Trojan.Starman.6380

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERb26f.dir00\svchost.exe.mdmp 16325836412032200

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb26f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'14.##.119.85':139
'14.##.155.246':139
'14.##.45.249':139
'14.##.95.234':139
'14.##.71.212':139
'14.##.120.106':139
'14.##.242.218':139
'14.##.242.93':139
'14.##.155.28':139
'14.##.226.15':139
'14.##.106.16':139
'14.##.149.240':139
'14.##.167.86':139
'14.#4.26.59':139
'14.#4.42.94':139
'14.##.198.13':139
'14.##.109.189':139
'14.#4.73.8':139
'14.##.17.100':139
'14.##.203.67':139
'14.##.135.189':139
'14.##.26.123':139
'14.#4.22.23':139
'14.#4.52.22':139
'14.#4.82.79':139
'14.##.245.112':139
'14.##.165.253':139
'14.##.206.51':139
'14.##.35.240':445
'14.##.103.150':445
'14.##.123.216':445
'14.#4.82.3':445
'14.##.121.236':445
'14.#4.92.89':139
'14.#4.66.94':139
'14.##.117.164':139
'14.#4.25.56':139
'14.#4.180.4':139
'14.##.106.101':139
'14.##.224.129':139
'14.##.10.206':139
'14.##.129.125':139
'14.##.145.167':139
'14.##.240.55':139
'14.#4.84.35':445
'14.##.144.150':445
'14.##.119.137':445
'14.#4.20.84':445
'14.##.169.127':445
'14.##.178.232':445
'14.##.180.173':445
'14.##.43.196':445
'14.#4.14.3':445
'14.##.129.34':445
'14.##.88.240':445
'14.#4.97.45':445
'14.##.37.206':445
'14.#4.13.81':445
'14.##.134.32':445
'14.##.220.164':445
'14.##.174.46':445
'14.##.135.95':445
'14.#4.60.11':445
'14.##.96.233':445
'14.#4.83.39':445
'14.#4.3.173':445
'14.##.103.150':139
'14.##.252.31':139
'14.##.35.240':139
'14.##.121.236':139
'14.##.123.216':139
'14.#4.9.170':139
'14.##.95.101':139
'14.#4.5.183':139
'14.##.169.47':139
'14.##.196.98':139
'14.##.170.196':139
'14.##.119.212':445
'14.##.189.129':445
'14.#4.34.34':445
'14.##.163.106':445
'14.#4.8.226':445
'14.##.94.158':445
'14.##.140.124':445
'14.#4.82.3':139
'14.#4.16.78':445
'14.##.166.163':445
'14.##.77.182':445
'14.##.33.181':139
'14.#4.21.35':139
'14.##.244.208':139
'14.##.202.147':139
'14.##.208.202':139
'14.#4.6.156':139
'14.##.128.155':139
'14.##.133.128':139
'14.##.248.178':139
'14.##.164.154':139
'14.#4.80.60':139
'14.##.221.82':139
'14.#4.64.67':139
'14.#4.7.86':139
'14.#4.52.22':445
'14.##.206.51':445
'14.##.133.34':139
'14.##.110.134':139
'14.##.58.249':139
'14.##.210.193':139
'14.##.53.212':139
'14.#4.24.2':139
'14.##.36.104':139
'14.##.181.140':139
'14.##.104.69':139
'14.##.20.156':139
'14.##.130.69':139
'14.##.240.100':139
'14.#4.16.36':139
'14.##.127.252':139
'14.##.128.58':139
'14.##.122.200':139
'14.##.133.131':139
'14.##.82.232':139
'14.#4.169.2':139
'14.#4.43.17':139
'14.##.84.133':139
'14.##.83.238':139
'14.##.41.174':139
'14.#4.36.94':139
'14.#4.36.30':139
'14.##.155.121':139
'14.##.229.87':139
'14.#4.64.74':139
'14.##.26.123':445
'14.##.203.67':445
'14.##.135.189':445
'14.##.167.86':445
'14.##.109.189':445
'14.#4.73.8':445
'14.##.45.249':445
'14.##.119.85':445
'14.##.71.212':445
'14.##.17.100':445
'14.##.95.234':445
'14.##.170.196':445
'14.##.169.47':445
'14.##.196.98':445
'14.##.252.31':445
'14.#4.9.170':445
'14.##.95.101':445
'14.#4.26.59':445
'14.##.149.240':445
'14.##.198.13':445
'14.#4.5.183':445
'14.#4.42.94':445
'14.##.240.55':445
'14.##.129.125':445
'14.##.145.167':445
'14.#4.66.94':445
'14.##.106.101':445
'14.##.224.129':445
'14.#4.82.79':445
'14.#4.22.23':445
'14.##.165.253':445
'14.##.10.206':445
'14.##.245.112':445
'14.##.106.16':445
'14.##.155.28':445
'14.##.226.15':445
'14.##.155.246':445
'14.##.120.106':445
'14.##.242.218':445
'14.##.117.164':445
'14.#4.92.89':445
'14.#4.180.4':445
'14.##.242.93':445
'14.#4.25.56':445
'14.##.64.125':445
'14.##.135.140':445
'14.#4.7.223':445
'14.##.195.130':445
'14.##.47.175':445
'14.##.71.236':445
'14.##.84.171':445
'14.##.104.197':445
'14.##.31.112':445
'14.##.251.89':445
'14.#4.92.68':445
'14.##.100.98':139
'14.##.33.202':139
'14.##.97.178':139
'14.##.52.184':139
'14.##.133.93':139
'14.#4.7.74':139
'14.##.187.42':445
'14.##.216.63':445
'14.##.187.218':445
'14.#4.165.3':139
'14.##.211.49':445
'14.##.100.188':445
'14.##.43.236':445
'14.##.77.202':445
'14.##.73.142':445
'14.##.241.135':445
'14.##.109.119':445
'14.#4.86.96':445
'14.##.149.134':445
'14.##.44.195':445
'14.##.185.16':445
'14.#4.8.125':445
'14.#4.177.4':445
'14.##.107.50':445
'14.##.17.148':445
'14.##.123.148':445
'14.#4.236.4':445
'14.#4.10.94':445
'14.##.107.185':445
'14.##.197.31':445
'14.##.32.107':445
'14.##.230.118':445
'14.##.184.230':445
'14.##.104.197':139
'14.##.123.148':139
'14.##.84.171':139
'14.#4.92.68':139
'14.##.31.112':139
'14.#4.236.4':139
'14.#4.10.94':139
'14.##.230.118':139
'14.##.107.50':139
'14.##.17.148':139
'14.#4.177.4':139
'14.##.195.130':139
'14.##.211.49':139
'14.##.187.218':139
'14.##.187.42':139
'14.##.216.63':139
'14.#4.7.223':139
'14.##.71.236':139
'14.##.251.89':139
'14.##.135.140':139
'14.##.47.175':139
'14.##.64.125':139
'14.##.149.134':139
'14.##.255.227':139
'14.#4.86.96':139
'14.#4.8.125':139
'14.##.44.195':139
'14.##.47.112':139
'14.##.121.83':139
'14.##.107.210':139
'14.##.59.176':139
'14.##.54.217':139
'14.##.119.128':139
'14.##.197.31':139
'14.##.73.142':139
'14.##.32.107':139
'14.##.184.230':139
'14.##.107.185':139
'14.##.241.135':139
'14.##.109.119':139
'14.##.185.16':139
'14.##.43.236':139
'14.##.77.202':139
'14.##.100.188':139
'14.##.43.196':139
'14.##.163.106':139
'14.##.180.173':139
'14.##.88.240':139
'14.#4.14.3':139
'14.#4.8.226':139
'14.##.94.158':139
'14.##.166.163':139
'14.##.189.129':139
'14.#4.34.34':139
'14.##.119.212':139
'14.#4.60.11':139
'14.#4.20.84':139
'14.##.135.95':139
'14.#4.3.173':139
'14.##.96.233':139
'14.##.169.127':139
'14.##.178.232':139
'14.##.129.34':139
'14.##.144.150':139
'14.##.119.137':139
'14.#4.84.35':139
'14.##.234.211':445
'14.##.194.77':445
'14.##.215.200':445
'14.##.10.211':445
'14.##.200.29':445
'14.#4.36.64':445
'14.##.252.245':445
'14.##.182.252':445
'14.##.245.136':445
'14.#4.201.4':445
'14.##.239.225':445
'14.#4.14.51':445
'14.#4.3.28':445
'14.##.140.124':139
'14.##.77.182':139
'14.#4.16.78':139
'14.#4.203.3':445
'14.##.76.131':445
'14.#4.21.59':445
'14.#4.87.41':445
'14.##.218.14':445
'14.##.106.144':445
'14.##.187.218':9988
'14.##.241.135':9988
'14.#4.165.3':445
'14.##.33.202':445
'14.#4.7.74':445
'14.##.100.188':9988
'14.#4.203.3':139
'14.##.218.14':139
'14.#4.3.28':139
'14.##.149.134':9988
'14.#4.14.51':139
'14.##.119.128':445
'14.##.59.176':445
'14.##.54.217':445
'14.##.255.227':445
'14.##.47.112':445
'14.##.121.83':445
'14.##.97.178':445
'14.##.100.98':445
'14.##.133.93':445
'14.##.107.210':445
'14.##.52.184':445
'14.##.182.252':139
'14.##.134.32':139
'14.##.252.245':139
'14.##.239.225':139
'14.##.245.136':139
'14.##.220.164':139
'14.##.174.46':139
'14.#4.83.39':139
'14.##.37.206':139
'14.#4.13.81':139
'14.#4.97.45':139
'14.#4.21.59':139
'14.##.10.211':139
'14.##.76.131':139
'14.##.106.144':139
'14.#4.87.41':139
'14.##.200.29':139
'14.#4.36.64':139
'14.#4.201.4':139
'14.##.194.77':139
'14.##.215.200':139
'14.##.234.211':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней