Trojan.Starman.5486

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER0b06.dir00\svchost.exe.mdmp 16325836412032404

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER0b06.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'20#.#00.52.153':139
'20#.#00.248.108':139
'20#.#00.21.4':139
'20#.#00.89.178':139
'20#.#00.84.50':139
'20#.#00.131.142':139
'20#.#00.18.173':139
'20#.#00.233.65':139
'20#.#00.245.52':139
'20#.#00.182.139':139
'20#.#00.53.106':139
'20#.#00.231.142':139
'20#.#00.232.230':139
'20#.#00.12.6':139
'20#.#00.115.213':139
'20#.#00.17.116':139
'20#.#00.204.169':139
'20#.#00.220.90':139
'20#.#00.201.155':139
'20#.#00.173.52':139
'20#.#00.62.58':139
'20#.#00.166.160':139
'20#.#00.12.86':139
'20#.#00.47.253':445
'20#.#00.22.254':445
'20#.#00.73.39':445
'20#.#00.222.196':139
'20#.#00.206.119':445
'20#.#00.90.120':445
'20#.#00.147.83':445
'20#.#00.86.112':445
'20#.#00.82.213':445
'20#.#00.43.209':445
'20#.#00.213.166':445
'20#.#00.33.238':139
'20#.#00.186.195':139
'20#.#00.202.111':139
'20#.#00.79.40':139
'20#.#00.128.133':139
'20#.#00.109.186':139
'20#.#00.34.118':139
'20#.#00.251.157':139
'20#.#00.169.80':139
'20#.#00.22.109':139
'20#.#00.121.62':139
'20#.#00.76.116':139
'20#.#00.31.158':445
'20#.#00.33.32':445
'20#.#00.86.45':445
'20#.#00.15.70':445
'20#.#00.34.64':445
'20#.#00.169.50':445
'20#.#00.25.25':445
'20#.#00.98.125':445
'20#.#00.123.161':445
'20#.#00.35.125':445
'20#.#00.34.233':445
'20#.#00.77.143':445
'20#.#00.98.176':445
'20#.#00.108.163':445
'20#.#00.28.142':445
'20#.#00.116.28':445
'20#.#00.21.30':445
'20#.#00.198.229':445
'20#.#00.118.58':445
'20#.#00.234.109':445
'20#.#00.230.20':445
'20#.#00.227.229':445
'20#.#00.20.44':445
'20#.#00.82.213':139
'20#.#00.147.83':139
'20#.#00.213.166':139
'20#.#00.90.120':139
'20#.#00.43.209':139
'20#.#00.86.112':139
'20#.#00.204.206':139
'20#.#00.230.62':139
'20#.#00.215.172':139
'20#.#00.8.254':139
'20#.#00.146.132':139
'20#.#00.160.76':445
'20#.#00.161.252':445
'20#.#00.62.224':445
'20#.#00.237.10':445
'20#.#00.224.184':445
'20#.#00.255.236':445
'20#.#00.47.253':139
'20#.#00.22.254':139
'20#.#00.73.39':139
'20#.#00.134.168':445
'20#.#00.206.119':139
'20#.#00.8.254':445
'20#.#00.74.235':139
'20#.#00.23.214':139
'20#.#00.240.71':139
'20#.#00.48.64':139
'20#.#00.72.12':139
'20#.#00.110.175':139
'20#.#00.31.192':139
'20#.#00.153.22':139
'20#.#00.135.75':139
'20#.#00.97.244':139
'20#.#00.107.155':139
'20#.#00.193.244':139
'20#.#00.155.247':139
'20#.#00.75.78':139
'20#.#00.26.161':139
'20#.#00.158.20':139
'20#.#00.18.215':139
'20#.#00.11.189':139
'20#.#00.48.11':139
'20#.#00.188.227':139
'20#.#00.45.173':139
'20#.#00.227.51':139
'20#.#00.124.92':139
'20#.#00.173.183':139
'20#.#00.89.114':139
'20#.#00.146.248':139
'20#.#00.32.184':139
'20#.#00.8.237':139
'20#.#00.35.89':139
'20#.#00.83.166':139
'20#.#00.81.103':139
'20#.#00.166.32':139
'20#.#00.73.35':139
'20#.#00.32.73':139
'20#.#00.41.12':139
'20#.#00.220.213':139
'20#.#00.248.111':139
'20#.#00.195.123':139
'20#.#00.67.195':139
'20#.#00.27.127':139
'20#.#00.250.93':139
'20#.#00.14.250':139
'20#.#00.64.251':139
'20#.#00.80.92':139
'20#.#00.164.141':139
'20#.#00.125.96':139
'20#.#00.220.90':445
'20#.#00.201.155':445
'20#.#00.173.52':445
'20#.#00.62.58':445
'20#.#00.166.160':445
'20#.#00.89.178':445
'20#.#00.248.108':445
'20#.#00.131.142':445
'20#.#00.52.153':445
'20#.#00.84.50':445
'20#.#00.21.4':445
'20#.#00.230.62':445
'20#.#00.76.116':445
'20#.#00.204.206':445
'20#.#00.146.132':445
'20#.#00.215.172':445
'20#.#00.115.213':445
'20#.#00.232.230':445
'20#.#00.204.169':445
'20#.#00.231.142':445
'20#.#00.17.116':445
'20#.#00.12.6':445
'20#.#00.182.139':445
'20#.#00.34.118':445
'20#.#00.251.157':445
'20#.#00.169.80':445
'20#.#00.22.109':445
'20#.#00.121.62':445
'20#.#00.222.196':445
'20#.#00.207.145':139
'20#.#00.110.128':139
'20#.#00.92.245':139
'20#.#00.131.50':139
'20#.#00.54.49':139
'20#.#00.233.65':445
'20#.#00.12.86':445
'20#.#00.18.173':445
'20#.#00.53.106':445
'20#.#00.245.52':445
'20#.#00.79.40':445
'20#.#00.186.195':445
'20#.#00.109.186':445
'20#.#00.33.238':445
'20#.#00.128.133':445
'20#.#00.202.111':445
'20#.#00.117.192':445
'20#.#00.125.134':445
'20#.#00.164.184':445
'20#.#00.22.222':445
'20#.#00.137.35':445
'20#.#00.91.252':445
'20#.#00.48.210':445
'20#.#00.12.236':445
'20#.#00.27.12':445
'20#.#00.232.91':445
'20#.#00.237.58':445
'20#.#00.88.203':445
'20#.#00.129.241':139
'20#.#00.133.149':139
'20#.#00.183.100':139
'20#.#00.107.16':139
'20#.#00.136.107':139
'20#.#00.118.196':445
'20#.#00.221.86':445
'20#.#00.60.208':445
'20#.#00.1.216':445
'20#.#00.196.195':445
'20#.#00.112.137':445
'20#.#00.155.151':445
'20#.#00.50.157':445
'20#.#00.247.202':445
'20#.#00.197.20':445
'20#.#00.102.121':445
'20#.#00.128.209':445
'20#.#00.52.139':445
'20#.#00.154.88':445
'20#.#00.63.102':445
'20#.#00.135.178':445
'20#.#00.196.179':445
'20#.#00.40.73':445
'20#.#00.67.242':445
'20#.#00.164.163':445
'20#.#00.63.111':445
'20#.#00.222.190':445
'20#.#00.157.87':445
'20#.#00.169.47':445
'20#.#00.115.178':445
'20#.#00.87.190':445
'20#.#00.75.115':445
'20#.#00.59.57':445
'20#.#00.87.75':445
'20#.#00.111.10':139
'20#.#00.232.91':139
'20#.#00.222.190':139
'20#.#00.88.203':139
'20#.#00.48.210':139
'20#.#00.237.58':139
'20#.#00.27.12':139
'20#.#00.63.111':139
'20#.#00.67.242':139
'20#.#00.157.87':139
'20#.#00.12.236':139
'20#.#00.155.151':139
'20#.#00.196.195':139
'20#.#00.221.86':139
'20#.#00.118.196':139
'20#.#00.112.137':139
'20#.#00.60.208':139
'20#.#00.1.216':139
'20#.#00.125.134':139
'20#.#00.164.184':139
'20#.#00.22.222':139
'20#.#00.137.35':139
'20#.#00.91.252':139
'20#.#00.164.163':139
'20#.#00.135.178':139
'20#.#00.154.88':139
'20#.#00.40.73':139
'20#.#00.52.139':139
'20#.#00.196.179':139
'20#.#00.63.102':139
'20#.#00.119.227':139
'20#.#00.145.206':139
'20#.#00.29.92':139
'20#.#00.17.173':139
'20#.#00.223.59':139
'20#.#00.75.115':139
'20#.#00.87.75':139
'20#.#00.115.178':139
'20#.#00.169.47':139
'20#.#00.59.57':139
'20#.#00.87.190':139
'20#.#00.50.157':139
'20#.#00.247.202':139
'20#.#00.197.20':139
'20#.#00.102.121':139
'20#.#00.128.209':139
'20#.#00.17.173':445
'20#.#00.123.161':139
'20#.#00.25.25':139
'20#.#00.34.233':139
'20#.#00.169.50':139
'20#.#00.35.125':139
'20#.#00.98.125':139
'20#.#00.62.224':139
'20#.#00.160.76':139
'20#.#00.224.184':139
'20#.#00.20.44':139
'20#.#00.237.10':139
'20#.#00.234.109':139
'20#.#00.198.229':139
'20#.#00.227.229':139
'20#.#00.21.30':139
'20#.#00.230.20':139
'20#.#00.118.58':139
'20#.#00.31.158':139
'20#.#00.33.32':139
'20#.#00.86.45':139
'20#.#00.15.70':139
'20#.#00.34.64':139
'20#.#00.161.252':139
'20#.#00.66.228':445
'20#.#00.56.76':445
'20#.#00.79.5':445
'20#.#00.249.183':445
'20#.#00.219.149':445
'20#.#00.34.4':445
'20#.#00.25.192':445
'20#.#00.170.41':445
'20#.#00.105.191':445
'20#.#00.93.237':445
'20#.#00.137.189':445
'20#.#00.208.192':445
'20#.#00.128.208':445
'20#.#00.36.68':445
'20#.#00.255.236':139
'20#.#00.134.168':139
'20#.#00.144.128':445
'20#.#00.107.186':445
'20#.#00.219.132':445
'20#.#00.175.16':445
'20#.#00.17.147':445
'20#.#00.245.90':445
'20#.#00.98.176':139
'20#.#00.137.35':9988
'20#.#00.52.139':9988
'20#.#00.164.184':9988
'20#.#00.60.208':9988
'20#.#00.88.203':9988
'20#.#00.59.57':9988
'20#.#00.36.68':139
'20#.#00.208.192':139
'20#.#00.133.149':9988
'20#.#00.87.190':9988
'20#.#00.63.102':9988
'20#.#00.145.206':445
'20#.#00.111.10':445
'20#.#00.119.227':445
'20#.#00.223.59':445
'20#.#00.29.92':445
'20#.#00.107.16':445
'20#.#00.133.149':445
'20#.#00.1.216':9988
'20#.#00.129.241':445
'20#.#00.136.107':445
'20#.#00.183.100':445
'20#.#00.128.208':139
'20#.#00.105.191':139
'20#.#00.25.192':139
'20#.#00.137.189':139
'20#.#00.34.4':139
'20#.#00.93.237':139
'20#.#00.170.41':139
'20#.#00.108.163':139
'20#.#00.77.143':139
'20#.#00.116.28':139
'20#.#00.117.192':139
'20#.#00.28.142':139
'20#.#00.175.16':139
'20#.#00.107.186':139
'20#.#00.245.90':139
'20#.#00.144.128':139
'20#.#00.17.147':139
'20#.#00.219.132':139
'20#.#00.66.228':139
'20#.#00.56.76':139
'20#.#00.79.5':139
'20#.#00.249.183':139
'20#.#00.219.149':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней