Trojan.Starman.6542

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER30c5.dir00\svchost.exe.mdmp 16325836412032172

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER30c5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'63.##.65.183':139
'63.##.34.250':139
'63.#6.45.90':139
'63.##.143.25':139
'63.##.55.162':139
'63.##.80.217':139
'63.##.20.240':139
'63.##.130.105':139
'63.##.106.35':139
'63.#6.39.97':139
'63.##.25.189':139
'63.##.107.21':139
'63.##.246.209':139
'63.##.228.122':139
'63.##.192.234':139
'63.##.227.138':139
'63.##.20.163':139
'63.##.50.215':139
'63.##.205.179':139
'63.##.228.20':139
'63.##.13.228':139
'63.##.58.167':139
'63.##.228.20':445
'63.##.13.228':445
'63.##.246.209':445
'63.##.228.122':445
'63.##.107.21':445
'63.##.25.189':445
'63.##.143.25':445
'63.##.50.215':445
'63.##.205.179':445
'63.##.20.163':445
'63.##.227.138':445
'63.#6.20.80':139
'63.##.128.129':139
'63.##.217.149':139
'63.##.91.228':139
'63.##.150.52':139
'63.##.214.251':445
'63.##.192.234':445
'63.##.206.200':445
'63.#6.90.99':139
'63.##.78.158':445
'63.##.141.133':139
'63.##.104.14':139
'63.#6.113.6':139
'63.##.194.53':139
'63.##.244.184':139
'63.#6.3.102':139
'63.##.167.253':445
'63.##.170.14':139
'63.##.78.111':139
'63.#6.23.67':139
'63.##.53.203':139
'63.##.87.228':139
'63.##.174.110':139
'63.##.254.210':139
'63.##.167.253':139
'63.##.251.164':139
'63.#6.1.69':139
'63.##.225.106':139
'63.##.98.247':139
'63.#6.59.31':139
'63.##.49.137':139
'63.##.251.164':445
'63.##.78.111':445
'63.#6.23.67':445
'63.##.104.14':445
'63.#6.113.6':445
'63.##.141.133':445
'63.##.206.200':139
'63.##.214.251':139
'63.##.78.158':139
'63.##.170.14':445
'63.#6.3.102':445
'63.##.244.184':445
'63.#6.59.31':445
'63.##.49.137':445
'63.##.174.110':445
'63.##.254.210':445
'63.##.87.228':445
'63.##.53.203':445
'63.##.194.53':445
'63.##.225.106':445
'63.##.98.247':445
'63.#6.1.69':445
'63.##.55.162':445
'63.##.209.54':139
'63.##.43.251':139
'63.##.233.16':139
'63.##.23.184':445
'63.##.158.22':139
'63.##.56.179':139
'63.#6.4.192':139
'63.#6.0.204':139
'63.##.49.234':139
'63.##.204.122':139
'63.##.181.121':445
'63.##.188.71':445
'63.##.146.76':445
'63.##.129.196':445
'63.##.202.221':445
'63.##.199.202':445
'63.##.126.245':445
'63.##.121.126':445
'63.##.246.33':445
'63.##.142.68':445
'63.##.32.199':445
'63.##.186.197':139
'63.##.154.157':139
'63.##.164.25':139
'63.##.173.146':139
'63.##.243.248':139
'63.##.146.45':139
'63.#6.72.52':139
'63.#6.1.115':139
'63.#6.12.77':139
'63.##.236.90':139
'63.##.72.123':139
'63.##.26.192':139
'63.##.178.229':139
'63.##.133.190':139
'63.##.230.134':139
'63.##.81.137':139
'63.##.129.134':139
'63.#6.131.6':139
'63.##.118.103':139
'63.##.12.138':139
'63.##.180.64':139
'63.##.56.156':139
'63.#6.90.99':445
'63.##.168.59':139
'63.##.128.129':445
'63.##.217.149':445
'63.#6.20.80':445
'63.##.251.61':139
'63.##.49.133':139
'63.##.199.176':139
'63.##.110.166':139
'63.##.201.50':139
'63.##.150.52':445
'63.##.106.35':445
'63.#6.39.97':445
'63.##.34.250':445
'63.#6.45.90':445
'63.##.65.183':445
'63.##.58.167':445
'63.##.91.228':445
'63.##.20.240':445
'63.##.130.105':445
'63.##.80.217':445
'63.##.120.28':139
'63.##.110.166':445
'63.##.201.50':445
'63.##.168.59':445
'63.##.181.121':139
'63.##.23.184':139
'63.##.120.28':445
'63.##.221.120':445
'63.##.49.133':445
'63.##.199.176':445
'63.##.251.61':445
'63.##.121.126':139
'63.##.129.196':139
'63.##.188.71':139
'63.##.199.202':139
'63.##.221.120':139
'63.##.202.221':139
'63.##.246.33':139
'63.##.126.245':139
'63.##.32.199':139
'63.##.146.76':139
'63.##.142.68':139
'63.##.48.139':445
'63.##.211.22':445
'63.##.157.133':445
'63.##.105.80':445
'63.#6.88.15':445
'63.#6.48.87':445
'63.##.200.187':445
'63.##.120.200':445
'63.##.74.180':445
'63.##.160.158':445
'63.##.121.75':445
'63.#6.0.135':445
'63.##.246.23':139
'63.##.128.246':139
'63.##.23.231':139
'63.#6.183.5':139
'63.##.67.118':139
'63.#6.29.7':445
'63.##.210.78':445
'63.#6.207.3':139
'63.##.226.97':139
'63.#6.79.25':139
'63.##.195.251':445
'63.##.218.96':445
'63.##.79.241':445
'63.#6.77.97':445
'63.##.28.141':445
'63.##.78.167':445
'63.##.75.207':445
'63.#6.7.200':445
'63.##.105.119':445
'63.##.70.192':445
'63.##.219.21':445
'63.##.22.163':445
'63.##.40.181':445
'63.#6.16.40':445
'63.#6.37.69':445
'63.##.163.101':445
'63.##.222.162':445
'63.##.199.46':445
'63.##.237.145':445
'63.#6.57.4':445
'63.##.149.16':445
'63.##.234.148':445
'63.##.163.101':139
'63.##.222.162':139
'63.##.195.251':139
'63.##.200.187':139
'63.##.120.200':139
'63.##.149.16':139
'63.##.234.148':139
'63.#6.16.40':139
'63.#6.37.69':139
'63.##.40.181':139
'63.##.74.180':139
'63.#6.0.135':139
'63.#6.88.15':139
'63.##.210.78':139
'63.#6.48.87':139
'63.#6.29.7':139
'63.##.160.158':139
'63.##.121.75':139
'63.##.157.133':139
'63.##.105.80':139
'63.##.211.22':139
'63.#6.57.4':139
'63.##.53.202':139
'63.##.72.220':139
'63.#6.203.7':139
'63.##.75.207':139
'63.#6.7.200':139
'63.##.107.131':139
'63.##.215.11':139
'63.##.180.37':139
'63.##.146.215':139
'63.##.97.146':139
'63.##.105.119':139
'63.##.28.141':139
'63.##.78.167':139
'63.##.22.163':139
'63.##.199.46':139
'63.##.237.145':139
'63.##.70.192':139
'63.##.219.21':139
'63.##.79.241':139
'63.#6.77.97':139
'63.##.218.96':139
'63.#6.203.7':445
'63.##.170.62':445
'63.#6.8.124':445
'63.##.53.178':445
'63.##.158.186':139
'63.##.48.139':139
'63.##.234.223':445
'63.##.36.208':445
'63.##.223.143':445
'63.##.164.31':445
'63.##.124.150':445
'63.#6.0.109':139
'63.#6.43.38':139
'63.##.72.180':139
'63.##.42.107':139
'63.##.219.206':139
'63.##.68.208':139
'63.##.213.161':139
'63.##.112.104':139
'63.#6.71.9':139
'63.##.169.83':139
'63.##.197.143':139
'63.##.212.194':445
'63.##.169.83':445
'63.##.197.143':445
'63.##.72.180':445
'63.##.42.107':445
'63.#6.43.38':445
'63.#6.0.109':445
'63.##.158.186':445
'63.##.112.104':445
'63.#6.71.9':445
'63.##.213.161':445
'63.##.68.208':445
'63.##.89.193':445
'63.##.105.144':445
'63.##.214.187':445
'63.##.180.203':445
'63.##.154.79':445
'63.##.55.157':445
'63.##.219.206':445
'63.##.248.148':445
'63.##.42.105':445
'63.##.236.75':445
'63.#6.207.3':445
'63.##.105.80':9988
'63.#6.79.25':445
'63.##.128.246':445
'63.##.226.97':445
'63.##.74.180':9988
'63.##.200.187':9988
'63.##.160.158':9988
'63.##.210.78':9988
'63.##.157.133':9988
'63.##.246.23':445
'63.##.97.146':445
'63.##.180.37':445
'63.##.146.215':445
'63.##.53.202':445
'63.##.72.220':445
'63.##.67.118':445
'63.##.23.231':445
'63.#6.183.5':445
'63.##.107.131':445
'63.##.215.11':445
'63.##.120.200':9988
'63.##.214.187':139
'63.##.89.193':139
'63.##.154.79':139
'63.##.212.194':139
'63.##.180.203':139
'63.##.248.148':139
'63.##.55.157':139
'63.##.236.75':139
'63.##.105.144':139
'63.##.42.105':139
'63.##.36.208':139
'63.##.53.178':139
'63.##.170.62':139
'63.##.199.46':9988
'63.##.195.251':9988
'63.#6.57.4':9988
'63.##.223.143':139
'63.##.234.223':139
'63.##.124.150':139
'63.#6.8.124':139
'63.##.164.31':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней