Trojan.Starman.5964

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERa65e.dir00\svchost.exe.mdmp 16325836412032200

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERa65e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#29.2.245':139
'20#.#29.200.167':139
'20#.#29.12.112':139
'20#.#29.60.237':139
'20#.#29.247.99':139
'20#.#29.116.200':139
'20#.#29.152.166':139
'20#.#29.28.203':139
'20#.#29.71.107':139
'20#.#29.41.117':139
'20#.#29.107.41':139
'20#.#29.28.122':139
'20#.#29.141.191':139
'20#.#29.18.86':139
'20#.#29.215.120':139
'20#.#29.167.107':139
'20#.#29.41.54':139
'20#.#29.4.215':139
'20#.#29.187.48':139
'20#.#29.36.63':139
'20#.#29.66.8':139
'20#.#29.86.66':139
'20#.#29.251.168':445
'20#.#29.97.82':445
'20#.#29.240.24':445
'20#.#29.52.98':445
'20#.#29.25.142':445
'20#.#29.114.183':445
'20#.#29.167.107':445
'20#.#29.18.86':445
'20#.#29.215.120':445
'20#.#29.36.172':445
'20#.#29.166.42':445
'20#.#29.210.15':139
'20#.#29.107.9':139
'20#.#29.118.198':139
'20#.#29.117.88':139
'20#.#29.106.117':139
'20#.#29.182.97':139
'20#.#29.131.229':445
'20#.#29.38.8':445
'20#.#29.2.39':445
'20#.#29.74.73':139
'20#.#29.106.145':139
'20#.#29.25.136':139
'20#.#29.186.60':139
'20#.#29.158.90':139
'20#.#29.71.227':445
'20#.#29.247.213':445
'20#.#29.47.6':139
'20#.#29.255.179':139
'20#.#29.12.234':139
'20#.#29.3.19':139
'20#.#29.211.46':139
'20#.#29.32.106':139
'20#.#29.23.178':445
'20#.#29.190.233':445
'20#.#29.212.88':445
'20#.#29.207.141':445
'20#.#29.39.244':445
'20#.#29.97.169':445
'20#.#29.36.119':445
'20#.#29.227.35':445
'20#.#29.61.217':445
'20#.#29.30.188':445
'20#.#29.118.131':445
'20#.#29.52.98':139
'20#.#29.25.142':139
'20#.#29.38.8':139
'20#.#29.2.39':139
'20#.#29.131.229':139
'20#.#29.240.24':139
'20#.#29.36.172':139
'20#.#29.166.42':139
'20#.#29.114.183':139
'20#.#29.251.168':139
'20#.#29.97.82':139
'20#.#29.186.60':445
'20#.#29.47.6':445
'20#.#29.25.136':445
'20#.#29.71.249':139
'20#.#29.158.90':445
'20#.#29.211.46':445
'20#.#29.12.234':445
'20#.#29.71.249':445
'20#.#29.255.179':445
'20#.#29.32.106':445
'20#.#29.3.19':445
'20#.#29.174.68':139
'20#.#29.242.173':139
'20#.#29.159.226':139
'20#.#29.77.97':139
'20#.#29.26.149':139
'20#.#29.187.242':139
'20#.#29.21.127':139
'20#.#29.241.243':139
'20#.#29.53.179':139
'20#.#29.81.45':139
'20#.#29.198.56':139
'20#.#29.41.209':139
'20#.#29.122.140':139
'20#.#29.1.228':445
'20#.#29.132.144':445
'20#.#29.227.132':445
'20#.#29.12.182':139
'20#.#29.11.172':139
'20#.#29.188.191':139
'20#.#29.86.129':139
'20#.#29.234.152':139
'20#.#29.203.197':139
'20#.#29.252.1':139
'20#.#29.116.113':139
'20#.#29.118.230':139
'20#.#29.225.238':139
'20#.#29.192.1':139
'20#.#29.81.0':139
'20#.#29.182.60':139
'20#.#29.7.26':139
'20#.#29.69.240':139
'20#.#29.249.177':139
'20#.#29.208.249':139
'20#.#29.126.216':139
'20#.#29.111.216':139
'20#.#29.216.209':139
'20#.#29.119.185':139
'20#.#29.210.119':139
'20#.#29.38.199':139
'20#.#29.46.91':139
'20#.#29.239.46':139
'20#.#29.91.160':139
'20#.#29.251.38':139
'20#.#29.185.203':139
'20#.#29.41.117':445
'20#.#29.107.41':445
'20#.#29.116.200':445
'20#.#29.2.245':445
'20#.#29.200.167':445
'20#.#29.71.107':445
'20#.#29.106.117':445
'20#.#29.118.198':445
'20#.#29.117.88':445
'20#.#29.152.166':445
'20#.#29.28.203':445
'20#.#29.66.8':445
'20#.#29.86.66':445
'20#.#29.41.54':445
'20#.#29.28.122':445
'20#.#29.141.191':445
'20#.#29.36.63':445
'20#.#29.247.99':445
'20#.#29.12.112':445
'20#.#29.60.237':445
'20#.#29.4.215':445
'20#.#29.187.48':445
'20#.#29.1.228':139
'20#.#29.199.167':445
'20#.#29.227.132':139
'20#.#29.144.167':139
'20#.#29.132.144':139
'20#.#29.243.44':445
'20#.#29.168.107':445
'20#.#29.144.167':445
'20#.#29.66.124':445
'20#.#29.86.243':445
'20#.#29.187.41':445
'20#.#29.74.73':445
'20#.#29.106.145':445
'20#.#29.182.97':445
'20#.#29.210.15':445
'20#.#29.107.9':445
'20#.#29.199.167':139
'20#.#29.66.124':139
'20#.#29.168.107':139
'20#.#29.187.41':139
'20#.#29.243.44':139
'20#.#29.86.243':139
'20#.#29.141.74':445
'20#.#29.235.41':445
'20#.#29.135.48':445
'20#.#29.81.150':445
'20#.#29.33.45':445
'20#.#29.255.119':445
'20#.#29.30.68':445
'20#.#29.244.55':445
'20#.#29.130.254':445
'20#.#29.245.126':445
'20#.#29.78.28':445
'20#.#29.252.114':139
'20#.#29.155.251':139
'20#.#29.135.77':139
'20#.#29.69.6':139
'20#.#29.52.243':139
'20#.#29.96.224':139
'20#.#29.157.94':445
'20#.#29.139.104':445
'20#.#29.3.34':445
'20#.#29.40.89':139
'20#.#29.110.52':445
'20#.#29.243.5':445
'20#.#29.91.52':445
'20#.#29.242.80':445
'20#.#29.136.98':445
'20#.#29.69.99':445
'20#.#29.103.10':445
'20#.#29.68.188':445
'20#.#29.84.210':445
'20#.#29.111.162':445
'20#.#29.174.60':445
'20#.#29.149.221':445
'20#.#29.117.242':445
'20#.#29.158.35':445
'20#.#29.64.197':445
'20#.#29.2.213':445
'20#.#29.15.168':445
'20#.#29.200.20':445
'20#.#29.99.41':445
'20#.#29.68.136':445
'20#.#29.42.33':445
'20#.#29.4.80':445
'20#.#29.33.26':445
'20#.#29.244.55':139
'20#.#29.2.213':139
'20#.#29.30.68':139
'20#.#29.78.28':139
'20#.#29.130.254':139
'20#.#29.15.168':139
'20#.#29.200.20':139
'20#.#29.4.80':139
'20#.#29.158.35':139
'20#.#29.64.197':139
'20#.#29.117.242':139
'20#.#29.33.45':139
'20#.#29.81.150':139
'20#.#29.110.52':139
'20#.#29.135.48':139
'20#.#29.157.94':139
'20#.#29.3.34':139
'20#.#29.255.119':139
'20#.#29.245.126':139
'20#.#29.235.41':139
'20#.#29.139.104':139
'20#.#29.141.74':139
'20#.#29.84.210':139
'20#.#29.222.84':139
'20#.#29.68.188':139
'20#.#29.149.221':139
'20#.#29.111.162':139
'20#.#29.73.222':139
'20#.#29.129.53':139
'20#.#29.163.112':139
'20#.#29.49.234':139
'20#.#29.80.240':139
'20#.#29.225.44':139
'20#.#29.136.98':139
'20#.#29.68.136':139
'20#.#29.99.41':139
'20#.#29.33.26':139
'20#.#29.42.33':139
'20#.#29.69.99':139
'20#.#29.103.10':139
'20#.#29.174.60':139
'20#.#29.91.52':139
'20#.#29.242.80':139
'20#.#29.243.5':139
'20#.#29.71.227':139
'20#.#29.247.213':139
'20#.#29.227.35':139
'20#.#29.61.217':139
'20#.#29.36.119':139
'20#.#29.68.108':445
'20#.#29.231.225':445
'20#.#29.93.8':445
'20#.#29.229.19':445
'20#.#29.253.219':445
'20#.#29.19.253':445
'20#.#29.207.141':139
'20#.#29.39.244':139
'20#.#29.249.136':139
'20#.#29.106.171':139
'20#.#29.156.207':139
'20#.#29.212.88':139
'20#.#29.30.188':139
'20#.#29.118.131':139
'20#.#29.97.169':139
'20#.#29.23.178':139
'20#.#29.190.233':139
'20#.#29.62.157':445
'20#.#29.201.86':445
'20#.#29.144.59':445
'20#.#29.137.29':445
'20#.#29.158.202':445
'20#.#29.150.131':445
'20#.#29.156.207':445
'20#.#29.249.136':445
'20#.#29.106.171':445
'20#.#29.240.149':445
'20#.#29.229.239':445
'20#.#29.187.2':445
'20#.#29.2.110':445
'20#.#29.111.149':445
'20#.#29.167.96':445
'20#.#29.203.61':445
'20#.#29.42.116':445
'20#.#29.65.238':445
'20#.#29.29.137':445
'20#.#29.64.128':445
'20#.#29.206.241':445
'20#.#29.227.86':445
'20#.#29.33.45':9988
'20#.#29.99.41':9988
'20#.#29.40.89':445
'20#.#29.155.251':445
'20#.#29.96.224':445
'20#.#29.157.94':9988
'20#.#29.253.219':139
'20#.#29.19.253':139
'20#.#29.68.108':139
'20#.#29.225.44':9988
'20#.#29.96.224':9988
'20#.#29.225.44':445
'20#.#29.49.234':445
'20#.#29.73.222':445
'20#.#29.222.84':445
'20#.#29.80.240':445
'20#.#29.163.112':445
'20#.#29.135.77':445
'20#.#29.252.114':445
'20#.#29.52.243':445
'20#.#29.129.53':445
'20#.#29.69.6':445
'20#.#29.137.29':139
'20#.#29.158.202':139
'20#.#29.29.137':139
'20#.#29.64.128':139
'20#.#29.65.238':139
'20#.#29.144.59':139
'20#.#29.240.149':139
'20#.#29.229.239':139
'20#.#29.150.131':139
'20#.#29.62.157':139
'20#.#29.201.86':139
'20#.#29.167.96':139
'20#.#29.203.61':139
'20#.#29.93.8':139
'20#.#29.229.19':139
'20#.#29.231.225':139
'20#.#29.111.149':139
'20#.#29.206.241':139
'20#.#29.227.86':139
'20#.#29.42.116':139
'20#.#29.187.2':139
'20#.#29.2.110':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней