Trojan.Starman.5414

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER2cce.dir00\svchost.exe.mdmp 16325836412032328

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#83.130.217':445
'20#.#83.95.131':445
'20#.#83.205.25':445
'20#.#83.21.151':445
'20#.#83.254.207':445
'20#.#83.179.79':445
'20#.#83.17.197':445
'20#.#83.134.219':445
'20#.#83.75.155':445
'20#.#83.123.153':445
'20#.#83.33.66':445
'20#.#83.93.215':445
'20#.#83.213.243':139
'20#.#83.87.45':139
'20#.#83.137.97':445
'20#.#83.180.131':445
'20#.#83.12.228':445
'20#.#83.193.137':445
'20#.#83.199.193':445
'20#.#83.30.20':445
'20#.#83.97.65':445
'20#.#83.169.97':445
'20#.#83.41.246':445
'20#.#83.65.60':445
'20#.#83.28.6':445
'20#.#83.26.33':445
'20#.#83.128.25':445
'20#.#83.101.40':445
'20#.#83.247.224':445
'20#.#83.135.40':445
'20#.#83.131.151':445
'20#.#83.133.216':445
'20#.#83.87.90':445
'20#.#83.166.127':445
'20#.#83.191.197':445
'20#.#83.65.55':445
'20#.#83.180.98':445
'20#.#83.49.249':445
'20#.#83.17.199':445
'20#.#83.27.143':139
'20#.#83.133.216':139
'20#.#83.191.197':139
'20#.#83.166.127':139
'20#.#83.131.151':139
'20#.#83.49.249':139
'20#.#83.180.98':139
'20#.#83.135.40':139
'20#.#83.17.199':139
'20#.#83.65.55':139
'20#.#83.87.90':139
'20#.#83.95.131':139
'20#.#83.254.207':139
'20#.#83.21.151':139
'20#.#83.130.217':139
'20#.#83.134.219':139
'20#.#83.17.197':139
'20#.#83.30.20':139
'20#.#83.75.155':139
'20#.#83.179.79':139
'20#.#83.41.246':139
'20#.#83.136.240':139
'20#.#83.155.40':139
'20#.#83.81.150':139
'20#.#83.175.68':139
'20#.#83.30.124':139
'20#.#83.19.201':139
'20#.#83.15.71':139
'20#.#83.55.154':139
'20#.#83.226.67':139
'20#.#83.164.164':139
'20#.#83.169.97':139
'20#.#83.28.6':139
'20#.#83.65.60':139
'20#.#83.97.65':139
'20#.#83.101.40':139
'20#.#83.128.25':139
'20#.#83.165.127':139
'20#.#83.247.224':139
'20#.#83.26.33':139
'20#.#83.165.127':445
'20#.#83.204.136':139
'20#.#83.98.141':139
'20#.#83.26.245':139
'20#.#83.92.177':139
'20#.#83.47.234':139
'20#.#83.165.139':139
'20#.#83.58.166':139
'20#.#83.135.146':139
'20#.#83.12.64':139
'20#.#83.156.152':139
'20#.#83.116.43':139
'20#.#83.218.237':139
'20#.#83.93.54':139
'20#.#83.130.220':139
'20#.#83.99.9':139
'20#.#83.107.104':139
'20#.#83.99.4':139
'20#.#83.100.1':139
'20#.#83.5.105':139
'20#.#83.64.117':139
'20#.#83.42.253':445
'20#.#83.49.158':445
'20#.#83.46.110':445
'20#.#83.222.115':445
'20#.#83.148.55':445
'20#.#83.6.152':445
'20#.#83.37.134':445
'20#.#83.137.214':445
'20#.#83.255.210':445
'20#.#83.118.58':445
'20#.#83.58.4':139
'20#.#83.37.12':139
'20#.#83.208.4':139
'20#.#83.59.120':139
'20#.#83.53.235':445
'20#.#83.176.149':445
'20#.#83.197.206':445
'20#.#83.161.196':445
'20#.#83.66.102':445
'20#.#83.71.183':139
'20#.#83.87.45':445
'20#.#83.53.235':139
'20#.#83.27.143':445
'20#.#83.213.243':445
'20#.#83.161.196':139
'20#.#83.197.206':139
'20#.#83.118.58':139
'20#.#83.66.102':139
'20#.#83.176.149':139
'20#.#83.15.71':445
'20#.#83.175.68':445
'20#.#83.136.240':445
'20#.#83.164.164':445
'20#.#83.81.150':445
'20#.#83.155.40':445
'20#.#83.226.67':445
'20#.#83.19.201':445
'20#.#83.30.124':445
'20#.#83.55.154':445
'20#.#83.46.110':139
'20#.#83.175.134':139
'20#.#83.23.97':139
'20#.#83.138.152':139
'20#.#83.23.221':139
'20#.#83.34.140':139
'20#.#83.10.144':139
'20#.#83.182.131':139
'20#.#83.5.58':139
'20#.#83.102.5':139
'20#.#83.151.253':139
'20#.#83.49.158':139
'20#.#83.148.55':139
'20#.#83.222.115':139
'20#.#83.42.253':139
'20#.#83.137.214':139
'20#.#83.37.134':139
'20#.#83.143.157':139
'20#.#83.255.210':139
'20#.#83.6.152':139
'20#.#83.47.206':445
'20#.#83.167.216':445
'20#.#83.216.79':139
'20#.#83.108.48':445
'20#.#83.59.207':445
'20#.#83.183.39':445
'20#.#83.182.171':445
'20#.#83.8.25':445
'20#.#83.64.168':445
'20#.#83.107.215':139
'20#.#83.60.143':139
'20#.#83.190.82':139
'20#.#83.150.219':139
'20#.#83.1.110':139
'20#.#83.66.55':139
'20#.#83.117.142':139
'20#.#83.215.116':139
'20#.#83.68.147':139
'20#.#83.37.131':139
'20#.#83.87.59':445
'20#.#83.175.163':445
'20#.#83.100.210':445
'20#.#83.112.176':445
'20#.#83.27.182':445
'20#.#83.194.158':445
'20#.#83.126.71':445
'20#.#83.117.0':445
'20#.#83.174.52':445
'20#.#83.6.62':445
'20#.#83.113.97':445
'20#.#83.38.100':445
'20#.#83.70.170':445
'20#.#83.46.104':445
'20#.#83.69.25':445
'20#.#83.42.54':445
'20#.#83.174.185':445
'20#.#83.91.183':445
'20#.#83.204.3':445
'20#.#83.91.204':445
'20#.#83.159.22':139
'20#.#83.70.170':139
'20#.#83.42.54':139
'20#.#83.69.25':139
'20#.#83.38.100':139
'20#.#83.204.3':139
'20#.#83.91.183':139
'20#.#83.113.97':139
'20#.#83.91.204':139
'20#.#83.174.185':139
'20#.#83.46.104':139
'20#.#83.167.216':139
'20#.#83.59.207':139
'20#.#83.47.206':139
'20#.#83.108.48':139
'20#.#83.8.25':139
'20#.#83.182.171':139
'20#.#83.87.59':139
'20#.#83.64.168':139
'20#.#83.183.39':139
'20#.#83.112.176':139
'20#.#83.249.9':139
'20#.#83.6.196':139
'20#.#83.45.210':139
'20#.#83.9.24':139
'20#.#83.129.153':139
'20#.#83.72.238':139
'20#.#83.209.242':139
'20#.#83.236.226':139
'20#.#83.34.104':139
'20#.#83.180.241':139
'20#.#83.100.210':139
'20#.#83.194.158':139
'20#.#83.27.182':139
'20#.#83.175.163':139
'20#.#83.174.52':139
'20#.#83.117.0':139
'20#.#83.42.114':139
'20#.#83.6.62':139
'20#.#83.126.71':139
'20#.#83.42.114':445
'20#.#83.135.33':139
'20#.#83.9.134':139
'20#.#83.27.236':139
'20#.#83.34.173':139
'20#.#83.65.201':139
'20#.#83.118.141':445
'20#.#83.61.86':445
'20#.#83.1.190':445
'20#.#83.141.229':445
'20#.#83.166.101':139
'20#.#83.118.141':139
'20#.#83.61.86':139
'20#.#83.1.190':139
'20#.#83.141.229':139
'20#.#83.158.115':139
'20#.#83.10.169':139
'20#.#83.97.10':139
'20#.#83.118.158':139
'20#.#83.45.187':139
'20#.#83.158.115':445
'20#.#83.137.97':139
'20#.#83.193.137':139
'20#.#83.33.66':139
'20#.#83.93.215':139
'20#.#83.199.193':139
'20#.#83.123.153':139
'20#.#83.205.25':139
'20#.#83.180.131':139
'20#.#83.12.228':139
'20#.#83.65.201':445
'20#.#83.10.169':445
'20#.#83.97.10':445
'20#.#83.118.158':445
'20#.#83.45.187':445
'20#.#83.166.101':445
'20#.#83.135.33':445
'20#.#83.9.134':445
'20#.#83.27.236':445
'20#.#83.34.173':445
'20#.#83.249.9':9988
'20#.#83.1.110':445
'20#.#83.60.143':445
'20#.#83.159.22':445
'20#.#83.150.219':445
'20#.#83.190.82':445
'20#.#83.37.131':445
'20#.#83.117.142':445
'20#.#83.66.55':445
'20#.#83.68.147':445
'20#.#83.209.242':445
'20#.#83.9.24':445
'20#.#83.249.9':445
'20#.#83.180.241':445
'20#.#83.45.210':445
'20#.#83.6.196':445
'20#.#83.34.104':445
'20#.#83.72.238':445
'20#.#83.129.153':445
'20#.#83.236.226':445
'20#.#83.215.116':445
'20#.#83.113.97':9988
'20#.#83.27.182':9988
'20#.#83.38.100':9988
'20#.#83.204.3':9988
'20#.#83.175.163':9988
'20#.#83.180.241':9988
'20#.#83.9.24':9988
'20#.#83.174.52':9988
'20#.#83.126.71':9988
'20#.#83.87.59':9988
'20#.#83.47.206':9988
'20#.#83.108.48':9988
'20#.#83.107.215':445
'20#.#83.216.79':445
'20#.#83.167.216':9988
'20#.#83.64.168':9988
'20#.#83.183.39':9988
'20#.#83.59.207':9988
'20#.#83.8.25':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней