Trojan.Starman.5613

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER1ff0.dir00\svchost.exe.mdmp 16325836412030056

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1ff0.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#51.226.82':139
'20#.#51.20.226':139
'20#.#51.84.159':139
'20#.#51.86.129':139
'20#.#51.32.169':139
'20#.#51.65.81':139
'20#.#51.199.64':139
'20#.#51.77.111':139
'20#.#51.35.130':139
'20#.#51.99.30':139
'20#.#51.236.236':139
'20#.#51.6.107':139
'20#.#51.124.33':139
'20#.#51.4.16':445
'20#.#51.81.119':445
'20#.#51.14.157':445
'20#.#51.157.223':139
'20#.#51.236.175':139
'20#.#51.46.143':139
'20#.#51.29.51':139
'20#.#51.102.111':139
'20#.#51.32.169':445
'20#.#51.84.159':445
'20#.#51.86.129':445
'20#.#51.236.175':445
'20#.#51.236.236':445
'20#.#51.99.30':445
'20#.#51.77.111':445
'20#.#51.35.130':445
'20#.#51.226.82':445
'20#.#51.20.226':445
'20#.#51.157.223':445
'20#.#51.134.211':139
'20#.#51.94.57':139
'20#.#51.126.234':139
'20#.#51.124.90':139
'20#.#51.38.94':139
'20#.#51.102.111':445
'20#.#51.46.143':445
'20#.#51.29.51':445
'20#.#51.6.107':445
'20#.#51.124.33':445
'20#.#51.37.127':445
'20#.#51.37.127':139
'20#.#51.81.119':139
'20#.#51.10.88':139
'20#.#51.41.69':139
'20#.#51.100.155':139
'20#.#51.61.214':445
'20#.#51.131.154':445
'20#.#51.52.128':445
'20#.#51.14.157':139
'20#.#51.4.16':139
'20#.#51.121.243':139
'20#.#51.87.199':139
'20#.#51.143.207':139
'20#.#51.199.155':139
'20#.#51.208.1':139
'20#.#51.155.208':139
'20#.#51.92.75':139
'20#.#51.140.250':139
'20#.#51.225.246':139
'20#.#51.154.69':139
'20#.#51.183.171':139
'20#.#51.225.246':445
'20#.#51.92.75':445
'20#.#51.183.171':445
'20#.#51.143.207':445
'20#.#51.154.69':445
'20#.#51.100.155':445
'20#.#51.10.88':445
'20#.#51.41.69':445
'20#.#51.140.250':445
'20#.#51.121.243':445
'20#.#51.87.199':445
'20#.#51.154.70':445
'20#.#51.83.34':445
'20#.151.7.1':445
'20#.#51.84.44':445
'20#.#51.223.126':445
'20#.#51.155.208':445
'20#.#51.199.155':445
'20#.#51.208.1':445
'20#.#51.48.235':445
'20#.#51.1.252':445
'20#.#51.65.81':445
'20#.#51.43.87':445
'20#.#51.12.7':445
'20#.#51.174.233':445
'20#.#51.96.185':445
'20#.#51.159.2':445
'20#.#51.23.198':139
'20#.#51.246.233':139
'20#.#51.198.140':445
'20#.#51.176.48':445
'20#.#51.140.176':445
'20#.#51.242.119':445
'20#.#51.23.74':445
'20#.#51.168.130':445
'20#.#51.18.208':445
'20#.#51.84.176':445
'20#.#51.245.178':445
'20#.#51.169.159':445
'20#.#51.38.135':445
'20#.#51.233.4':445
'20#.#51.13.184':445
'20#.#51.104.116':445
'20#.#51.9.169':139
'20#.#51.86.210':139
'20#.#51.113.48':139
'20#.#51.211.154':139
'20#.#51.199.53':139
'20#.#51.27.213':139
'20#.#51.171.60':139
'20#.#51.49.5':139
'20#.#51.142.214':139
'20#.#51.26.103':139
'20#.#51.102.149':139
'20#.#51.12.250':139
'20#.#51.10.63':139
'20#.#51.79.148':139
'20#.#51.195.142':139
'20#.#51.148.109':139
'20#.#51.104.7':139
'20#.#51.194.177':139
'20#.#51.20.189':139
'20#.#51.89.231':139
'20#.#51.2.134':139
'20#.#51.114.216':445
'20#.#51.114.216':139
'20#.#51.84.176':139
'20#.#51.183.41':139
'20#.#51.119.59':139
'20#.#51.145.177':139
'20#.#51.168.130':139
'20#.#51.13.184':139
'20#.#51.23.74':139
'20#.#51.245.178':139
'20#.#51.18.208':139
'20#.#51.86.241':139
'20#.#51.126.234':445
'20#.#51.134.211':445
'20#.#51.38.94':445
'20#.#51.199.64':445
'20#.#51.124.90':445
'20#.#51.78.133':139
'20#.#51.10.73':139
'20#.#51.20.243':139
'20#.#51.94.57':445
'20#.#51.124.68':139
'20#.#51.20.243':445
'20#.#51.78.133':445
'20#.#51.124.68':445
'20#.#51.140.176':139
'20#.#51.198.140':139
'20#.#51.145.177':445
'20#.#51.183.41':445
'20#.#51.119.59':445
'20#.#51.10.73':445
'20#.#51.86.241':445
'20#.#51.176.48':139
'20#.#51.38.135':139
'20#.#51.242.119':139
'20#.#51.169.159':139
'20#.#51.104.116':139
'20#.#51.233.4':139
'20#.#51.43.87':139
'20#.#51.12.7':139
'20#.#51.174.233':139
'20#.#51.96.185':139
'20#.#51.159.2':139
'20#.#51.1.252':139
'20#.#51.20.213':445
'20#.#51.55.53':445
'20#.#51.75.102':445
'20#.#51.232.204':445
'20#.#51.78.147':445
'20#.#51.124.254':445
'20#.#51.73.2':445
'20#.#51.254.150':445
'20#.#51.181.207':445
'20#.#51.151.15':445
'20#.#51.169.194':445
'20#.#51.20.20':139
'20#.#51.72.7':139
'20#.#51.95.137':139
'20#.#51.41.117':139
'20#.#51.160.82':139
'20#.#51.65.57':445
'20#.#51.23.13':445
'20#.#51.211.164':139
'20#.#51.139.239':139
'20#.#51.101.94':139
'20#.#51.198.27':445
'20#.#51.202.19':445
'20#.#51.186.219':445
'20#.#51.67.254':445
'20#.#51.132.214':445
'20#.#51.67.204':445
'20#.#51.70.82':445
'20#.#51.148.132':445
'20#.#51.13.79':445
'20#.#51.72.247':445
'20#.#51.36.246':445
'20#.#51.83.12':445
'20#.#51.131.177':445
'20#.#51.10.196':445
'20#.#51.145.3':445
'20#.#51.43.101':445
'20#.#51.61.18':445
'20#.#51.185.125':445
'20#.#51.11.115':445
'20#.#51.37.172':445
'20#.#51.48.37':445
'20#.#51.59.206':139
'20#.#51.43.101':139
'20#.#51.10.196':139
'20#.#51.145.3':139
'20#.#51.124.254':139
'20#.#51.73.2':139
'20#.#51.48.37':139
'20#.#51.11.115':139
'20#.#51.37.172':139
'20#.#51.83.12':139
'20#.#51.131.177':139
'20#.#51.254.150':139
'20#.#51.232.204':139
'20#.#51.169.194':139
'20#.#51.78.147':139
'20#.#51.65.57':139
'20#.#51.23.13':139
'20#.#51.181.207':139
'20#.#51.151.15':139
'20#.#51.55.53':139
'20#.#51.75.102':139
'20#.#51.20.213':139
'20#.#51.169.217':139
'20#.#51.60.169':139
'20#.#51.217.116':139
'20#.#51.67.204':139
'20#.#51.70.82':139
'20#.#51.173.195':139
'20#.#51.34.47':139
'20#.#51.183.234':139
'20#.#51.111.93':139
'20#.#51.97.30':139
'20#.#51.148.132':139
'20#.#51.67.254':139
'20#.#51.186.219':139
'20#.#51.185.125':139
'20#.#51.61.18':139
'20#.#51.36.246':139
'20#.#51.202.19':139
'20#.#51.72.247':139
'20#.#51.13.79':139
'20#.#51.132.214':139
'20#.#51.198.27':139
'20#.#51.217.116':445
'20#.#51.148.149':445
'20#.#51.51.88':445
'20#.#51.33.123':445
'20#.#51.67.202':445
'20#.#51.253.37':445
'20#.#51.13.236':445
'20#.#51.194.181':445
'20#.#51.73.146':445
'20#.#51.83.94':445
'20#.#51.56.83':445
'20#.#51.222.193':445
'20#.#51.27.121':139
'20#.#51.155.132':139
'20#.#51.121.159':139
'20#.#51.61.14':139
'20#.#51.41.250':139
'20#.#51.210.9':139
'20#.#51.14.210':139
'20#.#51.106.83':139
'20#.#51.226.81':139
'20#.#51.9.226':139
'20#.#51.131.154':139
'20#.#51.84.44':139
'20#.#51.61.214':139
'20#.#51.14.210':445
'20#.#51.52.128':139
'20#.#51.83.34':139
'20#.#51.48.235':139
'20#.#51.154.70':139
'20#.#51.223.126':139
'20#.151.7.1':139
'20#.#51.210.9':445
'20#.#51.41.250':445
'20#.#51.121.159':445
'20#.#51.61.14':445
'20#.#51.60.69':445
'20#.#51.2.210':445
'20#.#51.9.226':445
'20#.#51.106.83':445
'20#.#51.226.81':445
'20#.#51.27.121':445
'20#.#51.155.132':445
'20#.#51.2.210':139
'20#.#51.101.94':445
'20#.#51.211.164':445
'20#.#51.72.7':445
'20#.#51.20.20':445
'20#.#51.139.239':445
'20#.#51.254.150':9988
'20#.#51.124.254':9988
'20#.#51.151.15':9988
'20#.#51.65.57':9988
'20#.#51.181.207':9988
'20#.#51.95.137':445
'20#.#51.97.30':445
'20#.#51.183.234':445
'20#.#51.60.169':445
'20#.#51.169.217':445
'20#.#51.111.93':445
'20#.#51.41.117':445
'20#.#51.160.82':445
'20#.#51.59.206':445
'20#.#51.173.195':445
'20#.#51.34.47':445
'20#.#51.51.88':139
'20#.#51.83.94':139
'20#.#51.148.149':139
'20#.#51.253.37':139
'20#.#51.33.123':139
'20#.#51.194.181':139
'20#.#51.60.69':139
'20#.#51.13.236':139
'20#.#51.56.83':139
'20#.#51.73.146':139
'20#.#51.67.202':139
'20#.#51.48.37':9988
'20#.#51.11.115':9988
'20#.#51.37.172':9988
'20#.#51.10.196':9988
'20#.#51.83.12':9988
'20#.#51.202.19':9988
'20#.#51.222.193':139
'20#.#51.186.219':9988
'20#.#51.61.18':9988
'20#.#51.67.254':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней