Trojan.Starman.5889

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##0.215.200':445
'65.##0.194.132':445
'65.##0.113.187':445
'65.#80.80.2':445
'65.##0.86.228':445
'65.##0.104.246':445
'65.##0.149.157':445
'65.##0.72.230':445
'65.##0.171.18':445
'65.##0.122.153':445
'65.##0.63.42':445
'65.##0.236.215':445
'65.##0.147.47':139
'65.##0.160.136':445
'65.##0.164.90':445
'65.##0.50.189':445
'65.##0.154.50':445
'65.##0.5.191':445
'65.##0.193.1':445
'65.##0.78.163':445
'65.##0.183.66':445
'65.##0.246.95':445
'65.##0.161.74':445
'65.##0.114.183':445
'65.##0.5.239':445
'65.##0.138.19':445
'65.##0.85.156':445
'65.##0.229.111':445
'65.##0.225.137':445
'65.##0.176.4':445
'65.##0.96.153':445
'65.##0.110.149':445
'65.##0.81.110':445
'65.##0.61.96':445
'65.##0.83.156':445
'65.##0.144.77':445
'65.##0.156.13':445
'65.##0.216.17':445
'65.##0.216.17':139
'65.##0.83.156':139
'65.##0.61.96':139
'65.##0.156.13':139
'65.##0.144.77':139
'65.##0.161.74':139
'65.##0.78.163':139
'65.##0.225.137':139
'65.##0.246.95':139
'65.##0.96.153':139
'65.##0.72.230':139
'65.##0.171.18':139
'65.##0.194.132':139
'65.##0.86.228':139
'65.##0.104.246':139
'65.##0.81.110':139
'65.##0.176.4':139
'65.##0.149.157':139
'65.##0.110.149':139
'65.##0.11.239':139
'65.##0.61.210':139
'65.##0.231.194':139
'65.##0.247.231':139
'65.##0.76.63':139
'65.##0.51.22':139
'65.##0.63.199':139
'65.##0.51.238':139
'65.##0.111.238':139
'65.##0.118.169':139
'65.##0.85.156':139
'65.##0.229.111':139
'65.##0.183.66':139
'65.##0.114.183':139
'65.##0.5.239':139
'65.##0.48.171':139
'65.##0.16.160':139
'65.##0.138.19':139
'65.##0.171.121':139
'65.##0.110.140':139
'65.##0.10.158':139
'65.##0.171.132':139
'65.##0.73.93':139
'65.##0.120.117':139
'65.##0.12.64':139
'65.##0.18.100':139
'65.##0.27.174':139
'65.##0.108.67':139
'65.##0.142.197':139
'65.##0.23.179':139
'65.##0.122.47':139
'65.##0.218.176':139
'65.##0.34.220':139
'65.##0.14.169':139
'65.##0.4.167':139
'65.##0.32.95':139
'65.##0.194.37':139
'65.##0.104.162':139
'65.##0.151.66':445
'65.##0.19.249':445
'65.##0.235.159':445
'65.##0.65.235':445
'65.##0.235.151':445
'65.##0.45.18':445
'65.##0.160.61':445
'65.##0.162.67':445
'65.##0.6.162':445
'65.##0.254.213':445
'65.##0.93.249':139
'65.##0.26.94':139
'65.##0.25.100':139
'65.#80.9.70':139
'65.##0.118.26':139
'65.##0.160.183':139
'65.##0.18.219':445
'65.##0.159.125':139
'65.##0.187.194':139
'65.##0.63.199':445
'65.##0.147.47':445
'65.##0.111.238':445
'65.##0.51.22':445
'65.##0.18.219':139
'65.##0.65.235':139
'65.##0.151.66':139
'65.##0.254.213':139
'65.##0.235.159':139
'65.##0.51.238':445
'65.##0.16.160':445
'65.##0.118.169':445
'65.##0.171.121':445
'65.##0.48.171':445
'65.##0.231.194':445
'65.##0.61.210':445
'65.##0.76.63':445
'65.##0.247.231':445
'65.##0.11.239':445
'65.##0.201.225':139
'65.##0.50.233':139
'65.##0.129.91':139
'65.##0.150.129':139
'65.##0.23.199':139
'65.##0.154.243':139
'65.##0.73.210':139
'65.##0.93.198':139
'65.##0.243.151':139
'65.##0.91.162':139
'65.##0.162.67':139
'65.##0.6.162':139
'65.##0.19.249':139
'65.##0.235.151':139
'65.##0.45.18':139
'65.##0.186.101':139
'65.##0.162.242':139
'65.##0.160.61':139
'65.##0.169.133':139
'65.##0.215.200':139
'65.#80.32.4':139
'65.##0.59.156':445
'65.##0.2.153':139
'65.##0.239.88':139
'65.##0.191.79':445
'65.##0.152.59':445
'65.##0.80.152':445
'65.##0.172.37':445
'65.##0.245.235':445
'65.##0.8.247':139
'65.##0.174.172':139
'65.##0.189.173':139
'65.##0.237.20':139
'65.##0.1.155':139
'65.##0.69.153':139
'65.##0.65.14':139
'65.##0.70.101':139
'65.##0.59.153':139
'65.##0.92.72':139
'65.##0.193.9':445
'65.##0.53.209':445
'65.##0.225.159':445
'65.##0.146.215':445
'65.##0.224.214':445
'65.##0.84.252':445
'65.##0.154.199':445
'65.##0.64.80':445
'65.##0.70.41':445
'65.##0.125.254':445
'65.##0.143.30':445
'65.##0.122.69':445
'65.##0.90.81':445
'65.##0.29.127':445
'65.##0.53.230':445
'65.##0.123.101':445
'65.#80.36.4':445
'65.##0.189.76':445
'65.##0.35.169':445
'65.##0.35.169':139
'65.##0.123.101':139
'65.##0.53.230':139
'65.##0.189.76':139
'65.#80.36.4':139
'65.##0.146.215':139
'65.##0.193.9':139
'65.##0.125.254':139
'65.##0.225.159':139
'65.##0.122.69':139
'65.##0.172.37':139
'65.##0.245.235':139
'65.##0.59.156':139
'65.##0.191.79':139
'65.##0.152.59':139
'65.##0.29.127':139
'65.##0.143.30':139
'65.##0.80.152':139
'65.##0.90.81':139
'65.##0.61.69':139
'65.##0.226.60':139
'65.##0.57.218':139
'65.##0.36.17':139
'65.##0.72.99':139
'65.##0.139.90':139
'65.##0.177.106':139
'65.##0.97.89':139
'65.##0.88.43':139
'65.##0.58.230':139
'65.##0.64.80':139
'65.##0.70.41':139
'65.##0.53.209':139
'65.##0.224.214':139
'65.##0.84.252':139
'65.##0.62.117':139
'65.##0.172.177':139
'65.##0.154.199':139
'65.##0.225.127':139
'65.##0.45.37':139
'65.##0.119.21':139
'65.##0.122.56':139
'65.##0.36.122':139
'65.##0.108.140':139
'65.##0.158.86':139
'65.##0.162.17':445
'65.##0.91.108':139
'65.##0.55.91':139
'65.##0.162.17':139
'65.##0.97.89':9988
'65.##0.88.43':9988
'65.##0.154.199':9988
'65.##0.58.230':9988
'65.##0.237.20':9988
'65.##0.8.247':9988
'65.##0.2.153':9988
'65.##0.189.173':9988
'65.##0.69.153':9988
'65.##0.193.1':139
'65.##0.5.191':139
'65.##0.236.215':139
'65.##0.164.90':139
'65.##0.50.189':139
'65.##0.113.187':139
'65.#80.80.2':139
'65.##0.154.50':139
'65.##0.122.153':139
'65.##0.63.42':139
'65.##0.45.37':445
'65.##0.119.21':445
'65.##0.122.56':445
'65.##0.36.122':445
'65.##0.108.140':445
'65.##0.158.86':445
'65.##0.160.136':139
'65.##0.91.108':445
'65.##0.55.91':445
'65.##0.177.106':445
'65.##0.237.20':445
'65.##0.88.43':445
'65.##0.139.90':445
'65.##0.1.155':445
'65.##0.69.153':445
'65.##0.59.153':445
'65.##0.174.172':445
'65.##0.189.173':445
'65.##0.97.89':445
'65.##0.172.177':445
'65.##0.58.230':445
'65.##0.225.127':445
'65.##0.62.117':445
'65.##0.57.218':445
'65.##0.226.60':445
'65.##0.72.99':445
'65.##0.36.17':445
'65.##0.61.69':445
'65.##0.143.30':9988
'65.##0.125.254':9988
'65.##0.80.152':9988
'65.##0.122.69':9988
'65.##0.225.159':9988
'65.##0.53.209':9988
'65.##0.224.214':9988
'65.##0.146.215':9988
'65.##0.193.9':9988
'65.##0.29.127':9988
'65.##0.70.101':445
'65.##0.8.247':445
'65.##0.92.72':445
'65.##0.65.14':445
'65.##0.2.153':445
'65.##0.59.156':9988
'65.##0.152.59':9988
'65.##0.239.88':445
'65.#80.32.4':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней