Trojan.Starman.5578

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER4a03.dir00\svchost.exe.mdmp 16325836412032112

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER4a03.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#06.58.132':139
'20#.#06.63.44':139
'20#.#06.97.183':139
'20#.#06.32.190':139
'20#.#06.9.125':139
'20#.#06.80.146':139
'20#.#06.5.112':139
'20#.#06.146.246':139
'20#.#06.162.138':139
'20#.#06.97.93':139
'20#.#06.81.198':139
'20#.#06.23.77':139
'20#.#06.217.57':139
'20#.#06.10.218':139
'20#.#06.76.171':139
'20#.#06.88.223':139
'20#.#06.54.208':139
'20#.#06.89.247':139
'20#.#06.41.123':139
'20#.#06.34.60':139
'20#.#06.2.54':139
'20#.#06.60.87':139
'20#.#06.78.58':445
'20#.#06.114.95':445
'20#.#06.1.250':445
'20#.#06.180.131':445
'20#.#06.200.78':445
'20#.#06.57.170':445
'20#.#06.88.223':445
'20#.#06.10.218':445
'20#.#06.76.171':445
'20#.#06.118.226':445
'20#.#06.100.102':445
'20#.#06.147.58':139
'20#.#06.7.174':139
'20#.#06.209.108':139
'20#.#06.139.46':139
'20#.#06.32.210':139
'20#.#06.36.91':139
'20#.#06.13.113':139
'20#.#06.177.63':445
'20#.#06.80.105':139
'20#.#06.71.202':139
'20#.#06.16.86':139
'20#.#06.100.102':139
'20#.#06.231.47':445
'20#.#06.70.129':445
'20#.206.1.7':445
'20#.#06.32.191':445
'20#.#06.46.33':445
'20#.#06.94.242':139
'20#.#06.59.137':139
'20#.#06.54.33':139
'20#.#06.149.248':139
'20#.#06.127.93':139
'20#.#06.154.193':139
'20#.#06.194.165':445
'20#.#06.47.232':445
'20#.#06.37.174':445
'20#.#06.137.229':445
'20#.#06.98.19':445
'20#.#06.122.76':445
'20#.#06.50.68':445
'20#.#06.237.254':445
'20#.#06.217.184':445
'20#.#06.176.163':445
'20#.#06.56.124':445
'20#.#06.177.63':139
'20#.#06.180.131':139
'20#.#06.112.95':445
'20#.#06.211.254':445
'20#.#06.210.186':445
'20#.#06.200.78':139
'20#.#06.57.170':139
'20#.#06.118.226':139
'20#.#06.114.95':139
'20#.#06.1.250':139
'20#.#06.78.58':139
'20#.#06.112.95':139
'20#.#06.94.242':445
'20#.#06.210.186':139
'20#.#06.246.126':139
'20#.#06.211.254':139
'20#.#06.127.93':445
'20#.#06.54.33':445
'20#.#06.246.126':445
'20#.#06.59.137':445
'20#.#06.154.193':445
'20#.#06.149.248':445
'20#.#06.23.77':445
'20#.#06.34.159':139
'20#.#06.205.80':139
'20#.#06.159.44':139
'20#.#06.222.87':139
'20#.#06.43.222':139
'20#.#06.96.181':139
'20#.#06.16.113':139
'20#.#06.30.182':139
'20#.#06.221.41':139
'20#.#06.154.58':139
'20#.#06.150.61':139
'20#.#06.201.204':139
'20#.#06.105.195':139
'20#.#06.48.233':445
'20#.#06.64.245':445
'20#.#06.139.66':445
'20#.#06.220.173':139
'20#.#06.85.229':139
'20#.#06.190.13':139
'20#.#06.178.79':139
'20#.#06.78.221':139
'20#.#06.241.201':139
'20#.#06.229.115':139
'20#.#06.224.169':139
'20#.#06.116.36':139
'20#.#06.228.198':139
'20#.#06.0.14':139
'20#.#06.63.161':139
'20#.#06.90.0':139
'20#.#06.52.232':139
'20#.#06.83.84':139
'20#.#06.3.69':139
'20#.#06.167.235':139
'20#.#06.61.221':139
'20#.#06.141.160':139
'20#.#06.16.70':139
'20#.#06.214.135':139
'20#.#06.116.174':139
'20#.#06.19.141':139
'20#.#06.141.175':139
'20#.#06.118.38':139
'20#.#06.205.4':139
'20#.#06.249.216':139
'20#.#06.49.60':139
'20#.#06.157.227':445
'20#.#06.162.138':445
'20#.#06.81.198':445
'20#.#06.97.93':445
'20#.#06.63.44':445
'20#.#06.80.146':445
'20#.#06.5.112':445
'20#.#06.209.108':445
'20#.#06.147.58':445
'20#.#06.32.210':445
'20#.#06.146.246':445
'20#.#06.139.46':445
'20#.#06.60.87':445
'20#.#06.34.60':445
'20#.#06.2.54':445
'20#.#06.54.208':445
'20#.#06.217.57':445
'20#.#06.89.247':445
'20#.#06.97.183':445
'20#.#06.58.132':445
'20#.#06.9.125':445
'20#.#06.32.190':445
'20#.#06.41.123':445
'20#.#06.139.66':139
'20#.#06.48.233':139
'20#.#06.64.245':139
'20#.#06.137.23':139
'20#.#06.157.227':139
'20#.#06.149.157':445
'20#.#06.92.154':445
'20#.#06.137.23':445
'20#.#06.111.146':445
'20#.#06.115.8':445
'20#.#06.80.177':445
'20#.#06.16.86':445
'20#.#06.80.105':445
'20#.#06.71.202':445
'20#.#06.7.174':445
'20#.#06.36.91':445
'20#.#06.13.113':445
'20#.#06.111.146':139
'20#.#06.92.154':139
'20#.#06.80.177':139
'20#.#06.149.157':139
'20#.#06.115.8':139
'20#.#06.211.21':445
'20#.#06.154.228':445
'20#.#06.215.163':445
'20#.#06.102.246':445
'20#.#06.20.4':445
'20#.#06.236.91':445
'20#.#06.42.134':445
'20#.#06.99.148':445
'20#.#06.29.227':445
'20#.#06.103.123':445
'20#.#06.79.205':445
'20#.#06.251.46':445
'20#.#06.77.234':139
'20#.#06.23.176':139
'20#.#06.128.29':139
'20#.#06.17.79':139
'20#.#06.111.37':139
'20#.#06.60.216':139
'20#.#06.41.178':445
'20#.#06.153.59':445
'20#.#06.6.211':445
'20#.#06.232.53':445
'20#.#06.76.203':445
'20#.#06.136.122':445
'20#.#06.250.121':445
'20#.#06.201.27':445
'20#.#06.236.227':445
'20#.#06.248.168':445
'20#.#06.58.250':445
'20#.#06.146.198':445
'20#.#06.242.27':445
'20#.#06.100.2':445
'20#.#06.28.48':445
'20#.#06.178.221':445
'20#.#06.124.74':445
'20#.#06.34.70':445
'20#.#06.109.232':445
'20#.#06.223.124':445
'20#.#06.200.249':445
'20#.#06.190.131':445
'20#.#06.65.19':445
'20#.#06.99.179':445
'20#.#06.140.125':445
'20#.#06.58.47':445
'20#.#06.96.97':445
'20#.#06.125.12':139
'20#.#06.103.123':139
'20#.#06.99.148':139
'20#.#06.29.227':139
'20#.#06.79.205':139
'20#.#06.251.46':139
'20#.#06.223.124':139
'20#.#06.34.70':139
'20#.#06.58.47':139
'20#.#06.124.74':139
'20#.#06.200.249':139
'20#.#06.109.232':139
'20#.#06.41.178':139
'20#.#06.6.211':139
'20#.#06.20.4':139
'20#.#06.153.59':139
'20#.#06.232.53':139
'20#.#06.76.203':139
'20#.#06.215.163':139
'20#.#06.42.134':139
'20#.#06.102.246':139
'20#.#06.154.228':139
'20#.#06.236.91':139
'20#.#06.242.27':139
'20#.#06.127.241':139
'20#.#06.28.48':139
'20#.#06.100.2':139
'20#.#06.178.221':139
'20#.#06.146.198':139
'20#.#06.36.117':139
'20#.#06.186.131':139
'20#.#06.81.208':139
'20#.#06.115.81':139
'20#.#06.184.184':139
'20#.#06.140.125':139
'20#.#06.99.179':139
'20#.#06.65.19':139
'20#.#06.96.97':139
'20#.#06.190.131':139
'20#.#06.248.168':139
'20#.#06.250.121':139
'20#.#06.58.250':139
'20#.#06.136.122':139
'20#.#06.236.227':139
'20#.#06.201.27':139
'20#.#06.127.241':445
'20#.#06.237.254':139
'20#.#06.32.191':139
'20#.#06.50.68':139
'20#.#06.56.124':139
'20#.#06.217.184':139
'20#.#06.46.33':139
'20#.#06.170.30':445
'20#.#06.109.170':445
'20#.#06.70.129':139
'20#.206.1.7':139
'20#.#06.231.47':139
'20#.#06.211.21':139
'20#.#06.137.229':139
'20#.#06.15.170':139
'20#.#06.3.34':139
'20#.#06.170.88':139
'20#.#06.98.19':139
'20#.#06.122.76':139
'20#.#06.176.163':139
'20#.#06.47.232':139
'20#.#06.37.174':139
'20#.#06.194.165':139
'20#.#06.74.198':445
'20#.#06.46.224':445
'20#.#06.153.219':445
'20#.#06.246.172':445
'20#.#06.95.198':445
'20#.#06.47.22':445
'20#.#06.170.88':445
'20#.#06.15.170':445
'20#.#06.3.34':445
'20#.#06.109.50':445
'20#.#06.116.105':445
'20#.#06.141.1':445
'20#.#06.179.237':445
'20#.#06.72.75':445
'20#.#06.93.122':445
'20#.#06.74.136':445
'20#.#06.157.209':445
'20#.#06.78.14':445
'20#.#06.34.248':445
'20#.#06.47.203':445
'20#.#06.197.206':445
'20#.#06.203.49':445
'20#.#06.116.105':139
'20#.#06.41.178':9988
'20#.#06.215.163':9988
'20#.#06.236.91':9988
'20#.#06.60.216':445
'20#.#06.232.53':9988
'20#.#06.200.249':9988
'20#.#06.186.131':9988
'20#.#06.36.117':9988
'20#.#06.127.241':9988
'20#.#06.136.122':9988
'20#.#06.58.250':9988
'20#.#06.81.208':445
'20#.#06.36.117':445
'20#.#06.186.131':445
'20#.#06.115.81':445
'20#.#06.184.184':445
'20#.#06.125.12':445
'20#.#06.77.234':445
'20#.#06.23.176':445
'20#.#06.128.29':445
'20#.#06.17.79':445
'20#.#06.111.37':445
'20#.#06.34.248':139
'20#.#06.246.172':139
'20#.#06.78.14':139
'20#.#06.203.49':139
'20#.#06.47.203':139
'20#.#06.95.198':139
'20#.#06.47.22':139
'20#.#06.109.50':139
'20#.#06.46.224':139
'20#.#06.153.219':139
'20#.#06.74.198':139
'20#.#06.109.170':139
'20#.#06.93.122':139
'20#.#06.170.30':139
'20#.#06.184.184':9988
'20#.#06.23.176':9988
'20#.#06.74.136':139
'20#.#06.157.209':139
'20#.#06.197.206':139
'20#.#06.179.237':139
'20#.#06.72.75':139
'20#.#06.141.1':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней