Trojan.Starman.5614

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#06.4.25':445
'13#.#06.53.150':445
'13#.#06.147.137':445
'13#.#06.95.31':445
'13#.#06.15.146':139
'13#.#06.123.74':445
'13#.#06.201.228':139
'13#.#06.123.74':139
'13#.#06.15.146':445
'13#.#06.26.251':445
'13#.#06.40.40':445
'13#.#06.43.14':445
'13#.#06.201.204':445
'13#.#06.2.94':445
'13#.#06.145.75':445
'13#.#06.175.9':445
'13#.#06.183.173':445
'13#.#06.86.163':445
'13#.#06.69.231':445
'13#.#06.21.91':139
'13#.#06.123.26':139
'13#.#06.205.122':139
'13#.#06.15.211':139
'13#.#06.26.16':139
'13#.#06.92.205':139
'13#.#06.164.175':139
'13#.#06.9.59':139
'13#.#06.163.99':139
'13#.#06.152.193':139
'13#.#06.122.171':139
'13#.#06.93.79':139
'13#.#06.34.142':139
'13#.#06.252.79':139
'13#.#06.56.252':139
'13#.#06.99.231':139
'13#.#06.13.122':139
'13#.#06.206.225':139
'13#.#06.240.27':139
'13#.#06.154.26':139
'13#.#06.239.12':445
'13#.#06.32.83':445
'13#.#06.47.197':445
'13#.#06.161.177':445
'13#.#06.189.31':445
'13#.#06.103.246':445
'13#.#06.14.143':445
'13#.#06.130.189':445
'13#.#06.37.2':445
'13#.#06.118.176':445
'13#.#06.4.25':139
'13#.#06.53.150':139
'13#.#06.147.137':139
'13#.#06.95.31':139
'13#.#06.51.100':445
'13#.#06.137.165':445
'13#.#06.70.21':445
'13#.#06.154.50':445
'13#.#06.219.154':445
'13#.#06.143.189':445
'13#.#06.132.160':445
'13#.#06.4.79':445
'13#.#06.248.112':445
'13#.#06.59.118':445
'13#.#06.99.160':445
'13#.#06.224.242':445
'13#.#06.33.248':445
'13#.#06.46.208':445
'13#.#06.87.60':445
'13#.#06.183.86':445
'13#.#06.18.124':445
'13#.#06.182.253':445
'13#.#06.247.113':445
'13#.#06.46.93':445
'13#.#06.237.254':445
'13#.#06.15.194':445
'13#.#06.63.35':445
'13#.#06.1.98':445
'13#.#06.194.181':445
'13#.#06.173.9':139
'13#.#06.57.179':445
'13#.#06.199.213':445
'13#.#06.110.173':445
'13#.#06.71.71':445
'13#.#06.180.208':445
'13#.#06.198.24':445
'13#.#06.58.104':445
'13#.#06.27.40':445
'13#.#06.86.121':445
'13#.#06.173.9':445
'13#.#06.123.26':445
'13#.#06.205.122':445
'13#.#06.15.211':445
'13#.#06.26.16':445
'13#.#06.92.205':445
'13#.#06.164.175':445
'13#.#06.9.59':445
'13#.#06.163.99':445
'13#.#06.152.193':445
'13#.#06.48.199':445
'13#.#06.16.106':445
'13#.#06.14.0':445
'13#.#06.51.236':445
'13#.#06.217.150':445
'13#.#06.84.14':445
'13#.#06.213.115':139
'13#.#06.70.85':139
'13#.#06.7.84':445
'13#.#06.51.7':445
'13#.#06.41.251':445
'13#.#06.144.1':445
'13#.#06.202.59':445
'13#.#06.28.119':445
'13#.#06.13.104':445
'13#.#06.107.202':445
'13#.#06.43.159':445
'13#.#06.83.56':445
'13#.#06.91.243':445
'13#.#06.124.241':445
'13#.#06.144.1':139
'13#.#06.202.59':139
'13#.#06.28.119':139
'13#.#06.13.104':139
'13#.#06.107.202':139
'13#.#06.43.159':139
'13#.#06.83.56':139
'13#.#06.91.243':139
'13#.#06.124.241':139
'13#.#06.48.199':139
'13#.#06.57.179':139
'13#.#06.199.213':139
'13#.#06.110.173':139
'13#.#06.71.71':139
'13#.#06.180.208':139
'13#.#06.198.24':139
'13#.#06.58.104':139
'13#.#06.27.40':139
'13#.#06.86.121':139
'13#.#06.41.251':139
'13#.#06.34.142':445
'13#.#06.99.231':445
'13#.#06.56.252':445
'13#.#06.93.79':445
'13#.#06.240.27':445
'13#.#06.206.225':445
'13#.#06.122.171':445
'13#.#06.154.26':445
'13#.#06.13.122':445
'13#.#06.252.79':445
'13#.#06.16.106':139
'13#.#06.14.0':139
'13#.#06.51.236':139
'13#.#06.217.150':139
'13#.#06.84.14':139
'13#.#06.201.228':445
'13#.#06.21.91':445
'13#.#06.7.84':139
'13#.#06.51.7':139
'13#.#06.26.251':139
'13#.#06.85.171':445
'13#.#06.52.188':445
'13#.#06.248.245':139
'13#.#06.100.249':139
'13#.#06.41.134':445
'13#.#06.49.197':445
'13#.#06.3.17':445
'13#.#06.192.150':445
'13#.#06.159.214':445
'13#.#06.246.113':139
'13#.#06.219.30':139
'13#.#06.68.19':139
'13#.#06.189.39':139
'13#.#06.141.52':139
'13#.#06.88.30':139
'13#.#06.151.57':139
'13#.#06.252.27':139
'13#.#06.82.48':139
'13#.#06.108.134':139
'13#.#06.26.21':445
'13#.#06.217.23':445
'13#.#06.182.216':445
'13#.#06.136.239':445
'13#.#06.24.136':445
'13#.#06.142.182':445
'13#.#06.14.177':445
'13#.#06.155.72':445
'13#.#06.110.134':445
'13#.#06.237.188':445
'13#.#06.29.30':445
'13#.#06.105.61':445
'13#.#06.84.187':445
'13#.#06.14.26':445
'13#.#06.115.14':445
'13#.#06.122.46':445
'13#.#06.97.27':445
'13#.#06.136.118':445
'13#.#06.44.209':445
'13#.#06.165.196':445
'13#.#06.122.46':139
'13#.#06.44.209':139
'13#.#06.105.61':139
'13#.#06.84.187':139
'13#.#06.165.196':139
'13#.#06.29.30':139
'13#.#06.136.239':139
'13#.#06.97.27':139
'13#.#06.136.118':139
'13#.#06.115.14':139
'13#.#06.52.188':139
'13#.#06.41.134':139
'13#.#06.192.150':139
'13#.#06.85.171':139
'13#.#06.159.214':139
'13#.#06.26.21':139
'13#.#06.14.26':139
'13#.#06.49.197':139
'13#.#06.3.17':139
'13#.#06.24.136':139
'13#.#06.169.104':139
'13#.#06.89.31':139
'13#.206.6.9':139
'13#.#06.82.159':139
'13#.#06.133.89':139
'13#.#06.167.84':139
'13#.#06.223.48':139
'13#.#06.210.252':139
'13#.#06.24.112':139
'13#.#06.9.119':139
'13#.#06.142.182':139
'13#.#06.110.134':139
'13#.#06.217.23':139
'13#.#06.182.216':139
'13#.#06.237.188':139
'13#.#06.173.167':139
'13#.#06.192.149':139
'13#.#06.155.72':139
'13#.#06.14.177':139
'13#.#06.173.167':445
'13#.#06.46.93':139
'13#.#06.18.124':139
'13#.#06.143.189':139
'13#.#06.247.113':139
'13#.#06.182.253':139
'13#.#06.194.181':139
'13#.#06.15.194':139
'13#.#06.237.254':139
'13#.#06.1.98':139
'13#.#06.14.143':139
'13#.#06.161.177':139
'13#.#06.239.12':139
'13#.#06.118.176':139
'13#.#06.47.197':139
'13#.#06.32.83':139
'13#.#06.37.2':139
'13#.#06.103.246':139
'13#.#06.189.31':139
'13#.#06.130.189':139
'13#.#06.63.35':139
'13#.#06.40.40':139
'13#.#06.43.14':139
'13#.#06.201.204':139
'13#.#06.2.94':139
'13#.#06.145.75':139
'13#.#06.175.9':139
'13#.#06.183.173':139
'13#.#06.86.163':139
'13#.#06.69.231':139
'13#.#06.33.248':139
'13#.#06.59.118':139
'13#.#06.132.160':139
'13#.#06.183.86':139
'13#.#06.248.112':139
'13#.#06.4.79':139
'13#.#06.87.60':139
'13#.#06.224.242':139
'13#.#06.99.160':139
'13#.#06.46.208':139
'13#.#06.141.52':445
'13#.#06.219.30':445
'13#.#06.223.48':445
'13#.#06.189.39':445
'13#.#06.68.19':445
'13#.#06.108.134':445
'13#.#06.151.57':445
'13#.#06.88.30':445
'13#.#06.82.48':445
'13#.#06.167.84':445
'13#.206.6.9':445
'13#.#06.82.159':445
'13#.#06.192.149':445
'13#.#06.9.119':445
'13#.#06.169.104':445
'13#.#06.210.252':445
'13#.#06.24.112':445
'13#.#06.89.31':445
'13#.#06.133.89':445
'13#.#06.252.27':445
'13#.#06.68.19':9988
'13#.#06.108.134':9988
'13#.#06.142.182':9988
'13#.#06.14.177':9988
'13#.#06.51.100':139
'13#.#06.137.165':139
'13#.#06.70.21':139
'13#.#06.154.50':139
'13#.#06.219.154':139
'13#.#06.159.214':9988
'13#.#06.100.249':445
'13#.#06.136.118':9988
'13#.#06.246.113':445
'13#.#06.248.245':445
'13#.#06.52.188':9988
'13#.#06.44.209':9988
'13#.#06.122.46':9988
'13#.#06.97.27':9988
'13#.#06.3.17':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней