Trojan.Starman.6409

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERcd19.dir00\svchost.exe.mdmp 16325836412028880

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERcd19.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##.233.179':139
'58.##.44.237':139
'58.##.26.126':139
'58.#7.7.206':139
'58.##.80.144':139
'58.##.119.55':139
'58.##.31.179':139
'58.##.97.117':139
'58.##.176.119':139
'58.##.107.183':139
'58.#7.9.52':139
'58.##.17.169':139
'58.##.166.38':139
'58.#7.7.17':139
'58.##.249.29':139
'58.##.65.216':139
'58.##.226.127':139
'58.##.186.226':139
'58.##.206.41':139
'58.##.109.221':139
'58.##.248.226':139
'58.##.20.206':139
'58.##.131.33':139
'58.##.57.213':139
'58.##.245.57':139
'58.##.171.244':139
'58.#7.30.43':139
'58.#7.7.118':139
'58.#7.78.75':139
'58.#7.2.219':445
'58.#7.210.2':445
'58.##.118.60':445
'58.#7.8.213':139
'58.##.119.80':445
'58.#7.2.183':139
'58.##.168.97':139
'58.#7.35.79':139
'58.##.240.104':139
'58.##.27.210':139
'58.##.235.85':139
'58.##.238.168':139
'58.##.221.233':139
'58.##.181.106':139
'58.##.116.111':139
'58.##.230.130':139
'58.##.197.189':139
'58.##.218.11':445
'58.##.218.223':445
'58.#7.12.1':445
'58.##.95.253':445
'58.##.104.196':445
'58.#7.57.99':445
'58.##.193.38':445
'58.##.46.246':445
'58.#7.38.57':445
'58.##.24.152':445
'58.##.76.222':445
'58.##.207.174':445
'58.#7.52.68':445
'58.##.174.103':445
'58.#7.85.31':445
'58.#7.43.45':445
'58.#7.99.0':445
'58.##.105.23':445
'58.##.202.95':445
'58.#7.20.22':445
'58.#7.5.167':445
'58.#7.1.251':445
'58.#7.80.77':445
'58.##.118.60':139
'58.#7.2.219':139
'58.##.119.80':139
'58.##.100.113':445
'58.##.67.242':445
'58.#7.210.2':139
'58.##.101.167':139
'58.##.10.171':139
'58.##.247.37':139
'58.#7.67.90':139
'58.##.148.59':139
'58.##.78.195':445
'58.##.21.145':445
'58.#7.0.244':445
'58.##.25.190':445
'58.##.68.247':445
'58.#7.23.61':445
'58.#7.9.65':445
'58.##.124.207':445
'58.##.188.90':445
'58.##.47.106':445
'58.#7.91.47':445
'58.#7.67.90':445
'58.##.69.244':139
'58.##.20.125':139
'58.##.242.69':139
'58.##.107.83':139
'58.##.90.100':139
'58.##.42.242':139
'58.##.18.201':139
'58.#7.67.24':139
'58.##.200.253':139
'58.##.131.140':139
'58.##.253.161':139
'58.##.130.145':139
'58.##.191.229':139
'58.##.174.51':139
'58.##.11.130':139
'58.##.245.86':139
'58.##.171.23':139
'58.##.124.221':139
'58.##.253.69':139
'58.##.79.138':139
'58.#7.40.23':139
'58.##.96.162':139
'58.##.84.147':139
'58.#7.92.0':139
'58.##.128.114':139
'58.##.161.185':139
'58.##.80.147':139
'58.#7.3.64':139
'58.##.36.106':139
'58.##.68.107':139
'58.##.62.181':139
'58.##.55.124':139
'58.##.213.98':139
'58.##.114.213':139
'58.##.241.116':139
'58.##.126.241':139
'58.#7.8.196':139
'58.##.158.77':139
'58.##.29.108':139
'58.##.134.126':139
'58.##.105.90':139
'58.##.217.51':139
'58.##.153.30':139
'58.##.103.135':139
'58.##.252.103':139
'58.#7.8.213':445
'58.##.186.226':445
'58.##.206.41':445
'58.##.109.221':445
'58.##.248.226':445
'58.##.20.206':445
'58.#7.7.206':445
'58.##.44.237':445
'58.##.119.55':445
'58.##.233.179':445
'58.##.80.144':445
'58.##.26.126':445
'58.##.10.171':445
'58.##.197.189':445
'58.##.101.167':445
'58.##.148.59':445
'58.##.247.37':445
'58.##.249.29':445
'58.##.166.38':445
'58.##.226.127':445
'58.##.17.169':445
'58.##.65.216':445
'58.#7.7.17':445
'58.##.107.183':445
'58.##.238.168':445
'58.##.221.233':445
'58.##.181.106':445
'58.##.116.111':445
'58.##.230.130':445
'58.#7.30.43':445
'58.##.245.57':445
'58.#7.78.75':445
'58.##.57.213':445
'58.#7.7.118':445
'58.##.171.244':445
'58.##.97.117':445
'58.##.131.33':445
'58.##.31.179':445
'58.#7.9.52':445
'58.##.176.119':445
'58.##.240.104':445
'58.##.168.97':445
'58.##.235.85':445
'58.#7.2.183':445
'58.##.27.210':445
'58.#7.35.79':445
'58.##.72.117':445
'58.##.19.127':445
'58.##.101.65':445
'58.##.33.178':445
'58.##.239.234':445
'58.#7.191.6':445
'58.#7.9.193':445
'58.##.136.225':445
'58.##.37.196':445
'58.#7.1.117':445
'58.##.91.205':445
'58.##.241.226':445
'58.##.56.129':139
'58.##.249.192':139
'58.##.166.48':139
'58.##.228.54':139
'58.#7.121.0':139
'58.##.241.148':445
'58.##.217.13':445
'58.##.250.227':445
'58.##.135.68':445
'58.##.177.35':445
'58.##.98.175':445
'58.#7.14.84':445
'58.##.145.71':445
'58.##.76.136':445
'58.##.107.20':445
'58.##.24.195':445
'58.#7.42.82':445
'58.#7.17.83':445
'58.##.143.68':445
'58.##.195.45':445
'58.##.71.107':445
'58.##.189.57':445
'58.#7.27.53':445
'58.#7.4.83':445
'58.##.18.159':445
'58.##.82.136':445
'58.##.74.172':445
'58.##.85.114':445
'58.#7.62.4':445
'58.#7.56.41':445
'58.#7.40.26':445
'58.##.131.239':445
'58.##.240.80':445
'58.##.124.218':445
'58.##.143.145':139
'58.#7.1.117':139
'58.##.136.225':139
'58.##.241.226':139
'58.#7.9.193':139
'58.##.91.205':139
'58.##.37.196':139
'58.##.82.136':139
'58.#7.4.83':139
'58.#7.14.84':139
'58.##.74.172':139
'58.##.85.114':139
'58.##.135.68':139
'58.##.98.175':139
'58.##.250.227':139
'58.##.241.148':139
'58.##.177.35':139
'58.##.217.13':139
'58.##.19.127':139
'58.##.101.65':139
'58.##.33.178':139
'58.#7.191.6':139
'58.##.239.234':139
'58.#7.62.4':139
'58.##.71.107':139
'58.##.143.68':139
'58.#7.27.53':139
'58.#7.17.83':139
'58.##.189.57':139
'58.##.195.45':139
'58.##.131.64':139
'58.##.162.187':139
'58.#7.77.20':139
'58.##.186.83':139
'58.#7.50.92':139
'58.##.131.239':139
'58.#7.56.41':139
'58.##.124.218':139
'58.##.18.159':139
'58.##.240.80':139
'58.#7.40.26':139
'58.##.145.71':139
'58.##.76.136':139
'58.##.107.20':139
'58.##.24.195':139
'58.#7.42.82':139
'58.##.186.83':445
'58.#7.38.57':139
'58.##.193.38':139
'58.##.76.222':139
'58.#7.57.99':139
'58.##.24.152':139
'58.##.46.246':139
'58.#7.0.244':139
'58.##.78.195':139
'58.##.68.247':139
'58.#7.80.77':139
'58.##.25.190':139
'58.#7.20.22':139
'58.##.105.23':139
'58.#7.1.251':139
'58.#7.99.0':139
'58.#7.5.167':139
'58.##.202.95':139
'58.##.218.11':139
'58.##.218.223':139
'58.#7.12.1':139
'58.##.95.253':139
'58.##.104.196':139
'58.##.21.145':139
'58.##.129.195':445
'58.##.112.115':445
'58.#7.11.96':445
'58.#7.58.39':445
'58.##.88.130':445
'58.##.40.237':445
'58.##.213.138':445
'58.##.97.213':445
'58.##.62.232':445
'58.##.87.220':445
'58.##.66.141':445
'58.##.188.90':139
'58.#7.9.65':139
'58.#7.91.47':139
'58.#7.23.61':139
'58.##.47.106':139
'58.##.124.207':139
'58.##.188.225':445
'58.#7.90.58':445
'58.##.125.36':445
'58.##.100.113':139
'58.##.67.242':139
'58.#7.52.68':139
'58.##.136.225':9988
'58.##.37.196':9988
'58.#7.1.117':9988
'58.##.241.148':9988
'58.##.135.68':9988
'58.##.85.114':9988
'58.#7.42.82':9988
'58.##.145.71':9988
'58.##.24.195':9988
'58.##.18.159':9988
'58.#7.56.41':9988
'58.##.162.187':445
'58.##.143.145':445
'58.##.131.64':445
'58.#7.50.92':445
'58.#7.77.20':445
'58.##.228.54':445
'58.##.249.192':445
'58.##.19.127':9988
'58.##.56.129':445
'58.#7.121.0':445
'58.##.166.48':445
'58.#7.17.83':9988
'58.##.62.232':139
'58.##.213.138':139
'58.##.66.141':139
'58.##.40.237':139
'58.##.87.220':139
'58.##.97.213':139
'58.##.174.103':139
'58.##.207.174':139
'58.#7.43.45':139
'58.##.72.117':139
'58.#7.85.31':139
'58.##.125.36':139
'58.##.188.225':139
'58.#7.121.0':9988
'58.##.189.57':9988
'58.##.228.54':9988
'58.#7.90.58':139
'58.##.129.195':139
'58.##.112.115':139
'58.#7.11.96':139
'58.#7.58.39':139
'58.##.88.130':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней