Trojan.Starman.6651

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER7b4d.dir00\svchost.exe.mdmp 16325836412032356

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7b4d.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'88.##0.78.138':139
'88.##0.60.171':139
'88.##0.60.110':139
'88.##0.83.85':139
'88.##0.94.232':139
'88.##0.250.12':139
'88.##0.53.148':139
'88.##0.196.147':139
'88.##0.5.245':139
'88.##0.155.98':139
'88.##0.108.208':139
'88.##0.243.40':139
'88.##0.110.74':139
'88.##0.253.1':139
'88.##0.191.35':139
'88.##0.10.147':139
'88.##0.89.235':139
'88.##0.63.44':139
'88.##0.93.210':139
'88.##0.141.35':139
'88.##0.55.166':139
'88.##0.115.24':139
'88.##0.248.196':139
'88.##0.85.122':445
'88.##0.97.27':445
'88.##0.127.14':445
'88.##0.18.236':139
'88.##0.225.45':445
'88.##0.28.46':445
'88.#40.78.9':445
'88.##0.39.151':445
'88.##0.46.224':445
'88.##0.251.186':445
'88.##0.223.251':445
'88.##0.90.202':139
'88.##0.21.205':139
'88.##0.172.189':139
'88.##0.123.83':139
'88.##0.44.246':139
'88.#40.37.9':139
'88.##0.79.97':139
'88.##0.21.89':139
'88.##0.21.147':139
'88.##0.7.254':139
'88.##0.43.32':139
'88.#40.2.8':139
'88.##0.26.231':445
'88.##0.220.203':445
'88.##0.47.79':445
'88.##0.214.128':445
'88.##0.79.214':445
'88.##0.125.235':445
'88.##0.186.97':445
'88.##0.28.41':445
'88.##0.231.108':445
'88.##0.42.173':445
'88.##0.93.85':445
'88.#40.9.77':445
'88.#40.4.58':445
'88.##0.41.35':445
'88.##0.13.11':445
'88.#40.0.11':445
'88.##0.87.74':445
'88.##0.80.40':445
'88.##0.128.178':445
'88.##0.19.132':445
'88.##0.61.224':445
'88.##0.178.120':445
'88.##0.26.60':445
'88.##0.46.224':139
'88.#40.78.9':139
'88.##0.223.251':139
'88.##0.28.46':139
'88.##0.251.186':139
'88.##0.39.151':139
'88.##0.36.118':139
'88.##0.50.10':139
'88.##0.171.230':139
'88.##0.72.84':139
'88.##0.20.41':139
'88.##0.140.80':445
'88.##0.209.74':445
'88.##0.82.140':445
'88.##0.189.175':445
'88.##0.185.203':445
'88.##0.121.212':445
'88.##0.85.122':139
'88.##0.97.27':139
'88.##0.127.14':139
'88.##0.251.121':445
'88.##0.225.45':139
'88.##0.72.84':445
'88.##0.171.77':139
'88.##0.15.205':139
'88.##0.56.157':139
'88.##0.71.151':139
'88.##0.136.71':139
'88.##0.159.127':139
'88.##0.220.23':139
'88.##0.228.244':139
'88.##0.179.186':139
'88.##0.54.242':139
'88.##0.48.16':139
'88.##0.210.161':139
'88.##0.191.158':139
'88.##0.6.240':139
'88.##0.214.222':139
'88.##0.239.214':139
'88.##0.57.32':139
'88.##0.68.183':139
'88.##0.150.216':139
'88.##0.79.103':139
'88.##0.242.33':139
'88.##0.103.43':139
'88.##0.168.228':139
'88.##0.135.216':139
'88.##0.23.218':139
'88.##0.24.204':139
'88.##0.77.161':139
'88.##0.92.11':139
'88.##0.232.121':139
'88.##0.114.154':139
'88.#40.24.9':139
'88.##0.154.12':139
'88.##0.41.232':139
'88.##0.12.42':139
'88.##0.181.248':139
'88.##0.9.227':139
'88.##0.248.217':139
'88.##0.249.198':139
'88.##0.218.16':139
'88.##0.228.77':139
'88.##0.7.206':139
'88.##0.74.225':139
'88.##0.65.77':139
'88.##0.168.247':139
'88.##0.178.52':139
'88.##0.208.123':139
'88.##0.63.44':445
'88.##0.93.210':445
'88.##0.141.35':445
'88.##0.55.166':445
'88.##0.115.24':445
'88.##0.83.85':445
'88.##0.60.171':445
'88.##0.250.12':445
'88.##0.78.138':445
'88.##0.94.232':445
'88.##0.60.110':445
'88.##0.50.10':445
'88.#40.2.8':445
'88.##0.36.118':445
'88.##0.20.41':445
'88.##0.171.230':445
'88.##0.191.35':445
'88.##0.110.74':445
'88.##0.89.235':445
'88.##0.243.40':445
'88.##0.10.147':445
'88.##0.253.1':445
'88.##0.155.98':445
'88.##0.79.97':445
'88.##0.21.89':445
'88.##0.21.147':445
'88.##0.7.254':445
'88.##0.43.32':445
'88.##0.18.236':445
'88.##0.226.130':139
'88.##0.130.178':139
'88.##0.102.210':139
'88.##0.9.209':139
'88.##0.82.80':139
'88.##0.196.147':445
'88.##0.248.196':445
'88.##0.53.148':445
'88.##0.108.208':445
'88.##0.5.245':445
'88.##0.123.83':445
'88.##0.21.205':445
'88.#40.37.9':445
'88.##0.90.202':445
'88.##0.44.246':445
'88.##0.172.189':445
'88.##0.12.175':445
'88.##0.4.176':445
'88.#40.48.4':445
'88.#40.0.5':445
'88.#40.24.3':445
'88.##0.235.226':445
'88.##0.45.130':445
'88.##0.82.11':445
'88.##0.148.76':445
'88.##0.80.206':445
'88.##0.2.239':445
'88.##0.54.153':445
'88.##0.154.98':139
'88.##0.4.154':139
'88.##0.97.253':139
'88.##0.156.213':139
'88.##0.30.47':139
'88.##0.98.112':445
'88.##0.24.71':445
'88.##0.119.133':445
'88.##0.213.97':445
'88.##0.16.49':445
'88.##0.194.249':445
'88.#40.1.98':445
'88.##0.175.19':445
'88.##0.5.114':445
'88.##0.212.2':445
'88.##0.142.62':445
'88.##0.140.31':445
'88.##0.164.218':445
'88.##0.78.76':445
'88.##0.186.227':445
'88.##0.76.135':445
'88.##0.249.244':445
'88.##0.135.103':445
'88.##0.213.125':445
'88.##0.20.210':445
'88.##0.126.15':445
'88.##0.197.130':445
'88.##0.148.182':445
'88.##0.24.185':445
'88.##0.111.118':445
'88.##0.254.57':445
'88.##0.175.15':445
'88.##0.82.56':445
'88.##0.163.82':445
'88.##0.88.51':139
'88.##0.80.206':139
'88.##0.82.11':139
'88.##0.54.153':139
'88.##0.45.130':139
'88.##0.2.239':139
'88.##0.148.76':139
'88.##0.126.15':139
'88.##0.213.125':139
'88.##0.148.182':139
'88.#40.1.98':139
'88.##0.197.130':139
'88.##0.213.97':139
'88.##0.24.71':139
'88.##0.98.112':139
'88.##0.194.249':139
'88.##0.119.133':139
'88.##0.16.49':139
'88.##0.4.176':139
'88.#40.48.4':139
'88.#40.0.5':139
'88.#40.24.3':139
'88.##0.235.226':139
'88.##0.20.210':139
'88.##0.76.135':139
'88.##0.78.76':139
'88.##0.135.103':139
'88.##0.164.218':139
'88.##0.249.244':139
'88.##0.186.227':139
'88.##0.37.153':139
'88.##0.236.234':139
'88.##0.26.132':139
'88.##0.167.104':139
'88.##0.28.79':139
'88.##0.175.15':139
'88.##0.111.118':139
'88.##0.163.82':139
'88.##0.24.185':139
'88.##0.82.56':139
'88.##0.254.57':139
'88.##0.175.19':139
'88.##0.5.114':139
'88.##0.140.31':139
'88.##0.142.62':139
'88.##0.212.2':139
'88.##0.167.104':445
'88.##0.231.108':139
'88.##0.186.97':139
'88.##0.93.85':139
'88.##0.125.235':139
'88.##0.42.173':139
'88.##0.28.41':139
'88.##0.82.140':139
'88.##0.140.80':139
'88.##0.185.203':139
'88.##0.26.60':139
'88.##0.189.175':139
'88.#40.4.58':139
'88.##0.178.120':139
'88.##0.87.74':139
'88.##0.19.132':139
'88.##0.61.224':139
'88.##0.128.178':139
'88.##0.26.231':139
'88.##0.220.203':139
'88.##0.47.79':139
'88.##0.214.128':139
'88.##0.79.214':139
'88.##0.209.74':139
'88.##0.232.243':445
'88.##0.217.96':445
'88.##0.166.14':445
'88.##0.180.179':445
'88.##0.252.120':445
'88.##0.38.85':445
'88.##0.205.77':445
'88.##0.58.205':445
'88.##0.38.170':445
'88.##0.77.98':445
'88.##0.85.193':445
'88.##0.40.136':445
'88.##0.189.85':445
'88.##0.137.4':445
'88.##0.121.212':139
'88.##0.251.121':139
'88.##0.198.173':445
'88.##0.179.185':445
'88.##0.40.169':445
'88.##0.164.207':445
'88.##0.26.173':445
'88.##0.103.65':445
'88.##0.80.40':139
'88.##0.98.112':9988
'88.##0.126.15':9988
'88.##0.24.185':9988
'88.##0.28.79':9988
'88.##0.142.62':9988
'88.##0.236.234':9988
'88.##0.137.4':139
'88.##0.40.136':139
'88.##0.119.133':9988
'88.##0.88.51':9988
'88.##0.76.135':9988
'88.##0.236.234':445
'88.##0.88.51':445
'88.##0.37.153':445
'88.##0.28.79':445
'88.##0.26.132':445
'88.##0.156.213':445
'88.##0.4.154':445
'88.##0.24.71':9988
'88.##0.154.98':445
'88.##0.30.47':445
'88.##0.97.253':445
'88.##0.189.85':139
'88.##0.38.170':139
'88.##0.13.11':139
'88.##0.12.175':139
'88.##0.38.85':139
'88.##0.77.98':139
'88.##0.205.77':139
'88.#40.0.11':139
'88.#40.9.77':139
'88.##0.41.35':139
'88.##0.58.205':139
'88.##0.85.193':139
'88.##0.164.207':139
'88.##0.179.185':139
'88.##0.103.65':139
'88.##0.198.173':139
'88.##0.26.173':139
'88.##0.180.179':139
'88.##0.232.243':139
'88.##0.217.96':139
'88.##0.166.14':139
'88.##0.40.169':139
'88.##0.252.120':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней