Trojan.Starman.5205

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'68.##0.175.245':139
'68.##0.147.173':139
'68.##0.133.180':139
'68.##0.103.6':139
'68.##0.65.113':139
'68.##0.187.253':139
'68.##0.149.136':139
'68.##0.103.211':139
'68.##0.22.251':139
'68.##0.240.30':139
'68.##0.184.54':139
'68.##0.242.193':139
'68.##0.42.127':139
'68.##0.191.236':139
'68.##0.46.121':139
'68.##0.71.19':139
'68.##0.84.181':139
'68.##0.178.102':139
'68.##0.72.56':139
'68.##0.95.223':139
'68.##0.69.222':139
'68.##0.2.249':139
'68.##0.91.79':445
'68.##0.104.97':445
'68.##0.87.129':445
'68.##0.235.0':445
'68.##0.156.130':445
'68.##0.102.103':445
'68.##0.71.19':445
'68.##0.191.236':445
'68.##0.46.121':445
'68.##0.116.34':445
'68.##0.110.53':445
'68.##0.72.77':139
'68.##0.173.34':139
'68.##0.166.113':139
'68.##0.109.172':139
'68.##0.25.36':139
'68.##0.242.166':139
'68.##0.8.100':445
'68.##0.53.107':445
'68.##0.111.145':445
'68.#20.3.23':139
'68.##0.200.80':139
'68.##0.109.60':139
'68.##0.98.27':139
'68.##0.31.178':139
'68.##0.195.24':445
'68.##0.177.47':445
'68.##0.95.74':139
'68.##0.64.118':139
'68.##0.120.232':139
'68.#20.87.7':139
'68.##0.83.82':139
'68.##0.115.106':139
'68.##0.122.149':445
'68.##0.209.122':445
'68.##0.148.211':445
'68.##0.60.167':445
'68.##0.61.196':445
'68.##0.161.173':445
'68.##0.221.98':445
'68.#20.7.64':445
'68.##0.94.67':445
'68.##0.48.129':445
'68.##0.171.58':445
'68.##0.235.0':139
'68.##0.156.130':139
'68.##0.53.107':139
'68.##0.111.145':139
'68.##0.8.100':139
'68.##0.87.129':139
'68.##0.116.34':139
'68.##0.110.53':139
'68.##0.102.103':139
'68.##0.91.79':139
'68.##0.104.97':139
'68.##0.98.27':445
'68.##0.95.74':445
'68.##0.109.60':445
'68.##0.105.63':139
'68.##0.31.178':445
'68.##0.83.82':445
'68.##0.120.232':445
'68.##0.105.63':445
'68.##0.64.118':445
'68.##0.115.106':445
'68.#20.87.7':445
'68.##0.94.227':139
'68.##0.126.59':139
'68.##0.23.231':139
'68.##0.219.243':139
'68.#20.33.5':139
'68.##0.172.127':139
'68.##0.218.35':139
'68.##0.34.178':139
'68.##0.250.34':139
'68.##0.48.51':139
'68.##0.52.129':139
'68.##0.33.146':139
'68.##0.247.157':139
'68.##0.254.101':445
'68.##0.146.212':445
'68.##0.62.60':445
'68.##0.146.179':139
'68.##0.247.4':139
'68.##0.46.105':139
'68.##0.148.253':139
'68.##0.31.145':139
'68.##0.172.56':139
'68.##0.145.189':139
'68.##0.116.126':139
'68.##0.132.181':139
'68.##0.201.136':139
'68.##0.108.201':139
'68.##0.234.116':139
'68.##0.194.18':139
'68.##0.160.35':139
'68.##0.19.64':139
'68.##0.35.139':139
'68.##0.132.177':139
'68.##0.140.65':139
'68.##0.111.190':139
'68.##0.48.151':139
'68.##0.1.208':139
'68.#20.69.2':139
'68.##0.168.131':139
'68.##0.15.74':139
'68.##0.187.215':139
'68.#20.6.53':139
'68.##0.101.168':139
'68.##0.128.111':139
'68.##0.240.30':445
'68.##0.184.54':445
'68.##0.187.253':445
'68.##0.175.245':445
'68.##0.147.173':445
'68.##0.22.251':445
'68.##0.25.36':445
'68.##0.166.113':445
'68.##0.109.172':445
'68.##0.149.136':445
'68.##0.103.211':445
'68.##0.69.222':445
'68.##0.2.249':445
'68.##0.84.181':445
'68.##0.242.193':445
'68.##0.42.127':445
'68.##0.95.223':445
'68.##0.65.113':445
'68.##0.133.180':445
'68.##0.103.6':445
'68.##0.178.102':445
'68.##0.72.56':445
'68.##0.254.101':139
'68.##0.90.200':445
'68.##0.62.60':139
'68.##0.21.121':139
'68.##0.146.212':139
'68.##0.151.204':445
'68.##0.203.222':445
'68.##0.21.121':445
'68.#20.84.5':445
'68.##0.20.59':445
'68.##0.28.95':445
'68.#20.3.23':445
'68.##0.200.80':445
'68.##0.242.166':445
'68.##0.72.77':445
'68.##0.173.34':445
'68.##0.90.200':139
'68.#20.84.5':139
'68.##0.203.222':139
'68.##0.28.95':139
'68.##0.151.204':139
'68.##0.20.59':139
'68.##0.140.165':445
'68.##0.92.64':445
'68.##0.236.180':445
'68.##0.160.16':445
'68.##0.27.92':445
'68.##0.38.34':445
'68.##0.114.15':445
'68.##0.112.152':445
'68.##0.17.123':445
'68.##0.110.38':445
'68.##0.3.102':445
'68.##0.100.158':139
'68.##0.50.162':139
'68.##0.58.181':139
'68.##0.48.54':139
'68.##0.58.200':139
'68.##0.186.114':139
'68.##0.202.143':445
'68.##0.16.203':445
'68.##0.144.29':445
'68.##0.202.186':139
'68.##0.27.56':445
'68.##0.145.151':445
'68.##0.40.70':445
'68.##0.194.207':445
'68.##0.112.127':445
'68.##0.156.112':445
'68.##0.219.68':445
'68.##0.47.204':445
'68.##0.35.48':445
'68.##0.27.81':445
'68.#20.3.6':445
'68.##0.37.14':445
'68.##0.11.50':445
'68.##0.193.224':445
'68.##0.59.73':445
'68.##0.55.117':445
'68.##0.197.193':445
'68.##0.102.119':445
'68.##0.83.149':445
'68.##0.91.26':445
'68.##0.214.92':445
'68.##0.232.102':445
'68.##0.251.231':445
'68.##0.112.152':139
'68.##0.55.117':139
'68.##0.114.15':139
'68.##0.3.102':139
'68.##0.17.123':139
'68.##0.197.193':139
'68.##0.102.119':139
'68.##0.232.102':139
'68.##0.193.224':139
'68.##0.59.73':139
'68.##0.11.50':139
'68.##0.16.203':139
'68.##0.160.16':139
'68.##0.202.143':139
'68.##0.27.56':139
'68.##0.144.29':139
'68.##0.27.92':139
'68.##0.38.34':139
'68.##0.110.38':139
'68.##0.92.64':139
'68.##0.236.180':139
'68.##0.140.165':139
'68.##0.35.48':139
'68.##0.130.17':139
'68.##0.47.204':139
'68.##0.37.14':139
'68.##0.27.81':139
'68.##0.253.79':139
'68.##0.11.117':139
'68.##0.90.38':139
'68.##0.50.10':139
'68.##0.131.253':139
'68.##0.41.182':139
'68.##0.91.26':139
'68.##0.112.127':139
'68.##0.83.149':139
'68.##0.251.231':139
'68.##0.214.92':139
'68.##0.156.112':139
'68.#20.3.6':139
'68.##0.219.68':139
'68.##0.40.70':139
'68.##0.194.207':139
'68.##0.145.151':139
'68.##0.195.24':139
'68.##0.177.47':139
'68.#20.7.64':139
'68.##0.94.67':139
'68.##0.221.98':139
'68.##0.140.213':445
'68.#20.41.9':445
'68.##0.213.17':445
'68.##0.54.109':445
'68.##0.20.109':445
'68.##0.248.123':445
'68.##0.60.167':139
'68.##0.61.196':139
'68.##0.71.112':139
'68.##0.43.96':139
'68.##0.170.143':139
'68.##0.148.211':139
'68.##0.48.129':139
'68.##0.171.58':139
'68.##0.161.173':139
'68.##0.122.149':139
'68.##0.209.122':139
'68.##0.16.25':445
'68.##0.42.153':445
'68.##0.227.177':445
'68.##0.241.165':445
'68.##0.251.169':445
'68.##0.46.41':445
'68.##0.170.143':445
'68.##0.71.112':445
'68.##0.43.96':445
'68.##0.124.16':445
'68.##0.244.34':445
'68.##0.29.101':445
'68.##0.91.23':445
'68.##0.225.17':445
'68.##0.99.16':445
'68.##0.94.162':445
'68.##0.207.90':445
'68.#20.8.65':445
'68.##0.211.33':445
'68.##0.92.251':445
'68.##0.2.207':445
'68.##0.253.86':445
'68.##0.144.29':9988
'68.##0.16.203':9988
'68.##0.202.186':445
'68.##0.50.162':445
'68.##0.186.114':445
'68.##0.55.117':9988
'68.##0.20.109':139
'68.##0.248.123':139
'68.##0.140.213':139
'68.##0.214.92':9988
'68.##0.156.112':9988
'68.##0.41.182':445
'68.##0.50.10':445
'68.##0.131.253':445
'68.##0.130.17':445
'68.##0.253.79':445
'68.##0.11.117':445
'68.##0.58.181':445
'68.##0.100.158':445
'68.##0.58.200':445
'68.##0.90.38':445
'68.##0.48.54':445
'68.##0.241.165':139
'68.##0.251.169':139
'68.##0.211.33':139
'68.##0.92.251':139
'68.#20.8.65':139
'68.##0.227.177':139
'68.##0.124.16':139
'68.##0.244.34':139
'68.##0.46.41':139
'68.##0.16.25':139
'68.##0.42.153':139
'68.##0.99.16':139
'68.##0.94.162':139
'68.##0.213.17':139
'68.##0.54.109':139
'68.#20.41.9':139
'68.##0.225.17':139
'68.##0.2.207':139
'68.##0.253.86':139
'68.##0.207.90':139
'68.##0.29.101':139
'68.##0.91.23':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней