Trojan.Starman.6103

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERbcf4.dir00\svchost.exe.mdmp 16325836412032224

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERbcf4.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'24.##7.218.74':445
'24.##7.195.80':445
'24.##7.53.108':445
'24.##7.111.74':445
'24.##7.41.243':445
'24.##7.74.189':445
'24.##7.64.67':445
'24.##7.200.90':445
'24.##7.238.106':445
'24.##7.121.8':445
'24.##7.71.120':445
'24.##7.22.155':445
'24.##7.46.223':445
'24.##7.179.236':445
'24.##7.93.122':445
'24.##7.119.57':445
'24.##7.106.29':139
'24.##7.165.178':139
'24.##7.83.91':445
'24.##7.85.105':445
'24.##7.93.183':445
'24.##7.18.71':445
'24.##7.64.100':445
'24.##7.64.69':445
'24.##7.247.248':445
'24.##7.93.228':445
'24.##7.3.230':445
'24.##7.106.29':445
'24.##7.178.92':445
'24.##7.69.178':445
'24.##7.237.193':445
'24.##7.50.67':139
'24.##7.12.218':139
'24.##7.98.12':139
'24.##7.165.178':445
'24.##7.76.165':139
'24.##7.133.77':139
'24.##7.112.206':445
'24.##7.12.204':445
'24.##7.202.205':445
'24.##7.146.17':445
'24.#27.5.6':445
'24.##7.23.127':445
'24.##7.165.172':445
'24.##7.156.164':445
'24.##7.174.17':445
'24.##7.193.84':445
'24.##7.69.78':445
'24.##7.225.253':445
'24.##7.19.18':445
'24.##7.3.230':139
'24.##7.64.69':139
'24.##7.64.100':139
'24.##7.85.105':139
'24.##7.119.57':139
'24.##7.93.183':139
'24.##7.247.248':139
'24.##7.41.243':139
'24.##7.74.189':139
'24.##7.218.74':139
'24.##7.18.71':139
'24.##7.46.223':139
'24.##7.111.74':139
'24.##7.93.122':139
'24.##7.32.28':445
'24.##7.71.146':445
'24.##7.39.103':445
'24.##7.57.248':139
'24.##7.92.57':139
'24.##7.28.54':445
'24.##7.92.57':445
'24.##7.83.91':139
'24.##7.179.236':139
'24.##7.70.150':445
'24.##7.82.95':445
'24.##7.57.248':445
'24.##7.19.18':139
'24.##7.156.164':139
'24.##7.174.17':139
'24.##7.146.17':139
'24.##7.69.78':139
'24.##7.225.253':139
'24.##7.69.178':139
'24.##7.237.193':139
'24.##7.93.228':139
'24.##7.193.84':139
'24.##7.112.206':139
'24.##7.178.92':139
'24.##7.202.205':139
'24.##7.71.120':139
'24.##7.22.155':139
'24.##7.64.67':139
'24.##7.195.80':139
'24.##7.53.108':139
'24.##7.121.8':139
'24.##7.23.127':139
'24.##7.165.172':139
'24.##7.12.204':139
'24.##7.200.90':139
'24.##7.238.106':139
'24.#27.5.6':139
'24.##7.145.94':139
'24.##7.212.66':445
'24.##7.149.16':445
'24.##7.29.79':445
'24.##7.92.85':445
'24.##7.194.104':445
'24.##7.203.127':445
'24.##7.4.228':445
'24.##7.248.171':445
'24.##7.6.188':445
'24.##7.246.33':445
'24.##7.76.148':445
'24.##7.193.49':445
'24.##7.43.153':445
'24.##7.96.48':445
'24.##7.170.179':445
'24.##7.158.3':445
'24.##7.241.100':139
'24.##7.59.50':139
'24.##7.38.251':445
'24.##7.86.145':445
'24.##7.73.44':445
'24.##7.215.68':445
'24.##7.244.157':445
'24.##7.72.76':445
'24.##7.51.14':445
'24.##7.116.148':445
'24.##7.100.116':445
'24.##7.241.100':445
'24.##7.121.215':445
'24.##7.15.26':445
'24.##7.148.39':445
'24.##7.240.160':139
'24.##7.184.217':139
'24.##7.177.184':139
'24.##7.59.50':445
'24.##7.176.167':139
'24.##7.75.97':139
'24.##7.34.128':445
'24.##7.233.217':445
'24.##7.78.60':445
'24.##7.84.117':445
'24.##7.109.172':445
'24.##7.203.222':445
'24.##7.217.216':445
'24.##7.149.195':445
'24.##7.237.149':445
'24.##7.118.237':445
'24.##7.167.198':445
'24.##7.32.139':445
'24.##7.136.16':445
'24.##7.100.116':139
'24.##7.51.14':139
'24.##7.203.127':139
'24.##7.246.33':139
'24.##7.158.3':139
'24.##7.244.157':139
'24.##7.72.76':139
'24.##7.76.148':139
'24.##7.29.79':139
'24.##7.86.145':139
'24.##7.194.104':139
'24.##7.212.66':139
'24.##7.149.16':139
'24.##7.170.179':139
'24.##7.133.77':445
'24.##7.50.67':445
'24.##7.12.218':445
'24.##7.122.96':139
'24.##7.109.195':139
'24.##7.76.165':445
'24.##7.109.195':445
'24.##7.38.251':139
'24.##7.96.48':139
'24.##7.98.12':445
'24.##7.145.94':445
'24.##7.122.96':445
'24.##7.136.16':139
'24.##7.149.195':139
'24.##7.237.149':139
'24.##7.84.117':139
'24.##7.167.198':139
'24.##7.32.139':139
'24.##7.15.26':139
'24.##7.148.39':139
'24.##7.116.148':139
'24.##7.118.237':139
'24.##7.34.128':139
'24.##7.121.215':139
'24.##7.78.60':139
'24.##7.73.44':139
'24.##7.193.49':139
'24.##7.4.228':139
'24.##7.215.68':139
'24.##7.92.85':139
'24.##7.43.153':139
'24.##7.203.222':139
'24.##7.217.216':139
'24.##7.233.217':139
'24.##7.109.172':139
'24.##7.6.188':139
'24.##7.248.171':139
'24.##7.183.133':445
'24.##7.202.159':445
'24.##7.74.47':445
'24.##7.255.203':445
'24.##7.206.45':445
'24.##7.78.164':445
'24.##7.150.156':445
'24.##7.99.224':445
'24.##7.243.156':445
'24.##7.27.231':445
'24.##7.4.200':445
'24.##7.152.141':445
'24.##7.63.124':445
'24.##7.101.209':445
'24.##7.173.128':445
'24.##7.116.99':445
'24.##7.218.117':445
'24.##7.230.146':445
'24.##7.57.158':445
'24.##7.186.11':445
'24.##7.71.127':445
'24.##7.127.71':445
'24.##7.174.9':445
'24.##7.63.191':445
'24.##7.161.173':445
'24.##7.28.172':445
'24.##7.144.29':445
'24.##7.20.144':445
'24.##7.20.206':445
'24.##7.74.205':445
'24.##7.151.252':445
'24.##7.83.216':445
'24.##7.104.46':445
'24.##7.236.210':445
'24.##7.55.114':445
'24.##7.197.158':445
'24.##7.35.45':445
'24.##7.182.247':445
'24.##7.86.71':445
'24.##7.70.39':445
'24.##7.64.14':445
'24.##7.52.130':445
'24.#27.68.5':445
'24.##7.92.127':445
'24.##7.253.215':445
'24.##7.232.167':445
'24.##7.67.143':445
'24.##7.216.67':445
'24.##7.179.43':445
'24.##7.99.133':445
'24.##7.199.18':139
'24.##7.183.133':139
'24.##7.74.47':139
'24.##7.202.159':139
'24.##7.206.45':139
'24.##7.255.203':139
'24.##7.78.164':139
'24.##7.150.156':139
'24.##7.99.224':139
'24.##7.52.130':139
'24.##7.27.231':139
'24.##7.4.200':139
'24.##7.152.141':139
'24.##7.63.124':139
'24.##7.101.209':139
'24.##7.116.99':139
'24.##7.173.128':139
'24.##7.218.117':139
'24.##7.57.158':139
'24.##7.230.146':139
'24.##7.186.11':139
'24.##7.71.127':139
'24.##7.127.71':139
'24.##7.174.9':139
'24.##7.161.173':139
'24.##7.63.191':139
'24.##7.28.172':139
'24.##7.144.29':139
'24.##7.20.144':139
'24.##7.20.206':139
'24.##7.151.252':139
'24.##7.74.205':139
'24.##7.83.216':139
'24.##7.104.46':139
'24.##7.236.210':139
'24.##7.55.114':139
'24.##7.197.158':139
'24.##7.35.45':139
'24.##7.182.247':139
'24.##7.86.71':139
'24.##7.70.39':139
'24.##7.216.67':139
'24.##7.243.156':139
'24.#27.68.5':139
'24.##7.92.127':139
'24.##7.232.167':139
'24.##7.253.215':139
'24.##7.67.143':139
'24.##7.64.14':139
'24.##7.179.43':139
'24.##7.99.133':139
'24.##7.199.18':445
'24.##7.243.236':445
'24.##7.97.216':445
'24.##7.74.23':445
'24.##7.114.22':445
'24.##7.87.54':445
'24.##7.69.140':445
'24.##7.88.62':445
'24.##7.99.10':445
'24.##7.212.84':445
'24.##7.6.181':445
'24.##7.111.124':445
'24.##7.76.104':445
'24.##7.11.132':445
'24.##7.169.164':445
'24.##7.201.74':445
'24.##7.16.193':445
'24.##7.54.46':139
'24.##7.43.61':445
'24.##7.184.97':445
'24.##7.46.175':445
'24.##7.24.196':445
'24.##7.191.22':445
'24.##7.54.230':445
'24.##7.242.226':445
'24.##7.225.64':445
'24.##7.212.143':445
'24.##7.229.84':445
'24.##7.54.46':445
'24.##7.118.103':445
'24.##7.169.44':445
'24.##7.143.169':445
'24.##7.39.103':139
'24.##7.70.150':139
'24.##7.82.95':139
'24.##7.28.54':139
'24.##7.32.28':139
'24.##7.71.146':139
'24.##7.14.235':445
'24.##7.21.64':445
'24.##7.242.197':445
'24.##7.115.29':445
'24.##7.218.75':445
'24.##7.116.171':445
'24.##7.231.56':445
'24.##7.56.197':445
'24.##7.70.80':445
'24.##7.214.7':445
'24.##7.58.65':445
'24.##7.165.242':445
'24.##7.59.73':445
'24.##7.229.84':139
'24.##7.225.64':139
'24.##7.46.175':139
'24.##7.24.196':139
'24.##7.16.193':139
'24.##7.54.230':139
'24.##7.242.226':139
'24.##7.87.54':139
'24.##7.69.140':139
'24.##7.243.236':139
'24.##7.191.22':139
'24.##7.11.132':139
'24.##7.114.22':139
'24.##7.201.74':139
'24.##7.116.99':9988
'24.##7.92.127':9988
'24.##7.216.67':9988
'24.##7.206.45':9988
'24.##7.150.156':9988
'24.##7.52.130':9988
'24.##7.43.61':139
'24.##7.184.97':139
'24.##7.169.164':139
'24.##7.179.43':9988
'24.##7.182.247':9988
'24.##7.83.216':9988
'24.##7.59.73':139
'24.##7.56.197':139
'24.##7.70.80':139
'24.##7.115.29':139
'24.##7.58.65':139
'24.##7.165.242':139
'24.##7.169.44':139
'24.##7.143.169':139
'24.##7.212.143':139
'24.##7.214.7':139
'24.##7.14.235':139
'24.##7.118.103':139
'24.##7.242.197':139
'24.##7.111.124':139
'24.##7.76.104':139
'24.##7.88.62':139
'24.##7.97.216':139
'24.##7.74.23':139
'24.##7.6.181':139
'24.##7.116.171':139
'24.##7.231.56':139
'24.##7.21.64':139
'24.##7.99.10':139
'24.##7.212.84':139
'24.##7.218.75':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней