Trojan.Starman.5199

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER5420.dir00\svchost.exe.mdmp 16325836412030780

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER5420.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#8.32.216':139
'20#.#8.146.83':139
'20#.#8.38.230':139
'20#.#8.180.99':139
'20#.#8.230.59':139
'20#.#8.173.217':139
'20#.#8.51.161':139
'20#.#8.214.168':139
'20#.#8.118.184':139
'20#.#8.137.15':139
'20#.#8.115.213':139
'20#.88.6.77':139
'20#.#8.39.34':139
'20#.#8.134.121':139
'20#.#8.53.248':139
'20#.#8.121.54':139
'20#.#8.32.98':139
'20#.#8.131.205':139
'20#.#8.107.224':139
'20#.#8.193.67':139
'20#.#8.224.192':139
'20#.#8.147.140':139
'20#.#8.107.224':445
'20#.#8.32.98':445
'20#.#8.224.192':445
'20#.#8.39.34':445
'20#.#8.193.67':445
'20#.#8.230.59':445
'20#.#8.38.230':445
'20#.#8.180.99':445
'20#.#8.131.205':445
'20#.#8.115.213':445
'20#.88.6.77':445
'20#.#8.14.211':139
'20#.#8.119.11':139
'20#.#8.181.248':139
'20#.#8.178.25':139
'20#.#8.250.141':139
'20#.#8.121.54':445
'20#.#8.134.121':445
'20#.#8.53.248':445
'20#.#8.26.15':139
'20#.#8.248.69':445
'20#.#8.14.161':139
'20#.#8.36.203':139
'20#.#8.91.220':139
'20#.#8.40.49':139
'20#.#8.220.2':139
'20#.#8.248.118':139
'20#.#8.169.121':445
'20#.#8.17.35':139
'20#.#8.3.207':139
'20#.#8.133.48':139
'20#.#8.148.73':139
'20#.#8.98.81':139
'20#.#8.74.86':139
'20#.#8.80.189':139
'20#.#8.137.39':139
'20#.#8.43.55':139
'20#.#8.65.56':139
'20#.#8.63.58':139
'20#.#8.44.78':139
'20#.#8.226.191':139
'20#.#8.152.240':139
'20#.#8.219.246':445
'20#.#8.14.161':445
'20#.#8.36.203':445
'20#.#8.91.220':445
'20#.#8.40.49':445
'20#.#8.220.2':445
'20#.#8.248.118':445
'20#.#8.248.69':139
'20#.#8.17.35':445
'20#.#8.3.207':445
'20#.#8.133.48':445
'20#.#8.148.73':445
'20#.#8.98.81':445
'20#.#8.74.86':445
'20#.#8.80.189':445
'20#.#8.137.39':445
'20#.#8.43.55':445
'20#.#8.65.56':445
'20#.#8.63.58':445
'20#.#8.44.78':445
'20#.#8.226.191':445
'20#.#8.152.240':445
'20#.#8.32.216':445
'20#.#8.72.124':139
'20#.88.96.0':139
'20#.#8.200.97':445
'20#.#8.88.125':445
'20#.#8.199.137':445
'20#.#8.230.195':139
'20#.#8.118.231':139
'20#.#8.189.192':139
'20#.#8.142.103':139
'20#.#8.29.153':139
'20#.#8.103.137':445
'20#.#8.199.156':445
'20#.#8.179.199':445
'20#.#8.106.124':445
'20#.#8.88.123':445
'20#.#8.57.64':445
'20#.#8.14.172':445
'20#.#8.220.31':445
'20#.#8.162.127':445
'20#.#8.150.155':445
'20#.#8.74.104':445
'20#.#8.191.123':139
'20#.#8.90.171':139
'20#.#8.6.112':139
'20#.#8.119.113':139
'20#.#8.43.62':139
'20#.#8.84.177':139
'20#.#8.21.41':139
'20#.#8.197.246':139
'20#.#8.8.193':139
'20#.#8.233.125':139
'20#.#8.220.224':139
'20#.#8.79.199':139
'20#.#8.3.174':139
'20#.#8.204.56':139
'20#.#8.71.200':139
'20#.#8.2.112':139
'20#.#8.30.35':139
'20#.#8.172.56':139
'20#.#8.65.245':139
'20#.#8.145.104':139
'20#.#8.249.109':139
'20#.#8.125.248':139
'20#.#8.194.210':139
'20#.#8.128.160':139
'20#.#8.86.188':139
'20#.#8.119.11':445
'20#.#8.26.15':445
'20#.#8.191.33':139
'20#.#8.123.24':139
'20#.#8.190.174':139
'20#.#8.213.49':139
'20#.#8.174.100':139
'20#.#8.14.211':445
'20#.#8.214.168':445
'20#.#8.173.217':445
'20#.#8.137.15':445
'20#.#8.146.83':445
'20#.#8.118.184':445
'20#.#8.250.141':445
'20#.#8.181.248':445
'20#.#8.178.25':445
'20#.#8.51.161':445
'20#.#8.147.140':445
'20#.#8.88.123':139
'20#.#8.194.210':445
'20#.#8.128.160':445
'20#.#8.86.188':445
'20#.#8.199.137':139
'20#.#8.200.97':139
'20#.#8.191.33':445
'20#.#8.123.24':445
'20#.#8.190.174':445
'20#.#8.213.49':445
'20#.#8.174.100':445
'20#.#8.88.125':139
'20#.#8.179.199':139
'20#.#8.150.155':139
'20#.#8.199.156':139
'20#.#8.57.64':139
'20#.#8.106.124':139
'20#.#8.220.31':139
'20#.#8.103.137':139
'20#.#8.14.172':139
'20#.#8.74.104':139
'20#.#8.162.127':139
'20#.#8.43.230':445
'20#.#8.225.43':445
'20#.#8.23.163':445
'20#.#8.84.141':445
'20#.#8.128.4':445
'20#.#8.68.111':445
'20#.#8.137.82':445
'20#.#8.31.56':445
'20#.#8.229.225':445
'20#.#8.9.205':445
'20#.#8.87.36':445
'20#.#8.179.9':139
'20#.#8.232.167':139
'20#.#8.122.21':139
'20#.#8.60.129':139
'20#.#8.71.26':139
'20#.#8.247.7':445
'20#.88.80.1':445
'20#.#8.31.131':139
'20#.#8.239.126':139
'20#.#8.150.242':139
'20#.88.2.93':445
'20#.#8.217.48':445
'20#.#8.24.242':445
'20#.#8.48.211':445
'20#.#8.78.93':445
'20#.#8.73.136':445
'20#.#8.197.248':445
'20#.#8.242.197':445
'20#.#8.74.215':445
'20#.#8.10.147':445
'20#.#8.121.97':445
'20#.#8.67.240':445
'20#.88.51.3':445
'20#.#8.203.100':445
'20#.#8.60.235':445
'20#.#8.10.71':445
'20#.#8.132.176':445
'20#.#8.219.157':445
'20#.#8.47.42':445
'20#.#8.97.113':445
'20#.#8.254.50':445
'20#.#8.67.54':445
'20#.#8.10.71':139
'20#.#8.132.176':139
'20#.88.2.93':139
'20#.#8.68.111':139
'20#.#8.137.82':139
'20#.#8.254.50':139
'20#.#8.67.54':139
'20#.#8.203.100':139
'20#.#8.60.235':139
'20#.88.51.3':139
'20#.#8.31.56':139
'20#.#8.84.141':139
'20#.#8.128.4':139
'20#.#8.87.36':139
'20#.88.80.1':139
'20#.#8.247.7':139
'20#.#8.229.225':139
'20#.#8.9.205':139
'20#.#8.225.43':139
'20#.#8.23.163':139
'20#.#8.43.230':139
'20#.#8.97.113':139
'20#.#8.41.226':139
'20#.#8.30.115':139
'20#.#8.70.10':139
'20#.#8.197.248':139
'20#.#8.242.197':139
'20#.#8.134.179':139
'20#.#8.182.191':139
'20#.#8.91.76':139
'20#.#8.254.181':139
'20#.#8.53.231':139
'20#.#8.74.215':139
'20#.#8.78.93':139
'20#.#8.73.136':139
'20#.#8.67.240':139
'20#.#8.219.157':139
'20#.#8.47.42':139
'20#.#8.10.147':139
'20#.#8.121.97':139
'20#.#8.24.242':139
'20#.#8.48.211':139
'20#.#8.217.48':139
'20#.#8.70.10':445
'20#.#8.217.39':445
'20#.#8.250.216':445
'20#.#8.87.226':445
'20#.#8.25.124':139
'20#.#8.152.162':445
'20#.88.8.27':445
'20#.#8.164.128':445
'20#.#8.33.28':445
'20#.#8.176.250':445
'20#.#8.26.158':445
'20#.#8.212.208':139
'20#.#8.119.56':139
'20#.#8.210.104':139
'20#.#8.118.237':139
'20#.#8.203.221':139
'20#.#8.39.195':139
'20#.#8.207.183':139
'20#.#8.70.245':139
'20#.#8.79.154':139
'20#.#8.34.148':139
'20#.#8.99.35':139
'20#.#8.145.247':445
'20#.#8.79.154':445
'20#.#8.207.183':445
'20#.#8.99.35':445
'20#.#8.210.104':445
'20#.#8.34.148':445
'20#.#8.169.121':139
'20#.#8.219.246':139
'20#.#8.25.124':445
'20#.#8.70.245':445
'20#.#8.212.208':445
'20#.#8.119.56':445
'20#.#8.228.48':445
'20#.#8.40.48':445
'20#.#8.207.20':445
'20#.#8.222.86':445
'20#.#8.230.176':445
'20#.#8.39.195':445
'20#.#8.118.237':445
'20#.#8.203.221':445
'20#.#8.12.76':445
'20#.#8.44.224':445
'20#.#8.31.131':445
'20#.88.80.1':9988
'20#.#8.150.242':445
'20#.#8.232.167':445
'20#.#8.239.126':445
'20#.#8.225.43':9988
'20#.#8.229.225':9988
'20#.#8.84.141':9988
'20#.#8.247.7':9988
'20#.#8.87.36':9988
'20#.#8.179.9':445
'20#.#8.53.231':445
'20#.#8.91.76':445
'20#.#8.254.181':445
'20#.#8.41.226':445
'20#.#8.30.115':445
'20#.#8.71.26':445
'20#.#8.122.21':445
'20#.#8.60.129':445
'20#.#8.134.179':445
'20#.#8.182.191':445
'20#.#8.10.71':9988
'20#.#8.222.86':139
'20#.#8.230.176':139
'20#.#8.145.247':139
'20#.88.8.27':139
'20#.#8.164.128':139
'20#.#8.12.76':139
'20#.#8.44.224':139
'20#.#8.40.48':139
'20#.#8.207.20':139
'20#.#8.228.48':139
'20#.#8.33.28':139
'20#.#8.10.147':9988
'20#.#8.152.162':139
'20#.#8.24.242':9988
'20#.#8.97.113':9988
'20#.#8.73.136':9988
'20#.#8.176.250':139
'20#.#8.26.158':139
'20#.#8.250.216':139
'20#.#8.87.226':139
'20#.#8.217.39':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней