Trojan.Starman.5637

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER347e.dir00\svchost.exe.mdmp 16325836412032516

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER347e.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#48.79.61':139
'20#.#48.149.150':139
'20#.#48.216.232':139
'20#.#48.40.107':139
'20#.#48.91.194':139
'20#.#48.219.111':139
'20#.#48.186.203':139
'20#.#48.87.116':139
'20#.#48.235.137':139
'20#.#48.114.219':139
'20#.#48.157.227':139
'20#.#48.101.27':139
'20#.#48.83.9':139
'20#.#48.27.130':139
'20#.#48.32.44':139
'20#.#48.25.109':139
'20#.#48.71.33':139
'20#.#48.118.81':139
'20#.#48.214.120':139
'20#.#48.53.245':139
'20#.#48.132.3':139
'20#.#48.209.61':139
'20#.#48.169.87':139
'20#.#48.66.81':445
'20#.#48.248.114':445
'20#.#48.81.151':445
'20#.#48.105.56':445
'20#.#48.151.121':445
'20#.#48.47.241':445
'20#.#48.38.190':445
'20#.#48.93.134':445
'20#.#48.226.74':445
'20#.#48.169.84':445
'20#.#48.17.76':445
'20#.#48.154.70':139
'20#.#48.248.69':139
'20#.#48.135.208':139
'20#.#48.91.162':139
'20#.#48.190.247':139
'20#.#48.148.173':139
'20#.#48.177.136':139
'20#.#48.220.133':139
'20#.#48.166.15':139
'20#.#48.24.51':139
'20#.#48.136.4':139
'20#.#48.67.107':445
'20#.#48.129.67':445
'20#.#48.106.118':445
'20#.#48.61.130':445
'20#.#48.243.120':445
'20#.#48.98.5':445
'20#.#48.24.103':445
'20#.#48.155.5':445
'20#.#48.65.26':445
'20#.#48.161.132':445
'20#.#48.92.111':445
'20#.#48.254.124':445
'20#.#48.181.254':445
'20#.#48.124.188':445
'20#.#48.77.34':445
'20#.#48.20.25':445
'20#.#48.69.182':445
'20#.#48.237.71':445
'20#.#48.64.166':445
'20#.#48.72.104':445
'20#.#48.133.69':445
'20#.#48.104.133':445
'20#.#48.188.174':445
'20#.#48.38.190':139
'20#.#48.93.134':139
'20#.#48.226.74':139
'20#.#48.169.84':139
'20#.#48.17.76':139
'20#.#48.217.93':139
'20#.#48.202.168':139
'20#.#48.33.2':139
'20#.#48.249.3':139
'20#.#48.227.217':139
'20#.#48.3.228':139
'20#.#48.98.143':445
'20#.#48.22.49':445
'20#.#48.233.233':445
'20#.#48.145.211':445
'20#.#48.234.28':445
'20#.#48.105.56':139
'20#.#48.248.114':139
'20#.#48.47.241':139
'20#.#48.66.81':139
'20#.#48.151.121':139
'20#.#48.81.151':139
'20#.#48.217.93':445
'20#.#48.3.226':139
'20#.#48.36.219':139
'20#.#48.25.46':139
'20#.#48.252.169':139
'20#.#48.46.64':139
'20#.#48.217.147':139
'20#.#48.225.31':139
'20#.#48.231.161':139
'20#.#48.12.219':139
'20#.#48.185.242':139
'20#.#48.219.162':139
'20#.#48.199.182':139
'20#.#48.133.223':139
'20#.#48.90.233':139
'20#.#48.223.73':139
'20#.#48.75.241':139
'20#.#48.193.179':139
'20#.#48.208.50':139
'20#.#48.243.85':139
'20#.#48.141.180':139
'20#.#48.56.181':139
'20#.#48.120.159':139
'20#.#48.197.249':139
'20#.#48.175.214':139
'20#.#48.184.160':139
'20#.#48.113.102':139
'20#.#48.42.189':139
'20#.#48.39.156':139
'20#.#48.189.183':139
'20#.#48.85.203':139
'20#.#48.34.92':139
'20#.#48.72.39':139
'20#.#48.96.196':139
'20#.#48.164.21':139
'20#.#48.41.111':139
'20#.#48.75.41':139
'20#.#48.80.231':139
'20#.#48.146.134':139
'20#.#48.159.213':139
'20#.#48.35.75':139
'20#.#48.156.225':139
'20#.#48.189.74':139
'20#.#48.80.188':139
'20#.#48.104.35':139
'20#.#48.131.63':139
'20#.#48.118.81':445
'20#.#48.214.120':445
'20#.#48.53.245':445
'20#.#48.132.3':445
'20#.#48.209.61':445
'20#.#48.40.107':445
'20#.#48.149.150':445
'20#.#48.219.111':445
'20#.#48.79.61':445
'20#.#48.91.194':445
'20#.#48.216.232':445
'20#.#48.202.168':445
'20#.#48.33.2':445
'20#.#48.249.3':445
'20#.#48.227.217':445
'20#.#48.3.228':445
'20#.#48.32.44':445
'20#.#48.83.9':445
'20#.#48.71.33':445
'20#.#48.101.27':445
'20#.#48.25.109':445
'20#.#48.27.130':445
'20#.#48.114.219':445
'20#.#48.177.136':445
'20#.#48.220.133':445
'20#.#48.166.15':445
'20#.#48.24.51':445
'20#.#48.136.4':445
'20#.#48.203.197':139
'20#.#48.148.11':139
'20#.#48.63.18':139
'20#.#48.216.108':139
'20#.#48.198.102':139
'20#.#48.153.106':139
'20#.#48.87.116':445
'20#.#48.169.87':445
'20#.#48.186.203':445
'20#.#48.157.227':445
'20#.#48.235.137':445
'20#.#48.91.162':445
'20#.#48.248.69':445
'20#.#48.148.173':445
'20#.#48.154.70':445
'20#.#48.190.247':445
'20#.#48.135.208':445
'20#.#48.101.140':445
'20#.#48.170.239':445
'20#.#48.15.106':445
'20#.#48.155.174':445
'20#.#48.109.88':445
'20#.#48.174.222':445
'20#.#48.197.166':445
'20#.#48.34.14':445
'20#.#48.115.143':445
'20#.#48.214.145':445
'20#.#48.231.197':445
'20#.#48.79.160':445
'20#.#48.119.137':139
'20#.#48.26.152':139
'20#.#48.138.18':139
'20#.#48.126.37':139
'20#.#48.18.126':139
'20#.#48.35.29':139
'20#.#48.90.194':445
'20#.#48.156.251':445
'20#.#48.25.207':445
'20#.#48.120.50':445
'20#.#48.23.3':445
'20#.#48.128.216':445
'20#.#48.129.26':445
'20#.#48.232.176':445
'20#.#48.35.216':445
'20#.#48.77.1':445
'20#.#48.215.209':445
'20#.#48.38.58':445
'20#.#48.252.83':445
'20#.#48.27.46':445
'20#.#48.116.195':445
'20#.#48.53.122':445
'20#.#48.172.248':445
'20#.#48.108.1':445
'20#.#48.70.81':445
'20#.#48.26.48':445
'20#.#48.169.2':445
'20#.#48.169.128':445
'20#.#48.139.98':445
'20#.#48.4.16':445
'20#.#48.134.174':445
'20#.#48.204.221':445
'20#.#48.255.2':445
'20#.#48.151.9':445
'20#.#48.34.14':139
'20#.#48.115.143':139
'20#.#48.214.145':139
'20#.#48.231.197':139
'20#.#48.79.160':139
'20#.#48.128.216':139
'20#.#48.26.48':139
'20#.#48.70.81':139
'20#.#48.108.1':139
'20#.#48.169.2':139
'20#.#48.169.128':139
'20#.#48.174.222':139
'20#.#48.155.174':139
'20#.#48.15.106':139
'20#.#48.90.194':139
'20#.#48.156.251':139
'20#.#48.25.207':139
'20#.#48.170.239':139
'20#.#48.197.166':139
'20#.#48.109.88':139
'20#.#48.23.3':139
'20#.#48.120.50':139
'20#.#48.139.98':139
'20#.#48.252.83':139
'20#.#48.27.46':139
'20#.#48.116.195':139
'20#.#48.53.122':139
'20#.#48.172.248':139
'20#.#48.64.211':139
'20#.#48.14.151':139
'20#.#48.37.87':139
'20#.#48.107.236':139
'20#.#48.67.212':139
'20#.#48.65.134':139
'20#.#48.134.174':139
'20#.#48.4.16':139
'20#.#48.204.221':139
'20#.#48.255.2':139
'20#.#48.151.9':139
'20#.#48.77.1':139
'20#.#48.232.176':139
'20#.#48.38.58':139
'20#.#48.129.26':139
'20#.#48.215.209':139
'20#.#48.35.216':139
'20#.#48.64.211':445
'20#.#48.65.26':139
'20#.#48.24.103':139
'20#.#48.92.111':139
'20#.#48.98.5':139
'20#.#48.161.132':139
'20#.#48.155.5':139
'20#.#48.233.233':139
'20#.#48.98.143':139
'20#.#48.234.28':139
'20#.#48.188.174':139
'20#.#48.145.211':139
'20#.#48.72.104':139
'20#.#48.237.71':139
'20#.#48.104.133':139
'20#.#48.69.182':139
'20#.#48.133.69':139
'20#.#48.64.166':139
'20#.#48.67.107':139
'20#.#48.129.67':139
'20#.#48.106.118':139
'20#.#48.61.130':139
'20#.#48.243.120':139
'20#.#48.22.49':139
'20#.#48.168.194':445
'20#.#48.252.109':445
'20#.#48.40.43':445
'20#.#48.4.42':445
'20#.#48.233.146':445
'20#.#48.155.18':445
'20#.#48.254.57':445
'20#.#48.161.106':445
'20#.#48.135.190':445
'20#.#48.1.164':445
'20#.#48.46.90':445
'20#.#48.21.162':445
'20#.#48.127.49':445
'20#.#48.207.5':445
'20#.#48.164.131':445
'20#.#48.228.111':445
'20#.#48.9.227':445
'20#.#48.34.220':445
'20#.#48.97.114':445
'20#.#48.54.106':445
'20#.#48.173.109':445
'20#.#48.96.227':445
'20#.#48.53.122':9988
'20#.#48.116.195':9988
'20#.#48.35.216':9988
'20#.#48.155.174':9988
'20#.#48.215.209':9988
'20#.#48.64.211':9988
'20#.#48.21.162':139
'20#.#48.127.49':139
'20#.#48.207.5':139
'20#.#48.164.131':139
'20#.#48.228.111':139
'20#.#48.14.151':445
'20#.#48.37.87':445
'20#.#48.107.236':445
'20#.#48.67.212':445
'20#.#48.65.134':445
'20#.#48.126.37':445
'20#.#48.26.152':445
'20#.#48.35.29':445
'20#.#48.119.137':445
'20#.#48.18.126':445
'20#.#48.138.18':445
'20#.#48.9.227':139
'20#.#48.254.57':139
'20#.#48.161.106':139
'20#.#48.135.190':139
'20#.#48.1.164':139
'20#.#48.46.90':139
'20#.#48.101.140':139
'20#.#48.254.124':139
'20#.#48.181.254':139
'20#.#48.124.188':139
'20#.#48.77.34':139
'20#.#48.20.25':139
'20#.#48.34.220':139
'20#.#48.97.114':139
'20#.#48.54.106':139
'20#.#48.173.109':139
'20#.#48.96.227':139
'20#.#48.4.42':139
'20#.#48.252.109':139
'20#.#48.155.18':139
'20#.#48.168.194':139
'20#.#48.233.146':139
'20#.#48.40.43':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней