Trojan.Starman.5923

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#0.112.44':139
'13#.#0.231.243':139
'13#.#0.182.54':139
'13#.#0.247.214':139
'13#.#0.191.115':139
'13#.#0.209.182':139
'13#.#0.114.1':139
'13#.#0.27.51':139
'13#.#0.91.103':139
'13#.#0.15.143':139
'13#.#0.45.183':139
'13#.#0.227.55':139
'13#.10.39.9':139
'13#.#0.37.232':139
'13#.#0.193.182':139
'13#.#0.167.58':139
'13#.#0.217.132':139
'13#.#0.182.217':139
'13#.#0.31.138':139
'13#.#0.164.206':139
'13#.#0.41.89':139
'13#.#0.217.132':445
'13#.#0.182.217':445
'13#.#0.31.138':445
'13#.#0.164.206':445
'13#.#0.41.89':445
'13#.#0.182.54':445
'13#.#0.112.44':445
'13#.#0.191.115':445
'13#.#0.45.183':445
'13#.#0.247.214':445
'13#.10.39.9':445
'13#.#0.221.56':139
'13#.#0.103.237':139
'13#.#0.199.114':139
'13#.#0.57.171':139
'13#.#0.168.192':139
'13#.#0.37.232':445
'13#.#0.227.55':445
'13#.#0.167.58':445
'13#.#0.181.71':445
'13#.#0.193.182':445
'13#.#0.181.71':139
'13#.#0.155.81':139
'13#.#0.94.212':139
'13#.#0.105.76':139
'13#.#0.38.124':139
'13#.#0.16.131':139
'13#.#0.47.179':445
'13#.#0.139.211':445
'13#.#0.179.138':445
'13#.#0.61.205':139
'13#.#0.111.61':139
'13#.#0.124.122':139
'13#.#0.212.169':139
'13#.#0.62.213':139
'13#.#0.169.196':139
'13#.#0.17.88':139
'13#.#0.134.51':139
'13#.#0.87.59':139
'13#.#0.122.9':139
'13#.#0.195.148':139
'13#.#0.179.62':139
'13#.#0.108.146':139
'13#.#0.38.124':445
'13#.#0.16.131':445
'13#.#0.124.122':445
'13#.#0.87.59':445
'13#.#0.122.9':445
'13#.#0.61.205':445
'13#.#0.111.61':445
'13#.#0.94.212':445
'13#.#0.105.76':445
'13#.#0.155.81':445
'13#.#0.195.148':445
'13#.#0.17.88':445
'13#.#0.134.51':445
'13#.#0.43.140':445
'13#.#0.80.132':445
'13#.#0.138.121':445
'13#.#0.179.62':445
'13#.#0.108.146':445
'13#.#0.62.213':445
'13#.#0.169.196':445
'13#.#0.212.169':445
'13#.#0.231.243':445
'13#.#0.221.98':445
'13#.#0.58.155':139
'13#.#0.107.209':445
'13#.#0.225.220':445
'13#.#0.84.107':445
'13#.#0.139.192':139
'13#.#0.175.216':139
'13#.#0.117.85':139
'13#.#0.21.176':139
'13#.#0.34.118':139
'13#.#0.77.154':445
'13#.#0.139.6':445
'13#.#0.251.233':445
'13#.#0.48.180':445
'13#.#0.94.39':445
'13#.#0.180.93':445
'13#.#0.102.17':445
'13#.#0.154.119':445
'13#.#0.126.92':445
'13#.#0.98.41':445
'13#.#0.39.98':445
'13#.#0.28.15':139
'13#.#0.135.79':139
'13#.#0.61.27':139
'13#.#0.158.160':139
'13#.#0.220.171':139
'13#.#0.246.170':139
'13#.#0.116.63':139
'13#.#0.240.150':139
'13#.#0.99.66':139
'13#.#0.180.76':139
'13#.#0.189.184':139
'13#.#0.201.56':139
'13#.#0.10.100':139
'13#.#0.61.113':139
'13#.#0.134.15':139
'13#.#0.116.42':139
'13#.#0.241.8':139
'13#.#0.21.115':139
'13#.#0.221.166':139
'13#.#0.18.212':139
'13#.#0.28.43':139
'13#.#0.28.99':445
'13#.#0.4.101':139
'13#.#0.197.203':139
'13#.#0.175.92':139
'13#.#0.82.38':139
'13#.10.12.7':139
'13#.#0.94.39':139
'13#.#0.180.93':139
'13#.#0.28.99':139
'13#.#0.84.51':139
'13#.#0.111.161':139
'13#.#0.50.88':139
'13#.#0.209.182':445
'13#.#0.114.1':445
'13#.#0.27.51':445
'13#.#0.91.103':445
'13#.#0.15.143':445
'13#.#0.221.56':445
'13#.#0.103.237':445
'13#.#0.199.114':445
'13#.#0.57.171':445
'13#.#0.168.192':445
'13#.#0.82.38':445
'13#.10.12.7':445
'13#.#0.50.88':445
'13#.#0.107.209':139
'13#.#0.221.98':139
'13#.#0.84.51':445
'13#.#0.111.161':445
'13#.#0.197.203':445
'13#.#0.175.92':445
'13#.#0.4.101':445
'13#.#0.84.107':139
'13#.#0.98.41':139
'13#.#0.39.98':139
'13#.#0.251.233':139
'13#.#0.48.180':139
'13#.#0.139.6':139
'13#.#0.77.154':139
'13#.#0.225.220':139
'13#.#0.154.119':139
'13#.#0.126.92':139
'13#.#0.102.17':139
'13#.#0.144.9':445
'13#.#0.253.143':445
'13#.#0.155.52':445
'13#.#0.48.105':445
'13#.#0.32.185':445
'13#.#0.116.95':445
'13#.#0.183.50':445
'13#.#0.251.172':445
'13#.#0.202.2':445
'13#.#0.166.238':445
'13#.#0.150.46':445
'13#.#0.62.222':139
'13#.#0.25.62':139
'13#.#0.105.104':139
'13#.#0.125.19':139
'13#.#0.157.1':139
'13#.#0.78.150':445
'13#.#0.149.136':445
'13#.10.4.19':139
'13#.#0.36.29':139
'13#.#0.251.75':139
'13#.#0.18.194':445
'13#.#0.85.133':445
'13#.#0.56.199':445
'13#.#0.191.214':445
'13#.#0.14.35':445
'13#.#0.82.55':445
'13#.#0.115.82':445
'13#.#0.16.182':445
'13#.#0.180.106':445
'13#.#0.151.127':445
'13#.#0.47.87':445
'13#.#0.212.247':445
'13#.#0.77.20':445
'13#.#0.96.164':445
'13#.10.6.20':445
'13#.#0.106.134':445
'13#.#0.31.246':445
'13#.#0.128.140':445
'13#.#0.110.1':445
'13#.#0.154.139':445
'13#.#0.64.225':445
'13#.#0.172.43':139
'13#.#0.106.134':139
'13#.#0.96.164':139
'13#.10.6.20':139
'13#.#0.116.95':139
'13#.#0.183.50':139
'13#.#0.64.225':139
'13#.#0.110.1':139
'13#.#0.154.139':139
'13#.#0.212.247':139
'13#.#0.77.20':139
'13#.#0.251.172':139
'13#.#0.48.105':139
'13#.#0.32.185':139
'13#.#0.150.46':139
'13#.#0.78.150':139
'13#.#0.149.136':139
'13#.#0.202.2':139
'13#.#0.166.238':139
'13#.#0.253.143':139
'13#.#0.155.52':139
'13#.#0.144.9':139
'13#.#0.205.127':139
'13#.#0.102.9':139
'13#.#0.195.20':139
'13#.#0.82.55':139
'13#.#0.115.82':139
'13#.#0.166.153':139
'13#.#0.187.201':139
'13#.#0.25.107':139
'13#.#0.55.87':139
'13#.#0.249.26':139
'13#.#0.16.182':139
'13#.#0.191.214':139
'13#.#0.14.35':139
'13#.#0.47.87':139
'13#.#0.31.246':139
'13#.#0.128.140':139
'13#.#0.180.106':139
'13#.#0.151.127':139
'13#.#0.85.133':139
'13#.#0.56.199':139
'13#.#0.18.194':139
'13#.#0.195.20':445
'13#.#0.38.11':445
'13#.#0.175.188':445
'13#.#0.118.101':445
'13#.#0.114.216':445
'13#.#0.104.33':445
'13#.#0.127.76':445
'13#.#0.54.192':445
'13#.#0.191.122':445
'13#.10.2.9':445
'13#.#0.216.35':445
'13#.#0.138.154':139
'13#.#0.146.235':139
'13#.#0.153.159':139
'13#.#0.201.98':139
'13#.#0.128.46':139
'13#.#0.33.166':139
'13#.#0.255.251':139
'13#.#0.154.0':139
'13#.#0.251.206':139
'13#.#0.143.204':139
'13#.#0.206.143':139
'13#.#0.138.154':445
'13#.#0.179.138':139
'13#.#0.255.251':445
'13#.#0.251.206':445
'13#.#0.154.0':445
'13#.#0.138.121':139
'13#.#0.43.140':139
'13#.#0.80.132':139
'13#.#0.47.179':139
'13#.#0.139.211':139
'13#.#0.206.143':445
'13#.#0.210.219':445
'13#.#0.128.46':445
'13#.#0.121.196':445
'13#.#0.42.55':445
'13#.#0.111.42':445
'13#.#0.153.159':445
'13#.#0.143.204':445
'13#.#0.146.235':445
'13#.#0.33.166':445
'13#.#0.201.98':445
'13#.#0.210.219':139
'13#.#0.251.75':445
'13#.10.4.19':445
'13#.#0.36.29':445
'13#.#0.62.222':445
'13#.#0.25.62':445
'13#.#0.253.143':9988
'13#.#0.251.172':9988
'13#.#0.155.52':9988
'13#.#0.149.136':9988
'13#.#0.32.185':9988
'13#.#0.105.104':445
'13#.#0.249.26':445
'13#.#0.25.107':445
'13#.#0.55.87':445
'13#.#0.205.127':445
'13#.#0.102.9':445
'13#.#0.125.19':445
'13#.#0.157.1':445
'13#.#0.172.43':445
'13#.#0.166.153':445
'13#.#0.187.201':445
'13#.#0.216.35':139
'13#.#0.191.122':139
'13#.10.2.9':139
'13#.#0.38.11':139
'13#.#0.175.188':139
'13#.#0.111.42':139
'13#.#0.121.196':139
'13#.#0.42.55':139
'13#.#0.127.76':139
'13#.#0.54.192':139
'13#.#0.118.101':139
'13#.#0.14.35':9988
'13#.#0.56.199':9988
'13#.#0.64.225':9988
'13#.10.6.20':9988
'13#.#0.183.50':9988
'13#.#0.114.216':139
'13#.#0.104.33':139
'13#.#0.115.82':9988
'13#.#0.180.106':9988
'13#.#0.82.55':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней