Trojan.Starman.5236

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER34b2.dir00\svchost.exe.mdmp 16325836412029012

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER34b2.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#9.94.55':139
'20#.#9.166.116':139
'20#.#9.125.50':139
'20#.#9.11.188':139
'20#.#9.142.224':139
'20#.#9.148.212':139
'20#.#9.94.123':139
'20#.#9.212.220':139
'20#.#9.195.60':139
'20#.#9.210.194':139
'20#.#9.159.194':139
'20#.#9.120.204':445
'20#.#9.57.15':445
'20#.#9.69.243':445
'20#.#9.170.248':445
'20#.#9.22.178':445
'20#.#9.33.73':139
'20#.#9.175.60':139
'20#.#9.169.223':139
'20#.#9.14.226':139
'20#.#9.223.124':139
'20#.#9.94.55':445
'20#.#9.166.116':445
'20#.#9.125.50':445
'20#.#9.11.188':445
'20#.#9.142.224':445
'20#.#9.148.212':445
'20#.#9.94.123':445
'20#.#9.212.220':445
'20#.#9.195.60':445
'20#.#9.210.194':445
'20#.#9.159.194':445
'20#.#9.222.17':139
'20#.29.4.77':139
'20#.#9.113.250':139
'20#.#9.91.17':139
'20#.#9.81.144':139
'20#.#9.33.73':445
'20#.#9.175.60':445
'20#.#9.169.223':445
'20#.#9.14.226':445
'20#.#9.223.124':445
'20#.#9.47.159':445
'20#.#9.22.178':139
'20#.#9.69.243':139
'20#.#9.170.248':139
'20#.#9.254.165':139
'20#.#9.47.159':139
'20#.#9.46.224':445
'20#.#9.107.167':445
'20#.#9.151.16':445
'20#.#9.120.204':139
'20#.#9.57.15':139
'20#.#9.206.45':139
'20#.#9.4.168':139
'20#.#9.162.80':139
'20#.#9.253.216':139
'20#.#9.17.41':139
'20#.#9.47.76':139
'20#.#9.96.24':139
'20#.#9.46.96':139
'20#.#9.20.152':139
'20#.#9.90.86':139
'20#.#9.131.221':139
'20#.#9.90.86':445
'20#.#9.131.221':445
'20#.#9.162.80':445
'20#.#9.253.216':445
'20#.#9.4.168':445
'20#.#9.206.45':445
'20#.#9.254.165':445
'20#.#9.46.96':445
'20#.#9.20.152':445
'20#.#9.96.24':445
'20#.#9.47.76':445
'20#.29.9.22':445
'20#.#9.162.229':445
'20#.#9.138.179':445
'20#.#9.165.143':445
'20#.#9.179.171':445
'20#.#9.41.116':445
'20#.#9.17.41':445
'20#.#9.18.61':445
'20#.#9.38.163':445
'20#.#9.103.49':445
'20#.#9.91.17':445
'20#.#9.109.170':445
'20#.#9.110.174':445
'20#.#9.26.97':445
'20#.#9.63.69':445
'20#.#9.126.77':445
'20#.#9.223.209':445
'20#.#9.18.161':445
'20#.#9.106.236':445
'20#.#9.36.70':445
'20#.#9.236.187':445
'20#.#9.26.33':445
'20#.29.1.38':445
'20#.#9.127.71':445
'20#.#9.164.209':445
'20#.#9.21.22':445
'20#.#9.209.129':445
'20#.#9.249.120':445
'20#.#9.116.243':445
'20#.#9.153.60':445
'20#.#9.100.50':445
'20#.#9.157.59':445
'20#.#9.78.238':139
'20#.#9.23.208':139
'20#.#9.49.102':139
'20#.#9.6.237':139
'20#.#9.77.249':139
'20#.#9.95.195':139
'20#.#9.51.114':139
'20#.#9.155.80':139
'20#.#9.28.209':139
'20#.#9.254.204':139
'20#.#9.218.109':139
'20#.#9.155.217':139
'20#.#9.4.156':139
'20#.#9.118.55':139
'20#.#9.50.137':139
'20#.#9.181.229':139
'20#.#9.93.15':139
'20#.#9.96.93':139
'20#.#9.15.177':139
'20#.#9.130.4':139
'20#.#9.176.129':139
'20#.#9.228.119':445
'20#.#9.209.129':139
'20#.#9.164.209':139
'20#.#9.21.22':139
'20#.#9.107.1':139
'20#.#9.228.119':139
'20#.#9.157.59':139
'20#.#9.153.60':139
'20#.#9.100.50':139
'20#.29.1.38':139
'20#.#9.127.71':139
'20#.#9.174.186':139
'20#.29.4.77':445
'20#.#9.14.150':139
'20#.#9.222.17':445
'20#.#9.81.144':445
'20#.#9.113.250':445
'20#.#9.50.89':139
'20#.#9.242.193':139
'20#.#9.119.214':139
'20#.#9.57.83':139
'20#.#9.158.236':139
'20#.#9.57.83':445
'20#.#9.158.236':445
'20#.#9.14.150':445
'20#.#9.223.209':139
'20#.#9.18.161':139
'20#.#9.174.186':445
'20#.#9.107.1':445
'20#.#9.242.193':445
'20#.#9.119.214':445
'20#.#9.50.89':445
'20#.#9.106.236':139
'20#.#9.63.69':139
'20#.#9.126.77':139
'20#.#9.26.33':139
'20#.#9.249.120':139
'20#.#9.116.243':139
'20#.#9.36.70':139
'20#.#9.236.187':139
'20#.#9.110.174':139
'20#.#9.26.97':139
'20#.#9.109.170':139
'20#.#9.53.201':445
'20#.#9.253.72':445
'20#.#9.147.80':445
'20#.#9.176.44':445
'20#.#9.239.47':445
'20#.#9.174.101':445
'20#.#9.93.110':445
'20#.#9.101.193':445
'20#.#9.118.231':445
'20#.#9.97.89':445
'20#.#9.113.116':445
'20#.#9.246.128':139
'20#.#9.25.35':139
'20#.#9.116.177':139
'20#.#9.76.68':139
'20#.#9.0.189':139
'20#.#9.234.19':445
'20#.#9.181.170':445
'20#.#9.130.3':139
'20#.#9.221.81':139
'20#.#9.68.99':139
'20#.#9.45.62':445
'20#.#9.11.199':445
'20#.#9.137.197':445
'20#.#9.102.240':445
'20#.#9.56.22':445
'20#.#9.121.58':445
'20#.#9.169.237':445
'20#.#9.93.158':445
'20#.#9.151.11':445
'20#.#9.234.201':445
'20#.#9.240.105':445
'20#.#9.7.231':445
'20#.#9.165.225':445
'20#.#9.239.95':445
'20#.#9.134.243':445
'20#.#9.95.253':445
'20#.#9.161.65':445
'20#.#9.218.216':445
'20#.#9.186.112':445
'20#.#9.39.64':445
'20#.#9.47.50':445
'20#.#9.164.181':139
'20#.#9.95.253':139
'20#.#9.239.95':139
'20#.#9.134.243':139
'20#.#9.174.101':139
'20#.#9.93.110':139
'20#.#9.47.50':139
'20#.#9.186.112':139
'20#.#9.39.64':139
'20#.#9.7.231':139
'20#.#9.165.225':139
'20#.#9.101.193':139
'20#.#9.176.44':139
'20#.#9.113.116':139
'20#.#9.147.80':139
'20#.#9.181.170':139
'20#.#9.234.19':139
'20#.#9.118.231':139
'20#.#9.97.89':139
'20#.#9.253.72':139
'20#.#9.239.47':139
'20#.#9.53.201':139
'20#.#9.235.143':139
'20#.#9.246.209':139
'20#.#9.139.204':139
'20#.#9.121.58':139
'20#.#9.169.237':139
'20#.#9.126.115':139
'20#.#9.93.37':139
'20#.#9.18.178':139
'20#.#9.40.246':139
'20#.#9.169.83':139
'20#.#9.93.158':139
'20#.#9.102.240':139
'20#.#9.56.22':139
'20#.#9.240.105':139
'20#.#9.161.65':139
'20#.#9.218.216':139
'20#.#9.151.11':139
'20#.#9.234.201':139
'20#.#9.11.199':139
'20#.#9.137.197':139
'20#.#9.45.62':139
'20#.#9.139.204':445
'20#.#9.102.144':445
'20#.#9.43.165':445
'20#.#9.14.227':445
'20#.#9.20.77':445
'20#.#9.222.15':445
'20#.#9.70.147':445
'20#.29.74.8':445
'20#.#9.58.151':445
'20#.#9.215.64':445
'20#.#9.175.74':445
'20#.#9.76.176':445
'20#.#9.126.241':139
'20#.#9.106.134':139
'20#.#9.241.96':139
'20#.#9.219.74':139
'20#.#9.97.219':139
'20#.#9.221.74':139
'20#.#9.35.158':445
'20#.#9.41.188':139
'20#.#9.92.84':139
'20#.29.30.1':139
'20#.#9.138.179':139
'20#.29.9.22':139
'20#.#9.179.171':139
'20#.#9.107.167':139
'20#.#9.165.143':139
'20#.#9.18.61':139
'20#.#9.41.116':139
'20#.#9.103.49':139
'20#.#9.162.229':139
'20#.#9.38.163':139
'20#.#9.46.224':139
'20#.#9.126.241':445
'20#.#9.106.134':445
'20#.#9.241.96':445
'20#.#9.219.74':445
'20#.#9.97.219':445
'20#.#9.221.74':445
'20#.#9.151.16':139
'20#.#9.41.188':445
'20#.#9.92.84':445
'20#.29.30.1':445
'20#.29.74.8':139
'20#.#9.68.99':445
'20#.#9.130.3':445
'20#.#9.221.81':445
'20#.#9.246.128':445
'20#.#9.25.35':445
'20#.#9.53.201':9988
'20#.#9.253.72':9988
'20#.#9.181.170':9988
'20#.#9.239.47':9988
'20#.#9.147.80':9988
'20#.#9.116.177':445
'20#.#9.169.83':445
'20#.#9.18.178':445
'20#.#9.40.246':445
'20#.#9.235.143':445
'20#.#9.246.209':445
'20#.#9.76.68':445
'20#.#9.0.189':445
'20#.#9.164.181':445
'20#.#9.93.37':445
'20#.#9.126.115':445
'20#.#9.14.227':139
'20#.#9.102.144':139
'20#.#9.222.15':139
'20#.#9.76.176':139
'20#.#9.20.77':139
'20#.#9.58.151':139
'20#.#9.70.147':139
'20#.#9.175.74':139
'20#.#9.43.165':139
'20#.#9.215.64':139
'20#.#9.35.158':139
'20#.#9.95.253':9988
'20#.#9.239.95':9988
'20#.#9.134.243':9988
'20#.#9.101.193':9988
'20#.#9.93.110':9988
'20#.#9.56.22':9988
'20#.#9.11.199':9988
'20#.#9.102.240':9988
'20#.#9.218.216':9988
'20#.#9.240.105':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней