Trojan.Starman.6616

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERf7cd.dir00\svchost.exe.mdmp 16325836412030776

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##.72.146':445
'83.##.104.70':445
'83.##.165.244':445
'83.##.184.222':445
'83.##.75.134':445
'83.##.17.131':445
'83.##.23.168':139
'83.#9.2.243':139
'83.#9.96.75':139
'83.##.88.123':445
'83.##.127.184':445
'83.#9.16.83':445
'83.##.83.238':445
'83.##.155.61':445
'83.##.154.241':445
'83.##.69.139':445
'83.##.209.146':445
'83.##.221.131':445
'83.##.61.221':445
'83.##.178.252':445
'83.##.139.180':445
'83.#9.8.92':445
'83.##.206.69':445
'83.##.223.146':445
'83.##.253.112':445
'83.##.110.168':445
'83.##.14.113':445
'83.#9.53.4':445
'83.##.160.68':445
'83.##.61.147':445
'83.##.25.156':445
'83.##.122.65':445
'83.#9.96.75':445
'83.##.107.194':445
'83.##.164.41':445
'83.##.23.168':445
'83.#9.2.243':445
'83.##.115.239':445
'83.##.115.239':139
'83.##.164.41':139
'83.##.61.147':139
'83.##.160.68':139
'83.##.107.194':139
'83.##.122.65':139
'83.##.25.156':139
'83.##.110.168':139
'83.##.32.228':445
'83.##.14.113':139
'83.##.32.228':139
'83.#9.53.4':139
'83.#9.84.3':445
'83.##.61.221':139
'83.##.155.61':139
'83.##.154.241':139
'83.#9.84.3':139
'83.##.209.146':139
'83.##.221.131':139
'83.##.253.112':139
'83.##.178.252':139
'83.##.139.180':139
'83.##.69.139':139
'83.##.206.69':139
'83.##.223.146':139
'83.#9.2.131':139
'83.##.179.183':139
'83.#9.15.45':139
'83.#9.79.71':139
'83.#9.54.25':139
'83.##.90.169':139
'83.##.168.90':139
'83.##.152.38':139
'83.##.91.152':139
'83.##.131.91':139
'83.##.149.184':139
'83.##.249.155':139
'83.##.37.242':139
'83.#9.15.45':445
'83.#9.79.71':445
'83.##.149.184':445
'83.##.90.169':445
'83.##.168.90':445
'83.##.179.183':445
'83.##.91.152':445
'83.##.131.91':445
'83.#9.2.131':445
'83.##.249.155':445
'83.##.37.242':445
'83.##.152.38':445
'83.#9.54.25':445
'83.##.75.134':139
'83.##.17.131':139
'83.##.72.146':139
'83.#9.8.92':139
'83.##.83.238':139
'83.##.184.222':139
'83.##.127.184':139
'83.#9.16.83':139
'83.##.46.150':445
'83.##.104.70':139
'83.##.165.244':139
'83.##.88.123':139
'83.#9.3.67':139
'83.##.236.228':445
'83.#9.6.237':445
'83.#9.5.7':445
'83.##.45.215':445
'83.##.95.196':445
'83.##.13.133':445
'83.##.190.215':139
'83.##.110.127':139
'83.#9.34.31':139
'83.#9.79.5':445
'83.#9.88.79':445
'83.##.216.87':445
'83.##.153.164':445
'83.##.253.233':445
'83.##.99.141':445
'83.##.210.246':445
'83.##.125.173':445
'83.#9.1.190':445
'83.#9.98.78':445
'83.##.242.11':445
'83.##.63.153':445
'83.##.110.63':445
'83.##.243.139':445
'83.#9.130.8':445
'83.##.124.177':445
'83.##.21.178':445
'83.##.243.228':445
'83.##.197.178':445
'83.#9.34.31':445
'83.##.86.207':445
'83.##.178.86':445
'83.##.119.144':445
'83.##.69.119':445
'83.##.203.242':445
'83.##.135.198':445
'83.##.102.136':445
'83.##.234.68':445
'83.##.110.127':445
'83.##.243.228':139
'83.##.197.178':139
'83.##.135.198':139
'83.##.86.207':139
'83.##.178.86':139
'83.##.21.178':139
'83.##.69.119':139
'83.##.203.242':139
'83.##.190.215':445
'83.##.102.136':139
'83.##.234.68':139
'83.##.119.144':139
'83.##.141.112':445
'83.#9.98.78':139
'83.##.253.233':139
'83.##.99.141':139
'83.##.141.112':139
'83.##.125.173':139
'83.#9.1.190':139
'83.##.124.177':139
'83.##.242.11':139
'83.##.63.153':139
'83.##.210.246':139
'83.##.243.139':139
'83.#9.130.8':139
'83.##.255.40':139
'83.##.106.207':139
'83.##.108.142':139
'83.##.142.244':139
'83.#9.85.55':139
'83.#9.40.34':139
'83.#9.99.40':139
'83.##.94.162':139
'83.##.68.161':139
'83.#9.70.68':139
'83.##.221.154':139
'83.#9.25.20':139
'83.#9.50.25':139
'83.##.108.142':445
'83.##.142.244':445
'83.##.221.154':445
'83.#9.40.34':445
'83.#9.99.40':445
'83.##.106.207':445
'83.##.68.161':445
'83.#9.70.68':445
'83.##.255.40':445
'83.#9.25.20':445
'83.#9.50.25':445
'83.##.94.162':445
'83.#9.85.55':445
'83.##.95.196':139
'83.##.13.133':139
'83.##.236.228':139
'83.##.110.63':139
'83.##.153.164':139
'83.##.45.215':139
'83.#9.88.79':139
'83.##.216.87':139
'83.#9.3.67':445
'83.#9.6.237':139
'83.#9.5.7':139
'83.#9.79.5':139
'83.##.24.208':445
'83.##.54.202':445
'83.#9.5.82':445
'83.##.253.207':445
'83.##.73.238':445
'83.##.243.129':445
'83.##.78.135':445
'83.##.57.231':445
'83.##.104.59':445
'83.##.245.49':445
'83.##.71.146':445
'83.##.119.53':445
'83.##.114.181':445
'83.##.249.104':445
'83.#9.94.39':445
'83.#9.185.0':445
'83.#9.60.1':445
'83.##.143.132':445
'83.#9.95.85':445
'83.##.199.40':445
'83.##.125.220':445
'83.##.144.47':445
'83.##.226.67':445
'83.##.219.162':445
'83.##.52.219':445
'83.#9.32.61':445
'83.##.204.128':445
'83.#9.10.48':445
'83.##.175.84':445
'83.##.167.129':445
'83.##.224.119':445
'83.##.236.229':445
'83.##.79.154':445
'83.#9.8.60':445
'83.##.218.55':445
'83.##.142.254':445
'83.##.212.171':445
'83.#9.46.33':445
'83.##.39.200':445
'83.#9.22.46':445
'83.##.57.250':445
'83.#9.99.9':445
'83.##.189.120':445
'83.##.200.144':445
'83.##.206.119':445
'83.##.55.145':445
'83.##.58.106':445
'83.##.172.102':445
'83.##.104.178':445
'83.##.123.83':445
'83.##.60.239':139
'83.##.24.208':139
'83.##.54.202':139
'83.#9.5.82':139
'83.##.253.207':139
'83.##.73.238':139
'83.##.243.129':139
'83.##.78.135':139
'83.##.57.231':139
'83.##.104.59':139
'83.##.245.49':139
'83.##.71.146':139
'83.##.119.53':139
'83.##.114.181':139
'83.##.249.104':139
'83.#9.94.39':139
'83.#9.185.0':139
'83.#9.60.1':139
'83.##.143.132':139
'83.#9.95.85':139
'83.##.199.40':139
'83.##.125.220':139
'83.##.144.47':139
'83.##.226.67':139
'83.##.219.162':139
'83.##.52.219':139
'83.#9.32.61':139
'83.##.204.128':139
'83.#9.10.48':139
'83.##.175.84':139
'83.##.167.129':139
'83.##.224.119':139
'83.##.236.229':139
'83.##.79.154':139
'83.#9.8.60':139
'83.##.218.55':139
'83.##.142.254':139
'83.##.212.171':139
'83.#9.46.33':139
'83.##.39.200':139
'83.#9.22.46':139
'83.##.57.250':139
'83.#9.99.9':139
'83.##.189.120':139
'83.##.200.144':139
'83.##.206.119':139
'83.##.55.145':139
'83.##.58.106':139
'83.##.172.102':139
'83.##.104.178':139
'83.##.123.83':139
'83.##.60.239':445
'83.##.231.94':445
'83.#9.2.231':445
'83.#9.81.62':445
'83.##.26.137':445
'83.#9.85.86':445
'83.##.70.165':445
'83.#9.76.55':139
'83.##.46.158':139
'83.##.124.145':139
'83.##.170.123':445
'83.#9.119.8':445
'83.#9.83.17':139
'83.#9.8.64':445
'83.##.239.11':445
'83.##.39.239':445
'83.#9.84.35':445
'83.##.231.221':445
'83.#9.32.59':445
'83.##.223.81':445
'83.##.25.227':445
'83.#9.222.7':445
'83.##.85.221':445
'83.##.194.80':445
'83.##.82.137':445
'83.##.211.62':445
'83.##.117.156':445
'83.##.70.211':445
'83.#9.9.248':445
'83.##.46.158':445
'83.#9.83.17':445
'83.##.100.45':445
'83.##.70.118':445
'83.##.217.72':445
'83.##.46.150':139
'83.##.190.141':445
'83.#9.2.107':445
'83.##.99.106':445
'83.##.246.37':445
'83.##.99.106':139
'83.##.190.141':139
'83.##.117.156':139
'83.##.246.37':139
'83.##.100.45':139
'83.##.217.72':139
'83.##.70.211':139
'83.#9.76.55':445
'83.##.124.145':445
'83.##.70.118':139
'83.#9.9.248':139
'83.#9.2.107':139
'83.##.142.23':445
'83.##.226.115':139
'83.#9.4.110':139
'83.##.49.203':139
'83.##.204.138':139
'83.##.241.204':139
'83.##.14.189':139
'83.##.223.81':139
'83.##.239.11':139
'83.##.39.239':139
'83.##.142.23':139
'83.##.231.221':139
'83.#9.32.59':139
'83.##.138.242':139
'83.##.199.40':9988
'83.##.253.207':9988
'83.##.243.129':9988
'83.##.249.104':9988
'83.#9.94.39':9988
'83.#9.185.0':9988
'83.#9.10.48':9988
'83.##.120.60':139
'83.##.242.119':139
'83.##.54.202':9988
'83.#9.46.33':9988
'83.##.167.129':9988
'83.##.120.60':445
'83.##.242.119':445
'83.##.138.242':445
'83.#9.81.62':139
'83.##.170.123':139
'83.#9.119.8':139
'83.##.226.115':445
'83.#9.4.110':445
'83.##.49.203':445
'83.##.241.204':445
'83.##.204.138':445
'83.##.14.189':445
'83.#9.2.231':139
'83.##.211.62':139
'83.##.25.227':139
'83.#9.222.7':139
'83.#9.84.35':139
'83.##.194.80':139
'83.##.82.137':139
'83.#9.85.86':139
'83.##.70.165':139
'83.##.231.94':139
'83.##.85.221':139
'83.#9.8.64':139
'83.##.26.137':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней