Trojan.Starman.5729

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##0.38.82':139
'24.##0.122.131':139
'24.##0.15.31':139
'24.##0.103.178':139
'24.##0.176.9':139
'24.##0.235.29':139
'24.##0.103.213':139
'24.##0.82.35':139
'24.##0.94.103':139
'24.##0.226.131':139
'24.##0.192.134':139
'24.##0.50.63':139
'24.##0.245.163':139
'24.##0.100.31':139
'24.##0.179.220':445
'24.##0.156.85':139
'24.##0.85.138':139
'24.##0.250.86':139
'24.##0.75.129':139
'24.##0.56.223':139
'24.##0.45.150':139
'24.##0.176.9':445
'24.##0.15.31':445
'24.##0.103.178':445
'24.##0.250.86':445
'24.##0.192.134':445
'24.##0.226.131':445
'24.##0.82.35':445
'24.##0.94.103':445
'24.##0.38.82':445
'24.##0.122.131':445
'24.##0.85.138':445
'24.##0.156.85':445
'24.##0.100.31':445
'24.##0.253.127':139
'24.##0.135.137':139
'24.##0.128.205':139
'24.##0.45.150':445
'24.##0.75.129':445
'24.##0.56.223':445
'24.##0.50.63':445
'24.##0.245.163':445
'24.##0.179.220':139
'24.##0.212.33':445
'24.##0.55.62':139
'24.##0.70.50':139
'24.##0.69.211':139
'24.##0.130.147':445
'24.##0.63.56':445
'24.##0.86.165':445
'24.##0.86.82':445
'24.##0.114.38':445
'24.##0.33.54':139
'24.##0.39.45':139
'24.##0.78.158':139
'24.##0.182.59':139
'24.##0.222.248':139
'24.##0.196.135':139
'24.##0.122.45':139
'24.##0.130.168':139
'24.##0.146.158':139
'24.#80.0.10':139
'24.##0.59.96':139
'24.##0.146.158':445
'24.##0.122.45':445
'24.##0.59.96':445
'24.##0.78.158':445
'24.#80.0.10':445
'24.##0.69.211':445
'24.##0.55.62':445
'24.##0.70.50':445
'24.##0.130.168':445
'24.##0.33.54':445
'24.##0.39.45':445
'24.##0.3.207':445
'24.##0.113.241':445
'24.##0.29.187':445
'24.##0.107.233':445
'24.##0.114.4':445
'24.##0.196.135':445
'24.##0.182.59':445
'24.##0.249.17':445
'24.##0.18.179':445
'24.##0.222.248':445
'24.##0.217.117':445
'24.##0.50.212':445
'24.##0.79.113':445
'24.##0.62.180':445
'24.##0.17.228':445
'24.##0.22.66':139
'24.##0.125.34':139
'24.##0.135.89':445
'24.##0.10.53':445
'24.##0.221.101':445
'24.##0.56.229':445
'24.##0.94.244':445
'24.##0.202.121':445
'24.##0.236.185':445
'24.##0.77.71':445
'24.##0.40.180':445
'24.##0.242.238':445
'24.##0.227.242':445
'24.##0.26.83':445
'24.##0.205.202':445
'24.##0.44.206':445
'24.##0.86.96':139
'24.##0.240.91':139
'24.##0.247.25':139
'24.##0.69.100':139
'24.##0.65.226':139
'24.##0.106.6':139
'24.##0.135.105':139
'24.##0.5.222':139
'24.##0.184.87':139
'24.##0.93.96':139
'24.##0.239.15':139
'24.##0.222.15':139
'24.##0.24.134':139
'24.##0.128.80':139
'24.##0.62.20':139
'24.#80.5.18':139
'24.##0.115.4':139
'24.##0.21.53':139
'24.##0.11.199':139
'24.##0.85.241':139
'24.##0.173.247':139
'24.##0.77.71':139
'24.##0.40.180':139
'24.##0.71.185':139
'24.##0.119.2':139
'24.##0.185.196':139
'24.##0.205.202':139
'24.##0.44.206':139
'24.##0.202.121':139
'24.##0.236.185':139
'24.##0.94.244':139
'24.##0.81.86':139
'24.##0.128.205':445
'24.##0.253.127':445
'24.##0.135.137':445
'24.##0.235.29':445
'24.##0.103.213':445
'24.##0.100.239':139
'24.##0.180.100':139
'24.##0.239.43':139
'24.##0.24.13':139
'24.##0.105.107':139
'24.##0.239.43':445
'24.##0.100.239':445
'24.##0.105.107':445
'24.##0.135.89':139
'24.##0.24.13':445
'24.##0.185.196':445
'24.##0.71.185':445
'24.##0.119.2':445
'24.##0.180.100':445
'24.##0.81.86':445
'24.##0.221.101':139
'24.##0.56.229':139
'24.##0.62.180':139
'24.##0.227.242':139
'24.##0.26.83':139
'24.##0.242.238':139
'24.##0.50.212':139
'24.##0.10.53':139
'24.##0.217.117':139
'24.##0.17.228':139
'24.##0.79.113':139
'24.##0.249.17':139
'24.##0.29.122':445
'24.#80.35.3':445
'24.##0.163.160':445
'24.##0.148.206':445
'24.##0.150.28':445
'24.##0.41.117':445
'24.##0.166.45':445
'24.##0.169.67':445
'24.##0.32.20':445
'24.##0.33.214':445
'24.##0.252.211':445
'24.##0.166.48':139
'24.##0.40.41':139
'24.##0.245.204':139
'24.##0.207.190':139
'24.##0.183.106':139
'24.##0.234.1':139
'24.##0.154.139':445
'24.##0.1.220':139
'24.##0.94.153':139
'24.##0.219.167':139
'24.##0.99.209':445
'24.##0.75.99':445
'24.##0.60.74':445
'24.##0.240.197':445
'24.##0.89.188':445
'24.##0.222.254':445
'24.##0.104.149':445
'24.##0.132.188':445
'24.##0.235.0':445
'24.##0.92.208':445
'24.##0.197.155':445
'24.##0.65.241':445
'24.##0.102.14':445
'24.##0.104.37':445
'24.##0.167.134':445
'24.##0.50.182':445
'24.##0.85.46':445
'24.##0.94.161':445
'24.##0.35.170':445
'24.##0.85.144':445
'24.##0.33.113':445
'24.##0.104.37':139
'24.##0.65.241':139
'24.##0.50.182':139
'24.##0.166.45':139
'24.##0.167.134':139
'24.##0.35.170':139
'24.##0.85.46':139
'24.##0.33.113':139
'24.##0.102.14':139
'24.##0.85.144':139
'24.##0.41.117':139
'24.##0.252.211':139
'24.##0.163.160':139
'24.##0.148.206':139
'24.##0.150.28':139
'24.##0.154.139':139
'24.##0.33.214':139
'24.##0.169.67':139
'24.##0.32.20':139
'24.##0.29.122':139
'24.#80.35.3':139
'24.##0.226.220':139
'24.##0.96.147':139
'24.##0.253.58':139
'24.##0.104.149':139
'24.##0.58.110':139
'24.##0.32.30':139
'24.##0.217.241':139
'24.##0.77.173':139
'24.##0.90.38':139
'24.##0.218.135':139
'24.##0.222.254':139
'24.##0.89.188':139
'24.##0.60.74':139
'24.##0.240.197':139
'24.##0.94.161':139
'24.##0.197.155':139
'24.##0.92.208':139
'24.##0.132.188':139
'24.##0.235.0':139
'24.##0.99.209':139
'24.##0.75.99':139
'24.##0.124.141':445
'24.##0.59.133':445
'24.##0.39.162':445
'24.##0.70.193':445
'24.##0.162.141':445
'24.##0.178.18':445
'24.##0.168.178':445
'24.##0.18.175':445
'24.##0.68.244':445
'24.##0.110.196':445
'24.##0.204.232':139
'24.##0.192.184':139
'24.##0.196.102':139
'24.##0.98.169':139
'24.##0.178.18':139
'24.##0.168.178':139
'24.##0.165.237':139
'24.##0.249.215':139
'24.##0.72.75':139
'24.##0.10.209':139
'24.##0.108.208':139
'24.##0.63.56':139
'24.##0.107.233':139
'24.##0.130.147':139
'24.##0.114.38':139
'24.##0.86.165':139
'24.##0.113.241':139
'24.##0.18.179':139
'24.##0.3.207':139
'24.##0.114.4':139
'24.##0.29.187':139
'24.##0.86.82':139
'24.##0.10.209':445
'24.##0.108.208':445
'24.##0.196.102':445
'24.##0.98.169':445
'24.##0.192.184':445
'24.##0.204.232':445
'24.##0.212.33':139
'24.##0.249.215':445
'24.##0.72.75':445
'24.##0.165.237':445
'24.##0.219.167':445
'24.##0.94.153':445
'24.##0.40.41':445
'24.##0.245.204':445
'24.##0.166.48':445
'24.##0.29.122':9988
'24.##0.252.211':9988
'24.##0.154.139':9988
'24.##0.1.220':445
'24.##0.234.1':445
'24.##0.183.106':445
'24.##0.96.147':445
'24.##0.218.135':445
'24.##0.226.220':445
'24.##0.58.110':445
'24.##0.253.58':445
'24.##0.217.241':445
'24.##0.207.190':445
'24.##0.32.30':445
'24.##0.90.38':445
'24.##0.77.173':445
'24.##0.162.141':139
'24.##0.39.162':139
'24.##0.70.193':139
'24.##0.166.48':9988
'24.##0.234.1':9988
'24.##0.110.196':139
'24.##0.18.175':139
'24.##0.68.244':139
'24.##0.124.141':139
'24.##0.59.133':139
'24.##0.197.155':9988
'24.##0.41.117':9988
'24.##0.166.45':9988
'24.##0.169.67':9988
'24.##0.148.206':9988
'24.##0.32.20':9988
'24.##0.65.241':9988
'24.##0.35.170':9988
'24.##0.104.37':9988
'24.##0.167.134':9988
'24.##0.50.182':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней