Trojan.Starman.5651

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14#.#46.93.141':139
'14#.#46.209.233':139
'14#.#46.171.202':445
'14#.#46.139.245':445
'14#.#46.210.92':139
'14#.#46.92.225':139
'14#.#46.251.92':139
'14#.#46.62.201':139
'14#.#46.224.180':139
'14#.#46.139.181':445
'14#.#46.1.211':445
'14#.#46.152.66':445
'14#.#46.18.95':445
'14#.#46.106.162':445
'14#.#46.17.190':445
'14#.#46.3.198':445
'14#.#46.58.91':445
'14#.#46.144.41':445
'14#.#46.99.134':139
'14#.#46.159.143':139
'14#.#46.40.114':139
'14#.#46.91.222':139
'14#.#46.203.251':139
'14#.#46.99.40':139
'14#.#46.15.39':139
'14#.#46.230.94':139
'14#.#46.13.180':139
'14#.#46.155.188':139
'14#.#46.114.212':139
'14#.#46.157.241':139
'14#.#46.172.58':139
'14#.#46.84.187':139
'14#.#46.79.109':139
'14#.#46.97.250':139
'14#.#46.30.97':139
'14#.#46.151.54':139
'14#.#46.250.151':139
'14#.#46.21.41':445
'14#.#46.66.108':139
'14#.#46.92.131':139
'14#.#46.108.254':139
'14#.#46.108.19':139
'14#.#46.21.41':139
'14#.#46.139.181':139
'14#.#46.1.211':139
'14#.#46.152.66':139
'14#.#46.18.95':139
'14#.#46.144.88':139
'14#.#46.112.170':139
'14#.#46.17.77':9988
'14#.#46.88.163':139
'14#.#46.171.182':139
'14#.#46.145.125':139
'14#.#46.187.230':139
'14#.#46.154.144':139
'14#.#46.47.154':139
'14#.#46.139.245':139
'14#.#46.108.254':445
'14#.#46.108.19':445
'14#.#46.145.125':445
'14#.#46.154.144':445
'14#.#46.144.88':445
'14#.#46.112.170':445
'14#.#46.92.131':445
'14#.#46.171.182':445
'14#.#46.88.163':445
'14#.#46.17.190':139
'14#.#46.106.162':139
'14#.#46.3.198':139
'14#.#46.171.202':139
'14#.#46.58.91':139
'14#.#46.66.108':445
'14#.#46.187.230':445
'14#.#46.144.41':139
'14#.#46.47.154':445
'14#.#46.235.23':139
'14#.#46.230.94':445
'14#.#46.235.23':445
'14#.#46.155.188':445
'14#.#46.15.39':445
'14#.#46.199.107':445
'14#.#46.213.38':445
'14#.#46.67.210':445
'14#.#46.242.136':445
'14#.#46.49.242':445
'14#.#46.30.97':445
'14#.#46.91.222':445
'14#.#46.250.151':445
'14#.#46.97.250':445
'14#.#46.40.114':445
'14#.#46.159.143':445
'14#.#46.13.180':445
'14#.#46.99.40':445
'14#.#46.203.251':445
'14#.#46.160.67':445
'14#.#46.198.141':445
'14#.#46.248.197':445
'14#.#46.29.239':445
'14#.#46.185.201':445
'14#.#46.26.81':445
'14#.#46.88.187':445
'14#.#46.174.175':445
'14#.#46.171.223':445
'14#.#46.100.117':445
'14#.#46.34.4':445
'14#.#46.163.73':445
'14#.#46.185.189':445
'14#.#46.215.225':445
'14#.#46.50.202':445
'14#.#46.188.163':445
'14#.#46.143.32':445
'14#.#46.64.239':445
'14#.#46.95.140':445
'14#.#46.151.54':445
'14#.#46.64.239':139
'14#.#46.163.73':139
'14#.#46.95.140':139
'14#.#46.50.202':139
'14#.#46.188.163':139
'14#.#46.185.201':139
'14#.#46.198.141':139
'14#.#46.143.32':139
'14#.#46.29.239':139
'14#.#46.49.242':139
'14#.#46.213.38':139
'14#.#46.199.107':139
'14#.#46.242.136':139
'14#.#46.67.210':139
'14#.#46.215.225':139
'14#.#46.34.4':139
'14#.#46.160.67':139
'14#.#46.185.189':139
'14#.#46.248.197':139
'14#.#46.251.92':445
'14#.#46.99.134':445
'14#.#46.224.180':445
'14#.#46.92.225':445
'14#.#46.172.58':445
'14#.#46.157.241':445
'14#.#46.79.109':445
'14#.#46.84.187':445
'14#.#46.114.212':445
'14#.#46.100.117':139
'14#.#46.88.187':139
'14#.#46.26.81':139
'14#.#46.171.223':139
'14#.#46.174.175':139
'14#.#46.62.201':445
'14#.#46.210.92':445
'14#.#46.93.141':445
'14#.#46.209.233':445
'14#.#46.128.51':9988
'14#.#46.101.186':139
'14#.#46.160.190':139
'14#.#46.175.235':139
'14#.#46.135.175':139
'14#.#46.227.78':445
'14#.#46.184.196':445
'14#.#46.151.131':445
'14#.#46.185.13':445
'14#.#46.79.8':445
'14#.#46.229.101':139
'14#.#46.225.248':139
'14#.#46.26.72':139
'14#.#46.224.163':139
'14#.#46.123.214':139
'14#.#46.39.150':139
'14#.#46.93.215':139
'14#.#46.43.238':139
'14#.#46.177.43':139
'14#.#46.47.44':445
'14#.#46.66.58':445
'14#.#46.26.191':445
'14#.#46.123.235':445
'14#.#46.143.254':445
'14#.#46.96.121':445
'14#.#46.72.238':445
'14#.#46.45.137':445
'14#.#46.111.59':445
'14#.#46.25.158':445
'14#.#46.17.77':445
'14#.#46.70.129':445
'14#.#46.128.51':445
'14#.#46.212.134':445
'14#.#46.237.132':445
'14#.#46.18.103':445
'14#.#46.37.21':445
'14#.#46.28.70':445
'14#.#46.110.100':445
'14#.#46.37.132':139
'14#.#46.28.70':139
'14#.#46.110.100':139
'14#.#46.70.129':139
'14#.#46.237.132':139
'14#.#46.18.103':139
'14#.#46.143.254':139
'14#.#46.66.58':139
'14#.#46.37.21':139
'14#.#46.123.235':139
'14#.#46.227.78':139
'14#.#46.184.196':139
'14#.#46.79.8':139
'14#.#46.185.13':139
'14#.#46.151.131':139
'14#.#46.128.51':139
'14#.#46.17.77':139
'14#.#46.47.44':139
'14#.#46.212.134':139
'14#.#46.26.191':139
'14#.#46.194.157':139
'14#.#46.84.254':139
'14#.#46.1.195':139
'14#.#46.166.195':139
'14#.#46.27.85':139
'14#.#46.139.225':139
'14#.#46.77.45':139
'14#.#46.142.27':139
'14#.#46.225.141':139
'14#.#46.25.158':139
'14#.#46.72.238':139
'14#.#46.111.59':139
'14#.#46.96.121':139
'14#.#46.45.137':139
'14#.#46.51.151':139
'14#.#46.39.182':139
'14#.#46.50.66':139
'14#.#46.83.202':139
'14#.#46.83.202':445
'14#.#46.26.72':9988
'14#.#46.110.100':9988
'14#.#46.37.21':9988
'14#.#46.224.163':9988
'14#.#46.111.59':9988
'14#.#46.18.103':9988
'14#.#46.83.202':9988
'14#.#46.194.157':9988
'14#.#46.45.137':9988
'14#.#46.227.78':9988
'14#.#46.25.158':9988
'14#.#46.212.134':9988
'14#.#46.66.58':9988
'14#.#46.28.70':9988
'14#.#46.123.235':9988
'14#.#46.72.238':9988
'14#.#46.47.44':9988
'14#.#46.96.121':9988
'14#.#46.51.151':9988
'14#.#46.143.254':9988
'14#.#46.27.85':9988
'14#.#46.160.190':9988
'14#.#46.177.43':9988
'14#.#46.37.132':9988
'14#.#46.39.182':9988
'14#.#46.77.45':9988
'14#.#46.1.195':9988
'14#.#46.185.13':9988
'14#.#46.70.129':9988
'14#.#46.50.66':9988
'14#.#46.84.254':9988
'14#.#46.142.27':9988
'14#.#46.184.196':9988
'14#.#46.135.175':9988
'14#.#46.101.186':9988
'14#.#46.43.238':9988
'14#.#46.39.150':9988
'14#.#46.26.191':9988
'14#.#46.84.254':445
'14#.#46.224.163':445
'14#.#46.139.225':445
'14#.#46.37.132':445
'14#.#46.229.101':445
'14#.#46.225.248':445
'14#.#46.123.214':445
'14#.#46.142.27':445
'14#.#46.26.72':445
'14#.#46.166.195':445
'14#.#46.39.182':445
'14#.#46.50.66':445
'14#.#46.194.157':445
'14#.#46.51.151':445
'14#.#46.27.85':445
'14#.#46.225.141':445
'14#.#46.1.195':445
'14#.#46.77.45':445
'14#.#46.43.238':445
'14#.#46.166.195':9988
'14#.#46.229.101':9988
'14#.#46.237.132':9988
'14#.#46.139.225':9988
'14#.#46.225.141':9988
'14#.#46.175.235':9988
'14#.#46.93.215':9988
'14#.#46.225.248':9988
'14#.#46.123.214':9988
'14#.#46.39.150':445
'14#.#46.93.215':445
'14#.#46.175.235':445
'14#.#46.160.190':445
'14#.#46.177.43':445
'14#.#46.151.131':9988
'14#.#46.79.8':9988
'14#.#46.101.186':445
'14#.#46.135.175':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней