Trojan.Starman.4966

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc244.dir00\svchost.exe.mdmp 16325836412032164

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc244.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#01.185.148':139
'20#.#01.41.142':445
'20#.#01.188.49':445
'20#.#01.92.107':139
'20#.#01.86.56':139
'20#.#01.56.59':139
'20#.#01.38.227':445
'20#.#01.204.163':445
'20#.#01.50.116':445
'20#.#01.97.121':445
'20#.#01.202.232':445
'20#.#01.76.15':445
'20#.#01.78.7':445
'20#.#01.9.160':139
'20#.#01.58.167':139
'20#.#01.197.135':139
'20#.#01.202.174':139
'20#.#01.21.203':139
'20#.#01.160.49':139
'20#.#01.247.47':139
'20#.#01.239.38':139
'20#.#01.104.28':139
'20#.#01.235.187':139
'20#.#01.100.250':139
'20#.#01.78.97':139
'20#.#01.39.24':139
'20#.#01.185.148':445
'20#.#01.134.8':139
'20#.#01.37.96':139
'20#.#01.92.107':445
'20#.#01.86.56':445
'20#.#01.56.59':445
'20#.#01.84.50':139
'20#.#01.61.254':139
'20#.#01.253.199':139
'20#.#01.127.188':139
'20#.#01.59.179':139
'20#.#01.108.249':139
'20#.#01.76.238':139
'20#.#01.9.160':445
'20#.#01.58.167':445
'20#.#01.197.135':445
'20#.#01.202.174':445
'20#.#01.21.203':445
'20#.#01.160.49':445
'20#.#01.247.47':445
'20#.#01.239.38':445
'20#.#01.104.28':445
'20#.#01.235.187':445
'20#.#01.100.250':445
'20#.#01.78.97':445
'20#.#01.39.24':445
'20#.#01.97.121':139
'20#.#01.41.247':139
'20#.#01.122.38':139
'20#.#01.102.181':139
'20#.#01.89.88':139
'20#.#01.135.90':139
'20#.#01.246.238':139
'20#.#01.99.205':445
'20#.#01.147.16':445
'20#.#01.87.23':445
'20#.#01.11.110':445
'20#.#01.32.186':445
'20#.#01.78.126':445
'20#.#01.16.78':445
'20#.#01.17.128':139
'20#.#01.139.187':139
'20#.#01.14.127':139
'20#.#01.11.110':139
'20#.#01.14.251':139
'20#.#01.128.141':139
'20#.#01.94.14':139
'20#.#01.131.121':139
'20#.#01.179.131':139
'20#.#01.87.189':139
'20#.#01.77.94':139
'20#.#01.120.154':139
'20#.#01.212.248':139
'20#.#01.122.38':445
'20#.#01.102.181':445
'20#.#01.41.142':139
'20#.#01.135.90':445
'20#.#01.246.238':445
'20#.#01.41.247':445
'20#.#01.188.49':139
'20#.#01.78.7':139
'20#.#01.204.163':139
'20#.#01.50.116':139
'20#.#01.38.227':139
'20#.#01.202.232':139
'20#.#01.76.15':139
'20#.#01.139.187':445
'20#.#01.14.127':445
'20#.#01.94.14':445
'20#.#01.14.251':445
'20#.#01.128.141':445
'20#.#01.17.128':445
'20#.#01.77.94':445
'20#.#01.179.131':445
'20#.#01.87.189':445
'20#.#01.89.88':445
'20#.#01.120.154':445
'20#.#01.212.248':445
'20#.#01.131.121':445
'20#.#01.36.176':445
'20#.#01.229.36':445
'20#.#01.154.229':445
'20#.#01.93.3':139
'20#.#01.4.182':445
'20#.#01.46.13':445
'20#.#01.1.160':445
'20#.#01.51.137':445
'20#.#01.112.194':445
'20#.#01.2.191':445
'20#.#01.137.184':445
'20#.#01.109.137':445
'20#.#01.82.109':445
'20#.#01.28.31':139
'20#.#01.51.188':139
'20#.#01.26.43':139
'20#.#01.150.2':139
'20#.#01.86.30':139
'20#.#01.156.233':139
'20#.#01.138.66':139
'20#.#01.43.165':139
'20#.#01.90.61':139
'20#.#01.170.66':139
'20#.#01.127.140':139
'20#.#01.185.251':139
'20#.#01.31.113':139
'20#.#01.52.232':139
'20#.#01.228.52':139
'20#.#01.66.151':139
'20#.#01.93.3':445
'20#.#01.233.216':139
'20#.#01.210.13':139
'20#.#01.255.240':139
'20#.#01.192.106':139
'20#.#01.88.160':139
'20#.#01.25.200':139
'20#.#01.46.43':139
'20#.#01.87.105':139
'20#.#01.214.22':139
'20#.#01.28.31':445
'20#.#01.51.188':445
'20#.#01.26.43':445
'20#.#01.150.2':445
'20#.#01.86.30':445
'20#.#01.156.233':445
'20#.#01.138.66':445
'20#.#01.43.165':445
'20#.#01.90.61':445
'20#.#01.170.66':445
'20#.#01.127.140':445
'20#.#01.185.251':445
'20#.#01.31.113':445
'20#.#01.2.191':139
'20#.#01.134.8':445
'20#.#01.37.96':445
'20#.#01.84.50':445
'20#.#01.146.82':139
'20#.#01.100.50':139
'20#.#01.182.2':139
'20#.#01.59.179':445
'20#.#01.253.199':445
'20#.#01.127.188':445
'20#.#01.190.35':445
'20#.#01.108.249':445
'20#.#01.76.238':445
'20#.#01.61.254':445
'20#.#01.17.217':139
'20#.#01.193.208':139
'20#.#01.87.72':139
'20#.#01.190.35':139
'20#.#01.230.89':139
'20#.#01.187.254':139
'20#.#01.139.0':139
'20#.#01.148.197':139
'20#.#01.137.123':139
'20#.#01.171.197':139
'20#.#01.62.224':139
'20#.#01.47.223':139
'20#.#01.158.202':139
'20#.#01.46.13':139
'20#.#01.36.176':139
'20#.#01.229.36':139
'20#.#01.100.50':445
'20#.#01.182.2':445
'20#.#01.4.182':139
'20#.#01.154.229':139
'20#.#01.82.109':139
'20#.#01.51.137':139
'20#.#01.112.194':139
'20#.#01.1.160':139
'20#.#01.137.184':139
'20#.#01.109.137':139
'20#.#01.17.217':445
'20#.#01.87.72':445
'20#.#01.139.0':445
'20#.#01.230.89':445
'20#.#01.187.254':445
'20#.#01.193.208':445
'20#.#01.62.224':445
'20#.#01.137.123':445
'20#.#01.171.197':445
'20#.#01.146.82':445
'20#.#01.47.223':445
'20#.#01.158.202':445
'20#.#01.148.197':445
'20#.#01.87.23':139
'20#.#01.134.205':445
'20#.#01.170.208':445
'20#.#01.179.160':445
'20#.#01.141.17':445
'20#.#01.122.81':445
'20#.#01.89.51':445
'20#.#01.117.179':445
'20#.#01.159.108':445
'20#.#01.255.159':445
'20#.#01.48.240':445
'20#.#01.31.242':445
'20#.#01.154.221':445
'20#.#01.107.213':445
'20#.#01.151.194':445
'20#.#01.126.223':445
'20#.#01.238.22':445
'20#.#01.133.207':445
'20#.#01.16.151':445
'20#.#01.176.106':445
'20#.#01.81.151':445
'20#.#01.162.179':445
'20#.#01.216.141':445
'20#.#01.28.152':445
'20#.#01.74.25':445
'20#.#01.127.70':445
'20#.#01.194.214':445
'20#.#01.205.222':445
'20#.#01.7.164':445
'20#.#01.40.123':445
'20#.#01.144.61':445
'20#.#01.3.97':445
'20#.#01.238.130':445
'20#.#01.63.8':445
'20#.#01.136.211':9988
'20#.#01.15.109':9988
'20#.#01.74.25':9988
'20#.#01.186.143':445
'20#.#01.72.92':445
'20#.#01.183.29':445
'20#.#01.146.64':445
'20#.#01.76.62':445
'20#.#01.253.103':445
'20#.#01.62.227':445
'20#.#01.40.147':445
'20#.#01.222.101':445
'20#.#01.3.29':445
'20#.#01.4.71':445
'20#.#01.185.93':445
'20#.#01.136.184':445
'20#.#01.0.152':445
'20#.#01.231.253':445
'20#.#01.1.76':445
'20#.#01.15.109':445
'20#.#01.122.81':139
'20#.#01.89.51':139
'20#.#01.134.205':139
'20#.#01.216.141':139
'20#.#01.28.152':139
'20#.#01.141.17':139
'20#.#01.170.208':139
'20#.#01.154.221':139
'20#.#01.107.213':139
'20#.#01.159.108':139
'20#.#01.179.160':139
'20#.#01.117.179':139
'20#.#01.31.242':139
'20#.#01.133.207':139
'20#.#01.238.22':139
'20#.#01.151.194':139
'20#.#01.176.106':139
'20#.#01.136.211':139
'20#.#01.15.109':139
'20#.#01.81.151':139
'20#.#01.127.70':139
'20#.#01.194.214':139
'20#.#01.162.179':139
'20#.#01.16.151':139
'20#.#01.126.223':139
'20#.#01.74.25':139
'20#.#01.3.97':139
'20#.#01.238.130':139
'20#.#01.205.222':139
'20#.#01.185.93':139
'20#.#01.136.184':139
'20#.#01.144.61':139
'20#.#01.7.164':139
'20#.#01.72.92':139
'20#.#01.183.29':139
'20#.#01.136.211':445
'20#.#01.40.123':139
'20#.#01.63.8':139
'20#.#01.186.143':139
'20#.#01.40.147':139
'20#.#01.222.101':139
'20#.#01.146.64':139
'20#.#01.255.159':139
'20#.#01.48.240':139
'20#.#01.62.227':139
'20#.#01.76.62':139
'20#.#01.231.253':139
'20#.#01.1.76':139
'20#.#01.4.71':139
'20#.#01.253.103':139
'20#.#01.3.29':139
'20#.#01.0.152':139
'20#.#01.84.88':139
'20#.#01.165.127':139
'20#.#01.38.203':139
'20#.#01.125.226':139
'20#.#01.40.0':139
'20#.#01.180.220':139
'20#.#01.75.43':139
'20#.#01.81.147':445
'20#.#01.251.187':445
'20#.#01.224.253':445
'20#.#01.26.122':139
'20#.#01.214.196':445
'20#.#01.105.214':445
'20#.#01.50.155':139
'20#.#01.144.250':139
'20#.#01.210.71':139
'20#.#01.37.86':139
'20#.#01.193.37':139
'20#.#01.111.24':139
'20#.#01.156.42':139
'20#.#01.239.173':139
'20#.#01.159.239':139
'20#.#01.226.159':139
'20#.#01.134.186':139
'20#.#01.51.190':139
'20#.#01.209.222':139
'20#.#01.84.88':445
'20#.#01.165.127':445
'20#.#01.38.203':445
'20#.#01.125.226':445
'20#.#01.40.0':445
'20#.#01.180.220':445
'20#.#01.75.43':445
'20#.#01.78.126':139
'20#.#01.16.78':139
'20#.#01.147.16':139
'20#.#01.26.122':445
'20#.#01.99.205':139
'20#.#01.32.186':139
'20#.#01.50.155':445
'20#.#01.144.250':445
'20#.#01.210.71':445
'20#.#01.37.86':445
'20#.#01.193.37':445
'20#.#01.111.24':445
'20#.#01.156.42':445
'20#.#01.239.173':445
'20#.#01.159.239':445
'20#.#01.226.159':445
'20#.#01.134.186':445
'20#.#01.51.190':445
'20#.#01.209.222':445
'20#.#01.224.253':139
'20#.#01.145.190':139
'20#.#01.174.238':139
'20#.#01.44.195':139
'20#.#01.186.143':9988
'20#.#01.14.96':139
'20#.#01.190.101':139
'20#.#01.146.133':139
'20#.#01.43.224':139
'20#.#01.197.230':139
'20#.#01.171.60':139
'20#.#01.83.93':139
'20#.#01.98.98':139
'20#.#01.203.90':139
'20#.#01.179.160':9988
'20#.#01.117.179':9988
'20#.#01.159.108':9988
'20#.#01.16.151':9988
'20#.#01.162.179':9988
'20#.#01.170.208':9988
'20#.#01.255.159':9988
'20#.#01.3.29':9988
'20#.#01.231.253':9988
'20#.#01.1.76':9988
'20#.#01.48.240':9988
'20#.#01.40.147':9988
'20#.#01.222.101':9988
'20#.#01.171.60':445
'20#.#01.174.230':445
'20#.#01.186.220':445
'20#.#01.203.90':445
'20#.#01.43.224':445
'20#.#01.197.230':445
'20#.#01.80.23':445
'20#.#01.105.214':139
'20#.#01.81.147':139
'20#.#01.251.187':139
'20#.#01.111.108':445
'20#.#01.66.25':445
'20#.#01.214.196':139
'20#.#01.111.108':139
'20#.#01.66.25':139
'20#.#01.14.96':445
'20#.#01.174.230':139
'20#.#01.186.220':139
'20#.#01.80.23':139
'20#.#01.190.101':445
'20#.#01.146.133':445
'20#.#01.83.93':445
'20#.#01.98.98':445
'20#.#01.145.190':445
'20#.#01.174.238':445
'20#.#01.44.195':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней