Trojan.Starman.5433

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER4e21.dir00\svchost.exe.mdmp 16325836412030052

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#16.50.28':445
'20#.#16.70.253':445
'20#.#16.222.3':445
'20#.#16.100.67':445
'20#.#16.108.83':445
'20#.#16.41.200':445
'20#.#16.74.178':445
'20#.#16.26.166':445
'20#.#16.56.175':445
'20#.#16.29.102':445
'20#.#16.247.82':445
'20#.#16.33.107':445
'20#.#16.245.204':445
'20#.#16.153.31':445
'20#.#16.136.50':445
'20#.#16.202.135':445
'20#.#16.24.65':445
'20#.#16.3.173':445
'20#.#16.137.71':445
'20#.#16.16.198':445
'20#.#16.190.116':445
'20#.#16.116.190':445
'20#.#16.223.170':445
'20#.#16.2.219':445
'20#.#16.118.21':139
'20#.#16.61.133':445
'20#.#16.17.104':445
'20#.#16.43.140':445
'20#.#16.56.33':139
'20#.#16.92.141':139
'20#.#16.233.62':139
'20#.#16.49.103':139
'20#.#16.243.114':139
'20#.#16.33.53':139
'20#.#16.22.150':445
'20#.#16.165.22':445
'20#.#16.74.204':445
'20#.#16.196.27':445
'20#.#16.2.21':445
'20#.#16.117.45':445
'20#.#16.61.133':139
'20#.#16.2.219':139
'20#.#16.43.140':139
'20#.#16.104.16':445
'20#.#16.17.104':139
'20#.#16.50.84':445
'20#.#16.70.253':139
'20#.#16.41.200':139
'20#.#16.50.28':139
'20#.#16.108.83':139
'20#.#16.222.3':139
'20#.#16.29.102':139
'20#.#16.26.166':139
'20#.#16.223.170':139
'20#.#16.74.178':139
'20#.#16.247.82':139
'20#.#16.56.175':139
'20#.#16.245.204':139
'20#.#16.24.65':139
'20#.#16.33.107':139
'20#.#16.202.135':139
'20#.#16.153.31':139
'20#.#16.190.116':139
'20#.#16.137.71':139
'20#.#16.100.67':139
'20#.#16.3.173':139
'20#.#16.116.190':139
'20#.#16.16.198':139
'20#.#16.196.27':139
'20#.#16.137.118':445
'20#.#16.114.82':445
'20#.#16.36.139':445
'20#.#16.78.150':445
'20#.#16.226.36':445
'20#.#16.170.6':445
'20#.#16.62.81':445
'20#.#16.83.142':445
'20#.#16.61.41':445
'20#.#16.209.251':445
'20#.#16.101.25':445
'20#.#16.165.22':139
'20#.#16.117.45':139
'20#.#16.22.150':139
'20#.#16.2.21':139
'20#.#16.74.204':139
'20#.#16.104.16':139
'20#.#16.107.120':445
'20#.#16.100.200':445
'20#.#16.64.248':445
'20#.#16.72.49':445
'20#.#16.75.243':445
'20#.#16.153.58':445
'20#.#16.22.5':445
'20#.#16.214.240':445
'20#.#16.114.113':445
'20#.#16.21.132':445
'20#.#16.208.139':445
'20#.#16.142.199':445
'20#.#16.203.0':445
'20#.#16.62.208':445
'20#.#16.44.227':445
'20#.#16.64.186':445
'20#.#16.41.50':445
'20#.#16.28.197':445
'20#.#16.25.173':445
'20#.#16.233.62':445
'20#.#16.8.150':445
'20#.#16.23.152':445
'20#.#16.74.83':445
'20#.#16.4.27':445
'20#.#16.156.232':445
'20#.#16.155.76':445
'20#.#16.3.148':445
'20#.#16.1.16':445
'20#.#16.176.0':445
'20#.#16.84.49':445
'20#.#16.231.149':445
'20#.#16.245.99':445
'20#.#16.60.106':445
'20#.#16.208.171':445
'20#.#16.192.145':139
'20#.#16.33.193':139
'20#.#16.92.158':139
'20#.#16.26.89':445
'20#.#16.157.71':139
'20#.#16.202.221':445
'20#.#16.219.205':445
'20#.#16.173.223':445
'20#.#16.191.120':445
'20#.#16.43.113':445
'20#.#16.30.220':445
'20#.#16.127.219':445
'20#.#16.240.227':445
'20#.#16.137.123':445
'20#.#16.12.36':445
'20#.#16.4.96':445
'20#.#16.92.141':445
'20#.#16.22.5':139
'20#.#16.208.139':139
'20#.#16.153.58':139
'20#.#16.21.132':139
'20#.#16.214.240':139
'20#.#16.44.227':139
'20#.#16.203.0':139
'20#.#16.1.16':139
'20#.#16.142.199':139
'20#.#16.64.186':139
'20#.#16.62.208':139
'20#.#16.28.197':139
'20#.#16.23.152':139
'20#.#16.41.50':139
'20#.#16.8.150':139
'20#.#16.25.173':139
'20#.#16.155.76':139
'20#.#16.4.27':139
'20#.#16.114.113':139
'20#.#16.74.83':139
'20#.#16.3.148':139
'20#.#16.156.232':139
'20#.#16.191.120':139
'20#.#16.84.49':139
'20#.#16.208.171':139
'20#.#16.176.0':139
'20#.#16.60.106':139
'20#.#16.231.149':139
'20#.#16.26.89':139
'20#.#16.33.53':445
'20#.#16.49.103':445
'20#.#16.243.114':445
'20#.#16.118.21':445
'20#.#16.56.33':445
'20#.#16.219.205':139
'20#.#16.30.220':139
'20#.#16.202.221':139
'20#.#16.43.113':139
'20#.#16.173.223':139
'20#.#16.12.36':139
'20#.#16.240.227':139
'20#.#16.245.99':139
'20#.#16.127.219':139
'20#.#16.4.96':139
'20#.#16.137.123':139
'20#.#16.136.50':139
'20#.#16.11.87':445
'20#.#16.208.10':445
'20#.#16.38.53':445
'20#.#16.26.160':445
'20#.#16.127.30':445
'20#.#16.63.208':445
'20#.#16.44.46':445
'20#.#16.131.168':445
'20#.#16.45.137':445
'20#.#16.142.187':445
'20#.#16.249.190':445
'20#.#16.24.204':139
'20#.#16.9.227':139
'20#.#16.203.47':139
'20#.#16.116.95':139
'20#.#16.66.239':139
'20#.#16.37.21':445
'20#.#16.135.197':445
'20#.#16.74.16':445
'20#.#16.21.142':445
'20#.#16.207.11':445
'20#.#16.117.199':445
'20#.#16.150.175':445
'20#.#16.185.5':445
'20#.#16.19.223':445
'20#.#16.40.138':445
'20#.#16.87.210':445
'20#.#16.51.186':445
'20#.#16.139.52':445
'20#.#16.250.29':445
'20#.#16.21.51':445
'20#.#16.42.229':445
'20#.#16.186.230':445
'20#.#16.206.15':445
'20#.#16.158.249':445
'20#.#16.135.158':445
'20#.#16.249.176':445
'20#.#16.150.131':445
'20#.#16.226.129':445
'20#.#16.5.35':445
'20#.#16.177.128':445
'20#.#16.167.206':445
'20#.#16.45.41':445
'20#.#16.98.92':445
'20#.#16.178.214':445
'20#.#16.69.7':139
'20#.#16.45.137':139
'20#.#16.44.46':139
'20#.#16.249.190':139
'20#.#16.63.208':139
'20#.#16.142.187':139
'20#.#16.131.168':139
'20#.#16.249.176':139
'20#.#16.158.249':139
'20#.#16.226.129':139
'20#.#16.150.175':139
'20#.#16.150.131':139
'20#.#16.207.11':139
'20#.#16.135.197':139
'20#.#16.117.199':139
'20#.#16.37.21':139
'20#.#16.21.142':139
'20#.#16.74.16':139
'20#.#16.11.87':139
'20#.#16.208.10':139
'20#.#16.38.53':139
'20#.#16.26.160':139
'20#.#16.127.30':139
'20#.#16.135.158':139
'20#.#16.42.229':139
'20#.#16.250.29':139
'20#.#16.206.15':139
'20#.#16.139.52':139
'20#.#16.186.230':139
'20#.#16.21.51':139
'20#.#16.108.47':139
'20#.#16.180.108':139
'20#.#16.182.145':139
'20#.#16.228.132':139
'20#.#16.118.18':139
'20#.#16.45.41':139
'20#.#16.177.128':139
'20#.#16.178.214':139
'20#.#16.5.35':139
'20#.#16.98.92':139
'20#.#16.167.206':139
'20#.#16.185.5':139
'20#.#16.19.223':139
'20#.#16.40.138':139
'20#.#16.87.210':139
'20#.#16.51.186':139
'20#.#16.66.123':445
'20#.#16.119.177':445
'20#.#16.82.144':445
'20#.#16.78.43':445
'20#.#16.115.172':445
'20#.#16.206.109':445
'20#.#16.178.220':139
'20#.#16.230.178':139
'20#.#16.50.106':445
'20#.#16.15.206':445
'20#.#16.160.15':445
'20#.#16.129.136':445
'20#.#16.79.140':445
'20#.#16.225.213':445
'20#.#16.52.90':445
'20#.#16.106.5':445
'20#.#16.56.213':445
'20#.#16.127.115':445
'20#.#16.186.127':445
'20#.#16.124.210':445
'20#.#16.91.212':445
'20#.#16.100.39':445
'20#.#16.77.195':139
'20#.#16.114.82':139
'20#.#16.170.6':139
'20#.#16.137.118':139
'20#.#16.226.36':139
'20#.#16.36.139':139
'20#.#16.209.251':139
'20#.#16.83.142':139
'20#.#16.50.84':139
'20#.#16.62.81':139
'20#.#16.101.25':139
'20#.#16.61.41':139
'20#.#16.77.195':445
'20#.#16.207.54':445
'20#.#16.230.178':445
'20#.#16.207.54':139
'20#.#16.178.220':445
'20#.#16.72.49':139
'20#.#16.100.200':139
'20#.#16.78.150':139
'20#.#16.107.120':139
'20#.#16.75.243':139
'20#.#16.64.248':139
'20#.#16.155.168':445
'20#.#16.44.46':9988
'20#.#16.127.30':9988
'20#.#16.207.11':9988
'20#.#16.38.53':9988
'20#.#16.150.131':9988
'20#.#16.208.10':9988
'20#.#16.11.87':9988
'20#.#16.37.21':9988
'20#.#16.142.187':9988
'20#.#16.21.142':9988
'20#.#16.117.199':9988
'20#.#16.108.47':445
'20#.#16.180.108':445
'20#.#16.182.145':445
'20#.#16.228.132':445
'20#.#16.118.18':445
'20#.#16.69.7':445
'20#.#16.24.204':445
'20#.#16.9.227':445
'20#.#16.203.47':445
'20#.#16.116.95':445
'20#.#16.66.239':445
'20#.#16.249.190':9988
'20#.#16.115.172':139
'20#.#16.82.144':139
'20#.#16.78.43':139
'20#.#16.127.115':139
'20#.#16.186.127':139
'20#.#16.66.123':139
'20#.#16.160.15':139
'20#.#16.50.106':139
'20#.#16.15.206':139
'20#.#16.119.177':139
'20#.#16.206.109':139
'20#.#16.106.5':139
'20#.#16.225.213':139
'20#.#16.52.90':139
'20#.#16.150.175':9988
'20#.#16.155.168':139
'20#.#16.129.136':139
'20#.#16.100.39':139
'20#.#16.124.210':139
'20#.#16.91.212':139
'20#.#16.79.140':139
'20#.#16.56.213':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней