Trojan.Starman.5431

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERfb82.dir00\svchost.exe.mdmp 16325836412031976

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERfb82.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'63.#6.25.48':445
'63.#6.1.71':445
'63.#6.220.1':445
'63.##.195.116':445
'63.##.42.148':445
'63.##.154.174':445
'63.##.128.151':445
'63.##.85.167':445
'63.##.45.206':445
'63.##.78.220':445
'63.#6.13.56':445
'63.##.31.147':445
'63.##.105.242':445
'63.#6.55.95':445
'63.##.103.30':445
'63.##.239.102':445
'63.##.107.116':445
'63.##.135.155':445
'63.#6.51.3':445
'63.##.159.173':445
'63.##.162.127':445
'63.##.236.161':445
'63.##.97.239':445
'63.##.134.20':445
'63.##.78.130':445
'63.##.123.23':139
'63.#6.51.14':139
'63.##.165.196':139
'63.#6.54.43':445
'63.##.83.125':445
'63.##.67.243':445
'63.##.54.197':139
'63.##.233.111':139
'63.##.123.23':445
'63.##.101.219':139
'63.##.14.113':139
'63.##.14.181':139
'63.##.236.123':445
'63.##.193.26':445
'63.##.233.152':445
'63.#6.0.203':445
'63.##.93.172':445
'63.##.166.93':445
'63.##.221.165':445
'63.##.169.254':445
'63.##.34.172':445
'63.#6.90.70':445
'63.##.243.221':445
'63.#6.75.35':445
'63.##.254.75':445
'63.##.159.232':445
'63.##.78.130':139
'63.##.159.173':139
'63.##.162.127':139
'63.##.239.102':139
'63.##.97.239':139
'63.##.134.20':139
'63.##.42.148':139
'63.##.154.174':139
'63.#6.25.48':139
'63.##.236.161':139
'63.##.105.242':139
'63.##.195.116':139
'63.##.103.30':139
'63.##.114.46':445
'63.#6.143.8':445
'63.##.16.143':445
'63.#6.44.43':445
'63.##.158.25':445
'63.##.28.100':445
'63.##.135.155':139
'63.#6.51.3':139
'63.#6.55.95':139
'63.##.235.92':139
'63.##.159.232':139
'63.##.107.116':139
'63.##.254.75':139
'63.##.169.254':139
'63.##.34.172':139
'63.#6.0.203':139
'63.##.243.221':139
'63.#6.75.35':139
'63.##.83.125':139
'63.##.67.243':139
'63.##.235.92':445
'63.#6.90.70':139
'63.##.236.123':139
'63.#6.54.43':139
'63.##.233.152':139
'63.#6.13.56':139
'63.##.31.147':139
'63.##.128.151':139
'63.#6.1.71':139
'63.#6.220.1':139
'63.##.78.220':139
'63.##.166.93':139
'63.##.221.165':139
'63.##.193.26':139
'63.##.85.167':139
'63.##.45.206':139
'63.##.93.172':139
'63.##.166.77':445
'63.#6.1.156':445
'63.##.75.227':445
'63.#6.42.42':445
'63.##.135.253':445
'63.##.183.218':445
'63.#6.69.89':445
'63.##.32.224':445
'63.##.249.66':445
'63.##.115.47':445
'63.##.13.125':445
'63.##.200.215':445
'63.#6.42.15':445
'63.##.27.183':445
'63.#6.68.93':445
'63.##.172.67':445
'63.##.54.184':445
'63.##.149.105':445
'63.##.65.170':445
'63.#6.30.56':445
'63.##.34.166':445
'63.##.141.60':445
'63.##.32.231':445
'63.##.110.233':445
'63.##.179.98':445
'63.##.231.222':445
'63.##.112.138':139
'63.#6.58.27':139
'63.##.78.189':445
'63.##.170.188':445
'63.#6.1.124':445
'63.##.165.30':139
'63.#6.36.54':139
'63.##.136.152':139
'63.#6.45.13':139
'63.##.107.41':139
'63.##.241.54':139
'63.#6.96.39':445
'63.##.46.120':445
'63.##.19.157':445
'63.##.246.43':445
'63.##.193.214':445
'63.##.204.19':445
'63.##.148.138':445
'63.##.236.191':445
'63.##.123.42':445
'63.##.214.215':445
'63.##.244.252':445
'63.##.120.183':445
'63.##.191.120':445
'63.#6.67.3':445
'63.##.179.98':139
'63.#6.30.56':139
'63.##.34.166':139
'63.##.172.67':139
'63.##.32.231':139
'63.##.110.233':139
'63.##.135.253':139
'63.##.183.218':139
'63.##.166.77':139
'63.##.141.60':139
'63.#6.42.15':139
'63.#6.42.42':139
'63.#6.68.93':139
'63.##.14.113':445
'63.##.14.181':445
'63.##.54.197':445
'63.#6.51.14':445
'63.##.165.196':445
'63.##.101.219':445
'63.##.149.105':139
'63.##.65.170':139
'63.##.27.183':139
'63.##.233.111':445
'63.#6.67.3':139
'63.##.54.184':139
'63.##.191.120':139
'63.##.236.191':139
'63.##.123.42':139
'63.##.246.43':139
'63.##.244.252':139
'63.##.120.183':139
'63.##.170.188':139
'63.#6.1.124':139
'63.##.231.222':139
'63.##.214.215':139
'63.#6.96.39':139
'63.##.78.189':139
'63.##.19.157':139
'63.##.13.125':139
'63.##.200.215':139
'63.#6.69.89':139
'63.#6.1.156':139
'63.##.75.227':139
'63.##.115.47':139
'63.##.204.19':139
'63.##.148.138':139
'63.##.46.120':139
'63.##.32.224':139
'63.##.249.66':139
'63.##.193.214':139
'63.##.115.253':445
'63.#6.4.130':445
'63.##.129.129':445
'63.##.128.208':445
'63.##.174.177':445
'63.#6.12.20':445
'63.##.240.230':445
'63.##.122.127':445
'63.##.80.120':445
'63.##.32.179':445
'63.##.202.247':445
'63.##.231.26':445
'63.##.187.216':445
'63.##.137.196':445
'63.##.108.37':445
'63.##.160.214':445
'63.#6.49.88':445
'63.##.191.123':445
'63.##.112.224':445
'63.##.57.120':445
'63.##.93.203':445
'63.#6.34.85':445
'63.#6.5.160':445
'63.#6.6.222':445
'63.##.29.240':445
'63.#6.75.59':445
'63.#6.2.249':445
'63.#6.2.206':445
'63.#6.9.172':445
'63.##.149.70':445
'63.##.217.187':445
'63.##.115.76':445
'63.##.123.222':445
'63.##.58.175':445
'63.##.222.158':445
'63.##.90.111':445
'63.#6.37.28':445
'63.#6.139.7':445
'63.#6.36.12':445
'63.#6.20.24':445
'63.##.121.185':445
'63.##.106.140':445
'63.##.14.166':445
'63.##.18.221':445
'63.##.96.204':445
'63.##.188.162':445
'63.##.199.96':445
'63.##.99.189':445
'63.##.143.188':445
'63.##.51.136':445
'63.##.58.175':139
'63.#6.4.130':139
'63.##.202.247':139
'63.##.32.179':139
'63.##.128.208':139
'63.##.187.216':139
'63.##.129.129':139
'63.##.240.230':139
'63.##.80.120':139
'63.##.122.127':139
'63.#6.12.20':139
'63.##.115.253':139
'63.##.231.26':139
'63.##.174.177':139
'63.##.112.224':139
'63.##.108.37':139
'63.#6.5.160':139
'63.##.137.196':139
'63.#6.49.88':139
'63.##.191.123':139
'63.##.57.120':139
'63.#6.34.85':139
'63.##.93.203':139
'63.##.160.214':139
'63.#6.6.222':139
'63.##.29.240':139
'63.#6.2.249':139
'63.##.149.70':139
'63.#6.37.28':139
'63.##.217.187':139
'63.#6.75.59':139
'63.#6.9.172':139
'63.##.222.158':139
'63.##.123.222':139
'63.##.47.158':139
'63.##.115.76':139
'63.##.90.111':139
'63.#6.2.206':139
'63.#6.139.7':139
'63.##.18.221':139
'63.#6.20.24':139
'63.##.121.185':139
'63.##.106.140':139
'63.##.14.166':139
'63.#6.36.12':139
'63.##.51.136':139
'63.##.96.204':139
'63.##.199.96':139
'63.##.99.189':139
'63.##.188.162':139
'63.##.143.188':139
'63.##.123.47':445
'63.##.16.190':445
'63.##.54.119':445
'63.##.59.207':445
'63.##.182.88':445
'63.#6.142.0':445
'63.##.189.148':445
'63.##.214.189':445
'63.##.159.215':445
'63.##.155.244':445
'63.#6.46.24':445
'63.##.17.128':445
'63.##.123.55':445
'63.##.124.47':445
'63.##.11.106':445
'63.##.160.94':445
'63.##.155.29':445
'63.##.247.199':445
'63.##.98.108':445
'63.#6.36.38':445
'63.##.226.77':445
'63.##.118.252':445
'63.##.192.54':445
'63.##.55.153':445
'63.##.216.144':445
'63.##.166.196':139
'63.#6.44.43':139
'63.##.158.25':139
'63.##.180.169':445
'63.##.35.181':445
'63.##.104.82':139
'63.##.16.143':139
'63.##.104.82':445
'63.##.166.196':445
'63.##.28.100':139
'63.##.114.46':139
'63.#6.143.8':139
'63.##.169.28':445
'63.##.209.254':445
'63.#6.66.10':445
'63.##.37.193':445
'63.##.208.159':445
'63.##.164.208':445
'63.##.144.164':445
'63.##.40.230':445
'63.#6.8.8':445
'63.##.28.196':445
'63.##.229.197':445
'63.##.160.100':445
'63.##.100.76':445
'63.##.67.202':445
'63.##.216.144':139
'63.#6.36.38':139
'63.##.226.77':139
'63.##.160.94':139
'63.##.192.54':139
'63.##.55.153':139
'63.##.182.88':139
'63.#6.142.0':139
'63.##.123.47':139
'63.##.118.252':139
'63.##.123.55':139
'63.##.59.207':139
'63.##.11.106':139
'63.##.191.123':9988
'63.##.29.240':9988
'63.##.116.109':139
'63.##.47.158':445
'63.##.112.224':9988
'63.#6.49.88':9988
'63.##.247.199':139
'63.##.98.108':139
'63.##.124.47':139
'63.#6.3.153':139
'63.##.67.202':139
'63.##.155.29':139
'63.##.40.230':139
'63.##.100.76':139
'63.#6.8.8':139
'63.##.37.193':139
'63.##.229.197':139
'63.##.160.100':139
'63.##.35.181':139
'63.##.116.109':445
'63.#6.3.153':445
'63.##.28.196':139
'63.##.169.28':139
'63.##.180.169':139
'63.#6.66.10':139
'63.#6.46.24':139
'63.##.17.128':139
'63.##.189.148':139
'63.##.16.190':139
'63.##.54.119':139
'63.##.155.244':139
'63.##.164.208':139
'63.##.144.164':139
'63.##.209.254':139
'63.##.214.189':139
'63.##.159.215':139
'63.##.208.159':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней