Trojan.Starman.5177

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#26.234.202':445
'19#.#26.9.216':445
'19#.#26.137.171':445
'19#.#26.183.186':445
'19#.#26.234.171':445
'19#.#26.192.105':445
'19#.#26.38.67':445
'19#.#26.106.58':445
'19#.#26.62.246':445
'19#.#26.85.110':139
'19#.#26.31.161':139
'19#.#26.76.147':139
'19#.#26.21.56':139
'19#.#26.122.220':139
'19#.#26.47.74':139
'19#.#26.102.178':139
'19#.#26.12.41':139
'19#.#26.40.57':139
'19#.#26.205.40':139
'19#.#26.22.164':445
'19#.#26.115.73':445
'19#.#26.1.21':445
'19#.#26.2.173':445
'19#.#26.240.116':445
'19#.#26.95.193':445
'19#.#26.191.17':445
'19#.#26.20.18':445
'19#.#26.17.100':445
'19#.#26.18.191':445
'19#.#26.207.45':445
'19#.#26.229.48':445
'19#.#26.17.69':445
'19#.#26.70.38':445
'19#.#26.69.11':445
'19#.#26.137.201':445
'19#.#26.38.24':445
'19#.#26.242.231':445
'19#.#26.241.124':445
'19#.#26.50.253':445
'19#.#26.137.201':139
'19#.#26.241.124':139
'19#.#26.69.11':139
'19#.#26.17.69':139
'19#.#26.50.253':139
'19#.#26.207.45':139
'19#.#26.2.173':139
'19#.#26.38.24':139
'19#.#26.242.231':139
'19#.#26.229.48':139
'19#.#26.22.164':139
'19#.#26.192.105':139
'19#.#26.234.202':139
'19#.#26.9.216':139
'19#.#26.234.171':139
'19#.#26.38.67':139
'19#.#26.70.38':139
'19#.#26.106.58':139
'19#.#26.62.246':139
'19#.#26.240.116':139
'19#.#26.111.203':139
'19#.#26.16.108':139
'19#.#26.190.177':139
'19#.#26.24.225':139
'19#.#26.83.22':139
'19#.#26.159.247':139
'19#.#26.38.17':139
'19#.#26.159.130':139
'19#.#26.117.163':139
'19#.#26.54.203':139
'19#.#26.95.193':139
'19#.#26.17.100':139
'19#.#26.115.73':139
'19#.#26.1.21':139
'19#.#26.191.17':139
'19#.#26.146.19':139
'19#.#26.182.129':139
'19#.#26.18.191':139
'19#.#26.20.18':139
'19#.#26.146.19':445
'19#.#26.250.58':139
'19#.#26.141.250':139
'19#.#26.120.243':139
'19#.#26.31.198':139
'19#.#26.49.205':139
'19#.#26.88.46':139
'19#.#26.11.215':139
'19#.#26.13.70':139
'19#.#26.123.101':139
'19#.#26.243.79':139
'19#.#26.105.47':139
'19#.#26.67.220':139
'19#.#26.103.52':139
'19#.#26.48.73':139
'19#.#26.84.128':139
'19#.#26.109.238':139
'19#.#26.79.110':139
'19#.#26.92.251':139
'19#.#26.203.228':139
'19#.#26.203.42':139
'19#.#26.245.122':139
'19#.#26.31.243':445
'19#.#26.77.184':139
'19#.#26.240.229':139
'19#.#26.149.178':445
'19#.#26.41.214':445
'19#.#26.75.29':445
'19#.#26.156.39':445
'19#.#26.155.156':445
'19#.#26.153.248':139
'19#.#26.84.31':139
'19#.#26.72.26':139
'19#.#26.196.203':139
'19#.#26.105.236':139
'19#.#26.72.209':139
'19#.#26.62.217':139
'19#.#26.72.133':139
'19#.#26.18.131':139
'19#.#26.119.31':139
'19#.#26.21.56':445
'19#.#26.31.161':445
'19#.#26.159.247':445
'19#.#26.122.220':445
'19#.#26.76.147':445
'19#.#26.205.40':445
'19#.#26.102.178':445
'19#.#26.47.74':445
'19#.#26.40.57':445
'19#.#26.38.17':445
'19#.#26.190.177':445
'19#.#26.24.225':445
'19#.#26.182.129':445
'19#.#26.54.203':445
'19#.#26.111.203':445
'19#.#26.159.130':445
'19#.#26.117.163':445
'19#.#26.16.108':445
'19#.#26.83.22':445
'19#.#26.12.41':445
'19#.#26.121.126':139
'19#.#26.47.121':139
'19#.#26.173.187':139
'19#.#26.125.174':139
'19#.#26.96.118':139
'19#.#26.72.179':139
'19#.#26.208.174':139
'19#.#26.244.233':139
'19#.#26.103.238':139
'19#.#26.172.181':139
'19#.#26.149.178':139
'19#.#26.156.39':139
'19#.#26.85.110':445
'19#.#26.31.243':139
'19#.#26.155.156':139
'19#.#26.42.91':139
'19#.#26.107.32':139
'19#.#26.41.214':139
'19#.#26.75.29':139
'19#.#26.183.186':139
'19#.#26.2.35':445
'19#.#26.214.201':445
'19#.#26.252.25':139
'19#.#26.121.172':139
'19#.#26.137.203':445
'19#.#26.79.202':445
'19#.#26.188.104':445
'19#.#26.2.123':445
'19#.#26.254.100':445
'19#.#26.25.68':139
'19#.#26.9.148':139
'19#.#26.202.11':139
'19#.#26.229.137':139
'19#.#26.54.229':139
'19#.#26.101.27':139
'19#.#26.57.181':139
'19#.#26.67.57':139
'19#.#26.189.64':139
'19#.#26.75.186':139
'19#.#26.135.46':445
'19#.#26.37.25':445
'19#.#26.93.209':445
'19#.#26.92.109':445
'19#.#26.25.92':445
'19#.#26.3.112':445
'19#.#26.107.99':445
'19#.#26.83.142':445
'19#.#26.158.28':445
'19#.#26.215.31':445
'19#.#26.109.80':445
'19#.#26.229.229':445
'19#.#26.159.93':445
'19#.#26.10.118':445
'19#.#26.48.164':445
'19#.#26.107.104':445
'19#.#26.23.45':445
'19#.#26.168.233':445
'19#.#26.65.75':445
'19#.#26.126.176':445
'19#.#26.107.104':139
'19#.#26.65.75':139
'19#.#26.229.229':139
'19#.#26.159.93':139
'19#.#26.126.176':139
'19#.#26.109.80':139
'19#.#26.92.109':139
'19#.#26.23.45':139
'19#.#26.168.233':139
'19#.#26.48.164':139
'19#.#26.214.201':139
'19#.#26.2.123':139
'19#.#26.2.35':139
'19#.#26.137.203':139
'19#.#26.254.100':139
'19#.#26.135.46':139
'19#.#26.10.118':139
'19#.#26.79.202':139
'19#.#26.188.104':139
'19#.#26.25.92':139
'19#.#26.48.59':139
'19#.#26.132.190':139
'19#.#26.60.227':139
'19#.#26.49.128':139
'19#.#26.97.78':139
'19#.#26.90.31':139
'19#.#26.38.146':139
'19#.#26.75.10':139
'19#.#26.202.116':139
'19#.#26.57.251':139
'19#.#26.3.112':139
'19#.#26.158.28':139
'19#.#26.37.25':139
'19#.#26.93.209':139
'19#.#26.215.31':139
'19#.#26.191.143':139
'19#.#26.66.85':139
'19#.#26.107.99':139
'19#.#26.83.142':139
'19#.#26.191.143':445
'19#.#26.244.51':139
'19#.#26.243.218':139
'19#.#26.251.52':139
'19#.#26.30.182':139
'19#.#26.7.181':139
'19#.#26.135.21':139
'19#.#26.73.47':139
'19#.#26.138.173':139
'19#.#26.22.67':139
'19#.#26.107.188':139
'19#.#26.246.232':139
'19#.#26.21.24':139
'19#.#26.50.146':139
'19#.#26.207.181':139
'19#.#26.196.100':139
'19#.#26.49.76':139
'19#.#26.139.213':139
'19#.#26.153.104':139
'19#.#26.80.243':139
'19#.#26.50.146':445
'19#.#26.243.218':445
'19#.#26.7.181':445
'19#.#26.30.182':445
'19#.#26.244.51':445
'19#.#26.138.173':445
'19#.#26.73.47':445
'19#.#26.137.171':139
'19#.#26.22.67':445
'19#.#26.135.21':445
'19#.#26.251.52':445
'19#.#26.21.24':445
'19#.#26.196.100':445
'19#.#26.207.181':445
'19#.#26.246.232':445
'19#.#26.153.104':445
'19#.#26.139.213':445
'19#.#26.107.188':445
'19#.#26.80.243':445
'19#.#26.49.76':445
'19#.#26.54.229':445
'19#.#26.9.148':445
'19#.#26.38.146':445
'19#.#26.229.137':445
'19#.#26.202.11':445
'19#.#26.75.186':445
'19#.#26.57.181':445
'19#.#26.101.27':445
'19#.#26.189.64':445
'19#.#26.202.116':445
'19#.#26.60.227':445
'19#.#26.49.128':445
'19#.#26.66.85':445
'19#.#26.57.251':445
'19#.#26.48.59':445
'19#.#26.75.10':445
'19#.#26.90.31':445
'19#.#26.132.190':445
'19#.#26.97.78':445
'19#.#26.67.57':445
'19#.#26.93.209':9988
'19#.#26.215.31':9988
'19#.#26.92.109':9988
'19#.#26.25.92':9988
'19#.#26.107.99':9988
'19#.#26.48.59':9988
'19#.#26.67.57':9988
'19#.#26.83.142':9988
'19#.#26.49.128':9988
'19#.#26.168.233':9988
'19#.#26.121.172':445
'19#.#26.214.201':9988
'19#.#26.25.68':445
'19#.#26.252.25':445
'19#.#26.10.118':9988
'19#.#26.65.75':9988
'19#.#26.23.45':9988
'19#.#26.229.229':9988
'19#.#26.48.164':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней