Trojan.Starman.5950

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#49.0.158':445
'19#.#49.139.109':139
'19#.#49.92.226':445
'19#.#49.30.195':445
'19#.#49.162.178':139
'19#.#49.59.24':139
'19#.#49.31.19':139
'19#.#49.139.109':445
'19#.#49.162.178':445
'19#.#49.165.124':445
'19#.#49.241.126':445
'19#.#49.212.240':445
'19#.#49.121.172':445
'19#.#49.70.42':445
'19#.#49.210.212':445
'19#.#49.234.71':445
'19#.#49.96.176':445
'19#.#49.16.107':445
'19#.#49.151.236':445
'19#.#49.128.52':139
'19#.#49.108.241':139
'19#.#49.5.115':139
'19#.#49.227.136':139
'19#.#49.144.180':139
'19#.#49.227.5':139
'19#.#49.56.122':139
'19#.#49.50.84':139
'19#.#49.7.227':139
'19#.#49.91.60':139
'19#.#49.48.219':139
'19#.#49.46.16':139
'19#.#49.16.175':139
'19#.#49.23.170':139
'19#.#49.95.162':139
'19#.#49.249.40':139
'19#.#49.171.241':139
'19#.#49.20.116':139
'19#.#49.75.154':139
'19#.#49.9.151':139
'19#.#49.172.215':445
'19#.#49.117.39':445
'19#.#49.152.76':445
'19#.#49.21.129':445
'19#.#49.23.174':445
'19#.#49.23.124':445
'19#.#49.195.176':445
'19#.#49.206.78':445
'19#.#49.206.23':445
'19#.#49.41.14':445
'19#.#49.0.158':139
'19#.#49.67.223':445
'19#.#49.92.226':139
'19#.#49.30.195':139
'19#.#49.225.12':445
'19#.#49.61.58':445
'19#.#49.68.118':445
'19#.#49.162.206':445
'19#.#49.183.66':445
'19#.#49.20.114':445
'19#.#49.105.69':445
'19#.#49.241.104':445
'19#.#49.153.106':445
'19#.#49.202.120':445
'19#.#49.9.53':445
'19#.#49.19.48':445
'19#.#49.145.134':445
'19#.#49.151.167':445
'19#.#49.188.32':445
'19#.#49.204.217':445
'19#.#49.135.184':445
'19#.#49.148.239':445
'19#.#49.3.142':445
'19#.#49.1.50':445
'19#.#49.94.164':445
'19#.#49.58.249':445
'19#.#49.141.58':445
'19#.#49.186.161':445
'19#.#49.22.116':445
'19#.#49.35.177':445
'19#.#49.160.217':445
'19#.#49.154.213':445
'19#.#49.52.127':445
'19#.#49.235.220':445
'19#.#49.98.248':445
'19#.#49.77.166':445
'19#.#49.101.52':445
'19#.#49.247.152':445
'19#.#49.50.84':445
'19#.#49.144.180':445
'19#.#49.108.241':445
'19#.#49.48.219':445
'19#.#49.227.136':445
'19#.#49.5.115':445
'19#.#49.91.60':445
'19#.#49.56.122':445
'19#.#49.227.5':445
'19#.#49.7.227':445
'19#.#49.151.152':445
'19#.#49.204.121':445
'19#.#49.119.135':445
'19#.#49.108.247':445
'19#.#49.26.79':445
'19#.#49.138.20':445
'19#.#49.8.224':139
'19#.#49.77.169':139
'19#.#49.95.184':445
'19#.#49.49.145':445
'19#.#49.14.103':445
'19#.#49.26.196':445
'19#.#49.239.25':445
'19#.#49.55.25':445
'19#.#49.151.100':445
'19#.#49.38.161':445
'19#.#49.26.32':445
'19#.#49.166.134':445
'19#.#49.21.202':445
'19#.#49.200.200':445
'19#.#49.26.196':139
'19#.#49.239.25':139
'19#.#49.55.25':139
'19#.#49.151.100':139
'19#.#49.38.161':139
'19#.#49.26.32':139
'19#.#49.166.134':139
'19#.#49.21.202':139
'19#.#49.200.200':139
'19#.#49.151.152':139
'19#.#49.35.177':139
'19#.#49.160.217':139
'19#.#49.154.213':139
'19#.#49.52.127':139
'19#.#49.235.220':139
'19#.#49.98.248':139
'19#.#49.77.166':139
'19#.#49.101.52':139
'19#.#49.247.152':139
'19#.#49.14.103':139
'19#.#49.46.16':445
'19#.#49.16.175':445
'19#.#49.23.170':445
'19#.#49.95.162':445
'19#.#49.249.40':445
'19#.#49.171.241':445
'19#.#49.20.116':445
'19#.#49.75.154':445
'19#.#49.9.151':445
'19#.#49.128.52':445
'19#.#49.204.121':139
'19#.#49.119.135':139
'19#.#49.108.247':139
'19#.#49.26.79':139
'19#.#49.138.20':139
'19#.#49.59.24':445
'19#.#49.31.19':445
'19#.#49.95.184':139
'19#.#49.49.145':139
'19#.#49.82.251':445
'19#.#49.141.34':445
'19#.#49.164.131':139
'19#.#49.222.164':139
'19#.#49.62.196':445
'19#.#49.37.71':445
'19#.#49.106.191':445
'19#.#49.32.32':445
'19#.#49.253.82':445
'19#.#49.131.83':139
'19#.#49.238.161':139
'19#.#49.116.79':139
'19#.#49.149.110':139
'19#.#49.124.72':139
'19#.#49.105.229':139
'19#.#49.189.61':139
'19#.#49.19.72':139
'19#.#49.226.155':139
'19#.#49.171.119':139
'19#.#49.42.60':445
'19#.#49.153.65':445
'19#.#49.195.161':445
'19#.#49.206.4':445
'19#.#49.143.105':445
'19#.#49.120.195':445
'19#.#49.91.9':445
'19#.#49.224.90':445
'19#.#49.238.1':445
'19#.#49.8.214':445
'19#.#49.4.245':445
'19#.#49.179.94':445
'19#.#49.20.48':445
'19#.#49.52.250':445
'19#.#49.98.6':445
'19#.#49.58.181':445
'19#.#49.72.36':445
'19#.#49.44.132':445
'19#.#49.239.21':445
'19#.#49.162.225':445
'19#.#49.58.181':139
'19#.#49.239.21':139
'19#.#49.179.94':139
'19#.#49.20.48':139
'19#.#49.162.225':139
'19#.#49.4.245':139
'19#.#49.206.4':139
'19#.#49.72.36':139
'19#.#49.44.132':139
'19#.#49.98.6':139
'19#.#49.82.251':139
'19#.#49.141.34':139
'19#.#49.62.196':139
'19#.#49.253.82':139
'19#.#49.32.32':139
'19#.#49.42.60':139
'19#.#49.52.250':139
'19#.#49.37.71':139
'19#.#49.106.191':139
'19#.#49.143.105':139
'19#.#49.121.157':139
'19#.#49.220.107':139
'19#.#49.100.24':139
'19#.#49.25.56':139
'19#.#49.104.220':139
'19#.#49.179.22':139
'19#.#49.5.42':139
'19#.#49.46.104':139
'19#.#49.251.181':139
'19#.#49.60.121':139
'19#.#49.120.195':139
'19#.#49.238.1':139
'19#.#49.153.65':139
'19#.#49.195.161':139
'19#.#49.8.214':139
'19#.#49.137.166':139
'19#.#49.178.29':139
'19#.#49.91.9':139
'19#.#49.224.90':139
'19#.#49.135.184':139
'19#.#49.148.239':139
'19#.#49.3.142':139
'19#.#49.1.50':139
'19#.#49.94.164':139
'19#.#49.58.249':139
'19#.#49.141.58':139
'19#.#49.186.161':139
'19#.#49.22.116':139
'19#.#49.20.114':139
'19#.#49.172.215':139
'19#.#49.117.39':139
'19#.#49.152.76':139
'19#.#49.21.129':139
'19#.#49.23.174':139
'19#.#49.23.124':139
'19#.#49.195.176':139
'19#.#49.206.78':139
'19#.#49.206.23':139
'19#.#49.204.217':139
'19#.#49.212.240':139
'19#.#49.210.212':139
'19#.#49.70.42':139
'19#.#49.241.126':139
'19#.#49.16.107':139
'19#.#49.96.176':139
'19#.#49.165.124':139
'19#.#49.151.236':139
'19#.#49.234.71':139
'19#.#49.121.172':139
'19#.#49.105.69':139
'19#.#49.241.104':139
'19#.#49.153.106':139
'19#.#49.202.120':139
'19#.#49.9.53':139
'19#.#49.19.48':139
'19#.#49.145.134':139
'19#.#49.151.167':139
'19#.#49.188.32':139
'19#.#49.149.110':445
'19#.#49.124.72':445
'19#.#49.179.22':445
'19#.#49.5.42':445
'19#.#49.238.161':445
'19#.#49.226.155':445
'19#.#49.171.119':445
'19#.#49.116.79':445
'19#.#49.105.229':445
'19#.#49.251.181':445
'19#.#49.60.121':445
'19#.#49.100.24':445
'19#.#49.137.166':445
'19#.#49.178.29':445
'19#.#49.25.56':445
'19#.#49.104.220':445
'19#.#49.46.104':445
'19#.#49.121.157':445
'19#.#49.220.107':445
'19#.#49.189.61':445
'19#.#49.67.223':139
'19#.#49.225.12':139
'19#.#49.206.4':9988
'19#.#49.19.72':9988
'19#.#49.162.206':139
'19#.#49.68.118':139
'19#.#49.41.14':139
'19#.#49.183.66':139
'19#.#49.61.58':139
'19#.#49.44.132':9988
'19#.#49.164.131':445
'19#.#49.222.164':445
'19#.#49.19.72':445
'19#.#49.131.83':445
'19#.#49.62.196':9988
'19#.#49.162.225':9988
'19#.#49.52.250':9988
'19#.#49.179.94':9988
'19#.#49.82.251':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней