'69.#95.85.6':445
'69.##5.32.112':445
'69.##5.6.159':445
'69.##5.15.46':445
'69.##5.14.131':445
'69.##5.89.87':445
'69.##5.24.121':445
'69.##5.255.243':445
'69.##5.252.99':445
'69.##5.243.251':445
'69.##5.151.164':445
'69.##5.95.164':445
'69.##5.177.69':445
'69.##5.172.44':445
'69.#95.7.10':445
'69.##5.232.181':445
'69.##5.87.96':445
'69.##5.160.245':445
'69.#95.32.4':445
'69.##5.145.223':445
'69.##5.111.245':445
'69.#95.2.98':445
'69.##5.72.231':445
'69.#95.0.16':445
'69.##5.188.244':445
'69.##5.15.40':445
'69.##5.215.214':445
'69.##5.20.90':445
'69.##5.125.116':445
'69.##5.80.125':445
'69.##5.232.154':445
'69.##5.38.168':445
'69.##5.36.166':445
'69.##5.208.215':445
'69.##5.165.208':445
'69.##5.61.73':445
'69.##5.50.58':445
'69.##5.133.240':445
'69.##5.133.80':445
'69.##5.178.32':445
'69.##5.0.228':445
'69.##5.116.1':445
'69.##5.230.95':445
'69.##5.1.253':445
'69.##5.204.239':445
'69.#95.73.7':139
'69.##5.43.231':139
'69.##5.78.138':139
'69.#95.56.5':139
'69.##5.137.138':139
'69.##5.35.120':139
'69.##5.214.95':139
'69.##5.231.48':139
'69.##5.115.59':139
'69.##5.0.186':139
'69.##5.168.77':445
'69.##5.252.167':445
'69.##5.38.118':445
'69.##5.203.181':445
'69.##5.199.132':445
'69.##5.7.194':445
'69.##5.115.103':445
'69.##5.115.103':139
'69.##5.236.252':445
'69.##5.7.194':139
'69.##5.38.118':139
'69.##5.168.77':139
'69.##5.199.132':139
'69.##5.38.168':139
'69.##5.203.181':139
'69.##5.166.161':445
'69.##5.154.93':445
'69.##5.252.45':445
'69.##5.252.167':139
'69.##5.236.252':139
'69.##5.20.90':139
'69.##5.15.40':139
'69.##5.80.125':139
'69.##5.116.1':139
'69.##5.125.116':139
'69.##5.36.166':139
'69.##5.232.154':139
'69.##5.165.208':139
'69.##5.215.214':139
'69.##5.208.215':139
'69.##5.1.247':445
'69.##5.211.129':445
'69.##5.247.106':445
'69.##5.197.41':445
'69.##5.224.188':445
'69.##5.249.90':445
'69.##5.27.192':445
'69.##5.124.84':445
'69.##5.33.131':445
'69.##5.27.209':445
'69.##5.193.119':445
'69.##5.224.112':445
'69.##5.56.183':445
'69.##5.78.85':445
'69.##5.37.121':445
'69.##5.245.115':445
'69.##5.41.246':445
'69.##5.116.31':445
'69.##5.120.243':445
'69.##5.65.201':445
'69.##5.72.20':445
'69.##5.85.106':445
'69.##5.143.6':445
'69.##5.106.82':445
'69.##5.153.83':139
'69.##5.49.87':445
'69.##5.166.102':445
'69.##5.137.237':445
'69.##5.120.254':445
'69.##5.55.188':445
'69.##5.174.16':445
'69.##5.138.26':139
'69.##5.62.70':139
'69.##5.179.228':139
'69.##5.14.22':139
'69.##5.88.171':139
'69.##5.162.158':139
'69.##5.39.163':139
'69.#95.52.4':139
'69.##5.134.62':139
'69.##5.80.134':139
'69.##5.1.242':445
'69.##5.6.231':445
'69.##5.45.171':445
'69.##5.120.81':445
'69.##5.194.202':445
'69.##5.112.244':445
'69.##5.79.174':445
'69.#95.5.64':445
'69.##5.124.230':445
'69.##5.88.46':445
'69.##5.123.47':445
'69.##5.30.229':445
'69.##5.97.167':445
'69.##5.250.48':445
'69.##5.49.132':445
'69.##5.81.238':445
'69.##5.153.171':445
'69.##5.230.144':445
'69.##5.116.91':445
'69.##5.19.236':445
'69.##5.30.229':139
'69.##5.116.91':139
'69.##5.123.47':139
'69.##5.49.132':139
'69.##5.97.167':139
'69.##5.153.171':139
'69.##5.120.81':139
'69.##5.81.238':139
'69.##5.19.236':139
'69.##5.230.144':139
'69.##5.49.87':139
'69.##5.85.106':139
'69.##5.106.82':139
'69.##5.120.254':139
'69.##5.55.188':139
'69.##5.137.237':139
'69.##5.250.48':139
'69.##5.166.102':139
'69.##5.143.6':139
'69.##5.174.16':139
'69.##5.229.51':139
'69.##5.132.59':139
'69.##5.107.17':139
'69.##5.194.230':139
'69.##5.151.137':139
'69.##5.58.169':139
'69.#95.7.55':139
'69.##5.231.101':139
'69.#95.8.44':139
'69.##5.102.8':139
'69.##5.6.231':139
'69.##5.124.230':139
'69.##5.1.242':139
'69.##5.194.202':139
'69.##5.45.171':139
'69.##5.79.174':139
'69.##5.41.22':139
'69.##5.112.244':139
'69.##5.88.46':139
'69.#95.5.64':139
'69.##5.145.223':139
'69.##5.160.245':139
'69.#95.32.4':139
'69.##5.245.41':139
'69.##5.198.133':139
'69.##5.188.244':139
'69.##5.72.231':139
'69.#95.0.16':139
'69.##5.232.181':139
'69.##5.87.96':139
'69.##5.1.205':139
'69.##5.199.220':139
'69.##5.155.184':139
'69.#95.85.6':139
'69.##5.32.112':139
'69.##5.77.235':139
'69.##5.247.47':139
'69.##5.95.77':139
'69.##5.129.114':139
'69.##5.121.110':139
'69.##5.176.27':139
'69.#95.69.3':139
'69.##5.248.76':139
'69.##5.151.164':139
'69.##5.95.164':139
'69.##5.200.13':445
'69.##5.19.168':445
'69.##5.25.112':445
'69.##5.251.88':139
'69.#95.99.4':445
'69.##5.243.251':139
'69.##5.255.243':139
'69.##5.252.99':139
'69.##5.111.245':139
'69.#95.2.98':139
'69.#95.7.10':139
'69.##5.177.69':139
'69.##5.172.44':139
'69.##5.89.87':139
'69.##5.24.121':139
'69.##5.179.228':445
'69.##5.138.26':445
'69.##5.88.171':445
'69.#95.7.55':445
'69.##5.14.22':445
'69.#95.52.4':445
'69.##5.162.158':445
'69.##5.80.134':445
'69.##5.62.70':445
'69.##5.134.62':445
'69.##5.107.17':445
'69.##5.132.59':445
'69.##5.151.137':445
'69.##5.41.22':445
'69.##5.194.230':445
'69.##5.231.101':445
'69.##5.58.169':445
'69.##5.102.8':445
'69.##5.229.51':445
'69.#95.8.44':445
'69.##5.107.173':139
'69.##5.101.107':139
'69.##5.115.144':139
'69.##5.19.168':139
'69.##5.72.20':139
'69.##5.14.131':139
'69.##5.6.159':139
'69.##5.15.46':139
'69.##5.201.53':139
'69.##5.126.244':139
'69.##5.174.16':9988
'69.##5.124.230':9988
'69.##5.120.254':9988
'69.##5.39.163':445
'69.##5.153.83':445
'69.##5.25.112':139
'69.##5.200.13':139
'69.#95.99.4':139
'69.##5.88.46':9988
'69.##5.132.59':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней