Trojan.Starman.5175

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#5.108.91':445
'19#.#5.190.108':445
'19#.#5.104.118':445
'19#.#5.39.38':445
'19#.#5.133.176':445
'19#.#5.91.241':445
'19#.#5.104.99':139
'19#.#5.61.19':139
'19#.#5.68.39':139
'19#.85.4.29':445
'19#.#5.6.150':445
'19#.#5.134.100':445
'19#.#5.13.39':445
'19#.#5.137.91':445
'19#.#5.26.58':445
'19#.#5.246.168':445
'19#.#5.27.14':445
'19#.#5.55.92':445
'19#.#5.33.34':445
'19#.#5.156.143':445
'19#.#5.20.185':445
'19#.#5.50.131':445
'19#.#5.192.105':445
'19#.#5.19.25':445
'19#.#5.25.146':139
'19#.#5.228.12':139
'19#.#5.38.140':139
'19#.#5.150.21':139
'19#.#5.83.203':139
'19#.#5.45.197':139
'19#.#5.68.39':445
'19#.#5.247.67':445
'19#.#5.139.247':445
'19#.#5.137.167':139
'19#.#5.104.99':445
'19#.#5.61.19':445
'19#.#5.183.156':139
'19#.#5.60.55':139
'19#.#5.131.45':139
'19#.#5.247.67':139
'19#.#5.139.247':139
'19#.#5.72.241':139
'19#.#5.250.86':139
'19#.#5.67.171':139
'19#.#5.112.120':139
'19#.#5.47.131':139
'19#.#5.219.61':139
'19#.#5.42.62':139
'19#.#5.93.210':445
'19#.#5.27.16':139
'19#.#5.35.80':139
'19#.#5.176.227':139
'19#.#5.35.95':139
'19#.#5.48.175':139
'19#.#5.85.64':139
'19#.#5.27.14':139
'19#.#5.55.92':139
'19#.#5.13.39':139
'19#.#5.209.176':139
'19#.#5.93.210':139
'19#.#5.246.168':139
'19#.#5.70.78':445
'19#.#5.235.95':445
'19#.#5.90.157':445
'19#.#5.59.22':445
'19#.#5.11.65':445
'19#.#5.252.150':445
'19#.#5.239.83':445
'19#.#5.104.244':445
'19#.#5.160.96':445
'19#.#5.241.186':445
'19#.#5.216.161':445
'19#.#5.155.173':445
'19#.#5.6.150':139
'19#.#5.134.100':139
'19#.#5.35.95':445
'19#.#5.190.108':139
'19#.#5.104.118':139
'19#.85.4.29':139
'19#.#5.35.80':445
'19#.#5.176.227':445
'19#.#5.209.176':445
'19#.#5.48.175':445
'19#.#5.85.64':445
'19#.#5.27.16':445
'19#.#5.192.105':139
'19#.#5.19.25':139
'19#.#5.33.34':139
'19#.#5.137.91':139
'19#.#5.26.58':139
'19#.#5.50.131':139
'19#.#5.133.176':139
'19#.#5.91.241':139
'19#.#5.108.91':139
'19#.#5.156.143':139
'19#.#5.20.185':139
'19#.#5.39.38':139
'19#.#5.236.124':445
'19#.#5.32.218':445
'19#.#5.252.66':445
'19#.#5.223.2':445
'19#.#5.206.103':445
'19#.#5.147.17':445
'19#.#5.229.119':445
'19#.#5.161.173':445
'19#.#5.237.0':445
'19#.#5.105.252':445
'19#.#5.17.106':445
'19#.#5.101.57':445
'19#.#5.103.213':445
'19#.#5.249.245':445
'19#.#5.168.60':445
'19#.#5.52.160':445
'19#.#5.27.210':445
'19#.#5.76.156':445
'19#.#5.194.119':445
'19#.#5.28.122':445
'19#.#5.21.172':445
'19#.#5.87.209':445
'19#.#5.78.45':445
'19#.#5.11.131':445
'19#.85.4.86':139
'19#.#5.193.78':139
'19#.#5.136.240':139
'19#.#5.3.158':139
'19#.#5.173.136':139
'19#.#5.92.188':139
'19#.#5.191.90':139
'19#.#5.47.191':139
'19#.#5.26.37':139
'19#.#5.90.177':139
'19#.#5.164.175':139
'19#.#5.90.165':139
'19#.#5.145.18':139
'19#.#5.122.31':139
'19#.#5.190.36':139
'19#.#5.146.109':445
'19#.#5.91.74':445
'19#.#5.34.98':139
'19#.#5.31.185':139
'19#.#5.31.31':139
'19#.#5.186.28':139
'19#.#5.219.140':139
'19#.#5.38.207':139
'19#.#5.208.202':139
'19#.#5.159.243':445
'19#.#5.38.140':445
'19#.#5.137.167':445
'19#.#5.166.177':139
'19#.#5.45.197':445
'19#.#5.25.146':445
'19#.#5.228.12':445
'19#.#5.27.210':139
'19#.#5.76.156':139
'19#.#5.103.213':139
'19#.#5.74.198':139
'19#.#5.159.243':139
'19#.#5.52.160':139
'19#.#5.131.45':445
'19#.#5.47.131':445
'19#.#5.219.61':445
'19#.#5.72.241':445
'19#.#5.183.156':445
'19#.#5.60.55':445
'19#.#5.112.120':445
'19#.#5.150.21':445
'19#.#5.83.203':445
'19#.#5.42.62':445
'19#.#5.250.86':445
'19#.#5.67.171':445
'19#.#5.17.106':139
'19#.#5.101.57':139
'19#.#5.229.119':139
'19#.#5.32.218':139
'19#.#5.252.66':139
'19#.#5.105.252':139
'19#.#5.91.74':139
'19#.#5.166.177':445
'19#.#5.74.198':445
'19#.#5.161.173':139
'19#.#5.237.0':139
'19#.#5.146.109':139
'19#.#5.78.45':139
'19#.#5.11.131':139
'19#.#5.194.119':139
'19#.#5.249.245':139
'19#.#5.168.60':139
'19#.#5.87.209':139
'19#.#5.206.103':139
'19#.#5.147.17':139
'19#.#5.236.124':139
'19#.#5.28.122':139
'19#.#5.21.172':139
'19#.#5.223.2':139
'19#.#5.134.176':445
'19#.#5.52.115':445
'19#.85.6.52':445
'19#.#5.110.113':445
'19#.#5.239.235':445
'19#.#5.85.187':445
'19#.#5.220.97':445
'19#.#5.151.244':445
'19#.#5.247.18':445
'19#.#5.187.5':445
'19#.#5.48.210':445
'19#.#5.196.193':445
'19#.#5.16.42':445
'19#.#5.103.13':445
'19#.#5.236.27':445
'19#.#5.87.29':139
'19#.#5.112.221':139
'19#.#5.160.0':445
'19#.#5.33.52':445
'19#.#5.196.124':445
'19#.#5.218.239':445
'19#.#5.13.253':445
'19#.#5.45.68':445
'19#.#5.97.171':445
'19#.#5.154.147':445
'19#.#5.12.50':445
'19#.#5.219.242':445
'19#.#5.61.146':445
'19#.#5.143.202':445
'19#.#5.117.142':445
'19#.#5.46.39':445
'19#.#5.73.91':445
'19#.#5.180.198':445
'19#.#5.114.98':445
'19#.#5.117.147':445
'19#.#5.246.219':445
'19#.#5.132.97':445
'19#.#5.244.254':445
'19#.#5.53.16':445
'19#.#5.125.111':445
'19#.#5.254.246':445
'19#.#5.186.83':445
'19#.#5.17.22':445
'19#.85.8.58':445
'19#.#5.196.59':445
'19#.#5.64.108':445
'19#.#5.59.53':445
'19#.#5.225.188':445
'19#.#5.198.254':139
'19#.85.6.52':139
'19#.#5.187.5':139
'19#.#5.48.210':139
'19#.#5.85.187':139
'19#.#5.134.176':139
'19#.#5.52.115':139
'19#.#5.247.18':139
'19#.#5.125.111':139
'19#.#5.254.246':139
'19#.#5.196.193':139
'19#.#5.220.97':139
'19#.#5.151.244':139
'19#.#5.13.253':139
'19#.#5.103.13':139
'19#.#5.196.124':139
'19#.#5.16.42':139
'19#.#5.239.235':139
'19#.#5.236.27':139
'19#.#5.97.171':139
'19#.#5.110.113':139
'19#.#5.160.0':139
'19#.#5.218.239':139
'19#.#5.45.68':139
'19#.#5.33.52':139
'19#.#5.219.242':139
'19#.#5.246.219':139
'19#.#5.12.50':139
'19#.#5.117.142':139
'19#.#5.154.147':139
'19#.#5.114.98':139
'19#.#5.73.91':139
'19#.#5.13.183':139
'19#.#5.142.164':139
'19#.#5.117.147':139
'19#.#5.180.198':139
'19#.#5.46.39':139
'19#.#5.132.97':139
'19#.85.8.58':139
'19#.#5.225.188':139
'19#.#5.186.83':139
'19#.#5.64.108':139
'19#.#5.244.254':139
'19#.#5.196.59':139
'19#.#5.61.146':139
'19#.#5.143.202':139
'19#.#5.17.22':139
'19#.#5.53.16':139
'19#.#5.59.53':139
'19#.#5.225.178':139
'19#.#5.24.221':445
'19#.#5.244.224':139
'19#.#5.58.156':445
'19#.#5.152.58':445
'19#.#5.21.225':445
'19#.#5.16.93':139
'19#.#5.7.207':139
'19#.#5.183.160':139
'19#.#5.233.244':139
'19#.#5.46.85':139
'19#.#5.222.75':139
'19#.#5.70.124':445
'19#.#5.192.70':445
'19#.#5.70.145':445
'19#.#5.76.220':445
'19#.#5.133.201':445
'19#.#5.124.153':445
'19#.#5.158.184':445
'19#.#5.63.108':445
'19#.#5.87.78':445
'19#.#5.70.192':445
'19#.#5.161.220':445
'19#.#5.184.161':445
'19#.#5.244.224':445
'19#.#5.233.244':445
'19#.#5.46.85':445
'19#.#5.104.244':139
'19#.#5.160.96':139
'19#.#5.225.178':445
'19#.#5.183.160':445
'19#.85.6.63':445
'19#.#5.225.148':445
'19#.#5.222.75':445
'19#.#5.16.93':445
'19#.#5.7.207':445
'19#.#5.11.65':139
'19#.#5.252.150':139
'19#.#5.70.78':139
'19#.85.6.63':139
'19#.#5.225.148':139
'19#.#5.59.22':139
'19#.#5.216.161':139
'19#.#5.155.173':139
'19#.#5.239.83':139
'19#.#5.235.95':139
'19#.#5.90.157':139
'19#.#5.241.186':139
'19#.#5.125.224':445
'19#.#5.154.147':9988
'19#.#5.73.91':9988
'19#.#5.46.39':9988
'19#.#5.225.188':9988
'19#.#5.61.146':9988
'19#.#5.53.16':9988
'19#.#5.109.67':139
'19#.#5.214.108':139
'19#.#5.208.213':139
'19#.#5.112.221':9988
'19#.#5.167.22':139
'19#.#5.67.167':139
'19#.#5.198.254':445
'19#.#5.112.221':445
'19#.#5.16.42':9988
'19#.#5.13.183':445
'19#.#5.142.164':445
'19#.#5.87.29':445
'19#.#5.48.210':9988
'19#.#5.247.18':9988
'19#.#5.132.97':9988
'19#.#5.236.27':9988
'19#.85.6.52':9988
'19#.#5.187.5':9988
'19#.#5.152.58':139
'19#.#5.21.225':139
'19#.#5.24.221':139
'19#.#5.63.108':139
'19#.#5.87.78':139
'19#.#5.58.156':139
'19#.#5.214.108':445
'19#.#5.208.213':445
'19#.#5.22.176':445
'19#.#5.167.22':445
'19#.#5.67.167':445
'19#.#5.109.67':445
'19#.#5.133.201':139
'19#.#5.124.153':139
'19#.#5.70.124':139
'19#.#5.22.176':139
'19#.#5.125.224':139
'19#.#5.76.220':139
'19#.#5.161.220':139
'19#.#5.184.161':139
'19#.#5.158.184':139
'19#.#5.192.70':139
'19#.#5.70.192':139
'19#.#5.70.145':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней