Trojan.Starman.5585

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER4ba7.dir00\svchost.exe.mdmp 16325836412032132

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER4ba7.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#45.154.63':139
'20#.#45.44.216':139
'20#.#45.91.78':139
'20#.#45.196.186':139
'20#.#45.78.197':139
'20#.#45.199.231':139
'20#.#45.253.54':139
'20#.#45.6.80':139
'20#.#45.5.45':139
'20#.#45.80.5':139
'20#.#45.199.75':139
'20#.#45.134.161':139
'20#.#45.141.119':139
'20#.#45.13.238':139
'20#.#45.150.26':139
'20#.#45.175.124':139
'20#.#45.176.179':139
'20#.#45.100.159':139
'20#.#45.233.28':139
'20#.#45.55.75':139
'20#.#45.28.135':139
'20#.#45.59.178':139
'20#.#45.55.75':445
'20#.#45.28.135':445
'20#.#45.141.119':445
'20#.#45.13.238':445
'20#.#45.134.161':445
'20#.#45.199.75':445
'20#.#45.196.186':445
'20#.#45.100.159':445
'20#.#45.233.28':445
'20#.#45.176.179':445
'20#.#45.175.124':445
'20#.#45.42.219':139
'20#.#45.115.197':139
'20#.#45.44.177':139
'20#.#45.30.235':139
'20#.#45.106.140':139
'20#.#45.31.6':445
'20#.#45.150.26':445
'20#.#45.178.56':445
'20#.#45.26.180':139
'20#.#45.181.232':445
'20#.#45.251.110':139
'20#.#45.158.207':139
'20#.#45.0.186':139
'20#.#45.151.5':139
'20#.#45.56.147':139
'20#.#45.166.148':139
'20#.#45.172.251':445
'20#.#45.165.29':139
'20#.#45.10.12':139
'20#.#45.29.87':139
'20#.#45.19.180':139
'20#.#45.103.3':139
'20#.#45.193.199':139
'20#.#45.132.240':139
'20#.#45.172.251':139
'20#.#45.249.162':139
'20#.#45.191.2':139
'20#.#45.189.95':139
'20#.#45.15.61':139
'20#.#45.188.84':139
'20#.#45.54.9':139
'20#.#45.249.162':445
'20#.#45.10.12':445
'20#.#45.29.87':445
'20#.#45.158.207':445
'20#.#45.0.186':445
'20#.#45.251.110':445
'20#.#45.178.56':139
'20#.#45.31.6':139
'20#.#45.181.232':139
'20#.#45.165.29':445
'20#.#45.166.148':445
'20#.#45.56.147':445
'20#.#45.188.84':445
'20#.#45.54.9':445
'20#.#45.193.199':445
'20#.#45.132.240':445
'20#.#45.103.3':445
'20#.#45.19.180':445
'20#.#45.151.5':445
'20#.#45.189.95':445
'20#.#45.15.61':445
'20#.#45.191.2':445
'20#.#45.78.197':445
'20#.#45.238.191':139
'20#.#45.247.58':139
'20#.#45.161.207':139
'20#.#45.87.169':445
'20#.#45.42.22':139
'20#.#45.79.39':139
'20#.#45.128.185':139
'20#.#45.134.246':139
'20#.#45.30.72':139
'20#.#45.246.29':139
'20#.#45.46.138':445
'20#.#45.167.13':445
'20#.#45.223.3':445
'20#.#45.114.115':445
'20#.#45.171.172':445
'20#.#45.233.29':445
'20#.#45.59.167':445
'20#.#45.159.136':445
'20#.#45.68.223':445
'20#.#45.32.114':445
'20#.#45.217.159':445
'20#.#45.90.200':139
'20#.#45.64.86':139
'20#.#45.109.136':139
'20#.#45.62.23':139
'20#.#45.211.35':139
'20#.#45.96.209':139
'20#.#45.54.136':139
'20#.#45.135.70':139
'20#.#45.135.125':139
'20#.#45.109.147':139
'20#.#45.212.182':139
'20#.#45.24.104':139
'20#.#45.246.50':139
'20#.#45.131.113':139
'20#.#45.51.76':139
'20#.#45.9.40':139
'20#.#45.191.43':139
'20#.#45.114.185':139
'20#.#45.201.114':139
'20#.#45.186.34':139
'20#.#45.140.71':139
'20#.#45.50.119':139
'20#.#45.26.180':445
'20#.#45.28.150':139
'20#.#45.115.197':445
'20#.#45.44.177':445
'20#.#45.42.219':445
'20#.#45.152.107':139
'20#.#45.13.131':139
'20#.#45.17.252':139
'20#.#45.125.202':139
'20#.#45.98.45':139
'20#.#45.106.140':445
'20#.#45.5.45':445
'20#.#45.80.5':445
'20#.#45.44.216':445
'20#.#45.91.78':445
'20#.#45.154.63':445
'20#.#45.59.178':445
'20#.#45.30.235':445
'20#.#45.253.54':445
'20#.#45.6.80':445
'20#.#45.199.231':445
'20#.#45.110.10':139
'20#.#45.125.202':445
'20#.#45.98.45':445
'20#.#45.28.150':445
'20#.#45.46.138':139
'20#.#45.87.169':139
'20#.#45.110.10':445
'20#.#45.41.249':445
'20#.#45.13.131':445
'20#.#45.17.252':445
'20#.#45.152.107':445
'20#.#45.159.136':139
'20#.#45.114.115':139
'20#.#45.167.13':139
'20#.#45.233.29':139
'20#.#45.41.249':139
'20#.#45.171.172':139
'20#.#45.68.223':139
'20#.#45.59.167':139
'20#.#45.217.159':139
'20#.#45.223.3':139
'20#.#45.32.114':139
'20#.#45.232.55':445
'20#.#45.88.217':445
'20#.#45.86.88':445
'20#.#45.43.107':445
'20#.#45.175.20':445
'20#.#45.21.130':445
'20#.#45.65.241':445
'20#.#45.18.57':445
'20#.#45.7.63':445
'20#.#45.158.13':445
'20#.#45.129.135':445
'20#.#45.100.241':445
'20#.#45.118.221':139
'20#.#45.42.119':139
'20#.#45.102.236':139
'20#.#45.241.247':139
'20#.#45.115.69':139
'20#.#45.154.142':445
'20#.#45.21.131':445
'20#.#45.94.58':139
'20#.#45.32.11':139
'20#.#45.143.204':139
'20#.#45.8.222':445
'20#.#45.205.196':445
'20#.#45.24.241':445
'20#.#45.87.136':445
'20#.#45.33.6':445
'20#.#45.79.82':445
'20#.#45.61.224':445
'20#.#45.166.193':445
'20#.#45.237.157':445
'20#.#45.155.160':445
'20#.#45.11.219':445
'20#.#45.94.141':445
'20#.#45.138.210':445
'20#.#45.164.39':445
'20#.#45.189.185':445
'20#.#45.169.8':445
'20#.#45.76.198':445
'20#.#45.136.97':445
'20#.#45.63.110':445
'20#.#45.214.150':445
'20#.#45.255.217':445
'20#.#45.168.119':445
'20#.#45.169.8':139
'20#.#45.76.198':139
'20#.#45.8.222':139
'20#.#45.65.241':139
'20#.#45.18.57':139
'20#.#45.255.217':139
'20#.#45.168.119':139
'20#.#45.164.39':139
'20#.#45.189.185':139
'20#.#45.138.210':139
'20#.#45.7.63':139
'20#.#45.43.107':139
'20#.#45.175.20':139
'20#.#45.154.142':139
'20#.#45.21.130':139
'20#.#45.21.131':139
'20#.#45.158.13':139
'20#.#45.129.135':139
'20#.#45.86.88':139
'20#.#45.100.241':139
'20#.#45.88.217':139
'20#.#45.214.150':139
'20#.#45.17.244':139
'20#.#45.201.17':139
'20#.#45.198.196':139
'20#.#45.61.224':139
'20#.#45.166.193':139
'20#.#45.13.27':139
'20#.#45.119.13':139
'20#.#45.27.85':139
'20#.#45.191.78':139
'20#.#45.1.145':139
'20#.#45.237.157':139
'20#.#45.33.6':139
'20#.#45.79.82':139
'20#.#45.94.141':139
'20#.#45.136.97':139
'20#.#45.63.110':139
'20#.#45.155.160':139
'20#.#45.11.219':139
'20#.#45.205.196':139
'20#.#45.87.136':139
'20#.#45.24.241':139
'20#.#45.198.196':445
'20#.#45.142.163':445
'20#.#45.115.130':445
'20#.#45.43.127':445
'20#.#45.34.209':139
'20#.#45.232.55':139
'20#.#45.211.217':445
'20#.#45.93.143':445
'20#.#45.10.74':445
'20#.#45.20.53':445
'20#.#45.73.58':445
'20#.#45.209.8':139
'20#.#45.173.129':139
'20#.#45.24.229':139
'20#.#45.113.226':139
'20#.#45.67.210':139
'20#.#45.142.243':139
'20#.#45.8.142':139
'20#.#45.146.130':139
'20#.#45.0.74':139
'20#.#45.84.96':139
'20#.#45.24.228':139
'20#.#45.140.62':445
'20#.#45.84.96':445
'20#.#45.24.228':445
'20#.#45.24.229':445
'20#.#45.113.226':445
'20#.#45.173.129':445
'20#.#45.209.8':445
'20#.#45.34.209':445
'20#.#45.146.130':445
'20#.#45.0.74':445
'20#.#45.8.142':445
'20#.#45.142.243':445
'20#.#45.37.34':445
'20#.#45.121.214':445
'20#.#45.40.238':445
'20#.#45.112.160':445
'20#.#45.36.101':445
'20#.#45.121.229':445
'20#.#45.67.210':445
'20#.#45.105.63':445
'20#.#45.229.0':445
'20#.#45.176.235':445
'20#.#45.94.58':445
'20#.#45.100.241':9988
'20#.#45.143.204':445
'20#.#45.42.119':445
'20#.#45.32.11':445
'20#.#45.169.8':9988
'20#.#45.76.198':9988
'20#.#45.65.241':9988
'20#.#45.21.130':9988
'20#.#45.129.135':9988
'20#.#45.118.221':445
'20#.#45.1.145':445
'20#.#45.27.85':445
'20#.#45.191.78':445
'20#.#45.17.244':445
'20#.#45.201.17':445
'20#.#45.115.69':445
'20#.#45.102.236':445
'20#.#45.241.247':445
'20#.#45.13.27':445
'20#.#45.119.13':445
'20#.#45.138.210':9988
'20#.#45.40.238':139
'20#.#45.37.34':139
'20#.#45.36.101':139
'20#.#45.140.62':139
'20#.#45.112.160':139
'20#.#45.105.63':139
'20#.#45.121.229':139
'20#.#45.176.235':139
'20#.#45.121.214':139
'20#.#45.229.0':139
'20#.#45.93.143':139
'20#.#45.43.127':139
'20#.#45.142.163':139
'20#.#45.63.110':9988
'20#.#45.164.39':9988
'20#.#45.168.119':9988
'20#.#45.10.74':139
'20#.#45.211.217':139
'20#.#45.73.58':139
'20#.#45.115.130':139
'20#.#45.20.53':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней