Trojan.Starman.6687

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER16a5.dir00\svchost.exe.mdmp 16325836412032288

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER16a5.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##.247.102':139
'63.##.247.34':139
'63.##.179.234':139
'63.##.89.237':139
'63.##.82.215':139
'63.##.103.183':139
'63.##.62.196':139
'63.##.155.244':139
'63.##.78.130':139
'63.##.34.231':139
'63.#1.49.14':139
'63.##.242.136':139
'63.##.93.112':139
'63.##.20.101':139
'63.##.167.155':139
'63.##.220.19':139
'63.##.35.220':139
'63.##.105.36':139
'63.##.14.221':139
'63.##.73.104':139
'63.##.204.24':139
'63.##.166.210':139
'63.##.104.157':139
'63.##.26.134':139
'63.##.16.239':445
'63.##.121.237':445
'63.##.43.206':445
'63.##.160.80':445
'63.#1.49.56':445
'63.##.37.163':445
'63.#1.7.112':445
'63.#1.4.113':445
'63.##.236.221':445
'63.##.199.154':445
'63.##.118.167':445
'63.##.174.193':445
'63.##.190.99':445
'63.##.218.220':445
'63.##.136.78':445
'63.##.214.69':445
'63.#1.29.74':445
'63.##.189.93':445
'63.##.90.180':445
'63.#1.6.248':445
'63.##.218.213':445
'63.##.67.246':445
'63.##.217.186':445
'63.##.119.58':445
'63.##.140.185':445
'63.##.23.154':445
'63.##.27.130':445
'63.##.50.201':445
'63.#1.0.213':445
'63.#1.80.34':445
'63.##.214.69':139
'63.#1.29.74':139
'63.##.189.93':139
'63.##.114.177':445
'63.##.48.114':445
'63.##.200.48':445
'63.##.88.184':445
'63.##.183.188':445
'63.##.110.234':445
'63.#1.79.25':445
'63.##.236.75':445
'63.##.230.197':445
'63.##.188.185':445
'63.##.191.251':445
'63.#1.40.23':445
'63.##.192.64':445
'63.#1.4.91':445
'63.##.243.222':445
'63.##.199.154':139
'63.##.118.167':139
'63.##.174.193':139
'63.##.16.239':139
'63.##.121.237':139
'63.##.43.206':139
'63.##.80.162':139
'63.#1.44.80':139
'63.#1.19.45':139
'63.#1.7.112':139
'63.#1.4.113':139
'63.##.236.221':139
'63.##.67.246':139
'63.##.217.186':139
'63.##.119.58':139
'63.##.190.99':139
'63.##.218.220':139
'63.##.136.78':139
'63.##.160.80':139
'63.#1.49.56':139
'63.##.37.163':139
'63.##.90.180':139
'63.#1.6.248':139
'63.##.218.213':139
'63.##.80.162':445
'63.##.88.221':139
'63.##.243.49':139
'63.##.90.238':139
'63.##.238.96':139
'63.#1.24.83':139
'63.##.180.213':139
'63.##.196.225':139
'63.##.182.196':139
'63.##.102.50':139
'63.#1.21.7':139
'63.##.254.205':139
'63.##.103.238':139
'63.##.129.70':139
'63.#1.2.100':139
'63.##.119.15':139
'63.##.133.102':139
'63.##.136.238':139
'63.##.70.242':139
'63.##.59.139':139
'63.#1.45.72':139
'63.#1.8.245':139
'63.##.118.245':139
'63.#1.145.1':139
'63.##.129.209':139
'63.##.38.244':445
'63.##.84.107':445
'63.##.157.90':445
'63.#1.2.35':445
'63.##.69.207':445
'63.#1.1.134':445
'63.##.88.203':445
'63.#1.3.59':445
'63.#1.25.13':445
'63.##.109.30':445
'63.##.156.121':445
'63.##.207.227':445
'63.##.135.152':139
'63.##.78.172':139
'63.##.64.221':445
'63.##.33.253':139
'63.##.219.34':139
'63.##.152.219':139
'63.##.44.142':445
'63.##.159.154':445
'63.##.217.240':445
'63.#1.34.65':445
'63.##.129.242':445
'63.#1.86.90':445
'63.##.82.215':445
'63.##.103.183':445
'63.##.247.102':445
'63.##.73.104':445
'63.##.204.24':445
'63.##.89.237':445
'63.#1.49.14':445
'63.##.242.136':445
'63.##.62.196':445
'63.##.247.34':445
'63.##.179.234':445
'63.##.34.231':445
'63.##.35.220':445
'63.##.105.36':445
'63.##.93.112':445
'63.#1.44.80':445
'63.#1.19.45':445
'63.##.220.19':445
'63.##.26.134':445
'63.##.104.157':445
'63.##.14.221':445
'63.##.20.101':445
'63.##.167.155':445
'63.##.166.210':445
'63.##.109.30':139
'63.##.156.121':139
'63.##.207.227':139
'63.##.38.244':139
'63.##.84.107':139
'63.##.157.90':139
'63.#1.93.16':139
'63.##.135.208':139
'63.##.137.45':139
'63.##.88.203':139
'63.#1.3.59':139
'63.#1.25.13':139
'63.#1.34.65':139
'63.##.129.242':139
'63.#1.86.90':139
'63.##.155.244':445
'63.##.78.130':445
'63.##.64.221':139
'63.#1.2.35':139
'63.##.69.207':139
'63.#1.1.134':139
'63.##.44.142':139
'63.##.159.154':139
'63.##.217.240':139
'63.##.236.215':445
'63.#1.91.29':445
'63.##.251.113':445
'63.#1.95.64':445
'63.##.227.128':445
'63.##.129.13':445
'63.##.57.227':445
'63.##.43.222':445
'63.##.140.119':445
'63.##.234.52':445
'63.##.148.208':445
'63.##.45.221':445
'63.##.60.238':445
'63.##.182.240':445
'63.##.74.156':445
'63.##.145.54':445
'63.##.117.20':139
'63.#1.120.0':139
'63.##.160.119':139
'63.#1.201.3':445
'63.#1.4.52':445
'63.##.123.34':445
'63.##.220.152':445
'63.##.183.123':445
'63.##.40.249':445
'63.##.198.40':445
'63.##.51.205':445
'63.#1.13.13':445
'63.#1.33.55':445
'63.#1.89.71':445
'63.#1.13.45':445
'63.##.199.89':445
'63.##.180.134':445
'63.##.185.180':445
'63.##.202.36':445
'63.##.72.202':445
'63.##.50.237':445
'63.##.243.81':445
'63.##.98.216':445
'63.##.216.71':445
'63.#1.63.25':445
'63.#1.0.48':445
'63.##.228.172':445
'63.##.134.186':445
'63.##.46.127':445
'63.##.40.164':445
'63.##.90.147':445
'63.#1.48.16':445
'63.##.127.217':445
'63.##.148.208':139
'63.##.45.221':139
'63.##.60.238':139
'63.##.251.113':139
'63.#1.91.29':139
'63.#1.95.64':139
'63.#1.63.25':139
'63.#1.0.48':139
'63.##.228.172':139
'63.##.43.222':139
'63.##.140.119':139
'63.##.234.52':139
'63.##.220.152':139
'63.#1.4.52':139
'63.##.182.240':139
'63.##.40.249':139
'63.#1.201.3':139
'63.##.74.156':139
'63.##.129.13':139
'63.##.227.128':139
'63.##.57.227':139
'63.##.145.54':139
'63.##.183.123':139
'63.##.123.34':139
'63.##.202.36':139
'63.##.72.202':139
'63.##.50.237':139
'63.##.198.40':139
'63.##.51.205':139
'63.#1.13.13':139
'63.##.115.153':139
'63.##.205.253':139
'63.##.104.64':139
'63.##.199.89':139
'63.##.180.134':139
'63.##.185.180':139
'63.##.90.147':139
'63.#1.48.16':139
'63.##.134.186':139
'63.##.243.81':139
'63.##.98.216':139
'63.##.216.71':139
'63.#1.33.55':139
'63.#1.89.71':139
'63.#1.13.45':139
'63.##.127.217':139
'63.##.46.127':139
'63.##.40.164':139
'63.##.115.153':445
'63.##.27.130':139
'63.##.114.177':139
'63.##.48.114':139
'63.#1.80.34':139
'63.##.140.185':139
'63.##.23.154':139
'63.##.60.129':445
'63.##.184.120':445
'63.#1.92.20':445
'63.##.200.48':139
'63.##.126.160':445
'63.##.191.129':445
'63.##.110.234':139
'63.##.192.64':139
'63.#1.4.91':139
'63.##.230.197':139
'63.##.183.188':139
'63.##.88.184':139
'63.#1.40.23':139
'63.##.50.201':139
'63.#1.0.213':139
'63.##.243.222':139
'63.##.188.185':139
'63.##.191.251':139
'63.##.120.211':445
'63.##.138.151':445
'63.#1.73.17':445
'63.##.16.111':445
'63.##.144.72':445
'63.#1.60.80':445
'63.##.209.35':445
'63.##.179.235':445
'63.##.118.131':445
'63.##.151.61':445
'63.##.131.219':445
'63.##.238.237':445
'63.##.37.243':445
'63.#1.7.38':445
'63.##.134.209':445
'63.##.137.222':445
'63.##.132.137':445
'63.##.242.131':445
'63.##.193.174':445
'63.##.60.213':445
'63.##.188.16':445
'63.##.107.172':445
'63.##.221.184':445
'63.##.174.221':445
'63.##.51.205':9988
'63.##.126.160':139
'63.##.191.129':139
'63.##.127.217':9988
'63.##.46.127':9988
'63.##.40.164':9988
'63.##.137.222':139
'63.##.132.137':139
'63.##.242.131':139
'63.##.60.129':139
'63.##.184.120':139
'63.#1.92.20':139
'63.#1.120.0':445
'63.##.160.119':445
'63.#1.201.3':9988
'63.##.205.253':445
'63.##.104.64':445
'63.##.117.20':445
'63.##.45.221':9988
'63.##.140.119':9988
'63.#1.48.16':9988
'63.##.227.128':9988
'63.##.123.34':9988
'63.##.182.240':9988
'63.##.151.61':139
'63.##.131.219':139
'63.##.238.237':139
'63.##.120.211':139
'63.##.138.151':139
'63.#1.73.17':139
'63.##.236.215':139
'63.#1.79.25':139
'63.##.236.75':139
'63.##.209.35':139
'63.##.179.235':139
'63.##.118.131':139
'63.##.107.172':139
'63.##.221.184':139
'63.##.174.221':139
'63.##.37.243':139
'63.#1.7.38':139
'63.##.134.209':139
'63.##.16.111':139
'63.##.144.72':139
'63.#1.60.80':139
'63.##.193.174':139
'63.##.60.213':139
'63.##.188.16':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней