Trojan.Starman.5598

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERcef9.dir00\svchost.exe.mdmp 16325836412032112

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERcef9.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#4.240.138':139
'19#.#4.202.240':139
'19#.#4.55.156':139
'19#.#4.128.112':139
'19#.#4.33.14':139
'19#.#4.228.202':139
'19#.#4.202.225':139
'19#.#4.125.123':139
'19#.#4.215.192':139
'19#.#4.49.72':139
'19#.#4.241.165':139
'19#.#4.87.78':139
'19#.#4.196.64':139
'19#.#4.252.83':139
'19#.#4.253.88':139
'19#.#4.52.83':139
'19#.#4.213.95':139
'19#.#4.251.199':139
'19#.#4.113.206':139
'19#.#4.7.230':139
'19#.#4.165.213':139
'19#.#4.170.199':139
'19#.#4.40.246':139
'19#.#4.110.113':445
'19#.#4.109.195':445
'19#.#4.228.85':445
'19#.#4.66.214':139
'19#.54.8.15':445
'19#.#4.56.242':445
'19#.#4.85.54':445
'19#.#4.158.213':445
'19#.#4.246.138':445
'19#.#4.116.58':445
'19#.#4.77.73':445
'19#.#4.172.92':139
'19#.#4.103.152':139
'19#.#4.236.209':139
'19#.#4.219.254':139
'19#.#4.30.219':139
'19#.#4.116.131':139
'19#.#4.211.36':139
'19#.#4.164.110':139
'19#.#4.83.185':139
'19#.#4.153.116':139
'19#.#4.34.154':139
'19#.#4.66.230':445
'19#.#4.174.148':445
'19#.#4.121.66':445
'19#.#4.111.193':445
'19#.#4.151.127':445
'19#.#4.90.174':445
'19#.#4.100.238':445
'19#.#4.77.235':445
'19#.#4.191.130':445
'19#.#4.20.91':445
'19#.#4.59.245':445
'19#.#4.255.90':445
'19#.#4.233.254':445
'19#.#4.90.210':445
'19#.#4.212.208':445
'19#.54.9.97':445
'19#.#4.35.83':445
'19#.#4.189.108':445
'19#.#4.112.189':445
'19#.#4.66.58':445
'19#.#4.196.56':445
'19#.#4.70.196':445
'19#.#4.231.171':445
'19#.#4.85.54':139
'19#.#4.158.213':139
'19#.#4.246.138':139
'19#.#4.116.58':139
'19#.#4.77.73':139
'19#.#4.134.92':139
'19#.#4.254.104':139
'19#.#4.61.70':139
'19#.#4.14.171':139
'19#.#4.254.2':139
'19#.#4.33.195':139
'19#.#4.190.249':445
'19#.#4.101.132':445
'19#.#4.19.84':445
'19#.#4.126.70':445
'19#.#4.84.155':445
'19#.#4.173.252':445
'19#.#4.109.195':139
'19#.#4.56.242':139
'19#.#4.110.113':139
'19#.54.8.15':139
'19#.#4.228.85':139
'19#.54.2.40':139
'19#.#4.221.88':139
'19#.#4.128.156':139
'19#.#4.127.70':139
'19#.#4.31.17':139
'19#.#4.12.28':139
'19#.#4.214.54':139
'19#.#4.49.121':139
'19#.#4.172.231':139
'19#.#4.71.123':139
'19#.#4.200.71':139
'19#.#4.104.201':139
'19#.54.14.6':139
'19#.#4.32.84':139
'19#.#4.107.0':139
'19#.#4.84.93':139
'19#.#4.171.237':139
'19#.#4.90.113':139
'19#.#4.62.90':139
'19#.#4.113.86':139
'19#.#4.199.58':139
'19#.#4.26.90':139
'19#.#4.104.174':139
'19#.#4.235.218':139
'19#.#4.63.235':139
'19#.#4.213.12':139
'19#.#4.98.155':139
'19#.#4.207.246':139
'19#.#4.26.196':139
'19#.#4.196.212':139
'19#.#4.245.81':139
'19#.#4.159.71':139
'19#.#4.140.82':139
'19#.#4.206.172':139
'19#.#4.81.160':139
'19#.#4.26.157':139
'19#.#4.112.118':139
'19#.#4.89.109':139
'19#.#4.73.38':139
'19#.#4.16.38':139
'19#.#4.246.86':139
'19#.#4.34.198':139
'19#.#4.221.236':139
'19#.#4.92.249':139
'19#.#4.247.22':139
'19#.#4.7.230':445
'19#.#4.251.199':445
'19#.#4.170.199':445
'19#.#4.213.95':445
'19#.#4.165.213':445
'19#.#4.113.206':445
'19#.#4.240.138':445
'19#.#4.202.240':445
'19#.#4.55.156':445
'19#.#4.128.112':445
'19#.#4.33.14':445
'19#.#4.14.171':445
'19#.#4.254.104':445
'19#.#4.33.195':445
'19#.#4.134.92':445
'19#.#4.254.2':445
'19#.#4.61.70':445
'19#.#4.87.78':445
'19#.#4.196.64':445
'19#.#4.252.83':445
'19#.#4.253.88':445
'19#.#4.52.83':445
'19#.#4.228.202':445
'19#.#4.83.185':445
'19#.#4.211.36':445
'19#.#4.34.154':445
'19#.#4.116.131':445
'19#.#4.153.116':445
'19#.#4.164.110':445
'19#.#4.242.232':139
'19#.#4.100.242':139
'19#.#4.149.193':139
'19#.#4.66.214':445
'19#.#4.204.75':139
'19#.#4.202.225':445
'19#.#4.125.123':445
'19#.#4.215.192':445
'19#.#4.49.72':445
'19#.#4.241.165':445
'19#.#4.40.246':445
'19#.#4.172.92':445
'19#.#4.103.152':445
'19#.#4.236.209':445
'19#.#4.219.254':445
'19#.#4.30.219':445
'19#.#4.109.154':445
'19#.#4.173.72':445
'19#.#4.142.131':445
'19#.#4.142.64':445
'19#.#4.77.18':445
'19#.#4.73.59':445
'19#.#4.23.244':445
'19#.#4.78.171':445
'19#.#4.48.165':445
'19#.#4.35.70':445
'19#.#4.91.94':445
'19#.#4.156.60':139
'19#.#4.197.69':139
'19#.#4.246.205':139
'19#.#4.244.77':139
'19#.#4.156.144':139
'19#.#4.107.85':139
'19#.#4.245.146':445
'19#.#4.36.135':445
'19#.#4.50.128':445
'19#.#4.54.109':445
'19#.#4.47.70':445
'19#.#4.2.189':445
'19#.#4.193.177':445
'19#.#4.150.65':445
'19#.#4.49.203':445
'19#.#4.117.111':445
'19#.#4.95.178':445
'19#.#4.89.219':445
'19#.#4.67.192':445
'19#.#4.255.150':445
'19#.#4.192.6':445
'19#.#4.159.214':445
'19#.#4.6.156':445
'19#.#4.232.75':445
'19#.#4.112.23':445
'19#.#4.201.128':445
'19#.#4.28.12':445
'19#.#4.155.33':445
'19#.#4.240.111':445
'19#.#4.223.184':445
'19#.#4.173.75':445
'19#.#4.235.146':445
'19#.#4.138.240':445
'19#.#4.17.126':445
'19#.#4.23.244':139
'19#.#4.78.171':139
'19#.#4.48.165':139
'19#.#4.35.70':139
'19#.#4.91.94':139
'19#.#4.2.189':139
'19#.#4.232.75':139
'19#.#4.112.23':139
'19#.#4.201.128':139
'19#.#4.28.12':139
'19#.#4.155.33':139
'19#.#4.36.135':139
'19#.#4.142.64':139
'19#.#4.142.131':139
'19#.#4.47.70':139
'19#.#4.54.109':139
'19#.#4.50.128':139
'19#.#4.173.72':139
'19#.#4.73.59':139
'19#.#4.109.154':139
'19#.#4.245.146':139
'19#.#4.77.18':139
'19#.#4.240.111':139
'19#.#4.67.192':139
'19#.#4.255.150':139
'19#.#4.192.6':139
'19#.#4.159.214':139
'19#.#4.6.156':139
'19#.#4.227.89':139
'19#.#4.18.16':139
'19#.#4.116.160':139
'19#.#4.51.165':139
'19#.#4.200.226':139
'19#.#4.246.101':139
'19#.#4.223.184':139
'19#.#4.173.75':139
'19#.#4.235.146':139
'19#.#4.138.240':139
'19#.#4.17.126':139
'19#.#4.117.111':139
'19#.#4.150.65':139
'19#.#4.89.219':139
'19#.#4.193.177':139
'19#.#4.95.178':139
'19#.#4.49.203':139
'19#.#4.100.238':139
'19#.#4.77.235':139
'19#.#4.191.130':139
'19#.#4.20.91':139
'19#.#4.59.245':139
'19#.#4.231.171':139
'19#.#4.190.249':139
'19#.#4.101.132':139
'19#.#4.19.84':139
'19#.#4.126.70':139
'19#.#4.84.155':139
'19#.#4.189.108':139
'19#.#4.112.189':139
'19#.#4.66.58':139
'19#.#4.196.56':139
'19#.#4.70.196':139
'19#.#4.111.193':139
'19#.#4.174.148':139
'19#.#4.90.174':139
'19#.#4.66.230':139
'19#.#4.151.127':139
'19#.#4.121.66':139
'19#.#4.173.252':139
'19#.#4.14.63':445
'19#.#4.171.136':445
'19#.#4.214.128':445
'19#.#4.155.106':445
'19#.54.1.70':445
'19#.#4.21.108':445
'19#.#4.191.181':445
'19#.#4.22.62':445
'19#.#4.98.135':445
'19#.#4.20.249':445
'19#.#4.60.21':445
'19#.#4.197.55':445
'19#.#4.212.188':445
'19#.#4.184.14':445
'19#.#4.116.24':445
'19#.#4.14.90':445
'19#.#4.12.34':445
'19#.#4.162.64':445
'19#.#4.106.84':445
'19#.54.69.7':445
'19#.54.49.1':445
'19#.#4.117.224':445
'19#.#4.201.128':9988
'19#.#4.50.128':9988
'19#.#4.232.75':9988
'19#.#4.107.85':445
'19#.#4.173.72':9988
'19#.#4.255.150':9988
'19#.#4.197.55':139
'19#.#4.212.188':139
'19#.#4.184.14':139
'19#.#4.116.24':139
'19#.#4.14.90':139
'19#.#4.51.165':445
'19#.#4.18.16':445
'19#.#4.246.101':445
'19#.#4.227.89':445
'19#.#4.200.226':445
'19#.#4.116.160':445
'19#.#4.156.60':445
'19#.#4.197.69':445
'19#.#4.246.205':445
'19#.#4.244.77':445
'19#.#4.156.144':445
'19#.#4.12.34':139
'19#.#4.191.181':139
'19#.#4.22.62':139
'19#.#4.60.21':139
'19#.#4.98.135':139
'19#.#4.20.249':139
'19#.#4.212.208':139
'19#.#4.233.254':139
'19#.#4.35.83':139
'19#.#4.255.90':139
'19#.54.9.97':139
'19#.#4.90.210':139
'19#.#4.162.64':139
'19#.#4.106.84':139
'19#.54.69.7':139
'19#.54.49.1':139
'19#.#4.117.224':139
'19#.#4.155.106':139
'19#.#4.171.136':139
'19#.#4.21.108':139
'19#.#4.14.63':139
'19#.54.1.70':139
'19#.#4.214.128':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней