Trojan.Starman.6440

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERb457.dir00\svchost.exe.mdmp 16325836412032304

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb457.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#6.163.3':445
'20#.#6.46.78':445
'20#.#6.42.228':445
'20#.#6.100.70':445
'20#.#6.86.34':445
'20#.#6.34.53':445
'20#.#6.177.195':139
'20#.#6.41.191':139
'20#.#6.18.87':139
'20#.#6.50.209':445
'20#.#6.167.154':445
'20#.#6.167.145':445
'20#.#6.183.111':445
'20#.#6.80.170':445
'20#.#6.177.232':445
'20#.#6.235.33':445
'20#.#6.70.209':445
'20#.#6.112.57':445
'20#.#6.195.246':445
'20#.#6.164.151':445
'20#.#6.21.215':445
'20#.#6.253.195':445
'20#.#6.27.179':445
'20#.#6.70.248':445
'20#.#6.213.49':139
'20#.#6.221.20':139
'20#.#6.34.176':139
'20#.#6.209.16':139
'20#.#6.216.216':139
'20#.#6.39.185':139
'20#.#6.230.243':139
'20#.66.9.97':139
'20#.#6.177.195':445
'20#.#6.41.191':445
'20#.#6.126.175':139
'20#.#6.234.109':139
'20#.#6.96.234':139
'20#.#6.186.129':139
'20#.#6.110.146':139
'20#.#6.240.139':139
'20#.#6.21.254':139
'20#.#6.113.105':139
'20#.#6.141.113':139
'20#.#6.53.233':139
'20#.#6.188.27':139
'20#.#6.216.70':139
'20#.#6.76.163':139
'20#.#6.30.84':139
'20#.#6.233.90':139
'20#.#6.168.151':445
'20#.#6.24.124':445
'20#.#6.61.56':445
'20#.#6.59.44':445
'20#.#6.72.65':445
'20#.#6.169.90':445
'20#.#6.18.170':445
'20#.#6.226.58':139
'20#.#6.89.63':139
'20#.#6.171.177':139
'20#.#6.252.108':445
'20#.#6.190.81':445
'20#.#6.132.18':445
'20#.#6.227.136':445
'20#.#6.49.193':445
'20#.#6.195.49':445
'20#.#6.46.119':445
'20#.#6.164.105':445
'20#.#6.93.93':445
'20#.#6.131.237':445
'20#.#6.70.89':445
'20#.#6.58.34':445
'20#.#6.195.194':445
'20#.#6.45.60':445
'20#.#6.20.148':445
'20#.#6.168.151':139
'20#.#6.163.3':139
'20#.#6.46.78':139
'20#.#6.42.228':139
'20#.#6.100.70':139
'20#.#6.86.34':139
'20#.#6.34.53':139
'20#.#6.226.58':445
'20#.#6.89.63':445
'20#.#6.171.177':445
'20#.#6.50.209':139
'20#.#6.167.154':139
'20#.#6.167.145':139
'20#.#6.183.111':139
'20#.#6.80.170':139
'20#.#6.177.232':139
'20#.#6.235.33':139
'20#.#6.70.209':139
'20#.#6.112.57':139
'20#.#6.195.246':139
'20#.#6.164.151':139
'20#.#6.21.215':139
'20#.#6.253.195':139
'20#.#6.27.179':139
'20#.#6.70.248':139
'20#.#6.18.87':445
'20#.#6.163.171':445
'20#.#6.142.106':445
'20#.#6.182.226':445
'20#.#6.56.155':445
'20#.#6.71.26':445
'20#.#6.144.149':445
'20#.#6.69.200':445
'20#.66.4.43':445
'20#.#6.26.116':139
'20#.#6.244.160':445
'20#.66.6.8':445
'20#.#6.233.141':445
'20#.#6.39.197':445
'20#.#6.98.13':445
'20#.#6.153.98':445
'20#.#6.119.40':445
'20#.#6.107.12':445
'20#.#6.27.154':445
'20#.#6.210.200':445
'20#.#6.134.128':445
'20#.#6.117.32':445
'20#.#6.92.28':445
'20#.#6.33.176':445
'20#.#6.32.112':445
'20#.#6.195.67':139
'20#.#6.121.31':139
'20#.#6.18.233':139
'20#.#6.57.183':139
'20#.#6.27.133':139
'20#.#6.148.121':139
'20#.#6.31.188':139
'20#.#6.231.141':139
'20#.#6.121.231':139
'20#.#6.69.239':139
'20#.#6.219.57':139
'20#.#6.232.218':139
'20#.#6.141.232':139
'20#.#6.145.152':139
'20#.#6.22.195':139
'20#.#6.173.54':139
'20#.#6.41.196':139
'20#.#6.112.41':139
'20#.#6.152.112':139
'20#.#6.110.41':139
'20#.#6.38.242':139
'20#.#6.59.27':139
'20#.#6.168.44':139
'20#.#6.17.214':139
'20#.#6.34.219':139
'20#.#6.73.199':445
'20#.#6.230.243':445
'20#.#6.221.20':445
'20#.#6.34.176':445
'20#.#6.216.70':445
'20#.#6.216.216':445
'20#.#6.39.185':445
'20#.#6.96.234':445
'20#.66.9.97':445
'20#.#6.7.177':139
'20#.#6.209.16':445
'20#.#6.126.175':445
'20#.#6.234.109':445
'20#.#6.141.113':445
'20#.#6.186.129':445
'20#.#6.110.146':445
'20#.#6.213.49':445
'20#.#6.21.254':445
'20#.#6.113.105':445
'20#.#6.233.90':445
'20#.#6.53.233':445
'20#.#6.188.27':445
'20#.#6.240.139':445
'20#.#6.76.163':445
'20#.#6.30.84':445
'20#.#6.73.199':139
'20#.#6.163.171':139
'20#.#6.142.106':139
'20#.#6.182.226':139
'20#.#6.56.155':139
'20#.#6.71.26':139
'20#.#6.144.149':139
'20#.#6.69.200':139
'20#.66.4.43':139
'20#.#6.7.177':445
'20#.#6.244.160':139
'20#.66.6.8':139
'20#.#6.233.141':139
'20#.#6.39.197':139
'20#.#6.98.13':139
'20#.#6.153.98':139
'20#.#6.119.40':139
'20#.#6.107.12':139
'20#.#6.27.154':139
'20#.#6.210.200':139
'20#.#6.134.128':139
'20#.#6.117.32':139
'20#.#6.92.28':139
'20#.#6.33.176':139
'20#.#6.32.112':139
'20#.#6.9.125':445
'20#.#6.118.9':445
'20#.#6.142.118':445
'20#.#6.212.63':445
'20#.#6.70.236':445
'20#.#6.142.129':445
'20#.#6.78.164':445
'20#.#6.89.165':445
'20#.#6.124.89':445
'20#.#6.104.46':445
'20#.#6.68.49':445
'20#.#6.150.63':445
'20#.#6.8.159':445
'20#.#6.5.247':445
'20#.#6.164.152':445
'20#.#6.158.58':139
'20#.#6.205.158':139
'20#.#6.187.188':445
'20#.#6.119.26':445
'20#.#6.248.211':445
'20#.#6.134.51':445
'20#.#6.196.158':445
'20#.66.3.61':445
'20#.#6.143.32':445
'20#.#6.129.129':445
'20#.#6.159.197':445
'20#.#6.34.189':445
'20#.#6.224.165':445
'20#.#6.145.183':445
'20#.66.76.3':445
'20#.#6.198.36':445
'20#.#6.245.103':445
'20#.#6.254.182':445
'20#.#6.118.17':445
'20#.#6.149.224':445
'20#.#6.140.7':445
'20#.#6.103.253':445
'20#.#6.30.130':445
'20#.#6.55.195':445
'20#.#6.11.251':445
'20#.#6.119.207':445
'20#.#6.137.44':445
'20#.#6.28.99':445
'20#.#6.97.161':445
'20#.#6.1.227':445
'20#.#6.59.168':445
'20#.#6.234.11':445
'20#.#6.46.148':445
'20#.#6.98.248':445
'20#.#6.248.56':139
'20#.#6.142.118':139
'20#.#6.104.46':139
'20#.#6.68.49':139
'20#.#6.142.129':139
'20#.#6.9.125':139
'20#.#6.118.9':139
'20#.#6.124.89':139
'20#.#6.129.129':139
'20#.#6.119.207':139
'20#.#6.150.63':139
'20#.#6.78.164':139
'20#.#6.89.165':139
'20#.#6.187.188':139
'20#.#6.5.247':139
'20#.66.3.61':139
'20#.#6.164.152':139
'20#.#6.8.159':139
'20#.#6.196.158':139
'20#.#6.134.51':139
'20#.#6.212.63':139
'20#.#6.70.236':139
'20#.#6.143.32':139
'20#.#6.119.26':139
'20#.#6.248.211':139
'20#.#6.137.44':139
'20#.#6.224.165':139
'20#.#6.149.224':139
'20#.#6.140.7':139
'20#.#6.198.36':139
'20#.#6.159.197':139
'20#.#6.34.189':139
'20#.#6.118.17':139
'20#.#6.125.30':139
'20#.#6.107.179':139
'20#.#6.103.253':139
'20#.#6.245.103':139
'20#.#6.254.182':139
'20#.#6.11.251':139
'20#.#6.234.11':139
'20#.#6.46.148':139
'20#.#6.28.99':139
'20#.#6.30.130':139
'20#.#6.55.195':139
'20#.#6.59.168':139
'20#.#6.145.183':139
'20#.66.76.3':139
'20#.#6.98.248':139
'20#.#6.97.161':139
'20#.#6.1.227':139
'20#.#6.125.30':445
'20#.#6.228.46':445
'20#.#6.25.35':445
'20#.#6.192.89':445
'20#.#6.38.96':445
'20#.#6.11.176':445
'20#.#6.47.11':445
'20#.#6.134.115':139
'20#.#6.94.218':139
'20#.#6.46.119':139
'20#.#6.56.107':139
'20#.#6.148.34':139
'20#.#6.76.97':139
'20#.#6.92.154':445
'20#.#6.60.199':445
'20#.#6.131.92':445
'20#.#6.61.61':445
'20#.#6.63.61':445
'20#.#6.86.15':445
'20#.#6.127.238':445
'20#.#6.117.191':445
'20#.#6.12.225':445
'20#.#6.176.194':445
'20#.#6.97.149':445
'20#.#6.238.182':445
'20#.#6.164.105':139
'20#.#6.59.44':139
'20#.#6.252.108':139
'20#.#6.190.81':139
'20#.#6.18.170':139
'20#.#6.24.124':139
'20#.#6.61.56':139
'20#.#6.76.97':445
'20#.#6.134.115':445
'20#.#6.94.218':445
'20#.#6.132.18':139
'20#.#6.56.107':445
'20#.#6.148.34':445
'20#.#6.195.49':139
'20#.#6.195.194':139
'20#.#6.45.60':139
'20#.#6.93.93':139
'20#.#6.227.136':139
'20#.#6.49.193':139
'20#.#6.58.34':139
'20#.#6.72.65':139
'20#.#6.169.90':139
'20#.#6.20.148':139
'20#.#6.131.237':139
'20#.#6.70.89':139
'20#.#6.51.60':445
'20#.#6.149.224':9988
'20#.#6.254.182':9988
'20#.#6.125.30':9988
'20#.#6.97.161':9988
'20#.#6.145.183':9988
'20#.#6.224.165':9988
'20#.#6.37.199':139
'20#.#6.146.37':139
'20#.#6.116.146':139
'20#.#6.89.179':139
'20#.#6.63.55':139
'20#.#6.199.62':139
'20#.#6.158.58':445
'20#.#6.8.159':9988
'20#.#6.119.26':9988
'20#.#6.107.179':445
'20#.#6.248.56':445
'20#.#6.205.158':445
'20#.#6.137.44':9988
'20#.#6.28.99':9988
'20#.#6.46.148':9988
'20#.#6.68.49':9988
'20#.#6.89.165':9988
'20#.#6.119.207':9988
'20#.#6.51.60':139
'20#.#6.228.46':139
'20#.#6.25.35':139
'20#.#6.192.89':139
'20#.#6.38.96':139
'20#.#6.11.176':139
'20#.#6.47.11':139
'20#.#6.37.199':445
'20#.#6.146.37':445
'20#.#6.116.146':445
'20#.#6.89.179':445
'20#.#6.63.55':445
'20#.#6.199.62':445
'20#.#6.92.154':139
'20#.#6.60.199':139
'20#.#6.131.92':139
'20#.#6.61.61':139
'20#.#6.63.61':139
'20#.#6.86.15':139
'20#.#6.127.238':139
'20#.#6.117.191':139
'20#.#6.12.225':139
'20#.#6.176.194':139
'20#.#6.97.149':139
'20#.#6.238.182':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней