Trojan.Starman.6481

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERa090.dir00\svchost.exe.mdmp 16325836412032320

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa090.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##.72.109':445
'62.#8.67.83':445
'62.##.212.39':445
'62.##.210.203':445
'62.##.205.182':445
'62.##.47.154':445
'62.#8.71.56':445
'62.##.23.121':445
'62.##.146.193':445
'62.#8.34.48':445
'62.##.157.10':445
'62.##.130.111':445
'62.##.116.244':445
'62.##.60.240':445
'62.##.221.60':445
'62.##.172.221':445
'62.##.120.84':139
'62.##.186.121':445
'62.##.239.185':445
'62.##.166.39':445
'62.##.173.194':445
'62.##.140.187':445
'62.##.30.247':445
'62.##.77.111':445
'62.##.39.185':445
'62.##.67.164':445
'62.##.190.43':139
'62.##.90.190':139
'62.#8.42.91':139
'62.##.17.170':139
'62.##.205.59':139
'62.##.39.243':139
'62.##.168.152':139
'62.##.12.239':139
'62.#8.92.71':139
'62.#8.16.42':139
'62.##.183.15':139
'62.##.121.183':139
'62.#8.213.7':139
'62.##.101.92':445
'62.##.99.101':445
'62.##.233.99':445
'62.#8.4.94':445
'62.##.108.225':445
'62.##.202.179':445
'62.##.171.224':445
'62.##.41.237':445
'62.##.120.84':445
'62.#8.1.233':445
'62.#8.248.1':445
'62.##.85.247':445
'62.##.239.185':139
'62.##.60.240':139
'62.##.221.60':139
'62.##.150.121':445
'62.##.27.188':445
'62.##.186.121':139
'62.##.39.185':139
'62.##.166.39':139
'62.##.173.194':139
'62.##.172.221':139
'62.##.30.247':139
'62.##.77.111':139
'62.##.169.64':445
'62.##.62.232':445
'62.##.71.177':445
'62.##.251.71':445
'62.##.27.188':139
'62.#8.36.60':445
'62.##.156.35':445
'62.##.172.204':445
'62.##.137.222':445
'62.##.168.137':445
'62.#8.87.39':445
'62.#8.94.95':445
'62.##.202.191':445
'62.##.140.187':139
'62.##.202.179':139
'62.##.101.92':139
'62.##.99.101':139
'62.#8.4.94':139
'62.##.67.164':139
'62.##.108.225':139
'62.##.85.247':139
'62.##.171.224':139
'62.##.41.237':139
'62.##.233.99':139
'62.#8.1.233':139
'62.#8.248.1':139
'62.##.146.193':139
'62.##.47.154':139
'62.##.72.109':139
'62.#8.67.83':139
'62.##.116.244':139
'62.##.210.203':139
'62.##.205.182':139
'62.##.130.111':139
'62.#8.71.56':139
'62.##.23.121':139
'62.##.212.39':139
'62.#8.34.48':139
'62.##.157.10':139
'62.##.229.29':139
'62.##.19.150':445
'62.##.204.19':445
'62.##.104.246':445
'62.##.32.181':445
'62.##.187.248':445
'62.##.149.143':445
'62.##.134.123':445
'62.##.65.192':445
'62.##.74.222':445
'62.##.248.121':445
'62.##.31.144':445
'62.#8.82.53':445
'62.##.131.103':445
'62.##.167.20':445
'62.##.100.123':445
'62.##.121.100':445
'62.##.45.186':445
'62.##.54.161':445
'62.##.119.175':445
'62.#8.51.84':445
'62.##.129.155':445
'62.#8.42.89':445
'62.##.103.121':445
'62.##.45.103':445
'62.#8.77.45':445
'62.##.185.74':445
'62.##.193.211':139
'62.##.182.194':139
'62.#8.40.77':139
'62.#8.14.41':139
'62.##.30.203':139
'62.##.237.197':139
'62.##.69.142':139
'62.#8.7.70':139
'62.##.51.150':139
'62.#8.19.17':139
'62.##.76.240':139
'62.##.142.202':139
'62.##.128.131':139
'62.##.134.75':445
'62.##.211.182':445
'62.##.155.228':445
'62.#8.20.98':445
'62.##.117.240':445
'62.##.79.118':445
'62.##.49.138':445
'62.##.69.248':445
'62.##.210.34':139
'62.##.27.152':445
'62.##.202.44':445
'62.##.112.15':445
'62.##.119.175':139
'62.##.167.20':139
'62.##.100.123':139
'62.##.229.29':445
'62.##.45.186':139
'62.##.54.161':139
'62.#8.77.45':139
'62.#8.51.84':139
'62.##.129.155':139
'62.##.121.100':139
'62.##.103.121':139
'62.##.45.103':139
'62.#8.92.71':445
'62.##.39.243':445
'62.##.190.43':445
'62.##.90.190':445
'62.#8.213.7':445
'62.##.17.170':445
'62.##.205.59':445
'62.##.121.183':445
'62.##.168.152':445
'62.##.12.239':445
'62.#8.42.91':445
'62.#8.16.42':445
'62.##.183.15':445
'62.#8.42.89':139
'62.##.79.118':139
'62.##.134.75':139
'62.##.211.182':139
'62.##.185.74':139
'62.#8.20.98':139
'62.##.117.240':139
'62.##.112.15':139
'62.##.49.138':139
'62.##.69.248':139
'62.##.155.228':139
'62.##.27.152':139
'62.##.202.44':139
'62.##.74.222':139
'62.##.149.143':139
'62.##.19.150':139
'62.##.204.19':139
'62.##.131.103':139
'62.##.32.181':139
'62.##.187.248':139
'62.#8.82.53':139
'62.##.134.123':139
'62.##.65.192':139
'62.##.104.246':139
'62.##.248.121':139
'62.##.31.144':139
'62.##.50.171':445
'62.##.144.171':445
'62.##.69.122':445
'62.##.11.176':445
'62.#8.172.3':445
'62.#8.23.56':445
'62.##.170.96':445
'62.#8.11.10':445
'62.##.95.177':445
'62.##.189.40':445
'62.#8.21.64':445
'62.#8.97.62':445
'62.##.22.140':445
'62.#8.0.6':445
'62.##.15.135':445
'62.#8.63.15':445
'62.##.81.108':445
'62.#8.92.62':445
'62.##.115.94':445
'62.##.135.218':445
'62.##.69.159':445
'62.##.184.230':445
'62.#8.167.0':445
'62.##.135.115':445
'62.##.28.175':445
'62.##.205.120':445
'62.##.238.252':445
'62.#8.34.1':445
'62.##.194.219':445
'62.#8.27.48':445
'62.##.119.97':445
'62.##.190.42':445
'62.##.62.106':445
'62.##.234.32':445
'62.#8.1.62':445
'62.##.234.205':445
'62.##.142.64':445
'62.##.101.111':445
'62.##.174.86':445
'62.##.67.158':445
'62.##.53.185':445
'62.##.245.52':445
'62.##.26.192':445
'62.#8.59.8':445
'62.##.16.189':445
'62.##.117.253':445
'62.##.28.128':445
'62.##.86.253':445
'62.#8.31.43':445
'62.##.204.36':445
'62.##.103.140':445
'62.#8.23.56':139
'62.##.144.171':139
'62.##.69.122':139
'62.##.11.176':139
'62.#8.172.3':139
'62.##.50.171':139
'62.##.170.96':139
'62.##.95.177':139
'62.#8.11.10':139
'62.##.189.40':139
'62.#8.21.64':139
'62.#8.97.62':139
'62.##.22.140':139
'62.#8.0.6':139
'62.#8.92.62':139
'62.##.81.108':139
'62.#8.63.15':139
'62.##.115.94':139
'62.##.135.115':139
'62.##.135.218':139
'62.##.69.159':139
'62.##.184.230':139
'62.##.15.135':139
'62.#8.167.0':139
'62.##.28.175':139
'62.##.205.120':139
'62.##.238.252':139
'62.#8.34.1':139
'62.##.194.219':139
'62.#8.27.48':139
'62.##.119.97':139
'62.##.190.42':139
'62.##.62.106':139
'62.##.234.32':139
'62.#8.1.62':139
'62.##.234.205':139
'62.##.142.64':139
'62.##.101.111':139
'62.##.174.86':139
'62.##.67.158':139
'62.##.53.185':139
'62.##.245.52':139
'62.##.26.192':139
'62.#8.59.8':139
'62.##.16.189':139
'62.##.117.253':139
'62.##.28.128':139
'62.##.86.253':139
'62.#8.31.43':139
'62.##.204.36':139
'62.##.103.140':139
'62.##.69.159':9988
'62.##.173.100':445
'62.##.166.172':445
'62.##.74.194':445
'62.##.113.31':445
'62.##.164.34':445
'62.##.120.172':445
'62.##.189.219':445
'62.#8.91.72':445
'62.#8.28.65':445
'62.##.176.221':445
'62.##.246.176':445
'62.##.54.247':445
'62.##.143.239':445
'62.#8.4.66':445
'62.#8.10.21':445
'62.##.144.142':445
'62.##.25.224':139
'62.#8.1.146':445
'62.#8.66.80':445
'62.#8.163.5':445
'62.##.247.162':445
'62.##.177.230':445
'62.##.122.144':445
'62.##.151.122':445
'62.#8.30.7':445
'62.##.220.127':445
'62.##.251.71':139
'62.#8.87.39':139
'62.#8.94.95':139
'62.##.156.35':139
'62.##.62.232':139
'62.##.71.177':139
'62.##.168.137':139
'62.##.169.64':139
'62.##.150.121':139
'62.##.202.191':139
'62.##.172.204':139
'62.##.137.222':139
'62.#8.36.60':139
'62.##.140.88':445
'62.##.232.163':445
'62.##.111.226':445
'62.##.27.135':445
'62.##.243.76':445
'62.##.21.190':445
'62.#8.55.7':445
'62.##.82.157':445
'62.##.25.224':445
'62.##.108.12':445
'62.##.24.179':445
'62.##.51.238':445
'62.#8.66.80':139
'62.#8.4.66':139
'62.#8.10.21':139
'62.##.142.64':9988
'62.##.62.106':9988
'62.#8.1.146':139
'62.#8.30.7':139
'62.#8.163.5':139
'62.##.247.162':139
'62.##.144.142':139
'62.##.122.144':139
'62.##.151.122':139
'62.##.190.42':9988
'62.#8.97.62':9988
'62.##.170.96':9988
'62.##.95.177':9988
'62.##.184.230':9988
'62.#8.172.3':9988
'62.##.144.171':9988
'62.##.204.36':9988
'62.##.103.140':9988
'62.##.119.97':9988
'62.##.205.120':9988
'62.#8.59.8':9988
'62.##.67.158':9988
'62.##.177.230':139
'62.##.21.190':139
'62.##.140.88':139
'62.##.232.163':139
'62.##.220.127':139
'62.##.27.135':139
'62.##.243.76':139
'62.##.51.238':139
'62.#8.55.7':139
'62.##.82.157':139
'62.##.111.226':139
'62.##.108.12':139
'62.##.24.179':139
'62.#8.28.65':139
'62.##.120.172':139
'62.##.173.100':139
'62.##.166.172':139
'62.##.143.239':139
'62.##.113.31':139
'62.##.164.34':139
'62.##.54.247':139
'62.##.189.219':139
'62.#8.91.72':139
'62.##.74.194':139
'62.##.176.221':139
'62.##.246.176':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней