Trojan.Starman.5230

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#88.239.219':445
'22#.#88.209.6':445
'22#.#88.12.9':445
'22#.#88.207.11':445
'22#.#88.111.208':445
'22#.#88.62.224':445
'22#.#88.21.20':445
'22#.#88.45.102':445
'22#.#88.0.61':445
'22#.#88.8.189':445
'22#.#88.150.243':445
'22#.#88.178.117':445
'22#.#88.213.142':445
'22#.#88.142.213':445
'22#.#88.158.199':445
'22#.#88.84.4':445
'22#.#88.88.17':445
'22#.#88.102.41':445
'22#.#88.158.130':445
'22#.#88.15.181':445
'22#.#88.244.86':445
'22#.#88.9.150':445
'22#.#88.36.212':445
'22#.#88.188.80':445
'22#.#88.107.153':445
'22#.#88.17.94':445
'22#.#88.18.95':445
'22#.#88.33.162':445
'22#.#88.254.37':445
'22#.#88.200.214':445
'22#.#88.175.161':445
'22#.#88.0.143':445
'22#.#88.42.169':445
'22#.#88.80.17':445
'22#.#88.16.126':445
'22#.#88.34.104':445
'22#.#88.177.44':445
'22#.#88.55.14':445
'22#.#88.140.54':445
'22#.#88.16.126':139
'22#.#88.55.14':139
'22#.#88.175.161':139
'22#.#88.0.143':139
'22#.#88.140.54':139
'22#.#88.200.214':139
'22#.#88.36.212':139
'22#.#88.34.104':139
'22#.#88.177.44':139
'22#.#88.80.17':139
'22#.#88.111.208':139
'22#.#88.45.102':139
'22#.#88.239.219':139
'22#.#88.209.6':139
'22#.#88.0.61':139
'22#.#88.15.181':139
'22#.#88.62.224':139
'22#.#88.42.169':139
'22#.#88.21.20':139
'22#.#88.188.80':139
'22#.#88.52.66':139
'22#.#88.156.83':139
'22#.#88.102.17':139
'22#.#88.14.85':139
'22#.#88.32.216':139
'22#.#88.203.168':445
'22#.#88.167.226':445
'22#.#88.245.28':445
'22#.#88.182.122':445
'22#.#88.58.246':139
'22#.#88.107.153':139
'22#.#88.33.162':139
'22#.#88.244.86':139
'22#.#88.9.150':139
'22#.#88.254.37':139
'22#.#88.112.123':139
'22#.#88.219.181':139
'22#.#88.17.94':139
'22#.#88.18.95':139
'22#.#88.112.123':445
'22#.#88.15.158':139
'22#.#88.195.226':139
'22#.#88.219.84':139
'22#.#88.55.137':139
'22#.#88.97.11':139
'22#.#88.183.138':139
'22#.#88.53.27':139
'22#.#88.180.96':139
'22#.#88.195.180':139
'22#.#88.101.107':139
'22#.#88.160.75':139
'22#.#88.18.153':139
'22#.#88.127.97':139
'22#.#88.76.0':139
'22#.#88.147.198':139
'22#.#88.2.66':139
'22#.#88.151.73':139
'22#.#88.230.146':139
'22#.#88.198.70':139
'22#.#88.232.133':445
'22#.#88.179.216':445
'22#.#88.112.179':445
'22#.#88.200.120':445
'22#.#88.216.134':445
'22#.#88.224.242':445
'22#.#88.28.194':445
'22#.#88.30.86':445
'22#.#88.6.187':445
'22#.#88.29.197':445
'22#.#88.39.86':445
'22#.#88.215.196':445
'22#.#88.186.215':445
'22#.#88.110.238':445
'22#.#88.137.116':445
'22#.#88.5.187':445
'22#.#88.79.162':445
'22#.#88.15.76':445
'22#.#88.16.6':445
'22#.#88.146.95':445
'22#.#88.5.187':139
'22#.#88.16.6':139
'22#.#88.215.196':139
'22#.#88.186.215':139
'22#.#88.146.95':139
'22#.#88.39.86':139
'22#.#88.200.120':139
'22#.#88.79.162':139
'22#.#88.15.76':139
'22#.#88.137.116':139
'22#.#88.102.17':445
'22#.#88.14.85':445
'22#.#88.219.181':445
'22#.#88.58.246':445
'22#.#88.52.66':445
'22#.#88.232.133':139
'22#.#88.110.238':139
'22#.#88.156.83':445
'22#.#88.32.216':445
'22#.#88.216.134':139
'22#.#88.177.154':139
'22#.#88.227.247':139
'22#.#88.58.7':139
'22#.#88.238.183':139
'22#.#88.44.47':139
'22#.#88.246.137':139
'22#.#88.80.244':139
'22#.#88.187.118':139
'22#.#88.68.204':139
'22#.#88.205.22':139
'22#.#88.224.242':139
'22#.#88.6.187':139
'22#.#88.179.216':139
'22#.#88.112.179':139
'22#.#88.29.197':139
'22#.#88.204.109':139
'22#.#88.22.204':139
'22#.#88.28.194':139
'22#.#88.30.86':139
'22#.#88.197.103':445
'22#.#88.51.197':445
'22#.#88.206.234':139
'22#.#88.114.206':139
'22#.#88.50.66':445
'22#.#88.145.74':445
'22#.#88.13.129':445
'22#.#88.78.84':445
'22#.#88.74.154':445
'22#.#88.235.52':139
'22#.#88.2.205':139
'22#.#88.59.216':139
'22#.#88.227.234':139
'22#.#88.25.110':139
'22#.#88.15.60':139
'22#.#88.146.60':139
'22#.#88.72.41':139
'22#.#88.207.15':139
'22#.#88.64.177':139
'22#.#88.101.56':445
'22#.#88.212.172':445
'22#.#88.23.39':445
'22#.#88.243.16':445
'22#.#88.172.242':445
'22#.#88.26.76':445
'22#.#88.10.238':445
'22#.#88.92.63':445
'22#.#88.0.248':445
'22#.#88.152.129':445
'22#.#88.94.237':445
'22#.#88.8.185':445
'22#.#88.120.37':445
'22#.#88.92.117':445
'22#.#88.44.223':445
'22#.#88.57.27':445
'22#.#88.59.30':445
'22#.#88.44.59':445
'22#.#88.54.135':445
'22#.#88.29.203':445
'22#.#88.57.27':139
'22#.#88.54.135':139
'22#.#88.8.185':139
'22#.#88.120.37':139
'22#.#88.29.203':139
'22#.#88.94.237':139
'22#.#88.243.16':139
'22#.#88.59.30':139
'22#.#88.44.59':139
'22#.#88.44.223':139
'22#.#88.51.197':139
'22#.#88.78.84':139
'22#.#88.50.66':139
'22#.#88.197.103':139
'22#.#88.74.154':139
'22#.#88.101.56':139
'22#.#88.92.117':139
'22#.#88.145.74':139
'22#.#88.13.129':139
'22#.#88.172.242':139
'22#.#88.237.60':139
'22#.#88.163.106':139
'22#.#88.246.166':139
'22#.#88.128.246':139
'22#.#88.160.193':139
'22#.#88.23.47':139
'22#.#88.223.231':139
'22#.#88.6.24':139
'22#.#88.20.28':139
'22#.#88.43.138':139
'22#.#88.26.76':139
'22#.#88.0.248':139
'22#.#88.212.172':139
'22#.#88.23.39':139
'22#.#88.152.129':139
'22#.#88.141.188':139
'22#.#88.229.12':139
'22#.#88.10.238':139
'22#.#88.92.63':139
'22#.#88.141.188':445
'22#.#88.164.187':139
'22#.#88.55.131':139
'22#.#88.206.160':139
'22#.#88.200.98':139
'22#.#88.68.155':445
'22#.#88.255.195':445
'22#.#88.17.76':445
'22#.#88.112.90':445
'22#.#88.148.93':445
'22#.#88.17.76':139
'22#.#88.223.231':9988
'22#.#88.29.203':9988
'22#.#88.23.39':9988
'22#.#88.26.76':9988
'22#.#88.243.16':9988
'22#.#88.148.93':139
'22#.#88.255.195':139
'22#.#88.68.155':139
'22#.#88.112.90':139
'22#.#88.206.160':445
'22#.#88.102.41':139
'22#.#88.158.130':139
'22#.#88.178.117':139
'22#.#88.158.199':139
'22#.#88.84.4':139
'22#.#88.12.9':139
'22#.#88.207.11':139
'22#.#88.88.17':139
'22#.#88.8.189':139
'22#.#88.150.243':139
'22#.#88.55.131':445
'22#.#88.245.28':139
'22#.#88.200.98':445
'22#.#88.164.187':445
'22#.#88.182.122':139
'22#.#88.213.142':139
'22#.#88.142.213':139
'22#.#88.203.168':139
'22#.#88.167.226':139
'22#.#88.25.110':445
'22#.#88.2.205':445
'22#.#88.223.231':445
'22#.#88.227.234':445
'22#.#88.59.216':445
'22#.#88.64.177':445
'22#.#88.146.60':445
'22#.#88.15.60':445
'22#.#88.207.15':445
'22#.#88.23.47':445
'22#.#88.246.166':445
'22#.#88.128.246':445
'22#.#88.229.12':445
'22#.#88.43.138':445
'22#.#88.237.60':445
'22#.#88.6.24':445
'22#.#88.20.28':445
'22#.#88.163.106':445
'22#.#88.160.193':445
'22#.#88.72.41':445
'22#.#88.172.242':9988
'22#.#88.94.237':9988
'22#.#88.229.12':9988
'22#.#88.44.59':9988
'22#.#88.57.27':9988
'22#.#88.54.135':9988
'22#.#88.141.188':9988
'22#.#88.227.234':9988
'22#.#88.2.205':9988
'22#.#88.44.223':9988
'22#.#88.114.206':445
'22#.#88.50.66':9988
'22#.#88.235.52':445
'22#.#88.206.234':445
'22#.#88.74.154':9988
'22#.#88.92.117':9988
'22#.#88.8.185':9988
'22#.#88.145.74':9988
'22#.#88.101.56':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней