Trojan.Starman.6046

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER381b.dir00\svchost.exe.mdmp 16325836412032196

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER381b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#77.73.192':139
'20#.#77.44.235':139
'20#.#77.32.154':139
'20#.#77.250.227':139
'20#.#77.159.44':139
'20#.#77.243.253':139
'20#.#77.95.244':139
'20#.#77.235.176':139
'20#.#77.108.162':139
'20#.#77.147.162':139
'20#.#77.154.97':139
'20#.#77.86.59':139
'20#.#77.239.228':139
'20#.#77.206.223':139
'20#.#77.80.217':445
'20#.#77.223.121':445
'20#.#77.150.38':139
'20#.#77.118.225':139
'20#.#77.112.5':139
'20#.#77.38.16':139
'20#.#77.73.105':139
'20#.#77.129.95':139
'20#.#77.250.227':445
'20#.#77.159.44':445
'20#.#77.154.97':445
'20#.#77.150.38':445
'20#.#77.118.225':445
'20#.#77.108.162':445
'20#.#77.147.162':445
'20#.#77.44.235':445
'20#.#77.32.154':445
'20#.#77.73.192':445
'20#.#77.112.5':445
'20#.#77.233.122':139
'20#.#77.10.234':139
'20#.#77.122.107':139
'20#.#77.23.48':139
'20#.#77.167.249':139
'20#.#77.38.16':445
'20#.#77.73.105':445
'20#.#77.239.228':445
'20#.#77.206.223':445
'20#.#77.86.59':445
'20#.#77.108.19':139
'20#.#77.163.72':139
'20#.#77.122.230':139
'20#.#77.184.231':139
'20#.#77.19.56':139
'20#.#77.13.53':445
'20#.#77.110.214':445
'20#.#77.223.121':139
'20#.#77.164.234':139
'20#.#77.80.217':139
'20#.#77.80.90':139
'20#.#77.163.230':139
'20#.#77.136.26':139
'20#.#77.230.112':139
'20#.#77.21.205':139
'20#.#77.113.49':139
'20#.#77.211.59':139
'20#.#77.99.114':139
'20#.#77.165.184':139
'20#.#77.55.12':139
'20#.#77.68.136':139
'20#.#77.141.129':445
'20#.#77.80.90':445
'20#.#77.184.231':445
'20#.#77.99.114':445
'20#.#77.165.184':445
'20#.#77.211.59':445
'20#.#77.163.72':445
'20#.#77.164.234':445
'20#.#77.108.19':445
'20#.#77.19.56':445
'20#.#77.122.230':445
'20#.#77.68.136':445
'20#.#77.2.77':445
'20#.#77.21.205':445
'20#.#77.248.129':445
'20#.#77.64.248':445
'20#.#77.245.77':445
'20#.#77.136.26':445
'20#.#77.55.12':445
'20#.#77.163.230':445
'20#.#77.113.49':445
'20#.#77.230.112':445
'20#.#77.228.187':445
'20#.#77.249.84':445
'20#.#77.43.155':445
'20#.#77.25.74':445
'20#.#77.82.171':445
'20#.#77.5.19':139
'20#.#77.131.208':139
'20#.#77.134.73':139
'20#.#77.83.56':445
'20#.#77.133.54':445
'20#.#77.234.146':445
'20#.#77.121.79':445
'20#.#77.44.51':445
'20#.#77.79.149':445
'20#.#77.24.196':445
'20#.#77.23.60':445
'20#.#77.46.99':445
'20#.#77.3.181':445
'20#.#77.99.21':445
'20#.#77.16.209':445
'20#.#77.22.101':445
'20#.#77.219.12':139
'20#.#77.68.251':139
'20#.#77.32.25':139
'20#.#77.29.87':139
'20#.#77.230.216':139
'20#.#77.213.217':139
'20#.#77.85.99':139
'20#.#77.191.96':139
'20#.#77.181.252':139
'20#.#77.243.31':139
'20#.#77.239.243':139
'20#.#77.33.75':139
'20#.#77.118.21':139
'20#.#77.175.4':139
'20#.#77.33.85':139
'20#.#77.147.230':139
'20#.#77.154.179':139
'20#.#77.26.110':139
'20#.#77.197.4':139
'20#.#77.48.111':139
'20#.#77.130.24':139
'20#.#77.70.193':139
'20#.#77.51.141':139
'20#.#77.27.36':139
'20#.#77.190.134':139
'20#.#77.184.114':139
'20#.#77.2.126':139
'20#.#77.79.149':139
'20#.#77.121.79':139
'20#.#77.23.60':139
'20#.#77.6.42':139
'20#.#77.24.196':139
'20#.#77.230.155':139
'20#.#77.129.95':445
'20#.#77.23.48':445
'20#.#77.95.244':445
'20#.#77.235.176':445
'20#.#77.243.253':445
'20#.#77.10.234':445
'20#.#77.211.10':139
'20#.#77.233.122':445
'20#.#77.167.249':445
'20#.#77.122.107':445
'20#.#77.44.51':139
'20#.#77.230.155':445
'20#.#77.184.114':445
'20#.#77.211.10':445
'20#.#77.83.56':139
'20#.#77.133.54':139
'20#.#77.27.36':445
'20#.#77.6.42':445
'20#.#77.51.141':445
'20#.#77.2.126':445
'20#.#77.190.134':445
'20#.#77.249.84':139
'20#.#77.46.99':139
'20#.#77.3.181':139
'20#.#77.99.21':139
'20#.#77.16.209':139
'20#.#77.22.101':139
'20#.#77.43.155':139
'20#.#77.228.187':139
'20#.#77.82.171':139
'20#.#77.234.146':139
'20#.#77.25.74':139
'20#.#77.101.74':445
'20#.#77.61.171':445
'20#.#77.0.191':445
'20#.#77.174.108':445
'20#.#77.12.163':445
'20#.#77.6.92':445
'20#.#77.146.138':445
'20#.#77.158.39':445
'20#.#77.181.206':445
'20#.#77.205.181':445
'20#.#77.95.134':445
'20#.#77.79.151':139
'20#.#77.64.142':139
'20#.#77.39.63':139
'20#.#77.176.83':139
'20#.#77.155.248':139
'20#.#77.241.199':445
'20#.#77.111.132':445
'20#.#77.6.139':139
'20#.#77.4.172':139
'20#.#77.98.246':139
'20#.#77.76.67':445
'20#.#77.122.18':445
'20#.#77.176.159':445
'20#.#77.18.178':445
'20#.#77.33.130':445
'20#.#77.178.16':445
'20#.#77.100.219':445
'20#.#77.208.54':445
'20#.#77.88.229':445
'20#.#77.196.194':445
'20#.#77.227.197':445
'20#.#77.79.12':445
'20#.#77.9.140':445
'20#.#77.186.100':445
'20#.#77.21.119':445
'20#.#77.11.2':445
'20#.#77.97.239':445
'20#.#77.142.55':445
'20#.#77.12.142':445
'20#.#77.55.95':445
'20#.#77.205.101':445
'20#.#77.144.101':445
'20#.#77.11.2':139
'20#.#77.97.239':139
'20#.#77.76.67':139
'20#.#77.6.92':139
'20#.#77.146.138':139
'20#.#77.205.101':139
'20#.#77.144.101':139
'20#.#77.186.100':139
'20#.#77.21.119':139
'20#.#77.9.140':139
'20#.#77.158.39':139
'20#.#77.241.199':139
'20#.#77.0.191':139
'20#.#77.12.163':139
'20#.#77.95.134':139
'20#.#77.111.132':139
'20#.#77.181.206':139
'20#.#77.205.181':139
'20#.#77.61.171':139
'20#.#77.174.108':139
'20#.#77.101.74':139
'20#.#77.55.95':139
'20#.#77.248.34':139
'20#.#77.39.17':139
'20#.#77.34.208':139
'20#.#77.100.219':139
'20#.#77.208.54':139
'20#.#77.9.236':139
'20#.#77.72.45':139
'20#.#77.207.167':139
'20#.#77.202.189':139
'20#.#77.121.103':139
'20#.#77.88.229':139
'20#.#77.33.130':139
'20#.#77.178.16':139
'20#.#77.79.12':139
'20#.#77.142.55':139
'20#.#77.12.142':139
'20#.#77.196.194':139
'20#.#77.227.197':139
'20#.#77.176.159':139
'20#.#77.18.178':139
'20#.#77.122.18':139
'20#.#77.112.3':445
'20#.#77.217.111':445
'20#.#77.113.126':445
'20#.#77.215.174':445
'20#.#77.114.84':445
'20#.#77.136.72':445
'20#.#77.142.101':445
'20#.#77.168.67':445
'20#.#77.11.171':445
'20#.#77.68.99':445
'20#.#77.47.144':139
'20#.#77.15.21':139
'20#.#77.163.14':139
'20#.#77.80.16':139
'20#.#77.54.111':139
'20#.#77.218.29':139
'20#.#77.82.239':139
'20#.#77.138.83':139
'20#.#77.239.173':139
'20#.#77.85.80':139
'20#.#77.91.206':139
'20#.#77.159.118':445
'20#.#77.13.53':139
'20#.#77.110.214':139
'20#.#77.47.144':445
'20#.#77.82.239':445
'20#.#77.138.83':445
'20#.#77.248.129':139
'20#.#77.2.77':139
'20#.#77.245.77':139
'20#.#77.141.129':139
'20#.#77.64.248':139
'20#.#77.239.173':445
'20#.#77.54.111':445
'20#.#77.218.29':445
'20#.#77.79.90':445
'20#.#77.209.100':445
'20#.#77.89.209':445
'20#.#77.85.80':445
'20#.#77.91.206':445
'20#.#77.163.14':445
'20#.#77.80.16':445
'20#.#77.15.21':445
'20#.#77.98.246':445
'20#.#77.6.139':445
'20#.#77.4.172':445
'20#.#77.79.151':445
'20#.#77.64.142':445
'20#.#77.181.206':9988
'20#.#77.146.138':9988
'20#.#77.12.163':9988
'20#.#77.0.191':9988
'20#.#77.241.199':9988
'20#.#77.39.63':445
'20#.#77.202.189':445
'20#.#77.121.103':445
'20#.#77.39.17':445
'20#.#77.34.208':445
'20#.#77.248.34':445
'20#.#77.176.83':445
'20#.#77.155.248':445
'20#.#77.72.45':445
'20#.#77.207.167':445
'20#.#77.9.236':445
'20#.#77.76.67':9988
'20#.#77.168.67':139
'20#.#77.136.72':139
'20#.#77.68.99':139
'20#.#77.217.111':139
'20#.#77.11.171':139
'20#.#77.89.209':139
'20#.#77.79.90':139
'20#.#77.209.100':139
'20#.#77.142.101':139
'20#.#77.159.118':139
'20#.#77.112.3':139
'20#.#77.79.12':9988
'20#.#77.18.178':9988
'20#.#77.21.119':9988
'20#.#77.11.2':9988
'20#.#77.97.239':9988
'20#.#77.114.84':139
'20#.#77.113.126':139
'20#.#77.215.174':139
'20#.#77.176.159':9988
'20#.#77.100.219':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней