Trojan.Starman.5343

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#2.140.49':139
'19#.#2.250.154':139
'19#.#2.130.246':139
'19#.#2.136.72':139
'19#.#2.61.83':445
'19#.52.0.57':445
'19#.#2.239.88':445
'19#.#2.238.203':445
'19#.#2.159.151':445
'19#.#2.198.212':139
'19#.#2.235.161':139
'19#.#2.213.191':139
'19#.#2.252.86':139
'19#.#2.216.252':139
'19#.#2.242.213':139
'19#.#2.135.67':139
'19#.#2.151.45':139
'19#.#2.117.154':139
'19#.#2.228.105':139
'19#.52.79.0':445
'19#.#2.136.25':445
'19#.#2.132.182':445
'19#.52.27.9':445
'19#.#2.83.252':445
'19#.#2.16.60':445
'19#.#2.174.207':445
'19#.#2.105.226':445
'19#.#2.107.12':445
'19#.#2.189.228':445
'19#.#2.89.30':445
'19#.#2.173.24':445
'19#.#2.14.130':445
'19#.#2.56.222':445
'19#.#2.7.204':445
'19#.#2.74.116':445
'19#.#2.26.111':445
'19#.#2.105.113':445
'19#.#2.62.165':445
'19#.#2.87.161':139
'19#.#2.173.24':139
'19#.#2.7.204':139
'19#.#2.56.222':139
'19#.#2.89.30':139
'19#.#2.105.113':139
'19#.#2.26.111':139
'19#.#2.189.228':139
'19#.#2.62.165':139
'19#.#2.74.116':139
'19#.#2.14.130':139
'19#.#2.103.234':445
'19#.#2.84.234':445
'19#.#2.103.234':139
'19#.#2.84.234':139
'19#.#2.61.83':139
'19#.52.0.57':139
'19#.#2.239.88':139
'19#.#2.238.203':139
'19#.#2.159.151':139
'19#.#2.45.91':139
'19#.#2.181.247':139
'19#.#2.110.100':139
'19#.#2.25.199':139
'19#.#2.56.185':139
'19#.#2.92.89':139
'19#.#2.88.102':139
'19#.#2.159.45':139
'19#.#2.76.148':139
'19#.#2.38.183':139
'19#.52.79.0':139
'19#.#2.136.25':139
'19#.#2.132.182':139
'19#.52.27.9':139
'19#.#2.83.252':139
'19#.#2.16.60':139
'19#.#2.174.207':139
'19#.#2.105.226':139
'19#.#2.107.12':139
'19#.#2.38.183':445
'19#.#2.105.160':139
'19#.#2.135.240':139
'19#.#2.16.235':139
'19#.#2.43.139':139
'19#.#2.239.124':139
'19#.#2.33.10':139
'19#.#2.206.32':139
'19#.#2.71.33':139
'19#.#2.9.229':139
'19#.#2.225.95':139
'19#.#2.177.125':139
'19#.#2.150.177':139
'19#.#2.205.222':139
'19#.#2.125.83':139
'19#.#2.250.150':139
'19#.#2.244.34':139
'19#.#2.230.228':139
'19#.#2.134.250':139
'19#.#2.94.176':139
'19#.#2.117.33':139
'19#.#2.249.15':139
'19#.#2.198.201':139
'19#.#2.130.127':139
'19#.#2.14.37':139
'19#.#2.86.61':139
'19#.#2.162.86':139
'19#.#2.12.215':139
'19#.#2.61.160':139
'19#.#2.18.30':139
'19#.#2.162.10':139
'19#.#2.181.150':139
'19#.#2.233.205':139
'19#.#2.45.119':139
'19#.#2.184.223':139
'19#.#2.221.149':139
'19#.#2.105.110':139
'19#.#2.141.219':139
'19#.#2.25.206':139
'19#.#2.223.81':139
'19#.#2.235.161':445
'19#.#2.213.191':445
'19#.#2.252.86':445
'19#.#2.216.252':445
'19#.#2.242.213':445
'19#.#2.135.67':445
'19#.#2.151.45':445
'19#.#2.117.154':445
'19#.#2.228.105':445
'19#.#2.87.161':445
'19#.#2.45.91':445
'19#.#2.181.247':445
'19#.#2.110.100':445
'19#.#2.25.199':445
'19#.#2.56.185':445
'19#.#2.92.89':445
'19#.#2.88.102':445
'19#.#2.159.45':445
'19#.#2.76.148':445
'19#.#2.125.214':139
'19#.#2.151.125':139
'19#.#2.206.140':139
'19#.#2.92.146':139
'19#.#2.5.254':139
'19#.#2.93.36':139
'19#.#2.173.131':139
'19#.#2.199.114':139
'19#.#2.160.57':139
'19#.#2.53.73':139
'19#.#2.136.72':445
'19#.#2.140.49':445
'19#.#2.198.212':445
'19#.#2.130.246':445
'19#.#2.250.154':445
'19#.#2.53.151':445
'19#.#2.31.160':445
'19#.#2.53.151':139
'19#.#2.31.160':139
'19#.#2.81.100':445
'19#.#2.61.67':445
'19#.#2.92.48':445
'19#.#2.84.50':139
'19#.#2.12.48':139
'19#.#2.126.114':445
'19#.#2.246.125':445
'19#.#2.176.246':445
'19#.#2.61.62':445
'19#.#2.212.167':445
'19#.#2.99.253':139
'19#.#2.149.143':139
'19#.#2.90.149':139
'19#.#2.78.77':139
'19#.#2.143.209':139
'19#.#2.19.52':139
'19#.#2.178.206':139
'19#.#2.48.224':139
'19#.#2.141.85':139
'19#.#2.241.1':139
'19#.#2.159.157':445
'19#.#2.234.174':445
'19#.#2.94.171':445
'19#.#2.157.69':445
'19#.#2.93.209':445
'19#.#2.236.33':445
'19#.#2.76.36':445
'19#.#2.44.70':445
'19#.#2.129.187':445
'19#.52.23.5':445
'19#.#2.250.67':445
'19#.#2.116.249':445
'19#.#2.107.176':445
'19#.#2.67.226':445
'19#.#2.200.116':445
'19#.#2.245.113':445
'19#.#2.4.134':445
'19#.#2.113.200':445
'19#.#2.46.175':445
'19#.#2.214.198':139
'19#.#2.113.200':139
'19#.#2.46.175':139
'19#.#2.116.249':139
'19#.#2.200.116':139
'19#.#2.245.113':139
'19#.#2.94.171':139
'19#.#2.157.69':139
'19#.#2.4.134':139
'19#.52.23.5':139
'19#.#2.250.67':139
'19#.#2.212.167':139
'19#.#2.61.62':139
'19#.#2.61.67':139
'19#.#2.92.48':139
'19#.#2.126.114':139
'19#.#2.107.176':139
'19#.#2.67.226':139
'19#.#2.246.125':139
'19#.#2.176.246':139
'19#.#2.217.148':139
'19#.#2.71.217':139
'19#.#2.244.148':139
'19#.#2.210.188':139
'19#.#2.94.71':139
'19#.#2.155.59':139
'19#.#2.20.86':139
'19#.#2.130.206':139
'19#.#2.67.132':139
'19#.#2.179.35':139
'19#.#2.93.209':139
'19#.#2.44.70':139
'19#.#2.159.157':139
'19#.#2.234.174':139
'19#.#2.129.187':139
'19#.#2.35.238':139
'19#.#2.130.96':139
'19#.#2.236.33':139
'19#.#2.76.36':139
'19#.#2.35.238':445
'19#.#2.35.11':139
'19#.#2.51.245':139
'19#.#2.24.46':139
'19#.#2.130.108':139
'19#.#2.17.138':139
'19#.#2.166.30':139
'19#.#2.82.137':139
'19#.#2.142.179':139
'19#.#2.103.180':139
'19#.#2.27.202':139
'19#.#2.174.26':139
'19#.#2.132.152':139
'19#.#2.130.206':9988
'19#.#2.27.12':139
'19#.#2.156.242':139
'19#.#2.191.136':139
'19#.#2.133.191':139
'19#.#2.124.156':139
'19#.#2.210.64':139
'19#.#2.35.11':445
'19#.#2.51.245':445
'19#.#2.24.46':445
'19#.#2.130.108':445
'19#.#2.17.138':445
'19#.#2.166.30':445
'19#.#2.82.137':445
'19#.#2.142.179':445
'19#.#2.103.180':445
'19#.#2.27.202':445
'19#.#2.174.26':445
'19#.#2.132.152':445
'19#.#2.81.100':139
'19#.#2.27.12':445
'19#.#2.156.242':445
'19#.#2.191.136':445
'19#.#2.133.191':445
'19#.#2.124.156':445
'19#.#2.210.64':445
'19#.#2.210.188':9988
'19#.#2.78.77':445
'19#.#2.143.209':445
'19#.#2.20.86':445
'19#.#2.214.198':445
'19#.#2.149.143':445
'19#.#2.141.85':445
'19#.#2.241.1':445
'19#.#2.90.149':445
'19#.#2.19.52':445
'19#.#2.155.59':445
'19#.#2.244.148':445
'19#.#2.210.188':445
'19#.#2.130.96':445
'19#.#2.179.35':445
'19#.#2.217.148':445
'19#.#2.130.206':445
'19#.#2.67.132':445
'19#.#2.71.217':445
'19#.#2.94.71':445
'19#.#2.12.48':9988
'19#.#2.93.209':9988
'19#.#2.143.209':9988
'19#.#2.155.59':9988
'19#.#2.84.50':9988
'19#.#2.217.148':9988
'19#.#2.48.224':9988
'19#.#2.67.132':9988
'19#.#2.90.149':9988
'19#.#2.214.198':9988
'19#.#2.99.253':445
'19#.#2.84.50':445
'19#.#2.178.206':445
'19#.#2.48.224':445
'19#.#2.12.48':445
'19#.#2.241.1':9988
'19#.#2.244.148':9988
'19#.#2.200.116':9988
'19#.#2.78.77':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней