Trojan.Starman.4990

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.85.3.73':139
'22#.#5.177.89':139
'22#.#5.6.108':139
'22#.#5.173.196':139
'22#.85.3.40':139
'22#.#5.47.150':139
'22#.#5.58.99':139
'22#.#5.150.96':139
'22#.#5.108.243':139
'22#.#5.211.164':139
'22#.#5.13.77':139
'22#.#5.17.211':445
'22#.#5.77.192':445
'22#.#5.122.113':445
'22#.#5.31.158':445
'22#.#5.198.31':445
'22#.85.5.31':139
'22#.#5.71.103':139
'22#.#5.85.12':139
'22#.#5.105.150':139
'22#.#5.188.169':139
'22#.85.3.73':445
'22#.#5.177.89':445
'22#.#5.6.108':445
'22#.#5.173.196':445
'22#.85.3.40':445
'22#.#5.47.150':445
'22#.#5.58.99':445
'22#.#5.150.96':445
'22#.#5.108.243':445
'22#.#5.211.164':445
'22#.#5.13.77':445
'22#.#5.157.195':139
'22#.#5.13.205':139
'22#.#5.70.118':139
'22#.#5.121.47':139
'22#.#5.102.121':139
'22#.85.5.31':445
'22#.#5.71.103':445
'22#.#5.85.12':445
'22#.#5.105.150':445
'22#.#5.188.169':445
'22#.#5.141.230':445
'22#.#5.198.31':139
'22#.#5.122.113':139
'22#.#5.31.158':139
'22#.#5.225.108':139
'22#.#5.141.230':139
'22#.#5.139.118':445
'22#.#5.127.139':445
'22#.#5.119.76':445
'22#.#5.17.211':139
'22#.#5.77.192':139
'22#.#5.148.74':139
'22#.#5.12.220':139
'22#.#5.73.78':139
'22#.#5.201.28':139
'22#.#5.16.23':139
'22#.#5.121.56':139
'22#.#5.167.179':139
'22#.#5.78.254':139
'22#.#5.115.231':139
'22#.#5.87.61':139
'22#.#5.108.28':139
'22#.#5.87.61':445
'22#.#5.108.28':445
'22#.#5.73.78':445
'22#.#5.201.28':445
'22#.#5.12.220':445
'22#.#5.148.74':445
'22#.#5.225.108':445
'22#.#5.78.254':445
'22#.#5.115.231':445
'22#.#5.167.179':445
'22#.#5.121.56':445
'22#.#5.90.33':445
'22#.#5.13.27':445
'22#.#5.228.231':445
'22#.#5.253.30':445
'22#.#5.136.201':445
'22#.#5.250.191':445
'22#.#5.16.23':445
'22#.#5.127.228':445
'22#.#5.75.19':445
'22#.#5.219.168':445
'22#.#5.121.47':445
'22#.#5.60.201':445
'22#.#5.236.157':445
'22#.#5.146.254':445
'22#.#5.214.59':445
'22#.#5.253.251':445
'22#.#5.20.95':445
'22#.#5.169.20':445
'22#.#5.94.169':445
'22#.#5.227.164':445
'22#.#5.168.227':445
'22#.#5.76.154':445
'22#.#5.251.150':445
'22#.#5.39.73':445
'22#.#5.34.226':445
'22#.#5.118.75':445
'22#.#5.4.223':445
'22#.#5.76.78':445
'22#.#5.102.249':445
'22#.#5.101.214':445
'22#.#5.27.69':445
'22#.#5.214.26':445
'22#.#5.225.28':139
'22#.#5.163.201':139
'22#.#5.109.205':139
'22#.#5.7.249':139
'22#.#5.200.111':139
'22#.#5.92.124':139
'22#.#5.165.170':139
'22#.#5.94.74':139
'22#.#5.81.164':139
'22#.#5.247.244':139
'22#.#5.11.217':139
'22#.#5.154.126':139
'22#.#5.58.145':139
'22#.#5.21.247':139
'22#.#5.175.225':139
'22#.85.5.51':139
'22#.#5.145.14':139
'22#.#5.158.79':139
'22#.#5.132.52':139
'22#.#5.209.57':139
'22#.#5.14.103':139
'22#.#5.154.153':445
'22#.#5.4.223':139
'22#.#5.34.226':139
'22#.#5.118.75':139
'22#.#5.157.100':139
'22#.#5.154.153':139
'22#.#5.214.26':139
'22#.#5.101.214':139
'22#.#5.27.69':139
'22#.#5.251.150':139
'22#.#5.39.73':139
'22#.#5.30.211':139
'22#.#5.13.205':445
'22#.#5.179.196':139
'22#.#5.157.195':445
'22#.#5.102.121':445
'22#.#5.70.118':445
'22#.#5.11.117':139
'22#.#5.64.172':139
'22#.#5.23.65':139
'22#.#5.115.179':139
'22#.#5.75.193':139
'22#.#5.115.179':445
'22#.#5.75.193':445
'22#.#5.179.196':445
'22#.#5.20.95':139
'22#.#5.169.20':139
'22#.#5.30.211':445
'22#.#5.157.100':445
'22#.#5.64.172':445
'22#.#5.23.65':445
'22#.#5.11.117':445
'22#.#5.94.169':139
'22#.#5.214.59':139
'22#.#5.253.251':139
'22#.#5.76.154':139
'22#.#5.76.78':139
'22#.#5.102.249':139
'22#.#5.227.164':139
'22#.#5.168.227':139
'22#.#5.236.157':139
'22#.#5.146.254':139
'22#.#5.60.201':139
'22#.#5.69.194':445
'22#.#5.154.82':445
'22#.#5.193.219':445
'22#.#5.188.139':445
'22#.#5.19.186':445
'22#.#5.184.121':445
'22#.#5.182.184':445
'22#.#5.1.121':445
'22#.#5.32.45':445
'22#.#5.19.216':445
'22#.#5.11.225':445
'22#.#5.186.59':139
'22#.#5.38.42':139
'22#.#5.164.100':139
'22#.#5.164.65':139
'22#.#5.100.67':139
'22#.#5.18.216':445
'22#.#5.70.68':445
'22#.#5.238.12':139
'22#.#5.66.46':139
'22#.#5.102.117':139
'22#.#5.92.115':445
'22#.#5.166.92':445
'22#.#5.6.182':445
'22#.85.4.26':445
'22#.#5.87.67':445
'22#.#5.18.197':445
'22#.#5.39.70':445
'22#.#5.106.180':445
'22#.#5.194.47':445
'22#.#5.14.180':445
'22#.#5.149.195':445
'22#.#5.232.231':445
'22#.85.0.64':445
'22#.#5.95.242':445
'22#.#5.240.182':445
'22#.#5.58.86':445
'22#.#5.229.197':445
'22#.#5.160.44':445
'22#.#5.226.245':445
'22#.#5.76.226':445
'22#.#5.117.219':445
'22#.#5.42.197':139
'22#.#5.58.86':139
'22#.#5.95.242':139
'22#.#5.240.182':139
'22#.#5.184.121':139
'22#.#5.182.184':139
'22#.#5.117.219':139
'22#.#5.226.245':139
'22#.#5.76.226':139
'22#.#5.232.231':139
'22#.85.0.64':139
'22#.#5.1.121':139
'22#.#5.19.186':139
'22#.#5.11.225':139
'22#.#5.188.139':139
'22#.#5.18.216':139
'22#.#5.70.68':139
'22#.#5.32.45':139
'22#.#5.19.216':139
'22#.#5.154.82':139
'22#.#5.193.219':139
'22#.#5.69.194':139
'22#.#5.194.125':139
'22#.#5.217.219':139
'22#.#5.161.106':139
'22#.#5.18.197':139
'22#.#5.39.70':139
'22#.#5.14.101':139
'22#.#5.185.139':139
'22#.#5.98.43':139
'22#.85.2.79':139
'22#.#5.51.78':139
'22#.#5.106.180':139
'22#.85.4.26':139
'22#.#5.87.67':139
'22#.#5.149.195':139
'22#.#5.229.197':139
'22#.#5.160.44':139
'22#.#5.194.47':139
'22#.#5.14.180':139
'22#.#5.166.92':139
'22#.#5.6.182':139
'22#.#5.92.115':139
'22#.#5.161.106':445
'22#.#5.149.159':445
'22#.#5.48.113':445
'22#.#5.102.173':445
'22#.#5.226.58':445
'22#.#5.194.164':445
'22#.#5.181.229':445
'22#.#5.159.239':445
'22#.#5.1.117':445
'22#.#5.42.56':445
'22#.#5.74.98':445
'22#.#5.248.22':445
'22#.#5.19.185':139
'22#.#5.177.127':139
'22#.#5.230.66':139
'22#.#5.175.161':139
'22#.85.67.0':139
'22#.#5.76.57':139
'22#.#5.26.48':445
'22#.#5.56.251':139
'22#.#5.23.10':139
'22#.#5.159.86':139
'22#.#5.228.231':139
'22#.#5.90.33':139
'22#.#5.136.201':139
'22#.#5.127.139':139
'22#.#5.253.30':139
'22#.#5.127.228':139
'22#.#5.250.191':139
'22#.#5.219.168':139
'22#.#5.13.27':139
'22#.#5.75.19':139
'22#.#5.139.118':139
'22#.#5.19.185':445
'22#.#5.177.127':445
'22#.#5.230.66':445
'22#.#5.175.161':445
'22#.85.67.0':445
'22#.#5.76.57':445
'22#.#5.119.76':139
'22#.#5.56.251':445
'22#.#5.23.10':445
'22#.#5.159.86':445
'22#.#5.159.239':139
'22#.#5.102.117':445
'22#.#5.238.12':445
'22#.#5.66.46':445
'22#.#5.186.59':445
'22#.#5.38.42':445
'22#.#5.184.121':9988
'22#.#5.1.121':9988
'22#.#5.70.68':9988
'22#.#5.11.225':9988
'22#.#5.69.194':9988
'22#.#5.164.100':445
'22#.#5.51.78':445
'22#.#5.98.43':445
'22#.85.2.79':445
'22#.#5.194.125':445
'22#.#5.217.219':445
'22#.#5.164.65':445
'22#.#5.100.67':445
'22#.#5.42.197':445
'22#.#5.14.101':445
'22#.#5.185.139':445
'22#.#5.102.173':139
'22#.#5.149.159':139
'22#.#5.226.58':139
'22#.#5.248.22':139
'22#.#5.194.164':139
'22#.#5.1.117':139
'22#.#5.181.229':139
'22#.#5.74.98':139
'22#.#5.48.113':139
'22#.#5.42.56':139
'22#.#5.26.48':139
'22#.#5.95.242':9988
'22#.85.0.64':9988
'22#.#5.58.86':9988
'22#.#5.182.184':9988
'22#.#5.240.182':9988
'22#.#5.14.180':9988
'22#.#5.39.70':9988
'22#.#5.6.182':9988
'22#.#5.76.226':9988
'22#.#5.117.219':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней