Trojan.Starman.5622

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#9.155.58':139
'20#.#9.171.182':445
'20#.#9.210.224':139
'20#.#9.42.40':139
'20#.#9.123.171':445
'20#.#9.110.2':445
'20#.#9.114.88':445
'20#.#9.122.123':445
'20#.#9.2.123':445
'20#.#9.135.12':139
'20#.#9.16.169':139
'20#.#9.244.144':139
'20#.#9.114.166':139
'20#.#9.193.223':139
'20#.#9.26.37':139
'20#.#9.227.146':139
'20#.#9.251.100':139
'20#.#9.152.251':139
'20#.#9.35.59':445
'20#.#9.244.69':445
'20#.#9.115.231':445
'20#.#9.62.137':445
'20#.#9.4.193':445
'20#.#9.86.35':445
'20#.#9.131.18':445
'20#.#9.121.162':445
'20#.#9.85.238':445
'20#.#9.69.127':445
'20#.#9.74.211':445
'20#.#9.111.74':445
'20#.#9.89.25':445
'20#.29.4.4':445
'20#.#9.25.177':445
'20#.29.7.65':445
'20#.#9.250.232':445
'20#.#9.74.43':445
'20#.#9.64.242':445
'20#.#9.114.88':139
'20#.#9.35.59':139
'20#.#9.2.123':139
'20#.#9.110.2':139
'20#.#9.89.25':139
'20#.#9.111.74':139
'20#.#9.25.177':139
'20#.29.4.4':139
'20#.#9.74.211':139
'20#.#9.112.29':445
'20#.#9.13.162':445
'20#.#9.114.77':445
'20#.#9.226.29':445
'20#.#9.88.118':445
'20#.#9.123.171':139
'20#.#9.122.123':139
'20#.29.4.95':445
'20#.#9.171.182':139
'20#.#9.74.43':139
'20#.#9.121.162':139
'20#.#9.84.196':139
'20#.#9.69.127':139
'20#.#9.131.18':139
'20#.#9.35.178':139
'20#.#9.22.15':139
'20#.#9.191.249':139
'20#.#9.207.90':139
'20#.#9.232.207':139
'20#.#9.250.232':139
'20#.#9.62.137':139
'20#.#9.64.242':139
'20#.29.7.65':139
'20#.#9.4.193':139
'20#.#9.86.35':139
'20#.#9.85.238':139
'20#.#9.244.69':139
'20#.#9.115.231':139
'20#.#9.84.196':445
'20#.#9.203.96':139
'20#.#9.62.84':139
'20#.#9.9.238':139
'20#.#9.16.224':139
'20#.#9.228.106':139
'20#.#9.67.72':139
'20#.#9.116.199':139
'20#.#9.220.207':139
'20#.#9.192.220':139
'20#.#9.77.254':139
'20#.#9.227.217':139
'20#.#9.22.33':139
'20#.#9.192.213':139
'20#.#9.97.195':139
'20#.#9.173.134':139
'20#.#9.101.97':139
'20#.#9.180.209':139
'20#.#9.134.3':139
'20#.#9.8.187':139
'20#.#9.30.97':139
'20#.#9.94.53':139
'20#.#9.221.204':139
'20#.#9.98.147':139
'20#.#9.12.145':139
'20#.#9.104.229':139
'20#.#9.105.194':139
'20#.#9.221.236':139
'20#.#9.49.222':139
'20#.#9.142.165':139
'20#.#9.80.152':139
'20#.#9.0.216':139
'20#.#9.145.72':139
'20#.#9.133.68':139
'20#.29.9.81':139
'20#.#9.219.41':139
'20#.#9.33.134':139
'20#.#9.12.69':139
'20#.#9.152.251':445
'20#.#9.26.37':445
'20#.#9.193.223':445
'20#.#9.251.100':445
'20#.#9.227.146':445
'20#.#9.155.58':445
'20#.#9.217.154':139
'20#.#9.210.224':445
'20#.#9.42.40':445
'20#.#9.232.207':445
'20#.#9.22.15':445
'20#.#9.35.178':445
'20#.#9.207.90':445
'20#.#9.191.249':445
'20#.#9.135.12':445
'20#.#9.16.169':445
'20#.#9.244.144':445
'20#.#9.114.166':445
'20#.#9.168.16':139
'20#.#9.221.220':445
'20#.#9.76.64':445
'20#.#9.223.126':445
'20#.#9.32.159':445
'20#.#9.51.164':445
'20#.#9.157.169':139
'20#.#9.135.157':139
'20#.#9.159.51':139
'20#.#9.106.146':139
'20#.#9.32.159':139
'20#.#9.221.220':139
'20#.#9.77.24':139
'20#.#9.223.126':139
'20#.#9.76.64':139
'20#.#9.168.16':445
'20#.#9.77.24':445
'20#.#9.51.164':139
'20#.#9.217.154':445
'20#.#9.105.225':445
'20#.#9.11.206':139
'20#.#9.138.171':139
'20#.#9.143.11':139
'20#.#9.203.236':139
'20#.#9.145.35':139
'20#.#9.106.247':445
'20#.#9.215.212':445
'20#.#9.198.116':445
'20#.#9.18.198':445
'20#.#9.252.83':139
'20#.#9.58.252':139
'20#.#9.39.87':139
'20#.#9.151.221':139
'20#.#9.31.129':139
'20#.#9.184.72':139
'20#.#9.27.133':139
'20#.#9.215.208':139
'20#.#9.41.79':139
'20#.#9.207.81':445
'20#.#9.41.121':445
'20#.#9.198.102':445
'20#.#9.183.184':445
'20#.#9.3.177':445
'20#.#9.251.19':445
'20#.#9.146.87':445
'20#.29.1.93':445
'20#.#9.47.214':445
'20#.#9.16.31':445
'20#.#9.173.158':445
'20#.#9.15.124':445
'20#.#9.249.216':445
'20#.#9.211.249':445
'20#.29.28.1':445
'20#.#9.246.153':445
'20#.#9.156.95':445
'20#.#9.247.27':445
'20#.#9.124.63':445
'20#.#9.124.63':139
'20#.#9.246.153':139
'20#.29.28.1':139
'20#.#9.247.27':139
'20#.#9.156.95':139
'20#.#9.41.121':139
'20#.#9.198.102':139
'20#.#9.183.184':139
'20#.#9.3.177':139
'20#.#9.198.116':139
'20#.#9.18.198':139
'20#.#9.207.81':139
'20#.#9.106.247':139
'20#.#9.215.212':139
'20#.#9.173.158':139
'20#.#9.15.124':139
'20#.#9.249.216':139
'20#.#9.211.249':139
'20#.#9.251.19':139
'20#.#9.59.29':139
'20#.#9.253.252':139
'20#.#9.181.172':139
'20#.#9.1.251':139
'20#.#9.140.114':139
'20#.#9.212.73':139
'20#.#9.176.211':139
'20#.#9.149.178':139
'20#.#9.113.183':139
'20#.#9.146.87':139
'20#.29.1.93':139
'20#.#9.47.214':139
'20#.#9.16.31':139
'20#.#9.170.172':139
'20#.#9.10.154':139
'20#.29.17.8':139
'20#.#9.236.41':139
'20#.#9.52.240':139
'20#.#9.170.172':445
'20#.#9.171.1':139
'20#.#9.14.220':139
'20#.#9.145.48':139
'20#.#9.50.145':139
'20#.#9.223.14':139
'20#.#9.43.125':139
'20#.#9.94.56':445
'20#.#9.25.238':139
'20#.#9.31.103':139
'20#.#9.41.121':9988
'20#.#9.183.184':9988
'20#.#9.3.177':9988
'20#.#9.15.124':9988
'20#.#9.247.27':9988
'20#.#9.117.180':139
'20#.#9.48.118':139
'20#.#9.246.153':9988
'20#.#9.94.56':139
'20#.#9.117.180':445
'20#.#9.114.77':139
'20#.#9.226.29':139
'20#.#9.44.176':139
'20#.#9.105.225':139
'20#.#9.112.29':139
'20#.29.4.95':139
'20#.#9.44.176':445
'20#.#9.13.162':139
'20#.#9.88.118':139
'20#.#9.50.145':445
'20#.#9.171.1':445
'20#.#9.48.118':445
'20#.#9.145.48':445
'20#.#9.14.220':445
'20#.#9.31.103':445
'20#.#9.43.125':445
'20#.#9.223.14':445
'20#.#9.25.238':445
'20#.#9.212.73':445
'20#.#9.176.211':445
'20#.#9.149.178':445
'20#.#9.113.183':445
'20#.#9.39.87':445
'20#.#9.58.252':445
'20#.#9.31.129':445
'20#.#9.151.221':445
'20#.#9.252.83':445
'20#.#9.10.154':445
'20#.29.17.8':445
'20#.#9.236.41':445
'20#.#9.52.240':445
'20#.#9.181.172':445
'20#.#9.253.252':445
'20#.#9.140.114':445
'20#.#9.59.29':445
'20#.#9.1.251':445
'20#.#9.215.208':445
'20#.#9.251.19':9988
'20#.#9.124.63':9988
'20#.#9.207.81':9988
'20#.#9.249.216':9988
'20#.#9.47.214':9988
'20#.29.28.1':9988
'20#.#9.211.249':9988
'20#.#9.156.95':9988
'20#.#9.198.102':9988
'20#.#9.27.133':445
'20#.#9.143.11':445
'20#.#9.41.79':445
'20#.#9.184.72':445
'20#.#9.203.236':445
'20#.#9.145.35':445
'20#.#9.198.116':9988
'20#.#9.11.206':445
'20#.#9.138.171':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней