Trojan.Starman.6071

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER553b.dir00\svchost.exe.mdmp 16325836412032304

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER553b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#1.31.146':139
'20#.#1.232.31':139
'20#.#1.58.207':139
'20#.#1.158.184':139
'20#.#1.106.158':139
'20#.#1.60.190':139
'20#.#1.9.143':445
'20#.#1.92.135':139
'20#.#1.23.147':139
'20#.#1.65.213':139
'20#.#1.237.153':139
'20#.#1.144.23':139
'20#.#1.153.156':139
'20#.#1.49.135':139
'20#.#1.42.145':139
'20#.#1.37.105':139
'20#.#1.150.103':139
'20#.#1.212.91':139
'20#.#1.125.0':139
'20#.#1.109.55':139
'20#.#1.231.203':445
'20#.#1.105.184':445
'20#.#1.98.51':445
'20#.#1.42.98':445
'20#.#1.24.195':445
'20#.#1.107.37':445
'20#.#1.148.106':445
'20#.#1.73.197':445
'20#.#1.69.183':445
'20#.#1.72.246':445
'20#.#1.22.249':445
'20#.#1.109.211':445
'20#.#1.52.79':445
'20#.#1.94.14':445
'20#.#1.143.159':445
'20#.#1.52.110':445
'20#.#1.65.171':445
'20#.#1.109.166':445
'20#.41.0.53':445
'20#.#1.181.198':445
'20#.#1.200.154':445
'20#.#1.239.187':445
'20#.#1.155.217':445
'20#.#1.60.109':445
'20#.#1.146.222':445
'20#.#1.9.143':139
'20#.#1.94.14':139
'20#.#1.35.232':445
'20#.#1.196.141':445
'20#.#1.170.198':445
'20#.#1.200.154':139
'20#.#1.239.187':139
'20#.#1.155.217':139
'20#.#1.60.109':139
'20#.#1.146.222':139
'20#.#1.120.55':445
'20#.#1.115.116':445
'20#.#1.35.232':139
'20#.#1.196.141':139
'20#.#1.170.198':139
'20#.#1.105.184':139
'20#.#1.69.183':139
'20#.#1.231.203':139
'20#.#1.24.195':139
'20#.#1.98.51':139
'20#.#1.148.106':139
'20#.#1.20.218':139
'20#.#1.107.37':139
'20#.#1.72.246':139
'20#.#1.73.197':139
'20#.#1.109.211':139
'20#.41.0.53':139
'20#.#1.22.249':139
'20#.#1.143.159':139
'20#.#1.52.79':139
'20#.#1.65.171':139
'20#.#1.42.98':139
'20#.#1.52.110':139
'20#.#1.181.198':139
'20#.#1.109.166':139
'20#.#1.20.218':445
'20#.#1.73.181':139
'20#.#1.209.58':139
'20#.#1.162.171':139
'20#.#1.68.212':139
'20#.#1.235.68':139
'20#.#1.121.245':139
'20#.#1.136.160':139
'20#.#1.217.98':139
'20#.#1.164.104':139
'20#.#1.134.164':139
'20#.#1.68.167':139
'20#.#1.130.77':139
'20#.#1.152.44':139
'20#.#1.9.227':139
'20#.#1.61.105':139
'20#.#1.29.141':139
'20#.#1.211.179':139
'20#.#1.248.228':139
'20#.#1.53.113':139
'20#.#1.93.176':139
'20#.#1.249.200':139
'20#.#1.35.156':139
'20#.#1.59.221':139
'20#.#1.97.202':139
'20#.#1.221.99':139
'20#.#1.220.135':139
'20#.#1.30.65':139
'20#.#1.206.158':139
'20#.#1.170.82':139
'20#.#1.31.212':139
'20#.#1.55.206':139
'20#.#1.254.205':139
'20#.#1.192.105':139
'20#.#1.168.90':139
'20#.#1.156.242':139
'20#.#1.180.163':139
'20#.#1.215.45':139
'20#.#1.84.20':139
'20#.#1.146.236':139
'20#.#1.245.14':139
'20#.#1.31.146':445
'20#.#1.232.31':445
'20#.#1.58.207':445
'20#.#1.158.184':445
'20#.#1.106.158':445
'20#.#1.60.190':445
'20#.#1.67.56':139
'20#.#1.92.135':445
'20#.#1.23.147':445
'20#.#1.65.213':445
'20#.#1.237.153':445
'20#.#1.144.23':445
'20#.#1.153.156':445
'20#.#1.49.135':445
'20#.#1.42.145':445
'20#.#1.37.105':445
'20#.#1.150.103':445
'20#.#1.212.91':445
'20#.#1.125.0':445
'20#.#1.109.55':445
'20#.#1.248.23':445
'20#.#1.165.161':445
'20#.#1.113.231':445
'20#.#1.59.10':445
'20#.#1.48.59':445
'20#.#1.10.123':445
'20#.#1.53.11':139
'20#.#1.27.124':445
'20#.#1.125.165':445
'20#.#1.26.72':445
'20#.#1.248.23':139
'20#.#1.165.161':139
'20#.#1.113.231':139
'20#.#1.59.10':139
'20#.#1.48.59':139
'20#.#1.10.123':139
'20#.#1.67.56':445
'20#.#1.27.124':139
'20#.#1.125.165':139
'20#.#1.26.72':139
'20#.#1.155.99':445
'20#.#1.168.15':445
'20#.#1.255.22':445
'20#.#1.81.247':139
'20#.#1.80.71':445
'20#.#1.59.175':445
'20#.#1.251.170':445
'20#.#1.64.151':445
'20#.#1.172.73':445
'20#.#1.237.147':445
'20#.#1.7.154':139
'20#.#1.116.172':139
'20#.#1.128.111':139
'20#.#1.252.158':139
'20#.#1.110.253':139
'20#.#1.60.179':139
'20#.#1.212.114':139
'20#.#1.80.136':139
'20#.#1.58.22':139
'20#.#1.202.108':139
'20#.#1.181.211':445
'20#.#1.243.222':445
'20#.#1.38.107':445
'20#.#1.87.127':445
'20#.#1.14.226':445
'20#.#1.210.32':445
'20#.#1.99.236':445
'20#.41.36.4':445
'20#.#1.29.151':445
'20#.#1.28.11':445
'20#.#1.16.83':445
'20#.#1.239.133':445
'20#.#1.221.16':445
'20#.#1.16.121':445
'20#.#1.187.200':445
'20#.#1.135.12':445
'20#.41.2.63':445
'20#.#1.57.17':445
'20#.#1.68.138':445
'20#.#1.29.94':445
'20#.#1.239.133':139
'20#.#1.68.138':139
'20#.#1.16.83':139
'20#.#1.16.121':139
'20#.#1.221.16':139
'20#.41.2.63':139
'20#.#1.87.127':139
'20#.#1.135.12':139
'20#.#1.29.94':139
'20#.#1.57.17':139
'20#.#1.168.15':139
'20#.#1.155.99':139
'20#.#1.172.73':139
'20#.#1.64.151':139
'20#.#1.80.71':139
'20#.#1.251.170':139
'20#.#1.187.200':139
'20#.#1.59.175':139
'20#.#1.255.22':139
'20#.#1.237.147':139
'20#.#1.224.84':139
'20#.#1.100.29':139
'20#.#1.123.10':139
'20#.#1.30.10':139
'20#.#1.15.234':139
'20#.#1.157.12':139
'20#.#1.39.151':139
'20#.#1.174.44':139
'20#.#1.21.166':139
'20#.#1.141.79':139
'20#.#1.243.222':139
'20#.#1.29.151':139
'20#.#1.181.211':139
'20#.#1.14.226':139
'20#.#1.38.107':139
'20#.#1.99.236':139
'20#.#1.252.178':139
'20#.#1.210.32':139
'20#.#1.28.11':139
'20#.41.36.4':139
'20#.#1.252.178':445
'20#.#1.85.222':139
'20#.#1.193.126':139
'20#.#1.116.38':139
'20#.#1.224.73':139
'20#.#1.227.224':139
'20#.#1.52.32':445
'20#.#1.26.203':445
'20#.#1.160.244':445
'20#.#1.143.142':139
'20#.#1.40.250':139
'20#.#1.27.171':139
'20#.#1.131.147':139
'20#.#1.96.142':139
'20#.#1.177.246':139
'20#.#1.71.48':139
'20#.#1.112.213':139
'20#.#1.169.233':139
'20#.#1.79.113':139
'20#.#1.17.132':139
'20#.#1.217.45':139
'20#.#1.116.38':445
'20#.#1.85.222':445
'20#.#1.227.224':445
'20#.#1.169.233':445
'20#.#1.224.73':445
'20#.#1.120.55':139
'20#.#1.115.116':139
'20#.#1.40.250':445
'20#.#1.193.126':445
'20#.#1.143.142':445
'20#.#1.96.142':445
'20#.#1.27.171':445
'20#.#1.71.48':445
'20#.#1.180.89':445
'20#.#1.177.246':445
'20#.#1.79.113':445
'20#.#1.112.213':445
'20#.#1.217.45':445
'20#.#1.131.147':445
'20#.#1.17.132':445
'20#.#1.7.154':445
'20#.#1.116.172':445
'20#.#1.128.111':445
'20#.#1.252.158':445
'20#.#1.110.253':445
'20#.#1.60.179':445
'20#.#1.212.114':445
'20#.#1.80.136':445
'20#.#1.58.22':445
'20#.#1.202.108':445
'20#.#1.224.84':445
'20#.#1.100.29':445
'20#.#1.123.10':445
'20#.#1.30.10':445
'20#.#1.15.234':445
'20#.#1.157.12':445
'20#.#1.39.151':445
'20#.#1.174.44':445
'20#.#1.21.166':445
'20#.#1.141.79':445
'20#.#1.157.12':9988
'20#.#1.128.111':9988
'20#.#1.252.178':9988
'20#.#1.29.151':9988
'20#.#1.28.11':9988
'20#.#1.26.203':139
'20#.#1.180.89':139
'20#.#1.52.32':139
'20#.#1.202.108':9988
'20#.#1.160.244':139
'20#.#1.16.83':9988
'20#.#1.68.138':9988
'20#.#1.59.175':9988
'20#.#1.81.247':445
'20#.#1.251.170':9988
'20#.#1.38.107':9988
'20#.#1.181.211':9988
'20#.#1.14.226':9988
'20#.#1.29.94':9988
'20#.#1.87.127':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней