Trojan.Starman.5753

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc3ec.dir00\svchost.exe.mdmp 16325836412032088

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc3ec.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#32.171.68':139
'20#.#32.250.237':139
'20#.#32.161.159':139
'20#.#32.123.253':139
'20#.#32.159.123':139
'20#.#32.151.182':139
'20#.#32.140.3':139
'20#.#32.186.8':139
'20#.#32.182.250':139
'20#.#32.8.183':139
'20#.#32.147.117':139
'20#.#32.206.105':139
'20#.#32.219.101':139
'20#.#32.127.187':139
'20#.#32.130.147':139
'20#.#32.63.131':139
'20#.#32.63.4':139
'20#.#32.153.26':139
'20#.#32.24.230':139
'20#.#32.79.137':139
'20#.#32.60.7':139
'20#.#32.18.116':139
'20#.#32.24.230':445
'20#.#32.63.4':445
'20#.#32.60.7':445
'20#.#32.219.101':445
'20#.#32.79.137':445
'20#.#32.159.123':445
'20#.#32.161.159':445
'20#.#32.123.253':445
'20#.#32.153.26':445
'20#.#32.147.117':445
'20#.#32.206.105':445
'20#.#32.100.233':139
'20#.#32.48.126':139
'20#.#32.29.78':139
'20#.#32.205.205':139
'20#.#32.105.153':139
'20#.#32.63.131':445
'20#.#32.127.187':445
'20#.#32.130.147':445
'20#.#32.98.169':139
'20#.#32.147.53':445
'20#.#32.186.221':139
'20#.#32.35.175':139
'20#.#32.93.204':139
'20#.#32.57.175':139
'20#.#32.113.4':139
'20#.#32.142.138':139
'20#.#32.67.164':445
'20#.#32.130.232':139
'20#.#32.173.19':139
'20#.#32.191.100':139
'20#.#32.4.89':139
'20#.#32.78.190':139
'20#.#32.136.230':139
'20#.#32.56.128':139
'20#.#32.102.16':139
'20#.#32.104.241':139
'20#.#32.141.231':139
'20#.#32.89.121':139
'20#.#32.137.45':139
'20#.#32.94.187':139
'20#.#32.62.22':139
'20#.#32.125.238':445
'20#.#32.186.221':445
'20#.#32.35.175':445
'20#.#32.93.204':445
'20#.#32.57.175':445
'20#.#32.113.4':445
'20#.#32.142.138':445
'20#.#32.147.53':139
'20#.#32.130.232':445
'20#.#32.173.19':445
'20#.#32.191.100':445
'20#.#32.4.89':445
'20#.#32.78.190':445
'20#.#32.136.230':445
'20#.#32.56.128':445
'20#.#32.102.16':445
'20#.#32.104.241':445
'20#.#32.141.231':445
'20#.#32.89.121':445
'20#.#32.137.45':445
'20#.#32.94.187':445
'20#.#32.62.22':445
'20#.#32.171.68':445
'20#.#32.97.253':139
'20#.#32.104.238':139
'20#.#32.82.105':445
'20#.#32.15.126':445
'20#.#32.43.34':445
'20#.#32.249.23':139
'20#.#32.55.217':139
'20#.#32.238.215':139
'20#.#32.187.162':139
'20#.#32.53.244':139
'20#.#32.201.105':445
'20#.#32.253.61':445
'20#.#32.97.178':445
'20#.#32.250.208':445
'20#.#32.113.247':445
'20#.#32.44.65':445
'20#.#32.60.123':445
'20#.#32.200.141':445
'20#.#32.153.6':445
'20#.#32.58.63':445
'20#.#32.227.82':445
'20#.#32.99.85':139
'20#.#32.219.194':139
'20#.#32.192.214':139
'20#.#32.206.191':139
'20#.#32.128.94':139
'20#.#32.254.18':139
'20#.#32.19.163':139
'20#.#32.63.194':139
'20#.#32.192.178':139
'20#.#32.191.11':139
'20#.#32.234.68':139
'20#.#32.54.64':139
'20#.#32.11.50':139
'20#.#32.58.94':139
'20#.#32.11.93':139
'20#.#32.155.248':139
'20#.#32.200.44':139
'20#.#32.160.151':139
'20#.#32.47.87':139
'20#.#32.249.106':139
'20#.#32.11.158':139
'20#.#32.131.155':139
'20#.#32.25.224':139
'20#.#32.56.187':139
'20#.#32.7.188':139
'20#.#32.48.126':445
'20#.#32.98.169':445
'20#.#32.65.200':139
'20#.#32.119.245':139
'20#.#32.82.228':139
'20#.#32.93.158':139
'20#.#32.166.145':139
'20#.#32.100.233':445
'20#.#32.186.8':445
'20#.#32.151.182':445
'20#.#32.8.183':445
'20#.#32.250.237':445
'20#.#32.182.250':445
'20#.#32.105.153':445
'20#.#32.29.78':445
'20#.#32.205.205':445
'20#.#32.140.3':445
'20#.#32.18.116':445
'20#.#32.113.247':139
'20#.#32.25.224':445
'20#.#32.56.187':445
'20#.#32.7.188':445
'20#.#32.43.34':139
'20#.#32.82.105':139
'20#.#32.65.200':445
'20#.#32.119.245':445
'20#.#32.82.228':445
'20#.#32.93.158':445
'20#.#32.166.145':445
'20#.#32.15.126':139
'20#.#32.97.178':139
'20#.#32.58.63':139
'20#.#32.253.61':139
'20#.#32.44.65':139
'20#.#32.250.208':139
'20#.#32.200.141':139
'20#.#32.201.105':139
'20#.#32.60.123':139
'20#.#32.227.82':139
'20#.#32.153.6':139
'20#.#32.102.160':445
'20#.#32.100.248':445
'20#.#32.162.94':445
'20#.#32.129.107':445
'20#.#32.121.11':445
'20#.#32.71.221':445
'20#.#32.231.71':445
'20#.#32.221.118':445
'20#.#32.170.233':445
'20#.#32.117.236':445
'20#.#32.198.74':445
'20#.#32.133.72':139
'20#.#32.82.153':139
'20#.#32.1.158':139
'20#.#32.182.227':139
'20#.#32.158.183':139
'20#.#32.226.91':445
'20#.#32.45.141':445
'20#.#32.224.5':139
'20#.#32.77.59':139
'20#.#32.83.59':139
'20#.#32.58.253':445
'20#.#32.102.28':445
'20#.#32.254.53':445
'20#.#32.215.200':445
'20#.#32.252.164':445
'20#.#32.251.25':445
'20#.#32.53.116':445
'20#.#32.15.140':445
'20#.#32.197.216':445
'20#.#32.203.115':445
'20#.#32.83.174':445
'20#.#32.164.242':445
'20#.#32.224.166':445
'20#.#32.246.223':445
'20#.#32.233.23':445
'20#.#32.51.241':445
'20#.#32.42.134':445
'20#.#32.34.30':445
'20#.#32.92.28':445
'20#.#32.150.52':445
'20#.#32.12.104':445
'20#.#32.52.49':445
'20#.#32.51.241':139
'20#.#32.42.134':139
'20#.#32.58.253':139
'20#.#32.71.221':139
'20#.#32.231.71':139
'20#.#32.12.104':139
'20#.#32.52.49':139
'20#.#32.246.223':139
'20#.#32.233.23':139
'20#.#32.224.166':139
'20#.#32.221.118':139
'20#.#32.129.107':139
'20#.#32.226.91':139
'20#.#32.45.141':139
'20#.#32.162.94':139
'20#.#32.198.74':139
'20#.#32.170.233':139
'20#.#32.117.236':139
'20#.#32.100.248':139
'20#.#32.121.11':139
'20#.#32.102.160':139
'20#.#32.150.52':139
'20#.#32.18.6':139
'20#.#32.59.27':139
'20#.#32.65.64':139
'20#.#32.53.116':139
'20#.#32.15.140':139
'20#.#32.104.244':139
'20#.#32.39.21':139
'20#.#32.26.72':139
'20#.#32.115.227':139
'20#.#32.181.115':139
'20#.#32.197.216':139
'20#.#32.252.164':139
'20#.#32.251.25':139
'20#.#32.164.242':139
'20#.#32.34.30':139
'20#.#32.92.28':139
'20#.#32.203.115':139
'20#.#32.83.174':139
'20#.#32.254.53':139
'20#.#32.215.200':139
'20#.#32.102.28':139
'20#.#32.65.64':445
'20#.#32.39.163':445
'20#.#32.201.72':445
'20#.#32.131.192':445
'20#.#32.25.85':139
'20#.#32.17.155':445
'20#.#32.184.149':445
'20#.#32.121.167':445
'20#.#32.11.218':445
'20#.#32.108.163':445
'20#.#32.19.244':445
'20#.#32.248.102':139
'20#.#32.60.194':139
'20#.#32.189.118':139
'20#.#32.229.218':139
'20#.#32.226.15':139
'20#.#32.161.201':139
'20#.#32.205.85':139
'20#.#32.98.48':139
'20#.#32.127.45':139
'20#.#32.131.35':139
'20#.#32.211.130':139
'20#.#32.185.97':445
'20#.#32.127.45':445
'20#.#32.205.85':445
'20#.#32.211.130':445
'20#.#32.189.118':445
'20#.#32.131.35':445
'20#.#32.67.164':139
'20#.#32.125.238':139
'20#.#32.25.85':445
'20#.#32.98.48':445
'20#.#32.248.102':445
'20#.#32.60.194':445
'20#.#32.113.88':445
'20#.#32.225.162':445
'20#.#32.193.249':445
'20#.#32.15.101':445
'20#.#32.35.2':445
'20#.#32.161.201':445
'20#.#32.229.218':445
'20#.#32.226.15':445
'20#.#32.161.225':445
'20#.#32.124.174':445
'20#.#32.224.5':445
'20#.#32.226.91':9988
'20#.#32.83.59':445
'20#.#32.82.153':445
'20#.#32.77.59':445
'20#.#32.58.253':9988
'20#.#32.42.134':9988
'20#.#32.231.71':9988
'20#.#32.102.160':9988
'20#.#32.221.118':9988
'20#.#32.133.72':445
'20#.#32.181.115':445
'20#.#32.26.72':445
'20#.#32.115.227':445
'20#.#32.18.6':445
'20#.#32.59.27':445
'20#.#32.158.183':445
'20#.#32.1.158':445
'20#.#32.182.227':445
'20#.#32.104.244':445
'20#.#32.39.21':445
'20#.#32.12.104':9988
'20#.#32.15.101':139
'20#.#32.35.2':139
'20#.#32.185.97':139
'20#.#32.184.149':139
'20#.#32.121.167':139
'20#.#32.161.225':139
'20#.#32.124.174':139
'20#.#32.225.162':139
'20#.#32.193.249':139
'20#.#32.113.88':139
'20#.#32.11.218':139
'20#.#32.15.140':9988
'20#.#32.17.155':139
'20#.#32.215.200':9988
'20#.#32.52.49':9988
'20#.#32.34.30':9988
'20#.#32.108.163':139
'20#.#32.19.244':139
'20#.#32.201.72':139
'20#.#32.131.192':139
'20#.#32.39.163':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней