Trojan.Starman.6310

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER1a2f.dir00\svchost.exe.mdmp 16325836412032484

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1a2f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'89.##2.228.134':139
'89.##2.253.81':139
'89.##2.55.125':139
'89.##2.157.65':139
'89.##2.171.143':139
'89.##2.207.26':139
'89.##2.37.125':139
'89.##2.4.254':139
'89.##2.96.149':139
'89.##2.49.162':139
'89.##2.25.34':139
'89.##2.11.242':139
'89.##2.32.98':139
'89.##2.40.225':139
'89.##2.113.35':139
'89.##2.1.150':139
'89.##2.27.111':139
'89.##2.236.66':139
'89.##2.179.90':139
'89.##2.241.178':139
'89.##2.90.96':139
'89.##2.197.66':139
'89.##2.96.197':139
'89.##2.32.148':445
'89.##2.254.211':445
'89.##2.147.212':445
'89.##2.182.68':139
'89.##2.102.182':139
'89.##2.16.80':445
'89.##2.156.62':445
'89.##2.168.184':445
'89.##2.64.86':445
'89.##2.64.58':445
'89.##2.147.29':445
'89.##2.112.142':139
'89.##2.13.171':139
'89.##2.153.55':139
'89.##2.43.169':139
'89.##2.188.91':139
'89.##2.41.204':139
'89.##2.212.72':139
'89.##2.238.41':139
'89.##2.8.173':139
'89.##2.141.24':139
'89.##2.187.20':139
'89.##2.24.187':139
'89.##2.148.220':139
'89.##2.220.106':445
'89.##2.136.43':445
'89.##2.106.61':445
'89.##2.161.248':445
'89.##2.237.4':445
'89.##2.94.108':445
'89.##2.18.229':445
'89.##2.6.241':445
'89.##2.56.202':445
'89.##2.145.22':445
'89.##2.231.144':445
'89.##2.201.166':445
'89.##2.253.159':445
'89.##2.214.253':445
'89.##2.212.39':445
'89.##2.29.50':445
'89.##2.174.43':445
'89.##2.192.74':445
'89.##2.171.20':445
'89.##2.221.191':445
'89.##2.248.163':445
'89.##2.184.92':445
'89.##2.164.183':445
'89.##2.147.29':139
'89.##2.64.86':139
'89.##2.64.58':139
'89.##2.254.211':139
'89.##2.16.80':139
'89.##2.156.62':139
'89.##2.246.218':139
'89.##2.220.232':139
'89.##2.97.12':139
'89.##2.168.184':139
'89.##2.227.96':139
'89.##2.32.148':139
'89.##2.87.87':445
'89.##2.54.194':445
'89.##2.194.73':445
'89.##2.36.138':445
'89.##2.116.84':445
'89.##2.173.25':445
'89.##2.118.238':445
'89.##2.147.212':139
'89.##2.249.211':445
'89.##2.212.109':445
'89.##2.204.37':445
'89.##2.10.201':139
'89.##2.89.73':139
'89.##2.201.41':139
'89.##2.14.18':139
'89.##2.80.251':139
'89.##2.145.240':139
'89.##2.11.85':139
'89.##2.153.11':139
'89.##2.85.106':139
'89.##2.179.14':139
'89.##2.106.19':139
'89.##2.99.134':139
'89.##2.73.71':139
'89.##2.30.188':139
'89.##2.71.154':139
'89.##2.21.96':139
'89.##2.233.0':139
'89.##2.93.40':139
'89.##2.136.62':139
'89.##2.118.127':139
'89.##2.63.95':139
'89.##2.242.99':139
'89.##2.240.116':139
'89.##2.70.126':139
'89.##2.215.151':139
'89.##2.189.107':139
'89.##2.194.41':139
'89.##2.17.151':139
'89.##2.241.145':139
'89.##2.241.61':139
'89.#72.59.2':139
'89.##2.56.198':139
'89.##2.63.99':139
'89.##2.45.165':139
'89.##2.169.116':139
'89.##2.35.244':139
'89.##2.121.55':139
'89.##2.106.4':139
'89.##2.122.51':139
'89.#72.4.83':139
'89.##2.18.65':139
'89.#72.77.9':139
'89.##2.189.124':139
'89.##2.60.130':139
'89.##2.153.218':139
'89.##2.18.75':139
'89.##2.136.75':139
'89.##2.241.178':445
'89.##2.11.242':445
'89.##2.179.90':445
'89.##2.96.197':445
'89.##2.90.96':445
'89.##2.157.65':445
'89.##2.253.81':445
'89.##2.207.26':445
'89.##2.228.134':445
'89.##2.171.143':445
'89.##2.55.125':445
'89.##2.197.66':445
'89.##2.220.232':445
'89.##2.148.220':445
'89.##2.246.218':445
'89.##2.227.96':445
'89.##2.97.12':445
'89.##2.1.150':445
'89.##2.40.225':445
'89.##2.236.66':445
'89.##2.32.98':445
'89.##2.27.111':445
'89.##2.113.35':445
'89.##2.8.173':445
'89.##2.112.142':445
'89.##2.238.41':445
'89.##2.24.187':445
'89.##2.141.24':445
'89.##2.182.68':445
'89.##2.219.68':139
'89.##2.88.138':139
'89.##2.68.84':139
'89.##2.102.182':445
'89.##2.80.102':139
'89.##2.187.20':445
'89.##2.37.125':445
'89.##2.4.254':445
'89.##2.96.149':445
'89.##2.49.162':445
'89.##2.25.34':445
'89.##2.188.91':445
'89.##2.153.55':445
'89.##2.212.72':445
'89.##2.13.171':445
'89.##2.41.204':445
'89.##2.43.169':445
'89.##2.97.95':445
'89.##2.75.99':445
'89.##2.210.199':445
'89.##2.155.125':445
'89.##2.107.93':445
'89.##2.204.133':445
'89.##2.17.211':445
'89.##2.51.101':445
'89.##2.103.171':445
'89.##2.142.125':445
'89.##2.85.17':445
'89.#72.4.8':445
'89.##2.153.166':445
'89.##2.4.141':139
'89.##2.177.215':445
'89.##2.102.190':139
'89.##2.204.180':139
'89.##2.190.228':139
'89.##2.92.119':445
'89.##2.11.34':445
'89.##2.227.31':445
'89.##2.146.10':445
'89.##2.4.139':445
'89.##2.88.24':445
'89.##2.196.187':445
'89.##2.31.137':445
'89.##2.136.187':445
'89.##2.134.162':445
'89.##2.173.134':445
'89.##2.103.181':445
'89.##2.252.0':445
'89.##2.242.3':445
'89.##2.213.126':445
'89.##2.237.54':445
'89.##2.126.237':445
'89.##2.139.207':445
'89.##2.24.183':445
'89.##2.221.103':445
'89.##2.67.88':445
'89.##2.139.64':445
'89.##2.87.139':445
'89.##2.64.237':445
'89.##2.148.94':445
'89.##2.38.91':445
'89.##2.106.6':445
'89.##2.39.63':445
'89.##2.46.244':445
'89.##2.205.8':139
'89.#72.4.8':139
'89.##2.142.125':139
'89.##2.85.17':139
'89.##2.210.199':139
'89.##2.17.211':139
'89.##2.51.101':139
'89.##2.67.88':139
'89.##2.24.183':139
'89.##2.87.139':139
'89.##2.103.171':139
'89.##2.139.64':139
'89.##2.75.99':139
'89.##2.4.139':139
'89.##2.88.24':139
'89.##2.146.10':139
'89.##2.92.119':139
'89.##2.227.31':139
'89.##2.177.215':139
'89.##2.204.133':139
'89.##2.155.125':139
'89.##2.107.93':139
'89.##2.11.34':139
'89.##2.153.166':139
'89.##2.126.237':139
'89.##2.213.126':139
'89.##2.237.54':139
'89.##2.31.137':139
'89.##2.103.181':139
'89.##2.252.0':139
'89.##2.231.213':139
'89.##2.28.231':139
'89.##2.233.146':139
'89.##2.242.3':139
'89.##2.197.251':139
'89.##2.196.187':139
'89.##2.46.244':139
'89.##2.106.6':139
'89.##2.39.63':139
'89.##2.221.103':139
'89.##2.64.237':139
'89.##2.148.94':139
'89.##2.173.134':139
'89.##2.136.187':139
'89.##2.134.162':139
'89.##2.38.91':139
'89.##2.139.207':139
'89.##2.231.144':139
'89.##2.56.202':139
'89.##2.145.22':139
'89.##2.136.43':139
'89.##2.94.108':139
'89.##2.6.241':139
'89.##2.194.73':139
'89.##2.54.194':139
'89.##2.116.84':139
'89.##2.18.229':139
'89.##2.36.138':139
'89.##2.220.106':139
'89.##2.164.183':139
'89.##2.248.163':139
'89.##2.184.92':139
'89.##2.214.253':139
'89.##2.192.74':139
'89.##2.161.248':139
'89.##2.237.4':139
'89.##2.106.61':139
'89.##2.171.20':139
'89.##2.201.166':139
'89.##2.221.191':139
'89.##2.107.132':445
'89.##2.196.92':445
'89.##2.225.164':445
'89.##2.102.207':445
'89.##2.132.252':445
'89.##2.68.178':445
'89.##2.154.154':445
'89.##2.55.238':445
'89.##2.154.85':445
'89.##2.44.69':445
'89.##2.155.15':445
'89.##2.231.162':445
'89.##2.212.109':139
'89.##2.249.211':139
'89.##2.173.25':139
'89.##2.87.87':139
'89.##2.204.37':139
'89.##2.118.238':139
'89.##2.164.54':445
'89.##2.163.163':445
'89.##2.54.104':445
'89.##2.104.76':445
'89.##2.76.71':445
'89.##2.253.159':139
'89.##2.142.125':9988
'89.##2.103.171':9988
'89.##2.221.103':9988
'89.##2.17.211':9988
'89.##2.51.101':9988
'89.##2.92.119':9988
'89.##2.38.91':9988
'89.##2.134.162':9988
'89.##2.148.94':9988
'89.##2.24.183':9988
'89.##2.106.6':9988
'89.##2.85.17':9988
'89.##2.28.231':445
'89.##2.205.8':445
'89.##2.231.213':445
'89.##2.197.251':445
'89.##2.233.146':445
'89.##2.204.180':445
'89.##2.67.88':9988
'89.##2.87.139':9988
'89.##2.4.141':445
'89.##2.190.228':445
'89.##2.102.190':445
'89.##2.155.15':139
'89.##2.154.85':139
'89.##2.44.69':139
'89.##2.107.132':139
'89.##2.68.178':139
'89.##2.154.154':139
'89.##2.212.39':139
'89.##2.29.50':139
'89.##2.174.43':139
'89.##2.97.95':139
'89.##2.55.238':139
'89.##2.196.92':139
'89.##2.104.76':139
'89.##2.54.104':139
'89.##2.76.71':139
'89.##2.204.180':9988
'89.##2.28.231':9988
'89.##2.164.54':139
'89.##2.132.252':139
'89.##2.225.164':139
'89.##2.102.207':139
'89.##2.163.163':139
'89.##2.231.162':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней