Trojan.Starman.5625

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'87.##0.75.35':139
'87.##0.108.119':139
'87.##0.91.230':139
'87.##0.104.207':139
'87.##0.127.221':139
'87.##0.225.95':139
'87.##0.0.172':139
'87.##0.102.181':139
'87.##0.177.7':139
'87.##0.45.221':139
'87.##0.165.77':139
'87.##0.106.229':139
'87.##0.116.209':139
'87.##0.21.23':139
'87.##0.174.171':139
'87.##0.23.90':139
'87.##0.153.167':139
'87.##0.126.222':139
'87.##0.206.226':139
'87.##0.64.41':139
'87.##0.137.176':139
'87.##0.101.187':139
'87.##0.201.2':445
'87.##0.174.171':445
'87.##0.179.51':445
'87.##0.41.195':445
'87.##0.51.84':445
'87.##0.116.209':445
'87.##0.64.41':445
'87.##0.106.229':445
'87.##0.23.90':445
'87.##0.21.23':445
'87.##0.21.72':445
'87.##0.167.208':139
'87.##0.69.180':139
'87.##0.33.79':139
'87.##0.96.191':139
'87.##0.9.151':139
'87.##0.181.242':445
'87.##0.202.155':445
'87.##0.18.247':445
'87.##0.22.39':445
'87.##0.146.18':445
'87.##0.93.231':139
'87.##0.244.7':139
'87.##0.236.59':139
'87.##0.163.16':139
'87.##0.78.92':139
'87.##0.88.196':445
'87.##0.163.203':445
'87.##0.15.37':139
'87.#70.27.9':139
'87.##0.5.254':139
'87.##0.75.223':139
'87.##0.167.49':445
'87.##0.50.191':445
'87.##0.32.233':445
'87.##0.37.218':445
'87.##0.239.199':445
'87.##0.213.231':139
'87.##0.247.213':139
'87.##0.231.162':139
'87.##0.88.196':139
'87.##0.163.203':139
'87.##0.231.162':445
'87.##0.181.242':139
'87.##0.202.155':139
'87.##0.146.18':139
'87.##0.22.39':139
'87.##0.18.247':139
'87.##0.179.51':139
'87.##0.201.2':139
'87.##0.51.84':139
'87.##0.21.72':139
'87.##0.41.195':139
'87.##0.15.37':445
'87.##0.163.16':445
'87.##0.78.92':445
'87.##0.75.223':445
'87.##0.213.231':445
'87.##0.247.213':445
'87.##0.5.254':445
'87.#70.27.9':445
'87.##0.244.7':445
'87.##0.236.59':445
'87.##0.93.231':445
'87.##0.64.51':139
'87.##0.130.125':139
'87.##0.40.237':139
'87.##0.233.39':139
'87.##0.123.221':139
'87.##0.79.161':139
'87.##0.129.79':139
'87.##0.161.85':139
'87.##0.155.130':139
'87.##0.85.155':139
'87.##0.177.60':139
'87.##0.228.169':445
'87.##0.106.236':445
'87.##0.169.120':445
'87.##0.161.204':445
'87.##0.120.162':445
'87.##0.31.93':139
'87.##0.16.184':139
'87.##0.34.174':139
'87.##0.131.153':445
'87.##0.239.194':139
'87.##0.214.0':139
'87.##0.194.117':139
'87.##0.111.35':139
'87.##0.121.95':139
'87.##0.78.32':139
'87.##0.38.87':139
'87.#70.88.3':139
'87.##0.71.209':139
'87.##0.246.188':139
'87.##0.130.150':139
'87.##0.55.184':139
'87.#70.83.9':139
'87.##0.37.25':139
'87.##0.144.37':139
'87.##0.188.200':139
'87.#70.29.9':139
'87.##0.94.119':139
'87.##0.175.244':139
'87.##0.61.220':139
'87.##0.132.132':139
'87.##0.90.92':139
'87.##0.22.65':139
'87.##0.0.172':445
'87.##0.101.187':445
'87.##0.225.95':445
'87.##0.45.221':445
'87.##0.102.181':445
'87.##0.167.208':445
'87.##0.69.180':445
'87.##0.33.79':445
'87.##0.96.191':445
'87.##0.9.151':445
'87.##0.177.7':445
'87.##0.126.222':445
'87.##0.104.207':445
'87.##0.153.167':445
'87.##0.137.176':445
'87.##0.206.226':445
'87.##0.75.35':445
'87.##0.108.119':445
'87.##0.91.230':445
'87.##0.165.77':445
'87.##0.127.221':445
'87.##0.223.138':139
'87.##0.73.154':445
'87.##0.158.55':445
'87.##0.223.138':445
'87.##0.106.236':139
'87.##0.131.153':139
'87.##0.120.213':445
'87.##0.204.118':445
'87.##0.191.150':445
'87.##0.46.158':445
'87.##0.22.181':445
'87.##0.228.169':139
'87.##0.22.181':139
'87.##0.191.150':139
'87.##0.46.158':139
'87.##0.73.154':139
'87.##0.158.55':139
'87.##0.120.162':139
'87.##0.169.120':139
'87.##0.161.204':139
'87.##0.120.213':139
'87.##0.204.118':139
'87.##0.245.76':445
'87.##0.200.190':445
'87.##0.167.172':445
'87.##0.149.61':445
'87.##0.191.192':445
'87.##0.22.58':445
'87.##0.248.5':445
'87.##0.20.31':445
'87.##0.167.98':445
'87.##0.62.31':445
'87.##0.36.23':445
'87.##0.61.178':445
'87.##0.133.206':139
'87.##0.162.247':139
'87.##0.67.92':139
'87.##0.18.241':139
'87.##0.196.81':139
'87.##0.94.55':445
'87.##0.128.36':445
'87.##0.5.211':139
'87.#70.68.3':139
'87.##0.210.238':139
'87.##0.90.19':445
'87.##0.240.28':445
'87.##0.137.182':445
'87.##0.208.43':445
'87.##0.155.243':445
'87.##0.234.79':445
'87.##0.150.222':445
'87.##0.192.150':445
'87.##0.117.31':445
'87.##0.45.123':445
'87.##0.91.113':445
'87.##0.105.61':445
'87.##0.104.181':445
'87.##0.20.56':445
'87.##0.57.162':445
'87.##0.124.111':445
'87.##0.107.12':445
'87.##0.202.116':445
'87.##0.78.221':445
'87.##0.93.161':445
'87.##0.47.128':445
'87.##0.13.246':445
'87.##0.124.111':139
'87.##0.107.12':139
'87.##0.90.19':139
'87.##0.248.5':139
'87.##0.20.31':139
'87.##0.20.56':139
'87.##0.13.246':139
'87.##0.47.128':139
'87.##0.104.181':139
'87.##0.57.162':139
'87.##0.167.98':139
'87.##0.61.178':139
'87.##0.167.172':139
'87.##0.149.61':139
'87.##0.22.58':139
'87.##0.191.192':139
'87.##0.62.31':139
'87.##0.36.23':139
'87.##0.200.190':139
'87.##0.128.36':139
'87.##0.94.55':139
'87.##0.93.161':139
'87.##0.206.4':139
'87.##0.182.181':139
'87.##0.172.25':139
'87.##0.150.222':139
'87.##0.192.150':139
'87.##0.47.91':139
'87.##0.98.216':139
'87.##0.75.208':139
'87.##0.66.183':139
'87.##0.208.65':139
'87.##0.117.31':139
'87.##0.155.243':139
'87.##0.234.79':139
'87.##0.105.61':139
'87.##0.202.116':139
'87.##0.78.221':139
'87.##0.45.123':139
'87.##0.91.113':139
'87.##0.137.182':139
'87.##0.208.43':139
'87.##0.240.28':139
'87.##0.143.81':445
'87.##0.72.45':445
'87.##0.116.170':445
'87.##0.50.191':139
'87.##0.106.148':445
'87.##0.20.151':445
'87.##0.43.44':445
'87.##0.25.79':445
'87.##0.138.226':445
'87.##0.139.25':445
'87.##0.167.49':139
'87.##0.114.22':139
'87.##0.9.142':139
'87.##0.201.19':139
'87.##0.242.199':139
'87.##0.132.243':139
'87.##0.239.199':139
'87.##0.32.233':139
'87.##0.37.218':139
'87.##0.245.76':139
'87.##0.187.95':139
'87.##0.44.20':445
'87.##0.200.94':445
'87.##0.242.199':445
'87.##0.96.232':445
'87.##0.135.9':445
'87.##0.11.19':445
'87.##0.9.142':445
'87.##0.187.95':445
'87.##0.114.22':445
'87.##0.132.243':445
'87.##0.201.19':445
'87.##0.163.86':445
'87.##0.80.223':445
'87.##0.208.208':445
'87.##0.157.220':445
'87.##0.66.151':445
'87.##0.95.216':445
'87.##0.49.233':445
'87.##0.157.234':445
'87.##0.47.167':445
'87.##0.39.23':445
'87.##0.74.229':445
'87.##0.210.238':445
'87.##0.5.211':445
'87.#70.68.3':445
'87.##0.133.206':445
'87.##0.162.247':445
'87.##0.116.170':139
'87.##0.143.81':139
'87.##0.106.148':139
'87.##0.191.192':9988
'87.##0.167.172':9988
'87.##0.67.92':445
'87.##0.66.183':445
'87.##0.208.65':445
'87.##0.182.181':445
'87.##0.172.25':445
'87.##0.206.4':445
'87.##0.18.241':445
'87.##0.196.81':445
'87.##0.98.216':445
'87.##0.75.208':445
'87.##0.47.91':445
'87.##0.72.45':139
'87.##0.49.233':139
'87.##0.157.234':139
'87.##0.74.229':139
'87.##0.208.208':139
'87.##0.47.167':139
'87.##0.96.232':139
'87.##0.200.94':139
'87.##0.11.19':139
'87.##0.163.86':139
'87.##0.135.9':139
'87.##0.39.23':139
'87.##0.20.151':139
'87.##0.44.20':139
'87.##0.25.79':139
'87.##0.138.226':139
'87.##0.139.25':139
'87.##0.95.216':139
'87.##0.80.223':139
'87.##0.157.220':139
'87.##0.43.44':139
'87.##0.66.151':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней