Trojan.Starman.5275

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#3.4.103':445
'22#.#3.42.249':445
'22#.#3.4.103':139
'22#.#3.42.249':139
'22#.#3.161.131':139
'22#.#3.106.176':139
'22#.#3.131.4':139
'22#.#3.247.161':139
'22#.#3.77.247':139
'22#.#3.71.21':445
'22#.#3.195.215':445
'22#.#3.192.195':445
'22#.#3.223.166':445
'22#.#3.151.193':445
'22#.13.2.31':445
'22#.#3.153.18':445
'22#.#3.64.207':445
'22#.#3.239.74':445
'22#.#3.47.94':445
'22#.#3.19.169':139
'22#.#3.147.189':139
'22#.#3.26.86':139
'22#.#3.100.204':139
'22#.#3.189.76':139
'22#.#3.125.240':139
'22#.#3.154.229':139
'22#.#3.240.105':139
'22#.#3.46.142':139
'22#.#3.218.115':139
'22#.#3.144.134':139
'22#.#3.19.251':139
'22#.#3.252.209':139
'22#.#3.148.86':139
'22#.#3.216.95':139
'22#.#3.142.164':139
'22#.#3.241.210':139
'22#.#3.177.141':139
'22#.#3.253.164':139
'22#.#3.77.254':139
'22#.#3.39.104':445
'22#.#3.44.39':445
'22#.#3.95.133':445
'22#.#3.173.15':445
'22#.#3.142.156':445
'22#.#3.234.216':445
'22#.#3.12.25':445
'22#.#3.7.123':445
'22#.#3.141.229':445
'22#.#3.85.110':445
'22#.#3.149.188':445
'22#.#3.30.18':445
'22#.#3.164.22':445
'22#.#3.90.123':445
'22#.#3.125.127':445
'22#.#3.39.159':445
'22#.#3.136.180':445
'22#.#3.245.134':445
'22#.#3.1.159':445
'22#.#3.188.152':445
'22#.#3.100.242':445
'22#.#3.193.209':445
'22#.#3.68.29':445
'22#.#3.96.146':445
'22#.#3.166.83':445
'22#.#3.232.154':445
'22#.#3.176.1':445
'22#.#3.187.211':445
'22#.#3.69.13':445
'22#.#3.38.235':445
'22#.#3.24.79':445
'22#.#3.109.23':445
'22#.#3.229.188':445
'22#.#3.7.141':445
'22#.#3.41.95':445
'22#.#3.66.77':445
'22#.#3.235.88':445
'22#.#3.70.57':445
'22#.#3.34.161':445
'22#.#3.137.34':445
'22#.#3.246.85':445
'22#.#3.125.70':445
'22#.#3.50.230':445
'22#.#3.220.134':445
'22#.#3.240.232':445
'22#.#3.174.77':445
'22#.#3.156.98':445
'22#.#3.98.178':445
'22#.#3.240.105':445
'22#.#3.189.76':445
'22#.#3.147.189':445
'22#.#3.144.134':445
'22#.#3.100.204':445
'22#.#3.26.86':445
'22#.#3.218.115':445
'22#.#3.154.229':445
'22#.#3.125.240':445
'22#.#3.46.142':445
'22#.#3.24.135':445
'22#.#3.202.171':445
'22#.#3.71.202':445
'22#.#3.8.184':445
'22#.#3.172.1':445
'22#.#3.82.52':139
'22#.#3.82.52':445
'22#.#3.208.226':139
'22#.#3.134.157':139
'22#.#3.134.157':445
'22#.#3.55.91':445
'22#.#3.33.225':445
'22#.#3.60.177':445
'22#.#3.123.171':445
'22#.#3.47.154':445
'22#.#3.74.209':445
'22#.#3.144.204':445
'22#.#3.222.80':445
'22#.13.8.94':445
'22#.#3.64.251':445
'22#.#3.33.225':139
'22#.#3.60.177':139
'22#.#3.123.171':139
'22#.#3.47.154':139
'22#.#3.74.209':139
'22#.#3.144.204':139
'22#.#3.222.80':139
'22#.13.8.94':139
'22#.#3.64.251':139
'22#.#3.24.135':139
'22#.#3.137.34':139
'22#.#3.246.85':139
'22#.#3.125.70':139
'22#.#3.50.230':139
'22#.#3.220.134':139
'22#.#3.240.232':139
'22#.#3.174.77':139
'22#.#3.156.98':139
'22#.#3.98.178':139
'22#.#3.55.91':139
'22#.#3.19.251':445
'22#.#3.252.209':445
'22#.#3.148.86':445
'22#.#3.216.95':445
'22#.#3.142.164':445
'22#.#3.241.210':445
'22#.#3.177.141':445
'22#.#3.253.164':445
'22#.#3.77.254':445
'22#.#3.19.169':445
'22#.#3.202.171':139
'22#.#3.71.202':139
'22#.#3.8.184':139
'22#.#3.172.1':139
'22#.#3.161.131':445
'22#.#3.77.247':445
'22#.#3.131.4':445
'22#.#3.247.161':445
'22#.#3.106.176':445
'22#.#3.71.21':139
'22#.#3.131.194':445
'22#.#3.204.156':445
'22#.#3.141.253':139
'22#.#3.44.141':139
'22#.#3.104.31':445
'22#.#3.218.38':445
'22#.#3.222.230':445
'22#.#3.194.97':445
'22#.#3.199.174':445
'22#.#3.253.86':139
'22#.#3.14.42':139
'22#.#3.187.31':139
'22#.#3.88.127':139
'22#.#3.222.73':139
'22#.#3.74.79':139
'22#.#3.232.87':139
'22#.#3.87.232':139
'22#.13.4.75':139
'22#.13.87.4':139
'22#.#3.36.136':445
'22#.#3.56.208':445
'22#.#3.242.100':445
'22#.#3.63.173':445
'22#.#3.157.127':445
'22#.#3.65.82':445
'22#.#3.113.242':445
'22#.#3.232.239':445
'22#.#3.172.189':445
'22#.#3.116.200':445
'22#.#3.12.196':445
'22#.#3.129.102':445
'22#.#3.194.164':445
'22#.#3.153.131':445
'22#.#3.73.240':445
'22#.#3.155.194':445
'22#.#3.124.221':445
'22#.#3.141.66':445
'22#.#3.47.236':445
'22#.#3.205.37':445
'22#.#3.155.194':139
'22#.#3.47.236':139
'22#.#3.129.102':139
'22#.#3.194.164':139
'22#.#3.205.37':139
'22#.#3.12.196':139
'22#.#3.141.66':139
'22#.#3.124.221':139
'22#.#3.63.173':139
'22#.#3.73.240':139
'22#.#3.194.97':139
'22#.#3.222.230':139
'22#.#3.199.174':139
'22#.#3.218.38':139
'22#.#3.104.31':139
'22#.#3.131.194':139
'22#.#3.36.136':139
'22#.#3.153.131':139
'22#.#3.204.156':139
'22#.#3.157.127':139
'22#.#3.220.59':139
'22#.#3.30.129':139
'22#.#3.90.75':139
'22#.#3.82.45':139
'22#.#3.223.183':139
'22#.#3.145.139':139
'22#.#3.121.72':139
'22#.#3.109.200':139
'22#.#3.78.168':139
'22#.#3.57.52':139
'22#.#3.65.82':139
'22#.#3.116.200':139
'22#.#3.56.208':139
'22#.#3.242.100':139
'22#.#3.172.189':139
'22#.#3.146.141':139
'22#.#3.43.135':139
'22#.#3.113.242':139
'22#.#3.232.239':139
'22#.#3.7.141':139
'22#.#3.24.79':139
'22#.#3.188.152':139
'22#.#3.229.188':139
'22#.#3.109.23':139
'22#.#3.34.161':139
'22#.#3.66.77':139
'22#.#3.41.95':139
'22#.#3.70.57':139
'22#.#3.12.25':139
'22#.#3.173.15':139
'22#.#3.39.104':139
'22#.#3.85.110':139
'22#.#3.95.133':139
'22#.#3.44.39':139
'22#.#3.141.229':139
'22#.#3.234.216':139
'22#.#3.142.156':139
'22#.#3.7.123':139
'22#.#3.235.88':139
'22#.#3.195.215':139
'22#.#3.192.195':139
'22#.#3.223.166':139
'22#.#3.151.193':139
'22#.13.2.31':139
'22#.#3.153.18':139
'22#.#3.64.207':139
'22#.#3.239.74':139
'22#.#3.47.94':139
'22#.#3.176.1':139
'22#.#3.96.146':139
'22#.#3.100.242':139
'22#.#3.38.235':139
'22#.#3.68.29':139
'22#.#3.193.209':139
'22#.#3.69.13':139
'22#.#3.232.154':139
'22#.#3.166.83':139
'22#.#3.187.211':139
'22#.#3.88.127':445
'22#.#3.222.73':445
'22#.#3.145.139':445
'22#.#3.121.72':445
'22#.#3.14.42':445
'22#.13.4.75':445
'22#.13.87.4':445
'22#.#3.187.31':445
'22#.#3.74.79':445
'22#.#3.78.168':445
'22#.#3.57.52':445
'22#.#3.90.75':445
'22#.#3.146.141':445
'22#.#3.43.135':445
'22#.#3.82.45':445
'22#.#3.223.183':445
'22#.#3.109.200':445
'22#.#3.220.59':445
'22#.#3.30.129':445
'22#.#3.232.87':445
'22#.#3.149.188':139
'22#.#3.30.18':139
'22#.#3.164.22':139
'22#.#3.90.123':139
'22#.#3.125.127':139
'22#.#3.39.159':139
'22#.#3.136.180':139
'22#.#3.245.134':139
'22#.#3.1.159':139
'22#.#3.232.87':9988
'22#.#3.141.253':445
'22#.#3.44.141':445
'22#.#3.87.232':445
'22#.#3.253.86':445
'22#.#3.218.38':9988
'22#.#3.172.189':9988
'22#.#3.90.75':9988
'22#.#3.141.66':9988
'22#.#3.104.31':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней