Trojan.Starman.6460

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER9dee.dir00\svchost.exe.mdmp 16325836412032232

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER9dee.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'69.##1.251.169':139
'69.##1.211.62':139
'69.##1.22.195':139
'69.##1.60.101':139
'69.##1.195.60':139
'69.##1.14.35':139
'69.##1.137.192':139
'69.##1.55.118':445
'69.##1.92.98':139
'69.##1.36.118':139
'69.##1.131.84':139
'69.##1.102.33':139
'69.##1.28.62':139
'69.##1.76.146':139
'69.##1.123.78':139
'69.##1.136.59':139
'69.##1.49.211':139
'69.##1.233.76':139
'69.##1.129.219':139
'69.##1.222.102':139
'69.##1.166.84':139
'69.##1.146.156':139
'69.#11.2.34':139
'69.##1.69.124':445
'69.##1.86.42':445
'69.##1.28.23':445
'69.##1.250.189':445
'69.##1.194.81':445
'69.##1.233.222':445
'69.##1.49.211':445
'69.##1.123.78':445
'69.##1.136.59':445
'69.##1.108.163':445
'69.##1.66.133':445
'69.##1.52.71':445
'69.##1.80.100':445
'69.##1.146.126':445
'69.##1.139.179':445
'69.##1.34.224':445
'69.##1.166.34':445
'69.##1.157.225':445
'69.##1.79.115':445
'69.##1.222.12':445
'69.##1.235.194':445
'69.##1.172.23':445
'69.##1.195.32':445
'69.##1.11.200':139
'69.##1.55.230':139
'69.#11.6.40':139
'69.##1.7.144':139
'69.##1.123.22':139
'69.##1.76.17':445
'69.##1.123.22':445
'69.#11.6.40':445
'69.##1.7.144':445
'69.##1.145.182':445
'69.#11.57.7':445
'69.#11.57.7':139
'69.##1.131.13':445
'69.##1.145.74':445
'69.##1.241.206':445
'69.##1.246.77':445
'69.##1.118.246':445
'69.##1.202.161':445
'69.##1.76.17':139
'69.##1.145.182':139
'69.##1.125.59':445
'69.##1.50.85':445
'69.##1.137.189':445
'69.##1.250.189':139
'69.##1.194.81':139
'69.##1.52.71':139
'69.##1.79.115':139
'69.##1.222.12':139
'69.##1.28.23':139
'69.##1.108.163':139
'69.##1.66.133':139
'69.##1.233.222':139
'69.##1.69.124':139
'69.##1.86.42':139
'69.##1.235.194':139
'69.##1.34.224':139
'69.##1.166.34':139
'69.##1.55.118':139
'69.##1.11.200':445
'69.##1.55.230':445
'69.##1.139.179':139
'69.##1.172.23':139
'69.##1.195.32':139
'69.##1.157.225':139
'69.##1.80.100':139
'69.##1.146.126':139
'69.##1.25.13':139
'69.##1.51.20':139
'69.##1.10.136':139
'69.##1.100.128':139
'69.##1.20.31':139
'69.##1.95.150':139
'69.##1.141.126':139
'69.##1.183.141':139
'69.##1.195.229':139
'69.##1.15.152':139
'69.##1.102.204':139
'69.##1.128.212':139
'69.##1.0.208':139
'69.#11.62.0':139
'69.##1.138.107':139
'69.##1.18.115':139
'69.##1.250.200':139
'69.##1.87.213':139
'69.##1.102.31':139
'69.##1.212.102':139
'69.##1.32.35':139
'69.##1.153.145':139
'69.##1.80.70':139
'69.##1.110.214':445
'69.##1.239.110':445
'69.##1.214.79':445
'69.##1.119.184':445
'69.##1.80.61':445
'69.##1.17.201':445
'69.##1.250.200':445
'69.##1.138.107':445
'69.##1.18.115':445
'69.##1.1.124':445
'69.##1.66.184':445
'69.##1.19.99':445
'69.##1.231.124':139
'69.##1.93.219':139
'69.#11.4.8':139
'69.##1.207.66':139
'69.##1.134.62':139
'69.##1.29.79':139
'69.##1.33.35':445
'69.#11.8.70':445
'69.##1.227.10':139
'69.##1.148.213':139
'69.##1.152.33':139
'69.##1.36.118':445
'69.##1.131.84':445
'69.##1.14.35':445
'69.##1.251.169':445
'69.##1.211.62':445
'69.##1.92.98':445
'69.##1.16.110':139
'69.##1.36.153':139
'69.##1.222.143':139
'69.##1.137.192':445
'69.#11.57.8':139
'69.##1.22.195':445
'69.##1.146.156':445
'69.#11.2.34':445
'69.##1.233.76':445
'69.##1.28.62':445
'69.##1.76.146':445
'69.##1.166.84':445
'69.##1.60.101':445
'69.##1.195.60':445
'69.##1.102.33':445
'69.##1.129.219':445
'69.##1.222.102':445
'69.##1.119.184':139
'69.##1.80.61':139
'69.##1.19.99':139
'69.##1.33.35':139
'69.#11.8.70':139
'69.##1.214.79':139
'69.##1.1.124':139
'69.##1.66.184':139
'69.##1.17.201':139
'69.##1.110.214':139
'69.##1.239.110':139
'69.##1.98.147':445
'69.##1.98.147':139
'69.#11.57.8':445
'69.##1.6.213':139
'69.##1.251.62':139
'69.#11.7.28':139
'69.##1.222.143':445
'69.#11.7.28':445
'69.##1.6.213':445
'69.##1.251.62':445
'69.##1.16.110':445
'69.##1.36.153':445
'69.##1.93.252':445
'69.##1.14.116':445
'69.##1.201.228':445
'69.##1.14.130':445
'69.##1.58.216':445
'69.#11.14.9':445
'69.##1.44.95':445
'69.##1.165.147':445
'69.##1.40.93':445
'69.##1.176.158':445
'69.##1.153.87':445
'69.##1.88.14':445
'69.##1.236.178':445
'69.##1.191.33':139
'69.##1.6.238':139
'69.##1.52.51':139
'69.##1.136.151':139
'69.##1.51.42':139
'69.##1.46.227':445
'69.##1.12.239':445
'69.##1.49.204':445
'69.##1.253.203':445
'69.##1.23.13':445
'69.##1.186.20':445
'69.##1.86.82':445
'69.##1.162.156':445
'69.##1.151.246':445
'69.##1.72.227':445
'69.##1.241.99':445
'69.##1.208.96':445
'69.##1.148.228':445
'69.##1.250.129':445
'69.##1.6.135':445
'69.##1.246.186':445
'69.##1.96.121':445
'69.#11.8.5':445
'69.##1.6.226':445
'69.##1.108.205':445
'69.##1.17.245':445
'69.##1.214.209':445
'69.##1.246.207':445
'69.##1.156.14':445
'69.##1.49.167':445
'69.##1.178.50':445
'69.##1.210.112':445
'69.##1.0.252':445
'69.##1.119.43':445
'69.##1.176.158':139
'69.##1.214.209':139
'69.##1.201.228':139
'69.##1.44.95':139
'69.##1.14.116':139
'69.##1.165.147':139
'69.##1.6.226':139
'69.##1.108.205':139
'69.##1.17.245':139
'69.##1.40.93':139
'69.##1.246.207':139
'69.##1.153.87':139
'69.##1.46.227':139
'69.##1.253.203':139
'69.##1.23.13':139
'69.##1.186.20':139
'69.##1.12.239':139
'69.##1.49.204':139
'69.##1.14.130':139
'69.##1.88.14':139
'69.#11.14.9':139
'69.##1.236.178':139
'69.##1.58.216':139
'69.##1.6.135':139
'69.##1.148.228':139
'69.##1.96.121':139
'69.##1.162.156':139
'69.##1.208.96':139
'69.##1.250.129':139
'69.##1.214.143':139
'69.##1.159.18':139
'69.##1.137.205':139
'69.##1.30.200':139
'69.##1.99.218':139
'69.##1.86.82':139
'69.##1.210.112':139
'69.##1.49.167':139
'69.##1.119.43':139
'69.##1.156.14':139
'69.##1.0.252':139
'69.##1.178.50':139
'69.#11.8.5':139
'69.##1.241.99':139
'69.##1.151.246':139
'69.##1.72.227':139
'69.##1.246.186':139
'69.##1.240.232':445
'69.##1.69.210':445
'69.##1.172.143':445
'69.##1.125.59':139
'69.##1.85.106':445
'69.##1.17.253':445
'69.##1.126.109':445
'69.##1.53.214':445
'69.##1.245.243':445
'69.##1.97.18':445
'69.##1.74.116':445
'69.##1.137.189':139
'69.##1.93.252':139
'69.##1.246.77':139
'69.##1.15.21':139
'69.##1.79.73':139
'69.##1.230.78':139
'69.##1.118.246':139
'69.##1.202.161':139
'69.##1.50.85':139
'69.##1.145.74':139
'69.##1.241.206':139
'69.##1.131.13':139
'69.##1.63.112':445
'69.##1.85.142':445
'69.##1.111.214':445
'69.##1.228.64':445
'69.##1.137.213':445
'69.##1.161.212':445
'69.##1.230.78':445
'69.##1.15.21':445
'69.##1.79.73':445
'69.##1.253.227':445
'69.##1.173.5':445
'69.##1.192.198':445
'69.##1.230.244':445
'69.##1.7.107':445
'69.##1.90.59':445
'69.##1.119.63':445
'69.##1.11.246':445
'69.#11.9.63':445
'69.##1.36.148':445
'69.##1.108.164':445
'69.##1.194.26':445
'69.#11.97.6':445
'69.##1.247.163':445
'69.##1.52.51':9988
'69.##1.85.106':139
'69.##1.30.200':9988
'69.##1.23.13':9988
'69.##1.6.135':9988
'69.##1.172.143':139
'69.##1.97.18':139
'69.##1.74.116':139
'69.##1.17.253':139
'69.##1.240.232':139
'69.##1.69.210':139
'69.##1.253.203':9988
'69.##1.214.143':445
'69.##1.159.18':445
'69.##1.137.205':445
'69.##1.30.200':445
'69.##1.99.218':445
'69.##1.136.151':445
'69.##1.6.238':445
'69.##1.49.204':9988
'69.##1.191.33':445
'69.##1.51.42':445
'69.##1.52.51':445
'69.##1.228.64':139
'69.##1.111.214':139
'69.##1.192.198':139
'69.##1.36.148':139
'69.##1.108.164':139
'69.##1.137.213':139
'69.##1.253.227':139
'69.##1.173.5':139
'69.##1.161.212':139
'69.##1.63.112':139
'69.##1.85.142':139
'69.##1.194.26':139
'69.##1.119.63':139
'69.##1.11.246':139
'69.##1.53.214':139
'69.##1.245.243':139
'69.##1.126.109':139
'69.##1.90.59':139
'69.#11.97.6':139
'69.##1.247.163':139
'69.#11.9.63':139
'69.##1.230.244':139
'69.##1.7.107':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней