Trojan.Starman.5897

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERf38a.dir00\svchost.exe.mdmp 16325836412032204

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERf38a.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#63.44.0':139
'20#.#63.31.121':139
'20#.#63.105.112':139
'20#.#63.225.39':139
'20#.#63.94.100':139
'20#.#63.252.86':139
'20#.#63.74.170':139
'20#.#63.6.224':139
'20#.#63.244.142':139
'20#.#63.26.147':139
'20#.#63.4.44':445
'20#.#63.10.169':445
'20#.#63.246.175':445
'20#.#63.131.53':445
'20#.#63.94.149':445
'20#.#63.117.254':139
'20#.#63.40.83':139
'20#.#63.148.73':445
'20#.#63.227.9':445
'20#.#63.184.60':445
'20#.#63.45.21':139
'20#.#63.192.251':139
'20#.#63.83.70':139
'20#.#63.57.144':139
'20#.#63.0.131':139
'20#.#63.32.187':139
'20#.#63.160.96':139
'20#.#63.6.142':139
'20#.#63.162.203':139
'20#.#63.26.190':139
'20#.#63.155.7':139
'20#.#63.70.77':139
'20#.#63.125.220':139
'20#.#63.85.77':139
'20#.#63.221.36':139
'20#.#63.40.105':139
'20#.#63.178.195':139
'20#.#63.242.151':139
'20#.#63.0.202':139
'20#.#63.2.191':139
'20#.#63.24.30':445
'20#.#63.143.186':445
'20#.#63.112.29':445
'20#.#63.212.29':445
'20#.#63.98.225':445
'20#.#63.72.40':445
'20#.#63.32.31':445
'20#.#63.68.180':445
'20#.#63.198.189':445
'20#.#63.218.77':445
'20#.#63.89.38':445
'20#.#63.39.45':445
'20#.#63.19.95':445
'20#.#63.144.184':445
'20#.#63.4.78':445
'20#.#63.175.133':445
'20#.#63.138.68':445
'20#.#63.89.127':445
'20#.#63.208.142':445
'20#.#63.70.209':445
'20#.#63.148.73':139
'20#.#63.210.0':445
'20#.#63.184.60':139
'20#.#63.10.169':139
'20#.#63.227.9':139
'20#.#63.66.135':445
'20#.#63.230.167':445
'20#.#63.181.242':445
'20#.#63.41.62':445
'20#.#63.116.29':445
'20#.#63.181.242':139
'20#.#63.66.135':139
'20#.#63.116.29':139
'20#.#63.210.0':139
'20#.#63.41.62':139
'20#.#63.246.175':139
'20#.#63.4.44':139
'20#.#63.94.149':139
'20#.#63.230.167':139
'20#.#63.131.53':139
'20#.#63.8.124':139
'20#.#63.182.14':139
'20#.#63.137.12':139
'20#.#63.209.117':139
'20#.#63.62.124':139
'20#.#63.56.129':445
'20#.#63.46.112':445
'20#.#63.162.198':445
'20#.#63.40.121':139
'20#.#63.74.234':445
'20#.#63.162.198':139
'20#.#63.56.129':139
'20#.#63.74.234':139
'20#.#63.16.19':445
'20#.#63.188.196':445
'20#.#63.113.37':139
'20#.#63.118.174':139
'20#.#63.67.203':139
'20#.#63.46.112':139
'20#.#63.88.127':139
'20#.#63.236.114':139
'20#.#63.191.236':139
'20#.#63.194.28':139
'20#.#63.184.82':139
'20#.#63.159.110':139
'20#.#63.93.175':139
'20#.#63.151.45':139
'20#.#63.172.80':139
'20#.#63.21.69':139
'20#.#63.10.75':139
'20#.#63.118.174':445
'20#.#63.209.117':445
'20#.#63.113.37':445
'20#.#63.88.127':445
'20#.#63.67.203':445
'20#.#63.182.14':445
'20#.#63.40.121':445
'20#.#63.8.124':445
'20#.#63.62.124':445
'20#.#63.137.12':445
'20#.#63.26.147':445
'20#.#63.6.224':445
'20#.#63.244.142':445
'20#.#63.44.0':445
'20#.#63.31.121':445
'20#.#63.221.36':445
'20#.#63.125.220':445
'20#.#63.85.77':445
'20#.#63.252.86':445
'20#.#63.74.170':445
'20#.#63.16.19':139
'20#.#63.188.196':139
'20#.#63.19.155':139
'20#.#63.36.124':139
'20#.#63.10.171':139
'20#.#63.94.100':445
'20#.#63.105.112':445
'20#.#63.225.39':445
'20#.#63.117.254':445
'20#.#63.40.83':445
'20#.#63.26.190':445
'20#.#63.6.142':445
'20#.#63.162.203':445
'20#.#63.45.21':445
'20#.#63.192.251':445
'20#.#63.10.171':445
'20#.#63.19.155':445
'20#.#63.36.124':445
'20#.#63.32.187':445
'20#.#63.160.96':445
'20#.#63.2.191':445
'20#.#63.242.151':445
'20#.#63.0.202':445
'20#.#63.155.7':445
'20#.#63.70.77':445
'20#.#63.0.131':445
'20#.#63.83.70':445
'20#.#63.57.144':445
'20#.#63.40.105':445
'20#.#63.178.195':445
'20#.#63.184.137':445
'20#.#63.48.214':445
'20#.#63.186.182':445
'20#.#63.129.135':445
'20#.#63.87.3':139
'20#.#63.169.195':445
'20#.#63.73.34':445
'20#.#63.60.73':445
'20#.#63.34.19':445
'20#.#63.121.163':445
'20#.#63.46.59':445
'20#.#63.82.76':139
'20#.#63.94.98':139
'20#.#63.76.170':139
'20#.#63.232.137':139
'20#.#63.170.126':139
'20#.#63.146.241':139
'20#.#63.143.188':139
'20#.#63.241.238':139
'20#.#63.87.168':139
'20#.#63.70.232':139
'20#.#63.187.221':445
'20#.#63.224.64':445
'20#.#63.222.15':445
'20#.#63.76.57':445
'20#.#63.15.76':445
'20#.#63.5.189':445
'20#.#63.150.151':445
'20#.#63.188.234':445
'20#.#63.77.13':445
'20#.#63.195.88':445
'20#.#63.84.124':445
'20#.#63.36.4':445
'20#.#63.29.54':445
'20#.#63.97.8':445
'20#.#63.37.202':445
'20#.#63.188.178':445
'20#.#63.79.103':445
'20#.#63.230.228':445
'20#.#63.82.127':445
'20#.#63.239.122':445
'20#.#63.36.4':139
'20#.#63.82.127':139
'20#.#63.84.124':139
'20#.#63.37.202':139
'20#.#63.29.54':139
'20#.#63.79.103':139
'20#.#63.76.57':139
'20#.#63.188.178':139
'20#.#63.239.122':139
'20#.#63.230.228':139
'20#.#63.169.195':139
'20#.#63.46.59':139
'20#.#63.186.182':139
'20#.#63.129.135':139
'20#.#63.48.214':139
'20#.#63.60.73':139
'20#.#63.97.8':139
'20#.#63.73.34':139
'20#.#63.121.163':139
'20#.#63.34.19':139
'20#.#63.105.55':139
'20#.#63.112.234':139
'20#.#63.14.174':139
'20#.#63.193.197':139
'20#.#63.122.193':139
'20#.#63.180.72':139
'20#.#63.74.5':139
'20#.#63.53.139':139
'20#.#63.30.192':139
'20#.#63.98.30':139
'20#.#63.224.64':139
'20#.#63.77.13':139
'20#.#63.187.221':139
'20#.#63.15.76':139
'20#.#63.222.15':139
'20#.#63.150.151':139
'20#.#63.197.242':139
'20#.#63.5.189':139
'20#.#63.195.88':139
'20#.#63.188.234':139
'20#.#63.138.68':139
'20#.#63.212.29':139
'20#.#63.175.133':139
'20#.#63.70.209':139
'20#.#63.89.127':139
'20#.#63.143.186':139
'20#.#63.198.189':139
'20#.#63.24.30':139
'20#.#63.98.225':139
'20#.#63.112.29':139
'20#.#63.184.137':139
'20#.#63.144.184':139
'20#.#63.159.121':139
'20#.#63.235.149':139
'20#.#63.26.160':139
'20#.#63.39.45':139
'20#.#63.208.142':139
'20#.#63.89.38':139
'20#.#63.4.78':139
'20#.#63.19.95':139
'20#.#63.10.249':445
'20#.#63.22.208':445
'20#.#63.35.254':445
'20#.#63.24.142':445
'20#.#63.75.186':445
'20#.#63.26.160':445
'20#.#63.159.121':445
'20#.#63.235.149':445
'20#.#63.26.56':445
'20#.#63.201.90':445
'20#.#63.32.31':139
'20#.#63.119.31':445
'20#.#63.72.40':139
'20#.#63.218.77':139
'20#.#63.68.180':139
'20#.#63.2.231':445
'20#.#63.141.157':445
'20#.#63.141.226':445
'20#.#63.135.32':445
'20#.#63.82.93':445
'20#.#63.76.170':445
'20#.#63.82.76':445
'20#.#63.170.126':445
'20#.#63.74.5':445
'20#.#63.232.137':445
'20#.#63.241.238':445
'20#.#63.146.241':445
'20#.#63.70.232':445
'20#.#63.94.98':445
'20#.#63.87.168':445
'20#.#63.14.174':445
'20#.#63.105.55':445
'20#.#63.122.193':445
'20#.#63.197.242':445
'20#.#63.193.197':445
'20#.#63.53.139':445
'20#.#63.180.72':445
'20#.#63.98.30':445
'20#.#63.112.234':445
'20#.#63.30.192':445
'20#.#63.24.142':139
'20#.#63.75.186':139
'20#.#63.141.157':139
'20#.#63.141.226':139
'20#.#63.2.231':139
'20#.#63.26.56':139
'20#.#63.201.90':139
'20#.#63.22.208':139
'20#.#63.35.254':139
'20#.#63.10.249':139
'20#.#63.79.103':9988
'20#.#63.76.57':9988
'20#.#63.186.182':9988
'20#.#63.143.188':445
'20#.#63.87.3':445
'20#.#63.135.32':139
'20#.#63.82.93':139
'20#.#63.119.31':139
'20#.#63.169.195':9988
'20#.#63.82.76':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней