Trojan.Starman.4809

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1112 -dm 7 7 %TEMP%\WER591c.dir00\svchost.exe.mdmp 16325836412027956

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER591c.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##.136.74':445
'58.#8.74.86':445
'58.##.128.160':445
'58.##.231.180':445
'58.##.181.75':445
'58.##.85.237':445
'58.##.38.153':445
'58.##.70.195':445
'58.##.16.120':445
'58.#8.238.6':445
'58.#8.102.1':445
'58.##.38.186':445
'58.#8.98.26':445
'58.##.19.155':445
'58.##.124.223':445
'58.#8.46.85':445
'58.##.200.114':445
'58.#8.42.57':445
'58.##.234.231':445
'58.##.138.37':445
'58.##.114.101':445
'58.##.101.184':445
'58.##.176.128':445
'58.##.205.231':139
'58.##.125.90':139
'58.##.139.193':139
'58.##.141.149':139
'58.##.101.140':139
'58.#8.7.221':139
'58.#8.95.82':139
'58.##.140.169':139
'58.##.148.60':139
'58.##.180.71':139
'58.##.99.204':139
'58.##.83.123':139
'58.##.206.225':139
'58.#8.159.6':445
'58.#8.5.75':445
'58.##.44.119':445
'58.##.147.149':139
'58.##.251.127':139
'58.##.176.171':139
'58.##.143.50':139
'58.##.63.140':139
'58.##.190.232':139
'58.##.229.145':445
'58.##.169.156':139
'58.#8.157.1':139
'58.##.240.39':139
'58.##.97.125':139
'58.#8.9.202':139
'58.##.13.190':139
'58.#8.2.170':139
'58.##.83.123':445
'58.##.159.45':139
'58.#8.96.42':139
'58.##.42.100':139
'58.##.140.54':139
'58.##.149.20':139
'58.##.29.116':139
'58.##.253.196':139
'58.#8.67.51':139
'58.##.102.109':139
'58.##.241.249':139
'58.##.203.120':139
'58.##.121.219':139
'58.##.178.195':139
'58.##.195.121':139
'58.##.206.225':445
'58.##.148.60':445
'58.#8.95.82':445
'58.##.99.204':445
'58.#8.7.221':445
'58.##.180.71':445
'58.##.140.169':445
'58.##.150.252':445
'58.##.115.137':445
'58.##.247.98':445
'58.##.169.239':445
'58.##.239.246':445
'58.##.143.50':445
'58.##.251.127':445
'58.##.190.232':445
'58.##.147.149':445
'58.##.63.140':445
'58.##.176.171':445
'58.##.205.231':445
'58.##.125.90':445
'58.##.139.193':445
'58.##.141.149':445
'58.##.101.140':445
'58.##.169.239':139
'58.##.228.79':445
'58.##.70.102':445
'58.#8.56.23':445
'58.##.145.80':445
'58.##.22.130':445
'58.##.139.223':445
'58.##.79.103':445
'58.##.173.11':445
'58.##.227.243':445
'58.##.151.193':445
'58.##.67.105':445
'58.##.50.179':445
'58.##.194.251':445
'58.##.254.169':445
'58.##.91.109':445
'58.##.145.57':445
'58.##.251.207':445
'58.##.240.47':445
'58.##.79.158':445
'58.##.118.145':445
'58.##.208.49':445
'58.##.52.190':445
'58.#8.11.53':445
'58.##.122.204':139
'58.#8.2.122':139
'58.#8.6.123':139
'58.##.185.176':445
'58.##.43.149':445
'58.##.227.18':139
'58.#8.0.71':139
'58.##.120.76':139
'58.##.169.184':139
'58.##.182.76':139
'58.##.51.208':139
'58.##.99.146':445
'58.##.201.225':445
'58.##.176.30':445
'58.#8.52.14':445
'58.##.53.241':445
'58.#8.95.55':445
'58.##.20.145':445
'58.##.124.233':445
'58.#8.85.77':445
'58.##.68.224':445
'58.#8.4.213':445
'58.##.98.180':445
'58.#8.42.57':139
'58.##.234.231':139
'58.##.138.37':139
'58.##.114.101':139
'58.##.101.184':139
'58.##.231.180':139
'58.#8.74.86':139
'58.##.85.237':139
'58.##.136.74':139
'58.##.181.75':139
'58.##.128.160':139
'58.##.115.137':139
'58.##.229.145':139
'58.##.150.252':139
'58.##.239.246':139
'58.##.247.98':139
'58.##.124.223':139
'58.#8.98.26':139
'58.##.200.114':139
'58.##.38.186':139
'58.#8.46.85':139
'58.##.19.155':139
'58.#8.238.6':139
'58.##.169.184':445
'58.#8.0.71':445
'58.##.51.208':445
'58.##.227.18':445
'58.##.182.76':445
'58.##.120.76':445
'58.#8.25.37':445
'58.##.183.57':445
'58.##.164.116':445
'58.##.150.237':445
'58.##.237.89':445
'58.##.70.195':139
'58.##.176.128':139
'58.##.38.153':139
'58.#8.102.1':139
'58.##.16.120':139
'58.#8.5.75':139
'58.##.122.204':445
'58.#8.2.122':445
'58.#8.6.123':445
'58.##.44.119':139
'58.#8.159.6':139
'58.#8.68.86':139
'58.##.161.110':139
'58.##.240.23':139
'58.##.22.123':139
'58.##.229.76':139
'58.##.164.107':139
'58.##.162.85':139
'58.##.85.246':139
'58.##.39.162':139
'58.##.18.248':139
'58.##.28.112':139
'58.##.245.194':445
'58.##.99.249':445
'58.#8.1.170':445
'58.##.122.36':445
'58.##.186.133':445
'58.##.146.175':139
'58.##.200.186':139
'58.##.221.85':139
'58.##.93.236':139
'58.##.103.56':139
'58.#8.15.89':139
'58.##.182.116':139
'58.##.33.125':139
'58.#8.54.32':139
'58.#8.82.33':139
'58.#8.52.75':139
'58.#8.75.81':139
'58.##.229.123':139
'58.##.92.203':139
'58.##.230.19':139
'58.##.33.168':139
'58.##.11.158':139
'58.##.70.156':139
'58.#8.55.1':139
'58.##.69.174':139
'58.##.243.183':139
'58.##.158.102':139
'58.##.44.211':139
'58.##.149.40':139
'58.##.168.99':139
'58.#8.63.5':139
'58.##.25.131':139
'58.##.90.174':139
'58.##.236.220':139
'58.#8.13.22':445
'58.##.39.162':445
'58.##.162.85':445
'58.##.28.112':445
'58.##.164.107':445
'58.##.18.248':445
'58.##.85.246':445
'58.##.243.183':445
'58.#8.55.1':445
'58.##.44.211':445
'58.##.182.116':445
'58.##.158.102':445
'58.##.93.236':445
'58.##.200.186':445
'58.#8.15.89':445
'58.##.146.175':445
'58.##.103.56':445
'58.##.221.85':445
'58.#8.68.86':445
'58.##.161.110':445
'58.##.240.23':445
'58.##.22.123':445
'58.##.229.76':445
'58.##.69.174':445
'58.##.33.168':445
'58.##.92.203':445
'58.##.70.156':445
'58.##.229.123':445
'58.##.11.158':445
'58.##.230.19':445
'58.#8.61.89':445
'58.##.88.194':445
'58.##.216.190':445
'58.#8.24.60':445
'58.##.29.131':445
'58.##.25.131':445
'58.##.168.99':445
'58.##.236.220':445
'58.##.149.40':445
'58.##.90.174':445
'58.#8.63.5':445
'58.##.33.125':445
'58.#8.54.32':445
'58.#8.82.33':445
'58.#8.52.75':445
'58.#8.75.81':445
'58.#8.24.60':139
'58.#8.2.170':445
'58.##.248.159':139
'58.##.159.45':445
'58.#8.96.42':445
'58.##.42.100':445
'58.##.180.116':139
'58.##.122.233':139
'58.##.128.109':139
'58.##.151.40':139
'58.##.116.192':139
'58.##.106.201':139
'58.##.241.249':445
'58.##.203.120':445
'58.##.121.219':445
'58.##.178.195':445
'58.##.195.121':445
'58.##.97.125':445
'58.#8.157.1':445
'58.##.13.190':445
'58.##.169.156':445
'58.#8.9.202':445
'58.##.240.39':445
'58.##.63.173':139
'58.##.120.191':139
'58.##.83.112':139
'58.##.35.185':139
'58.#8.98.98':139
'58.##.255.218':139
'58.#8.5.86':139
'58.##.223.111':139
'58.##.38.182':139
'58.##.232.223':139
'58.#8.30.53':139
'58.##.121.232':139
'58.#8.47.64':139
'58.#8.8.160':139
'58.##.139.47':139
'58.##.19.178':139
'58.##.200.54':139
'58.##.179.62':139
'58.#8.74.47':139
'58.##.177.177':139
'58.##.78.169':139
'58.##.63.122':139
'58.##.121.175':139
'58.##.102.109':445
'58.##.151.40':445
'58.##.122.233':445
'58.##.106.201':445
'58.##.180.116':445
'58.##.116.192':445
'58.##.128.109':445
'58.##.139.47':445
'58.#8.47.64':445
'58.##.200.54':445
'58.##.63.173':445
'58.##.19.178':445
'58.##.88.194':139
'58.#8.13.22':139
'58.#8.61.89':139
'58.##.29.131':139
'58.##.216.190':139
'58.##.122.36':139
'58.##.99.249':139
'58.##.248.159':445
'58.##.245.194':139
'58.##.186.133':139
'58.#8.1.170':139
'58.#8.8.160':445
'58.##.232.223':445
'58.##.223.111':445
'58.##.121.232':445
'58.#8.5.86':445
'58.#8.30.53':445
'58.##.38.182':445
'58.##.140.54':445
'58.##.149.20':445
'58.##.29.116':445
'58.##.253.196':445
'58.#8.67.51':445
'58.##.78.169':445
'58.#8.74.47':445
'58.##.121.175':445
'58.##.179.62':445
'58.##.63.122':445
'58.##.177.177':445
'58.##.120.191':445
'58.##.83.112':445
'58.##.35.185':445
'58.#8.98.98':445
'58.##.255.218':445
'58.##.22.211':139
'58.#8.70.83':139
'58.##.129.204':139
'58.#8.8.162':139
'58.#8.75.96':139
'58.#8.9.15':139
'58.##.204.131':9988
'58.##.194.68':9988
'58.#8.37.79':9988
'58.##.172.183':9988
'58.##.56.189':9988
'58.##.151.31':139
'58.#8.65.68':139
'58.##.87.146':139
'58.##.45.113':139
'58.#8.69.30':139
'58.##.25.248':139
'58.##.71.229':139
'58.##.201.114':139
'58.##.195.173':139
'58.##.181.88':139
'58.#8.60.60':139
'58.#8.136.6':9988
'58.##.172.183':445
'58.##.221.184':445
'58.##.204.131':445
'58.#8.2.167':9988
'58.#8.76.36':445
'58.##.239.38':445
'58.##.203.57':445
'58.##.56.189':445
'58.#8.96.27':445
'58.##.187.240':445
'58.##.197.157':445
'58.##.171.185':9988
'58.##.113.37':9988
'58.##.24.171':9988
'58.##.62.169':9988
'58.##.177.22':9988
'58.#8.49.59':9988
'58.##.133.98':9988
'58.##.96.161':9988
'58.##.78.153':9988
'58.##.229.19':9988
'58.#8.18.43':9988
'58.#8.53.10':139
'58.##.143.202':139
'58.##.81.193':139
'58.#8.57.67':139
'58.#8.8.162':445
'58.#8.1.88':139
'58.#8.68.48':139
'58.##.216.236':139
'58.##.236.58':139
'58.##.203.216':139
'58.#8.33.73':139
'58.##.196.238':139
'58.##.195.173':445
'58.##.71.229':445
'58.#8.60.60':445
'58.##.25.248':445
'58.##.181.88':445
'58.#8.75.96':445
'58.#8.70.83':445
'58.##.129.204':445
'58.##.22.211':445
'58.##.201.114':445
'58.#8.9.15':445
'58.##.189.36':139
'58.##.213.170':139
'58.#8.99.74':139
'58.##.78.139':139
'58.##.150.35':139
'58.##.207.104':139
'58.#8.7.113':139
'58.##.27.178':139
'58.##.211.216':139
'58.#8.87.51':139
'58.##.141.20':139
'58.##.98.153':139
'58.##.137.199':139
'58.##.48.219':139
'58.#8.0.26':139
'58.##.157.208':139
'58.##.208.99':139
'58.##.26.114':139
'58.##.18.158':139
'58.#8.89.73':139
'58.##.156.136':139
'58.##.124.196':139
'58.#8.43.64':139
'58.##.48.254':445
'58.##.249.115':139
'58.##.48.180':139
'58.##.179.244':139
'58.##.177.22':139
'58.#8.37.79':139
'58.##.62.169':139
'58.#8.4.104':139
'58.#8.9.113':139
'58.##.73.132':139
'58.##.194.68':139
'58.#8.11.48':139
'58.##.48.254':139
'58.##.56.189':139
'58.##.203.57':139
'58.#8.96.27':139
'58.##.239.38':139
'58.#8.69.9':139
'58.##.79.104':139
'58.#8.136.6':139
'58.##.15.142':139
'58.##.179.229':139
'58.##.109.164':139
'58.#8.49.59':139
'58.##.96.161':139
'58.##.144.174':139
'58.##.105.136':139
'58.##.153.75':139
'58.##.167.227':139
'58.#8.96.72':139
'58.#8.53.58':139
'58.#8.2.167':139
'58.##.193.128':139
'58.##.133.98':139
'58.##.191.71':139
'58.##.171.185':139
'58.##.174.144':139
'58.##.229.19':139
'58.##.113.37':139
'58.##.24.171':139
'58.#8.49.6':139
'58.##.220.238':139
'58.##.78.153':139
'58.##.90.123':139
'58.##.11.135':139
'58.#8.18.43':139
'58.##.172.183':139
'58.#8.4.104':445
'58.#8.11.48':445
'58.##.194.68':445
'58.##.62.169':445
'58.##.73.132':445
'58.#8.9.113':445
'58.##.229.19':445
'58.##.174.144':445
'58.##.171.185':445
'58.##.113.37':445
'58.#8.49.59':445
'58.##.15.142':445
'58.##.48.180':445
'58.#8.136.6':445
'58.##.179.229':445
'58.##.109.164':445
'58.#8.69.9':445
'58.##.177.22':445
'58.#8.37.79':445
'58.##.249.115':445
'58.##.179.244':445
'58.##.79.104':445
'58.##.24.171':445
'58.##.96.161':445
'58.#8.53.58':445
'58.##.193.128':445
'58.##.191.71':445
'58.#8.96.72':445
'58.#8.2.167':445
'58.##.197.157':139
'58.##.187.240':139
'58.##.221.184':139
'58.#8.76.36':139
'58.##.204.131':139
'58.##.90.123':445
'58.##.220.238':445
'58.##.11.135':445
'58.#8.49.6':445
'58.#8.18.43':445
'58.##.153.75':445
'58.##.144.174':445
'58.##.133.98':445
'58.##.105.136':445
'58.##.167.227':445
'58.##.78.153':445
'58.##.173.157':445
'58.##.233.252':445
'58.##.99.150':445
'58.#8.30.18':445
'58.##.142.30':445
'58.##.105.134':445
'58.##.154.141':445
'58.##.225.245':445
'58.#8.72.76':445
'58.##.202.152':445
'58.##.16.163':445
'58.##.116.80':445
'58.#8.95.15':445
'58.##.142.132':445
'58.##.59.213':445
'58.##.138.182':445
'58.##.54.223':445
'58.##.135.105':445
'58.#8.46.59':445
'58.#8.79.39':445
'58.##.222.113':445
'58.#8.227.5':445
'58.##.74.127':445
'58.##.82.153':445
'58.##.92.252':445
'58.#8.4.162':445
'58.#8.51.91':445
'58.#8.23.36':445
'58.##.145.167':445
'58.##.187.76':445
'58.##.99.103':445
'58.##.131.83':445
'58.#8.0.124':445
'58.#8.5.144':445
'58.##.159.209':445
'58.##.210.69':445
'58.##.32.160':445
'58.##.126.16':445
'58.#8.23.59':445
'58.##.132.131':445
'58.##.191.39':445
'58.##.159.51':445
'58.#8.49.20':445
'58.##.201.77':445
'58.##.249.48':445
'58.##.239.59':445
'58.##.118.145':139
'58.##.240.47':139
'58.##.52.190':139
'58.##.251.207':139
'58.##.208.49':139
'58.##.79.158':139
'58.##.228.79':139
'58.##.70.102':139
'58.#8.56.23':139
'58.##.145.80':139
'58.##.22.130':139
'58.#8.25.37':139
'58.##.183.57':139
'58.##.164.116':139
'58.##.150.237':139
'58.##.237.89':139
'58.##.98.180':139
'58.##.50.179':139
'58.##.194.251':139
'58.##.254.169':139
'58.##.91.109':139
'58.##.145.57':139
'58.##.139.223':139
'58.#8.85.77':139
'58.##.20.145':139
'58.#8.4.213':139
'58.#8.95.55':139
'58.##.68.224':139
'58.##.124.233':139
'58.##.92.243':445
'58.#8.56.35':445
'58.##.233.104':445
'58.##.185.176':139
'58.##.43.149':139
'58.##.79.103':139
'58.##.173.11':139
'58.##.227.243':139
'58.##.151.193':139
'58.##.67.105':139
'58.#8.11.53':139
'58.##.99.146':139
'58.##.201.225':139
'58.##.176.30':139
'58.#8.52.14':139
'58.##.53.241':139
'58.#8.4.227':445
'58.##.216.236':445
'58.##.236.58':445
'58.##.203.216':445
'58.#8.33.73':445
'58.##.196.238':445
'58.##.189.36':445
'58.#8.0.26':445
'58.#8.89.73':445
'58.##.48.219':445
'58.##.157.208':445
'58.##.208.99':445
'58.##.99.103':139
'58.#8.4.227':139
'58.##.187.76':139
'58.#8.5.144':139
'58.##.131.83':139
'58.#8.57.38':139
'58.##.81.193':445
'58.#8.68.48':445
'58.##.143.202':445
'58.#8.1.88':445
'58.#8.57.67':445
'58.##.156.136':445
'58.##.27.178':445
'58.##.211.216':445
'58.#8.87.51':445
'58.##.141.20':445
'58.##.98.153':445
'58.#8.53.10':445
'58.##.151.31':445
'58.#8.65.68':445
'58.##.87.146':445
'58.##.45.113':445
'58.#8.69.30':445
'58.##.26.114':445
'58.##.124.196':445
'58.##.18.158':445
'58.##.137.199':445
'58.#8.43.64':445
'58.##.150.35':445
'58.#8.99.74':445
'58.#8.7.113':445
'58.##.207.104':445
'58.##.213.170':445
'58.##.78.139':445
'58.#8.0.124':139
'58.##.135.105':139
'58.#8.46.59':139
'58.#8.79.39':139
'58.##.222.113':139
'58.#8.227.5':139
'58.#8.30.18':139
'58.##.233.252':139
'58.##.105.134':139
'58.##.173.157':139
'58.##.142.30':139
'58.##.99.150':139
'58.#8.56.35':139
'58.##.239.59':139
'58.##.92.243':139
'58.#8.57.38':445
'58.##.233.104':139
'58.##.59.213':139
'58.#8.95.15':139
'58.##.54.223':139
'58.##.116.80':139
'58.##.138.182':139
'58.##.142.132':139
'58.##.202.152':139
'58.##.191.39':139
'58.##.159.51':139
'58.#8.49.20':139
'58.##.201.77':139
'58.##.249.48':139
'58.#8.51.91':139
'58.##.92.252':139
'58.##.145.167':139
'58.##.82.153':139
'58.#8.23.36':139
'58.#8.4.162':139
'58.##.225.245':139
'58.##.74.127':139
'58.##.154.141':139
'58.##.16.163':139
'58.#8.72.76':139
'58.##.126.16':139
'58.##.210.69':139
'58.##.132.131':139
'58.##.159.209':139
'58.#8.23.59':139
'58.##.32.160':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней