Trojan.Starman.6140

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER7c12.dir00\svchost.exe.mdmp 16325836412032168

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7c12.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'14.##7.143.27':445
'14.##7.97.173':445
'14.##7.106.159':445
'14.##7.91.246':445
'14.##7.59.235':445
'14.##7.57.53':139
'14.##7.149.171':139
'14.##7.254.110':445
'14.##7.64.97':445
'14.##7.181.74':445
'14.##7.186.98':445
'14.#27.5.36':445
'14.##7.105.151':445
'14.##7.99.105':445
'14.##7.152.64':445
'14.##7.66.137':445
'14.##7.124.133':445
'14.##7.175.116':445
'14.##7.105.1':445
'14.##7.194.253':139
'14.##7.253.31':139
'14.##7.128.252':139
'14.##7.177.109':139
'14.##7.19.170':139
'14.##7.16.129':139
'14.##7.148.120':139
'14.##7.176.213':139
'14.##7.150.123':139
'14.##7.3.209':139
'14.##7.18.199':139
'14.##7.217.182':139
'14.##7.42.64':139
'14.##7.112.197':139
'14.##7.10.96':139
'14.##7.161.185':139
'14.##7.37.138':139
'14.##7.25.185':139
'14.##7.62.173':139
'14.##7.231.81':139
'14.##7.151.99':445
'14.##7.192.211':445
'14.##7.226.244':445
'14.##7.132.218':445
'14.##7.162.85':445
'14.##7.118.1':445
'14.##7.236.218':445
'14.##7.132.42':445
'14.##7.94.186':445
'14.##7.137.92':445
'14.##7.82.70':445
'14.##7.97.173':139
'14.##7.59.235':139
'14.##7.91.246':139
'14.##7.143.27':139
'14.##7.254.110':139
'14.##7.250.198':445
'14.##7.152.250':445
'14.##7.64.97':139
'14.##7.185.156':445
'14.##7.56.54':445
'14.##7.177.176':445
'14.##7.127.235':445
'14.##7.87.192':445
'14.##7.146.240':445
'14.##7.251.50':445
'14.##7.26.247':445
'14.##7.231.168':445
'14.##7.47.251':445
'14.##7.247.47':445
'14.##7.192.23':445
'14.##7.105.191':445
'14.##7.211.105':445
'14.##7.83.178':445
'14.##7.14.70':445
'14.##7.168.50':445
'14.##7.43.61':445
'14.##7.124.95':445
'14.##7.250.208':445
'14.##7.165.156':445
'14.##7.72.183':139
'14.##7.3.181':445
'14.##7.76.39':445
'14.##7.72.183':445
'14.##7.163.170':445
'14.##7.36.171':445
'14.##7.34.87':445
'14.##7.183.102':445
'14.##7.123.193':445
'14.##7.16.60':445
'14.##7.176.213':445
'14.##7.19.170':445
'14.##7.253.31':445
'14.##7.18.199':445
'14.##7.177.109':445
'14.##7.128.252':445
'14.##7.3.209':445
'14.##7.148.120':445
'14.##7.16.129':445
'14.##7.150.123':445
'14.##7.109.58':445
'14.##7.169.151':445
'14.##7.182.183':445
'14.##7.179.217':445
'14.##7.22.218':445
'14.##7.154.71':445
'14.##7.221.39':445
'14.##7.78.199':445
'14.##7.56.154':445
'14.##7.194.85':445
'14.##7.55.204':445
'14.#27.26.2':445
'14.##7.57.203':445
'14.##7.234.40':445
'14.##7.84.85':445
'14.##7.47.206':445
'14.##7.111.180':445
'14.##7.3.112':445
'14.##7.21.48':445
'14.##7.180.20':445
'14.##7.25.185':445
'14.##7.57.203':139
'14.##7.47.206':139
'14.##7.84.85':139
'14.#27.26.2':139
'14.##7.21.48':139
'14.##7.3.112':139
'14.##7.55.204':139
'14.##7.180.20':139
'14.##7.111.180':139
'14.##7.234.40':139
'14.##7.76.39':139
'14.##7.36.171':139
'14.##7.163.170':139
'14.##7.3.181':139
'14.##7.123.193':139
'14.##7.183.102':139
'14.##7.109.58':139
'14.##7.16.60':139
'14.##7.34.87':139
'14.##7.179.217':139
'14.##7.10.96':445
'14.##7.217.182':445
'14.##7.194.253':445
'14.##7.112.197':445
'14.##7.161.185':445
'14.##7.231.81':445
'14.##7.37.138':445
'14.##7.42.64':445
'14.##7.62.173':445
'14.##7.149.171':445
'14.##7.182.183':139
'14.##7.154.71':139
'14.##7.22.218':139
'14.##7.169.151':139
'14.##7.56.154':139
'14.##7.78.199':139
'14.##7.57.53':445
'14.##7.194.85':139
'14.##7.221.39':139
'14.##7.106.221':445
'14.##7.122.118':445
'14.##7.25.26':139
'14.##7.106.209':445
'14.##7.0.152':445
'14.##7.143.110':445
'14.##7.73.187':445
'14.##7.44.107':445
'14.##7.204.104':445
'14.##7.196.68':139
'14.##7.130.95':139
'14.##7.255.246':139
'14.##7.44.50':139
'14.##7.100.191':139
'14.##7.160.234':139
'14.##7.173.185':139
'14.##7.245.217':139
'14.##7.148.49':139
'14.##7.118.248':139
'14.##7.244.72':445
'14.##7.8.211':445
'14.##7.232.224':445
'14.##7.125.152':445
'14.##7.162.125':445
'14.##7.54.61':445
'14.##7.117.142':445
'14.#27.6.75':445
'14.##7.241.22':445
'14.##7.28.203':445
'14.##7.151.192':445
'14.##7.140.192':445
'14.##7.207.140':445
'14.##7.7.244':445
'14.##7.193.7':445
'14.##7.80.233':445
'14.##7.162.183':445
'14.##7.82.76':445
'14.##7.156.0':445
'14.##7.234.130':445
'14.##7.50.142':139
'14.##7.207.140':139
'14.##7.80.233':139
'14.##7.193.7':139
'14.##7.140.192':139
'14.##7.156.0':139
'14.##7.82.76':139
'14.##7.151.192':139
'14.##7.234.130':139
'14.##7.162.183':139
'14.##7.7.244':139
'14.##7.204.104':139
'14.##7.106.209':139
'14.##7.44.107':139
'14.##7.0.152':139
'14.##7.106.221':139
'14.##7.73.187':139
'14.##7.244.72':139
'14.##7.143.110':139
'14.##7.122.118':139
'14.##7.125.152':139
'14.#27.8.62':139
'14.##7.38.168':139
'14.##7.117.122':139
'14.##7.234.22':139
'14.##7.63.37':139
'14.##7.180.186':139
'14.##7.142.73':139
'14.##7.123.32':139
'14.##7.246.52':139
'14.##7.201.40':139
'14.##7.232.224':139
'14.##7.54.61':139
'14.##7.162.125':139
'14.##7.8.211':139
'14.##7.241.22':139
'14.#27.6.75':139
'14.##7.110.234':139
'14.##7.28.203':139
'14.##7.117.142':139
'14.##7.110.234':445
'14.##7.168.50':139
'14.##7.250.208':139
'14.##7.105.191':139
'14.##7.211.105':139
'14.##7.165.156':139
'14.##7.192.23':139
'14.##7.87.192':139
'14.##7.43.61':139
'14.##7.124.95':139
'14.##7.14.70':139
'14.##7.118.1':139
'14.##7.94.186':139
'14.##7.192.211':139
'14.##7.226.244':139
'14.##7.137.92':139
'14.##7.56.54':139
'14.##7.83.178':139
'14.##7.236.218':139
'14.##7.132.42':139
'14.##7.146.240':139
'14.##7.152.64':139
'14.##7.175.116':139
'14.##7.186.98':139
'14.#27.5.36':139
'14.##7.105.1':139
'14.##7.181.74':139
'14.##7.106.159':139
'14.##7.66.137':139
'14.##7.124.133':139
'14.##7.99.105':139
'14.##7.251.50':139
'14.##7.47.251':139
'14.##7.177.176':139
'14.##7.127.235':139
'14.##7.247.47':139
'14.##7.151.99':139
'14.##7.105.151':139
'14.##7.26.247':139
'14.##7.231.168':139
'14.##7.162.85':139
'14.##7.100.191':445
'14.##7.130.95':445
'14.##7.50.142':445
'14.##7.44.50':445
'14.##7.255.246':445
'14.##7.118.248':445
'14.##7.173.185':445
'14.##7.160.234':445
'14.##7.148.49':445
'14.##7.142.73':445
'14.##7.234.22':445
'14.#27.8.62':445
'14.##7.201.40':445
'14.##7.117.122':445
'14.##7.38.168':445
'14.##7.246.52':445
'14.##7.180.186':445
'14.##7.63.37':445
'14.##7.123.32':445
'14.##7.245.217':445
'14.##7.38.168':9988
'14.##7.123.32':9988
'14.##7.232.224':9988
'14.##7.241.22':9988
'14.##7.185.156':139
'14.##7.82.70':139
'14.##7.132.218':139
'14.##7.250.198':139
'14.##7.152.250':139
'14.##7.162.125':9988
'14.##7.106.221':9988
'14.##7.44.107':9988
'14.##7.25.26':445
'14.##7.196.68':445
'14.##7.73.187':9988
'14.##7.234.130':9988
'14.##7.125.152':9988
'14.##7.80.233':9988
'14.##7.156.0':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней