Trojan.Starman.6123

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERfdc0.dir00\svchost.exe.mdmp 16325836412032228

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERfdc0.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##.205.61':139
'14.##.54.205':139
'14.##.193.59':139
'14.##.203.183':445
'14.##.190.110':445
'14.##.61.190':445
'14.##.191.119':139
'14.#5.209.9':139
'14.#5.49.9':139
'14.##.100.89':139
'14.##.105.100':139
'14.#5.20.55':139
'14.##.114.73':445
'14.##.150.130':445
'14.##.26.150':445
'14.##.193.32':445
'14.#5.89.5':445
'14.##.120.186':445
'14.##.138.71':445
'14.##.236.224':445
'14.##.139.237':445
'14.##.83.226':445
'14.##.202.215':445
'14.##.173.154':445
'14.##.219.159':139
'14.##.50.115':139
'14.#5.2.201':139
'14.##.13.163':139
'14.##.176.109':139
'14.##.52.205':139
'14.##.115.54':139
'14.##.54.205':445
'14.##.193.59':445
'14.##.100.89':445
'14.#5.51.99':139
'14.##.245.224':139
'14.##.205.61':445
'14.##.217.35':139
'14.##.244.215':139
'14.#5.88.90':139
'14.##.204.55':139
'14.##.117.204':139
'14.##.59.117':139
'14.#5.204.2':139
'14.#5.11.31':139
'14.##.165.184':139
'14.#5.13.58':139
'14.##.181.133':139
'14.##.177.123':139
'14.##.19.167':445
'14.##.241.221':445
'14.#5.13.74':445
'14.#5.78.66':445
'14.#5.53.7':445
'14.##.162.29':445
'14.#5.6.193':445
'14.#5.40.62':139
'14.##.95.250':139
'14.##.183.141':445
'14.##.159.36':445
'14.##.225.158':445
'14.#5.8.120':445
'14.##.27.160':445
'14.##.72.200':445
'14.#5.39.33':445
'14.##.149.172':445
'14.##.193.149':445
'14.##.157.142':445
'14.##.146.20':445
'14.##.127.96':445
'14.#5.32.40':445
'14.#5.185.3':445
'14.##.187.202':445
'14.##.105.211':139
'14.##.203.183':139
'14.##.190.110':139
'14.##.61.190':139
'14.##.138.71':139
'14.##.236.224':139
'14.##.139.237':139
'14.#5.7.76':445
'14.##.143.190':445
'14.##.33.144':445
'14.#5.40.62':445
'14.##.95.250':445
'14.##.105.211':445
'14.##.193.32':139
'14.#5.89.5':139
'14.##.120.186':139
'14.#5.7.76':139
'14.##.143.190':139
'14.##.33.144':139
'14.##.83.226':139
'14.##.202.215':139
'14.##.173.154':139
'14.##.114.73':139
'14.##.150.130':139
'14.##.26.150':139
'14.##.28.225':445
'14.##.178.121':445
'14.##.36.172':445
'14.##.204.202':445
'14.#5.1.92':445
'14.##.19.253':445
'14.##.48.176':139
'14.##.141.60':139
'14.##.35.114':139
'14.##.195.238':445
'14.##.204.195':139
'14.##.74.191':139
'14.##.210.136':445
'14.#5.133.7':445
'14.##.120.14':445
'14.#5.35.11':445
'14.##.105.96':445
'14.##.75.186':445
'14.#5.193.3':445
'14.##.147.193':445
'14.##.25.122':445
'14.##.115.198':445
'14.##.241.81':445
'14.##.207.76':445
'14.##.19.225':139
'14.##.223.63':139
'14.##.42.223':139
'14.##.162.248':139
'14.##.77.252':139
'14.##.124.67':139
'14.##.64.124':139
'14.#5.38.79':139
'14.##.31.201':139
'14.##.150.13':139
'14.##.162.203':139
'14.##.57.112':139
'14.#5.79.57':139
'14.#5.7.151':139
'14.#5.41.8':139
'14.##.43.232':139
'14.#5.22.3':139
'14.##.208.237':139
'14.##.195.205':139
'14.#5.80.60':139
'14.##.71.209':139
'14.##.66.248':139
'14.##.147.34':139
'14.##.175.162':139
'14.#5.60.54':139
'14.#5.204.2':445
'14.#5.11.31':445
'14.##.165.184':445
'14.#5.13.58':445
'14.##.181.133':445
'14.##.177.123':445
'14.##.50.115':445
'14.#5.2.201':445
'14.##.13.163':445
'14.##.176.109':445
'14.##.52.205':445
'14.##.115.54':445
'14.#5.209.9':445
'14.#5.49.9':445
'14.##.219.159':445
'14.##.105.100':445
'14.#5.20.55':445
'14.##.191.119':445
'14.##.217.35':445
'14.##.244.215':445
'14.#5.88.90':445
'14.##.204.55':445
'14.##.117.204':445
'14.##.59.117':445
'14.#5.51.99':445
'14.##.204.202':139
'14.#5.1.92':139
'14.##.19.253':139
'14.#5.193.3':139
'14.##.147.193':139
'14.##.25.122':139
'14.##.195.238':139
'14.#5.8.209':445
'14.##.123.226':445
'14.##.28.225':139
'14.##.178.121':139
'14.##.36.172':139
'14.#5.35.11':139
'14.##.105.96':139
'14.##.75.186':139
'14.##.245.224':445
'14.#5.8.209':139
'14.##.123.226':139
'14.##.115.198':139
'14.##.241.81':139
'14.##.207.76':139
'14.##.210.136':139
'14.#5.133.7':139
'14.##.120.14':139
'14.##.105.138':445
'14.#5.6.251':445
'14.##.71.224':445
'14.#5.157.8':445
'14.#5.11.7':445
'14.#5.84.68':445
'14.##.172.36':445
'14.##.186.227':445
'14.##.79.113':445
'14.#5.64.72':445
'14.##.166.205':445
'14.##.145.35':445
'14.##.253.129':445
'14.##.144.115':445
'14.##.77.216':445
'14.##.218.226':139
'14.##.108.218':139
'14.##.67.185':445
'14.##.79.231':445
'14.#5.156.7':445
'14.##.210.52':445
'14.##.227.78':445
'14.##.168.66':445
'14.##.14.237':445
'14.##.61.133':445
'14.##.228.80':445
'14.##.62.191':445
'14.##.157.238':445
'14.#5.29.29':445
'14.##.148.187':445
'14.##.175.204':445
'14.##.86.105':445
'14.##.154.86':445
'14.##.178.117':445
'14.#5.24.59':445
'14.##.237.199':445
'14.##.105.238':445
'14.##.35.157':445
'14.##.124.35':445
'14.##.29.174':445
'14.#5.90.61':445
'14.#5.72.55':445
'14.##.156.237':445
'14.##.77.132':445
'14.##.80.188':445
'14.#5.93.61':445
'14.#5.5.7':445
'14.##.119.193':445
'14.##.119.24':445
'14.##.71.224':139
'14.#5.64.72':139
'14.##.166.205':139
'14.#5.84.68':139
'14.##.105.138':139
'14.#5.6.251':139
'14.##.79.113':139
'14.##.61.133':139
'14.#5.90.61':139
'14.##.145.35':139
'14.##.172.36':139
'14.##.186.227':139
'14.##.227.78':139
'14.##.253.129':139
'14.##.144.115':139
'14.##.77.216':139
'14.##.67.185':139
'14.##.168.66':139
'14.##.210.52':139
'14.#5.157.8':139
'14.#5.11.7':139
'14.##.14.237':139
'14.##.79.231':139
'14.#5.156.7':139
'14.#5.72.55':139
'14.##.157.238':139
'14.#5.24.59':139
'14.##.237.199':139
'14.##.175.204':139
'14.##.228.80':139
'14.##.62.191':139
'14.##.178.117':139
'14.#5.14.37':139
'14.#5.7.84':139
'14.##.105.238':139
'14.##.86.105':139
'14.##.154.86':139
'14.##.29.174':139
'14.#5.5.7':139
'14.##.119.193':139
'14.##.156.237':139
'14.##.35.157':139
'14.##.124.35':139
'14.#5.93.61':139
'14.#5.29.29':139
'14.##.148.187':139
'14.##.119.24':139
'14.##.77.132':139
'14.##.80.188':139
'14.##.139.229':139
'14.##.99.144':139
'14.#5.99.66':139
'14.##.108.104':139
'14.#5.7.18':139
'14.##.162.83':139
'14.##.193.149':139
'14.#5.8.120':139
'14.##.27.160':139
'14.##.221.170':139
'14.#5.39.33':139
'14.##.149.172':139
'14.##.253.74':445
'14.##.45.253':445
'14.##.221.208':445
'14.#5.139.6':445
'14.##.37.124':445
'14.#5.74.37':445
'14.#5.89.66':445
'14.##.169.206':445
'14.##.218.55':139
'14.#5.13.51':445
'14.##.91.122':445
'14.##.246.77':445
'14.##.72.200':139
'14.#5.6.193':139
'14.##.218.55':445
'14.##.108.104':445
'14.##.183.141':139
'14.##.159.36':139
'14.##.225.158':139
'14.##.99.144':445
'14.#5.99.66':445
'14.##.221.170':445
'14.#5.7.18':445
'14.##.162.83':445
'14.##.139.229':445
'14.##.157.142':139
'14.##.146.20':139
'14.##.127.96':139
'14.#5.32.40':139
'14.#5.185.3':139
'14.##.187.202':139
'14.##.19.167':139
'14.##.241.221':139
'14.#5.13.74':139
'14.#5.78.66':139
'14.#5.53.7':139
'14.##.162.29':139
'14.##.175.204':9988
'14.##.86.105':9988
'14.#5.14.37':9988
'14.#5.90.61':9988
'14.##.29.174':9988
'14.##.77.132':9988
'14.#5.245.5':139
'14.#5.40.38':139
'14.##.110.121':139
'14.##.165.108':139
'14.##.110.198':139
'14.##.116.55':139
'14.##.108.218':445
'14.##.79.231':9988
'14.#5.11.7':9988
'14.#5.14.37':445
'14.#5.7.84':445
'14.##.218.226':445
'14.#5.64.72':9988
'14.##.61.133':9988
'14.##.79.113':9988
'14.#5.84.68':9988
'14.##.105.138':9988
'14.##.71.224':9988
'14.##.117.110':139
'14.##.110.198':445
'14.##.116.55':445
'14.#5.245.5':445
'14.#5.89.66':139
'14.##.169.206':139
'14.##.165.108':445
'14.##.152.117':445
'14.##.153.120':445
'14.##.221.193':445
'14.#5.40.38':445
'14.##.110.121':445
'14.##.117.110':445
'14.#5.139.6':139
'14.##.37.124':139
'14.#5.74.37':139
'14.##.152.117':139
'14.##.153.120':139
'14.##.221.193':139
'14.#5.13.51':139
'14.##.91.122':139
'14.##.246.77':139
'14.##.253.74':139
'14.##.45.253':139
'14.##.221.208':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней