Trojan.Starman.4946

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1116 -dm 7 7 %TEMP%\WERf16f.dir00\svchost.exe.mdmp 16325836412032188

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERf16f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##1.139.22':445
'72.##1.251.127':445
'72.##1.62.159':445
'72.##1.29.14':139
'72.##1.33.122':445
'72.##1.175.245':445
'72.##1.142.104':445
'72.##1.148.210':445
'72.##1.205.148':445
'72.##1.227.196':445
'72.##1.77.124':445
'72.##1.240.76':445
'72.##1.60.142':139
'72.##1.201.122':139
'72.##1.10.201':139
'72.##1.157.142':139
'72.##1.210.157':139
'72.##1.160.53':139
'72.##1.234.47':139
'72.##1.231.181':139
'72.##1.107.47':139
'72.##1.72.11':139
'72.#11.74.3':139
'72.##1.47.13':139
'72.##1.160.53':445
'72.##1.60.142':445
'72.##1.201.122':445
'72.##1.104.135':445
'72.##1.157.142':445
'72.##1.210.157':445
'72.##1.47.13':445
'72.##1.234.47':445
'72.##1.231.181':445
'72.##1.10.201':445
'72.##1.72.11':445
'72.#11.74.3':445
'72.##1.71.201':445
'72.##1.61.227':445
'72.##1.10.104':445
'72.##1.26.51':445
'72.##1.119.124':445
'72.##1.168.201':445
'72.##1.131.139':445
'72.##1.238.123':445
'72.##1.12.187':445
'72.##1.216.203':445
'72.##1.243.150':445
'72.##1.180.243':445
'72.##1.104.135':139
'72.##1.3.125':445
'72.##1.157.94':445
'72.##1.234.151':445
'72.##1.20.204':445
'72.##1.127.128':445
'72.##1.73.112':445
'72.##1.204.105':445
'72.##1.33.81':445
'72.#11.8.84':445
'72.##1.147.134':445
'72.##1.93.234':445
'72.##1.105.242':445
'72.##1.234.151':139
'72.##1.147.134':139
'72.##1.93.234':139
'72.##1.73.112':139
'72.##1.3.125':139
'72.##1.157.94':139
'72.#11.8.84':139
'72.##1.4.164':139
'72.##1.203.232':445
'72.##1.105.242':139
'72.##1.204.105':139
'72.##1.33.81':139
'72.##1.71.201':139
'72.##1.61.227':139
'72.##1.10.104':139
'72.##1.26.51':139
'72.##1.119.124':139
'72.##1.168.201':139
'72.##1.131.139':139
'72.##1.238.123':139
'72.##1.12.187':139
'72.##1.216.203':139
'72.##1.243.150':139
'72.##1.180.243':139
'72.##1.139.22':139
'72.##1.251.127':139
'72.##1.62.159':139
'72.##1.4.164':445
'72.##1.33.122':139
'72.##1.175.245':139
'72.##1.142.104':139
'72.##1.148.210':139
'72.##1.205.148':139
'72.##1.227.196':139
'72.##1.77.124':139
'72.##1.240.76':139
'72.##1.69.52':139
'72.##1.161.209':139
'72.##1.31.159':139
'72.##1.37.32':139
'72.##1.10.84':139
'72.##1.170.213':139
'72.##1.195.151':445
'72.##1.251.195':445
'72.##1.196.251':445
'72.##1.44.27':445
'72.#11.61.6':445
'72.##1.12.35':445
'72.##1.103.112':139
'72.##1.9.106':139
'72.##1.233.9':139
'72.##1.120.179':139
'72.##1.22.120':139
'72.##1.14.36':139
'72.##1.13.35':139
'72.##1.145.173':139
'72.##1.31.146':139
'72.##1.90.232':139
'72.##1.108.240':139
'72.##1.70.18':139
'72.##1.14.36':445
'72.##1.103.112':445
'72.##1.9.106':445
'72.##1.179.25':445
'72.##1.120.179':445
'72.##1.22.120':445
'72.##1.70.18':445
'72.##1.13.35':445
'72.##1.145.173':445
'72.##1.233.9':445
'72.##1.90.232':445
'72.##1.108.240':445
'72.##1.112.246':445
'72.##1.3.166':445
'72.#11.87.8':445
'72.##1.23.11':445
'72.##1.97.174':445
'72.##1.245.208':445
'72.##1.198.185':445
'72.##1.56.56':445
'72.##1.241.12':445
'72.##1.74.64':445
'72.##1.131.182':445
'72.##1.89.64':445
'72.##1.179.25':139
'72.##1.20.31':139
'72.#11.0.91':445
'72.##1.101.183':445
'72.##1.218.86':139
'72.##1.160.144':139
'72.#11.90.9':139
'72.##1.150.238':445
'72.##1.60.46':445
'72.##1.61.62':445
'72.##1.115.102':445
'72.##1.181.132':445
'72.##1.238.180':445
'72.##1.101.183':139
'72.##1.115.102':139
'72.##1.181.132':139
'72.##1.107.47':445
'72.##1.29.14':445
'72.#11.0.91':139
'72.##1.61.62':139
'72.##1.123.87':139
'72.##1.115.7':139
'72.##1.238.180':139
'72.##1.150.238':139
'72.##1.60.46':139
'72.##1.112.246':139
'72.##1.3.166':139
'72.#11.87.8':139
'72.##1.23.11':139
'72.##1.97.174':139
'72.##1.245.208':139
'72.##1.198.185':139
'72.##1.56.56':139
'72.##1.241.12':139
'72.##1.74.64':139
'72.##1.131.182':139
'72.##1.89.64':139
'72.##1.160.144':445
'72.#11.90.9':445
'72.##1.20.31':445
'72.##1.123.87':445
'72.##1.115.7':445
'72.##1.218.86':445
'72.##1.195.151':139
'72.##1.251.195':139
'72.##1.196.251':139
'72.##1.44.27':139
'72.#11.61.6':139
'72.##1.12.35':139
'72.##1.33.207':445
'72.##1.82.160':445
'72.##1.95.82':445
'72.##1.92.181':445
'72.##1.14.231':445
'72.##1.55.135':445
'72.##1.74.196':445
'72.##1.10.75':445
'72.##1.130.164':445
'72.##1.188.95':445
'72.##1.22.188':445
'72.##1.196.22':445
'72.##1.255.54':445
'72.##1.139.145':445
'72.##1.188.189':445
'72.##1.118.17':139
'72.#11.57.7':139
'72.##1.189.200':445
'72.##1.139.146':445
'72.##1.32.40':445
'72.##1.79.146':445
'72.##1.246.103':445
'72.##1.28.227':445
'72.##1.201.8':445
'72.##1.225.29':445
'72.##1.228.231':445
'72.##1.138.101':445
'72.##1.158.3':445
'72.##1.223.113':445
'72.##1.24.93':445
'72.##1.137.221':445
'72.##1.156.30':445
'72.##1.83.224':445
'72.##1.22.233':445
'72.##1.24.128':445
'72.##1.10.23':445
'72.##1.0.124':445
'72.##1.50.221':445
'72.##1.175.133':445
'72.##1.117.66':445
'72.#11.75.4':445
'72.##1.2.184':445
'72.##1.28.102':445
'72.##1.99.31':445
'72.##1.126.222':445
'72.##1.171.201':445
'72.##1.70.234':445
'72.##1.117.156':445
'72.##1.34.128':139
'72.##1.95.82':139
'72.##1.188.95':139
'72.##1.22.188':139
'72.##1.55.135':139
'72.##1.33.207':139
'72.##1.82.160':139
'72.##1.130.164':139
'72.##1.117.66':139
'72.#11.75.4':139
'72.##1.196.22':139
'72.##1.74.196':139
'72.##1.10.75':139
'72.##1.189.200':139
'72.##1.188.189':139
'72.##1.139.145':139
'72.##1.139.146':139
'72.##1.246.103':139
'72.##1.201.8':139
'72.##1.79.146':139
'72.##1.92.181':139
'72.##1.14.231':139
'72.##1.255.54':139
'72.##1.28.227':139
'72.##1.32.40':139
'72.##1.138.101':139
'72.##1.22.233':139
'72.##1.24.128':139
'72.##1.24.93':139
'72.##1.225.29':139
'72.##1.228.231':139
'72.##1.83.224':139
'72.##1.17.31':139
'72.##1.14.217':139
'72.##1.10.23':139
'72.##1.137.221':139
'72.##1.156.30':139
'72.##1.175.133':139
'72.##1.171.201':139
'72.##1.70.234':139
'72.##1.2.184':139
'72.##1.0.124':139
'72.##1.50.221':139
'72.##1.126.222':139
'72.##1.158.3':139
'72.##1.223.113':139
'72.##1.117.156':139
'72.##1.28.102':139
'72.##1.99.31':139
'72.##1.236.112':445
'72.##1.96.101':445
'72.##1.79.17':445
'72.##1.130.192':445
'72.##1.55.92':445
'72.##1.99.147':445
'72.##1.189.237':445
'72.##1.19.187':445
'72.##1.65.172':445
'72.##1.64.19':445
'72.##1.133.130':445
'72.##1.193.100':445
'72.##1.16.166':139
'72.##1.57.95':139
'72.##1.125.133':139
'72.##1.251.73':139
'72.##1.221.251':139
'72.##1.165.222':139
'72.##1.169.125':445
'72.##1.134.167':445
'72.##1.100.134':445
'72.##1.104.65':139
'72.##1.232.92':139
'72.##1.240.100':445
'72.##1.165.222':445
'72.##1.16.166':445
'72.##1.57.95':445
'72.##1.73.134':445
'72.##1.251.73':445
'72.##1.221.251':445
'72.##1.203.232':139
'72.##1.20.204':139
'72.##1.127.128':139
'72.##1.125.133':445
'72.##1.104.65':445
'72.##1.232.92':445
'72.##1.40.242':445
'72.##1.147.121':445
'72.##1.133.147':445
'72.##1.97.249':445
'72.##1.2.110':445
'72.##1.55.196':445
'72.##1.7.160':445
'72.##1.179.154':445
'72.##1.30.50':445
'72.##1.168.133':445
'72.##1.248.168':445
'72.##1.31.148':445
'72.##1.73.134':139
'72.##1.223.113':9988
'72.##1.24.93':9988
'72.##1.228.231':9988
'72.##1.70.234':9988
'72.##1.117.156':9988
'72.##1.158.3':9988
'72.##1.169.125':139
'72.##1.134.167':139
'72.##1.100.134':139
'72.##1.24.128':9988
'72.##1.156.30':9988
'72.##1.240.100':139
'72.##1.118.17':445
'72.#11.57.7':445
'72.##1.92.181':9988
'72.##1.17.31':445
'72.##1.14.217':445
'72.##1.34.128':445
'72.##1.74.196':9988
'72.##1.2.184':9988
'72.##1.175.133':9988
'72.##1.33.207':9988
'72.##1.95.82':9988
'72.##1.188.95':9988
'72.##1.40.242':139
'72.##1.147.121':139
'72.##1.133.147':139
'72.##1.97.249':139
'72.##1.2.110':139
'72.##1.55.196':139
'72.##1.7.160':139
'72.##1.179.154':139
'72.##1.30.50':139
'72.##1.168.133':139
'72.##1.248.168':139
'72.##1.31.148':139
'72.##1.236.112':139
'72.##1.96.101':139
'72.##1.79.17':139
'72.##1.130.192':139
'72.##1.55.92':139
'72.##1.99.147':139
'72.##1.189.237':139
'72.##1.19.187':139
'72.##1.65.172':139
'72.##1.64.19':139
'72.##1.133.130':139
'72.##1.193.100':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней