Trojan.Starman.5413

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#41.150.70':139
'19#.#41.99.150':139
'19#.#41.35.174':139
'19#.#41.2.42':139
'19#.#41.232.80':139
'19#.#41.249.195':139
'19#.#41.214.162':139
'19#.#41.196.108':139
'19#.#41.75.127':139
'19#.#41.58.45':139
'19#.#41.95.165':445
'19#.#41.220.95':139
'19#.#41.165.58':445
'19#.#41.205.222':445
'19#.#41.59.54':445
'19#.#41.204.152':139
'19#.#41.189.204':139
'19#.#41.171.248':139
'19#.#41.3.21':139
'19#.#41.85.7':139
'19#.#41.223.42':139
'19#.#41.75.127':445
'19#.#41.58.45':445
'19#.#41.99.150':445
'19#.#41.35.174':445
'19#.#41.150.70':445
'19#.#41.223.42':445
'19#.#41.28.37':445
'19#.#41.214.162':445
'19#.#41.196.108':445
'19#.#41.249.195':445
'19#.#41.3.21':445
'19#.#41.85.7':445
'19#.#41.220.95':445
'19#.#41.28.37':139
'19#.#41.5.168':139
'19#.#41.2.42':445
'19#.#41.232.80':445
'19#.#41.189.204':445
'19#.#41.171.248':445
'19#.#41.204.152':445
'19#.#41.136.192':445
'19#.#41.95.165':139
'19#.#41.96.207':445
'19#.#41.165.58':139
'19#.#41.205.222':139
'19#.#41.59.54':139
'19#.#41.112.143':445
'19#.#41.225.138':445
'19#.#41.143.128':445
'19#.#41.122.107':445
'19#.#41.97.89':445
'19#.#41.146.216':139
'19#.#41.213.146':139
'19#.#41.216.130':139
'19#.#41.107.234':139
'19#.#41.86.219':139
'19#.#41.16.118':139
'19#.#41.136.192':139
'19#.#41.2.36':139
'19#.#41.14.213':139
'19#.#41.103.74':139
'19#.#41.143.104':445
'19#.#41.216.130':445
'19#.#41.146.216':445
'19#.#41.86.219':445
'19#.#41.233.217':445
'19#.#41.107.234':445
'19#.#41.2.36':445
'19#.#41.16.118':445
'19#.#41.103.74':445
'19#.#41.213.146':445
'19#.#41.14.213':445
'19#.#41.217.57':445
'19#.#41.207.148':445
'19#.#41.2.106':445
'19#.#41.118.217':445
'19#.#41.94.131':445
'19#.#41.78.156':445
'19#.#41.217.68':445
'19#.#41.171.191':445
'19#.#41.9.157':445
'19#.#41.113.113':445
'19#.#41.5.168':445
'19#.#41.42.69':445
'19#.#41.203.128':445
'19#.#41.98.230':445
'19#.#41.231.199':445
'19#.#41.142.48':445
'19#.#41.93.219':445
'19#.#41.1.94':445
'19#.#41.192.97':445
'19#.#41.17.87':445
'19#.141.1.5':445
'19#.#41.116.35':445
'19#.#41.134.115':445
'19#.#41.68.144':445
'19#.#41.9.75':445
'19#.#41.136.252':445
'19#.#41.185.160':445
'19#.#41.214.95':445
'19#.#41.221.0':445
'19#.#41.87.45':445
'19#.#41.153.25':445
'19#.#41.14.80':445
'19#.#41.177.36':139
'19#.#41.74.76':139
'19#.#41.153.177':139
'19#.#41.132.16':139
'19#.#41.4.111':139
'19#.#41.0.23':139
'19#.#41.245.212':139
'19#.#41.59.168':139
'19#.#41.0.242':139
'19#.#41.82.223':139
'19#.#41.57.53':139
'19#.#41.26.57':139
'19#.#41.186.175':139
'19#.#41.236.100':445
'19#.#41.188.4':139
'19#.#41.56.160':139
'19#.#41.250.218':139
'19#.#41.189.34':139
'19#.#41.19.150':139
'19#.#41.126.173':139
'19#.#41.9.176':445
'19#.#41.116.35':139
'19#.#41.134.115':139
'19#.#41.68.144':139
'19#.#41.9.75':139
'19#.#41.136.252':139
'19#.#41.185.160':139
'19#.#41.214.95':139
'19#.#41.221.0':139
'19#.#41.87.45':139
'19#.#41.153.25':139
'19#.#41.207.251':139
'19#.#41.121.127':139
'19#.#41.93.206':139
'19#.#41.13.32':139
'19#.#41.142.197':139
'19#.#41.99.75':139
'19#.#41.9.176':139
'19#.#41.106.122':139
'19#.#41.206.92':139
'19#.#41.95.26':139
'19#.#41.231.199':139
'19#.#41.93.206':445
'19#.#41.207.251':445
'19#.#41.142.197':445
'19#.#41.236.100':139
'19#.#41.13.32':445
'19#.#41.106.122':445
'19#.#41.99.75':445
'19#.#41.95.26':445
'19#.#41.121.127':445
'19#.#41.206.92':445
'19#.#41.203.128':139
'19#.#41.17.87':139
'19#.#41.42.69':139
'19#.#41.142.48':139
'19#.#41.98.230':139
'19#.#41.1.94':139
'19#.#41.14.80':139
'19#.#41.93.219':139
'19#.141.1.5':139
'19#.#41.192.97':139
'19#.#41.233.217':139
'19#.#41.131.132':445
'19#.#41.217.131':445
'19#.#41.82.37':445
'19#.#41.109.5':445
'19#.#41.174.178':445
'19#.#41.99.232':445
'19#.#41.112.248':445
'19#.#41.38.68':445
'19#.#41.128.217':445
'19#.#41.4.49':445
'19#.#41.6.88':139
'19#.#41.50.223':139
'19#.#41.51.121':139
'19#.#41.35.161':139
'19#.#41.157.214':139
'19#.#41.131.225':139
'19#.#41.17.19':445
'19#.#41.215.76':139
'19#.#41.109.122':139
'19#.#41.117.125':139
'19#.#41.25.124':445
'19#.#41.156.65':445
'19#.#41.51.217':445
'19#.#41.153.228':445
'19#.#41.167.186':445
'19#.#41.252.160':445
'19#.#41.158.34':445
'19#.#41.193.157':445
'19#.#41.115.93':445
'19#.#41.2.175':445
'19#.#41.103.157':445
'19#.#41.46.25':445
'19#.#41.190.129':445
'19#.#41.40.140':445
'19#.#41.170.119':445
'19#.#41.139.141':445
'19#.#41.248.37':445
'19#.#41.97.204':445
'19#.#41.115.78':445
'19#.#41.104.151':445
'19#.#41.78.219':445
'19#.#41.161.212':139
'19#.#41.139.141':139
'19#.#41.40.140':139
'19#.#41.170.119':139
'19#.#41.112.248':139
'19#.#41.25.124':139
'19#.#41.78.219':139
'19#.#41.115.78':139
'19#.#41.104.151':139
'19#.#41.46.25':139
'19#.#41.190.129':139
'19#.#41.82.37':139
'19#.#41.131.132':139
'19#.#41.174.178':139
'19#.#41.17.19':139
'19#.#41.109.5':139
'19#.#41.38.68':139
'19#.#41.99.232':139
'19#.#41.4.49':139
'19#.#41.217.131':139
'19#.#41.128.217':139
'19#.#41.248.37':139
'19#.#41.163.138':139
'19#.#41.153.100':139
'19#.#41.2.126':139
'19#.#41.193.157':139
'19#.#41.188.133':139
'19#.#41.185.212':139
'19#.#41.76.57':139
'19#.#41.136.56':139
'19#.#41.60.63':139
'19#.#41.79.120':139
'19#.#41.153.228':139
'19#.#41.156.65':139
'19#.#41.252.160':139
'19#.#41.97.204':139
'19#.#41.167.186':139
'19#.#41.115.93':139
'19#.#41.158.34':139
'19#.#41.103.157':139
'19#.#41.51.217':139
'19#.#41.2.175':139
'19#.#41.188.133':445
'19#.#41.47.151':445
'19#.#41.58.218':445
'19#.#41.123.87':445
'19#.#41.84.239':445
'19#.#41.226.84':445
'19#.#41.55.246':445
'19#.#41.100.168':445
'19#.#41.137.183':445
'19#.#41.86.249':445
'19#.#41.120.26':445
'19#.#41.55.246':139
'19#.#41.100.168':139
'19#.#41.137.183':139
'19#.#41.86.249':139
'19#.#41.120.26':139
'19#.#41.100.197':139
'19#.#41.239.64':445
'19#.#41.44.242':139
'19#.#41.91.37':139
'19#.#41.223.147':139
'19#.#41.91.37':445
'19#.#41.217.57':139
'19#.#41.207.148':139
'19#.#41.2.106':139
'19#.#41.118.217':139
'19#.#41.94.131':139
'19#.#41.78.156':139
'19#.#41.217.68':139
'19#.#41.171.191':139
'19#.#41.9.157':139
'19#.#41.113.113':139
'19#.#41.96.207':139
'19#.#41.122.107':139
'19#.#41.100.197':445
'19#.#41.223.147':445
'19#.#41.44.242':445
'19#.#41.225.138':139
'19#.#41.143.104':139
'19#.#41.112.143':139
'19#.#41.97.89':139
'19#.#41.143.128':139
'19#.#41.58.218':139
'19#.#41.50.223':445
'19#.#41.109.122':445
'19#.#41.6.88':445
'19#.#41.157.214':445
'19#.#41.51.121':445
'19#.#41.109.5':9988
'19#.#41.82.37':9988
'19#.#41.131.225':445
'19#.#41.117.125':445
'19#.#41.215.76':445
'19#.#41.60.63':445
'19#.#41.79.120':445
'19#.#41.153.100':445
'19#.#41.2.126':445
'19#.#41.163.138':445
'19#.#41.161.212':445
'19#.#41.35.161':445
'19#.#41.76.57':445
'19#.#41.136.56':445
'19#.#41.185.212':445
'19#.#41.174.178':9988
'19#.#41.188.133':9988
'19#.#41.136.56':9988
'19#.#41.115.93':9988
'19#.#41.156.65':9988
'19#.#41.103.157':9988
'19#.#41.123.87':139
'19#.#41.47.151':139
'19#.#41.226.84':139
'19#.#41.239.64':139
'19#.#41.84.239':139
'19#.#41.128.217':9988
'19#.#41.99.232':9988
'19#.#41.217.131':9988
'19#.#41.17.19':9988
'19#.#41.131.132':9988
'19#.#41.248.37':9988
'19#.#41.252.160':9988
'19#.#41.115.78':9988
'19#.#41.40.140':9988
'19#.#41.46.25':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней