Trojan.Starman.5925

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#7.104.114':445
'22#.#7.55.160':445
'22#.#7.143.201':445
'22#.#7.255.15':445
'22#.#7.2.138':445
'22#.#7.183.241':445
'22#.#7.59.51':445
'22#.#7.22.136':445
'22#.#7.89.58':445
'22#.#7.218.183':445
'22#.#7.233.218':445
'22#.#7.200.42':445
'22#.#7.127.211':445
'22#.#7.218.225':445
'22#.#7.13.55':445
'22#.#7.106.116':445
'22#.#7.63.24':445
'22#.#7.31.11':445
'22#.#7.35.82':445
'22#.#7.27.194':445
'22#.#7.111.129':445
'22#.#7.248.189':445
'22#.#7.71.249':445
'22#.#7.53.104':445
'22#.#7.63.64':445
'22#.#7.214.183':445
'22#.#7.63.64':139
'22#.#7.183.142':445
'22#.#7.215.112':139
'22#.#7.34.106':139
'22#.#7.34.54':139
'22#.#7.152.233':139
'22#.#7.29.22':139
'22#.#7.144.36':139
'22#.#7.53.104':139
'22#.#7.217.166':445
'22#.#7.87.141':445
'22#.#7.22.15':445
'22#.#7.79.76':445
'22#.#7.14.217':445
'22#.#7.32.70':445
'22#.#7.183.142':139
'22#.#7.214.183':139
'22#.#7.143.3':445
'22#.#7.46.17':445
'22#.#7.199.190':445
'22#.#7.55.160':139
'22#.#7.183.241':139
'22#.#7.104.114':139
'22#.#7.2.138':139
'22#.#7.143.201':139
'22#.#7.218.183':139
'22#.#7.22.136':139
'22#.#7.79.76':139
'22#.#7.59.51':139
'22#.#7.233.218':139
'22#.#7.89.58':139
'22#.#7.255.15':139
'22#.#7.218.225':139
'22#.#7.31.11':139
'22#.#7.127.211':139
'22#.#7.63.24':139
'22#.#7.13.55':139
'22#.#7.248.189':139
'22#.#7.27.194':139
'22#.#7.200.42':139
'22#.#7.35.82':139
'22#.#7.71.249':139
'22#.#7.111.129':139
'22#.#7.185.26':445
'22#.#7.38.137':445
'22#.#7.224.229':445
'22#.#7.227.163':445
'22#.#7.143.123':445
'22#.#7.119.244':445
'22#.#7.37.214':445
'22#.#7.231.161':445
'22#.#7.173.162':445
'22#.#7.176.181':445
'22#.#7.218.178':445
'22#.#7.163.204':445
'22#.#7.87.141':139
'22#.#7.32.70':139
'22#.#7.217.166':139
'22#.#7.14.217':139
'22#.#7.22.15':139
'22#.#7.46.17':139
'22#.#7.71.36':445
'22#.#7.170.1':445
'22#.#7.132.232':445
'22#.#7.199.190':139
'22#.#7.143.3':139
'22#.#7.54.32':445
'22#.#7.67.214':445
'22#.#7.49.162':445
'22#.#7.249.202':445
'22#.#7.93.249':445
'22#.#7.224.237':445
'22#.#7.91.160':445
'22#.#7.60.92':445
'22#.47.65.7':445
'22#.#7.133.148':445
'22#.#7.139.177':445
'22#.#7.202.248':445
'22#.#7.191.58':445
'22#.#7.54.116':445
'22#.#7.37.207':445
'22#.#7.34.54':445
'22#.#7.147.43':445
'22#.#7.65.232':445
'22#.#7.72.195':445
'22#.#7.248.201':445
'22#.#7.222.168':445
'22#.#7.72.10':445
'22#.#7.169.71':445
'22#.#7.49.56':445
'22#.#7.235.187':445
'22#.#7.0.176':445
'22#.#7.172.67':445
'22#.#7.78.24':445
'22#.#7.199.174':445
'22#.47.2.35':139
'22#.#7.166.234':139
'22#.#7.196.76':139
'22#.#7.227.199':445
'22#.#7.118.38':139
'22#.#7.66.237':445
'22#.#7.236.117':445
'22#.#7.51.228':445
'22#.#7.118.166':445
'22#.47.8.38':445
'22#.47.84.8':445
'22#.#7.45.236':445
'22#.#7.229.13':445
'22#.#7.105.58':445
'22#.#7.233.13':445
'22#.#7.68.94':445
'22#.#7.92.68':445
'22#.#7.67.214':139
'22#.#7.224.237':139
'22#.#7.54.32':139
'22#.#7.93.249':139
'22#.#7.49.162':139
'22#.#7.133.148':139
'22#.#7.60.92':139
'22#.47.8.38':139
'22#.#7.91.160':139
'22#.#7.139.177':139
'22#.47.65.7':139
'22#.#7.249.202':139
'22#.#7.54.116':139
'22#.#7.65.232':139
'22#.#7.191.58':139
'22#.#7.147.43':139
'22#.#7.37.207':139
'22#.#7.72.10':139
'22#.#7.248.201':139
'22#.#7.202.248':139
'22#.#7.72.195':139
'22#.#7.169.71':139
'22#.#7.222.168':139
'22#.#7.235.187':139
'22#.#7.199.174':139
'22#.#7.49.56':139
'22#.#7.78.24':139
'22#.#7.0.176':139
'22#.#7.227.199':139
'22#.#7.152.233':445
'22#.#7.34.106':445
'22#.#7.144.36':445
'22#.#7.215.112':445
'22#.#7.29.22':445
'22#.#7.172.67':139
'22#.#7.51.228':139
'22#.#7.45.236':139
'22#.#7.236.117':139
'22#.47.84.8':139
'22#.#7.118.166':139
'22#.#7.68.94':139
'22#.#7.105.58':139
'22#.#7.66.237':139
'22#.#7.229.13':139
'22#.#7.92.68':139
'22#.#7.233.13':139
'22#.#7.176.20':445
'22#.#7.132.199':445
'22#.#7.38.106':445
'22#.#7.102.35':445
'22#.#7.230.101':445
'22#.#7.170.35':445
'22#.#7.24.177':445
'22#.#7.199.24':445
'22#.#7.177.48':445
'22#.#7.237.32':445
'22#.#7.68.130':445
'22#.#7.247.44':445
'22#.#7.231.176':139
'22#.#7.24.129':139
'22#.#7.180.65':139
'22#.#7.11.232':139
'22#.#7.17.232':139
'22#.#7.42.180':445
'22#.#7.255.187':445
'22#.#7.16.174':445
'22#.#7.201.22':445
'22#.#7.248.230':445
'22#.#7.241.137':445
'22#.47.3.56':445
'22#.#7.128.184':445
'22#.#7.72.76':445
'22#.#7.11.56':445
'22#.#7.76.24':445
'22#.#7.135.53':445
'22#.#7.3.220':445
'22#.#7.138.152':445
'22#.#7.46.128':445
'22#.#7.227.134':445
'22#.#7.12.71':445
'22#.#7.133.252':445
'22#.#7.128.52':445
'22#.#7.35.89':445
'22#.#7.12.193':445
'22#.47.1.98':445
'22#.#7.27.208':445
'22#.#7.132.71':445
'22#.#7.47.194':445
'22#.#7.29.246':445
'22#.#7.123.65':445
'22#.#7.214.4':445
'22#.#7.230.86':445
'22#.#7.177.48':139
'22#.#7.24.177':139
'22#.#7.68.130':139
'22#.#7.170.35':139
'22#.#7.237.32':139
'22#.#7.199.24':139
'22#.#7.128.52':139
'22#.#7.35.89':139
'22#.#7.12.193':139
'22#.47.1.98':139
'22#.#7.27.208':139
'22#.#7.132.199':139
'22#.#7.42.180':139
'22#.#7.255.187':139
'22#.#7.248.230':139
'22#.#7.241.137':139
'22#.#7.201.22':139
'22#.#7.16.174':139
'22#.#7.38.106':139
'22#.#7.176.20':139
'22#.#7.230.101':139
'22#.#7.247.44':139
'22#.#7.102.35':139
'22#.#7.46.128':139
'22#.#7.3.220':139
'22#.#7.12.71':139
'22#.#7.135.53':139
'22#.#7.227.134':139
'22#.#7.138.152':139
'22#.#7.32.130':139
'22#.#7.63.200':139
'22#.#7.39.57':139
'22#.#7.229.109':139
'22#.#7.34.117':139
'22#.#7.128.184':139
'22#.#7.123.65':139
'22#.#7.47.194':139
'22#.#7.230.86':139
'22#.#7.132.71':139
'22#.#7.214.4':139
'22#.#7.29.246':139
'22#.#7.72.76':139
'22#.47.3.56':139
'22#.#7.76.24':139
'22#.#7.133.252':139
'22#.#7.11.56':139
'22#.#7.63.149':445
'22#.#7.173.29':445
'22#.#7.89.233':445
'22#.#7.141.178':445
'22#.#7.233.221':445
'22#.47.1.1':445
'22#.#7.232.232':445
'22#.#7.172.34':139
'22#.#7.232.156':445
'22#.#7.14.249':445
'22#.#7.4.180':445
'22#.#7.235.250':445
'22#.#7.128.213':445
'22#.#7.34.64':445
'22#.#7.82.233':445
'22#.#7.134.219':445
'22#.#7.62.127':445
'22#.#7.46.116':445
'22#.#7.32.33':445
'22#.#7.232.32':445
'22#.#7.33.200':445
'22#.#7.67.227':445
'22#.#7.34.83':445
'22#.#7.38.137':139
'22#.#7.119.244':139
'22#.#7.185.26':139
'22#.#7.143.123':139
'22#.#7.224.229':139
'22#.#7.176.181':139
'22#.#7.231.161':139
'22#.#7.106.116':139
'22#.#7.37.214':139
'22#.#7.218.178':139
'22#.#7.173.162':139
'22#.#7.227.163':139
'22#.#7.172.34':445
'22#.#7.190.8':445
'22#.#7.232.89':139
'22#.#7.190.8':139
'22#.#7.89.123':139
'22#.#7.89.123':445
'22#.#7.170.1':139
'22#.#7.163.204':139
'22#.#7.71.36':139
'22#.#7.232.89':445
'22#.#7.132.232':139
'22#.#7.16.174':9988
'22#.#7.132.199':9988
'22#.#7.176.20':9988
'22#.#7.42.180':9988
'22#.#7.255.187':9988
'22#.#7.247.44':9988
'22#.#7.12.193':9988
'22#.#7.151.67':139
'22#.47.1.98':9988
'22#.#7.201.22':9988
'22#.#7.230.101':9988
'22#.#7.170.35':9988
'22#.#7.32.130':445
'22#.#7.63.200':445
'22#.#7.39.57':445
'22#.#7.229.109':445
'22#.#7.34.117':445
'22#.#7.11.232':445
'22#.#7.24.129':445
'22#.#7.24.177':9988
'22#.#7.231.176':445
'22#.#7.17.232':445
'22#.#7.180.65':445
'22#.#7.63.149':139
'22#.#7.173.29':139
'22#.#7.89.233':139
'22#.#7.141.178':139
'22#.#7.233.221':139
'22#.47.1.1':139
'22#.#7.232.232':139
'22#.#7.151.67':445
'22#.#7.232.156':139
'22#.#7.14.249':139
'22#.#7.4.180':139
'22#.#7.235.250':139
'22#.#7.128.213':139
'22#.#7.34.64':139
'22#.#7.82.233':139
'22#.#7.134.219':139
'22#.#7.62.127':139
'22#.#7.46.116':139
'22#.#7.32.33':139
'22#.#7.232.32':139
'22#.#7.33.200':139
'22#.#7.67.227':139
'22#.#7.34.83':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней