Trojan.Starman.5931

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER393d.dir00\svchost.exe.mdmp 16325836412032228

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER393d.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#1.97.232':139
'20#.#1.14.184':139
'20#.#1.212.29':139
'20#.#1.53.144':139
'20#.#1.41.108':139
'20#.#1.63.183':139
'20#.#1.20.48':139
'20#.31.1.2':139
'20#.#1.181.131':139
'20#.#1.1.182':139
'20#.#1.126.190':139
'20#.#1.137.230':139
'20#.#1.121.138':139
'20#.#1.230.76':139
'20#.#1.120.183':139
'20#.#1.97.194':139
'20#.#1.46.51':139
'20#.#1.219.167':139
'20#.31.5.79':139
'20#.#1.156.121':139
'20#.#1.54.156':139
'20#.#1.101.137':139
'20#.#1.97.194':445
'20#.#1.230.76':445
'20#.#1.120.183':445
'20#.#1.230.37':445
'20#.#1.72.29':445
'20#.#1.54.156':445
'20#.31.5.79':445
'20#.#1.156.121':445
'20#.#1.137.230':445
'20#.#1.121.138':445
'20#.#1.2.166':445
'20#.#1.30.179':139
'20#.#1.47.45':139
'20#.#1.70.212':139
'20#.#1.61.25':139
'20#.#1.109.200':139
'20#.#1.203.197':445
'20#.#1.37.248':445
'20#.#1.197.141':445
'20#.#1.252.219':139
'20#.#1.141.178':445
'20#.#1.72.29':139
'20#.#1.111.135':139
'20#.#1.240.94':139
'20#.#1.132.97':139
'20#.#1.250.98':139
'20#.#1.98.14':139
'20#.#1.60.135':139
'20#.#1.15.228':139
'20#.#1.51.212':139
'20#.#1.242.143':139
'20#.#1.74.163':139
'20#.#1.122.71':139
'20#.#1.219.234':445
'20#.#1.114.34':445
'20#.#1.107.14':445
'20#.#1.202.32':445
'20#.#1.158.202':445
'20#.#1.106.62':139
'20#.#1.48.186':139
'20#.#1.175.154':139
'20#.#1.250.209':139
'20#.#1.40.251':139
'20#.#1.250.209':445
'20#.#1.15.228':445
'20#.#1.141.178':139
'20#.#1.60.135':445
'20#.#1.74.163':445
'20#.#1.51.212':445
'20#.#1.2.166':139
'20#.#1.230.37':139
'20#.#1.37.248':139
'20#.#1.197.141':139
'20#.#1.203.197':139
'20#.#1.242.143':445
'20#.#1.48.186':445
'20#.#1.122.71':445
'20#.#1.106.62':445
'20#.#1.40.251':445
'20#.#1.175.154':445
'20#.#1.111.135':445
'20#.#1.240.94':445
'20#.#1.132.97':445
'20#.#1.250.98':445
'20#.#1.98.14':445
'20#.#1.29.59':139
'20#.#1.139.57':139
'20#.#1.208.117':139
'20#.#1.104.59':139
'20#.#1.190.23':139
'20#.#1.10.230':139
'20#.#1.135.173':139
'20#.#1.24.137':139
'20#.#1.249.231':139
'20#.#1.85.72':139
'20#.31.95.3':139
'20#.#1.53.40':445
'20#.#1.226.25':445
'20#.#1.61.100':445
'20#.#1.78.88':445
'20#.#1.219.210':445
'20#.#1.143.179':139
'20#.#1.53.209':139
'20#.#1.26.180':445
'20#.#1.248.22':445
'20#.#1.128.124':445
'20#.#1.61.199':139
'20#.#1.87.57':139
'20#.#1.113.218':139
'20#.#1.41.198':139
'20#.#1.143.171':139
'20#.#1.106.28':139
'20#.#1.76.93':139
'20#.#1.24.111':139
'20#.#1.138.154':139
'20#.#1.189.197':139
'20#.#1.165.56':139
'20#.#1.195.127':139
'20#.#1.187.8':139
'20#.#1.34.187':139
'20#.#1.7.244':139
'20#.#1.65.213':139
'20#.#1.74.183':139
'20#.#1.58.235':139
'20#.#1.241.232':139
'20#.#1.36.183':139
'20#.#1.141.192':139
'20#.#1.18.100':139
'20#.#1.62.65':445
'20#.#1.61.25':445
'20#.#1.109.200':445
'20#.#1.101.137':445
'20#.#1.63.183':445
'20#.#1.20.48':445
'20#.#1.252.219':445
'20#.#1.204.22':139
'20#.#1.47.45':445
'20#.#1.70.212':445
'20#.#1.30.179':445
'20#.31.1.2':445
'20#.#1.53.144':445
'20#.#1.41.108':445
'20#.#1.126.190':445
'20#.#1.46.51':445
'20#.#1.219.167':445
'20#.#1.181.131':445
'20#.#1.1.182':445
'20#.#1.14.184':445
'20#.#1.212.29':445
'20#.#1.97.232':445
'20#.#1.98.204':139
'20#.#1.204.22':445
'20#.#1.98.204':445
'20#.#1.26.180':139
'20#.#1.248.22':139
'20#.#1.128.124':139
'20#.#1.8.227':445
'20#.#1.221.206':445
'20#.#1.227.39':445
'20#.#1.207.143':445
'20#.#1.40.13':445
'20#.#1.226.25':139
'20#.#1.8.227':139
'20#.#1.221.206':139
'20#.#1.227.39':139
'20#.#1.207.143':139
'20#.#1.40.13':139
'20#.#1.61.100':139
'20#.#1.53.40':139
'20#.#1.219.210':139
'20#.#1.62.65':139
'20#.#1.78.88':139
'20#.#1.98.181':445
'20#.#1.207.54':445
'20#.#1.191.233':445
'20#.#1.10.53':445
'20#.#1.32.225':445
'20#.#1.113.188':445
'20#.#1.28.194':445
'20#.#1.53.69':445
'20#.#1.74.11':445
'20#.#1.196.24':445
'20#.#1.10.175':445
'20#.#1.167.88':445
'20#.#1.218.245':139
'20#.#1.158.21':139
'20#.#1.207.245':139
'20#.#1.152.48':139
'20#.#1.126.39':139
'20#.#1.209.207':445
'20#.#1.142.248':445
'20#.#1.89.114':445
'20#.#1.18.231':139
'20#.#1.207.162':139
'20#.#1.109.253':445
'20#.#1.120.46':445
'20#.#1.139.164':445
'20#.#1.164.87':445
'20#.#1.25.75':445
'20#.#1.122.144':445
'20#.#1.68.59':445
'20#.#1.168.2':445
'20#.#1.91.136':445
'20#.#1.30.19':445
'20#.#1.151.85':445
'20#.#1.215.91':445
'20#.#1.101.192':445
'20#.#1.165.175':445
'20#.#1.205.119':445
'20#.#1.22.174':445
'20#.#1.23.100':445
'20#.#1.72.198':445
'20#.#1.223.107':445
'20#.#1.186.39':445
'20#.#1.34.208':445
'20#.#1.7.115':445
'20#.#1.146.232':139
'20#.#1.109.253':139
'20#.#1.22.174':139
'20#.#1.53.69':139
'20#.#1.74.11':139
'20#.#1.28.194':139
'20#.#1.165.175':139
'20#.#1.34.208':139
'20#.#1.101.192':139
'20#.#1.23.100':139
'20#.#1.205.119':139
'20#.#1.10.175':139
'20#.#1.209.207':139
'20#.#1.89.114':139
'20#.#1.32.225':139
'20#.#1.113.188':139
'20#.#1.167.88':139
'20#.#1.191.233':139
'20#.#1.196.24':139
'20#.#1.207.54':139
'20#.#1.142.248':139
'20#.#1.10.53':139
'20#.#1.7.115':139
'20#.#1.27.134':139
'20#.#1.185.15':139
'20#.#1.168.2':139
'20#.#1.91.136':139
'20#.#1.68.59':139
'20#.#1.35.175':139
'20#.#1.239.16':139
'20#.#1.12.220':139
'20#.#1.204.111':139
'20#.#1.59.55':139
'20#.#1.151.85':139
'20#.#1.215.91':139
'20#.#1.25.75':139
'20#.#1.223.107':139
'20#.#1.186.39':139
'20#.#1.72.198':139
'20#.#1.120.46':139
'20#.#1.30.19':139
'20#.#1.139.164':139
'20#.#1.122.144':139
'20#.#1.164.87':139
'20#.#1.58.189':445
'20#.#1.216.28':445
'20#.#1.114.34':139
'20#.#1.107.14':139
'20#.#1.219.234':139
'20#.#1.143.164':445
'20#.#1.71.74':445
'20#.#1.207.133':445
'20#.#1.44.61':445
'20#.#1.155.72':445
'20#.#1.158.202':139
'20#.31.6.79':139
'20#.#1.25.201':139
'20#.#1.254.109':139
'20#.#1.14.52':139
'20#.#1.39.124':139
'20#.#1.98.181':139
'20#.#1.202.32':139
'20#.#1.177.130':139
'20#.#1.165.140':139
'20#.#1.101.172':139
'20#.#1.254.84':445
'20#.#1.39.124':445
'20#.#1.254.109':445
'20#.#1.14.52':445
'20#.#1.209.206':445
'20#.#1.59.209':445
'20#.#1.101.172':445
'20#.#1.177.130':445
'20#.#1.165.140':445
'20#.31.6.79':445
'20#.#1.25.201':445
'20#.#1.179.3':445
'20#.#1.134.64':445
'20#.#1.89.17':445
'20#.#1.60.100':445
'20#.#1.71.94':445
'20#.#1.35.223':445
'20#.#1.90.157':445
'20#.#1.4.253':445
'20#.#1.96.87':445
'20#.#1.232.32':445
'20#.#1.167.122':445
'20#.#1.59.209':139
'20#.#1.207.162':445
'20#.#1.142.248':9988
'20#.#1.18.231':445
'20#.#1.218.245':445
'20#.#1.158.21':445
'20#.#1.28.194':9988
'20#.#1.109.253':9988
'20#.#1.74.11':9988
'20#.#1.167.88':9988
'20#.#1.209.207':9988
'20#.#1.207.245':445
'20#.#1.59.55':445
'20#.#1.12.220':445
'20#.#1.204.111':445
'20#.#1.27.134':445
'20#.#1.185.15':445
'20#.#1.152.48':445
'20#.#1.126.39':445
'20#.#1.146.232':445
'20#.#1.35.175':445
'20#.#1.239.16':445
'20#.#1.23.100':9988
'20#.#1.232.32':139
'20#.#1.167.122':139
'20#.#1.89.17':139
'20#.#1.60.100':139
'20#.#1.134.64':139
'20#.#1.179.3':139
'20#.#1.209.206':139
'20#.#1.4.253':139
'20#.#1.96.87':139
'20#.#1.90.157':139
'20#.#1.35.223':139
'20#.#1.44.61':139
'20#.#1.155.72':139
'20#.#1.216.28':139
'20#.#1.205.119':9988
'20#.#1.58.189':139
'20#.#1.254.84':139
'20#.#1.71.94':139
'20#.#1.71.74':139
'20#.#1.207.133':139
'20#.#1.143.164':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней