Trojan.Starman.4783

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1108 -dm 7 7 %TEMP%\WERebd2.dir00\svchost.exe.mdmp 16325836412032460

Изменения в файловой системе:

Создает следующие файлы:

%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe

Сетевая активность:

Подключается к:

'20#.#40.2.142':139
'20#.#40.144.2':139
'20#.#40.78.59':139
'20#.#40.225.4':139
'20#.#40.48.225':139
'20#.#40.7.186':139
'20#.#40.26.219':139
'20#.#40.23.121':139
'20#.#40.218.66':139
'20#.#40.225.132':139
'20#.#40.66.225':139
'20#.#40.4.162':139
'20#.#40.211.230':445
'20#.#40.5.197':139
'20#.#40.25.242':139
'20#.#40.184.153':445
'20#.#40.156.93':445
'20#.#40.217.191':139
'20#.#40.133.145':139
'20#.#40.170.235':139
'20#.#40.145.108':139
'20#.#40.48.217':139
'20#.#40.109.48':139
'20#.#40.217.191':445
'20#.#40.109.48':445
'20#.#40.25.242':445
'20#.#40.116.25':445
'20#.#40.5.197':445
'20#.#40.145.108':445
'20#.#40.225.4':445
'20#.#40.48.225':445
'20#.#40.4.162':445
'20#.#40.133.145':445
'20#.#40.170.235':445
'20#.#40.96.20':139
'20#.#40.241.169':139
'20#.#40.162.5':139
'20#.#40.240.248':139
'20#.#40.177.140':139
'20#.#40.211.42':139
'20#.#40.86.218':139
'20#.#40.102.92':139
'20#.#40.20.82':139
'20#.#40.116.110':139
'20#.#40.116.241':139
'20#.#40.102.113':139
'20#.#40.252.49':445
'20#.#40.138.114':139
'20#.#40.38.84':139
'20#.#40.190.234':445
'20#.#40.41.46':445
'20#.#40.14.61':139
'20#.#40.215.38':139
'20#.#40.50.37':139
'20#.#40.252.49':139
'20#.#40.211.146':139
'20#.#40.129.68':139
'20#.#40.114.121':139
'20#.#40.110.56':139
'20#.#40.191.10':445
'20#.#40.76.204':445
'20#.#40.232.84':445
'20#.#40.40.116':445
'20#.#40.36.120':445
'20#.#40.162.152':139
'20#.#40.204.89':139
'20#.#40.108.241':139
'20#.#40.41.164':139
'20#.#40.118.162':445
'20#.#40.158.1':139
'20#.#40.215.38':445
'20#.#40.138.114':445
'20#.#40.114.121':445
'20#.#40.116.25':139
'20#.#40.129.68':445
'20#.#40.211.146':445
'20#.#40.155.189':445
'20#.#40.189.28':445
'20#.#40.27.211':445
'20#.#40.50.37':445
'20#.#40.150.106':445
'20#.#40.41.164':445
'20#.#40.155.189':139
'20#.#40.184.153':139
'20#.#40.189.28':139
'20#.#40.150.106':139
'20#.#40.27.211':139
'20#.#40.156.93':139
'20#.#40.108.241':445
'20#.#40.110.56':445
'20#.#40.204.89':445
'20#.#40.38.84':445
'20#.#40.158.1':445
'20#.#40.35.79':139
'20#.#40.158.242':139
'20#.140.7.0':139
'20#.#40.112.51':139
'20#.#40.34.31':139
'20#.#40.199.254':139
'20#.#40.232.154':139
'20#.#40.147.112':139
'20#.#40.235.162':139
'20#.#40.25.39':139
'20#.#40.175.234':139
'20#.#40.156.155':139
'20#.#40.30.163':445
'20#.#40.250.30':445
'20#.#40.163.145':445
'20#.#40.0.156':445
'20#.#40.62.33':445
'20#.#40.70.165':445
'20#.#40.186.90':445
'20#.#40.46.69':445
'20#.#40.104.247':445
'20#.#40.77.130':445
'20#.#40.35.111':445
'20#.#40.99.57':139
'20#.#40.4.61':139
'20#.#40.70.3':139
'20#.#40.141.231':139
'20#.#40.29.154':139
'20#.#40.248.183':139
'20#.#40.167.42':139
'20#.#40.185.197':139
'20#.#40.133.99':445
'20#.#40.98.248':139
'20#.#40.133.99':139
'20#.#40.39.219':139
'20#.#40.203.75':139
'20#.#40.70.53':139
'20#.#40.189.236':139
'20#.#40.115.147':139
'20#.#40.38.116':139
'20#.#40.33.133':139
'20#.#40.104.148':139
'20#.#40.237.147':139
'20#.#40.247.111':139
'20#.#40.122.80':139
'20#.#40.203.137':139
'20#.#40.142.47':445
'20#.#40.116.241':445
'20#.#40.102.113':445
'20#.#40.86.218':445
'20#.#40.241.169':445
'20#.#40.162.5':445
'20#.#40.116.110':445
'20#.#40.221.95':139
'20#.#40.132.233':139
'20#.#40.96.20':445
'20#.#40.102.92':445
'20#.#40.20.82':445
'20#.#40.240.248':445
'20#.#40.7.186':445
'20#.#40.225.132':445
'20#.#40.144.2':445
'20#.#40.78.59':445
'20#.#40.2.142':445
'20#.#40.66.225':445
'20#.#40.211.42':445
'20#.#40.177.140':445
'20#.#40.23.121':445
'20#.#40.218.66':445
'20#.#40.26.219':445
'20#.#40.186.90':139
'20#.#40.84.112':445
'20#.#40.90.211':139
'20#.#40.35.111':139
'20#.#40.104.247':139
'20#.#40.46.69':139
'20#.#40.41.200':445
'20#.#40.27.47':445
'20#.#40.237.53':445
'20#.#40.221.95':445
'20#.#40.132.233':445
'20#.#40.77.130':139
'20#.#40.142.47':139
'20#.#40.0.156':139
'20#.#40.27.47':139
'20#.#40.237.53':139
'20#.#40.41.200':139
'20#.#40.42.50':139
'20#.#40.250.30':139
'20#.#40.70.165':139
'20#.#40.30.163':139
'20#.#40.62.33':139
'20#.#40.163.145':139
'20#.#40.32.6':445
'20#.#40.217.78':445
'20#.#40.149.143':445
'20#.#40.217.190':445
'20#.#40.250.82':445
'20#.#40.148.96':445
'20#.#40.94.169':445
'20#.#40.138.232':445
'20#.#40.7.37':445
'20#.#40.1.11':445
'20#.#40.97.61':445
'20#.#40.48.117':445
'20#.#40.123.213':139
'20#.#40.141.81':445
'20#.#40.132.217':139
'20#.#40.92.9':139
'20#.#40.216.8':139
'20#.#40.204.68':445
'20#.#40.196.8':445
'20#.#40.142.72':445
'20#.#40.103.175':445
'20#.#40.10.43':445
'20#.#40.230.103':445
'20#.#40.64.20':445
'20#.#40.34.156':445
'20#.#40.208.210':445
'20#.#40.103.31':445
'20#.#40.91.188':445
'20#.#40.227.248':445
'20#.#40.69.9':445
'20#.#40.183.67':445
'20#.#40.9.54':445
'20#.#40.218.69':445
'20#.#40.54.18':445
'20#.#40.106.102':445
'20#.#40.19.105':445
'20#.#40.12.186':445
'20#.#40.206.159':445
'20#.#40.186.104':445
'20#.#40.24.45':445
'20#.#40.236.6':445
'20#.#40.113.206':445
'20#.#40.231.214':445
'20#.#40.206.140':445
'20#.#40.97.56':445
'20#.#40.43.63':445
'20#.#40.199.57':139
'20#.#40.97.61':139
'20#.#40.7.37':139
'20#.#40.1.11':139
'20#.#40.217.78':139
'20#.#40.148.96':139
'20#.#40.94.169':139
'20#.#40.206.159':139
'20#.#40.19.105':139
'20#.#40.24.45':139
'20#.#40.138.232':139
'20#.#40.186.104':139
'20#.#40.32.6':139
'20#.#40.230.103':139
'20#.#40.141.81':139
'20#.#40.10.43':139
'20#.#40.103.175':139
'20#.#40.204.68':139
'20#.#40.196.8':139
'20#.#40.250.82':139
'20#.#40.149.143':139
'20#.#40.217.190':139
'20#.#40.142.72':139
'20#.#40.48.117':139
'20#.#40.54.18':139
'20#.#40.9.54':139
'20#.#40.218.69':139
'20#.#40.34.156':139
'20#.#40.227.248':139
'20#.#40.69.9':139
'20#.#40.95.42':139
'20#.#40.179.94':139
'20#.#40.42.102':139
'20#.#40.183.67':139
'20#.#40.132.236':139
'20#.#40.64.20':139
'20#.#40.43.63':139
'20#.#40.206.140':139
'20#.#40.97.56':139
'20#.#40.12.186':139
'20#.#40.236.6':139
'20#.#40.113.206':139
'20#.#40.91.188':139
'20#.#40.208.210':139
'20#.#40.103.31':139
'20#.#40.231.214':139
'20#.#40.106.102':139
'20#.#40.167.99':445
'20#.#40.13.121':445
'20#.#40.39.239':445
'20#.#40.140.34':139
'20#.#40.53.150':445
'20#.#40.99.101':445
'20#.#40.31.155':445
'20#.#40.98.207':445
'20#.#40.213.243':445
'20#.#40.160.131':445
'20#.#40.104.34':445
'20#.#40.120.231':139
'20#.#40.29.139':139
'20#.#40.183.242':139
'20#.#40.141.153':139
'20#.#40.191.10':139
'20#.#40.186.186':139
'20#.#40.32.85':139
'20#.#40.147.231':139
'20#.#40.90.103':139
'20#.#40.244.147':139
'20#.#40.232.84':139
'20#.#40.173.149':139
'20#.#40.88.5':445
'20#.#40.181.70':445
'20#.#40.162.145':445
'20#.#40.145.83':445
'20#.#40.246.22':445
'20#.#40.29.139':445
'20#.#40.31.79':445
'20#.#40.56.3':445
'20#.#40.178.100':445
'20#.#40.120.231':445
'20#.#40.141.153':445
'20#.#40.73.40':445
'20#.#40.41.198':445
'20#.#40.32.85':445
'20#.#40.101.148':445
'20#.#40.78.43':445
'20#.#40.4.18':445
'20#.#40.173.149':445
'20#.#40.54.63':445
'20#.#40.8.37':445
'20#.#40.90.103':445
'20#.#40.115.99':445
'20#.#40.140.34':445
'20#.#40.46.31':139
'20#.#40.81.68':139
'20#.#40.4.18':139
'20#.#40.160.131':139
'20#.#40.9.54':9988
'20#.#40.183.67':9988
'20#.#40.54.63':139
'20#.#40.145.83':139
'20#.#40.138.77':139
'20#.#40.31.155':139
'20#.#40.104.34':139
'20#.#40.36.120':139
'20#.#40.236.6':9988
'20#.#40.179.94':445
'20#.#40.199.57':445
'20#.#40.95.42':445
'20#.#40.132.236':445
'20#.#40.42.102':445
'20#.#40.92.9':445
'20#.#40.94.169':9988
'20#.#40.204.68':9988
'20#.#40.123.213':445
'20#.#40.216.8':445
'20#.#40.132.217':445
'20#.#40.163.191':139
'20#.#40.76.81':139
'20#.#40.41.198':139
'20#.#40.8.37':139
'20#.#40.56.3':139
'20#.#40.246.22':139
'20#.#40.129.163':139
'20#.#40.181.70':139
'20#.#40.163.199':139
'20#.#40.162.145':139
'20#.#40.240.138':139
'20#.#40.178.100':139
'20#.#40.98.207':139
'20#.#40.115.99':139
'20#.#40.76.204':139
'20#.#40.78.43':139
'20#.#40.88.5':139
'20#.#40.73.40':139
'20#.#40.213.243':139
'20#.#40.31.79':139
'20#.#40.20.115':139
'20#.#40.40.116':139
'20#.#40.101.148':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней