Trojan.Starman.4997

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERce58.dir00\svchost.exe.mdmp 16325836412032060

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERce58.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#70.72.100':445
'20#.#70.63.198':445
'20#.#70.121.155':445
'20#.#70.185.48':445
'20#.#70.134.42':139
'20#.#70.134.42':445
'20#.#70.54.165':445
'20#.#70.54.165':139
'20#.#70.159.135':139
'20#.#70.66.54':445
'20#.#70.141.247':445
'20#.#70.52.170':445
'20#.#70.95.93':445
'20#.#70.66.234':445
'20#.#70.248.187':445
'20#.#70.117.129':445
'20#.#70.86.227':445
'20#.#70.79.249':445
'20#.#70.128.137':445
'20#.#70.159.135':445
'20#.#70.25.203':139
'20#.#70.25.47':139
'20#.#70.71.121':139
'20#.#70.117.32':139
'20#.#70.146.246':139
'20#.#70.126.114':139
'20#.#70.136.120':139
'20#.#70.34.55':139
'20#.#70.246.227':139
'20#.#70.209.61':139
'20#.#70.118.10':139
'20#.#70.218.28':139
'20#.#70.34.5':139
'20#.#70.29.43':139
'20#.#70.47.159':139
'20#.#70.76.141':139
'20#.#70.247.11':139
'20#.#70.148.62':139
'20#.#70.54.76':139
'20#.#70.24.191':445
'20#.#70.100.251':445
'20#.#70.36.139':445
'20#.#70.231.130':445
'20#.#70.229.80':445
'20#.#70.184.242':445
'20#.#70.168.246':445
'20#.#70.168.10':445
'20#.#70.165.184':445
'20#.#70.241.165':445
'20#.#70.37.189':445
'20#.#70.121.155':139
'20#.#70.185.48':139
'20#.#70.86.227':139
'20#.#70.66.54':139
'20#.#70.72.100':139
'20#.#70.35.36':445
'20#.#70.183.25':445
'20#.#70.63.198':139
'20#.#70.66.150':445
'20#.#70.21.247':445
'20#.#70.93.110':445
'20#.#70.91.70':445
'20#.#70.184.172':445
'20#.#70.187.155':445
'20#.#70.83.91':445
'20#.#70.84.113':445
'20#.#70.217.2':445
'20#.#70.104.83':445
'20#.#70.113.104':445
'20#.#70.192.148':445
'20#.#70.254.114':445
'20#.#70.35.61':445
'20#.#70.236.69':445
'20#.#70.76.240':445
'20#.#70.231.58':445
'20#.#70.37.15':445
'20#.#70.28.24':445
'20#.#70.60.194':445
'20#.#70.156.49':445
'20#.#70.37.6':139
'20#.#70.48.59':445
'20#.#70.112.146':445
'20#.#70.49.157':445
'20#.#70.216.170':445
'20#.#70.239.76':445
'20#.#70.33.253':445
'20#.#70.69.33':445
'20#.#70.34.224':445
'20#.#70.35.8':445
'20#.#70.72.134':445
'20#.#70.146.246':445
'20#.#70.34.55':445
'20#.#70.25.203':445
'20#.#70.25.47':445
'20#.#70.246.227':445
'20#.#70.37.6':445
'20#.#70.134.37':445
'20#.#70.126.114':445
'20#.#70.136.120':445
'20#.#70.15.228':445
'20#.#70.72.130':445
'20#.#70.1.204':445
'20#.#70.48.188':445
'20#.#70.142.82':445
'20#.#70.129.84':445
'20#.#70.149.119':139
'20#.#70.163.159':139
'20#.#70.124.154':445
'20#.#70.74.111':139
'20#.#70.81.240':445
'20#.#70.47.177':445
'20#.#70.201.12':445
'20#.#70.223.57':445
'20#.#70.161.176':445
'20#.#70.72.125':445
'20#.#70.67.40':445
'20#.#70.60.13':445
'20#.#70.60.237':445
'20#.#70.40.122':445
'20#.#70.117.32':445
'20#.#70.223.57':139
'20#.#70.161.176':139
'20#.#70.69.33':139
'20#.#70.15.228':139
'20#.#70.47.177':139
'20#.#70.60.237':139
'20#.#70.40.122':139
'20#.#70.201.12':139
'20#.#70.72.125':139
'20#.#70.33.253':139
'20#.#70.49.157':139
'20#.#70.216.170':139
'20#.#70.134.37':139
'20#.#70.72.134':139
'20#.#70.48.59':139
'20#.#70.34.224':139
'20#.#70.35.8':139
'20#.#70.112.146':139
'20#.#70.239.76':139
'20#.#70.67.40':139
'20#.#70.47.159':445
'20#.#70.148.62':445
'20#.#70.118.10':445
'20#.#70.218.28':445
'20#.#70.54.76':445
'20#.#70.209.61':445
'20#.#70.71.121':445
'20#.#70.76.141':445
'20#.#70.247.11':445
'20#.#70.29.43':445
'20#.#70.48.188':139
'20#.#70.142.82':139
'20#.#70.60.13':139
'20#.#70.81.240':139
'20#.#70.72.130':139
'20#.#70.124.154':139
'20#.#70.34.5':445
'20#.#70.1.204':139
'20#.#70.129.84':139
'20#.#70.117.129':139
'20#.#70.155.239':445
'20#.#70.164.196':445
'20#.#70.37.103':139
'20#.#70.201.9':445
'20#.#70.37.99':445
'20#.#70.26.46':445
'20#.#70.35.121':445
'20#.#70.84.139':445
'20#.#70.120.91':445
'20#.#70.80.10':139
'20#.#70.39.80':139
'20#.#70.24.34':139
'20#.#70.117.146':139
'20#.#70.140.192':139
'20#.#70.142.75':139
'20#.#70.74.218':139
'20#.#70.146.120':139
'20#.#70.143.142':139
'20#.#70.165.226':139
'20#.#70.209.84':445
'20#.#70.199.242':445
'20#.#70.198.223':445
'20#.#70.14.122':445
'20#.#70.89.77':445
'20#.#70.89.46':445
'20#.#70.174.32':445
'20#.#70.43.207':445
'20#.#70.31.234':445
'20#.#70.209.252':445
'20#.#70.53.197':445
'20#.#70.132.247':445
'20#.#70.93.7':445
'20#.#70.84.228':445
'20#.#70.83.217':445
'20#.#70.145.133':445
'20#.#70.236.176':445
'20#.#70.197.98':445
'20#.#70.249.164':445
'20#.#70.25.200':445
'20#.#70.172.103':139
'20#.#70.145.133':139
'20#.#70.93.7':139
'20#.#70.83.217':139
'20#.#70.132.247':139
'20#.#70.249.164':139
'20#.#70.197.98':139
'20#.#70.53.197':139
'20#.#70.25.200':139
'20#.#70.236.176':139
'20#.#70.209.84':139
'20#.#70.164.196':139
'20#.#70.26.46':139
'20#.#70.155.239':139
'20#.#70.84.139':139
'20#.#70.37.99':139
'20#.#70.35.121':139
'20#.#70.84.228':139
'20#.#70.201.9':139
'20#.#70.120.91':139
'20#.#70.14.122':139
'20#.#70.207.111':139
'20#.#70.234.15':139
'20#.#70.164.108':139
'20#.#70.51.12':139
'20#.#70.207.184':139
'20#.#70.149.106':139
'20#.#70.104.149':139
'20#.#70.206.129':139
'20#.#70.135.24':139
'20#.#70.251.169':139
'20#.#70.198.223':139
'20#.#70.89.46':139
'20#.#70.89.77':139
'20#.#70.199.242':139
'20#.#70.31.234':139
'20#.#70.43.207':139
'20#.#70.87.235':139
'20#.#70.174.32':139
'20#.#70.209.252':139
'20#.#70.251.169':445
'20#.#70.236.69':139
'20#.#70.76.240':139
'20#.#70.168.10':139
'20#.#70.21.247':139
'20#.#70.254.114':139
'20#.#70.60.194':139
'20#.#70.156.49':139
'20#.#70.35.61':139
'20#.#70.231.58':139
'20#.#70.168.246':139
'20#.#70.231.130':139
'20#.#70.229.80':139
'20#.#70.183.25':139
'20#.#70.37.189':139
'20#.#70.100.251':139
'20#.#70.165.184':139
'20#.#70.241.165':139
'20#.#70.36.139':139
'20#.#70.184.242':139
'20#.#70.37.15':139
'20#.#70.95.93':139
'20#.#70.66.234':139
'20#.#70.217.2':139
'20#.#70.24.191':139
'20#.#70.141.247':139
'20#.#70.79.249':139
'20#.#70.128.137':139
'20#.#70.52.170':139
'20#.#70.248.187':139
'20#.#70.84.113':139
'20#.#70.184.172':139
'20#.#70.187.155':139
'20#.#70.28.24':139
'20#.#70.192.148':139
'20#.#70.93.110':139
'20#.#70.104.83':139
'20#.#70.113.104':139
'20#.#70.91.70':139
'20#.#70.83.91':139
'20#.#70.35.36':139
'20#.#70.140.192':445
'20#.#70.39.80':445
'20#.#70.172.103':445
'20#.#70.117.146':445
'20#.#70.24.34':445
'20#.#70.165.226':445
'20#.#70.74.218':445
'20#.#70.142.75':445
'20#.#70.143.142':445
'20#.#70.104.149':445
'20#.#70.51.12':445
'20#.#70.207.111':445
'20#.#70.87.235':445
'20#.#70.164.108':445
'20#.#70.234.15':445
'20#.#70.135.24':445
'20#.#70.149.106':445
'20#.#70.207.184':445
'20#.#70.206.129':445
'20#.#70.146.120':445
'20#.#70.110.127':139
'20#.#70.219.177':139
'20#.#70.87.235':9988
'20#.#70.164.108':9988
'20#.#70.249.110':139
'20#.#70.249.110':445
'20#.#70.66.150':139
'20#.#70.110.127':445
'20#.#70.219.177':445
'20#.#70.43.207':9988
'20#.#70.35.121':9988
'20#.#70.164.196':9988
'20#.#70.80.10':445
'20#.#70.37.103':445
'20#.#70.83.217':9988
'20#.#70.145.133':9988
'20#.#70.14.122':9988
'20#.#70.132.247':9988
'20#.#70.93.7':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней