Trojan.Starman.5299

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERb872.dir00\svchost.exe.mdmp 16325836412029640

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERb872.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#46.34.209':445
'20#.#46.159.238':139
'20#.#46.90.214':445
'20#.#46.89.161':445
'20#.#46.164.151':445
'20#.#46.228.49':139
'20#.#46.159.238':445
'20#.#46.192.200':139
'20#.#46.151.221':139
'20#.#46.102.61':139
'20#.#46.17.238':445
'20#.#46.140.17':445
'20#.#46.238.35':445
'20#.#46.63.130':445
'20#.#46.36.63':445
'20#.#46.207.4':445
'20#.#46.52.25':445
'20#.#46.6.57':445
'20#.#46.123.140':445
'20#.#46.94.147':445
'20#.#46.197.158':139
'20#.#46.218.47':139
'20#.#46.158.117':139
'20#.#46.31.214':139
'20#.#46.38.56':139
'20#.#46.64.155':139
'20#.#46.35.11':139
'20#.#46.56.19':139
'20#.#46.103.27':139
'20#.#46.19.55':139
'20#.#46.228.49':445
'20#.#46.215.174':139
'20#.#46.192.200':445
'20#.#46.151.221':445
'20#.#46.102.61':445
'20#.#46.226.13':139
'20#.#46.166.88':139
'20#.#46.125.186':139
'20#.#46.8.130':139
'20#.#46.203.68':139
'20#.#46.240.100':445
'20#.#46.27.113':445
'20#.#46.234.85':445
'20#.#46.202.191':445
'20#.#46.217.109':445
'20#.#46.177.173':445
'20#.#46.1.99':445
'20#.#46.64.1':445
'20#.#46.158.153':445
'20#.#46.183.23':445
'20#.#46.52.25':139
'20#.#46.89.161':139
'20#.#46.207.4':139
'20#.#46.94.147':139
'20#.#46.6.57':139
'20#.#46.121.82':445
'20#.#46.73.121':445
'20#.#46.34.209':139
'20#.#46.164.151':139
'20#.#46.90.214':139
'20#.#46.21.110':445
'20#.#46.250.13':445
'20#.#46.216.215':445
'20#.#46.76.230':445
'20#.#46.216.76':445
'20#.#46.114.139':445
'20#.#46.54.10':445
'20#.#46.54.168':445
'20#.#46.233.31':445
'20#.#46.78.195':445
'20#.#46.27.7':445
'20#.#46.46.217':445
'20#.#46.210.23':445
'20#.#46.82.246':445
'20#.#46.75.107':445
'20#.#46.30.248':445
'20#.#46.229.221':445
'20#.#46.233.4':445
'20#.#46.20.246':445
'20#.#46.136.69':445
'20#.#46.82.165':139
'20#.#46.233.209':445
'20#.#46.224.137':445
'20#.#46.109.230':445
'20#.#46.4.235':445
'20#.#46.136.49':445
'20#.#46.37.59':445
'20#.#46.201.13':445
'20#.#46.25.114':445
'20#.#46.80.144':445
'20#.#46.85.241':445
'20#.#46.64.155':445
'20#.#46.35.11':445
'20#.#46.56.19':445
'20#.#46.103.27':445
'20#.#46.19.55':445
'20#.#46.129.120':445
'20#.#46.140.129':445
'20#.#46.120.229':445
'20#.#46.82.165':445
'20#.#46.21.59':445
'20#.#46.122.128':445
'20#.#46.186.11':445
'20#.#46.236.228':445
'20#.#46.198.55':445
'20#.#46.166.21':445
'20#.#46.3.102':139
'20#.#46.30.140':139
'20#.#46.183.177':139
'20#.#46.162.185':139
'20#.#46.66.159':139
'20#.#46.213.180':445
'20#.#46.90.11':445
'20#.#46.198.137':445
'20#.#46.58.201':445
'20#.#46.89.58':445
'20#.#46.74.135':445
'20#.#46.56.26':445
'20#.#46.23.184':445
'20#.#46.124.38':445
'20#.#46.225.208':445
'20#.#46.201.13':139
'20#.#46.58.201':139
'20#.#46.37.59':139
'20#.#46.85.241':139
'20#.#46.25.114':139
'20#.#46.90.11':139
'20#.#46.124.38':139
'20#.#46.213.180':139
'20#.#46.89.58':139
'20#.#46.198.137':139
'20#.#46.140.129':139
'20#.#46.4.235':139
'20#.#46.129.120':139
'20#.#46.21.59':139
'20#.#46.120.229':139
'20#.#46.224.137':139
'20#.#46.80.144':139
'20#.#46.233.209':139
'20#.#46.136.49':139
'20#.#46.109.230':139
'20#.#46.226.13':445
'20#.#46.31.214':445
'20#.#46.125.186':445
'20#.#46.8.130':445
'20#.#46.203.68':445
'20#.#46.218.47':445
'20#.#46.197.158':445
'20#.#46.158.117':445
'20#.#46.166.88':445
'20#.#46.38.56':445
'20#.#46.56.26':139
'20#.#46.198.55':139
'20#.#46.74.135':139
'20#.#46.225.208':139
'20#.#46.23.184':139
'20#.#46.186.11':139
'20#.#46.215.174':445
'20#.#46.122.128':139
'20#.#46.166.21':139
'20#.#46.236.228':139
'20#.#46.123.140':139
'20#.#46.50.31':445
'20#.#46.140.207':445
'20#.#46.60.19':445
'20#.#46.58.169':139
'20#.#46.32.173':445
'20#.#46.107.3':445
'20#.#46.105.223':445
'20#.#46.3.179':445
'20#.#46.207.179':445
'20#.#46.32.207':445
'20#.#46.21.92':139
'20#.#46.249.20':139
'20#.#46.38.227':139
'20#.#46.121.75':139
'20#.#46.176.3':139
'20#.#46.18.159':139
'20#.#46.67.211':139
'20#.#46.58.65':139
'20#.#46.164.248':139
'20#.#46.64.164':139
'20#.#46.83.10':445
'20#.#46.144.51':445
'20#.#46.176.53':445
'20#.#46.216.164':445
'20#.#46.168.216':445
'20#.#46.65.151':445
'20#.#46.36.185':445
'20#.#46.185.191':445
'20#.#46.112.27':445
'20#.#46.194.112':445
'20#.#46.104.69':445
'20#.#46.43.70':445
'20#.#46.100.144':445
'20#.#46.165.18':445
'20#.#46.230.243':445
'20#.#46.250.132':445
'20#.#46.165.113':445
'20#.#46.77.48':445
'20#.#46.204.100':445
'20#.#46.248.141':445
'20#.#46.43.70':139
'20#.#46.204.100':139
'20#.#46.104.69':139
'20#.#46.230.243':139
'20#.#46.100.144':139
'20#.#46.165.113':139
'20#.#46.216.164':139
'20#.#46.250.132':139
'20#.#46.248.141':139
'20#.#46.77.48':139
'20#.#46.32.207':139
'20#.#46.60.19':139
'20#.#46.50.31':139
'20#.#46.207.179':139
'20#.#46.32.173':139
'20#.#46.105.223':139
'20#.#46.165.18':139
'20#.#46.107.3':139
'20#.#46.140.207':139
'20#.#46.3.179':139
'20#.#46.9.11':139
'20#.#46.214.5':139
'20#.#46.159.49':139
'20#.#46.239.95':139
'20#.#46.91.235':139
'20#.#46.102.216':139
'20#.#46.175.182':139
'20#.#46.89.86':139
'20#.#46.41.92':139
'20#.#46.86.39':139
'20#.#46.144.51':139
'20#.#46.112.27':139
'20#.#46.83.10':139
'20#.#46.168.216':139
'20#.#46.176.53':139
'20#.#46.36.185':139
'20#.#46.243.212':139
'20#.#46.185.191':139
'20#.#46.194.112':139
'20#.#46.65.151':139
'20#.#46.243.212':445
'20#.#46.177.173':139
'20#.#46.1.99':139
'20#.#46.64.1':139
'20#.#46.158.153':139
'20#.#46.183.23':139
'20#.#46.27.7':139
'20#.#46.46.217':139
'20#.#46.210.23':139
'20#.#46.82.246':139
'20#.#46.75.107':139
'20#.#46.121.82':139
'20#.#46.73.121':139
'20#.#46.143.76':445
'20#.#46.2.39':445
'20#.#46.152.163':445
'20#.#46.240.100':139
'20#.#46.27.113':139
'20#.#46.234.85':139
'20#.#46.202.191':139
'20#.#46.217.109':139
'20#.#46.114.139':139
'20#.#46.54.10':139
'20#.#46.54.168':139
'20#.#46.233.31':139
'20#.#46.78.195':139
'20#.#46.17.238':139
'20#.#46.140.17':139
'20#.#46.238.35':139
'20#.#46.63.130':139
'20#.#46.36.63':139
'20#.#46.30.248':139
'20#.#46.229.221':139
'20#.#46.233.4':139
'20#.#46.20.246':139
'20#.#46.136.69':139
'20#.#46.21.110':139
'20#.#46.250.13':139
'20#.#46.216.215':139
'20#.#46.76.230':139
'20#.#46.216.76':139
'20#.#46.21.92':445
'20#.#46.249.20':445
'20#.#46.38.227':445
'20#.#46.121.75':445
'20#.#46.176.3':445
'20#.#46.18.159':445
'20#.#46.67.211':445
'20#.#46.58.65':445
'20#.#46.164.248':445
'20#.#46.64.164':445
'20#.#46.9.11':445
'20#.#46.214.5':445
'20#.#46.159.49':445
'20#.#46.239.95':445
'20#.#46.91.235':445
'20#.#46.102.216':445
'20#.#46.175.182':445
'20#.#46.89.86':445
'20#.#46.41.92':445
'20#.#46.86.39':445
'20#.#46.239.57':139
'20#.#46.215.189':139
'20#.#46.65.151':9988
'20#.#46.216.164':9988
'20#.#46.185.191':9988
'20#.#46.239.57':445
'20#.#46.215.189':445
'20#.#46.143.76':139
'20#.#46.2.39':139
'20#.#46.152.163':139
'20#.#46.50.31':9988
'20#.#46.32.173':9988
'20#.#46.32.207':9988
'20#.#46.58.169':445
'20#.#46.3.179':9988
'20#.#46.248.141':9988
'20#.#46.77.48':9988
'20#.#46.204.100':9988
'20#.#46.230.243':9988
'20#.#46.43.70':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней