Trojan.Starman.5782

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#15.133.219':139
'22#.#15.211.146':139
'22#.#15.57.141':445
'22#.#15.192.56':445
'22#.#15.168.191':445
'22#.#15.81.168':139
'22#.#15.105.216':139
'22#.#15.209.208':139
'22#.#15.53.49':139
'22#.#15.208.85':139
'22#.#15.56.239':445
'22#.#15.236.28':445
'22#.#15.94.102':445
'22#.#15.30.120':445
'22#.#15.67.19':445
'22#.#15.119.148':445
'22#.#15.237.223':445
'22#.#15.238.237':445
'22#.#15.88.253':445
'22#.#15.139.48':445
'22#.#15.125.199':445
'22#.#15.179.145':445
'22#.#15.218.208':445
'22#.#15.76.2':445
'22#.#15.105.216':445
'22#.#15.75.114':445
'22#.#15.104.90':139
'22#.#15.43.135':139
'22#.#15.90.245':139
'22#.#15.123.76':445
'22#.#15.56.81':139
'22#.#15.81.168':445
'22#.#15.218.208':139
'22#.#15.123.76':139
'22#.#15.179.145':139
'22#.#15.75.114':139
'22#.#15.76.2':139
'22#.#15.208.85':445
'22#.#15.209.208':445
'22#.#15.53.49':445
'22#.#15.133.219':445
'22#.#15.211.146':445
'22#.#15.107.226':445
'22#.#15.56.239':139
'22#.#15.192.56':139
'22#.#15.238.237':139
'22#.#15.88.253':139
'22#.#15.237.223':139
'22#.#15.89.43':445
'22#.#15.140.66':445
'22#.#15.58.69':445
'22#.#15.168.191':139
'22#.#15.57.141':139
'22#.#15.125.199':139
'22#.#15.107.226':139
'22#.#15.67.19':139
'22#.#15.226.140':139
'22#.#15.48.160':139
'22#.#15.19.251':139
'22#.#15.94.102':139
'22#.#15.139.48':139
'22#.#15.236.28':139
'22#.#15.119.148':139
'22#.#15.30.120':139
'22#.#15.44.108':445
'22#.#15.177.102':445
'22#.#15.150.188':445
'22#.#15.15.1':445
'22#.#15.188.75':445
'22#.#15.19.251':445
'22#.#15.226.140':445
'22#.#15.48.160':445
'22#.#15.204.247':445
'22#.#15.143.175':445
'22#.#15.60.174':445
'22#.#15.141.100':445
'22#.#15.92.29':445
'22#.#15.249.7':445
'22#.#15.229.222':445
'22#.#15.118.13':445
'22#.#15.101.147':445
'22#.#15.174.188':445
'22#.#15.9.206':445
'22#.#15.6.180':445
'22#.#15.170.51':445
'22#.#15.45.94':139
'22#.#15.141.140':445
'22#.#15.200.169':445
'22#.#15.198.212':445
'22#.#15.142.4':445
'22#.#15.67.142':445
'22#.#15.67.176':445
'22#.#15.43.192':445
'22#.#15.0.245':445
'22#.#15.101.46':445
'22#.#15.78.7':445
'22#.#15.4.237':445
'22#.#15.57.226':445
'22#.#15.6.29':445
'22#.#15.88.55':445
'22#.#15.226.251':445
'22#.#15.0.49':445
'22#.#15.103.121':445
'22#.#15.129.127':445
'22#.#15.40.220':445
'22#.#15.57.154':445
'22#.#15.230.211':445
'22#.#15.51.21':139
'22#.#15.181.2':139
'22#.#15.142.159':139
'22#.#15.88.252':139
'22#.#15.159.55':139
'22#.#15.163.6':139
'22#.#15.93.162':139
'22#.#15.16.80':139
'22#.#15.99.135':139
'22#.#15.205.65':139
'22#.#15.137.61':139
'22#.#15.116.5':445
'22#.#15.193.248':445
'22#.#15.245.181':445
'22#.#15.82.26':445
'22#.#15.181.167':445
'22#.#15.175.74':445
'22#.#15.57.180':139
'22#.#15.74.201':445
'22#.#15.54.241':445
'22#.#15.201.26':445
'22#.#15.163.164':445
'22#.#15.4.237':139
'22#.#15.142.4':139
'22#.#15.129.127':139
'22#.#15.40.220':139
'22#.#15.103.121':139
'22#.#15.200.169':139
'22#.#15.101.46':139
'22#.#15.141.140':139
'22#.#15.67.142':139
'22#.#15.198.212':139
'22#.#15.230.211':139
'22#.#15.163.164':139
'22#.#15.226.251':139
'22#.#15.34.219':139
'22#.#15.76.41':139
'22#.#15.184.4':139
'22#.#15.6.29':139
'22#.#15.57.154':139
'22#.#15.57.226':139
'22#.#15.0.49':139
'22#.#15.88.55':139
'22#.#15.90.245':445
'22#.#15.104.90':445
'22#.#15.56.81':445
'22#.#15.74.201':139
'22#.#15.175.74':139
'22#.#15.184.4':445
'22#.#15.34.219':445
'22#.#15.76.41':445
'22#.#15.43.135':445
'22#.#15.45.94':445
'22#.#15.201.26':139
'22#.#15.43.192':139
'22#.#15.82.26':139
'22#.#15.67.176':139
'22#.#15.78.7':139
'22#.#15.0.245':139
'22#.#15.193.248':139
'22#.#15.54.241':139
'22#.#15.116.5':139
'22#.#15.181.167':139
'22#.#15.245.181':139
'22#.#15.199.120':445
'22#.#15.17.253':445
'22#.#15.158.189':445
'22#.#15.188.167':445
'22#.#15.69.178':445
'22#.#15.116.112':445
'22#.#15.71.100':445
'22#.#15.173.177':445
'22#.#15.171.18':445
'22#.#15.139.154':445
'22#.#15.194.224':445
'22#.#15.191.180':139
'22#.#15.112.121':139
'22#.#15.15.171':139
'22#.#15.39.65':139
'22#.#15.50.33':139
'22#.#15.204.213':445
'22#.#15.99.219':445
'22#.#15.53.33':139
'22#.#15.210.53':139
'22#.#15.81.98':139
'22#.#15.66.130':445
'22#.#15.133.46':445
'22#.#15.21.48':445
'22#.#15.107.6':445
'22#.#15.102.106':445
'22#.#15.121.46':445
'22#.#15.250.0':445
'22#.#15.103.222':445
'22#.#15.253.242':445
'22#.#15.123.175':445
'22#.#15.176.48':445
'22#.#15.57.16':445
'22#.#15.30.191':445
'22#.#15.139.199':445
'22#.#15.160.184':445
'22#.#15.50.179':445
'22#.#15.69.193':445
'22#.#15.168.239':445
'22#.#15.231.19':445
'22#.#15.121.32':445
'22#.#15.231.41':445
'22#.#15.69.136':139
'22#.#15.50.179':139
'22#.#15.139.199':139
'22#.#15.160.184':139
'22#.#15.116.112':139
'22#.#15.71.100':139
'22#.#15.231.41':139
'22#.#15.231.19':139
'22#.#15.121.32':139
'22#.#15.57.16':139
'22#.#15.30.191':139
'22#.#15.173.177':139
'22#.#15.99.219':139
'22#.#15.204.213':139
'22#.#15.69.178':139
'22#.#15.194.224':139
'22#.#15.188.167':139
'22#.#15.171.18':139
'22#.#15.139.154':139
'22#.#15.17.253':139
'22#.#15.158.189':139
'22#.#15.199.120':139
'22#.#15.136.117':139
'22#.#15.98.60':139
'22#.#15.112.249':139
'22#.#15.121.46':139
'22#.#15.250.0':139
'22#.#15.146.249':139
'22#.#15.180.171':139
'22#.#15.249.46':139
'22#.#15.197.97':139
'22#.#15.23.7':139
'22#.#15.103.222':139
'22#.#15.107.6':139
'22#.#15.102.106':139
'22#.#15.176.48':139
'22#.#15.69.193':139
'22#.#15.168.239':139
'22#.#15.253.242':139
'22#.#15.123.175':139
'22#.#15.133.46':139
'22#.#15.21.48':139
'22#.#15.66.130':139
'22#.#15.112.249':445
'22#.#15.70.132':445
'22#.#15.77.221':445
'22#.#15.223.26':445
'22#.#15.75.165':445
'22#.#15.23.29':445
'22#.#15.54.83':445
'22#.#15.28.205':445
'22#.#15.83.25':445
'22#.#15.86.84':445
'22#.#15.172.200':445
'22#.#15.186.231':445
'22#.#15.77.221':139
'22#.#15.86.84':139
'22#.#15.70.132':139
'22#.#15.23.29':139
'22#.#15.223.26':139
'22#.#15.28.205':139
'22#.#15.69.160':445
'22#.#15.54.83':139
'22#.#15.172.200':139
'22#.#15.83.25':139
'22#.#15.15.1':139
'22#.#15.188.75':139
'22#.#15.60.174':139
'22#.#15.101.147':139
'22#.#15.174.188':139
'22#.#15.204.247':139
'22#.#15.143.175':139
'22#.#15.177.102':139
'22#.#15.150.188':139
'22#.#15.44.108':139
'22#.#15.9.206':139
'22#.#15.229.222':139
'22#.#15.118.13':139
'22#.#15.140.66':139
'22#.#15.58.69':139
'22#.#15.89.43':139
'22#.#15.6.180':139
'22#.#15.170.51':139
'22#.#15.92.29':139
'22#.#15.249.7':139
'22#.#15.141.100':139
'22#.#15.75.165':139
'22#.#15.81.98':445
'22#.#15.53.33':445
'22#.#15.210.53':445
'22#.#15.191.180':445
'22#.#15.112.121':445
'22#.#15.231.19':9988
'22#.#15.50.179':9988
'22#.#15.173.177':9988
'22#.#15.188.167':9988
'22#.#15.199.120':9988
'22#.#15.15.171':445
'22#.#15.23.7':445
'22#.#15.249.46':445
'22#.#15.197.97':445
'22#.#15.136.117':445
'22#.#15.98.60':445
'22#.#15.39.65':445
'22#.#15.50.33':445
'22#.#15.69.136':445
'22#.#15.146.249':445
'22#.#15.180.171':445
'22#.#15.7.67':139
'22#.#15.147.94':139
'22#.#15.145.22':139
'22#.#15.160.184':9988
'22#.#15.121.32':9988
'22#.#15.69.160':139
'22#.#15.186.231':139
'22#.#15.147.94':445
'22#.#15.145.22':445
'22#.#15.7.67':445
'22#.#15.231.41':9988
'22#.#15.116.112':9988
'22#.#15.71.100':9988
'22#.#15.139.154':9988
'22#.#15.57.16':9988
'22#.#15.171.18':9988
'22#.#15.139.199':9988
'22#.#15.168.239':9988
'22#.#15.17.253':9988
'22#.#15.176.48':9988
'22#.#15.69.193':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней