Trojan.Starman.5687

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#96.7.100':139
'20#.#96.183.225':445
'20#.#96.52.67':139
'20#.#96.113.147':139
'20#.#96.32.40':445
'20#.#96.58.197':445
'20#.#96.179.58':445
'20#.#96.145.119':445
'20#.#96.196.102':445
'20#.#96.51.42':139
'20#.#96.119.30':139
'20#.#96.134.83':139
'20#.#96.21.220':139
'20#.#96.138.98':139
'20#.#96.128.199':139
'20#.#96.72.169':139
'20#.#96.210.83':139
'20#.#96.40.32':139
'20#.#96.25.244':139
'20#.#96.233.152':445
'20#.#96.92.57':445
'20#.#96.179.193':445
'20#.#96.152.179':445
'20#.#96.160.124':445
'20#.#96.29.24':445
'20#.#96.126.230':445
'20#.#96.71.7':445
'20#.#96.103.212':445
'20#.#96.7.225':445
'20#.#96.59.25':445
'20#.#96.121.38':445
'20#.#96.71.22':445
'20#.#96.42.24':445
'20#.#96.180.34':445
'20#.#96.118.200':445
'20#.#96.217.120':445
'20#.#96.73.180':445
'20#.#96.203.158':445
'20#.#96.203.158':139
'20#.#96.118.200':139
'20#.#96.180.34':139
'20#.#96.73.180':139
'20#.#96.217.120':139
'20#.#96.152.179':139
'20#.#96.233.152':139
'20#.#96.7.225':139
'20#.#96.179.193':139
'20#.#96.121.38':139
'20#.#96.145.119':139
'20#.#96.196.102':139
'20#.#96.183.225':139
'20#.#96.32.40':139
'20#.#96.58.197':139
'20#.#96.42.24':139
'20#.#96.59.25':139
'20#.#96.179.58':139
'20#.#96.71.22':139
'20#.#96.107.9':139
'20#.#96.211.151':139
'20#.#96.123.148':139
'20#.#96.227.226':139
'20#.#96.122.214':139
'20#.#96.50.76':139
'20#.#96.198.111':139
'20#.#96.98.2':139
'20#.#96.29.44':139
'20#.#96.254.47':139
'20#.#96.71.7':139
'20#.#96.103.212':139
'20#.#96.92.57':139
'20#.#96.160.124':139
'20#.#96.29.24':139
'20#.#96.221.142':139
'20#.#96.247.6':139
'20#.#96.126.230':139
'20#.#96.192.19':139
'20#.#96.192.19':445
'20#.#96.1.155':139
'20#.#96.132.181':139
'20#.#96.243.131':139
'20#.#96.117.243':139
'20#.#96.89.252':139
'20#.#96.129.59':139
'20#.#96.161.128':139
'20#.#96.45.90':139
'20#.#96.59.45':139
'20#.#96.229.240':139
'20#.#96.83.170':139
'20#.#96.51.146':139
'20#.#96.75.162':139
'20#.#96.155.169':139
'20#.#96.63.14':139
'20#.#96.203.204':139
'20#.#96.120.105':139
'20#.#96.112.85':139
'20#.#96.210.194':139
'20#.#96.223.215':139
'20#.#96.191.196':139
'20#.#96.117.195':139
'20#.#96.71.179':139
'20#.#96.97.144':139
'20#.#96.35.224':139
'20#.#96.214.158':139
'20#.#96.185.172':139
'20#.#96.183.237':139
'20#.#96.17.96':139
'20#.#96.203.8':139
'20#.#96.158.229':139
'20#.#96.154.22':139
'20#.#96.54.209':139
'20#.#96.9.168':139
'20#.#96.222.166':139
'20#.#96.87.213':139
'20#.#96.54.244':139
'20#.#96.180.158':139
'20#.#96.21.220':445
'20#.#96.138.98':445
'20#.#96.50.76':445
'20#.#96.198.111':445
'20#.#96.119.30':445
'20#.#96.40.32':445
'20#.#96.25.244':445
'20#.#96.134.83':445
'20#.#96.128.199':445
'20#.#96.29.44':445
'20#.#96.254.47':445
'20#.#96.123.148':445
'20#.#96.221.142':445
'20#.#96.247.6':445
'20#.#96.227.226':445
'20#.#96.122.214':445
'20#.#96.98.2':445
'20#.#96.107.9':445
'20#.#96.211.151':445
'20#.#96.231.48':139
'20#.#96.124.230':139
'20#.#96.131.174':139
'20#.#96.129.186':139
'20#.#96.144.124':139
'20#.#96.79.154':139
'20#.#96.233.209':139
'20#.#96.254.190':139
'20#.#96.250.91':139
'20#.#96.145.70':139
'20#.#96.51.42':445
'20#.#96.52.67':445
'20#.#96.72.169':445
'20#.#96.210.83':445
'20#.#96.113.147':445
'20#.#96.240.131':139
'20#.#96.38.240':139
'20#.#96.7.100':445
'20#.#96.131.192':139
'20#.#96.125.211':139
'20#.#96.218.172':445
'20#.#96.5.179':139
'20#.#96.59.79':139
'20#.#96.187.143':445
'20#.#96.34.199':445
'20#.#96.137.116':445
'20#.#96.83.57':445
'20#.#96.62.62':445
'20#.#96.120.78':139
'20#.#96.183.124':139
'20#.#96.99.184':139
'20#.#96.169.225':139
'20#.#96.124.235':139
'20#.#96.98.129':139
'20#.#96.124.77':139
'20#.#96.77.218':139
'20#.#96.122.76':139
'20#.#96.105.51':139
'20#.#96.53.41':445
'20#.#96.89.156':445
'20#.#96.182.219':445
'20#.#96.80.230':445
'20#.#96.206.250':445
'20#.#96.196.181':445
'20#.#96.55.174':445
'20#.#96.190.85':445
'20#.#96.56.119':445
'20#.#96.178.61':445
'20#.#96.22.93':445
'20#.#96.251.136':445
'20#.#96.23.62':445
'20#.#96.102.23':445
'20#.#96.40.141':445
'20#.#96.10.156':445
'20#.#96.124.204':445
'20#.#96.41.175':445
'20#.#96.64.76':445
'20#.#96.64.76':139
'20#.#96.10.156':139
'20#.#96.40.141':139
'20#.#96.41.175':139
'20#.#96.124.204':139
'20#.#96.80.230':139
'20#.#96.53.41':139
'20#.#96.178.61':139
'20#.#96.182.219':139
'20#.#96.251.136':139
'20#.#96.187.143':139
'20#.#96.137.116':139
'20#.#96.218.172':139
'20#.#96.83.57':139
'20#.#96.34.199':139
'20#.#96.102.23':139
'20#.#96.22.93':139
'20#.#96.62.62':139
'20#.#96.23.62':139
'20#.#96.84.76':139
'20#.#96.117.218':139
'20#.#96.250.170':139
'20#.#96.75.250':139
'20#.#96.112.181':139
'20#.#96.113.82':139
'20#.#96.62.164':139
'20#.#96.149.45':139
'20#.#96.140.16':139
'20#.#96.37.95':139
'20#.#96.190.85':139
'20#.#96.56.119':139
'20#.#96.89.156':139
'20#.#96.206.250':139
'20#.#96.196.181':139
'20#.#96.29.173':139
'20#.#96.2.226':139
'20#.#96.55.174':139
'20#.#96.230.171':139
'20#.#96.230.171':445
'20#.#96.150.192':139
'20#.#96.61.153':139
'20#.#96.75.151':139
'20#.#96.111.140':139
'20#.#96.33.22':139
'20#.#96.23.67':139
'20#.#96.71.6':139
'20#.#96.99.44':139
'20#.#96.179.222':139
'20#.#96.151.33':139
'20#.#96.5.179':9988
'20#.#96.125.211':9988
'20#.#96.105.51':9988
'20#.#96.124.77':9988
'20#.#96.13.125':139
'20#.#96.3.133':139
'20#.#96.208.205':139
'20#.#96.216.13':139
'20#.#96.132.215':139
'20#.#96.33.22':445
'20#.#96.99.44':445
'20#.#96.150.192':445
'20#.#96.61.153':445
'20#.#96.179.222':445
'20#.#96.29.60':445
'20#.#96.215.3':445
'20#.#96.23.67':445
'20#.#96.71.6':445
'20#.#96.111.140':445
'20#.#96.13.125':445
'20#.#96.216.13':445
'20#.#96.29.60':139
'20#.#96.215.3':139
'20#.#96.132.215':445
'20#.#96.151.33':445
'20#.#96.75.151':445
'20#.#96.3.133':445
'20#.#96.208.205':445
'20#.#96.169.225':445
'20#.#96.124.235':445
'20#.#96.113.82':445
'20#.#96.62.164':445
'20#.#96.183.124':445
'20#.#96.122.76':445
'20#.#96.105.51':445
'20#.#96.99.184':445
'20#.#96.98.129':445
'20#.#96.140.16':445
'20#.#96.37.95':445
'20#.#96.250.170':445
'20#.#96.29.173':445
'20#.#96.2.226':445
'20#.#96.75.250':445
'20#.#96.112.181':445
'20#.#96.149.45':445
'20#.#96.84.76':445
'20#.#96.117.218':445
'20#.#96.2.226':9988
'20#.#96.37.95':9988
'20#.#96.206.250':9988
'20#.#96.190.85':9988
'20#.#96.250.170':9988
'20#.#96.113.82':9988
'20#.#96.124.235':9988
'20#.#96.75.250':9988
'20#.#96.84.76':9988
'20#.#96.89.156':9988
'20#.#96.120.78':445
'20#.#96.5.179':445
'20#.#96.124.77':445
'20#.#96.77.218':445
'20#.#96.59.79':445
'20#.#96.218.172':9988
'20#.#96.53.41':9988
'20#.#96.125.211':445
'20#.#96.187.143':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней