Trojan.Starman.5732

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#30.171.248':139
'22#.#30.203.169':139
'22#.#30.101.108':139
'22#.#30.45.134':139
'22#.#30.108.10':139
'22#.#30.102.11':139
'22#.#30.188.110':139
'22#.#30.32.140':139
'22#.#30.238.9':139
'22#.#30.180.237':139
'22#.#30.54.147':139
'22#.#30.7.56':139
'22#.#30.147.46':139
'22#.#30.246.84':445
'22#.#30.60.249':139
'22#.#30.206.215':139
'22#.#30.42.216':139
'22#.#30.118.124':139
'22#.#30.232.198':139
'22#.#30.245.186':139
'22#.#30.152.179':139
'22#.#30.171.248':445
'22#.#30.203.169':445
'22#.#30.101.108':445
'22#.#30.45.134':445
'22#.#30.108.10':445
'22#.#30.102.11':445
'22#.#30.188.110':445
'22#.#30.32.140':445
'22#.#30.238.9':445
'22#.#30.180.237':445
'22#.#30.147.46':445
'22#.#30.7.56':445
'22#.#30.54.147':445
'22#.#30.144.239':139
'22#.#30.60.249':445
'22#.#30.206.215':445
'22#.#30.42.216':445
'22#.#30.118.124':445
'22#.#30.232.198':445
'22#.#30.245.186':445
'22#.#30.184.140':445
'22#.#30.134.96':445
'22#.#30.102.84':445
'22#.#30.246.84':139
'22#.#30.79.51':139
'22#.#30.184.140':139
'22#.#30.245.10':445
'22#.#30.254.234':445
'22#.#30.113.186':445
'22#.#30.82.232':445
'22#.#30.115.252':445
'22#.#30.73.168':139
'22#.#30.145.71':139
'22#.#30.80.180':139
'22#.#30.57.127':139
'22#.#30.15.38':139
'22#.#30.239.148':139
'22#.#30.125.231':139
'22#.#30.149.101':139
'22#.#30.173.15':139
'22#.#30.101.212':139
'22#.#30.241.176':445
'22#.#30.145.71':445
'22#.#30.173.15':445
'22#.#30.73.168':445
'22#.#30.15.38':445
'22#.#30.80.180':445
'22#.#30.125.231':445
'22#.#30.79.51':445
'22#.#30.239.148':445
'22#.#30.101.212':445
'22#.#30.149.101':445
'22#.#30.222.204':445
'22#.#30.190.159':445
'22#.#30.204.253':445
'22#.#30.168.135':445
'22#.#30.253.197':445
'22#.#30.126.227':445
'22#.#30.57.127':445
'22#.#30.95.76':445
'22#.#30.71.205':445
'22#.#30.208.87':445
'22#.#30.194.102':445
'22#.#30.244.163':445
'22#.#30.102.201':445
'22#.#30.101.236':445
'22#.#30.184.252':445
'22#.#30.232.202':445
'22#.#30.5.120':445
'22#.#30.255.176':445
'22#.#30.3.212':445
'22#.#30.91.74':445
'22#.#30.167.110':445
'22#.#30.143.19':445
'22#.#30.110.228':445
'22#.#30.2.31':445
'22#.#30.51.41':445
'22#.#30.88.3':445
'22#.#30.82.87':445
'22#.#30.195.105':445
'22#.#30.237.126':445
'22#.#30.18.52':445
'22#.#30.115.0':139
'22#.#30.133.162':139
'22#.#30.18.108':139
'22#.#30.99.52':139
'22#.#30.107.243':139
'22#.#30.89.11':139
'22#.#30.244.81':139
'22#.#30.146.78':139
'22#.#30.193.109':139
'22#.#30.25.119':139
'22#.#30.202.133':139
'22#.#30.50.190':139
'22#.#30.102.157':139
'22#.#30.169.184':139
'22#.#30.145.115':139
'22#.#30.178.145':139
'22#.#30.165.104':139
'22#.#30.39.9':139
'22#.#30.104.117':139
'22#.#30.115.45':139
'22#.#30.78.121':139
'22#.#30.76.105':445
'22#.#30.51.41':139
'22#.#30.110.228':139
'22#.#30.2.31':139
'22#.#30.1.150':139
'22#.#30.76.105':139
'22#.#30.18.52':139
'22#.#30.195.105':139
'22#.#30.237.126':139
'22#.#30.167.110':139
'22#.#30.143.19':139
'22#.#30.8.191':139
'22#.#30.46.151':139
'22#.#30.103.8':139
'22#.#30.152.179':445
'22#.#30.144.239':445
'22#.#30.53.139':139
'22#.#30.132.103':139
'22#.#30.48.122':139
'22#.#30.63.251':139
'22#.#30.188.32':139
'22#.#30.88.3':139
'22#.#30.46.151':445
'22#.#30.63.251':445
'22#.#30.8.191':445
'22#.#30.5.120':139
'22#.#30.103.8':445
'22#.#30.132.103':445
'22#.#30.1.150':445
'22#.#30.53.139':445
'22#.#30.188.32':445
'22#.#30.48.122':445
'22#.#30.102.201':139
'22#.#30.194.102':139
'22#.#30.184.252':139
'22#.#30.82.87':139
'22#.#30.101.236':139
'22#.#30.255.176':139
'22#.#30.232.202':139
'22#.#30.91.74':139
'22#.#30.244.163':139
'22#.#30.3.212':139
'22#.#30.126.227':139
'22#.#30.70.243':445
'22#.#30.52.142':445
'22#.230.2.6':445
'22#.#30.114.42':445
'22#.#30.229.114':445
'22#.#30.11.124':445
'22#.#30.118.71':445
'22#.#30.216.28':445
'22#.#30.108.130':445
'22#.#30.177.202':445
'22#.#30.46.125':139
'22#.#30.34.37':139
'22#.#30.18.62':139
'22#.#30.140.224':139
'22#.230.1.5':139
'22#.#30.35.203':139
'22#.#30.91.43':445
'22#.#30.232.158':139
'22#.#30.254.33':139
'22#.#30.108.253':139
'22#.#30.194.117':445
'22#.#30.8.31':445
'22#.#30.196.153':445
'22#.#30.31.84':445
'22#.#30.35.234':445
'22#.#30.51.189':445
'22#.#30.135.35':445
'22#.#30.129.137':445
'22#.#30.205.73':445
'22#.#30.143.90':445
'22#.#30.173.175':445
'22#.#30.40.47':445
'22#.#30.73.179':445
'22#.#30.108.217':445
'22#.#30.224.120':445
'22#.#30.148.130':445
'22#.#30.121.245':445
'22#.#30.1.55':445
'22#.#30.155.3':445
'22#.#30.82.221':445
'22#.#30.40.60':445
'22#.#30.184.238':139
'22#.#30.148.130':139
'22#.#30.108.217':139
'22#.#30.224.120':139
'22#.#30.118.71':139
'22#.#30.194.117':139
'22#.#30.40.60':139
'22#.#30.155.3':139
'22#.#30.82.221':139
'22#.#30.40.47':139
'22#.#30.73.179':139
'22#.230.2.6':139
'22#.#30.70.243':139
'22#.#30.91.43':139
'22#.#30.114.42':139
'22#.#30.229.114':139
'22#.#30.216.28':139
'22#.#30.11.124':139
'22#.#30.177.202':139
'22#.#30.52.142':139
'22#.#30.108.130':139
'22#.#30.121.245':139
'22#.#30.126.213':139
'22#.#30.34.195':139
'22#.#30.56.234':139
'22#.#30.129.137':139
'22#.#30.14.217':139
'22#.#30.44.157':139
'22#.#30.125.172':139
'22#.#30.30.13':139
'22#.#30.234.249':139
'22#.#30.187.111':139
'22#.#30.31.84':139
'22#.#30.8.31':139
'22#.#30.51.189':139
'22#.#30.1.55':139
'22#.#30.35.234':139
'22#.#30.205.73':139
'22#.#30.135.35':139
'22#.#30.173.175':139
'22#.#30.196.153':139
'22#.#30.143.90':139
'22#.#30.242.40':445
'22#.#30.201.70':445
'22#.#30.41.60':445
'22#.#30.171.87':445
'22#.#30.25.78':445
'22#.#30.101.78':445
'22#.#30.215.56':445
'22#.#30.9.48':445
'22#.#30.215.3':445
'22#.#30.185.121':445
'22#.#30.101.78':139
'22#.#30.215.56':139
'22#.#30.9.48':139
'22#.#30.215.3':139
'22#.#30.185.121':139
'22#.#30.158.208':139
'22#.#30.19.52':139
'22#.#30.208.128':139
'22#.#30.202.98':139
'22#.#30.128.127':139
'22#.#30.202.98':445
'22#.#30.253.197':139
'22#.#30.204.253':139
'22#.#30.168.135':139
'22#.#30.254.234':139
'22#.#30.241.176':139
'22#.#30.208.87':139
'22#.#30.95.76':139
'22#.#30.71.205':139
'22#.#30.222.204':139
'22#.#30.190.159':139
'22#.#30.19.52':445
'22#.#30.134.96':139
'22#.#30.158.208':445
'22#.#30.128.127':445
'22#.#30.208.128':445
'22#.#30.113.186':139
'22#.#30.245.10':139
'22#.#30.115.252':139
'22#.#30.102.84':139
'22#.#30.82.232':139
'22#.#30.201.70':139
'22#.#30.46.125':445
'22#.#30.34.37':445
'22#.#30.18.62':445
'22#.#30.140.224':445
'22#.230.1.5':445
'22#.#30.35.203':445
'22#.#30.114.42':9988
'22#.#30.232.158':445
'22#.#30.254.33':445
'22#.#30.108.253':445
'22#.#30.34.195':445
'22#.#30.234.249':445
'22#.#30.126.213':445
'22#.#30.14.217':445
'22#.#30.56.234':445
'22#.#30.125.172':445
'22#.#30.184.238':445
'22#.#30.44.157':445
'22#.#30.187.111':445
'22#.#30.30.13':445
'22#.#30.91.43':9988
'22#.#30.30.13':9988
'22#.#30.44.157':9988
'22#.#30.8.31':9988
'22#.#30.40.60':9988
'22#.#30.35.234':9988
'22#.#30.242.40':139
'22#.#30.25.78':139
'22#.#30.41.60':139
'22#.#30.125.172':9988
'22#.#30.171.87':139
'22#.#30.108.130':9988
'22#.#30.11.124':9988
'22#.#30.52.142':9988
'22#.#30.229.114':9988
'22#.#30.70.243':9988
'22#.#30.73.179':9988
'22#.#30.82.221':9988
'22#.#30.40.47':9988
'22#.#30.194.117':9988
'22#.#30.108.217':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней