Trojan.Starman.5837

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd78b.dir00\svchost.exe.mdmp 16325836412032228

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERd78b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##.230.164':445
'60.#3.55.58':445
'60.#3.56.4':445
'60.#3.17.45':445
'60.##.143.43':445
'60.##.12.143':445
'60.#3.53.9':445
'60.#3.98.80':445
'60.##.221.87':445
'60.#3.53.50':445
'60.#3.59.57':445
'60.#3.47.95':445
'60.##.84.216':445
'60.##.70.232':445
'60.##.74.243':445
'60.#3.74.84':445
'60.#3.4.74':139
'60.#3.46.66':445
'60.#3.0.217':445
'60.##.175.105':445
'60.#3.3.179':445
'60.##.232.92':445
'60.#3.92.74':445
'60.#3.36.93':445
'60.#3.87.4':445
'60.##.249.162':445
'60.##.187.183':445
'60.#3.4.74':445
'60.##.82.122':139
'60.#3.9.119':445
'60.#3.15.12':445
'60.#3.20.15':445
'60.#3.95.29':139
'60.##.189.222':139
'60.##.231.176':139
'60.##.30.200':139
'60.#3.3.127':139
'60.#3.29.89':139
'60.#3.27.24':445
'60.##.56.144':445
'60.#3.69.25':445
'60.##.52.196':445
'60.##.26.183':445
'60.##.236.206':445
'60.##.60.203':445
'60.##.146.215':445
'60.##.48.244':445
'60.##.220.186':445
'60.#3.75.52':445
'60.##.115.75':445
'60.##.37.248':445
'60.##.187.183':139
'60.#3.36.93':139
'60.#3.87.4':139
'60.##.175.105':139
'60.##.74.243':139
'60.#3.74.84':139
'60.#3.92.74':139
'60.#3.17.45':139
'60.##.143.43':139
'60.##.12.143':139
'60.#3.3.179':139
'60.##.232.92':139
'60.##.84.216':139
'60.##.70.232':139
'60.##.149.15':445
'60.##.206.197':445
'60.#3.26.3':445
'60.##.95.212':139
'60.#3.34.37':139
'60.#3.137.8':445
'60.#3.34.37':445
'60.#3.46.66':139
'60.#3.0.217':139
'60.##.201.30':445
'60.##.201.53':445
'60.##.95.212':445
'60.##.230.164':139
'60.##.115.75':139
'60.##.37.248':139
'60.##.146.215':139
'60.#3.69.25':139
'60.##.52.196':139
'60.#3.75.52':139
'60.#3.9.119':139
'60.#3.15.12':139
'60.#3.20.15':139
'60.##.48.244':139
'60.##.220.186':139
'60.#3.27.24':139
'60.##.56.144':139
'60.#3.59.57':139
'60.#3.47.95':139
'60.#3.53.9':139
'60.#3.55.58':139
'60.#3.56.4':139
'60.#3.53.50':139
'60.##.26.183':139
'60.##.236.206':139
'60.##.60.203':139
'60.#3.98.80':139
'60.##.221.87':139
'60.##.249.162':139
'60.##.165.146':445
'60.##.188.164':445
'60.##.42.189':445
'60.#3.183.2':445
'60.##.74.191':445
'60.##.146.228':445
'60.##.241.130':445
'60.##.165.194':445
'60.##.188.87':445
'60.##.124.89':445
'60.##.137.68':445
'60.##.195.77':445
'60.##.159.72':445
'60.##.204.44':445
'60.#3.1.204':445
'60.##.211.147':445
'60.#3.71.84':445
'60.##.110.110':445
'60.##.44.111':445
'60.##.55.152':445
'60.##.105.27':445
'60.##.200.175':445
'60.##.167.112':445
'60.##.98.167':445
'60.##.130.149':445
'60.##.104.129':445
'60.#3.8.212':445
'60.#3.60.15':139
'60.#3.96.3':139
'60.##.241.188':445
'60.##.12.242':445
'60.##.128.12':445
'60.##.80.107':139
'60.#3.38.68':139
'60.##.46.171':139
'60.##.73.158':139
'60.##.69.142':139
'60.#3.77.38':139
'60.##.189.127':445
'60.##.182.62':445
'60.##.65.111':445
'60.##.176.175':445
'60.##.87.105':445
'60.##.125.87':445
'60.##.227.42':445
'60.#3.94.29':445
'60.##.48.207':445
'60.##.127.94':445
'60.##.31.162':445
'60.#3.29.93':445
'60.##.109.173':445
'60.#3.8.212':139
'60.##.98.167':139
'60.##.55.152':139
'60.##.130.149':139
'60.#3.1.204':139
'60.##.211.147':139
'60.##.167.112':139
'60.#3.183.2':139
'60.##.74.191':139
'60.##.146.228':139
'60.##.105.27':139
'60.##.200.175':139
'60.##.159.72':139
'60.##.204.44':139
'60.#3.3.127':445
'60.#3.29.89':445
'60.#3.95.29':445
'60.##.58.164':139
'60.##.82.122':445
'60.##.30.200':445
'60.#3.71.84':139
'60.##.110.110':139
'60.##.44.111':139
'60.##.189.222':445
'60.##.231.176':445
'60.##.58.164':445
'60.##.165.146':139
'60.#3.29.93':139
'60.##.109.173':139
'60.##.48.207':139
'60.##.65.111':139
'60.##.176.175':139
'60.##.31.162':139
'60.##.241.188':139
'60.##.12.242':139
'60.##.128.12':139
'60.#3.94.29':139
'60.##.127.94':139
'60.##.189.127':139
'60.##.182.62':139
'60.##.137.68':139
'60.##.195.77':139
'60.##.241.130':139
'60.##.188.164':139
'60.##.42.189':139
'60.##.124.89':139
'60.##.87.105':139
'60.##.125.87':139
'60.##.227.42':139
'60.##.165.194':139
'60.##.188.87':139
'60.##.104.129':139
'60.##.201.53':139
'60.##.155.208':445
'60.##.21.235':445
'60.##.155.235':445
'60.##.174.163':445
'60.#3.49.7':445
'60.#3.36.98':445
'60.#3.84.29':445
'60.##.230.83':445
'60.#3.38.25':445
'60.##.41.205':445
'60.#3.95.3':445
'60.##.42.242':445
'60.##.125.49':445
'60.##.211.178':445
'60.##.165.251':445
'60.#3.43.42':445
'60.#3.18.73':445
'60.##.145.70':445
'60.##.124.224':445
'60.##.12.122':445
'60.##.114.238':445
'60.##.49.115':445
'60.##.115.145':445
'60.##.44.171':445
'60.##.12.219':445
'60.#3.48.26':445
'60.##.78.131':445
'60.##.135.13':445
'60.#3.2.23':445
'60.##.223.226':445
'60.#3.56.70':445
'60.#3.131.3':445
'60.#3.92.0':445
'60.#3.27.6':445
'60.##.211.178':9988
'60.##.56.178':445
'60.#3.79.71':445
'60.##.159.64':445
'60.##.91.204':445
'60.##.178.204':445
'60.##.212.178':445
'60.#3.4.129':445
'60.##.180.48':445
'60.##.133.106':445
'60.##.190.59':445
'60.##.70.136':445
'60.##.108.68':445
'60.##.204.107':445
'60.#3.3.193':445
'60.##.196.43':445
'60.##.203.57':445
'60.##.90.168':445
'60.#3.36.98':139
'60.##.155.208':139
'60.##.21.235':139
'60.##.125.49':139
'60.##.174.163':139
'60.#3.49.7':139
'60.##.42.242':139
'60.#3.84.29':139
'60.##.230.83':139
'60.##.155.235':139
'60.##.41.205':139
'60.#3.95.3':139
'60.##.49.115':139
'60.##.211.178':139
'60.##.145.70':139
'60.##.124.224':139
'60.##.165.251':139
'60.#3.43.42':139
'60.##.90.168':139
'60.##.12.219':139
'60.##.12.122':139
'60.##.114.238':139
'60.#3.18.73':139
'60.##.115.145':139
'60.##.44.171':139
'60.#3.38.25':139
'60.#3.131.3':139
'60.##.78.131':139
'60.##.135.13':139
'60.##.91.204':139
'60.##.223.226':139
'60.#3.56.70':139
'60.##.159.64':139
'60.#3.92.0':139
'60.#3.27.6':139
'60.#3.2.23':139
'60.##.56.178':139
'60.#3.79.71':139
'60.##.204.107':139
'60.##.190.59':139
'60.##.178.204':139
'60.##.212.178':139
'60.#3.48.26':139
'60.##.180.48':139
'60.##.133.106':139
'60.##.203.57':139
'60.##.70.136':139
'60.##.108.68':139
'60.#3.4.129':139
'60.#3.3.193':139
'60.##.196.43':139
'60.##.82.123':445
'60.##.204.17':445
'60.##.21.127':445
'60.#3.7.6':445
'60.#3.48.7':445
'60.##.124.47':445
'60.##.126.71':445
'60.##.253.179':445
'60.##.105.216':445
'60.#3.204.3':445
'60.#3.1.140':445
'60.##.185.120':445
'60.##.58.222':445
'60.#3.69.61':445
'60.##.162.157':445
'60.##.139.162':445
'60.#3.8.111':139
'60.#3.221.8':139
'60.#3.8.221':139
'60.##.199.49':445
'60.##.163.253':445
'60.##.109.252':445
'60.##.133.232':445
'60.#3.69.13':445
'60.##.119.69':445
'60.##.156.106':445
'60.##.110.168':445
'60.#3.8.111':445
'60.#3.221.8':445
'60.##.114.215':445
'60.##.11.150':445
'60.##.168.11':445
'60.##.206.197':139
'60.#3.26.3':139
'60.##.201.30':139
'60.#3.8.221':445
'60.#3.137.8':139
'60.##.149.15':139
'60.##.135.150':445
'60.##.30.122':445
'60.##.52.135':445
'60.##.175.222':445
'60.##.25.143':445
'60.##.80.175':445
'60.#3.18.34':445
'60.##.181.45':445
'60.##.101.181':445
'60.##.150.101':445
'60.##.59.209':445
'60.##.47.107':445
'60.##.45.230':445
'60.##.110.168':139
'60.#3.69.13':139
'60.##.119.69':139
'60.##.199.49':139
'60.##.162.157':139
'60.##.139.162':139
'60.##.133.232':139
'60.#3.7.6':139
'60.#3.48.7':139
'60.##.124.47':139
'60.##.163.253':139
'60.##.109.252':139
'60.##.58.222':139
'60.#3.69.61':139
'60.##.125.49':9988
'60.#3.36.98':9988
'60.##.42.242':9988
'60.##.124.224':9988
'60.##.145.70':9988
'60.##.12.122':9988
'60.##.108.68':9988
'60.##.91.204':9988
'60.##.223.226':9988
'60.##.212.178':9988
'60.#3.4.129':9988
'60.##.196.43':9988
'60.##.82.123':139
'60.##.47.107':139
'60.##.45.230':139
'60.##.181.45':139
'60.##.52.135':139
'60.##.175.222':139
'60.##.59.209':139
'60.##.114.215':139
'60.##.11.150':139
'60.##.168.11':139
'60.##.101.181':139
'60.##.150.101':139
'60.##.135.150':139
'60.##.30.122':139
'60.#3.1.140':139
'60.##.185.120':139
'60.##.126.71':139
'60.##.204.17':139
'60.##.21.127':139
'60.#3.204.3':139
'60.##.25.143':139
'60.##.80.175':139
'60.#3.18.34':139
'60.##.253.179':139
'60.##.105.216':139
'60.##.156.106':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней