Trojan.Starman.5620

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER179f.dir00\svchost.exe.mdmp 16325836412032188

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER179f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'67.#0.56.29':445
'67.##.11.204':445
'67.##.73.184':445
'67.##.187.247':445
'67.##.49.190':445
'67.#0.4.241':445
'67.##.239.155':445
'67.##.211.117':445
'67.#0.93.95':445
'67.##.157.17':445
'67.##.118.154':445
'67.##.166.180':445
'67.##.247.213':445
'67.#0.4.172':445
'67.##.232.47':445
'67.##.189.43':445
'67.##.201.77':445
'67.##.24.240':445
'67.##.190.153':445
'67.#0.1.218':445
'67.##.175.151':445
'67.##.220.113':445
'67.##.165.64':445
'67.#0.48.20':445
'67.#0.62.90':445
'67.#0.49.75':139
'67.##.248.116':139
'67.##.103.225':139
'67.##.29.253':139
'67.#0.80.68':139
'67.##.160.117':139
'67.##.205.188':139
'67.##.194.87':445
'67.##.250.193':445
'67.#0.83.94':139
'67.##.133.72':139
'67.##.188.133':139
'67.##.250.193':139
'67.##.38.201':445
'67.##.221.152':445
'67.##.102.187':445
'67.##.195.13':445
'67.##.104.188':445
'67.##.168.203':445
'67.##.84.141':445
'67.##.22.207':445
'67.##.194.87':139
'67.##.44.198':445
'67.#0.3.5':445
'67.#0.85.55':445
'67.##.189.43':139
'67.##.165.64':139
'67.#0.48.20':139
'67.##.190.153':139
'67.#0.4.172':139
'67.##.232.47':139
'67.##.220.113':139
'67.##.247.213':139
'67.##.187.247':139
'67.#0.62.90':139
'67.#0.1.218':139
'67.##.175.151':139
'67.##.24.240':139
'67.##.183.109':445
'67.##.202.110':445
'67.#0.9.244':445
'67.##.187.251':445
'67.##.226.57':445
'67.##.126.244':445
'67.#0.37.99':139
'67.#0.78.20':139
'67.##.201.77':139
'67.#0.75.92':445
'67.##.225.74':445
'67.##.185.225':139
'67.##.102.187':139
'67.##.44.198':139
'67.#0.3.5':139
'67.##.168.203':139
'67.##.38.201':139
'67.##.221.152':139
'67.##.185.225':445
'67.#0.37.99':445
'67.#0.78.20':445
'67.#0.85.55':139
'67.##.84.141':139
'67.##.22.207':139
'67.##.104.188':139
'67.##.11.204':139
'67.##.73.184':139
'67.##.157.17':139
'67.##.49.190':139
'67.#0.4.241':139
'67.#0.56.29':139
'67.##.211.117':139
'67.#0.93.95':139
'67.##.195.13':139
'67.##.118.154':139
'67.##.166.180':139
'67.##.239.155':139
'67.##.244.44':445
'67.##.151.102':445
'67.#0.95.82':445
'67.##.215.38':445
'67.#0.86.33':445
'67.##.254.164':445
'67.##.124.241':445
'67.##.201.206':445
'67.##.118.84':445
'67.#0.63.82':445
'67.##.175.104':445
'67.##.254.238':445
'67.##.69.192':445
'67.##.149.128':445
'67.#0.73.43':445
'67.#0.40.58':445
'67.##.180.86':445
'67.##.211.179':445
'67.#0.23.48':445
'67.##.67.132':445
'67.##.187.67':445
'67.##.142.31':445
'67.##.250.159':445
'67.#0.155.1':445
'67.##.189.78':445
'67.##.207.32':139
'67.##.59.159':139
'67.##.254.208':139
'67.#0.25.10':139
'67.#0.59.81':139
'67.##.90.123':139
'67.##.255.153':139
'67.##.106.253':139
'67.##.78.107':139
'67.##.93.117':139
'67.##.141.89':139
'67.##.117.65':139
'67.#0.10.0':445
'67.##.126.95':445
'67.##.210.149':445
'67.##.69.154':445
'67.#0.9.22':445
'67.##.120.228':445
'67.#0.40.40':445
'67.##.55.221':445
'67.##.133.56':445
'67.#0.53.93':445
'67.#0.57.57':445
'67.##.128.196':445
'67.##.220.104':445
'67.#0.40.58':139
'67.##.250.159':139
'67.#0.155.1':139
'67.#0.23.48':139
'67.##.149.128':139
'67.#0.73.43':139
'67.##.142.31':139
'67.##.69.192':139
'67.##.215.38':139
'67.##.189.78':139
'67.##.67.132':139
'67.##.187.67':139
'67.##.211.179':139
'67.#0.49.75':445
'67.##.248.116':445
'67.##.103.225':445
'67.##.29.253':445
'67.#0.80.68':445
'67.##.160.117':445
'67.##.205.188':445
'67.##.50.143':139
'67.##.180.86':139
'67.#0.83.94':445
'67.##.133.72':445
'67.##.188.133':445
'67.##.69.154':139
'67.#0.57.57':139
'67.##.128.196':139
'67.#0.40.40':139
'67.##.126.95':139
'67.##.210.149':139
'67.#0.53.93':139
'67.#0.10.0':139
'67.##.50.143':445
'67.##.220.104':139
'67.##.55.221':139
'67.##.133.56':139
'67.##.120.228':139
'67.##.151.102':139
'67.#0.95.82':139
'67.#0.63.82':139
'67.#0.86.33':139
'67.##.254.164':139
'67.##.244.44':139
'67.##.201.206':139
'67.##.118.84':139
'67.#0.9.22':139
'67.##.175.104':139
'67.##.254.238':139
'67.##.124.241':139
'67.#0.9.128':445
'67.##.75.179':445
'67.##.240.107':445
'67.##.21.241':445
'67.#0.36.20':445
'67.##.224.104':445
'67.#0.19.37':445
'67.#0.50.64':445
'67.##.128.50':445
'67.##.209.186':445
'67.##.134.101':445
'67.#0.3.81':445
'67.#0.51.75':445
'67.##.75.205':445
'67.##.121.27':445
'67.##.176.157':445
'67.##.69.146':445
'67.##.143.77':139
'67.##.192.68':445
'67.##.146.176':445
'67.#0.49.95':445
'67.#0.47.49':445
'67.#0.16.64':445
'67.##.180.10':445
'67.##.72.146':445
'67.#0.95.20':445
'67.##.154.132':445
'67.#0.101.0':445
'67.##.184.163':445
'67.##.128.128':445
'67.##.115.34':445
'67.##.110.108':445
'67.#0.1.26':445
'67.##.148.224':445
'67.##.215.17':445
'67.##.66.247':445
'67.##.43.151':445
'67.#0.14.72':445
'67.#0.185.3':445
'67.##.177.24':445
'67.##.52.158':445
'67.#0.76.3':445
'67.##.252.126':445
'67.##.199.251':445
'67.##.75.229':445
'67.#0.17.73':445
'67.#0.40.35':445
'67.#0.90.40':445
'67.##.216.167':445
'67.#0.24.25':445
'67.#0.51.35':445
'67.##.240.107':139
'67.##.21.241':139
'67.##.134.101':139
'67.##.224.104':139
'67.#0.19.37':139
'67.##.75.179':139
'67.##.128.50':139
'67.##.209.186':139
'67.##.252.126':139
'67.#0.3.81':139
'67.#0.51.75':139
'67.#0.50.64':139
'67.#0.36.20':139
'67.##.146.176':139
'67.##.192.68':139
'67.##.121.27':139
'67.##.176.157':139
'67.##.180.10':139
'67.##.69.146':139
'67.#0.47.49':139
'67.#0.16.64':139
'67.##.75.205':139
'67.##.72.146':139
'67.#0.95.20':139
'67.#0.49.95':139
'67.#0.101.0':139
'67.##.184.163':139
'67.##.66.247':139
'67.##.115.34':139
'67.##.110.108':139
'67.##.154.132':139
'67.##.148.224':139
'67.##.215.17':139
'67.##.97.212':139
'67.##.43.151':139
'67.#0.14.72':139
'67.#0.1.26':139
'67.##.128.128':139
'67.##.52.158':139
'67.#0.76.3':139
'67.##.216.167':139
'67.##.199.251':139
'67.##.75.229':139
'67.##.177.24':139
'67.#0.40.35':139
'67.#0.90.40':139
'67.#0.185.3':139
'67.#0.24.25':139
'67.#0.51.35':139
'67.#0.17.73':139
'67.##.83.154':445
'67.##.47.150':445
'67.##.149.63':445
'67.##.102.253':445
'67.##.254.247':445
'67.##.153.254':445
'67.##.21.161':445
'67.##.129.24':445
'67.##.215.86':445
'67.##.225.146':445
'67.##.133.225':445
'67.#0.7.134':445
'67.##.115.94':445
'67.##.229.64':445
'67.#0.95.68':445
'67.##.19.175':445
'67.##.94.124':445
'67.##.21.216':445
'67.##.114.226':445
'67.##.190.187':445
'67.##.225.33':445
'67.##.182.179':445
'67.##.184.178':445
'67.##.190.184':445
'67.#0.42.24':445
'67.##.126.244':139
'67.##.183.109':139
'67.##.202.110':139
'67.#0.9.128':139
'67.##.187.251':139
'67.##.226.57':139
'67.##.135.175':445
'67.#0.86.82':445
'67.##.128.122':445
'67.#0.9.244':139
'67.#0.75.92':139
'67.##.225.74':139
'67.##.128.122':139
'67.##.141.91':445
'67.##.85.141':445
'67.##.234.28':445
'67.#0.180.9':445
'67.##.26.222':445
'67.#0.91.11':445
'67.##.108.198':445
'67.##.135.175':139
'67.#0.86.82':139
'67.##.125.147':445
'67.##.107.125':445
'67.##.206.116':445
'67.##.19.175':139
'67.##.184.178':139
'67.##.190.184':139
'67.##.114.226':139
'67.##.229.64':139
'67.#0.95.68':139
'67.##.182.179':139
'67.##.115.94':139
'67.##.102.253':139
'67.#0.42.24':139
'67.##.190.187':139
'67.##.225.33':139
'67.##.21.216':139
'67.#0.47.49':9988
'67.##.134.101':9988
'67.#0.50.64':9988
'67.##.97.212':445
'67.##.143.77':445
'67.#0.49.95':9988
'67.##.131.15':139
'67.##.101.44':139
'67.##.94.124':139
'67.#0.1.26':9988
'67.##.162.20':139
'67.##.198.180':139
'67.##.234.28':139
'67.##.125.147':139
'67.##.107.125':139
'67.#0.91.11':139
'67.##.141.91':139
'67.##.85.141':139
'67.##.198.180':445
'67.##.131.15':445
'67.##.101.44':445
'67.##.206.116':139
'67.##.108.198':139
'67.##.162.20':445
'67.##.26.222':139
'67.##.47.150':139
'67.##.149.63':139
'67.##.225.146':139
'67.##.254.247':139
'67.##.153.254':139
'67.##.83.154':139
'67.##.129.24':139
'67.##.215.86':139
'67.#0.180.9':139
'67.##.133.225':139
'67.#0.7.134':139
'67.##.21.161':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней