Trojan.Starman.5934

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc36f.dir00\svchost.exe.mdmp 16325836412032064

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WERc36f.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#8.121.193':445
'20#.#8.74.89':445
'20#.#8.125.89':445
'20#.#8.51.180':445
'20#.#8.211.36':445
'20#.#8.100.146':445
'20#.#8.21.105':445
'20#.#8.211.62':445
'20#.#8.214.206':445
'20#.#8.198.125':445
'20#.#8.132.125':445
'20#.#8.74.180':445
'20#.#8.163.148':445
'20#.#8.133.97':445
'20#.#8.52.22':445
'20#.#8.18.195':445
'20#.#8.185.61':139
'20#.#8.116.187':445
'20#.#8.46.193':445
'20#.#8.103.206':445
'20#.#8.247.101':445
'20#.#8.218.80':445
'20#.#8.29.127':445
'20#.#8.129.149':445
'20#.#8.74.231':445
'20#.#8.252.114':445
'20#.#8.117.41':445
'20#.#8.151.63':445
'20#.#8.89.218':445
'20#.#8.120.79':445
'20#.#8.189.160':445
'20#.#8.62.134':445
'20#.#8.198.225':139
'20#.#8.196.198':139
'20#.#8.238.82':139
'20#.#8.158.124':445
'20#.38.45.9':445
'20#.#8.185.61':445
'20#.#8.157.17':445
'20#.#8.135.151':445
'20#.#8.207.26':445
'20#.#8.92.46':445
'20#.#8.217.252':445
'20#.#8.109.173':445
'20#.#8.177.129':445
'20#.38.1.87':445
'20#.#8.49.219':445
'20#.#8.18.49':445
'20#.#8.14.10':445
'20#.#8.230.24':445
'20#.#8.130.31':445
'20#.#8.163.148':139
'20#.#8.51.180':139
'20#.#8.211.36':139
'20#.#8.103.206':139
'20#.#8.247.101':139
'20#.#8.218.80':139
'20#.#8.125.89':139
'20#.#8.198.125':139
'20#.#8.132.125':139
'20#.#8.100.146':139
'20#.#8.121.193':139
'20#.#8.74.89':139
'20#.#8.74.231':139
'20#.#8.170.187':445
'20#.#8.167.196':445
'20#.#8.116.187':139
'20#.#8.167.196':139
'20#.#8.185.196':445
'20#.#8.118.29':445
'20#.#8.18.195':139
'20#.#8.29.127':139
'20#.#8.129.149':139
'20#.#8.46.193':139
'20#.#8.133.97':139
'20#.#8.52.22':139
'20#.#8.74.180':139
'20#.#8.157.17':139
'20#.#8.120.79':139
'20#.#8.189.160':139
'20#.38.1.87':139
'20#.#8.49.219':139
'20#.#8.18.49':139
'20#.#8.89.218':139
'20#.#8.158.124':139
'20#.38.45.9':139
'20#.#8.62.134':139
'20#.#8.117.41':139
'20#.#8.151.63':139
'20#.#8.130.31':139
'20#.#8.252.114':139
'20#.#8.217.252':139
'20#.#8.109.173':139
'20#.#8.21.105':139
'20#.#8.211.62':139
'20#.#8.214.206':139
'20#.#8.92.46':139
'20#.#8.14.10':139
'20#.#8.230.24':139
'20#.#8.177.129':139
'20#.#8.135.151':139
'20#.#8.207.26':139
'20#.#8.166.251':139
'20#.#8.23.16':445
'20#.#8.103.27':445
'20#.#8.127.0':445
'20#.#8.111.93':445
'20#.#8.119.66':445
'20#.#8.15.165':445
'20#.#8.44.39':445
'20#.#8.55.44':445
'20#.#8.94.117':445
'20#.#8.253.227':445
'20#.#8.206.119':445
'20#.#8.65.229':445
'20#.#8.29.251':445
'20#.#8.110.46':445
'20#.#8.134.180':445
'20#.#8.104.12':445
'20#.#8.202.95':445
'20#.#8.169.166':445
'20#.#8.219.186':445
'20#.#8.30.52':445
'20#.#8.72.156':445
'20#.#8.174.11':445
'20#.#8.204.34':445
'20#.#8.10.158':445
'20#.#8.185.124':445
'20#.#8.68.219':445
'20#.#8.201.183':445
'20#.#8.110.61':445
'20#.#8.80.156':445
'20#.#8.6.241':445
'20#.#8.229.80':445
'20#.#8.183.236':445
'20#.#8.144.48':139
'20#.#8.112.143':139
'20#.#8.27.118':139
'20#.#8.228.70':445
'20#.#8.163.108':445
'20#.#8.48.163':139
'20#.#8.80.64':445
'20#.#8.23.229':445
'20#.#8.161.23':445
'20#.#8.173.183':445
'20#.#8.70.111':445
'20#.#8.108.46':445
'20#.#8.228.107':445
'20#.#8.163.166':445
'20#.#8.180.69':445
'20#.#8.248.106':445
'20#.#8.59.138':445
'20#.#8.27.163':445
'20#.#8.140.117':445
'20#.#8.29.251':139
'20#.#8.111.93':139
'20#.#8.119.66':139
'20#.#8.30.52':139
'20#.#8.72.156':139
'20#.#8.174.11':139
'20#.#8.127.0':139
'20#.#8.253.227':139
'20#.#8.206.119':139
'20#.#8.15.165':139
'20#.#8.23.16':139
'20#.#8.103.27':139
'20#.#8.185.124':139
'20#.#8.166.251':445
'20#.#8.202.95':139
'20#.#8.169.166':139
'20#.#8.198.225':445
'20#.#8.196.198':445
'20#.#8.238.82':445
'20#.#8.104.12':139
'20#.#8.204.34':139
'20#.#8.10.158':139
'20#.#8.219.186':139
'20#.#8.110.46':139
'20#.#8.134.180':139
'20#.#8.65.229':139
'20#.#8.80.64':139
'20#.#8.6.241':139
'20#.#8.229.80':139
'20#.#8.163.166':139
'20#.#8.180.69':139
'20#.#8.248.106':139
'20#.#8.80.156':139
'20#.#8.228.70':139
'20#.#8.163.108':139
'20#.#8.183.236':139
'20#.#8.201.183':139
'20#.#8.110.61':139
'20#.#8.140.117':139
'20#.#8.68.219':139
'20#.#8.70.111':139
'20#.#8.108.46':139
'20#.#8.44.39':139
'20#.#8.55.44':139
'20#.#8.94.117':139
'20#.#8.173.183':139
'20#.#8.59.138':139
'20#.#8.27.163':139
'20#.#8.228.107':139
'20#.#8.23.229':139
'20#.#8.161.23':139
'20#.#8.170.187':139
'20#.#8.88.89':445
'20#.#8.239.55':445
'20#.#8.3.183':445
'20#.#8.233.180':445
'20#.#8.65.252':445
'20#.#8.12.156':445
'20#.#8.44.167':445
'20#.#8.233.234':445
'20#.#8.138.52':445
'20#.#8.143.23':445
'20#.#8.249.250':445
'20#.#8.209.228':445
'20#.#8.117.51':445
'20#.#8.29.140':445
'20#.#8.152.96':445
'20#.#8.151.215':445
'20#.#8.174.4':445
'20#.#8.29.52':445
'20#.#8.216.96':445
'20#.#8.22.13':445
'20#.#8.13.117':445
'20#.#8.77.11':445
'20#.#8.136.152':445
'20#.#8.144.136':445
'20#.#8.27.144':445
'20#.#8.205.137':445
'20#.#8.0.109':445
'20#.#8.160.209':445
'20#.#8.68.188':445
'20#.#8.70.86':445
'20#.#8.54.250':445
'20#.#8.36.114':445
'20#.#8.115.149':445
'20#.#8.215.159':445
'20#.#8.15.20':445
'20#.#8.170.40':445
'20#.#8.229.169':445
'20#.#8.76.230':445
'20#.#8.238.172':445
'20#.#8.69.18':445
'20#.#8.236.68':445
'20#.#8.85.150':445
'20#.#8.116.157':445
'20#.#8.224.60':445
'20#.#8.18.105':445
'20#.#8.198.52':445
'20#.#8.66.120':445
'20#.#8.172.119':445
'20#.#8.26.214':445
'20#.#8.210.222':445
'20#.#8.155.229':445
'20#.#8.88.89':139
'20#.#8.239.55':139
'20#.#8.3.183':139
'20#.#8.233.180':139
'20#.#8.65.252':139
'20#.#8.12.156':139
'20#.#8.44.167':139
'20#.#8.233.234':139
'20#.#8.138.52':139
'20#.#8.143.23':139
'20#.#8.249.250':139
'20#.#8.209.228':139
'20#.#8.117.51':139
'20#.#8.216.96':139
'20#.#8.152.96':139
'20#.#8.151.215':139
'20#.#8.29.140':139
'20#.#8.29.52':139
'20#.#8.174.4':139
'20#.#8.22.13':139
'20#.#8.13.117':139
'20#.#8.77.11':139
'20#.#8.136.152':139
'20#.#8.144.136':139
'20#.#8.27.144':139
'20#.#8.205.137':139
'20#.#8.0.109':139
'20#.#8.160.209':139
'20#.#8.68.188':139
'20#.#8.70.86':139
'20#.#8.54.250':139
'20#.#8.36.114':139
'20#.#8.115.149':139
'20#.#8.215.159':139
'20#.#8.15.20':139
'20#.#8.170.40':139
'20#.#8.229.169':139
'20#.#8.76.230':139
'20#.#8.238.172':139
'20#.#8.69.18':139
'20#.#8.236.68':139
'20#.#8.85.150':139
'20#.#8.116.157':139
'20#.#8.224.60':139
'20#.#8.18.105':139
'20#.#8.198.52':139
'20#.#8.66.120':139
'20#.#8.172.119':139
'20#.#8.26.214':139
'20#.#8.210.222':139
'20#.#8.155.229':139
'20#.#8.88.89':9988
'20#.#8.25.54':445
'20#.#8.110.132':445
'20#.#8.254.110':445
'20#.#8.42.78':445
'20#.#8.35.97':445
'20#.#8.19.187':445
'20#.#8.203.218':445
'20#.#8.118.217':445
'20#.#8.59.221':445
'20#.#8.91.254':445
'20#.#8.72.92':445
'20#.#8.219.72':445
'20#.#8.14.215':445
'20#.38.1.45':445
'20#.#8.238.34':445
'20#.#8.130.42':445
'20#.#8.25.176':139
'20#.#8.160.151':139
'20#.#8.146.189':445
'20#.#8.186.156':445
'20#.#8.22.214':445
'20#.#8.165.42':445
'20#.#8.228.123':445
'20#.#8.85.40':445
'20#.#8.74.83':445
'20#.#8.249.96':445
'20#.#8.158.64':445
'20#.#8.210.152':445
'20#.#8.13.191':445
'20#.#8.239.161':445
'20#.#8.5.239':445
'20#.#8.174.113':445
'20#.#8.160.151':445
'20#.#8.185.196':139
'20#.#8.118.29':139
'20#.#8.125.219':445
'20#.#8.199.36':445
'20#.#8.25.176':445
'20#.#8.249.55':445
'20#.#8.133.8':445
'20#.#8.49.66':445
'20#.#8.131.236':445
'20#.#8.14.156':445
'20#.#8.194.95':445
'20#.#8.164.203':445
'20#.#8.22.29':445
'20#.#8.189.254':445
'20#.#8.71.181':445
'20#.#8.168.144':445
'20#.#8.177.168':445
'20#.#8.46.178':445
'20#.#8.14.215':139
'20#.#8.42.78':139
'20#.#8.35.97':139
'20#.#8.186.156':139
'20#.#8.22.214':139
'20#.#8.165.42':139
'20#.#8.254.110':139
'20#.#8.91.254':139
'20#.#8.72.92':139
'20#.#8.19.187':139
'20#.#8.25.54':139
'20#.#8.110.132':139
'20#.#8.74.83':139
'20#.#8.29.140':9988
'20#.#8.3.183':9988
'20#.#8.233.234':9988
'20#.#8.65.252':9988
'20#.#8.152.96':9988
'20#.#8.174.4':9988
'20#.#8.130.42':139
'20#.#8.228.123':139
'20#.#8.85.40':139
'20#.#8.146.189':139
'20#.38.1.45':139
'20#.#8.238.34':139
'20#.#8.219.72':139
'20#.#8.249.55':139
'20#.#8.239.161':139
'20#.#8.5.239':139
'20#.#8.22.29':139
'20#.#8.189.254':139
'20#.#8.71.181':139
'20#.#8.13.191':139
'20#.#8.125.219':139
'20#.#8.199.36':139
'20#.#8.174.113':139
'20#.#8.158.64':139
'20#.#8.210.152':139
'20#.#8.46.178':139
'20#.#8.249.96':139
'20#.#8.14.156':139
'20#.#8.194.95':139
'20#.#8.203.218':139
'20#.#8.118.217':139
'20#.#8.59.221':139
'20#.#8.131.236':139
'20#.#8.168.144':139
'20#.#8.177.168':139
'20#.#8.164.203':139
'20#.#8.133.8':139
'20#.#8.49.66':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней