Trojan.Starman.5646

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#.223.219':139
'22#.0.84.73':139
'22#.#.117.105':139
'22#.#.103.250':139
'22#.0.72.57':139
'22#.#.115.71':139
'22#.#.130.89':139
'22#.0.79.37':139
'22#.0.93.3':139
'22#.#.229.92':139
'22#.#.225.89':139
'22#.#.247.232':445
'22#.#.49.104':139
'22#.0.86.27':445
'22#.#.19.211':445
'22#.#.26.248':445
'22#.#.120.178':139
'22#.#.119.23':139
'22#.#.178.253':139
'22#.#.10.187':139
'22#.#.181.232':139
'22#.#.223.219':445
'22#.0.84.73':445
'22#.#.117.105':445
'22#.#.103.250':445
'22#.0.72.57':445
'22#.#.115.71':445
'22#.#.130.89':445
'22#.0.79.37':445
'22#.0.93.3':445
'22#.#.229.92':445
'22#.#.225.89':445
'22#.#.19.172':139
'22#.#.49.104':445
'22#.0.75.56':139
'22#.#.103.84':139
'22#.#.144.87':139
'22#.#.120.178':445
'22#.#.119.23':445
'22#.#.178.253':445
'22#.#.10.187':445
'22#.#.181.232':445
'22#.0.86.27':139
'22#.#.247.232':139
'22#.#.26.248':139
'22#.#.73.245':139
'22#.#.19.211':139
'22#.0.7.3':445
'22#.#.149.135':445
'22#.#.181.209':445
'22#.#.140.35':445
'22#.#.106.144':445
'22#.#.144.153':139
'22#.#.181.24':139
'22#.0.36.70':139
'22#.0.60.83':139
'22#.0.7.155':139
'22#.0.2.158':139
'22#.#.175.132':139
'22#.#.38.252':139
'22#.#.132.64':139
'22#.#.63.164':139
'22#.0.65.63':139
'22#.#.63.164':445
'22#.0.65.63':445
'22#.0.36.70':445
'22#.0.60.83':445
'22#.#.181.24':445
'22#.#.144.153':445
'22#.#.73.245':445
'22#.#.38.252':445
'22#.#.132.64':445
'22#.#.175.132':445
'22#.0.2.158':445
'22#.#.12.217':445
'22#.#.110.59':445
'22#.#.157.67':445
'22#.#.65.182':445
'22#.#.67.156':445
'22#.#.208.195':445
'22#.0.7.155':445
'22#.0.91.57':445
'22#.#.170.101':445
'22#.#.31.170':445
'22#.#.103.84':445
'22#.0.2.253':445
'22#.0.135.8':445
'22#.#.188.92':445
'22#.#.17.163':445
'22#.#.179.243':445
'22#.#.140.113':445
'22#.0.150.1':445
'22#.#.98.191':445
'22#.0.73.38':445
'22#.#.247.72':445
'22#.#.158.91':445
'22#.#.168.160':445
'22#.#.22.160':445
'22#.0.54.3':445
'22#.0.80.75':445
'22#.#.213.85':445
'22#.#.213.59':445
'22#.#.29.201':445
'22#.#.60.110':445
'22#.0.52.0':445
'22#.#.217.244':445
'22#.0.9.76':139
'22#.#.187.72':139
'22#.#.173.62':139
'22#.0.76.19':139
'22#.#.143.31':139
'22#.#.31.228':139
'22#.#.18.111':139
'22#.0.52.70':139
'22#.#.101.11':139
'22#.#.48.161':139
'22#.#.86.242':139
'22#.#.167.242':139
'22#.#.207.238':139
'22#.#.27.164':139
'22#.#.235.251':139
'22#.#.27.240':139
'22#.0.95.11':139
'22#.0.40.53':139
'22#.#.64.116':139
'22#.#.111.152':139
'22#.#.220.25':139
'22#.0.54.3':139
'22#.#.168.160':139
'22#.#.213.85':139
'22#.#.231.203':139
'22#.0.80.75':139
'22#.#.60.110':139
'22#.#.213.59':139
'22#.#.217.244':139
'22#.#.22.160':139
'22#.0.52.0':139
'22#.#.139.73':139
'22#.#.150.222':139
'22#.0.30.7':139
'22#.#.19.172':445
'22#.#.144.87':445
'22#.0.75.56':445
'22#.#.28.183':139
'22#.#.73.114':139
'22#.0.41.38':139
'22#.#.128.37':139
'22#.#.36.218':139
'22#.#.128.37':445
'22#.#.36.218':445
'22#.0.30.7':445
'22#.0.150.1':139
'22#.#.150.222':445
'22#.#.139.73':445
'22#.#.231.203':445
'22#.#.73.114':445
'22#.0.41.38':445
'22#.#.28.183':445
'22#.#.140.113':139
'22#.#.179.243':139
'22#.#.188.92':139
'22#.#.17.163':139
'22#.#.29.201':139
'22#.#.158.91':139
'22#.#.247.72':139
'22#.#.98.191':139
'22#.0.73.38':139
'22#.0.2.253':139
'22#.0.135.8':139
'22#.#.208.195':139
'22#.#.175.44':445
'22#.#.230.113':445
'22#.#.109.77':445
'22#.#.232.73':445
'22#.0.183.8':445
'22#.#.138.195':445
'22#.#.75.244':445
'22#.#.176.122':445
'22#.#.69.230':445
'22#.#.104.70':445
'22#.0.45.32':445
'22#.#.22.168':139
'22#.#.28.163':139
'22#.#.154.124':139
'22#.#.171.131':139
'22#.#.239.154':139
'22#.#.84.185':139
'22#.#.74.146':445
'22#.#.184.188':139
'22#.#.30.217':139
'22#.0.60.14':139
'22#.#.114.54':445
'22#.#.155.239':445
'22#.#.99.129':445
'22#.#.90.165':445
'22#.0.25.69':445
'22#.#.56.121':445
'22#.#.141.35':445
'22#.#.129.37':445
'22#.0.2.155':445
'22#.0.236.2':445
'22#.#.15.133':445
'22#.#.12.100':445
'22#.#.75.249':445
'22#.0.29.67':445
'22#.#.174.216':445
'22#.#.13.229':445
'22#.#.194.54':445
'22#.0.32.91':445
'22#.#.30.253':445
'22#.#.127.45':445
'22#.#.140.60':445
'22#.0.29.67':139
'22#.#.12.100':139
'22#.#.13.229':139
'22#.#.75.244':139
'22#.#.174.216':139
'22#.#.30.253':139
'22#.#.194.54':139
'22#.#.140.60':139
'22#.#.75.249':139
'22#.#.127.45':139
'22#.#.138.195':139
'22#.0.183.8':139
'22#.#.109.77':139
'22#.#.232.73':139
'22#.#.74.146':139
'22#.0.45.32':139
'22#.#.104.70':139
'22#.#.176.122':139
'22#.#.69.230':139
'22#.#.175.44':139
'22#.#.230.113':139
'22#.#.54.236':139
'22#.0.96.66':139
'22#.#.229.15':139
'22#.#.141.35':139
'22#.#.118.165':139
'22#.#.153.215':139
'22#.#.140.127':139
'22#.#.236.17':139
'22#.#.178.189':139
'22#.0.64.0':139
'22#.#.56.121':139
'22#.0.25.69':139
'22#.#.99.129':139
'22#.#.90.165':139
'22#.0.32.91':139
'22#.#.15.133':139
'22#.0.236.2':139
'22#.#.129.37':139
'22#.0.2.155':139
'22#.#.114.54':139
'22#.#.155.239':139
'22#.#.118.165':445
'22#.#.159.103':445
'22#.#.241.227':445
'22#.#.102.243':445
'22#.0.0.122':445
'22#.#.22.226':445
'22#.0.2.152':445
'22#.0.43.14':445
'22#.0.59.38':445
'22#.0.42.89':445
'22#.0.39.42':445
'22#.#.122.84':445
'22#.#.56.214':139
'22#.#.249.214':139
'22#.#.105.51':139
'22#.0.2.152':139
'22#.0.43.14':139
'22#.#.225.174':139
'22#.#.83.116':139
'22#.#.98.235':139
'22#.#.34.118':139
'22#.0.29.74':139
'22#.#.67.156':139
'22#.#.157.67':139
'22#.#.65.182':139
'22#.0.7.3':139
'22#.#.149.135':139
'22#.#.31.170':139
'22#.0.91.57':139
'22#.#.170.101':139
'22#.#.12.217':139
'22#.#.110.59':139
'22#.#.181.209':139
'22#.#.34.118':445
'22#.0.29.74':445
'22#.#.249.214':445
'22#.#.105.51':445
'22#.#.56.214':445
'22#.#.140.35':139
'22#.#.106.144':139
'22#.#.83.116':445
'22#.#.98.235':445
'22#.#.225.174':445
'22#.0.60.14':445
'22#.#.184.188':445
'22#.#.30.217':445
'22#.#.22.168':445
'22#.#.28.163':445
'22#.#.175.44':9988
'22#.#.230.113':9988
'22#.#.232.73':9988
'22#.#.84.185':445
'22#.0.183.8':9988
'22#.#.154.124':445
'22#.#.178.189':445
'22#.0.64.0':445
'22#.0.96.66':445
'22#.#.229.15':445
'22#.#.54.236':445
'22#.#.171.131':445
'22#.#.239.154':445
'22#.#.140.127':445
'22#.#.236.17':445
'22#.#.153.215':445
'22#.#.22.226':139
'22#.#.102.243':139
'22#.0.0.122':139
'22#.#.30.217':9988
'22#.#.122.84':139
'22#.0.39.42':139
'22#.0.59.38':139
'22#.0.42.89':139
'22#.#.159.103':139
'22#.#.241.227':139
'22#.#.229.15':9988
'22#.#.75.249':9988
'22#.#.194.54':9988
'22#.#.138.195':9988
'22#.#.69.230':9988
'22#.#.176.122':9988
'22#.#.141.35':9988
'22#.#.118.165':9988
'22#.#.129.37':9988
'22#.0.25.69':9988
'22#.#.99.129':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней