Trojan.Starman.5675

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##0.91.123':139
'62.##0.78.32':139
'62.#20.1.47':139
'62.#20.10.3':139
'62.##0.169.252':139
'62.##0.208.47':139
'62.##0.22.200':139
'62.##0.144.40':139
'62.#20.17.1':139
'62.##0.209.73':139
'62.##0.226.191':139
'62.##0.166.226':139
'62.##0.121.144':139
'62.##0.161.30':139
'62.##0.65.29':139
'62.##0.102.199':139
'62.#20.8.95':139
'62.##0.13.173':139
'62.##0.51.195':139
'62.##0.182.128':139
'62.##0.72.73':139
'62.##0.23.89':445
'62.##0.83.76':445
'62.##0.79.252':445
'62.##0.84.82':445
'62.#20.4.64':445
'62.##0.22.230':445
'62.##0.81.199':445
'62.##0.99.143':445
'62.##0.231.30':445
'62.##0.200.165':445
'62.#20.11.1':445
'62.##0.127.35':445
'62.##0.91.30':445
'62.##0.17.252':139
'62.##0.23.169':445
'62.##0.79.20':445
'62.##0.24.21':445
'62.##0.8.107':445
'62.##0.229.27':445
'62.##0.212.228':445
'62.##0.148.118':445
'62.##0.217.147':445
'62.##0.119.41':445
'62.##0.126.122':139
'62.##0.138.95':139
'62.##0.197.95':445
'62.##0.217.163':445
'62.##0.185.150':445
'62.##0.111.153':445
'62.##0.105.18':445
'62.##0.148.118':139
'62.##0.217.147':139
'62.##0.119.41':139
'62.##0.14.23':445
'62.##0.41.96':445
'62.##0.197.95':139
'62.##0.217.163':139
'62.##0.185.150':139
'62.##0.111.153':139
'62.##0.105.18':139
'62.##0.126.122':445
'62.##0.23.89':139
'62.##0.83.76':139
'62.##0.79.252':139
'62.##0.84.82':139
'62.#20.4.64':139
'62.##0.22.230':139
'62.##0.81.199':139
'62.##0.99.143':139
'62.##0.231.30':139
'62.##0.200.165':139
'62.#20.11.1':139
'62.##0.127.35':139
'62.##0.91.30':139
'62.##0.138.95':445
'62.##0.23.169':139
'62.##0.79.20':139
'62.##0.24.21':139
'62.##0.8.107':139
'62.##0.229.27':139
'62.##0.212.228':139
'62.##0.161.30':445
'62.##0.68.199':139
'62.##0.84.148':139
'62.##0.198.236':139
'62.##0.48.138':139
'62.##0.44.127':139
'62.##0.255.229':139
'62.##0.20.132':139
'62.##0.125.150':139
'62.##0.154.149':139
'62.##0.194.115':139
'62.##0.48.26':139
'62.##0.160.250':139
'62.#20.9.17':139
'62.##0.213.234':139
'62.##0.16.214':139
'62.##0.20.187':139
'62.##0.64.204':139
'62.##0.85.233':139
'62.##0.99.161':139
'62.##0.239.254':139
'62.##0.248.46':139
'62.##0.148.57':139
'62.#20.4.5':139
'62.##0.57.101':139
'62.##0.78.49':139
'62.##0.122.24':139
'62.##0.101.139':139
'62.##0.255.233':139
'62.##0.139.115':139
'62.##0.198.81':139
'62.##0.39.27':139
'62.##0.13.83':139
'62.##0.224.211':139
'62.##0.83.57':139
'62.##0.125.46':139
'62.##0.16.254':139
'62.##0.75.137':139
'62.##0.154.114':139
'62.##0.172.111':139
'62.#20.6.42':139
'62.##0.73.112':139
'62.##0.78.32':445
'62.#20.17.1':445
'62.##0.91.123':445
'62.##0.169.252':445
'62.#20.1.47':445
'62.##0.22.200':445
'62.##0.72.73':445
'62.##0.208.47':445
'62.##0.209.73':445
'62.##0.144.40':445
'62.##0.166.226':445
'62.##0.51.195':445
'62.##0.226.191':445
'62.##0.65.29':445
'62.##0.121.144':445
'62.#20.8.95':445
'62.#20.10.3':445
'62.##0.102.199':445
'62.##0.182.128':445
'62.##0.13.173':445
'62.##0.17.252':445
'62.##0.174.174':445
'62.##0.31.159':445
'62.##0.230.222':445
'62.##0.66.250':445
'62.##0.230.253':445
'62.##0.74.95':445
'62.##0.46.103':445
'62.##0.130.60':445
'62.##0.151.105':445
'62.##0.131.62':445
'62.##0.174.174':139
'62.##0.31.159':139
'62.##0.230.222':139
'62.##0.66.250':139
'62.##0.230.253':139
'62.##0.74.95':139
'62.##0.46.103':139
'62.##0.130.60':139
'62.##0.151.105':139
'62.##0.131.62':139
'62.##0.241.163':445
'62.##0.41.238':445
'62.##0.32.131':445
'62.##0.16.233':445
'62.##0.45.64':445
'62.##0.102.83':445
'62.##0.21.25':445
'62.##0.57.217':445
'62.##0.121.175':445
'62.##0.18.155':445
'62.##0.37.152':445
'62.##0.157.222':139
'62.##0.133.139':139
'62.##0.222.202':139
'62.##0.83.85':139
'62.##0.82.237':139
'62.##0.123.64':139
'62.##0.87.233':139
'62.##0.80.174':139
'62.##0.160.177':139
'62.##0.21.244':139
'62.##0.13.109':445
'62.##0.113.108':445
'62.##0.202.4':445
'62.##0.108.132':445
'62.##0.98.243':445
'62.##0.132.99':445
'62.##0.24.41':445
'62.##0.72.120':445
'62.##0.48.18':445
'62.##0.169.174':445
'62.##0.168.169':445
'62.##0.74.101':445
'62.##0.131.74':445
'62.##0.109.160':445
'62.##0.95.77':445
'62.##0.194.127':445
'62.##0.79.93':445
'62.##0.142.93':445
'62.##0.110.82':445
'62.##0.236.130':445
'62.##0.122.70':445
'62.##0.109.160':139
'62.##0.74.101':139
'62.##0.194.127':139
'62.##0.13.109':139
'62.##0.95.77':139
'62.##0.110.82':139
'62.##0.79.93':139
'62.##0.122.70':139
'62.##0.131.74':139
'62.##0.236.130':139
'62.##0.41.238':139
'62.##0.45.64':139
'62.##0.16.233':139
'62.##0.18.155':139
'62.##0.32.131':139
'62.##0.21.25':139
'62.##0.57.217':139
'62.##0.121.175':139
'62.##0.102.83':139
'62.##0.37.152':139
'62.##0.142.93':139
'62.##0.35.43':139
'62.##0.47.35':139
'62.##0.55.223':139
'62.##0.255.222':139
'62.##0.234.64':139
'62.##0.182.75':139
'62.##0.205.14':139
'62.##0.115.233':139
'62.##0.69.30':139
'62.##0.247.93':139
'62.##0.113.108':139
'62.##0.202.4':139
'62.##0.108.132':139
'62.##0.98.243':139
'62.##0.132.99':139
'62.##0.24.41':139
'62.##0.72.120':139
'62.##0.48.18':139
'62.##0.169.174':139
'62.##0.168.169':139
'62.##0.255.222':445
'62.##0.129.109':139
'62.##0.241.163':139
'62.##0.126.151':139
'62.##0.106.230':139
'62.##0.67.37':139
'62.##0.217.26':445
'62.##0.92.53':445
'62.##0.177.217':445
'62.##0.14.23':139
'62.##0.41.96':139
'62.##0.234.252':139
'62.##0.35.146':139
'62.##0.148.22':139
'62.##0.17.138':139
'62.##0.22.39':139
'62.##0.109.215':139
'62.##0.12.67':139
'62.##0.181.180':139
'62.##0.128.108':139
'62.##0.103.136':139
'62.##0.49.73':445
'62.##0.181.180':445
'62.##0.109.215':445
'62.##0.103.136':445
'62.##0.35.146':445
'62.##0.128.108':445
'62.##0.126.151':445
'62.##0.129.109':445
'62.##0.67.37':445
'62.##0.12.67':445
'62.##0.106.230':445
'62.##0.46.165':445
'62.##0.3.133':445
'62.##0.120.214':445
'62.##0.226.106':445
'62.##0.24.135':445
'62.##0.148.22':445
'62.##0.234.252':445
'62.##0.22.39':445
'62.##0.76.162':445
'62.##0.17.138':445
'62.##0.133.139':445
'62.##0.160.177':445
'62.##0.157.222':445
'62.##0.82.237':445
'62.##0.222.202':445
'62.##0.87.233':445
'62.##0.32.131':9988
'62.##0.123.64':445
'62.##0.21.244':445
'62.##0.80.174':445
'62.##0.47.35':445
'62.##0.69.30':445
'62.##0.35.43':445
'62.##0.234.64':445
'62.##0.55.223':445
'62.##0.205.14':445
'62.##0.83.85':445
'62.##0.182.75':445
'62.##0.247.93':445
'62.##0.115.233':445
'62.##0.102.83':9988
'62.##0.49.73':139
'62.##0.226.106':139
'62.##0.92.53':139
'62.##0.177.217':139
'62.##0.217.26':139
'62.##0.3.133':139
'62.##0.76.162':139
'62.##0.46.165':139
'62.##0.24.135':139
'62.##0.120.214':139
'62.##0.168.169':9988
'62.##0.234.64':9988
'62.##0.74.101':9988
'62.##0.57.217':9988
'62.##0.109.160':9988
'62.##0.21.244':9988
'62.##0.133.139':9988
'62.##0.82.237':9988
'62.##0.205.14':9988
'62.##0.123.64':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней