Trojan.Starman.5758

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14#.#47.234.43':139
'14#.#47.140.234':139
'14#.#47.36.207':139
'14#.#47.55.250':139
'14#.#47.134.137':139
'14#.#47.62.106':139
'14#.#47.202.61':139
'14#.#47.106.90':139
'14#.#47.0.251':139
'14#.#47.233.190':139
'14#.#47.66.160':139
'14#.#47.193.254':139
'14#.#47.134.36':139
'14#.#47.199.160':139
'14#.#47.75.72':445
'14#.#47.165.75':445
'14#.#47.174.187':139
'14#.#47.62.81':139
'14#.#47.188.88':139
'14#.#47.12.198':139
'14#.#47.144.223':139
'14#.#47.77.78':139
'14#.#47.55.250':445
'14#.#47.134.137':445
'14#.#47.66.160':445
'14#.#47.174.187':445
'14#.#47.62.81':445
'14#.#47.0.251':445
'14#.#47.233.190':445
'14#.#47.140.234':445
'14#.#47.36.207':445
'14#.#47.234.43':445
'14#.#47.188.88':445
'14#.#47.123.210':139
'14#.#47.68.25':139
'14#.#47.185.111':139
'14#.#47.217.161':139
'14#.#47.152.244':139
'14#.#47.12.198':445
'14#.#47.144.223':445
'14#.#47.134.36':445
'14#.#47.199.160':445
'14#.#47.193.254':445
'14#.#47.224.13':139
'14#.#47.81.18':139
'14#.#47.115.211':139
'14#.#47.223.56':139
'14#.#47.30.228':139
'14#.#47.159.95':445
'14#.#47.96.22':445
'14#.#47.165.75':139
'14#.#47.72.127':139
'14#.#47.75.72':139
'14#.#47.125.185':139
'14#.#47.74.38':139
'14#.#47.174.74':139
'14#.#47.202.114':139
'14#.#47.145.153':139
'14#.#47.85.254':139
'14#.#47.143.169':139
'14#.#47.185.46':139
'14#.#47.39.227':139
'14#.#47.149.246':139
'14#.#47.16.236':139
'14#.#47.238.69':445
'14#.#47.125.185':445
'14#.#47.223.56':445
'14#.#47.185.46':445
'14#.#47.39.227':445
'14#.#47.143.169':445
'14#.#47.81.18':445
'14#.#47.72.127':445
'14#.#47.224.13':445
'14#.#47.30.228':445
'14#.#47.115.211':445
'14#.#47.16.236':445
'14#.#47.21.178':445
'14#.#47.145.153':445
'14#.#47.170.45':445
'14#.#47.132.87':445
'14#.#47.91.207':445
'14#.#47.174.74':445
'14#.#47.149.246':445
'14#.#47.74.38':445
'14#.#47.85.254':445
'14#.#47.202.114':445
'14#.#47.218.149':445
'14#.#47.60.62':445
'14#.#47.133.180':445
'14#.#47.252.236':445
'14#.#47.123.79':445
'14#.#47.32.106':139
'14#.#47.159.119':139
'14#.#47.197.0':139
'14#.#47.154.102':445
'14#.#47.91.243':445
'14#.#47.236.142':445
'14#.#47.93.62':445
'14#.#47.110.128':445
'14#.#47.15.130':445
'14#.#47.112.199':445
'14#.#47.177.112':445
'14#.#47.183.143':445
'14#.#47.142.183':445
'14#.#47.139.203':445
'14#.#47.167.66':445
'14#.#47.247.164':445
'14#.#47.21.214':139
'14#.#47.90.121':139
'14#.#47.19.138':139
'14#.#47.39.33':139
'14#.#47.24.153':139
'14#.#47.33.104':139
'14#.#47.119.62':139
'14#.#47.224.33':139
'14#.#47.64.201':139
'14#.#47.233.223':139
'14#.#47.115.244':139
'14#.#47.121.45':139
'14#.#47.9.166':139
'14#.#47.136.9':139
'14#.#47.76.50':139
'14#.#47.47.78':139
'14#.#47.147.47':139
'14#.#47.93.142':139
'14#.#47.45.33':139
'14#.#47.69.152':139
'14#.#47.5.17':139
'14#.#47.152.149':139
'14#.#47.129.77':139
'14#.#47.9.167':139
'14#.#47.176.51':139
'14#.#47.18.204':139
'14#.#47.51.29':139
'14#.#47.15.130':139
'14#.#47.93.62':139
'14#.#47.177.112':139
'14#.#47.199.169':139
'14#.#47.112.199':139
'14#.#47.174.251':139
'14#.#47.77.78':445
'14#.#47.217.161':445
'14#.#47.202.61':445
'14#.#47.106.90':445
'14#.#47.62.106':445
'14#.#47.68.25':445
'14#.#47.98.14':139
'14#.#47.123.210':445
'14#.#47.152.244':445
'14#.#47.185.111':445
'14#.#47.110.128':139
'14#.#47.174.251':445
'14#.#47.18.204':445
'14#.#47.98.14':445
'14#.#47.154.102':139
'14#.#47.91.243':139
'14#.#47.9.167':445
'14#.#47.199.169':445
'14#.#47.129.77':445
'14#.#47.51.29':445
'14#.#47.176.51':445
'14#.#47.60.62':139
'14#.#47.183.143':139
'14#.#47.142.183':139
'14#.#47.139.203':139
'14#.#47.167.66':139
'14#.#47.247.164':139
'14#.#47.133.180':139
'14#.#47.218.149':139
'14#.#47.123.79':139
'14#.#47.236.142':139
'14#.#47.252.236':139
'14#.#47.20.130':445
'14#.#47.253.104':445
'14#.#47.130.23':445
'14#.#47.17.247':445
'14#.#47.199.2':445
'14#.#47.6.95':445
'14#.#47.82.158':445
'14#.#47.73.186':445
'14#.#47.86.186':445
'14#.#47.186.86':445
'14#.#47.78.120':445
'14#.#47.92.53':139
'14#.#47.22.158':139
'14#.#47.22.190':139
'14#.#47.96.125':139
'14#.#47.233.165':139
'14#.#47.57.98':445
'14#.#47.183.169':445
'14#.#47.117.72':139
'14#.#47.213.109':139
'14#.#47.157.52':139
'14#.#47.255.253':445
'14#.#47.63.7':445
'14#.#47.45.133':445
'14#.#47.40.196':445
'14#.#47.73.167':445
'14#.#47.238.72':445
'14#.#47.115.72':445
'14#.#47.56.246':445
'14#.#47.181.87':445
'14#.#47.20.43':445
'14#.#47.1.64':445
'14#.#47.166.201':445
'14#.#47.134.85':445
'14#.#47.244.143':445
'14#.#47.78.232':445
'14#.#47.200.170':445
'14#.#47.175.242':445
'14#.#47.66.240':445
'14#.#47.201.94':445
'14#.#47.173.15':445
'14#.#47.122.163':445
'14#.#47.101.186':445
'14#.#47.200.170':139
'14#.#47.175.242':139
'14#.#47.255.253':139
'14#.#47.6.95':139
'14#.#47.82.158':139
'14#.#47.122.163':139
'14#.#47.101.186':139
'14#.#47.244.143':139
'14#.#47.78.232':139
'14#.#47.134.85':139
'14#.#47.73.186':139
'14#.#47.17.247':139
'14#.#47.199.2':139
'14#.#47.78.120':139
'14#.#47.57.98':139
'14#.#47.183.169':139
'14#.#47.86.186':139
'14#.#47.186.86':139
'14#.#47.253.104':139
'14#.#47.130.23':139
'14#.#47.20.130':139
'14#.#47.173.15':139
'14#.#47.250.80':139
'14#.#47.211.47':139
'14#.#47.124.33':139
'14#.#47.115.72':139
'14#.#47.56.246':139
'14#.#47.52.218':139
'14#.#47.88.61':139
'14#.#47.108.159':139
'14#.#47.97.75':139
'14#.#47.41.111':139
'14#.#47.181.87':139
'14#.#47.73.167':139
'14#.#47.238.72':139
'14#.#47.166.201':139
'14#.#47.66.240':139
'14#.#47.201.94':139
'14#.#47.20.43':139
'14#.#47.1.64':139
'14#.#47.45.133':139
'14#.#47.40.196':139
'14#.#47.63.7':139
'14#.#47.3.242':445
'14#.#47.12.182':445
'14#.#47.156.211':445
'14#.#47.76.18':445
'14#.#47.71.86':445
'14#.#47.179.136':445
'14#.#47.38.196':445
'14#.#47.137.16':445
'14#.#47.21.28':445
'14#.#47.121.30':445
'14#.#47.61.12':139
'14#.#47.141.204':139
'14#.#47.27.30':139
'14#.#47.38.228':139
'14#.#47.7.178':139
'14#.#47.83.137':139
'14#.#47.162.172':139
'14#.#47.201.5':139
'14#.#47.196.146':139
'14#.#47.66.57':139
'14#.#47.112.217':139
'14#.#47.218.109':445
'14#.#47.159.95':139
'14#.#47.96.22':139
'14#.#47.61.12':445
'14#.#47.162.172':445
'14#.#47.201.5':445
'14#.#47.170.45':139
'14#.#47.21.178':139
'14#.#47.91.207':139
'14#.#47.238.69':139
'14#.#47.132.87':139
'14#.#47.196.146':445
'14#.#47.7.178':445
'14#.#47.83.137':445
'14#.#47.111.169':445
'14#.#47.187.142':445
'14#.#47.57.242':445
'14#.#47.66.57':445
'14#.#47.112.217':445
'14#.#47.27.30':445
'14#.#47.38.228':445
'14#.#47.141.204':445
'14#.#47.157.52':445
'14#.#47.117.72':445
'14#.#47.213.109':445
'14#.#47.92.53':445
'14#.#47.22.158':445
'14#.#47.20.130':9988
'14#.#47.6.95':9988
'14#.#47.130.23':9988
'14#.#47.78.120':9988
'14#.#47.199.2':9988
'14#.#47.22.190':445
'14#.#47.97.75':445
'14#.#47.41.111':445
'14#.#47.211.47':445
'14#.#47.124.33':445
'14#.#47.250.80':445
'14#.#47.96.125':445
'14#.#47.233.165':445
'14#.#47.88.61':445
'14#.#47.108.159':445
'14#.#47.52.218':445
'14#.#47.200.170':9988
'14#.#47.137.16':139
'14#.#47.179.136':139
'14#.#47.121.30':139
'14#.#47.12.182':139
'14#.#47.21.28':139
'14#.#47.57.242':139
'14#.#47.111.169':139
'14#.#47.187.142':139
'14#.#47.38.196':139
'14#.#47.218.109':139
'14#.#47.3.242':139
'14#.#47.173.15':9988
'14#.#47.66.240':9988
'14#.#47.244.143':9988
'14#.#47.78.232':9988
'14#.#47.134.85':9988
'14#.#47.71.86':139
'14#.#47.156.211':139
'14#.#47.76.18':139
'14#.#47.40.196':9988
'14#.#47.56.246':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней