Trojan.Starman.6343

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER4f0a.dir00\svchost.exe.mdmp 16325836412032172

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.#96.56.2':445
'61.##6.84.59':445
'61.##6.217.232':445
'61.##6.15.62':445
'61.##6.142.23':445
'61.##6.161.136':445
'61.##6.53.194':445
'61.##6.74.253':445
'61.##6.138.218':445
'61.##6.1.226':445
'61.##6.178.99':445
'61.#96.49.9':445
'61.##6.37.75':445
'61.##6.1.209':445
'61.##6.145.88':445
'61.##6.45.217':445
'61.##6.46.182':445
'61.##6.46.93':445
'61.##6.35.37':445
'61.##6.231.36':445
'61.##6.110.192':445
'61.##6.231.208':445
'61.#96.9.39':139
'61.##6.50.218':139
'61.##6.254.165':139
'61.##6.166.112':139
'61.##6.51.197':139
'61.##6.144.79':139
'61.##6.105.3':139
'61.##6.20.247':139
'61.##6.172.190':139
'61.##6.164.199':139
'61.##6.129.243':139
'61.##6.195.244':139
'61.##6.115.236':139
'61.##6.58.175':139
'61.##6.191.141':445
'61.##6.110.239':445
'61.##6.115.236':445
'61.##6.243.115':445
'61.##6.195.244':445
'61.##6.243.115':139
'61.##6.58.175':445
'61.##6.74.253':139
'61.##6.161.136':139
'61.##6.1.226':139
'61.##6.84.59':139
'61.##6.138.218':139
'61.##6.110.239':139
'61.##6.124.76':445
'61.##6.191.141':139
'61.##6.53.194':139
'61.##6.231.208':139
'61.#96.56.2':139
'61.##6.35.37':139
'61.##6.46.182':139
'61.##6.110.192':139
'61.##6.37.75':139
'61.##6.231.36':139
'61.##6.142.23':139
'61.##6.217.232':139
'61.##6.15.62':139
'61.##6.46.93':139
'61.##6.178.99':139
'61.##6.208.124':445
'61.##6.84.208':445
'61.##6.189.84':445
'61.##6.207.229':445
'61.##6.140.133':445
'61.##6.230.140':445
'61.##6.8.138':445
'61.##6.88.83':445
'61.##6.234.196':445
'61.##6.156.150':445
'61.##6.116.125':445
'61.##6.164.50':445
'61.##6.187.87':445
'61.##6.215.209':445
'61.##6.88.58':445
'61.##6.179.208':445
'61.##6.57.180':445
'61.#96.12.9':445
'61.##6.43.232':445
'61.##6.31.29':445
'61.##6.89.152':445
'61.##6.17.203':445
'61.#96.31.7':139
'61.##6.10.27':445
'61.##6.19.231':445
'61.##6.107.10':445
'61.##6.52.228':445
'61.##6.108.5':445
'61.##6.147.47':445
'61.##6.144.136':445
'61.##6.83.192':445
'61.##6.215.221':445
'61.##6.215.215':445
'61.##6.79.146':445
'61.#96.31.7':445
'61.##6.120.113':445
'61.##6.105.3':445
'61.##6.20.247':445
'61.##6.144.79':445
'61.##6.32.108':445
'61.##6.167.111':445
'61.##6.73.167':445
'61.##6.74.120':445
'61.##6.3.118':445
'61.##6.36.85':445
'61.##6.68.109':445
'61.##6.15.68':445
'61.##6.108.247':445
'61.##6.148.217':445
'61.##6.208.222':445
'61.##6.48.144':139
'61.##6.110.219':139
'61.##6.237.78':139
'61.##6.13.15':445
'61.##6.28.12':139
'61.##6.14.55':445
'61.##6.48.52':445
'61.##6.52.12':445
'61.##6.124.142':445
'61.##6.106.113':445
'61.##6.68.211':445
'61.##6.186.247':445
'61.##6.234.84':445
'61.##6.14.111':445
'61.##6.16.52':445
'61.##6.188.239':445
'61.##6.83.192':139
'61.##6.147.47':139
'61.##6.215.215':139
'61.##6.19.231':139
'61.##6.215.221':139
'61.##6.68.211':139
'61.##6.124.142':139
'61.##6.106.113':139
'61.##6.144.136':139
'61.##6.36.85':139
'61.##6.10.27':139
'61.##6.73.167':139
'61.##6.32.108':139
'61.##6.3.118':139
'61.##6.120.113':139
'61.##6.74.120':139
'61.##6.108.5':139
'61.##6.107.10':139
'61.##6.52.228':139
'61.##6.167.111':139
'61.##6.79.146':139
'61.##6.48.52':139
'61.##6.166.112':445
'61.##6.51.197':445
'61.##6.129.243':445
'61.##6.15.68':139
'61.##6.13.15':139
'61.##6.172.190':445
'61.##6.164.199':445
'61.##6.50.218':445
'61.##6.254.165':445
'61.#96.9.39':445
'61.##6.68.109':139
'61.##6.14.111':139
'61.##6.186.247':139
'61.##6.188.239':139
'61.##6.52.12':139
'61.##6.16.52':139
'61.##6.208.222':139
'61.##6.108.247':139
'61.##6.148.217':139
'61.##6.234.84':139
'61.##6.14.55':139
'61.#96.49.9':139
'61.##6.40.21':445
'61.##6.108.195':445
'61.#96.13.6':445
'61.##6.160.12':445
'61.##6.13.60':445
'61.##6.50.26':445
'61.##6.110.20':445
'61.##6.160.5':445
'61.##6.196.10':445
'61.##6.3.146':445
'61.##6.12.182':445
'61.##6.219.195':139
'61.##6.129.16':139
'61.##6.27.96':139
'61.##6.221.181':139
'61.##6.105.75':139
'61.##6.169.191':445
'61.##6.63.207':445
'61.##6.55.200':139
'61.##6.75.128':139
'61.#96.1.83':139
'61.##6.200.192':445
'61.##6.120.213':445
'61.##6.56.169':445
'61.#96.0.58':445
'61.##6.213.115':445
'61.##6.101.88':445
'61.##6.222.80':445
'61.##6.106.183':445
'61.##6.39.12':445
'61.##6.170.10':445
'61.##6.105.213':445
'61.##6.82.176':445
'61.##6.225.249':445
'61.##6.143.228':445
'61.##6.63.210':445
'61.##6.113.180':445
'61.##6.184.34':445
'61.##6.73.124':445
'61.##6.188.235':445
'61.##6.123.175':445
'61.##6.168.144':445
'61.##6.150.167':445
'61.##6.113.180':139
'61.##6.184.34':139
'61.##6.200.192':139
'61.##6.50.26':139
'61.##6.110.20':139
'61.##6.168.144':139
'61.##6.150.167':139
'61.##6.143.228':139
'61.##6.63.210':139
'61.##6.225.249':139
'61.##6.160.5':139
'61.##6.169.191':139
'61.##6.63.207':139
'61.##6.12.182':139
'61.##6.160.12':139
'61.##6.13.60':139
'61.##6.196.10':139
'61.##6.3.146':139
'61.##6.108.195':139
'61.#96.13.6':139
'61.##6.40.21':139
'61.##6.123.175':139
'61.##6.98.225':139
'61.##6.216.240':139
'61.##6.22.87':139
'61.##6.222.80':139
'61.##6.106.183':139
'61.##6.227.249':139
'61.##6.55.225':139
'61.##6.201.69':139
'61.##6.161.216':139
'61.##6.152.200':139
'61.##6.39.12':139
'61.##6.213.115':139
'61.##6.101.88':139
'61.##6.82.176':139
'61.##6.73.124':139
'61.##6.188.235':139
'61.##6.170.10':139
'61.##6.105.213':139
'61.##6.56.169':139
'61.#96.0.58':139
'61.##6.120.213':139
'61.##6.22.87':445
'61.##6.213.104':445
'61.##6.196.171':445
'61.##6.95.167':445
'61.##6.196.171':139
'61.##6.197.108':139
'61.##6.179.208':139
'61.##6.57.180':139
'61.##6.208.124':139
'61.##6.197.108':445
'61.##6.124.76':139
'61.##6.213.104':139
'61.##6.179.190':445
'61.##6.208.121':445
'61.##6.203.81':445
'61.##6.138.234':445
'61.##6.81.139':445
'61.##6.12.23':445
'61.##6.95.167':139
'61.#96.4.36':445
'61.##6.59.15':445
'61.##6.44.108':445
'61.##6.88.58':139
'61.##6.116.125':139
'61.##6.234.196':139
'61.##6.156.150':139
'61.##6.84.208':139
'61.##6.189.84':139
'61.##6.45.217':139
'61.##6.1.209':139
'61.##6.145.88':139
'61.##6.8.138':139
'61.##6.88.83':139
'61.##6.207.229':139
'61.##6.17.203':139
'61.##6.31.29':139
'61.##6.89.152':139
'61.##6.187.87':139
'61.##6.215.209':139
'61.##6.140.133':139
'61.##6.230.140':139
'61.##6.164.50':139
'61.#96.12.9':139
'61.##6.43.232':139
'61.##6.55.200':445
'61.##6.188.235':9988
'61.#96.1.83':445
'61.##6.129.16':445
'61.##6.75.128':445
'61.##6.82.176':9988
'61.##6.123.175':9988
'61.##6.225.249':9988
'61.##6.108.195':9988
'61.##6.110.20':9988
'61.##6.219.195':445
'61.##6.152.200':445
'61.##6.201.69':445
'61.##6.161.216':445
'61.##6.98.225':445
'61.##6.216.240':445
'61.##6.105.75':445
'61.##6.27.96':445
'61.##6.221.181':445
'61.##6.227.249':445
'61.##6.55.225':445
'61.##6.12.182':9988
'61.##6.203.81':139
'61.##6.179.190':139
'61.##6.81.139':139
'61.##6.40.21':9988
'61.##6.138.234':139
'61.#96.4.36':139
'61.##6.12.23':139
'61.##6.44.108':139
'61.##6.208.121':139
'61.##6.59.15':139
'61.##6.63.210':9988
'61.##6.3.146':9988
'61.#96.13.6':9988
'61.##6.150.167':9988
'61.##6.13.60':9988
'61.##6.113.180':9988
'61.##6.143.228':9988
'61.##6.160.5':9988
'61.##6.160.12':9988
'61.##6.184.34':9988
'61.##6.200.192':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней