Trojan.Starman.5628

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#11.183.166':139
'22#.#11.16.131':139
'22#.#11.221.136':139
'22#.#11.47.233':139
'22#.#11.146.90':139
'22#.#11.205.195':139
'22#.#11.67.162':139
'22#.#11.133.57':139
'22#.#11.206.29':139
'22#.#11.58.8':139
'22#.#11.135.234':139
'22#.#11.216.86':139
'22#.#11.244.156':139
'22#.#11.2.80':139
'22#.#11.130.160':139
'22#.#11.131.157':139
'22#.#11.182.241':139
'22#.#11.253.177':139
'22#.#11.121.83':139
'22#.#11.141.244':139
'22#.#11.8.123':139
'22#.#11.82.252':445
'22#.#11.33.22':445
'22#.#11.250.155':445
'22#.#11.52.39':445
'22#.#11.39.71':445
'22#.#11.216.86':445
'22#.#11.244.156':445
'22#.#11.2.80':445
'22#.#11.130.160':445
'22#.#11.131.157':445
'22#.#11.208.240':445
'22#.#11.74.44':139
'22#.#11.101.56':445
'22#.#11.54.121':139
'22#.#11.41.217':139
'22#.#11.124.199':139
'22#.#11.21.206':445
'22#.#11.168.123':445
'22#.#11.58.65':445
'22#.#11.15.101':445
'22#.#11.186.14':445
'22#.#11.33.22':139
'22#.#11.80.122':139
'22#.#11.132.219':139
'22#.#11.121.164':139
'22#.#11.74.217':139
'22#.#11.164.74':139
'22#.#11.18.35':445
'22#.#11.207.49':445
'22#.#11.109.241':445
'22#.#11.46.208':139
'22#.#11.11.145':445
'22#.#11.217.81':139
'22#.#11.11.145':139
'22#.#11.109.241':139
'22#.#11.250.14':445
'22#.#11.43.2':445
'22#.#11.4.103':445
'22#.#11.157.20':139
'22#.#11.81.198':139
'22#.#11.77.200':139
'22#.#11.18.35':139
'22#.#11.207.49':139
'22#.#11.21.206':139
'22#.#11.168.123':139
'22#.#11.58.65':139
'22#.#11.15.101':139
'22#.#11.186.14':139
'22#.#11.250.155':139
'22#.#11.82.252':139
'22#.#11.39.71':139
'22#.#11.208.240':139
'22#.#11.52.39':139
'22#.#11.101.56':139
'22#.#11.217.81':445
'22#.#11.74.217':445
'22#.#11.81.198':445
'22#.#11.77.200':445
'22#.#11.157.20':445
'22#.#11.132.219':445
'22#.#11.46.208':445
'22#.#11.80.122':445
'22#.#11.164.74':445
'22#.#11.121.164':445
'22#.#11.175.44':139
'22#.#11.37.148':139
'22#.#11.169.1':139
'22#.#11.163.103':139
'22#.#11.101.174':139
'22#.#11.22.153':139
'22#.#11.227.43':139
'22#.#11.170.193':139
'22#.#11.8.250':139
'22#.#11.49.44':139
'22#.#11.43.249':139
'22#.#11.109.218':445
'22#.#11.50.125':445
'22#.#11.87.77':445
'22#.#11.80.220':445
'22#.#11.107.80':445
'22#.#11.127.150':139
'22#.#11.0.137':139
'22#.#11.207.7':139
'22#.#11.83.194':139
'22#.#11.7.84':139
'22#.#11.59.227':139
'22#.#11.202.10':139
'22#.#11.209.30':139
'22#.#11.57.206':139
'22#.#11.30.58':139
'22#.#11.229.233':139
'22#.#11.63.34':139
'22#.#11.45.207':139
'22#.#11.141.11':139
'22#.#11.153.144':139
'22#.#11.206.134':139
'22#.#11.156.135':139
'22#.#11.57.221':139
'22#.#11.135.19':139
'22#.#11.78.85':139
'22#.#11.19.178':139
'22#.#11.79.35':139
'22#.#11.112.222':139
'22#.#11.13.246':139
'22#.#11.98.37':139
'22#.#11.195.183':139
'22#.#11.226.82':445
'22#.#11.205.195':445
'22#.#11.67.162':445
'22#.#11.133.57':445
'22#.#11.206.29':445
'22#.#11.58.8':445
'22#.#11.74.44':445
'22#.#11.230.145':139
'22#.#11.54.121':445
'22#.#11.41.217':445
'22#.#11.124.199':445
'22#.#11.16.131':445
'22#.#11.182.241':445
'22#.#11.253.177':445
'22#.#11.121.83':445
'22#.#11.141.244':445
'22#.#11.8.123':445
'22#.#11.221.136':445
'22#.#11.183.166':445
'22#.#11.146.90':445
'22#.#11.135.234':445
'22#.#11.47.233':445
'22#.#11.120.230':445
'22#.#11.19.121':445
'22#.#11.230.145':445
'22#.#11.109.218':139
'22#.#11.50.125':139
'22#.#11.69.65':445
'22#.#11.31.123':445
'22#.#11.65.75':445
'22#.#11.148.204':445
'22#.#11.62.11':445
'22#.#11.87.77':139
'22#.#11.62.11':139
'22#.#11.65.75':139
'22#.#11.148.204':139
'22#.#11.120.230':139
'22#.#11.19.121':139
'22#.#11.80.220':139
'22#.#11.107.80':139
'22#.#11.226.82':139
'22#.#11.69.65':139
'22#.#11.31.123':139
'22#.#11.187.242':445
'22#.#11.211.78':445
'22#.#11.147.52':445
'22#.#11.52.19':445
'22#.#11.11.249':445
'22#.#11.62.138':445
'22#.#11.7.39':445
'22#.#11.89.141':445
'22#.#11.117.254':445
'22#.#11.5.173':445
'22#.#11.8.160':445
'22#.#11.48.52':445
'22#.#11.40.100':139
'22#.#11.25.150':139
'22#.#11.174.177':139
'22#.#11.57.178':139
'22#.#11.147.77':139
'22#.#11.94.11':445
'22#.#11.174.178':445
'22#.#11.65.189':139
'22#.#11.93.51':139
'22#.#11.189.93':139
'22#.#11.162.186':445
'22#.#11.120.226':445
'22#.#11.211.11':445
'22#.#11.145.72':445
'22#.#11.107.200':445
'22#.#11.25.54':445
'22#.#11.217.249':445
'22#.#11.241.104':445
'22#.#11.223.247':445
'22#.#11.235.5':445
'22#.#11.73.7':445
'22#.#11.101.211':445
'22#.#11.99.98':445
'22#.#11.29.63':445
'22#.#11.44.73':445
'22#.#11.201.167':445
'22#.#11.220.28':445
'22#.#11.35.136':445
'22#.#11.193.228':445
'22#.#11.36.194':445
'22#.#11.6.149':445
'22#.#11.178.79':139
'22#.#11.201.167':139
'22#.#11.29.63':139
'22#.#11.44.73':139
'22#.#11.7.39':139
'22#.#11.89.141':139
'22#.#11.6.149':139
'22#.#11.193.228':139
'22#.#11.36.194':139
'22#.#11.101.211':139
'22#.#11.99.98':139
'22#.#11.117.254':139
'22#.#11.11.249':139
'22#.#11.52.19':139
'22#.#11.48.52':139
'22#.#11.94.11':139
'22#.#11.174.178':139
'22#.#11.5.173':139
'22#.#11.8.160':139
'22#.#11.147.52':139
'22#.#11.62.138':139
'22#.#11.211.78':139
'22#.#11.189.178':139
'22#.#11.179.200':139
'22#.#11.141.48':139
'22#.#11.25.54':139
'22#.#11.217.249':139
'22#.#11.208.170':139
'22#.#11.106.237':139
'22#.#11.15.45':139
'22#.#11.219.192':139
'22#.#11.127.247':139
'22#.#11.241.104':139
'22#.#11.145.72':139
'22#.#11.107.200':139
'22#.#11.73.7':139
'22#.#11.220.28':139
'22#.#11.35.136':139
'22#.#11.223.247':139
'22#.#11.235.5':139
'22#.#11.120.226':139
'22#.#11.211.11':139
'22#.#11.162.186':139
'22#.#11.250.14':139
'22#.#11.11.208':445
'22#.#11.4.103':139
'22#.#11.187.242':139
'22#.#11.43.2':139
'22#.#11.12.137':445
'22#.#11.186.132':445
'22#.#11.139.104':445
'22#.#11.91.178':445
'22#.#11.227.135':445
'22#.#11.5.211':139
'22#.#11.212.218':139
'22#.#11.176.118':139
'22#.#11.43.14':139
'22#.#11.18.134':139
'22#.#11.10.213':139
'22#.#11.91.163':139
'22#.#11.12.166':139
'22#.#11.163.110':139
'22#.#11.255.147':139
'22#.#11.6.153':139
'22#.#11.176.118':445
'22#.#11.255.147':445
'22#.#11.212.218':445
'22#.#11.10.213':445
'22#.#11.43.14':445
'22#.#11.12.166':445
'22#.#11.5.211':445
'22#.#11.91.163':445
'22#.#11.6.153':445
'22#.#11.163.110':445
'22#.#11.18.134':445
'22#.#11.255.43':445
'22#.#11.145.8':445
'22#.#11.210.240':445
'22#.#11.5.86':445
'22#.#11.174.205':445
'22#.#11.43.166':445
'22#.#11.6.72':445
'22#.#11.59.161':445
'22#.#11.250.176':445
'22#.#11.84.94':445
'22#.#11.6.72':139
'22#.#11.93.51':445
'22#.#11.189.93':445
'22#.#11.25.150':445
'22#.#11.174.177':445
'22#.#11.40.100':445
'22#.#11.44.73':9988
'22#.#11.29.63':9988
'22#.#11.94.11':9988
'22#.#11.65.189':445
'22#.#11.211.78':9988
'22#.#11.147.77':445
'22#.#11.219.192':445
'22#.#11.127.247':445
'22#.#11.179.200':445
'22#.#11.141.48':445
'22#.#11.189.178':445
'22#.#11.178.79':445
'22#.#11.57.178':445
'22#.#11.106.237':445
'22#.#11.15.45':445
'22#.#11.208.170':445
'22#.#11.210.240':139
'22#.#11.255.43':139
'22#.#11.174.205':139
'22#.#11.186.132':139
'22#.#11.5.86':139
'22#.#11.59.161':139
'22#.#11.43.166':139
'22#.#11.84.94':139
'22#.#11.145.8':139
'22#.#11.250.176':139
'22#.#11.12.137':139
'22#.#11.179.200':9988
'22#.#11.219.192':9988
'22#.#11.36.194':9988
'22#.#11.99.98':9988
'22#.#11.101.211':9988
'22#.#11.227.135':139
'22#.#11.139.104':139
'22#.#11.91.178':139
'22#.#11.106.237':9988
'22#.#11.11.208':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней