Trojan.Starman.5187

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#54.216.58':445
'19#.#54.176.216':445
'19#.#54.58.137':445
'19#.#54.20.252':445
'19#.#54.195.45':445
'19#.#54.126.237':445
'19#.#54.140.235':445
'19#.#54.30.142':445
'19#.#54.24.7':445
'19#.#54.63.141':445
'19#.#54.143.182':445
'19#.#54.152.248':445
'19#.#54.30.152':445
'19#.#54.86.53':445
'19#.#54.123.71':445
'19#.#54.155.226':445
'19#.#54.37.66':445
'19#.#54.194.32':445
'19#.#54.22.194':445
'19#.#54.33.60':445
'19#.#54.14.137':445
'19#.#54.0.192':445
'19#.#54.29.137':139
'19#.#54.11.68':139
'19#.#54.122.9':139
'19#.#54.217.85':445
'19#.#54.126.145':139
'19#.#54.240.11':139
'19#.#54.160.129':139
'19#.#54.236.160':139
'19#.#54.71.197':139
'19#.#54.173.59':139
'19#.#54.153.84':139
'19#.#54.216.85':445
'19#.#54.50.118':139
'19#.#54.159.225':445
'19#.#54.62.30':445
'19#.#54.29.62':445
'19#.#54.101.96':139
'19#.#54.101.96':445
'19#.#54.4.15':445
'19#.#54.50.118':445
'19#.#54.4.15':139
'19#.#54.217.85':139
'19#.#54.63.141':139
'19#.#54.143.182':139
'19#.#54.126.237':139
'19#.#54.216.58':139
'19#.#54.176.216':139
'19#.#54.24.7':139
'19#.#54.29.62':139
'19#.#54.159.225':139
'19#.#54.62.30':139
'19#.#54.140.235':139
'19#.#54.30.142':139
'19#.#54.14.137':139
'19#.#54.0.192':139
'19#.#54.37.66':139
'19#.#54.152.248':139
'19#.#54.30.152':139
'19#.#54.33.60':139
'19#.#54.195.45':139
'19#.#54.58.137':139
'19#.#54.20.252':139
'19#.#54.194.32':139
'19#.#54.22.194':139
'19#.#54.30.195':445
'19#.#54.104.112':445
'19#.#54.105.6':445
'19#.#54.115.36':445
'19#.#54.161.159':445
'19#.#54.156.192':445
'19#.#54.240.247':445
'19#.#54.59.77':445
'19#.#54.247.176':445
'19#.#54.158.191':445
'19#.#54.27.202':445
'19#.#54.113.238':445
'19#.#54.153.48':445
'19#.#54.173.73':445
'19#.#54.216.85':139
'19#.#54.214.84':445
'19#.#54.138.62':445
'19#.#54.216.127':445
'19#.#54.139.216':445
'19#.#54.114.167':445
'19#.#54.241.146':445
'19#.#54.153.165':445
'19#.#54.93.231':445
'19#.#54.212.5':445
'19#.#54.19.92':445
'19#.#54.125.246':445
'19#.#54.92.241':445
'19#.#54.2.192':445
'19#.#54.45.116':445
'19#.#54.3.220':445
'19#.#54.107.170':445
'19#.#54.150.246':445
'19#.#54.131.151':445
'19#.#54.78.250':445
'19#.#54.191.229':445
'19#.#54.236.160':445
'19#.#54.71.197':445
'19#.#54.160.129':445
'19#.#54.209.24':445
'19#.#54.28.120':445
'19#.#54.124.115':445
'19#.#54.119.193':445
'19#.#54.217.68':445
'19#.#54.196.69':445
'19#.#54.241.163':445
'19#.#54.70.63':445
'19#.#54.56.252':445
'19#.#54.85.158':445
'19#.#54.157.250':445
'19#.#54.27.222':445
'19#.#54.32.223':139
'19#.#54.241.27':139
'19#.#54.235.156':139
'19#.#54.98.98':445
'19#.#54.28.159':139
'19#.#54.192.11':445
'19#.#54.155.192':445
'19#.#54.59.3':445
'19#.#54.21.220':445
'19#.#54.76.20':445
'19#.#54.107.217':445
'19#.#54.105.193':445
'19#.#54.28.16':445
'19#.#54.51.20':445
'19#.#54.141.132':445
'19#.#54.99.141':445
'19#.#54.150.246':139
'19#.#54.131.151':139
'19#.#54.2.192':139
'19#.#54.93.231':139
'19#.#54.212.5':139
'19#.#54.107.170':139
'19#.#54.76.20':139
'19#.#54.59.3':139
'19#.#54.21.220':139
'19#.#54.45.116':139
'19#.#54.3.220':139
'19#.#54.217.68':139
'19#.#54.196.69':139
'19#.#54.209.24':139
'19#.#54.78.250':139
'19#.#54.191.229':139
'19#.#54.119.193':139
'19#.#54.92.241':139
'19#.#54.19.92':139
'19#.#54.125.246':139
'19#.#54.28.120':139
'19#.#54.124.115':139
'19#.#54.98.98':139
'19#.#54.126.145':445
'19#.#54.27.222':139
'19#.#54.241.163':139
'19#.#54.70.63':139
'19#.#54.122.9':445
'19#.#54.173.59':445
'19#.#54.153.84':445
'19#.#54.240.11':445
'19#.#54.29.137':445
'19#.#54.11.68':445
'19#.#54.141.132':139
'19#.#54.99.141':139
'19#.#54.107.217':139
'19#.#54.192.11':139
'19#.#54.155.192':139
'19#.#54.51.20':139
'19#.#54.157.250':139
'19#.#54.56.252':139
'19#.#54.85.158':139
'19#.#54.105.193':139
'19#.#54.28.16':139
'19#.#54.86.53':139
'19#.#54.75.17':445
'19#.#54.39.89':445
'19#.#54.82.115':445
'19#.#54.39.171':445
'19#.#54.220.96':445
'19#.#54.216.150':445
'19#.#54.121.8':445
'19#.#54.83.121':445
'19#.#54.72.174':445
'19#.#54.67.188':445
'19#.#54.29.76':445
'19#.#54.50.64':139
'19#.#54.226.93':139
'19#.#54.254.196':139
'19#.#54.251.31':139
'19#.#54.84.246':139
'19#.#54.24.34':139
'19#.#54.173.203':445
'19#.#54.79.219':445
'19#.#54.117.125':445
'19#.#54.39.125':139
'19#.#54.184.9':445
'19#.#54.9.147':445
'19#.#54.24.205':445
'19#.#54.63.198':445
'19#.#54.255.63':445
'19#.#54.141.75':445
'19#.#54.126.41':445
'19#.#54.127.126':445
'19#.#54.173.3':445
'19#.#54.1.215':445
'19#.#54.251.50':445
'19#.#54.234.250':445
'19#.#54.91.55':445
'19#.#54.48.82':445
'19#.#54.5.124':445
'19#.#54.101.44':445
'19#.#54.115.80':445
'19#.#54.192.204':445
'19#.#54.165.25':445
'19#.#54.174.141':445
'19#.#54.14.70':445
'19#.#54.143.111':445
'19#.#54.75.190':445
'19#.#54.83.121':139
'19#.#54.101.44':139
'19#.#54.121.8':139
'19#.#54.29.76':139
'19#.#54.72.174':139
'19#.#54.115.80':139
'19#.#54.192.204':139
'19#.#54.143.111':139
'19#.#54.48.82':139
'19#.#54.5.124':139
'19#.#54.91.55':139
'19#.#54.117.125':139
'19#.#54.184.9':139
'19#.#54.39.171':139
'19#.#54.79.219':139
'19#.#54.173.203':139
'19#.#54.220.96':139
'19#.#54.216.150':139
'19#.#54.67.188':139
'19#.#54.39.89':139
'19#.#54.82.115':139
'19#.#54.75.17':139
'19#.#54.173.3':139
'19#.#54.141.23':139
'19#.#54.127.126':139
'19#.#54.234.250':139
'19#.#54.1.215':139
'19#.#54.6.123':139
'19#.#54.37.50':139
'19#.#54.228.36':139
'19#.#54.50.158':139
'19#.#54.125.29':139
'19#.#54.158.0':139
'19#.#54.174.141':139
'19#.#54.255.63':139
'19#.#54.165.25':139
'19#.#54.75.190':139
'19#.#54.14.70':139
'19#.#54.141.75':139
'19#.#54.126.41':139
'19#.#54.251.50':139
'19#.#54.24.205':139
'19#.#54.63.198':139
'19#.#54.9.147':139
'19#.#54.64.14':139
'19#.#54.2.53':139
'19#.#54.239.81':139
'19#.#54.29.80':445
'19#.#54.152.128':445
'19#.#54.37.156':139
'19#.#54.37.156':445
'19#.#54.214.84':139
'19#.#54.2.53':445
'19#.#54.239.81':445
'19#.#54.64.14':445
'19#.#54.202.98':445
'19#.#54.201.137':445
'19#.#54.104.116':445
'19#.#54.77.66':445
'19#.#54.123.6':445
'19#.#54.82.38':445
'19#.#54.60.69':445
'19#.#54.74.17':445
'19#.#54.248.128':445
'19#.#54.161.71':445
'19#.#54.189.42':445
'19#.#54.156.192':139
'19#.#54.158.191':139
'19#.#54.104.112':139
'19#.#54.105.6':139
'19#.#54.30.195':139
'19#.#54.27.202':139
'19#.#54.123.71':139
'19#.#54.155.226':139
'19#.#54.59.77':139
'19#.#54.247.176':139
'19#.#54.240.247':139
'19#.#54.138.62':139
'19#.#54.241.146':139
'19#.#54.153.48':139
'19#.#54.173.73':139
'19#.#54.113.238':139
'19#.#54.153.165':139
'19#.#54.115.36':139
'19#.#54.161.159':139
'19#.#54.139.216':139
'19#.#54.114.167':139
'19#.#54.216.127':139
'19#.#54.75.17':9988
'19#.#54.91.55':9988
'19#.#54.39.125':445
'19#.#54.226.93':445
'19#.#54.24.34':445
'19#.#54.83.121':9988
'19#.#54.72.174':9988
'19#.#54.184.9':9988
'19#.#54.5.124':9988
'19#.#54.39.171':9988
'19#.#54.115.80':9988
'19#.#54.158.0':445
'19#.#54.50.158':445
'19#.#54.125.29':445
'19#.#54.141.23':445
'19#.#54.6.123':445
'19#.#54.37.50':445
'19#.#54.254.196':445
'19#.#54.50.64':445
'19#.#54.84.246':445
'19#.#54.228.36':445
'19#.#54.251.31':445
'19#.#54.82.38':139
'19#.#54.161.71':139
'19#.#54.201.137':139
'19#.#54.104.116':139
'19#.#54.202.98':139
'19#.#54.189.42':139
'19#.#54.29.80':139
'19#.#54.152.128':139
'19#.#54.74.17':139
'19#.#54.248.128':139
'19#.#54.60.69':139
'19#.#54.39.89':9988
'19#.#54.192.204':9988
'19#.#54.165.25':9988
'19#.#54.255.63':9988
'19#.#54.48.82':9988
'19#.#54.14.70':9988
'19#.#54.77.66':139
'19#.#54.123.6':139
'19#.#54.216.150':9988
'19#.#54.82.115':9988
'19#.#54.117.125':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней