Trojan.Starman.5998

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1156 -dm 7 7 %TEMP%\WERae1a.dir00\svchost.exe.mdmp 16325836412032208

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'59.##8.210.51':445
'59.##8.213.235':445
'59.##8.124.126':445
'59.##8.162.108':445
'59.##8.85.237':445
'59.##8.75.252':445
'59.##8.190.229':445
'59.##8.204.190':445
'59.##8.114.204':445
'59.##8.51.113':445
'59.##8.104.13':445
'59.##8.33.161':445
'59.##8.190.136':445
'59.##8.78.161':139
'59.##8.40.95':139
'59.##8.31.41':139
'59.##8.97.189':139
'59.##8.227.97':139
'59.##8.91.155':139
'59.##8.27.43':139
'59.##8.239.3':139
'59.##8.5.202':139
'59.##8.188.133':445
'59.##8.108.79':139
'59.##8.239.237':139
'59.##8.13.49':139
'59.##8.90.206':139
'59.##8.123.176':139
'59.#58.7.6':139
'59.##8.5.202':445
'59.##8.177.115':139
'59.##8.206.160':139
'59.##8.140.178':139
'59.##8.89.233':139
'59.##8.129.206':139
'59.##8.223.110':139
'59.##8.129.177':139
'59.##8.79.212':139
'59.##8.27.251':139
'59.##8.227.97':445
'59.##8.91.155':445
'59.##8.78.161':445
'59.##8.182.135':445
'59.##8.134.207':445
'59.##8.97.189':445
'59.##8.40.95':445
'59.##8.239.237':445
'59.##8.13.49':445
'59.##8.239.3':445
'59.##8.31.41':445
'59.##8.27.43':445
'59.##8.108.79':445
'59.##8.134.207':139
'59.##8.227.43':445
'59.##8.181.61':445
'59.##8.70.224':445
'59.##8.74.129':139
'59.##8.173.198':445
'59.##8.75.71':445
'59.##8.101.46':445
'59.##8.222.80':445
'59.##8.130.219':445
'59.##8.198.168':445
'59.##8.153.54':445
'59.##8.209.238':445
'59.##8.221.3':445
'59.##8.218.8':139
'59.##8.65.45':139
'59.##8.235.64':139
'59.##8.222.80':139
'59.##8.130.219':139
'59.##8.198.168':139
'59.##8.133.227':139
'59.##8.15.86':139
'59.##8.62.172':139
'59.##8.3.126':139
'59.##8.70.248':139
'59.##8.49.70':139
'59.##8.61.77':139
'59.##8.213.235':139
'59.##8.124.126':139
'59.##8.190.229':139
'59.##8.85.237':139
'59.##8.75.252':139
'59.##8.210.51':139
'59.##8.104.13':139
'59.##8.114.204':139
'59.##8.51.113':139
'59.##8.182.135':139
'59.##8.33.161':139
'59.##8.190.136':139
'59.##8.204.190':139
'59.##8.133.227':445
'59.##8.70.248':445
'59.##8.49.70':445
'59.##8.218.8':445
'59.##8.65.45':445
'59.##8.235.64':445
'59.##8.61.77':445
'59.##8.74.129':445
'59.##8.188.133':139
'59.##8.162.108':139
'59.##8.15.86':445
'59.##8.62.172':445
'59.##8.3.126':445
'59.##8.52.117':139
'59.##8.83.207':445
'59.##8.153.220':445
'59.##8.14.15':445
'59.##8.81.73':445
'59.##8.184.183':445
'59.##8.204.54':445
'59.##8.129.14':445
'59.##8.140.206':445
'59.##8.255.204':445
'59.##8.106.130':445
'59.##8.57.241':445
'59.##8.60.95':445
'59.##8.69.11':445
'59.##8.15.176':139
'59.##8.37.139':139
'59.##8.255.204':139
'59.##8.69.11':139
'59.##8.60.233':139
'59.##8.106.130':139
'59.##8.201.197':139
'59.##8.86.222':445
'59.##8.112.46':445
'59.##8.71.105':445
'59.##8.104.203':139
'59.##8.54.146':445
'59.##8.196.246':445
'59.##8.97.58':139
'59.##8.116.68':139
'59.##8.220.126':139
'59.#58.83.4':139
'59.#58.43.3':139
'59.##8.153.81':139
'59.##8.151.242':139
'59.##8.180.26':139
'59.##8.32.180':139
'59.##8.218.32':139
'59.##8.185.162':139
'59.##8.13.250':139
'59.##8.125.87':139
'59.##8.201.197':445
'59.##8.70.151':445
'59.##8.217.91':445
'59.##8.104.203':445
'59.##8.195.216':445
'59.##8.175.23':445
'59.##8.37.139':445
'59.##8.36.60':139
'59.##8.120.170':139
'59.##8.4.121':139
'59.##8.15.176':445
'59.##8.25.162':445
'59.##8.60.233':445
'59.##8.175.23':139
'59.##8.129.177':445
'59.##8.79.212':445
'59.##8.27.251':445
'59.##8.123.176':445
'59.#58.7.6':445
'59.##8.140.178':445
'59.##8.89.233':445
'59.#58.1.96':445
'59.##8.218.184':445
'59.##8.220.14':445
'59.##8.129.206':445
'59.##8.223.110':445
'59.##8.52.117':445
'59.##8.82.95':139
'59.##8.165.183':139
'59.##8.229.103':139
'59.#58.1.96':139
'59.##8.218.184':139
'59.##8.220.14':139
'59.##8.57.213':139
'59.##8.177.115':445
'59.##8.206.160':445
'59.##8.90.206':445
'59.##8.65.51':139
'59.##8.241.195':139
'59.##8.66.90':139
'59.##8.129.14':139
'59.##8.153.220':139
'59.##8.14.15':139
'59.##8.112.46':139
'59.##8.184.183':139
'59.##8.71.105':139
'59.##8.57.241':139
'59.##8.70.151':139
'59.##8.217.91':139
'59.##8.195.216':139
'59.##8.60.95':139
'59.##8.140.206':139
'59.##8.25.162':139
'59.##8.57.213':445
'59.##8.65.51':445
'59.##8.241.195':445
'59.##8.82.95':445
'59.##8.165.183':445
'59.##8.229.103':445
'59.##8.66.90':445
'59.##8.86.222':139
'59.##8.81.73':139
'59.##8.204.54':139
'59.##8.54.146':139
'59.##8.83.207':139
'59.##8.196.246':139
'59.##8.221.3':139
'59.##8.137.214':445
'59.##8.76.138':445
'59.##8.58.48':445
'59.#58.2.58':445
'59.##8.217.61':445
'59.##8.214.158':445
'59.##8.14.229':445
'59.##8.2.252':445
'59.##8.156.208':445
'59.##8.71.238':445
'59.##8.82.201':445
'59.##8.88.120':445
'59.##8.173.193':445
'59.##8.224.70':445
'59.##8.254.233':445
'59.##8.15.219':445
'59.##8.163.172':445
'59.##8.206.133':445
'59.##8.25.28':445
'59.##8.120.245':445
'59.#58.41.0':445
'59.##8.88.40':445
'59.##8.56.88':445
'59.##8.139.7':445
'59.##8.52.139':445
'59.##8.224.187':445
'59.##8.102.142':445
'59.##8.84.25':445
'59.##8.129.143':445
'59.##8.11.122':445
'59.##8.112.213':445
'59.##8.77.192':445
'59.##8.235.68':445
'59.##8.224.70':9988
'59.##8.52.139':9988
'59.##8.224.187':9988
'59.##8.120.153':445
'59.##8.105.234':445
'59.##8.232.105':445
'59.##8.155.237':445
'59.##8.88.202':445
'59.##8.211.88':445
'59.##8.97.204':445
'59.##8.167.97':445
'59.##8.179.167':445
'59.##8.61.175':445
'59.##8.213.33':445
'59.##8.83.212':445
'59.##8.1.193':445
'59.##8.34.13':445
'59.##8.39.171':445
'59.##8.55.171':445
'59.##8.82.243':445
'59.##8.217.61':139
'59.##8.214.158':139
'59.##8.137.214':139
'59.##8.88.40':139
'59.##8.56.88':139
'59.#58.2.58':139
'59.##8.76.138':139
'59.##8.88.120':139
'59.##8.173.193':139
'59.##8.2.252':139
'59.##8.58.48':139
'59.##8.14.229':139
'59.##8.82.201':139
'59.##8.25.28':139
'59.##8.254.233':139
'59.##8.52.238':139
'59.##8.82.243':139
'59.##8.206.133':139
'59.##8.163.172':139
'59.##8.224.70':139
'59.##8.52.139':139
'59.##8.224.187':139
'59.#58.41.0':139
'59.##8.15.219':139
'59.##8.120.245':139
'59.##8.139.7':139
'59.##8.112.213':139
'59.##8.77.192':139
'59.##8.102.142':139
'59.##8.83.212':139
'59.##8.1.193':139
'59.##8.11.122':139
'59.##8.84.25':139
'59.##8.105.234':139
'59.##8.232.105':139
'59.##8.52.238':445
'59.##8.129.143':139
'59.##8.120.153':139
'59.##8.235.68':139
'59.##8.167.97':139
'59.##8.179.167':139
'59.##8.155.237':139
'59.##8.156.208':139
'59.##8.71.238':139
'59.##8.97.204':139
'59.##8.88.202':139
'59.##8.39.171':139
'59.##8.55.171':139
'59.##8.213.33':139
'59.##8.211.88':139
'59.##8.61.175':139
'59.##8.34.13':139
'59.#58.41.0':9988
'59.##8.176.100':445
'59.##8.192.59':445
'59.##8.157.196':445
'59.##8.121.150':139
'59.##8.149.182':139
'59.##8.66.149':139
'59.##8.116.143':445
'59.##8.81.181':445
'59.##8.85.103':445
'59.##8.35.124':445
'59.##8.67.54':445
'59.##8.149.173':445
'59.##8.196.27':445
'59.##8.20.195':139
'59.##8.132.141':139
'59.##8.122.171':139
'59.##8.191.79':139
'59.##8.185.181':139
'59.##8.74.160':139
'59.##8.123.37':139
'59.##8.59.187':139
'59.##8.152.143':139
'59.##8.157.29':139
'59.##8.49.236':139
'59.##8.19.162':139
'59.##8.109.187':139
'59.##8.149.182':445
'59.##8.66.149':445
'59.##8.173.198':139
'59.##8.152.143':445
'59.##8.157.29':445
'59.##8.121.150':445
'59.##8.75.71':139
'59.##8.101.46':139
'59.##8.153.54':139
'59.##8.209.238':139
'59.##8.227.43':139
'59.##8.181.61':139
'59.##8.70.224':139
'59.##8.185.181':445
'59.##8.74.160':445
'59.##8.20.195':445
'59.##8.165.35':445
'59.##8.114.89':445
'59.##8.191.79':445
'59.##8.132.141':445
'59.##8.19.162':445
'59.##8.109.187':445
'59.##8.59.187':445
'59.##8.122.171':445
'59.##8.123.37':445
'59.##8.49.236':445
'59.##8.114.89':139
'59.##8.102.177':139
'59.##8.15.40':139
'59.##8.105.219':139
'59.##8.83.212':9988
'59.##8.11.122':9988
'59.##8.164.232':139
'59.##8.167.36':139
'59.##8.27.181':139
'59.##8.76.92':139
'59.##8.93.198':139
'59.##8.112.64':139
'59.##8.213.117':139
'59.##8.136.161':139
'59.##8.58.48':9988
'59.##8.14.229':9988
'59.##8.82.201':9988
'59.##8.88.40':9988
'59.#58.2.58':9988
'59.##8.76.138':9988
'59.##8.88.120':9988
'59.##8.211.88':9988
'59.##8.39.171':9988
'59.##8.213.33':9988
'59.##8.173.193':9988
'59.##8.2.252':9988
'59.##8.167.97':9988
'59.##8.192.59':139
'59.##8.157.196':139
'59.##8.116.143':139
'59.##8.15.216':445
'59.##8.150.161':445
'59.##8.176.100':139
'59.##8.67.54':139
'59.##8.85.103':139
'59.##8.35.124':139
'59.##8.165.35':139
'59.##8.149.173':139
'59.##8.196.27':139
'59.##8.81.181':139
'59.##8.102.177':445
'59.##8.15.40':445
'59.##8.105.219':445
'59.##8.15.216':139
'59.##8.150.161':139
'59.##8.164.232':445
'59.##8.167.36':445
'59.##8.27.181':445
'59.##8.76.92':445
'59.##8.93.198':445
'59.##8.112.64':445
'59.##8.213.117':445
'59.##8.136.161':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней