Trojan.Starman.5828

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER7b84.dir00\svchost.exe.mdmp 16325836412032076

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER7b84.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#33.58.39':445
'20#.#33.139.30':445
'20#.#33.150.235':139
'20#.#33.131.76':139
'20#.#33.72.180':445
'20#.#33.131.76':445
'20#.#33.214.115':139
'20#.#33.222.55':445
'20#.#33.150.235':445
'20#.#33.222.55':139
'20#.#33.161.218':445
'20#.#33.82.162':445
'20#.#33.96.31':445
'20#.#33.138.142':445
'20#.#33.236.204':445
'20#.#33.139.30':139
'20#.#33.72.180':139
'20#.#33.3.152':445
'20#.#33.58.39':139
'20#.#33.252.246':139
'20#.#33.90.252':139
'20#.#33.153.215':139
'20#.#33.169.64':139
'20#.#33.193.36':139
'20#.#33.136.186':139
'20#.#33.198.99':139
'20#.#33.51.208':139
'20#.#33.10.61':139
'20#.#33.189.188':139
'20#.#33.154.185':139
'20#.#33.226.13':139
'20#.#33.125.33':139
'20#.#33.24.140':139
'20#.#33.233.59':139
'20#.#33.223.98':139
'20#.#33.133.222':139
'20#.#33.103.158':139
'20#.#33.99.74':139
'20#.#33.170.194':445
'20#.#33.191.55':445
'20#.#33.4.134':445
'20#.#33.122.174':445
'20#.#33.80.135':445
'20#.#33.53.109':445
'20#.#33.91.49':445
'20#.#33.110.135':445
'20#.#33.126.122':445
'20#.#33.116.15':445
'20#.#33.96.164':445
'20#.#33.128.235':445
'20#.#33.137.10':445
'20#.#33.10.153':445
'20#.#33.17.129':445
'20#.#33.76.194':445
'20#.#33.237.175':445
'20#.#33.181.156':445
'20#.#33.24.120':445
'20#.#33.147.155':445
'20#.#33.249.151':445
'20#.#33.188.14':445
'20#.#33.241.40':445
'20#.#33.69.59':445
'20#.#33.94.165':445
'20#.#33.146.49':445
'20#.#33.206.184':445
'20#.#33.165.166':445
'20#.#33.153.3':445
'20#.#33.211.166':445
'20#.#33.38.143':445
'20#.#33.126.190':445
'20#.#33.55.96':445
'20#.#33.97.220':445
'20#.#33.24.54':445
'20#.#33.125.15':445
'20#.#33.23.171':445
'20#.#33.168.143':445
'20#.#33.30.210':445
'20#.#33.118.23':445
'20#.#33.9.80':445
'20#.#33.128.93':445
'20#.#33.178.30':445
'20#.#33.128.226':445
'20#.#33.153.57':445
'20#.#33.234.16':445
'20#.#33.35.187':445
'20#.#33.80.27':445
'20#.#33.193.36':445
'20#.#33.51.208':445
'20#.#33.252.246':445
'20#.#33.90.252':445
'20#.#33.10.61':445
'20#.#33.198.99':445
'20#.#33.26.174':445
'20#.#33.136.186':445
'20#.#33.173.198':445
'20#.#33.158.143':445
'20#.#33.108.158':139
'20#.#33.246.163':445
'20#.#33.144.39':445
'20#.#33.130.232':139
'20#.#33.185.191':139
'20#.#33.48.107':139
'20#.#33.229.7':139
'20#.#33.75.229':139
'20#.#33.83.138':445
'20#.#33.220.41':445
'20#.#33.164.128':445
'20#.#33.235.195':445
'20#.#33.101.89':445
'20#.#33.12.45':445
'20#.#33.5.87':445
'20#.#33.144.218':445
'20#.#33.32.12':445
'20#.#33.48.49':445
'20#.#33.235.195':139
'20#.#33.101.89':139
'20#.#33.128.226':139
'20#.#33.153.57':139
'20#.#33.220.41':139
'20#.#33.32.12':139
'20#.#33.48.49':139
'20#.#33.164.128':139
'20#.#33.12.45':139
'20#.#33.35.187':139
'20#.#33.80.27':139
'20#.#33.9.80':139
'20#.#33.173.198':139
'20#.#33.26.174':139
'20#.#33.128.93':139
'20#.#33.178.30':139
'20#.#33.234.16':139
'20#.#33.30.210':139
'20#.#33.118.23':139
'20#.#33.103.158':445
'20#.#33.99.74':445
'20#.#33.226.13':445
'20#.#33.233.59':445
'20#.#33.223.98':445
'20#.#33.153.215':445
'20#.#33.169.64':445
'20#.#33.133.222':445
'20#.#33.189.188':445
'20#.#33.154.185':445
'20#.#33.83.138':139
'20#.#33.246.163':139
'20#.#33.5.87':139
'20#.#33.144.218':139
'20#.#33.144.39':139
'20#.#33.125.33':445
'20#.#33.24.140':445
'20#.#33.158.143':139
'20#.#33.214.115':445
'20#.#33.48.103':445
'20#.#33.112.253':139
'20#.#33.64.109':445
'20#.#33.215.145':139
'20#.#33.86.215':139
'20#.#33.75.204':445
'20#.#33.108.84':445
'20#.#33.79.137':445
'20#.#33.28.44':445
'20#.#33.121.108':445
'20#.#33.6.203':139
'20#.#33.47.122':139
'20#.#33.173.56':139
'20#.#33.126.87':139
'20#.#33.181.108':139
'20#.#33.195.64':139
'20#.#33.143.58':139
'20#.#33.13.68':139
'20#.#33.100.118':139
'20#.#33.94.234':139
'20#.#33.155.179':445
'20#.#33.58.251':445
'20#.#33.29.170':445
'20#.#33.19.104':445
'20#.#33.131.110':445
'20#.#33.39.221':445
'20#.#33.213.29':445
'20#.#33.231.108':445
'20#.#33.39.76':445
'20#.#33.36.10':445
'20#.#33.42.210':445
'20#.#33.255.237':445
'20#.#33.150.138':445
'20#.#33.192.212':445
'20#.#33.210.73':445
'20#.#33.12.126':445
'20#.#33.81.126':445
'20#.#33.252.208':445
'20#.#33.247.100':445
'20#.#33.247.100':139
'20#.#33.12.126':139
'20#.#33.210.73':139
'20#.#33.252.208':139
'20#.#33.81.126':139
'20#.#33.19.104':139
'20#.#33.155.179':139
'20#.#33.36.10':139
'20#.#33.29.170':139
'20#.#33.255.237':139
'20#.#33.75.204':139
'20#.#33.150.138':139
'20#.#33.79.137':139
'20#.#33.28.44':139
'20#.#33.108.84':139
'20#.#33.192.212':139
'20#.#33.42.210':139
'20#.#33.64.109':139
'20#.#33.121.108':139
'20#.#33.166.194':139
'20#.#33.151.167':139
'20#.#33.89.82':139
'20#.#33.195.89':139
'20#.#33.72.151':139
'20#.#33.168.195':139
'20#.#33.240.11':139
'20#.#33.255.181':139
'20#.#33.109.128':139
'20#.#33.98.42':139
'20#.#33.231.108':139
'20#.#33.39.76':139
'20#.#33.58.251':139
'20#.#33.131.110':139
'20#.#33.39.221':139
'20#.#33.127.48':139
'20#.#33.64.168':139
'20#.#33.213.29':139
'20#.#33.12.36':139
'20#.#33.91.49':139
'20#.#33.126.190':139
'20#.#33.126.122':139
'20#.#33.53.109':139
'20#.#33.55.96':139
'20#.#33.97.220':139
'20#.#33.23.171':139
'20#.#33.211.166':139
'20#.#33.38.143':139
'20#.#33.110.135':139
'20#.#33.237.175':139
'20#.#33.116.15':139
'20#.#33.24.120':139
'20#.#33.76.194':139
'20#.#33.4.134':139
'20#.#33.191.55':139
'20#.#33.80.135':139
'20#.#33.122.174':139
'20#.#33.170.194':139
'20#.#33.146.49':139
'20#.#33.96.31':139
'20#.#33.165.166':139
'20#.#33.94.165':139
'20#.#33.138.142':139
'20#.#33.236.204':139
'20#.#33.3.152':139
'20#.#33.161.218':139
'20#.#33.82.162':139
'20#.#33.206.184':139
'20#.#33.125.15':139
'20#.#33.153.3':139
'20#.#33.168.143':139
'20#.#33.24.54':139
'20#.#33.188.14':139
'20#.#33.249.151':139
'20#.#33.69.59':139
'20#.#33.241.40':139
'20#.#33.147.155':139
'20#.#33.240.11':445
'20#.#33.126.87':445
'20#.#33.109.128':445
'20#.#33.168.195':445
'20#.#33.181.108':445
'20#.#33.100.118':445
'20#.#33.195.64':445
'20#.#33.47.122':445
'20#.#33.173.56':445
'20#.#33.255.181':445
'20#.#33.64.168':445
'20#.#33.127.48':445
'20#.#33.12.36':445
'20#.#33.98.42':445
'20#.#33.89.82':445
'20#.#33.151.167':445
'20#.#33.72.151':445
'20#.#33.195.89':445
'20#.#33.166.194':445
'20#.#33.48.103':139
'20#.#33.137.10':139
'20#.#33.126.87':9988
'20#.#33.94.234':9988
'20#.#33.10.153':139
'20#.#33.17.129':139
'20#.#33.181.156':139
'20#.#33.96.164':139
'20#.#33.128.235':139
'20#.#33.64.109':9988
'20#.#33.13.68':445
'20#.#33.6.203':445
'20#.#33.94.234':445
'20#.#33.143.58':445
'20#.#33.215.145':445
'20#.#33.81.126':9988
'20#.#33.36.10':9988
'20#.#33.86.215':445
'20#.#33.112.253':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней