Trojan.Starman.5072

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERd8bd.dir00\svchost.exe.mdmp 16325836412032404

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.##.15.188':445
'80.#1.32.24':445
'80.##.221.213':445
'80.#1.77.16':445
'80.#1.23.51':445
'80.##.213.21':445
'80.##.188.212':445
'80.##.146.150':139
'80.#1.92.52':139
'80.#1.4.241':139
'80.##.224.189':139
'80.##.222.100':139
'80.##.127.75':139
'80.##.56.197':139
'80.##.203.117':445
'80.##.212.74':445
'80.##.155.14':445
'80.##.88.186':445
'80.##.163.203':445
'80.##.82.227':445
'80.##.238.82':445
'80.##.80.238':445
'80.##.229.126':445
'80.##.254.197':445
'80.##.185.195':445
'80.##.137.182':445
'80.##.12.248':445
'80.##.212.41':445
'80.##.41.164':445
'80.##.18.119':139
'80.#1.39.58':139
'80.##.108.39':139
'80.#1.51.31':139
'80.#1.42.31':139
'80.##.120.117':139
'80.##.231.46':139
'80.##.147.253':139
'80.#1.73.49':139
'80.#1.46.40':139
'80.##.56.207':139
'80.##.202.107':139
'80.##.208.250':139
'80.##.20.253':139
'80.#1.91.38':139
'80.##.16.192':139
'80.##.181.243':139
'80.##.253.218':139
'80.#1.69.53':139
'80.#1.65.92':139
'80.#1.69.65':139
'80.##.161.68':139
'80.##.252.191':139
'80.##.188.252':139
'80.##.234.223':139
'80.##.145.223':139
'80.##.51.157':139
'80.##.137.94':139
'80.#1.59.86':139
'80.#1.92.14':445
'80.##.229.126':139
'80.##.185.195':139
'80.##.254.197':139
'80.##.137.182':139
'80.##.12.248':139
'80.##.212.41':139
'80.##.41.164':139
'80.##.15.188':139
'80.#1.77.16':139
'80.#1.32.24':139
'80.##.188.212':139
'80.##.203.117':139
'80.#1.23.51':139
'80.##.213.21':139
'80.##.88.186':139
'80.#1.25.56':139
'80.#1.87.6':139
'80.#1.34.87':139
'80.##.195.54':139
'80.##.180.31':139
'80.#1.146.1':139
'80.##.54.227':139
'80.##.163.203':139
'80.##.212.74':139
'80.##.155.14':139
'80.##.80.238':139
'80.#1.92.14':139
'80.##.82.227':139
'80.##.238.82':139
'80.##.37.101':445
'80.#1.76.51':445
'80.##.230.188':445
'80.##.101.37':445
'80.##.203.42':445
'80.#1.45.7':445
'80.##.37.119':445
'80.#1.25.56':445
'80.#1.87.6':445
'80.#1.34.87':445
'80.##.195.54':445
'80.##.180.31':445
'80.#1.146.1':445
'80.##.54.227':445
'80.#1.55.50':445
'80.##.159.93':445
'80.##.22.237':445
'80.##.71.196':445
'80.##.46.116':445
'80.##.221.213':139
'80.##.12.199':445
'80.#1.179.5':445
'80.##.162.75':445
'80.##.141.162':445
'80.#1.8.214':445
'80.##.178.168':445
'80.##.102.13':445
'80.#1.26.87':445
'80.##.23.163':445
'80.##.87.138':139
'80.#1.61.13':139
'80.#1.59.61':139
'80.##.170.145':139
'80.##.60.136':139
'80.##.168.81':139
'80.##.205.121':139
'80.##.156.119':139
'80.##.241.18':139
'80.#1.16.89':139
'80.##.137.48':139
'80.##.233.58':139
'80.##.11.233':139
'80.##.216.193':139
'80.##.142.51':139
'80.##.147.60':445
'80.#1.27.8':445
'80.##.136.49':445
'80.##.110.10':445
'80.##.254.47':445
'80.##.83.147':445
'80.##.31.106':445
'80.#1.18.6':139
'80.#1.7.213':139
'80.#1.153.7':139
'80.##.221.181':139
'80.#1.23.25':139
'80.#1.64.23':139
'80.##.129.75':139
'80.##.130.127':139
'80.#1.52.6':139
'80.##.142.254':139
'80.#1.64.81':139
'80.#1.49.75':139
'80.##.101.234':139
'80.##.243.44':139
'80.#1.1.108':139
'80.##.113.100':139
'80.##.172.41':139
'80.#1.8.16':139
'80.##.44.249':139
'80.##.204.222':139
'80.#1.16.3':139
'80.##.163.13':139
'80.##.211.10':139
'80.##.215.210':139
'80.##.213.44':139
'80.##.202.152':139
'80.##.110.239':139
'80.#1.56.34':139
'80.##.27.249':139
'80.#1.143.0':139
'80.##.192.115':139
'80.##.63.129':139
'80.##.233.189':139
'80.##.113.119':139
'80.##.21.238':139
'80.##.250.167':139
'80.##.59.252':445
'80.##.146.150':445
'80.#1.92.52':445
'80.#1.4.241':445
'80.##.224.189':445
'80.##.222.100':445
'80.##.127.75':445
'80.##.56.197':445
'80.##.16.192':445
'80.##.181.243':445
'80.##.253.218':445
'80.#1.69.53':445
'80.#1.65.92':445
'80.#1.69.65':445
'80.##.161.68':445
'80.##.136.49':139
'80.##.93.124':139
'80.##.155.114':139
'80.##.155.155':139
'80.#1.220.8':139
'80.##.248.10':139
'80.##.90.210':139
'80.#1.9.91':139
'80.##.110.10':139
'80.##.147.60':139
'80.#1.27.8':139
'80.##.31.106':139
'80.##.59.252':139
'80.##.254.47':139
'80.##.83.147':139
'80.##.147.253':445
'80.#1.73.49':445
'80.#1.46.40':445
'80.##.56.207':445
'80.##.202.107':445
'80.##.208.250':445
'80.##.20.253':445
'80.##.93.124':445
'80.##.155.114':445
'80.##.155.155':445
'80.#1.220.8':445
'80.##.248.10':445
'80.##.90.210':445
'80.#1.9.91':445
'80.##.108.39':445
'80.##.252.191':445
'80.##.188.252':445
'80.##.234.223':445
'80.##.145.223':445
'80.##.51.157':445
'80.##.137.94':445
'80.#1.59.86':445
'80.#1.51.31':445
'80.##.18.119':445
'80.#1.39.58':445
'80.##.231.46':445
'80.#1.91.38':445
'80.#1.42.31':445
'80.##.120.117':445
'80.##.230.188':139
'80.##.55.116':445
'80.#1.11.89':445
'80.#1.92.30':445
'80.##.200.31':445
'80.##.190.159':445
'80.##.130.50':445
'80.##.31.151':445
'80.#1.36.3':445
'80.##.253.33':445
'80.##.178.252':445
'80.##.163.40':445
'80.##.41.189':445
'80.##.126.100':445
'80.##.211.168':445
'80.##.172.188':445
'80.##.197.51':445
'80.##.229.219':445
'80.##.38.230':445
'80.##.198.164':445
'80.##.207.20':445
'80.##.241.206':445
'80.##.92.110':445
'80.#1.84.45':445
'80.##.95.176':445
'80.##.188.23':445
'80.##.141.181':445
'80.##.135.39':445
'80.##.92.135':445
'80.##.140.179':445
'80.##.163.40':9988
'80.##.253.33':9988
'80.##.178.252':9988
'80.##.126.100':9988
'80.##.158.66':9988
'80.##.207.20':9988
'80.##.130.50':9988
'80.#1.99.34':139
'80.#1.38.82':139
'80.##.223.38':139
'80.##.170.84':139
'80.##.247.31':9988
'80.##.190.247':9988
'80.#1.48.35':139
'80.##.147.254':9988
'80.##.191.158':445
'80.##.79.198':445
'80.##.219.79':445
'80.##.135.89':445
'80.##.216.117':445
'80.##.62.166':445
'80.##.118.204':445
'80.##.21.111':445
'80.##.129.199':445
'80.##.32.116':445
'80.##.190.247':445
'80.##.110.119':445
'80.#1.32.94':445
'80.##.247.31':445
'80.##.158.66':445
'80.#1.84.45':139
'80.##.95.176':139
'80.##.188.23':139
'80.##.141.181':139
'80.##.135.39':139
'80.##.92.135':139
'80.##.140.179':139
'80.##.200.31':139
'80.##.55.116':139
'80.#1.11.89':139
'80.##.31.151':139
'80.##.172.188':139
'80.##.190.159':139
'80.##.130.50':139
'80.##.38.230':139
'80.##.255.73':139
'80.##.194.72':139
'80.#1.39.92':139
'80.##.28.239':139
'80.##.27.156':139
'80.##.147.254':139
'80.##.68.215':139
'80.##.198.164':139
'80.##.197.51':139
'80.##.229.219':139
'80.##.92.110':139
'80.##.158.66':139
'80.##.207.20':139
'80.##.241.206':139
'80.##.21.111':139
'80.##.129.199':139
'80.##.32.116':139
'80.##.190.247':139
'80.##.110.119':139
'80.#1.32.94':139
'80.##.247.31':139
'80.##.255.73':445
'80.##.194.72':445
'80.#1.39.92':445
'80.##.28.239':445
'80.##.27.156':445
'80.##.147.254':445
'80.##.68.215':445
'80.##.219.79':139
'80.##.163.40':139
'80.#1.36.3':139
'80.##.253.33':139
'80.##.211.168':139
'80.#1.92.30':139
'80.##.41.189':139
'80.##.126.100':139
'80.##.135.89':139
'80.##.191.158':139
'80.##.79.198':139
'80.##.118.204':139
'80.##.178.252':139
'80.##.216.117':139
'80.##.62.166':139
'80.##.71.137':445
'80.##.146.17':445
'80.##.41.182':445
'80.#1.96.7':445
'80.##.34.218':445
'80.##.188.121':445
'80.##.137.123':445
'80.#1.191.6':445
'80.##.196.126':445
'80.##.63.199':445
'80.##.237.246':445
'80.#1.9.249':445
'80.##.251.148':445
'80.##.197.250':445
'80.##.41.100':445
'80.##.103.142':445
'80.##.219.69':445
'80.##.69.226':445
'80.#1.226.2':445
'80.##.53.151':445
'80.##.17.208':445
'80.#1.2.201':445
'80.#1.81.57':445
'80.#1.40.91':445
'80.#1.5.153':445
'80.##.56.253':445
'80.#1.226.6':445
'80.##.247.225':445
'80.##.115.41':445
'80.##.162.75':139
'80.##.141.162':139
'80.#1.8.214':139
'80.##.178.168':139
'80.##.102.13':139
'80.#1.26.87':139
'80.##.23.163':139
'80.##.101.37':139
'80.##.37.101':139
'80.#1.76.51':139
'80.##.37.119':139
'80.#1.55.50':139
'80.##.203.42':139
'80.#1.45.7':139
'80.##.71.196':139
'80.#1.7.217':445
'80.##.215.125':445
'80.#1.13.0':445
'80.##.217.71':445
'80.#1.4.152':445
'80.##.159.167':445
'80.##.64.116':445
'80.##.46.116':139
'80.##.159.93':139
'80.##.22.237':139
'80.#1.179.5':139
'80.##.115.177':445
'80.#1.31.11':445
'80.##.12.199':139
'80.#1.30.51':445
'80.#1.81.57':139
'80.#1.40.91':139
'80.#1.5.153':139
'80.##.56.253':139
'80.#1.226.6':139
'80.##.247.225':139
'80.##.115.41':139
'80.##.137.123':139
'80.##.71.137':139
'80.##.41.182':139
'80.#1.96.7':139
'80.##.41.100':139
'80.##.34.218':139
'80.##.188.121':139
'80.##.103.142':139
'80.##.139.254':139
'80.#1.30.51':139
'80.##.80.119':139
'80.##.104.240':139
'80.##.183.217':139
'80.##.162.177':139
'80.##.208.184':139
'80.#1.226.2':139
'80.##.69.226':139
'80.##.219.69':139
'80.#1.2.201':139
'80.##.14.149':139
'80.##.53.151':139
'80.##.17.208':139
'80.#1.99.34':445
'80.#1.38.82':445
'80.##.223.38':445
'80.##.170.84':445
'80.##.115.177':139
'80.#1.31.11':139
'80.#1.48.35':445
'80.##.139.254':445
'80.##.14.149':445
'80.##.80.119':445
'80.##.104.240':445
'80.##.183.217':445
'80.##.162.177':445
'80.##.208.184':445
'80.#1.13.0':139
'80.##.237.246':139
'80.#1.191.6':139
'80.##.196.126':139
'80.##.197.250':139
'80.##.146.17':139
'80.#1.9.249':139
'80.##.251.148':139
'80.##.217.71':139
'80.#1.7.217':139
'80.##.215.125':139
'80.##.64.116':139
'80.##.63.199':139
'80.#1.4.152':139
'80.##.159.167':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней