Trojan.Starman.6459

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERf8e9.dir00\svchost.exe.mdmp 16325836412029836

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%TEMP%\WERf8e9.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'69.#6.159.0':139
'69.##.169.19':139
'69.#6.0.140':139
'69.#6.41.21':139
'69.##.139.203':139
'69.##.56.108':139
'69.##.10.143':139
'69.##.165.36':139
'69.##.54.122':139
'69.#6.75.56':139
'69.#6.73.28':139
'69.##.71.234':139
'69.#6.70.96':139
'69.##.161.232':139
'69.##.184.205':139
'69.##.47.185':139
'69.##.201.229':139
'69.#6.58.12':139
'69.##.108.204':139
'69.#6.5.82':139
'69.##.255.201':139
'69.#6.51.98':139
'69.##.172.80':139
'69.#6.38.72':445
'69.##.133.29':445
'69.##.35.211':445
'69.##.147.254':445
'69.##.96.193':445
'69.##.110.176':445
'69.##.161.232':445
'69.##.71.234':445
'69.##.47.185':445
'69.##.87.185':445
'69.##.184.205':445
'69.##.184.133':445
'69.##.245.100':445
'69.##.20.233':445
'69.##.164.172':139
'69.#6.25.2':445
'69.##.100.184':445
'69.##.118.60':445
'69.#6.71.63':445
'69.##.63.237':445
'69.##.29.133':445
'69.#6.64.62':445
'69.##.140.152':139
'69.##.75.140':139
'69.#6.95.73':139
'69.##.169.85':139
'69.##.146.246':139
'69.##.117.75':139
'69.##.58.159':445
'69.#6.95.73':445
'69.##.50.118':445
'69.##.119.191':139
'69.##.117.215':445
'69.##.103.73':445
'69.#6.62.84':445
'69.##.91.195':445
'69.##.148.17':445
'69.##.108.208':445
'69.##.128.103':445
'69.##.50.118':139
'69.##.58.159':139
'69.##.117.215':139
'69.#6.19.55':445
'69.#6.0.227':445
'69.##.146.246':445
'69.##.118.60':139
'69.##.147.254':139
'69.#6.71.63':139
'69.##.29.133':139
'69.##.63.237':139
'69.##.35.211':139
'69.##.110.176':139
'69.##.87.185':139
'69.##.133.29':139
'69.##.96.193':139
'69.#6.38.72':139
'69.##.117.75':445
'69.##.119.191':445
'69.##.140.152':445
'69.##.169.85':445
'69.##.75.140':445
'69.#6.25.2':139
'69.##.245.100':139
'69.#6.64.62':139
'69.##.100.184':139
'69.##.20.233':139
'69.##.184.133':139
'69.##.221.206':139
'69.##.194.121':139
'69.##.119.32':139
'69.##.23.240':139
'69.##.227.152':139
'69.#6.44.9':139
'69.##.171.95':139
'69.##.70.232':139
'69.##.171.145':139
'69.##.46.143':139
'69.##.226.67':139
'69.##.219.194':139
'69.##.103.185':139
'69.##.210.92':139
'69.#6.60.56':139
'69.#6.25.33':139
'69.##.136.104':139
'69.##.68.166':139
'69.##.14.186':139
'69.##.144.155':139
'69.##.153.137':139
'69.##.155.87':139
'69.##.123.59':139
'69.##.154.232':445
'69.##.132.213':445
'69.##.147.102':445
'69.##.26.181':139
'69.#6.93.84':139
'69.##.79.253':445
'69.##.210.92':445
'69.##.219.194':445
'69.#6.25.33':445
'69.#6.60.56':445
'69.##.20.224':445
'69.#6.99.58':139
'69.##.92.103':139
'69.##.119.202':139
'69.##.116.182':139
'69.##.72.200':139
'69.##.236.253':139
'69.##.198.80':139
'69.#6.45.17':139
'69.##.71.153':139
'69.##.183.184':139
'69.#6.3.234':139
'69.#6.73.28':445
'69.##.54.122':445
'69.#6.75.56':445
'69.##.169.19':445
'69.##.56.108':445
'69.##.10.143':445
'69.##.57.164':139
'69.##.52.102':139
'69.##.164.172':445
'69.##.165.36':445
'69.##.172.80':445
'69.#6.51.98':445
'69.#6.5.82':445
'69.##.255.201':445
'69.#6.70.96':445
'69.##.201.229':445
'69.#6.58.12':445
'69.#6.0.140':445
'69.#6.159.0':445
'69.##.139.203':445
'69.##.108.204':445
'69.#6.41.21':445
'69.##.80.104':139
'69.##.92.176':445
'69.#6.6.72':445
'69.##.80.104':445
'69.#6.69.28':445
'69.##.117.217':445
'69.#6.73.12':445
'69.##.20.224':139
'69.##.79.253':139
'69.##.132.213':139
'69.##.154.232':139
'69.##.147.102':139
'69.##.117.217':139
'69.##.158.125':139
'69.##.92.176':139
'69.#6.69.28':139
'69.#6.26.30':139
'69.#6.73.12':139
'69.##.158.125':445
'69.#6.26.30':445
'69.##.52.102':445
'69.#6.6.72':139
'69.##.57.164':445
'69.##.164.191':445
'69.##.63.138':445
'69.##.21.210':445
'69.##.239.14':445
'69.##.156.24':445
'69.#6.11.93':445
'69.##.232.158':445
'69.##.238.245':445
'69.##.164.221':445
'69.##.252.20':445
'69.##.159.164':445
'69.##.67.177':139
'69.##.144.190':139
'69.##.150.105':139
'69.##.81.226':139
'69.##.195.45':139
'69.##.57.145':139
'69.##.229.193':445
'69.#6.3.216':445
'69.##.166.95':445
'69.##.57.227':445
'69.#6.65.16':445
'69.##.150.155':445
'69.##.200.90':445
'69.#6.16.4':445
'69.##.231.234':445
'69.##.230.125':445
'69.##.90.115':445
'69.#6.33.36':445
'69.##.137.143':445
'69.##.241.85':445
'69.#6.129.7':445
'69.#6.94.32':445
'69.#6.7.160':445
'69.##.208.228':445
'69.#6.33.57':445
'69.##.128.232':445
'69.##.153.45':445
'69.##.245.229':445
'69.##.221.237':445
'69.##.235.199':445
'69.##.69.130':445
'69.##.41.152':445
'69.##.25.209':445
'69.#6.19.88':445
'69.##.63.138':139
'69.##.153.45':139
'69.##.57.227':139
'69.#6.3.216':139
'69.##.239.14':139
'69.##.164.221':139
'69.#6.33.57':139
'69.##.208.228':139
'69.##.128.232':139
'69.##.159.164':139
'69.##.232.158':139
'69.##.245.229':139
'69.#6.11.93':139
'69.##.164.191':139
'69.##.21.210':139
'69.##.156.24':139
'69.##.238.245':139
'69.##.252.20':139
'69.##.166.95':139
'69.#6.65.16':139
'69.##.150.155':139
'69.##.229.193':139
'69.##.25.209':139
'69.##.137.143':139
'69.##.241.85':139
'69.#6.129.7':139
'69.#6.94.32':139
'69.#6.7.160':139
'69.#6.10.92':139
'69.##.185.87':139
'69.##.220.232':139
'69.##.215.146':139
'69.##.30.165':139
'69.#6.94.83':139
'69.##.69.130':139
'69.##.235.199':139
'69.#6.19.88':139
'69.##.221.237':139
'69.##.41.152':139
'69.##.231.234':139
'69.#6.16.4':139
'69.#6.33.36':139
'69.##.200.90':139
'69.##.230.125':139
'69.##.90.115':139
'69.##.221.248':445
'69.##.220.10':445
'69.##.223.234':445
'69.#6.0.227':139
'69.##.195.57':445
'69.#6.165.7':445
'69.##.254.88':445
'69.##.96.112':445
'69.#6.31.82':445
'69.##.79.149':445
'69.##.138.105':445
'69.##.140.55':139
'69.##.148.17':139
'69.##.80.137':139
'69.#6.16.73':139
'69.##.236.147':139
'69.#6.19.55':139
'69.##.108.208':139
'69.##.91.195':139
'69.#6.62.84':139
'69.##.103.73':139
'69.##.128.103':139
'69.#6.8.179':445
'69.##.12.117':445
'69.##.59.196':445
'69.##.109.12':445
'69.##.82.183':445
'69.##.122.30':445
'69.##.178.127':445
'69.##.80.137':445
'69.##.140.55':445
'69.##.236.147':445
'69.##.114.125':445
'69.#6.16.73':445
'69.##.249.184':445
'69.##.37.225':445
'69.##.248.165':445
'69.##.13.240':445
'69.##.165.243':445
'69.##.166.94':445
'69.##.139.230':445
'69.##.183.130':445
'69.##.59.175':445
'69.##.213.49':445
'69.##.243.141':445
'69.##.81.226':9988
'69.##.57.145':9988
'69.##.128.232':9988
'69.##.57.145':445
'69.##.166.95':9988
'69.##.195.57':139
'69.#6.165.7':139
'69.##.79.149':139
'69.##.220.10':139
'69.##.223.234':139
'69.##.221.248':139
'69.##.215.146':445
'69.##.185.87':445
'69.#6.94.83':445
'69.#6.10.92':445
'69.##.30.165':445
'69.##.220.232':445
'69.##.67.177':445
'69.##.144.190':445
'69.##.150.105':445
'69.##.81.226':445
'69.##.195.45':445
'69.##.138.105':139
'69.##.183.130':139
'69.##.82.183':139
'69.##.139.230':139
'69.##.243.141':139
'69.##.59.175':139
'69.##.122.30':139
'69.##.178.127':139
'69.##.114.125':139
'69.##.59.196':139
'69.##.109.12':139
'69.##.12.117':139
'69.#6.8.179':139
'69.##.13.240':139
'69.##.96.112':139
'69.#6.31.82':139
'69.##.254.88':139
'69.##.165.243':139
'69.##.166.94':139
'69.##.213.49':139
'69.##.37.225':139
'69.##.248.165':139
'69.##.249.184':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней