Trojan.Starman.5665

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER32da.dir00\svchost.exe.mdmp 16325836412032260

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER32da.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##.132.68':445
'63.##.47.157':445
'63.##.165.151':445
'63.##.105.118':445
'63.##.193.99':445
'63.##.67.234':445
'63.##.148.167':445
'63.#4.8.135':445
'63.##.88.135':445
'63.#4.44.39':445
'63.##.64.128':445
'63.##.210.30':445
'63.#4.12.69':445
'63.##.124.195':445
'63.##.166.131':445
'63.##.119.166':445
'63.##.114.246':445
'63.##.111.114':445
'63.##.208.111':445
'63.##.149.194':445
'63.#4.2.129':445
'63.##.177.156':445
'63.##.69.167':445
'63.#4.4.157':445
'63.##.139.126':445
'63.##.62.114':445
'63.##.98.231':139
'63.##.203.98':139
'63.##.117.151':445
'63.##.139.231':445
'63.##.160.97':445
'63.##.225.50':139
'63.##.14.205':139
'63.##.246.239':139
'63.##.242.203':139
'63.##.145.242':139
'63.##.95.184':139
'63.##.129.198':445
'63.##.73.224':445
'63.##.211.231':445
'63.#4.77.26':445
'63.#4.81.82':445
'63.##.134.66':445
'63.##.224.98':445
'63.##.208.226':445
'63.##.117.225':445
'63.##.50.117':445
'63.##.253.240':445
'63.##.229.222':445
'63.##.155.229':445
'63.##.245.248':445
'63.##.139.126':139
'63.##.149.194':139
'63.#4.2.129':139
'63.##.119.166':139
'63.##.69.167':139
'63.#4.4.157':139
'63.##.193.99':139
'63.##.67.234':139
'63.##.132.68':139
'63.##.177.156':139
'63.#4.12.69':139
'63.##.105.118':139
'63.##.166.131':139
'63.##.39.178':445
'63.##.227.150':445
'63.##.118.96':445
'63.##.250.36':445
'63.#4.58.73':445
'63.##.37.206':445
'63.##.111.114':139
'63.##.208.111':139
'63.##.124.195':139
'63.##.46.239':445
'63.##.245.248':139
'63.##.114.246':139
'63.##.155.229':139
'63.##.208.226':139
'63.##.117.225':139
'63.#4.77.26':139
'63.##.253.240':139
'63.##.229.222':139
'63.##.139.231':139
'63.##.160.97':139
'63.##.62.114':139
'63.##.50.117':139
'63.##.129.198':139
'63.##.117.151':139
'63.##.211.231':139
'63.##.64.128':139
'63.##.210.30':139
'63.##.148.167':139
'63.##.47.157':139
'63.##.165.151':139
'63.#4.44.39':139
'63.##.134.66':139
'63.##.224.98':139
'63.##.73.224':139
'63.#4.8.135':139
'63.##.88.135':139
'63.#4.81.82':139
'63.##.98.231':445
'63.##.151.222':445
'63.##.234.78':445
'63.##.39.230':445
'63.#4.70.76':445
'63.#4.13.38':445
'63.##.114.15':445
'63.##.104.30':445
'63.##.41.104':445
'63.#4.39.36':445
'63.##.66.221':445
'63.##.29.106':445
'63.##.30.207':445
'63.##.76.104':445
'63.#4.37.64':445
'63.##.67.161':445
'63.##.90.184':445
'63.#4.5.165':445
'63.##.185.91':445
'63.##.181.179':445
'63.##.46.184':445
'63.##.101.59':445
'63.#4.21.14':445
'63.##.136.76':445
'63.##.30.253':445
'63.##.184.55':445
'63.##.136.29':445
'63.##.198.136':139
'63.##.189.198':139
'63.##.239.87':445
'63.#4.49.50':445
'63.##.244.52':445
'63.##.110.113':139
'63.#4.47.53':139
'63.##.42.108':139
'63.##.19.212':139
'63.##.91.199':139
'63.#4.3.117':139
'63.#4.7.118':445
'63.##.121.254':445
'63.##.247.182':445
'63.##.121.247':445
'63.##.240.63':445
'63.#4.48.45':445
'63.##.190.48':445
'63.##.15.223':445
'63.#4.24.22':445
'63.#4.32.69':445
'63.##.102.28':445
'63.##.139.130':445
'63.##.89.133':445
'63.##.245.138':445
'63.##.184.55':139
'63.##.46.184':139
'63.##.101.59':139
'63.##.90.184':139
'63.##.136.76':139
'63.##.30.253':139
'63.#4.13.38':139
'63.##.114.15':139
'63.##.151.222':139
'63.#4.21.14':139
'63.##.76.104':139
'63.#4.70.76':139
'63.##.67.161':139
'63.##.95.184':445
'63.##.225.50':445
'63.##.14.205':445
'63.##.203.98':445
'63.##.242.203':445
'63.##.145.242':445
'63.##.185.91':139
'63.##.181.179':139
'63.#4.37.64':139
'63.##.246.239':445
'63.##.245.138':139
'63.#4.5.165':139
'63.##.89.133':139
'63.##.15.223':139
'63.#4.24.22':139
'63.##.121.247':139
'63.##.102.28':139
'63.##.139.130':139
'63.#4.49.50':139
'63.##.244.52':139
'63.##.136.29':139
'63.#4.32.69':139
'63.#4.7.118':139
'63.##.239.87':139
'63.##.247.182':139
'63.##.29.106':139
'63.##.30.207':139
'63.##.104.30':139
'63.##.234.78':139
'63.##.39.230':139
'63.##.66.221':139
'63.#4.48.45':139
'63.##.190.48':139
'63.##.121.254':139
'63.##.41.104':139
'63.#4.39.36':139
'63.##.240.63':139
'63.#4.78.66':445
'63.##.37.242':445
'63.#4.95.80':445
'63.#4.94.84':445
'63.##.112.24':445
'63.##.70.107':445
'63.##.215.76':445
'63.##.194.29':445
'63.##.149.204':445
'63.##.62.235':445
'63.##.211.242':445
'63.##.235.149':445
'63.##.118.103':445
'63.##.212.237':445
'63.##.154.213':445
'63.##.108.154':445
'63.#4.77.45':445
'63.##.79.194':445
'63.##.238.79':445
'63.##.236.119':445
'63.##.181.211':445
'63.#4.225.3':445
'63.#4.25.76':445
'63.#4.63.56':445
'63.#4.3.137':445
'63.##.58.183':445
'63.##.234.58':445
'63.##.103.203':445
'63.#4.60.75':445
'63.##.23.161':445
'63.##.54.122':445
'63.#4.165.7':445
'63.##.90.235':445
'63.#4.14.98':445
'63.#4.25.26':445
'63.##.122.25':445
'63.##.189.121':445
'63.#4.87.86':445
'63.##.158.217':445
'63.##.176.239':445
'63.##.123.12':445
'63.##.243.41':445
'63.##.144.199':445
'63.##.143.151':445
'63.##.166.162':445
'63.##.90.126':445
'63.#4.86.24':445
'63.##.147.40':445
'63.##.206.197':445
'63.##.25.207':445
'63.#4.48.67':139
'63.#4.78.66':139
'63.##.37.242':139
'63.#4.95.80':139
'63.#4.94.84':139
'63.##.112.24':139
'63.##.70.107':139
'63.##.215.76':139
'63.##.194.29':139
'63.##.149.204':139
'63.##.62.235':139
'63.##.211.242':139
'63.##.235.149':139
'63.##.118.103':139
'63.##.79.194':139
'63.##.154.213':139
'63.##.108.154':139
'63.##.238.79':139
'63.##.212.237':139
'63.#4.77.45':139
'63.##.236.119':139
'63.##.181.211':139
'63.#4.225.3':139
'63.#4.25.76':139
'63.#4.63.56':139
'63.#4.3.137':139
'63.##.58.183':139
'63.##.234.58':139
'63.##.103.203':139
'63.#4.60.75':139
'63.##.23.161':139
'63.##.54.122':139
'63.#4.165.7':139
'63.##.90.235':139
'63.#4.14.98':139
'63.#4.25.26':139
'63.##.122.25':139
'63.##.189.121':139
'63.#4.87.86':139
'63.##.158.217':139
'63.##.176.239':139
'63.##.123.12':139
'63.##.243.41':139
'63.##.144.199':139
'63.##.143.151':139
'63.##.166.162':139
'63.##.90.126':139
'63.#4.86.24':139
'63.##.147.40':139
'63.##.206.197':139
'63.##.25.207':139
'63.#4.48.67':445
'63.##.76.152':445
'63.#4.82.24':445
'63.##.102.102':445
'63.##.57.245':445
'63.##.36.141':445
'63.##.102.53':445
'63.##.141.63':445
'63.##.248.168':445
'63.#4.8.207':445
'63.##.187.78':445
'63.##.73.168':445
'63.##.63.218':445
'63.##.251.216':445
'63.#4.4.43':445
'63.##.133.221':445
'63.##.169.200':445
'63.##.35.217':445
'63.#4.27.38':445
'63.#4.248.6':445
'63.##.207.47':445
'63.##.143.174':445
'63.#4.80.3':445
'63.#4.88.33':445
'63.#4.3.74':445
'63.##.192.29':445
'63.##.175.73':139
'63.##.250.36':139
'63.#4.58.73':139
'63.##.139.240':445
'63.##.42.204':445
'63.##.178.71':445
'63.##.118.96':139
'63.##.46.239':139
'63.##.175.73':445
'63.##.37.206':139
'63.##.39.178':139
'63.##.227.150':139
'63.##.240.216':445
'63.##.98.252':445
'63.#4.39.87':445
'63.##.230.90':445
'63.#4.1.26':445
'63.##.40.221':445
'63.##.247.119':445
'63.#4.47.6':445
'63.##.111.169':445
'63.##.70.110':445
'63.##.136.165':445
'63.##.215.235':445
'63.##.238.20':445
'63.##.100.84':445
'63.##.192.29':139
'63.##.207.47':139
'63.##.143.174':139
'63.##.169.200':139
'63.#4.88.33':139
'63.#4.3.74':139
'63.##.36.141':139
'63.##.102.53':139
'63.##.76.152':139
'63.#4.80.3':139
'63.##.251.216':139
'63.##.57.245':139
'63.##.133.221':139
'63.##.25.207':9988
'63.##.158.217':9988
'63.#4.14.98':9988
'63.##.112.24':9988
'63.#4.78.66':9988
'63.##.215.76':9988
'63.#4.27.38':139
'63.#4.248.6':139
'63.#4.4.43':139
'63.##.99.220':139
'63.##.100.84':139
'63.##.35.217':139
'63.##.238.20':139
'63.#4.47.6':139
'63.##.111.169':139
'63.##.230.90':139
'63.##.136.165':139
'63.##.215.235':139
'63.##.42.204':139
'63.##.178.71':139
'63.##.99.220':445
'63.##.70.110':139
'63.##.240.216':139
'63.##.139.240':139
'63.#4.39.87':139
'63.##.73.168':139
'63.##.63.218':139
'63.##.141.63':139
'63.#4.82.24':139
'63.##.102.102':139
'63.##.187.78':139
'63.##.40.221':139
'63.##.247.119':139
'63.##.98.252':139
'63.##.248.168':139
'63.#4.8.207':139
'63.#4.1.26':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней