Trojan.Starman.6065

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2c68.dir00\svchost.exe.mdmp 16325836412032404

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#4.61.189':139
'19#.#4.75.234':139
'19#.#4.93.88':139
'19#.#4.100.142':139
'19#.#4.204.254':139
'19#.#4.5.221':139
'19#.#4.96.22':139
'19#.#4.121.162':139
'19#.#4.227.75':139
'19#.74.0.79':139
'19#.#4.3.114':139
'19#.#4.45.108':139
'19#.#4.74.210':139
'19#.#4.212.189':139
'19#.#4.42.118':139
'19#.#4.151.204':139
'19#.#4.34.244':139
'19#.#4.155.118':139
'19#.#4.68.30':139
'19#.#4.175.74':139
'19#.#4.22.132':139
'19#.#4.12.190':445
'19#.#4.101.1':445
'19#.#4.205.38':445
'19#.#4.230.39':445
'19#.74.5.10':445
'19#.#4.45.108':445
'19#.#4.74.210':445
'19#.#4.212.189':445
'19#.#4.42.118':445
'19#.#4.151.204':445
'19#.#4.230.200':445
'19#.#4.218.154':139
'19#.#4.106.240':445
'19#.#4.21.197':139
'19#.#4.99.61':139
'19#.#4.44.27':139
'19#.#4.120.236':445
'19#.#4.200.96':445
'19#.#4.50.159':445
'19#.#4.11.165':445
'19#.#4.33.137':445
'19#.#4.73.120':139
'19#.#4.15.99':139
'19#.#4.120.46':139
'19#.#4.182.108':139
'19#.#4.99.219':139
'19#.#4.43.233':445
'19#.#4.17.167':445
'19#.#4.20.54':445
'19#.#4.130.185':445
'19#.#4.106.70':445
'19#.#4.17.62':139
'19#.#4.106.70':139
'19#.#4.20.54':139
'19#.#4.130.185':139
'19#.#4.68.191':445
'19#.#4.175.68':445
'19#.#4.122.85':139
'19#.#4.29.228':139
'19#.#4.183.17':139
'19#.#4.43.233':139
'19#.#4.17.167':139
'19#.#4.200.96':139
'19#.#4.230.200':139
'19#.#4.120.236':139
'19#.#4.33.137':139
'19#.#4.50.159':139
'19#.#4.12.190':139
'19#.#4.101.1':139
'19#.#4.205.38':139
'19#.#4.230.39':139
'19#.74.5.10':139
'19#.#4.11.165':139
'19#.#4.17.62':445
'19#.#4.182.108':445
'19#.#4.29.228':445
'19#.#4.183.17':445
'19#.#4.122.85':445
'19#.#4.15.99':445
'19#.#4.106.240':139
'19#.#4.73.120':445
'19#.#4.99.219':445
'19#.#4.120.46':445
'19#.#4.175.74':445
'19#.#4.21.144':139
'19#.#4.133.183':139
'19#.#4.127.7':139
'19#.#4.169.219':139
'19#.#4.7.195':139
'19#.#4.117.248':139
'19#.#4.95.138':139
'19#.#4.76.104':139
'19#.#4.39.133':139
'19#.#4.105.40':139
'19#.#4.173.144':139
'19#.#4.25.250':445
'19#.#4.5.214':445
'19#.#4.55.56':445
'19#.#4.218.197':445
'19#.#4.107.44':445
'19#.#4.31.59':139
'19#.#4.82.179':139
'19#.#4.5.184':139
'19#.#4.108.206':139
'19#.#4.19.109':139
'19#.#4.184.181':139
'19#.#4.14.164':139
'19#.#4.216.10':139
'19#.#4.113.183':139
'19#.#4.29.74':139
'19#.#4.210.200':139
'19#.#4.58.32':139
'19#.#4.54.129':139
'19#.#4.154.107':139
'19#.74.3.65':139
'19#.#4.94.142':139
'19#.#4.52.244':139
'19#.#4.175.95':139
'19#.#4.79.63':139
'19#.#4.234.118':139
'19#.#4.184.21':139
'19#.#4.126.234':139
'19#.#4.91.95':139
'19#.#4.247.98':139
'19#.74.9.67':139
'19#.#4.154.111':139
'19#.#4.96.22':445
'19#.#4.99.61':445
'19#.#4.5.221':445
'19#.74.0.79':445
'19#.#4.121.162':445
'19#.#4.183.84':139
'19#.#4.107.31':139
'19#.#4.218.154':445
'19#.#4.44.27':445
'19#.#4.21.197':445
'19#.#4.227.75':445
'19#.#4.155.118':445
'19#.#4.3.114':445
'19#.#4.34.244':445
'19#.#4.22.132':445
'19#.#4.68.30':445
'19#.#4.61.189':445
'19#.#4.75.234':445
'19#.#4.93.88':445
'19#.#4.100.142':445
'19#.#4.204.254':445
'19#.#4.70.186':445
'19#.#4.67.114':445
'19#.#4.107.31':445
'19#.#4.5.214':139
'19#.#4.183.84':445
'19#.#4.148.212':445
'19#.#4.198.18':445
'19#.#4.118.182':445
'19#.#4.136.166':445
'19#.#4.166.136':445
'19#.#4.25.250':139
'19#.#4.166.136':139
'19#.#4.118.182':139
'19#.#4.136.166':139
'19#.#4.70.186':139
'19#.#4.67.114':139
'19#.#4.107.44':139
'19#.#4.55.56':139
'19#.#4.218.197':139
'19#.#4.148.212':139
'19#.#4.198.18':139
'19#.#4.222.145':445
'19#.#4.49.239':445
'19#.#4.123.106':445
'19#.#4.137.43':445
'19#.#4.76.137':445
'19#.#4.101.203':445
'19#.#4.1.141':445
'19#.#4.73.46':445
'19#.#4.160.31':445
'19#.#4.136.88':445
'19#.74.71.0':445
'19#.#4.14.236':139
'19#.#4.144.194':139
'19#.#4.193.203':139
'19#.#4.10.205':139
'19#.#4.138.116':139
'19#.#4.182.145':139
'19#.#4.163.42':445
'19#.#4.252.76':139
'19#.#4.42.63':139
'19#.#4.76.117':139
'19#.#4.168.246':445
'19#.#4.183.15':445
'19#.#4.89.157':445
'19#.#4.216.108':445
'19#.#4.40.158':445
'19#.#4.54.127':445
'19#.#4.20.113':445
'19#.#4.127.47':445
'19#.#4.63.154':445
'19#.#4.47.64':445
'19#.#4.109.32':445
'19#.#4.125.69':445
'19#.#4.2.125':445
'19#.#4.70.25':445
'19#.#4.126.53':445
'19#.#4.172.99':445
'19#.#4.52.15':445
'19#.#4.129.195':445
'19#.#4.183.81':445
'19#.#4.85.10':445
'19#.74.18.3':445
'19#.#4.70.25':139
'19#.#4.125.69':139
'19#.#4.172.99':139
'19#.#4.1.141':139
'19#.#4.126.53':139
'19#.#4.183.81':139
'19#.#4.52.15':139
'19#.74.18.3':139
'19#.#4.2.125':139
'19#.#4.85.10':139
'19#.#4.101.203':139
'19#.#4.76.137':139
'19#.#4.123.106':139
'19#.#4.137.43':139
'19#.#4.163.42':139
'19#.74.71.0':139
'19#.#4.136.88':139
'19#.#4.73.46':139
'19#.#4.160.31':139
'19#.#4.222.145':139
'19#.#4.49.239':139
'19#.#4.191.15':139
'19#.#4.158.198':139
'19#.#4.205.187':139
'19#.#4.20.113':139
'19#.#4.108.185':139
'19#.#4.55.24':139
'19#.#4.2.191':139
'19#.#4.24.116':139
'19#.#4.147.99':139
'19#.#4.121.175':139
'19#.#4.54.127':139
'19#.#4.40.158':139
'19#.#4.89.157':139
'19#.#4.216.108':139
'19#.#4.129.195':139
'19#.#4.109.32':139
'19#.#4.47.64':139
'19#.#4.127.47':139
'19#.#4.63.154':139
'19#.#4.168.246':139
'19#.#4.183.15':139
'19#.#4.108.185':445
'19#.#4.175.68':139
'19#.#4.8.135':445
'19#.#4.68.191':139
'19#.#4.27.151':139
'19#.#4.113.63':139
'19#.#4.131.36':445
'19#.#4.145.213':445
'19#.#4.11.132':445
'19#.#4.119.8':445
'19#.#4.100.185':445
'19#.#4.244.18':139
'19#.#4.9.172':139
'19#.74.9.63':139
'19#.#4.180.245':139
'19#.#4.243.11':139
'19#.#4.62.217':139
'19#.#4.147.218':139
'19#.#4.18.181':139
'19#.#4.217.253':139
'19#.#4.213.111':139
'19#.#4.48.213':139
'19#.#4.48.213':445
'19#.#4.217.253':445
'19#.#4.213.111':445
'19#.#4.9.172':445
'19#.74.9.63':445
'19#.#4.27.151':445
'19#.#4.113.63':445
'19#.#4.244.18':445
'19#.#4.147.218':445
'19#.#4.18.181':445
'19#.#4.180.245':445
'19#.#4.117.122':445
'19#.#4.42.251':445
'19#.#4.250.85':445
'19#.#4.27.187':445
'19#.#4.209.138':445
'19#.#4.243.11':445
'19#.#4.62.217':445
'19#.#4.90.245':445
'19#.#4.100.26':445
'19#.#4.80.100':445
'19#.#4.76.117':445
'19#.#4.252.76':445
'19#.#4.42.63':445
'19#.#4.14.236':445
'19#.#4.144.194':445
'19#.#4.123.106':9988
'19#.#4.136.88':9988
'19#.#4.137.43':9988
'19#.#4.182.145':445
'19#.#4.163.42':9988
'19#.#4.193.203':445
'19#.#4.147.99':445
'19#.#4.121.175':445
'19#.#4.158.198':445
'19#.#4.205.187':445
'19#.#4.191.15':445
'19#.#4.10.205':445
'19#.#4.138.116':445
'19#.#4.2.191':445
'19#.#4.24.116':445
'19#.#4.55.24':445
'19#.#4.209.138':139
'19#.#4.250.85':139
'19#.#4.27.187':139
'19#.#4.131.36':139
'19#.#4.145.213':139
'19#.#4.80.100':139
'19#.#4.90.245':139
'19#.#4.100.26':139
'19#.#4.117.122':139
'19#.#4.42.251':139
'19#.#4.11.132':139
'19#.#4.108.185':9988
'19#.#4.205.187':9988
'19#.#4.85.10':9988
'19#.#4.172.99':9988
'19#.#4.125.69':9988
'19#.#4.119.8':139
'19#.#4.100.185':139
'19#.#4.8.135':139
'19#.#4.24.116':9988
'19#.#4.193.203':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней