Trojan.Starman.6060

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1e04.dir00\svchost.exe.mdmp 16325836412032328

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1e04.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'63.##6.36.53':139
'63.##6.114.31':139
'63.##6.93.190':139
'63.##6.154.244':139
'63.##6.118.26':139
'63.##6.195.236':139
'63.##6.190.24':139
'63.##6.186.116':139
'63.##6.23.180':139
'63.##6.116.127':139
'63.##6.175.158':139
'63.##6.87.110':139
'63.##6.241.87':139
'63.##6.135.164':139
'63.#96.9.73':139
'63.##6.198.75':139
'63.##6.122.184':139
'63.##6.133.52':139
'63.##6.3.225':139
'63.##6.13.56':139
'63.##6.225.1':139
'63.##6.23.146':139
'63.##6.13.56':445
'63.##6.225.1':445
'63.##6.241.87':445
'63.##6.135.164':445
'63.##6.87.110':445
'63.##6.175.158':445
'63.##6.154.244':445
'63.##6.133.52':445
'63.##6.3.225':445
'63.##6.122.184':445
'63.##6.198.75':445
'63.##6.145.35':139
'63.##6.24.149':139
'63.##6.26.177':139
'63.##6.1.245':139
'63.##6.119.99':139
'63.##6.224.61':445
'63.#96.9.73':445
'63.##6.196.229':445
'63.#96.96.6':139
'63.##6.230.15':445
'63.##6.198.43':139
'63.##6.84.48':139
'63.##6.115.156':139
'63.##6.177.137':139
'63.##6.120.244':139
'63.##6.50.215':139
'63.##6.233.20':445
'63.##6.212.155':139
'63.##6.136.149':139
'63.##6.203.215':139
'63.##6.187.224':139
'63.##6.48.225':139
'63.##6.144.87':139
'63.##6.119.192':139
'63.##6.233.20':139
'63.##6.60.228':139
'63.##6.29.11':139
'63.##6.164.106':139
'63.##6.51.189':139
'63.##6.55.197':139
'63.##6.82.56':139
'63.##6.60.228':445
'63.##6.136.149':445
'63.##6.203.215':445
'63.##6.84.48':445
'63.##6.115.156':445
'63.##6.198.43':445
'63.##6.196.229':139
'63.##6.224.61':139
'63.##6.230.15':139
'63.##6.212.155':445
'63.##6.50.215':445
'63.##6.120.244':445
'63.##6.55.197':445
'63.##6.82.56':445
'63.##6.144.87':445
'63.##6.119.192':445
'63.##6.48.225':445
'63.##6.187.224':445
'63.##6.177.137':445
'63.##6.164.106':445
'63.##6.51.189':445
'63.##6.29.11':445
'63.##6.118.26':445
'63.##6.2.102':139
'63.##6.235.34':139
'63.##6.110.118':139
'63.##6.24.186':445
'63.##6.119.24':139
'63.#96.49.4':139
'63.##6.230.80':139
'63.##6.127.5':139
'63.##6.254.139':139
'63.##6.59.230':139
'63.#96.5.32':445
'63.##6.151.166':445
'63.##6.197.234':445
'63.##6.185.97':445
'63.#96.21.2':445
'63.##6.77.72':445
'63.##6.39.136':445
'63.##6.165.197':445
'63.##6.28.243':445
'63.##6.61.153':445
'63.##6.103.158':445
'63.##6.19.114':139
'63.##6.14.215':139
'63.##6.231.14':139
'63.##6.214.139':139
'63.##6.213.117':139
'63.##6.54.244':139
'63.##6.251.17':139
'63.##6.53.206':139
'63.##6.134.63':139
'63.##6.5.235':139
'63.##6.115.35':139
'63.##6.159.186':139
'63.##6.230.1':139
'63.##6.255.112':139
'63.##6.170.14':139
'63.##6.251.46':139
'63.##6.220.250':139
'63.##6.230.32':139
'63.##6.98.214':139
'63.##6.255.97':139
'63.##6.115.234':139
'63.##6.98.67':139
'63.#96.96.6':445
'63.##6.181.220':139
'63.##6.24.149':445
'63.##6.26.177':445
'63.##6.145.35':445
'63.##6.139.142':139
'63.##6.14.36':139
'63.##6.180.137':139
'63.##6.128.216':139
'63.##6.83.236':139
'63.##6.119.99':445
'63.##6.23.180':445
'63.##6.116.127':445
'63.##6.114.31':445
'63.##6.93.190':445
'63.##6.36.53':445
'63.##6.23.146':445
'63.##6.1.245':445
'63.##6.190.24':445
'63.##6.186.116':445
'63.##6.195.236':445
'63.#96.49.3':139
'63.##6.128.216':445
'63.##6.83.236':445
'63.##6.181.220':445
'63.#96.5.32':139
'63.##6.24.186':139
'63.#96.49.3':445
'63.##6.213.157':445
'63.##6.14.36':445
'63.##6.180.137':445
'63.##6.139.142':445
'63.##6.165.197':139
'63.##6.185.97':139
'63.##6.151.166':139
'63.##6.77.72':139
'63.##6.213.157':139
'63.#96.21.2':139
'63.##6.28.243':139
'63.##6.39.136':139
'63.##6.103.158':139
'63.##6.197.234':139
'63.##6.61.153':139
'63.##6.43.223':445
'63.##6.83.25':445
'63.##6.68.170':445
'63.##6.171.101':445
'63.##6.115.247':445
'63.##6.149.123':445
'63.##6.248.112':445
'63.##6.86.127':445
'63.##6.112.113':445
'63.##6.69.85':445
'63.##6.18.129':445
'63.##6.158.207':445
'63.##6.81.95':139
'63.##6.142.195':139
'63.##6.170.8':139
'63.##6.109.68':139
'63.##6.152.87':139
'63.##6.122.253':445
'63.##6.134.55':445
'63.##6.107.188':139
'63.##6.246.191':139
'63.##6.188.78':139
'63.##6.204.212':445
'63.##6.123.104':445
'63.##6.179.237':445
'63.##6.169.210':445
'63.##6.39.196':445
'63.##6.211.80':445
'63.##6.32.21':445
'63.##6.33.217':445
'63.##6.101.241':445
'63.##6.73.140':445
'63.##6.83.178':445
'63.##6.67.197':445
'63.##6.174.79':445
'63.##6.87.160':445
'63.##6.166.58':445
'63.##6.134.205':445
'63.##6.218.108':445
'63.##6.216.47':445
'63.##6.224.250':445
'63.##6.75.187':445
'63.##6.4.189':445
'63.##6.231.117':445
'63.##6.134.205':139
'63.##6.218.108':139
'63.##6.204.212':139
'63.##6.248.112':139
'63.##6.86.127':139
'63.##6.4.189':139
'63.##6.231.117':139
'63.##6.87.160':139
'63.##6.166.58':139
'63.##6.174.79':139
'63.##6.112.113':139
'63.##6.149.123':139
'63.##6.115.247':139
'63.##6.171.101':139
'63.##6.122.253':139
'63.##6.134.55':139
'63.##6.18.129':139
'63.##6.69.85':139
'63.##6.68.170':139
'63.##6.158.207':139
'63.##6.83.25':139
'63.##6.75.187':139
'63.##6.254.212':139
'63.##6.53.190':139
'63.##6.194.246':139
'63.##6.32.21':139
'63.##6.33.217':139
'63.##6.186.222':139
'63.##6.55.80':139
'63.##6.222.205':139
'63.##6.61.164':139
'63.##6.206.98':139
'63.##6.101.241':139
'63.##6.39.196':139
'63.##6.211.80':139
'63.##6.67.197':139
'63.##6.216.47':139
'63.##6.224.250':139
'63.##6.73.140':139
'63.##6.83.178':139
'63.##6.179.237':139
'63.##6.169.210':139
'63.##6.123.104':139
'63.##6.194.246':445
'63.##6.49.246':445
'63.##6.65.125':445
'63.##6.78.23':445
'63.##6.43.248':139
'63.##6.43.223':139
'63.##6.107.6':445
'63.##6.94.25':445
'63.##6.213.86':445
'63.##6.248.27':445
'63.##6.40.248':445
'63.##6.217.88':139
'63.##6.192.20':139
'63.#96.9.12':139
'63.##6.171.111':139
'63.##6.20.243':139
'63.##6.111.69':139
'63.##6.201.6':139
'63.##6.237.154':139
'63.##6.165.3':139
'63.##6.199.68':139
'63.##6.125.198':139
'63.##6.188.175':445
'63.##6.199.68':445
'63.##6.125.198':445
'63.#96.9.12':445
'63.##6.171.111':445
'63.##6.192.20':445
'63.##6.217.88':445
'63.##6.43.248':445
'63.##6.237.154':445
'63.##6.165.3':445
'63.##6.201.6':445
'63.##6.111.69':445
'63.##6.162.45':445
'63.##6.6.220':445
'63.##6.45.19':445
'63.##6.116.193':445
'63.##6.39.191':445
'63.##6.198.100':445
'63.##6.20.243':445
'63.##6.43.122':445
'63.##6.101.189':445
'63.##6.187.65':445
'63.##6.107.188':445
'63.##6.158.207':9988
'63.##6.188.78':445
'63.##6.142.195':445
'63.##6.246.191':445
'63.##6.115.247':9988
'63.##6.18.129':9988
'63.##6.68.170':9988
'63.##6.122.253':9988
'63.##6.134.55':9988
'63.##6.81.95':445
'63.##6.206.98':445
'63.##6.222.205':445
'63.##6.61.164':445
'63.##6.254.212':445
'63.##6.53.190':445
'63.##6.152.87':445
'63.##6.170.8':445
'63.##6.109.68':445
'63.##6.186.222':445
'63.##6.55.80':445
'63.##6.69.85':9988
'63.##6.45.19':139
'63.##6.162.45':139
'63.##6.39.191':139
'63.##6.188.175':139
'63.##6.116.193':139
'63.##6.43.122':139
'63.##6.198.100':139
'63.##6.187.65':139
'63.##6.6.220':139
'63.##6.101.189':139
'63.##6.94.25':139
'63.##6.78.23':139
'63.##6.49.246':139
'63.##6.123.104':9988
'63.##6.86.127':9988
'63.##6.39.196':9988
'63.##6.213.86':139
'63.##6.107.6':139
'63.##6.40.248':139
'63.##6.65.125':139
'63.##6.248.27':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней