Trojan.Starman.4902

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1136 -dm 7 7 %TEMP%\WER1e30.dir00\svchost.exe.mdmp 16325836412029620

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##4.73.248':139
'61.##4.42.152':139
'61.##4.0.138':139
'61.##4.125.248':139
'61.##4.228.162':139
'61.##4.154.21':139
'61.##4.111.59':139
'61.##4.96.77':139
'61.##4.62.167':139
'61.##4.14.67':139
'61.#24.75.8':139
'61.##4.174.51':139
'61.##4.13.124':445
'61.##4.130.8':445
'61.##4.30.66':445
'61.##4.241.91':445
'61.#24.7.80':445
'61.##4.93.81':445
'61.##4.2.105':139
'61.##4.60.214':139
'61.##4.132.124':445
'61.#24.56.2':445
'61.##4.200.211':445
'61.##4.82.214':139
'61.##4.80.158':139
'61.##4.242.42':139
'61.##4.249.66':139
'61.##4.66.242':139
'61.##4.161.127':139
'61.##4.97.105':139
'61.##4.154.234':139
'61.##4.132.62':139
'61.##4.133.232':139
'61.##4.250.20':139
'61.##4.67.131':139
'61.##4.98.140':139
'61.##4.46.145':139
'61.##4.108.98':139
'61.##4.125.154':139
'61.##4.100.116':139
'61.##4.59.165':139
'61.##4.212.55':139
'61.##4.55.126':139
'61.#24.4.80':139
'61.##4.114.7':139
'61.##4.48.175':139
'61.##4.50.94':445
'61.##4.73.248':445
'61.##4.42.152':445
'61.##4.0.138':445
'61.##4.125.248':445
'61.##4.228.162':445
'61.##4.154.21':445
'61.##4.111.59':445
'61.##4.96.77':445
'61.##4.62.167':445
'61.##4.14.67':445
'61.#24.75.8':445
'61.##4.174.51':445
'61.##4.166.217':445
'61.##4.191.138':445
'61.##4.175.166':445
'61.##4.21.12':139
'61.##4.145.175':445
'61.##4.145.175':139
'61.##4.2.105':445
'61.##4.60.214':445
'61.##4.191.138':139
'61.##4.175.166':139
'61.##4.166.217':139
'61.##4.82.214':445
'61.##4.80.158':445
'61.##4.242.42':445
'61.##4.249.66':445
'61.##4.66.242':445
'61.##4.161.127':445
'61.##4.97.105':445
'61.##4.154.234':445
'61.##4.132.62':445
'61.##4.133.232':445
'61.##4.250.20':445
'61.##4.67.131':445
'61.##4.98.140':445
'61.##4.46.145':445
'61.##4.108.98':445
'61.##4.125.154':445
'61.##4.100.116':445
'61.##4.59.165':445
'61.##4.212.55':445
'61.##4.55.126':445
'61.#24.4.80':445
'61.##4.114.7':445
'61.##4.48.175':445
'61.##4.206.141':445
'61.##4.141.202':445
'61.##4.228.138':445
'61.##4.247.86':445
'61.##4.62.112':445
'61.##4.2.136':445
'61.##4.168.201':139
'61.##4.201.219':139
'61.##4.218.48':139
'61.##4.25.153':139
'61.##4.212.70':139
'61.##4.157.231':445
'61.##4.249.50':445
'61.##4.247.179':445
'61.##4.170.165':445
'61.##4.11.77':445
'61.##4.179.64':445
'61.##4.180.212':445
'61.##4.190.202':445
'61.##4.11.100':445
'61.##4.137.25':445
'61.##4.185.23':445
'61.##4.103.136':445
'61.##4.70.107':139
'61.##4.87.147':139
'61.##4.58.70':139
'61.##4.70.64':139
'61.##4.155.243':139
'61.##4.112.153':139
'61.##4.81.101':139
'61.##4.86.111':139
'61.#24.31.8':139
'61.##4.47.17':139
'61.##4.122.65':139
'61.##4.25.28':139
'61.##4.41.45':139
'61.##4.61.95':139
'61.##4.83.130':139
'61.##4.46.167':139
'61.##4.105.77':139
'61.##4.46.214':139
'61.##4.49.159':139
'61.##4.56.151':139
'61.##4.144.134':139
'61.##4.217.76':139
'61.##4.77.144':139
'61.##4.53.100':445
'61.##4.52.166':139
'61.##4.134.98':139
'61.##4.37.133':139
'61.##4.134.98':445
'61.##4.81.224':445
'61.##4.236.92':445
'61.##4.218.48':445
'61.##4.168.201':445
'61.##4.212.70':445
'61.##4.81.224':139
'61.##4.25.153':445
'61.##4.52.166':445
'61.##4.30.66':139
'61.##4.13.124':139
'61.#24.7.80':139
'61.##4.50.94':139
'61.##4.241.91':139
'61.##4.130.8':139
'61.##4.132.124':139
'61.##4.37.133':445
'61.##4.200.211':139
'61.##4.93.81':139
'61.#24.56.2':139
'61.##4.70.107':445
'61.##4.87.147':445
'61.##4.58.70':445
'61.##4.70.64':445
'61.##4.155.243':445
'61.##4.112.153':445
'61.##4.81.101':445
'61.##4.86.111':445
'61.#24.31.8':445
'61.##4.47.17':445
'61.##4.122.65':445
'61.##4.25.28':445
'61.##4.41.45':445
'61.##4.61.95':445
'61.##4.83.130':445
'61.##4.46.167':445
'61.##4.105.77':445
'61.##4.46.214':445
'61.##4.49.159':445
'61.##4.56.151':445
'61.##4.144.134':445
'61.##4.217.76':445
'61.##4.77.144':445
'61.##4.34.56':139
'61.##4.157.27':139
'61.##4.195.245':139
'61.##4.45.27':139
'61.##4.16.251':139
'61.##4.117.218':139
'61.##4.80.219':139
'61.##4.30.104':139
'61.##4.51.105':139
'61.##4.240.29':139
'61.##4.91.79':139
'61.##4.123.114':139
'61.##4.185.199':139
'61.##4.243.118':139
'61.##4.15.186':139
'61.##4.56.13':139
'61.##4.223.165':139
'61.##4.242.136':139
'61.##4.231.89':139
'61.##4.209.104':139
'61.##4.95.44':139
'61.##4.107.39':139
'61.##4.220.4':139
'61.##4.72.79':445
'61.##4.36.27':139
'61.##4.153.223':445
'61.##4.139.64':139
'61.##4.223.100':445
'61.##4.192.252':139
'61.##4.223.100':139
'61.##4.122.25':139
'61.##4.153.223':139
'61.##4.122.25':445
'61.##4.72.79':139
'61.##4.13.139':139
'61.#24.66.5':139
'61.##4.124.189':139
'61.##4.127.122':139
'61.##4.149.170':139
'61.##4.246.185':139
'61.##4.131.104':139
'61.##4.46.27':139
'61.##4.59.113':139
'61.##4.234.14':139
'61.##4.58.168':139
'61.##4.168.241':139
'61.##4.126.181':139
'61.##4.34.56':445
'61.##4.157.27':445
'61.##4.195.245':445
'61.##4.45.27':445
'61.##4.16.251':445
'61.##4.117.218':445
'61.##4.80.219':445
'61.##4.30.104':445
'61.##4.51.105':445
'61.##4.240.29':445
'61.##4.91.79':445
'61.##4.123.114':445
'61.##4.185.199':445
'61.##4.243.118':445
'61.##4.15.186':445
'61.##4.56.13':445
'61.##4.223.165':445
'61.##4.242.136':445
'61.##4.231.89':445
'61.##4.209.104':445
'61.##4.95.44':445
'61.##4.220.4':445
'61.##4.107.39':445
'61.##4.168.40':139
'61.##4.179.173':139
'61.##4.192.252':445
'61.##4.139.64':445
'61.##4.36.27':445
'61.##4.214.39':139
'61.##4.96.33':139
'61.##4.247.120':139
'61.#24.56.5':139
'61.##4.123.17':139
'61.##4.217.89':139
'61.##4.13.139':445
'61.#24.66.5':445
'61.##4.124.189':445
'61.##4.127.122':445
'61.##4.149.170':445
'61.##4.246.185':445
'61.##4.131.104':445
'61.##4.46.27':445
'61.##4.59.113':445
'61.##4.234.14':445
'61.##4.58.168':445
'61.##4.168.241':445
'61.##4.182.158':139
'61.##4.158.217':139
'61.##4.23.11':139
'61.##4.23.89':139
'61.##4.127.218':139
'61.##4.217.101':139
'61.##4.182.113':139
'61.##4.212.17':139
'61.##4.47.244':139
'61.##4.63.136':139
'61.##4.54.210':139
'61.##4.191.169':139
'61.##4.70.148':139
'61.##4.134.61':139
'61.##4.72.75':139
'61.##4.97.90':139
'61.##4.115.52':139
'61.##4.43.59':139
'61.##4.236.100':139
'61.##4.157.191':139
'61.##4.224.254':139
'61.##4.41.181':139
'61.#24.37.6':139
'61.##4.30.154':139
'61.##4.31.167':139
'61.##4.214.150':139
'61.##4.108.70':139
'61.##4.140.154':139
'61.##4.118.224':139
'61.##4.162.42':139
'61.##4.42.79':139
'61.##4.174.25':139
'61.##4.10.226':139
'61.##4.225.208':139
'61.##4.101.188':139
'61.##4.1.227':139
'61.##4.50.222':139
'61.##4.142.130':139
'61.##4.18.21':139
'61.##4.124.166':139
'61.##4.240.14':139
'61.##4.67.112':139
'61.##4.104.221':139
'61.##4.71.124':139
'61.##4.28.52':139
'61.##4.254.189':139
'61.##4.21.12':445
'61.##4.182.158':445
'61.##4.158.217':445
'61.##4.23.11':445
'61.##4.23.89':445
'61.##4.127.218':445
'61.##4.217.101':445
'61.##4.182.113':445
'61.##4.212.17':445
'61.##4.47.244':445
'61.##4.63.136':445
'61.##4.54.210':445
'61.##4.191.169':445
'61.##4.70.148':445
'61.##4.134.61':445
'61.##4.72.75':445
'61.##4.97.90':445
'61.##4.115.52':445
'61.##4.43.59':445
'61.##4.236.100':445
'61.##4.157.191':445
'61.##4.224.254':445
'61.##4.41.181':445
'61.#24.37.6':445
'61.##4.30.154':445
'61.##4.31.167':445
'61.##4.214.150':445
'61.##4.108.70':445
'61.##4.140.154':445
'61.##4.118.224':445
'61.##4.162.42':445
'61.##4.42.79':445
'61.##4.174.25':445
'61.##4.10.226':445
'61.##4.225.208':445
'61.##4.101.188':445
'61.##4.1.227':445
'61.##4.50.222':445
'61.##4.142.130':445
'61.##4.18.21':445
'61.##4.124.166':445
'61.##4.240.14':445
'61.##4.67.112':445
'61.##4.104.221':445
'61.##4.71.124':445
'61.##4.28.52':445
'61.##4.254.189':445
'61.##4.53.100':139
'61.##4.182.232':9988
'61.##4.175.28':9988
'61.##4.86.55':9988
'61.##4.127.106':9988
'61.##4.67.210':9988
'61.##4.192.112':9988
'61.##4.252.130':9988
'61.##4.70.15':9988
'61.##4.125.224':9988
'61.##4.16.109':9988
'61.##4.252.242':9988
'61.##4.79.116':9988
'61.##4.93.93':9988
'61.##4.59.12':9988
'61.##4.87.20':9988
'61.##4.34.31':9988
'61.##4.188.178':9988
'61.##4.72.114':9988
'61.##4.250.183':9988
'61.##4.141.141':9988
'61.##4.203.190':9988
'61.##4.60.172':9988
'61.##4.67.138':9988
'61.##4.38.79':445
'61.##4.16.109':445
'61.##4.29.104':445
'61.##4.86.98':9988
'61.##4.96.221':9988
'61.##4.252.242':445
'61.##4.151.40':445
'61.##4.125.224':445
'61.##4.70.15':445
'61.##4.184.95':445
'61.##4.239.184':445
'61.##4.113.194':9988
'61.##4.18.28':9988
'61.##4.153.69':9988
'61.##4.82.207':9988
'61.##4.188.186':9988
'61.##4.113.99':9988
'61.##4.220.41':9988
'61.##4.74.85':9988
'61.##4.131.192':9988
'61.##4.124.11':9988
'61.##4.50.74':9988
'61.##4.121.140':9988
'61.##4.243.158':9988
'61.##4.219.179':139
'61.##4.66.15':139
'61.##4.11.242':139
'61.##4.17.36':139
'61.##4.100.239':139
'61.##4.13.186':139
'61.##4.134.148':139
'61.##4.136.88':139
'61.##4.58.150':139
'61.##4.213.105':139
'61.##4.42.219':139
'61.##4.28.199':139
'61.##4.248.206':139
'61.#24.31.0':139
'61.##4.138.253':139
'61.##4.169.107':139
'61.##4.181.192':139
'61.##4.252.186':139
'61.##4.182.124':139
'61.##4.45.176':139
'61.##4.202.182':139
'61.##4.171.45':139
'61.#24.51.9':139
'61.##4.50.35':139
'61.##4.117.105':139
'61.##4.210.102':139
'61.##4.137.126':139
'61.##4.18.242':139
'61.##4.103.92':139
'61.##4.184.95':9988
'61.##4.38.79':9988
'61.##4.151.40':9988
'61.##4.189.212':139
'61.##4.239.184':9988
'61.##4.87.170':139
'61.##4.92.83':139
'61.##4.70.252':139
'61.##4.18.123':139
'61.##4.18.99':139
'61.##4.71.62':139
'61.##4.138.239':139
'61.##4.212.121':139
'61.##4.121.101':139
'61.##4.147.212':139
'61.##4.22.158':139
'61.##4.51.247':139
'61.##4.184.205':139
'61.##4.203.190':139
'61.##4.18.28':139
'61.##4.87.20':139
'61.##4.34.31':139
'61.##4.153.69':139
'61.##4.250.183':139
'61.##4.220.41':139
'61.##4.141.141':139
'61.##4.159.127':139
'61.##4.72.114':139
'61.##4.243.158':139
'61.##4.188.186':139
'61.##4.70.15':139
'61.##4.151.40':139
'61.##4.125.224':139
'61.##4.239.184':139
'61.##4.113.99':139
'61.##4.59.12':139
'61.##4.82.207':139
'61.##4.93.93':139
'61.##4.188.178':139
'61.##4.252.130':139
'61.#24.1.58':139
'61.##4.192.112':139
'61.##4.131.192':139
'61.##4.86.55':139
'61.##4.74.85':139
'61.##4.175.28':139
'61.##4.86.98':139
'61.##4.96.221':139
'61.##4.182.232':139
'61.##4.113.194':139
'61.##4.34.46':139
'61.##4.105.68':139
'61.##4.131.188':139
'61.##4.60.172':139
'61.##4.138.204':139
'61.##4.127.106':139
'61.##4.67.138':139
'61.##4.79.116':139
'61.##4.50.74':139
'61.##4.124.11':139
'61.##4.108.121':139
'61.##4.67.210':139
'61.##4.121.140':139
'61.##4.252.242':139
'61.##4.153.69':445
'61.##4.250.183':445
'61.##4.203.190':445
'61.##4.159.127':445
'61.##4.72.114':445
'61.##4.127.106':445
'61.##4.67.138':445
'61.##4.138.204':445
'61.##4.131.188':445
'61.##4.141.141':445
'61.##4.220.41':445
'61.##4.18.28':445
'61.##4.252.130':445
'61.##4.188.178':445
'61.##4.113.99':445
'61.##4.188.186':445
'61.##4.34.31':445
'61.##4.243.158':445
'61.##4.93.93':445
'61.##4.184.205':445
'61.##4.87.20':445
'61.##4.59.12':445
'61.##4.82.207':445
'61.##4.86.98':445
'61.##4.34.46':445
'61.##4.175.28':445
'61.##4.113.194':445
'61.##4.192.112':445
'61.##4.182.232':445
'61.##4.38.79':139
'61.##4.184.95':139
'61.##4.16.109':139
'61.##4.96.221':445
'61.##4.29.104':139
'61.#24.1.58':445
'61.##4.108.121':445
'61.##4.121.140':445
'61.##4.60.172':445
'61.##4.67.210':445
'61.##4.79.116':445
'61.##4.50.74':445
'61.##4.131.192':445
'61.##4.74.85':445
'61.##4.86.55':445
'61.##4.105.68':445
'61.##4.124.11':445
'61.##4.147.121':445
'61.##4.54.158':445
'61.##4.248.228':445
'61.##4.91.235':445
'61.##4.27.43':445
'61.##4.56.129':445
'61.##4.58.159':445
'61.##4.98.136':445
'61.##4.117.111':445
'61.##4.11.85':445
'61.##4.124.244':445
'61.##4.22.197':445
'61.##4.116.189':445
'61.##4.98.25':445
'61.##4.28.116':445
'61.##4.42.107':445
'61.##4.32.50':445
'61.##4.253.241':445
'61.##4.252.29':445
'61.##4.87.217':445
'61.##4.53.252':445
'61.##4.250.55':445
'61.##4.55.185':445
'61.##4.67.103':139
'61.##4.243.128':139
'61.##4.22.212':139
'61.##4.253.233':139
'61.##4.114.214':139
'61.##4.42.107':139
'61.##4.98.25':139
'61.##4.253.241':139
'61.##4.116.189':139
'61.##4.32.50':139
'61.##4.28.116':139
'61.##4.153.10':139
'61.##4.226.170':445
'61.##4.29.48':139
'61.##4.92.183':445
'61.##4.189.87':445
'61.##4.34.54':445
'61.##4.174.81':139
'61.##4.7.220':139
'61.##4.63.113':139
'61.##4.39.53':139
'61.##4.81.103':139
'61.##4.103.113':139
'61.##4.243.128':445
'61.##4.206.141':139
'61.##4.141.202':139
'61.##4.228.138':139
'61.##4.247.86':139
'61.##4.62.112':139
'61.##4.2.136':139
'61.##4.147.204':445
'61.##4.99.204':445
'61.##4.186.64':445
'61.##4.205.28':445
'61.##4.13.155':445
'61.##4.157.231':139
'61.##4.249.50':139
'61.##4.247.179':139
'61.##4.170.165':139
'61.##4.11.77':139
'61.##4.179.64':139
'61.##4.185.23':139
'61.##4.190.202':139
'61.##4.11.100':139
'61.##4.137.25':139
'61.##4.180.212':139
'61.##4.103.136':139
'61.##4.39.53':445
'61.##4.7.220':445
'61.##4.103.113':445
'61.##4.174.81':445
'61.##4.81.103':445
'61.##4.63.113':445
'61.##4.22.212':445
'61.##4.67.103':445
'61.##4.114.214':445
'61.##4.153.10':445
'61.##4.253.233':445
'61.##4.29.48':445
'61.##4.147.204':139
'61.##4.99.204':139
'61.##4.186.64':139
'61.##4.205.28':139
'61.##4.13.155':139
'61.##4.106.4':139
'61.##4.30.220':139
'61.##4.76.131':139
'61.##4.121.242':139
'61.##4.214.13':139
'61.##4.45.237':139
'61.##4.11.242':445
'61.##4.219.179':445
'61.##4.100.239':445
'61.##4.28.199':445
'61.##4.17.36':445
'61.##4.66.15':445
'61.##4.18.99':445
'61.##4.71.62':445
'61.##4.134.148':445
'61.##4.13.186':445
'61.##4.213.105':445
'61.##4.45.176':445
'61.##4.181.192':445
'61.##4.138.253':445
'61.##4.169.107':445
'61.##4.18.235':445
'61.##4.24.166':445
'61.##4.248.206':445
'61.#24.51.9':445
'61.##4.202.182':445
'61.##4.171.45':445
'61.#24.31.0':445
'61.##4.252.186':445
'61.##4.165.163':139
'61.##4.203.69':139
'61.##4.102.199':139
'61.##4.103.92':445
'61.##4.189.212':445
'61.##4.69.138':139
'61.##4.234.245':139
'61.##4.24.166':139
'61.##4.18.235':139
'61.##4.17.43':139
'61.##4.211.94':139
'61.##4.117.105':445
'61.##4.138.239':445
'61.##4.22.158':445
'61.##4.70.252':445
'61.##4.18.123':445
'61.##4.92.83':445
'61.##4.51.247':445
'61.##4.18.242':445
'61.##4.50.35':445
'61.##4.137.126':445
'61.##4.121.101':445
'61.##4.87.170':445
'61.##4.211.94':445
'61.##4.58.159':139
'61.##4.98.136':139
'61.##4.117.111':139
'61.##4.11.85':139
'61.##4.124.244':139
'61.##4.189.87':139
'61.#24.10.8':445
'61.##4.244.250':445
'61.##4.226.170':139
'61.##4.34.54':139
'61.##4.92.183':139
'61.##4.56.129':139
'61.##4.252.29':139
'61.##4.87.217':139
'61.##4.53.252':139
'61.##4.250.55':139
'61.##4.55.185':139
'61.##4.91.235':139
'61.##4.147.121':139
'61.##4.54.158':139
'61.##4.248.228':139
'61.##4.22.197':139
'61.##4.27.43':139
'61.##4.245.99':139
'61.##4.219.185':139
'61.##4.220.245':139
'61.##4.177.185':139
'61.##4.204.220':139
'61.##4.224.210':139
'61.##4.203.69':445
'61.##4.69.138':445
'61.##4.165.163':445
'61.##4.52.105':139
'61.##4.56.43':139
'61.##4.116.168':139
'61.##4.220.245':445
'61.##4.245.99':445
'61.##4.204.220':445
'61.##4.116.168':445
'61.##4.177.185':445
'61.##4.219.185':445
'61.#24.10.8':139
'61.##4.244.250':139
'61.##4.56.43':445
'61.##4.224.210':445
'61.##4.52.105':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней