Trojan.Starman.6076

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2dea.dir00\svchost.exe.mdmp 16325836412032404

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2dea.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#68.113.143':139
'20#.#68.69.171':445
'20#.#68.85.219':139
'20#.#68.29.126':139
'20#.#68.216.89':445
'20#.#68.219.57':445
'20#.#68.85.219':445
'20#.#68.118.132':445
'20#.#68.52.48':445
'20#.#68.219.57':139
'20#.#68.47.215':445
'20#.#68.28.13':445
'20#.#68.123.50':445
'20#.#68.215.108':445
'20#.#68.195.9':445
'20#.#68.118.132':139
'20#.#68.52.48':139
'20#.#68.69.171':139
'20#.#68.216.89':139
'20#.#68.51.197':139
'20#.#68.148.122':139
'20#.#68.69.15':139
'20#.#68.59.153':139
'20#.#68.154.220':139
'20#.#68.197.2':139
'20#.#68.71.107':139
'20#.#68.167.122':139
'20#.#68.110.37':139
'20#.#68.254.71':139
'20#.#68.34.39':139
'20#.#68.223.57':139
'20#.#68.29.126':445
'20#.#68.113.143':445
'20#.#68.125.38':139
'20#.#68.234.119':139
'20#.#68.177.130':139
'20#.#68.139.86':139
'20#.#68.202.126':139
'20#.#68.45.103':445
'20#.#68.94.114':445
'20#.#68.191.122':445
'20#.#68.236.22':445
'20#.#68.124.94':445
'20#.#68.141.14':445
'20#.#68.191.204':445
'20#.#68.251.123':445
'20#.#68.154.54':445
'20#.#68.27.166':445
'20#.#68.229.217':445
'20#.#68.196.226':445
'20#.#68.27.6':445
'20#.#68.218.26':445
'20#.#68.29.42':445
'20#.#68.196.87':445
'20#.#68.54.43':445
'20#.#68.187.241':445
'20#.#68.40.241':445
'20#.#68.159.197':445
'20#.#68.15.182':445
'20#.#68.76.187':445
'20#.#68.196.109':445
'20#.#68.155.72':445
'20#.#68.5.34':445
'20#.#68.132.211':445
'20#.#68.154.155':445
'20#.#68.56.167':445
'20#.#68.187.87':445
'20#.#68.156.92':445
'20#.#68.119.156':445
'20#.#68.40.192':445
'20#.#68.29.12':445
'20#.#68.131.119':445
'20#.#68.9.227':445
'20#.#68.88.10':445
'20#.#68.38.44':445
'20#.#68.186.101':445
'20#.#68.127.220':139
'20#.#68.59.193':445
'20#.#68.208.41':445
'20#.#68.167.163':445
'20#.#68.9.96':445
'20#.#68.16.29':445
'20#.#68.62.183':445
'20#.#68.159.114':445
'20#.#68.68.137':445
'20#.#68.167.247':445
'20#.#68.0.245':445
'20#.#68.197.2':445
'20#.#68.71.107':445
'20#.#68.167.122':445
'20#.#68.110.37':445
'20#.#68.127.220':445
'20#.#68.105.51':445
'20#.#68.247.187':445
'20#.#68.129.128':445
'20#.#68.33.129':445
'20#.#68.183.95':139
'20#.#68.107.206':139
'20#.#68.229.130':445
'20#.#68.55.28':139
'20#.#68.203.107':139
'20#.#68.22.226':139
'20#.#68.148.22':139
'20#.#68.143.203':139
'20#.#68.73.166':139
'20#.#68.109.135':445
'20#.#68.235.221':445
'20#.#68.155.43':445
'20#.#68.179.159':445
'20#.#68.191.58':445
'20#.#68.57.157':445
'20#.#68.132.131':445
'20#.#68.64.218':445
'20#.#68.245.178':445
'20#.#68.111.116':445
'20#.#68.62.183':139
'20#.#68.159.114':139
'20#.#68.68.137':139
'20#.#68.167.247':139
'20#.#68.179.159':139
'20#.#68.155.43':139
'20#.#68.57.157':139
'20#.#68.191.58':139
'20#.#68.235.221':139
'20#.#68.16.29':139
'20#.#68.105.51':139
'20#.#68.247.187':139
'20#.#68.129.128':139
'20#.#68.33.129':139
'20#.#68.0.245':139
'20#.#68.59.193':139
'20#.#68.208.41':139
'20#.#68.167.163':139
'20#.#68.9.96':139
'20#.#68.177.130':445
'20#.#68.254.71':445
'20#.#68.202.126':445
'20#.#68.234.119':445
'20#.#68.69.15':445
'20#.#68.148.122':445
'20#.#68.154.220':445
'20#.#68.59.153':445
'20#.#68.51.197':445
'20#.#68.139.86':445
'20#.#68.132.131':139
'20#.#68.64.218':139
'20#.#68.245.178':139
'20#.#68.111.116':139
'20#.#68.109.135':139
'20#.#68.223.57':445
'20#.#68.125.38':445
'20#.#68.229.130':139
'20#.#68.34.39':445
'20#.#68.114.152':139
'20#.#68.40.235':445
'20#.#68.178.203':139
'20#.#68.249.120':139
'20#.#68.17.234':445
'20#.#68.164.43':445
'20#.#68.162.10':445
'20#.#68.69.24':445
'20#.#68.43.229':445
'20#.#68.62.156':139
'20#.#68.123.150':139
'20#.#68.76.190':139
'20#.#68.33.202':139
'20#.#68.150.34':139
'20#.#68.159.80':139
'20#.#68.210.35':139
'20#.#68.100.74':139
'20#.#68.151.65':139
'20#.#68.147.235':139
'20#.#68.166.146':445
'20#.#68.87.167':445
'20#.#68.203.8':445
'20#.#68.146.139':445
'20#.#68.13.68':445
'20#.#68.150.35':445
'20#.#68.11.56':445
'20#.#68.91.169':445
'20#.#68.150.91':445
'20#.#68.219.172':445
'20#.#68.150.12':445
'20#.#68.192.203':445
'20#.#68.249.215':445
'20#.#68.69.254':445
'20#.#68.173.250':445
'20#.#68.130.231':445
'20#.#68.159.159':445
'20#.#68.35.18':445
'20#.#68.211.92':445
'20#.#68.211.92':139
'20#.#68.130.231':139
'20#.#68.173.250':139
'20#.#68.35.18':139
'20#.#68.159.159':139
'20#.#68.146.139':139
'20#.#68.166.146':139
'20#.#68.219.172':139
'20#.#68.203.8':139
'20#.#68.192.203':139
'20#.#68.69.254':139
'20#.#68.69.24':139
'20#.#68.40.235':139
'20#.#68.164.43':139
'20#.#68.162.10':139
'20#.#68.43.229':139
'20#.#68.150.12':139
'20#.#68.249.215':139
'20#.#68.17.234':139
'20#.#68.214.220':139
'20#.#68.162.3':139
'20#.#68.66.14':139
'20#.#68.221.65':139
'20#.#68.213.172':139
'20#.#68.200.106':139
'20#.#68.219.184':139
'20#.#68.161.213':139
'20#.#68.158.238':139
'20#.#68.53.140':139
'20#.#68.91.169':139
'20#.#68.150.91':139
'20#.#68.87.167':139
'20#.#68.13.68':139
'20#.#68.150.35':139
'20#.#68.237.36':139
'20#.#68.116.98':139
'20#.#68.11.56':139
'20#.#68.51.11':139
'20#.#68.51.11':445
'20#.#68.141.14':139
'20#.#68.191.204':139
'20#.#68.251.123':139
'20#.#68.154.54':139
'20#.#68.40.192':139
'20#.#68.119.156':139
'20#.#68.131.119':139
'20#.#68.29.12':139
'20#.#68.156.92':139
'20#.#68.124.94':139
'20#.#68.196.87':139
'20#.#68.54.43':139
'20#.#68.187.241':139
'20#.#68.40.241':139
'20#.#68.27.166':139
'20#.#68.45.103':139
'20#.#68.94.114':139
'20#.#68.191.122':139
'20#.#68.236.22':139
'20#.#68.5.34':139
'20#.#68.132.211':139
'20#.#68.154.155':139
'20#.#68.56.167':139
'20#.#68.123.50':139
'20#.#68.28.13':139
'20#.#68.195.9':139
'20#.#68.215.108':139
'20#.#68.47.215':139
'20#.#68.155.72':139
'20#.#68.9.227':139
'20#.#68.88.10':139
'20#.#68.38.44':139
'20#.#68.186.101':139
'20#.#68.187.87':139
'20#.#68.159.197':139
'20#.#68.15.182':139
'20#.#68.76.187':139
'20#.#68.196.109':139
'20#.#68.33.202':445
'20#.#68.150.34':445
'20#.#68.200.106':445
'20#.#68.219.184':445
'20#.#68.123.150':445
'20#.#68.151.65':445
'20#.#68.147.235':445
'20#.#68.76.190':445
'20#.#68.159.80':445
'20#.#68.158.238':445
'20#.#68.53.140':445
'20#.#68.66.14':445
'20#.#68.237.36':445
'20#.#68.116.98':445
'20#.#68.221.65':445
'20#.#68.213.172':445
'20#.#68.161.213':445
'20#.#68.214.220':445
'20#.#68.162.3':445
'20#.#68.159.80':9988
'20#.#68.114.152':9988
'20#.#68.33.202':9988
'20#.#68.123.150':9988
'20#.#68.27.6':139
'20#.#68.196.226':139
'20#.#68.29.42':139
'20#.#68.218.26':139
'20#.#68.229.217':139
'20#.#68.200.106':9988
'20#.#68.62.156':445
'20#.#68.178.203':445
'20#.#68.210.35':445
'20#.#68.100.74':445
'20#.#68.249.120':445
'20#.#68.69.24':9988
'20#.#68.161.213':9988
'20#.#68.114.152':445
'20#.#68.43.229':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней