Trojan.Starman.5803

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERe494.dir00\svchost.exe.mdmp 16325836412029684

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERe494.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##6.39.14':139
'83.##6.39.103':139
'83.##6.122.96':139
'83.##6.162.82':139
'83.##6.96.162':139
'83.##6.220.64':139
'83.##6.64.220':139
'83.##6.154.214':139
'83.##6.74.21':139
'83.##6.119.112':139
'83.##6.75.12':139
'83.##6.112.63':139
'83.##6.223.117':139
'83.##6.199.28':139
'83.##6.66.247':139
'83.##6.244.66':139
'83.##6.218.186':139
'83.##6.106.174':139
'83.##6.84.87':139
'83.##6.208.223':139
'83.##6.196.208':139
'83.##6.61.191':139
'83.##6.33.218':139
'83.##6.85.171':139
'83.##6.39.95':139
'83.##6.138.39':139
'83.##6.40.248':139
'83.##6.84.250':139
'83.##6.34.174':139
'83.##6.21.128':139
'83.##6.46.117':139
'83.##6.87.69':139
'83.##6.57.101':139
'83.##6.223.180':139
'83.#46.52.7':139
'83.##6.81.194':139
'83.##6.161.241':139
'83.##6.197.103':139
'83.##6.161.197':139
'83.##6.41.179':139
'83.##6.157.113':139
'83.##6.38.122':139
'83.##6.221.25':445
'83.##6.214.58':445
'83.##6.162.38':445
'83.##6.147.29':445
'83.##6.191.107':445
'83.##6.242.199':445
'83.##6.16.237':445
'83.##6.51.155':445
'83.##6.68.214':445
'83.##6.67.171':445
'83.##6.29.219':445
'83.##6.104.124':445
'83.##6.31.203':445
'83.##6.176.127':445
'83.##6.202.226':445
'83.##6.248.109':445
'83.##6.165.194':445
'83.##6.218.165':445
'83.#46.0.98':445
'83.##6.85.110':445
'83.##6.171.173':445
'83.##6.43.75':445
'83.##6.21.175':445
'83.##6.174.174':445
'83.##6.181.167':445
'83.##6.154.186':445
'83.##6.46.82':139
'83.##6.39.208':139
'83.##6.53.85':139
'83.##6.119.7':445
'83.##6.122.199':445
'83.##6.167.91':445
'83.##6.231.156':445
'83.##6.208.91':445
'83.##6.221.46':445
'83.##6.229.109':445
'83.##6.78.194':445
'83.##6.48.58':445
'83.##6.136.86':445
'83.##6.58.56':445
'83.##6.36.185':445
'83.##6.179.200':445
'83.##6.202.1':445
'83.##6.181.208':139
'83.##6.32.69':445
'83.##6.229.50':445
'83.##6.68.229':445
'83.##6.5.130':139
'83.##6.9.127':139
'83.##6.124.34':139
'83.##6.86.22':139
'83.##6.223.148':139
'83.##6.51.66':445
'83.##6.33.218':445
'83.##6.21.128':445
'83.##6.61.191':445
'83.##6.138.39':445
'83.##6.85.171':445
'83.##6.84.250':445
'83.##6.65.144':445
'83.##6.40.248':445
'83.##6.46.117':445
'83.##6.34.174':445
'83.##6.63.58':139
'83.##6.140.161':139
'83.##6.103.192':139
'83.##6.35.227':139
'83.##6.48.247':139
'83.#46.3.13':139
'83.##6.169.90':139
'83.##6.10.171':139
'83.##6.217.7':139
'83.##6.123.146':139
'83.#46.36.1':139
'83.##6.106.22':139
'83.##6.39.106':139
'83.##6.22.109':139
'83.##6.32.63':139
'83.##6.109.186':139
'83.##6.183.139':139
'83.##6.18.68':139
'83.##6.202.121':139
'83.##6.129.39':139
'83.##6.116.159':139
'83.##6.208.223':445
'83.##6.196.208':445
'83.##6.223.117':445
'83.##6.199.28':445
'83.##6.112.63':445
'83.##6.75.12':445
'83.##6.162.82':445
'83.##6.106.174':445
'83.##6.84.87':445
'83.##6.218.186':445
'83.##6.244.66':445
'83.##6.68.229':139
'83.##6.32.69':139
'83.##6.229.50':139
'83.##6.65.144':139
'83.##6.51.66':139
'83.##6.39.208':445
'83.##6.66.247':445
'83.##6.46.82':445
'83.##6.202.1':139
'83.##6.53.85':445
'83.##6.157.113':445
'83.##6.38.122':445
'83.##6.223.180':445
'83.#46.52.7':445
'83.##6.57.101':445
'83.##6.87.69':445
'83.##6.39.95':445
'83.##6.161.197':445
'83.##6.41.179':445
'83.##6.197.103':445
'83.##6.161.241':445
'83.##6.39.103':445
'83.##6.74.21':445
'83.##6.39.14':445
'83.##6.96.162':445
'83.##6.122.96':445
'83.##6.64.220':445
'83.##6.81.194':445
'83.##6.220.64':445
'83.##6.119.112':445
'83.##6.154.214':445
'83.##6.129.75':445
'83.##6.101.129':445
'83.##6.40.173':445
'83.##6.125.207':445
'83.##6.139.135':445
'83.##6.36.154':445
'83.##6.239.220':445
'83.##6.207.140':445
'83.##6.252.129':445
'83.##6.121.101':445
'83.##6.151.14':445
'83.##6.157.94':139
'83.##6.244.156':139
'83.##6.83.192':139
'83.##6.108.210':139
'83.##6.14.49':139
'83.##6.23.38':139
'83.#46.7.27':445
'83.##6.39.222':139
'83.##6.92.244':139
'83.##6.166.132':139
'83.##6.127.28':445
'83.##6.200.163':445
'83.##6.228.73':445
'83.##6.57.182':445
'83.##6.156.57':445
'83.#46.8.91':445
'83.##6.104.134':445
'83.##6.2.120':445
'83.##6.175.195':445
'83.##6.120.22':445
'83.##6.47.235':445
'83.##6.74.254':445
'83.##6.26.74':445
'83.##6.87.252':445
'83.##6.222.211':445
'83.#46.45.6':445
'83.##6.57.48':445
'83.##6.26.51':445
'83.##6.98.69':445
'83.##6.152.249':445
'83.##6.37.213':445
'83.##6.87.252':139
'83.##6.74.254':139
'83.#46.45.6':139
'83.##6.239.220':139
'83.##6.222.211':139
'83.##6.98.69':139
'83.##6.57.48':139
'83.##6.37.213':139
'83.##6.26.74':139
'83.##6.152.249':139
'83.##6.121.101':139
'83.##6.40.173':139
'83.##6.151.14':139
'83.#46.7.27':139
'83.##6.139.135':139
'83.##6.252.129':139
'83.##6.129.75':139
'83.##6.101.129':139
'83.##6.36.154':139
'83.##6.125.207':139
'83.##6.207.140':139
'83.##6.85.172':139
'83.#46.2.57':139
'83.##6.32.141':139
'83.##6.104.134':139
'83.##6.42.12':139
'83.##6.138.21':139
'83.##6.142.138':139
'83.##6.21.64':139
'83.##6.73.123':139
'83.#46.57.7':139
'83.#46.8.91':139
'83.##6.156.57':139
'83.##6.228.73':139
'83.##6.57.182':139
'83.##6.26.51':139
'83.##6.47.235':139
'83.##6.120.22':139
'83.##6.2.120':139
'83.##6.175.195':139
'83.##6.127.28':139
'83.##6.200.163':139
'83.##6.221.46':139
'83.##6.231.156':139
'83.##6.78.194':139
'83.##6.16.237':139
'83.##6.229.109':139
'83.##6.58.56':139
'83.##6.48.58':139
'83.##6.179.200':139
'83.##6.208.91':139
'83.##6.36.185':139
'83.##6.242.199':139
'83.##6.191.107':139
'83.##6.162.38':139
'83.##6.147.29':139
'83.##6.218.165':139
'83.##6.29.219':139
'83.##6.67.171':139
'83.##6.51.155':139
'83.##6.68.214':139
'83.##6.221.25':139
'83.##6.214.58':139
'83.##6.101.234':445
'83.#46.4.8':445
'83.##6.65.213':445
'83.##6.3.222':445
'83.##6.183.150':445
'83.##6.5.199':445
'83.##6.227.34':445
'83.##6.34.181':445
'83.##6.207.194':445
'83.##6.135.0':445
'83.##6.26.35':445
'83.##6.154.186':139
'83.##6.174.174':139
'83.##6.181.167':139
'83.##6.136.86':139
'83.##6.167.91':139
'83.##6.122.199':139
'83.##6.35.49':445
'83.##6.119.7':139
'83.##6.43.75':139
'83.##6.21.175':139
'83.##6.92.244':445
'83.##6.166.132':445
'83.##6.244.156':445
'83.##6.83.192':445
'83.##6.157.94':445
'83.##6.151.14':9988
'83.##6.40.173':9988
'83.#46.7.27':9988
'83.##6.39.222':445
'83.##6.23.38':445
'83.##6.14.49':445
'83.#46.2.57':445
'83.##6.73.123':445
'83.##6.85.172':445
'83.##6.42.12':445
'83.##6.32.141':445
'83.##6.142.138':445
'83.##6.108.210':445
'83.##6.138.21':445
'83.#46.57.7':445
'83.##6.21.64':445
'83.##6.176.127':139
'83.##6.104.124':139
'83.##6.248.109':139
'83.##6.227.34':139
'83.##6.202.226':139
'83.#46.0.98':139
'83.##6.165.194':139
'83.##6.171.173':139
'83.##6.31.203':139
'83.##6.85.110':139
'83.##6.5.199':139
'83.##6.183.150':139
'83.##6.65.213':139
'83.##6.3.222':139
'83.##6.35.49':139
'83.##6.26.35':139
'83.##6.135.0':139
'83.##6.34.181':139
'83.##6.207.194':139
'83.##6.101.234':139
'83.#46.4.8':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней