Trojan.Starman.5717

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER1e38.dir00\svchost.exe.mdmp 16325836412032364

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER1e38.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#1.1.147':139
'20#.#1.34.56':139
'20#.#1.197.57':139
'20#.#1.250.46':139
'20#.#1.196.178':139
'20#.#1.0.113':139
'20#.#1.17.249':139
'20#.#1.26.45':139
'20#.#1.122.200':139
'20#.#1.81.71':139
'20#.#1.200.131':139
'20#.#1.97.226':139
'20#.#1.22.161':139
'20#.#1.18.212':139
'20#.81.44.0':139
'20#.#1.133.245':139
'20#.#1.206.49':139
'20#.#1.210.238':139
'20#.#1.42.76':139
'20#.#1.131.58':139
'20#.#1.225.205':139
'20#.#1.70.226':139
'20#.#1.228.48':139
'20#.#1.14.64':445
'20#.#1.61.210':445
'20#.#1.175.106':445
'20#.#1.63.75':445
'20#.#1.106.155':445
'20#.#1.166.241':445
'20#.#1.195.240':445
'20#.#1.70.34':445
'20#.#1.79.79':445
'20#.81.8.6':445
'20#.#1.79.214':445
'20#.#1.49.12':139
'20#.#1.172.36':139
'20#.#1.203.251':139
'20#.#1.95.108':139
'20#.#1.84.151':139
'20#.#1.89.147':139
'20#.#1.179.182':139
'20#.#1.108.152':139
'20#.#1.168.237':139
'20#.#1.138.186':139
'20#.#1.176.216':139
'20#.#1.0.167':139
'20#.#1.245.161':445
'20#.#1.56.66':445
'20#.#1.49.55':445
'20#.#1.249.30':445
'20#.#1.175.249':445
'20#.#1.104.40':445
'20#.#1.33.59':445
'20#.#1.46.156':445
'20#.#1.247.170':445
'20#.#1.133.186':445
'20#.#1.208.18':445
'20#.#1.178.215':445
'20#.#1.237.178':445
'20#.#1.121.151':445
'20#.#1.5.193':445
'20#.#1.115.154':445
'20#.#1.250.109':445
'20#.#1.20.100':445
'20#.#1.30.160':445
'20#.#1.62.217':445
'20#.#1.183.223':445
'20#.#1.202.183':445
'20#.#1.97.195':445
'20#.#1.79.79':139
'20#.#1.195.240':139
'20#.#1.79.214':139
'20#.#1.166.241':139
'20#.81.8.6':139
'20#.#1.70.34':139
'20#.#1.23.76':139
'20#.#1.232.199':139
'20#.#1.193.227':139
'20#.#1.218.223':139
'20#.#1.81.219':139
'20#.#1.28.204':445
'20#.#1.248.172':445
'20#.#1.110.40':445
'20#.#1.106.140':445
'20#.#1.66.154':445
'20#.#1.237.248':445
'20#.#1.14.64':139
'20#.#1.61.210':139
'20#.#1.175.106':139
'20#.#1.63.75':139
'20#.#1.106.155':139
'20#.#1.157.194':139
'20#.#1.79.81':139
'20#.#1.56.187':139
'20#.#1.28.80':139
'20#.#1.252.210':139
'20#.#1.61.223':139
'20#.#1.237.13':139
'20#.#1.16.36':139
'20#.#1.101.182':139
'20#.#1.174.249':139
'20#.#1.172.156':139
'20#.#1.203.49':139
'20#.#1.93.191':139
'20#.#1.129.113':139
'20#.#1.86.247':139
'20#.#1.227.70':139
'20#.#1.193.154':139
'20#.#1.48.150':139
'20#.#1.17.135':139
'20#.81.1.32':139
'20#.#1.225.220':139
'20#.#1.30.140':139
'20#.#1.89.80':139
'20#.#1.68.162':139
'20#.#1.25.103':139
'20#.#1.161.137':139
'20#.#1.96.231':139
'20#.#1.215.220':139
'20#.#1.139.231':139
'20#.#1.43.179':139
'20#.#1.132.226':139
'20#.#1.251.136':139
'20#.#1.26.206':139
'20#.#1.174.237':139
'20#.#1.39.246':139
'20#.#1.138.183':139
'20#.#1.246.109':139
'20#.#1.223.166':139
'20#.#1.103.128':139
'20#.#1.188.162':139
'20#.#1.89.153':139
'20#.#1.231.106':139
'20#.#1.14.100':139
'20#.#1.20.113':139
'20#.#1.0.119':139
'20#.#1.143.162':139
'20#.#1.131.58':445
'20#.#1.210.238':445
'20#.#1.70.226':445
'20#.#1.206.49':445
'20#.#1.225.205':445
'20#.#1.42.76':445
'20#.#1.1.147':445
'20#.#1.34.56':445
'20#.#1.197.57':445
'20#.#1.250.46':445
'20#.#1.196.178':445
'20#.#1.23.76':445
'20#.#1.232.199':445
'20#.#1.193.227':445
'20#.#1.218.223':445
'20#.#1.81.219':445
'20#.#1.0.167':445
'20#.#1.97.226':445
'20#.#1.22.161':445
'20#.#1.18.212':445
'20#.81.44.0':445
'20#.#1.133.245':445
'20#.#1.0.113':445
'20#.#1.168.237':445
'20#.#1.179.182':445
'20#.#1.176.216':445
'20#.#1.89.147':445
'20#.#1.138.186':445
'20#.#1.108.152':445
'20#.#1.153.68':139
'20#.81.1.29':139
'20#.#1.213.36':139
'20#.#1.115.230':139
'20#.#1.186.93':139
'20#.#1.17.249':445
'20#.#1.26.45':445
'20#.#1.122.200':445
'20#.#1.81.71':445
'20#.#1.200.131':445
'20#.#1.228.48':445
'20#.#1.49.12':445
'20#.#1.172.36':445
'20#.#1.203.251':445
'20#.#1.95.108':445
'20#.#1.84.151':445
'20#.#1.37.245':445
'20#.#1.24.71':445
'20#.#1.33.42':445
'20#.#1.15.63':445
'20#.#1.23.54':445
'20#.#1.15.10':445
'20#.#1.196.174':445
'20#.#1.3.118':445
'20#.#1.124.122':445
'20#.#1.168.137':445
'20#.#1.30.109':445
'20#.#1.32.182':139
'20#.#1.177.198':139
'20#.#1.135.92':139
'20#.#1.40.168':139
'20#.#1.241.81':139
'20#.#1.41.174':445
'20#.#1.174.21':445
'20#.#1.186.94':445
'20#.#1.23.71':445
'20#.#1.243.58':445
'20#.#1.74.196':445
'20#.#1.141.250':445
'20#.#1.228.168':445
'20#.#1.16.108':445
'20#.#1.116.218':445
'20#.#1.35.248':445
'20#.#1.31.241':445
'20#.#1.12.221':445
'20#.#1.125.169':445
'20#.#1.19.143':445
'20#.#1.179.49':445
'20#.#1.84.115':445
'20#.#1.103.105':445
'20#.#1.148.106':445
'20#.#1.193.199':445
'20#.#1.83.19':445
'20#.#1.54.214':445
'20#.#1.224.188':445
'20#.#1.254.1':445
'20#.#1.240.144':445
'20#.#1.249.147':445
'20#.#1.145.47':445
'20#.#1.250.253':445
'20#.#1.28.157':445
'20#.#1.151.81':139
'20#.#1.124.122':139
'20#.#1.196.174':139
'20#.#1.30.109':139
'20#.#1.15.10':139
'20#.#1.168.137':139
'20#.#1.3.118':139
'20#.#1.83.19':139
'20#.#1.148.106':139
'20#.#1.224.188':139
'20#.#1.141.250':139
'20#.#1.54.214':139
'20#.#1.186.94':139
'20#.#1.23.71':139
'20#.#1.74.196':139
'20#.#1.243.58':139
'20#.#1.15.63':139
'20#.#1.174.21':139
'20#.#1.37.245':139
'20#.#1.24.71':139
'20#.#1.23.54':139
'20#.#1.41.174':139
'20#.#1.33.42':139
'20#.#1.193.199':139
'20#.#1.179.49':139
'20#.#1.125.169':139
'20#.#1.103.105':139
'20#.#1.12.221':139
'20#.#1.84.115':139
'20#.#1.19.143':139
'20#.#1.8.225':139
'20#.#1.55.77':139
'20#.#1.224.154':139
'20#.#1.223.157':139
'20#.#1.171.244':139
'20#.#1.145.47':139
'20#.#1.240.144':139
'20#.#1.28.157':139
'20#.#1.254.1':139
'20#.#1.250.253':139
'20#.#1.249.147':139
'20#.#1.228.168':139
'20#.#1.16.108':139
'20#.#1.116.218':139
'20#.#1.35.248':139
'20#.#1.31.241':139
'20#.#1.33.59':139
'20#.#1.46.156':139
'20#.#1.247.170':139
'20#.#1.133.186':139
'20#.#1.208.18':139
'20#.#1.97.195':139
'20#.#1.28.204':139
'20#.#1.248.172':139
'20#.#1.110.40':139
'20#.#1.106.140':139
'20#.#1.66.154':139
'20#.#1.20.100':139
'20#.#1.30.160':139
'20#.#1.62.217':139
'20#.#1.183.223':139
'20#.#1.202.183':139
'20#.#1.249.30':139
'20#.#1.56.66':139
'20#.#1.104.40':139
'20#.#1.245.161':139
'20#.#1.175.249':139
'20#.#1.49.55':139
'20#.#1.237.248':139
'20#.#1.183.96':445
'20#.#1.51.37':445
'20#.#1.150.187':445
'20#.#1.187.10':445
'20#.#1.186.29':445
'20#.#1.41.128':445
'20#.#1.148.224':445
'20#.#1.82.199':445
'20#.#1.116.191':445
'20#.#1.69.59':445
'20#.#1.91.72':445
'20#.#1.125.245':445
'20#.#1.70.84':445
'20#.#1.180.100':445
'20#.#1.100.135':445
'20#.#1.29.100':445
'20#.#1.32.132':445
'20#.#1.2.129':445
'20#.#1.26.240':445
'20#.#1.129.14':445
'20#.#1.128.32':445
'20#.#1.100.52':445
'20#.#1.250.109':139
'20#.#1.174.21':9988
'20#.#1.186.94':9988
'20#.#1.33.42':9988
'20#.#1.28.157':9988
'20#.#1.141.250':9988
'20#.#1.83.19':9988
'20#.#1.180.100':139
'20#.#1.125.245':139
'20#.#1.29.100':139
'20#.#1.74.196':9988
'20#.#1.100.135':139
'20#.#1.8.225':445
'20#.#1.55.77':445
'20#.#1.224.154':445
'20#.#1.171.244':445
'20#.#1.223.157':445
'20#.#1.151.81':445
'20#.#1.32.182':445
'20#.#1.177.198':445
'20#.#1.135.92':445
'20#.#1.40.168':445
'20#.#1.241.81':445
'20#.#1.70.84':139
'20#.#1.116.191':139
'20#.#1.148.224':139
'20#.#1.91.72':139
'20#.#1.41.128':139
'20#.#1.69.59':139
'20#.#1.82.199':139
'20#.#1.178.215':139
'20#.#1.237.178':139
'20#.#1.121.151':139
'20#.#1.5.193':139
'20#.#1.115.154':139
'20#.#1.129.14':139
'20#.#1.2.129':139
'20#.#1.100.52':139
'20#.#1.32.132':139
'20#.#1.128.32':139
'20#.#1.26.240':139
'20#.#1.183.96':139
'20#.#1.51.37':139
'20#.#1.150.187':139
'20#.#1.187.10':139
'20#.#1.186.29':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней