Trojan.Starman.6111

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1156 -dm 7 7 %TEMP%\WERabe4.dir00\svchost.exe.mdmp 16325836412029924

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERabe4.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'83.##1.207.74':139
'83.##1.71.185':139
'83.##1.86.158':139
'83.##1.161.127':139
'83.##1.58.69':139
'83.##1.197.220':139
'83.##1.65.219':139
'83.##1.198.106':139
'83.##1.5.211':139
'83.##1.30.150':445
'83.##1.68.31':445
'83.##1.212.248':445
'83.##1.91.125':445
'83.##1.198.67':139
'83.##1.97.192':139
'83.##1.27.199':139
'83.##1.215.115':139
'83.##1.88.99':139
'83.##1.215.115':445
'83.##1.88.99':445
'83.##1.100.231':139
'83.##1.198.67':445
'83.##1.97.192':445
'83.##1.161.127':445
'83.##1.207.74':445
'83.##1.27.199':445
'83.##1.86.158':445
'83.##1.143.63':139
'83.##1.25.185':139
'83.##1.67.157':139
'83.##1.153.86':139
'83.##1.112.238':139
'83.##1.104.113':139
'83.##1.25.49':139
'83.##1.178.193':139
'83.##1.96.62':139
'83.#31.7.88':445
'83.##1.87.222':445
'83.##1.42.82':445
'83.##1.52.99':9988
'83.##1.255.224':445
'83.##1.27.175':445
'83.##1.191.137':445
'83.##1.20.207':9988
'83.##1.85.208':9988
'83.#31.32.8':445
'83.#31.1.6':445
'83.##1.247.130':445
'83.##1.216.135':445
'83.##1.0.124':445
'83.##1.155.214':9988
'83.##1.138.118':445
'83.##1.237.155':9988
'83.##1.232.122':445
'83.##1.20.234':139
'83.##1.212.248':139
'83.##1.24.115':445
'83.##1.207.116':139
'83.##1.91.125':139
'83.##1.207.116':445
'83.##1.20.234':445
'83.##1.30.150':139
'83.##1.68.31':139
'83.##1.207.0':9988
'83.##1.103.121':445
'83.##1.237.142':9988
'83.##1.161.198':445
'83.##1.94.105':445
'83.##1.235.104':445
'83.##1.24.50':445
'83.##1.45.189':445
'83.##1.105.198':445
'83.##1.71.185':445
'83.##1.171.106':139
'83.##1.185.78':139
'83.##1.8.134':139
'83.#31.52.8':139
'83.##1.81.185':139
'83.##1.132.184':139
'83.##1.178.230':139
'83.##1.10.82':139
'83.##1.74.168':139
'83.##1.230.166':139
'83.##1.255.229':139
'83.##1.7.117':139
'83.##1.163.16':139
'83.##1.65.224':139
'83.##1.101.77':139
'83.##1.133.214':139
'83.#31.3.66':139
'83.##1.111.3':139
'83.##1.182.226':139
'83.##1.92.182':139
'83.##1.196.105':139
'83.##1.189.230':139
'83.##1.138.92':139
'83.##1.6.226':139
'83.##1.32.246':139
'83.##1.190.138':139
'83.##1.3.185':139
'83.##1.112.128':139
'83.##1.61.101':139
'83.##1.186.246':139
'83.##1.37.86':139
'83.##1.67.149':139
'83.##1.43.243':139
'83.##1.105.195':139
'83.##1.186.216':139
'83.##1.92.187':139
'83.##1.96.62':445
'83.##1.104.113':445
'83.##1.112.238':445
'83.##1.178.193':445
'83.##1.25.49':445
'83.#31.3.21':139
'83.##1.102.87':139
'83.##1.100.231':445
'83.##1.21.28':139
'83.##1.5.211':445
'83.##1.197.220':445
'83.##1.58.69':445
'83.##1.198.106':445
'83.##1.65.219':445
'83.##1.143.63':445
'83.##1.25.185':445
'83.##1.67.157':445
'83.##1.153.86':445
'83.##1.102.151':139
'83.##1.129.165':139
'83.##1.232.186':139
'83.##1.216.172':139
'83.##1.210.129':139
'83.##1.83.79':139
'83.##1.116.83':139
'83.##1.70.224':139
'83.##1.79.164':139
'83.##1.225.248':139
'83.##1.21.28':445
'83.##1.34.85':139
'83.##1.102.163':139
'83.#31.3.21':445
'83.##1.102.163':445
'83.##1.225.248':445
'83.##1.102.87':445
'83.##1.34.85':445
'83.##1.60.85':139
'83.##1.58.29':139
'83.##1.178.46':139
'83.##1.27.47':139
'83.##1.184.203':139
'83.##1.155.214':445
'83.##1.245.153':445
'83.##1.12.185':139
'83.##1.123.3':445
'83.##1.7.192':139
'83.##1.137.7':139
'83.##1.59.148':139
'83.##1.192.72':139
'83.##1.78.136':139
'83.##1.216.165':139
'83.##1.51.53':139
'83.##1.15.10':139
'83.##1.67.159':139
'83.##1.20.207':445
'83.##1.35.21':445
'83.#31.1.53':445
'83.##1.207.0':445
'83.##1.69.57':445
'83.##1.218.29':445
'83.##1.156.38':445
'83.#31.3.5':445
'83.##1.129.38':445
'83.##1.94.110':445
'83.##1.85.208':445
'83.##1.138.209':445
'83.##1.237.155':445
'83.##1.237.142':445
'83.##1.25.27':445
'83.##1.52.99':445
'83.##1.207.155':445
'83.##1.181.225':445
'83.##1.52.99':139
'83.#31.1.53':139
'83.##1.181.225':139
'83.##1.25.27':139
'83.##1.207.0':139
'83.##1.69.57':139
'83.#31.3.5':139
'83.##1.20.207':139
'83.##1.35.21':139
'83.##1.207.155':139
'83.##1.155.214':139
'83.##1.85.208':139
'83.##1.138.209':139
'83.##1.123.3':139
'83.##1.94.110':139
'83.##1.237.142':139
'83.##1.237.155':139
'83.##1.245.153':139
'83.##1.114.243':139
'83.##1.191.115':139
'83.#31.11.6':139
'83.##1.243.26':139
'83.##1.113.1':139
'83.##1.247.245':139
'83.##1.31.248':139
'83.##1.132.61':139
'83.##1.15.217':139
'83.##1.145.187':139
'83.##1.156.38':139
'83.##1.129.38':139
'83.##1.218.29':139
'83.##1.176.206':139
'83.#31.8.37':139
'83.##1.220.66':139
'83.##1.80.244':139
'83.##1.49.79':139
'83.##1.145.187':445
'83.##1.138.118':139
'83.##1.42.82':139
'83.##1.0.124':139
'83.##1.232.122':139
'83.#31.7.88':139
'83.##1.27.175':139
'83.##1.191.137':139
'83.##1.87.222':139
'83.##1.255.224':139
'83.##1.135.73':139
'83.##1.180.143':139
'83.##1.97.134':139
'83.##1.131.127':139
'83.##1.137.141':139
'83.#31.32.8':139
'83.#31.1.6':139
'83.##1.247.130':139
'83.##1.216.135':139
'83.##1.158.221':445
'83.##1.229.40':445
'83.##1.36.71':445
'83.##1.92.97':445
'83.##1.97.134':445
'83.##1.180.143':445
'83.##1.137.141':445
'83.##1.131.127':445
'83.##1.135.73':445
'83.##1.94.105':139
'83.##1.45.189':139
'83.##1.161.198':139
'83.##1.103.121':139
'83.##1.105.198':139
'83.##1.24.115':139
'83.##1.71.13':445
'83.##1.235.104':139
'83.##1.24.50':139
'83.##1.15.217':445
'83.##1.247.245':445
'83.##1.113.1':445
'83.##1.132.61':445
'83.##1.31.248':445
'83.##1.7.192':445
'83.##1.137.7':445
'83.##1.59.148':445
'83.##1.192.72':445
'83.##1.49.79':445
'83.#31.8.37':445
'83.##1.176.206':445
'83.##1.80.244':445
'83.##1.220.66':445
'83.##1.114.243':445
'83.##1.191.115':445
'83.#31.11.6':445
'83.##1.243.26':445
'83.##1.191.115':9988
'83.#31.11.6':9988
'83.##1.184.203':445
'83.##1.12.185':445
'83.##1.71.13':139
'83.##1.158.221':139
'83.##1.229.40':139
'83.##1.36.71':139
'83.##1.92.97':139
'83.##1.67.159':445
'83.##1.216.165':445
'83.##1.78.136':445
'83.##1.15.10':445
'83.##1.51.53':445
'83.##1.60.85':445
'83.##1.58.29':445
'83.##1.178.46':445
'83.##1.27.47':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней