Trojan.Starman.5882

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##0.147.20':139
'14.##0.223.146':139
'14.#20.21.0':139
'14.##0.50.103':445
'14.##0.65.145':139
'14.##0.35.201':139
'14.##0.83.119':139
'14.##0.240.66':139
'14.##0.27.27':139
'14.##0.145.27':139
'14.##0.244.166':445
'14.##0.212.115':445
'14.##0.86.102':445
'14.##0.49.251':445
'14.##0.87.172':445
'14.##0.133.133':445
'14.##0.200.24':445
'14.#20.2.67':445
'14.##0.119.216':445
'14.##0.134.208':445
'14.##0.29.54':445
'14.##0.196.148':139
'14.##0.83.119':445
'14.##0.196.148':445
'14.##0.35.201':445
'14.##0.145.27':445
'14.##0.240.66':445
'14.##0.30.89':445
'14.##0.106.14':445
'14.##0.52.151':445
'14.##0.66.153':445
'14.##0.33.186':445
'14.##0.27.27':445
'14.##0.30.89':139
'14.##0.106.14':139
'14.##0.52.151':139
'14.##0.66.153':139
'14.##0.33.186':139
'14.##0.147.20':445
'14.##0.223.146':445
'14.#20.21.0':445
'14.##0.206.179':139
'14.##0.65.145':445
'14.##0.29.54':139
'14.##0.119.216':139
'14.##0.134.208':139
'14.##0.212.115':139
'14.##0.86.102':139
'14.##0.50.103':139
'14.##0.79.97':445
'14.##0.244.166':139
'14.##0.200.24':139
'14.#20.2.67':139
'14.##0.49.251':139
'14.##0.171.216':139
'14.##0.55.172':139
'14.##0.216.242':139
'14.##0.135.153':139
'14.##0.73.205':139
'14.##0.87.172':139
'14.##0.133.133':139
'14.##0.192.134':139
'14.##0.40.56':139
'14.##0.122.40':139
'14.##0.145.5':445
'14.##0.73.205':445
'14.##0.216.242':445
'14.##0.135.153':445
'14.##0.128.111':445
'14.##0.213.36':445
'14.##0.122.40':445
'14.##0.192.134':445
'14.##0.40.56':445
'14.##0.171.216':445
'14.##0.55.172':445
'14.##0.162.93':445
'14.##0.34.243':445
'14.##0.138.187':445
'14.##0.236.12':445
'14.##0.112.0':445
'14.##0.116.157':445
'14.##0.236.114':445
'14.##0.92.236':445
'14.##0.114.174':445
'14.##0.158.16':445
'14.##0.253.235':445
'14.##0.206.179':445
'14.##0.36.68':445
'14.##0.187.29':445
'14.##0.38.186':445
'14.##0.72.198':445
'14.##0.35.73':445
'14.##0.205.68':445
'14.#20.6.60':445
'14.##0.68.172':445
'14.##0.34.187':445
'14.##0.172.34':445
'14.##0.198.26':445
'14.##0.113.149':445
'14.##0.93.155':445
'14.##0.141.33':445
'14.##0.144.26':445
'14.##0.254.127':445
'14.##0.82.14':445
'14.##0.222.45':445
'14.##0.202.25':445
'14.##0.100.99':445
'14.##0.26.88':445
'14.#20.6.5':445
'14.##0.145.69':139
'14.##0.160.144':139
'14.##0.69.163':139
'14.##0.251.182':139
'14.##0.162.251':139
'14.##0.101.44':139
'14.##0.205.90':139
'14.##0.49.67':139
'14.##0.28.14':139
'14.##0.115.146':139
'14.##0.72.123':139
'14.##0.138.64':445
'14.##0.89.195':445
'14.##0.18.34':445
'14.##0.24.253':445
'14.##0.166.250':445
'14.##0.139.199':139
'14.##0.62.16':139
'14.##0.223.119':139
'14.##0.85.76':139
'14.##0.189.9':139
'14.##0.26.88':139
'14.##0.202.25':139
'14.##0.100.99':139
'14.##0.113.149':139
'14.##0.93.155':139
'14.##0.72.198':139
'14.##0.35.73':139
'14.##0.198.26':139
'14.##0.82.14':139
'14.##0.222.45':139
'14.##0.141.33':139
'14.##0.214.146':139
'14.##0.38.248':139
'14.##0.244.27':139
'14.##0.166.46':139
'14.##0.9.122':139
'14.##0.144.26':139
'14.##0.254.127':139
'14.##0.33.112':139
'14.##0.169.195':139
'14.##0.46.228':139
'14.##0.38.186':139
'14.##0.9.122':445
'14.##0.244.27':445
'14.##0.166.46':445
'14.##0.138.64':139
'14.##0.89.195':139
'14.##0.46.228':445
'14.##0.33.112':445
'14.##0.169.195':445
'14.##0.214.146':445
'14.##0.38.248':445
'14.##0.18.34':139
'14.##0.172.34':139
'14.##0.68.172':139
'14.##0.34.187':139
'14.##0.36.68':139
'14.##0.187.29':139
'14.##0.24.253':139
'14.##0.166.250':139
'14.#20.6.5':139
'14.##0.205.68':139
'14.#20.6.60':139
'14.##0.213.36':139
'14.##0.168.182':445
'14.##0.153.11':445
'14.##0.154.167':445
'14.##0.254.205':445
'14.##0.205.247':445
'14.##0.210.141':445
'14.##0.46.181':445
'14.##0.142.15':445
'14.##0.57.46':445
'14.##0.15.168':445
'14.##0.141.237':445
'14.##0.124.164':139
'14.##0.158.124':139
'14.##0.68.227':139
'14.##0.6.241':139
'14.##0.0.250':139
'14.##0.18.206':445
'14.##0.2.119':445
'14.##0.219.206':139
'14.##0.196.158':139
'14.##0.49.150':139
'14.##0.146.64':445
'14.##0.83.67':445
'14.##0.54.26':445
'14.##0.174.83':445
'14.##0.161.252':445
'14.##0.171.234':445
'14.##0.13.71':445
'14.##0.66.217':445
'14.##0.133.177':445
'14.##0.104.125':445
'14.##0.163.62':445
'14.##0.166.161':445
'14.##0.15.79':445
'14.##0.15.228':445
'14.##0.137.76':445
'14.##0.120.23':445
'14.##0.76.162':445
'14.##0.47.192':445
'14.##0.252.196':445
'14.##0.243.82':445
'14.##0.6.122':445
'14.##0.127.203':445
'14.##0.120.23':139
'14.##0.76.162':139
'14.##0.146.64':139
'14.##0.210.141':139
'14.##0.46.181':139
'14.##0.6.122':139
'14.##0.127.203':139
'14.##0.15.228':139
'14.##0.137.76':139
'14.##0.15.79':139
'14.##0.142.15':139
'14.##0.141.237':139
'14.##0.2.119':139
'14.##0.205.247':139
'14.##0.18.206':139
'14.##0.254.205':139
'14.##0.57.46':139
'14.##0.15.168':139
'14.##0.153.11':139
'14.##0.154.167':139
'14.##0.168.182':139
'14.##0.243.82':139
'14.##0.185.34':139
'14.##0.223.112':139
'14.##0.88.20':139
'14.##0.13.71':139
'14.##0.66.217':139
'14.##0.35.172':139
'14.##0.183.181':139
'14.##0.133.64':139
'14.##0.35.76':139
'14.##0.219.144':139
'14.##0.133.177':139
'14.##0.166.161':139
'14.##0.171.234':139
'14.##0.161.252':139
'14.##0.47.192':139
'14.##0.252.196':139
'14.##0.104.125':139
'14.##0.163.62':139
'14.##0.54.26':139
'14.##0.174.83':139
'14.##0.83.67':139
'14.##0.88.20':445
'14.##0.107.171':445
'14.##0.103.218':445
'14.##0.75.42':445
'14.##0.154.196':139
'14.##0.20.39':139
'14.##0.230.79':445
'14.##0.19.184':445
'14.##0.15.127':445
'14.##0.144.114':445
'14.##0.4.226':445
'14.##0.196.199':139
'14.##0.230.79':139
'14.##0.19.184':139
'14.##0.15.127':139
'14.##0.144.114':139
'14.##0.4.226':139
'14.##0.240.227':139
'14.##0.96.63':139
'14.##0.184.72':139
'14.##0.207.179':139
'14.##0.27.238':139
'14.##0.207.179':445
'14.##0.158.16':139
'14.##0.253.235':139
'14.##0.138.187':139
'14.##0.236.12':139
'14.##0.34.243':139
'14.##0.162.93':139
'14.##0.128.111':139
'14.##0.92.236':139
'14.##0.114.174':139
'14.##0.236.114':139
'14.##0.116.157':139
'14.##0.96.63':445
'14.##0.196.199':445
'14.##0.240.227':445
'14.##0.27.238':445
'14.##0.184.72':445
'14.##0.145.5':139
'14.##0.112.0':139
'14.##0.79.97':139
'14.##0.154.196':445
'14.##0.20.39':445
'14.##0.219.206':445
'14.##0.18.206':9988
'14.##0.49.150':445
'14.##0.158.124':445
'14.##0.196.158':445
'14.##0.15.79':9988
'14.##0.76.162':9988
'14.##0.15.168':9988
'14.##0.205.247':9988
'14.##0.153.11':9988
'14.##0.124.164':445
'14.##0.219.144':445
'14.##0.133.64':445
'14.##0.35.76':445
'14.##0.185.34':445
'14.##0.223.112':445
'14.##0.0.250':445
'14.##0.68.227':445
'14.##0.6.241':445
'14.##0.35.172':445
'14.##0.183.181':445
'14.##0.46.181':9988
'14.#20.27.7':445
'14.##0.32.182':445
'14.##0.196.17':445
'14.##0.170.225':139
'14.##0.61.151':139
'14.##0.107.171':139
'14.##0.103.218':139
'14.##0.75.42':139
'14.##0.170.225':445
'14.##0.61.151':445
'14.##0.32.182':139
'14.##0.142.15':9988
'14.##0.6.122':9988
'14.##0.166.161':9988
'14.##0.252.196':9988
'14.##0.120.23':9988
'14.##0.196.17':139
'14.#20.27.7':139
'14.##0.47.192':9988
'14.##0.161.252':9988
'14.##0.243.82':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней