Trojan.Starman.5305

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##0.235.215':445
'14.##0.108.235':445
'14.##0.61.204':445
'14.##0.134.56':445
'14.##0.36.109':445
'14.##0.110.168':445
'14.##0.135.237':445
'14.##0.65.89':445
'14.##0.98.42':445
'14.##0.38.108':139
'14.##0.218.38':139
'14.##0.55.236':139
'14.##0.239.55':139
'14.##0.147.170':139
'14.#00.0.22':445
'14.##0.203.158':445
'14.##0.15.94':139
'14.##0.71.111':139
'14.##0.90.187':445
'14.##0.163.24':445
'14.##0.141.86':445
'14.##0.39.213':445
'14.##0.246.66':445
'14.##0.103.204':445
'14.##0.10.135':445
'14.##0.164.185':445
'14.##0.8.186':445
'14.##0.78.35':445
'14.##0.105.54':445
'14.##0.18.57':445
'14.#00.2.23':445
'14.#00.53.6':445
'14.##0.163.59':445
'14.##0.110.200':445
'14.##0.77.208':445
'14.##0.32.174':445
'14.##0.39.84':139
'14.##0.235.215':139
'14.##0.108.235':139
'14.##0.61.204':139
'14.##0.134.56':139
'14.##0.36.109':139
'14.##0.110.168':139
'14.##0.135.237':139
'14.##0.65.89':139
'14.##0.98.42':139
'14.##0.204.77':445
'14.##0.110.204':445
'14.##0.237.122':445
'14.##0.232.243':445
'14.##0.20.111':445
'14.#00.0.22':139
'14.##0.203.158':139
'14.##0.211.118':445
'14.##0.100.160':445
'14.##0.90.187':139
'14.##0.163.24':139
'14.##0.141.86':139
'14.##0.39.213':139
'14.##0.246.66':139
'14.##0.103.204':139
'14.##0.10.135':139
'14.##0.164.185':139
'14.##0.8.186':139
'14.##0.78.35':139
'14.##0.105.54':139
'14.##0.18.57':139
'14.#00.2.23':139
'14.#00.53.6':139
'14.##0.163.59':139
'14.##0.110.200':139
'14.##0.77.208':139
'14.##0.32.174':139
'14.##0.114.169':139
'14.##0.93.109':139
'14.##0.129.80':139
'14.##0.103.248':139
'14.##0.66.121':139
'14.##0.38.77':139
'14.##0.140.81':139
'14.##0.127.88':139
'14.##0.64.155':139
'14.##0.25.33':139
'14.##0.207.24':139
'14.##0.95.248':139
'14.##0.145.57':139
'14.##0.12.207':139
'14.##0.42.43':139
'14.##0.80.42':139
'14.##0.217.12':139
'14.##0.158.170':139
'14.##0.1.107':139
'14.##0.24.90':139
'14.##0.152.151':139
'14.##0.107.32':139
'14.##0.143.179':139
'14.##0.206.118':139
'14.##0.178.172':139
'14.##0.221.5':139
'14.##0.30.117':139
'14.##0.26.158':139
'14.##0.61.26':139
'14.##0.64.244':139
'14.##0.135.193':139
'14.##0.218.60':139
'14.##0.147.250':139
'14.#00.95.3':139
'14.##0.0.241':139
'14.##0.130.17':139
'14.##0.182.127':139
'14.##0.10.92':139
'14.##0.10.29':139
'14.##0.206.97':139
'14.##0.2.235':139
'14.##0.191.9':139
'14.##0.47.156':139
'14.##0.22.48':139
'14.##0.200.190':139
'14.##0.96.152':139
'14.##0.239.55':445
'14.##0.38.108':445
'14.##0.39.84':445
'14.##0.55.236':445
'14.##0.218.38':445
'14.##0.71.111':445
'14.##0.108.178':139
'14.##0.147.170':445
'14.##0.15.94':445
'14.##0.96.152':445
'14.##0.47.156':445
'14.##0.191.9':445
'14.##0.200.190':445
'14.##0.22.48':445
'14.##0.171.116':445
'14.##0.41.20':445
'14.##0.126.101':445
'14.##0.208.12':445
'14.##0.171.116':139
'14.##0.41.20':139
'14.##0.126.101':139
'14.##0.208.12':139
'14.##0.108.178':445
'14.##0.10.92':445
'14.##0.10.29':445
'14.##0.206.97':445
'14.##0.2.235':445
'14.##0.111.233':139
'14.##0.122.112':139
'14.##0.232.133':139
'14.##0.51.234':139
'14.##0.234.122':139
'14.##0.40.103':445
'14.##0.103.94':445
'14.##0.13.127':445
'14.##0.94.204':445
'14.##0.159.42':139
'14.##0.214.113':139
'14.##0.248.254':139
'14.##0.123.15':139
'14.##0.225.164':139
'14.##0.135.70':139
'14.##0.133.244':139
'14.##0.116.233':139
'14.##0.94.241':139
'14.##0.9.210':445
'14.##0.249.9':445
'14.##0.216.188':445
'14.##0.87.19':445
'14.##0.225.87':445
'14.##0.64.30':445
'14.##0.113.81':445
'14.##0.50.186':445
'14.##0.121.184':445
'14.##0.67.141':445
'14.##0.17.86':445
'14.##0.39.18':445
'14.##0.141.9':445
'14.##0.213.209':445
'14.##0.149.236':445
'14.##0.239.251':445
'14.##0.197.214':445
'14.##0.236.196':445
'14.##0.60.245':139
'14.##0.149.236':139
'14.##0.239.251':139
'14.##0.197.214':139
'14.##0.236.196':139
'14.##0.216.188':139
'14.##0.249.9':139
'14.##0.225.87':139
'14.##0.87.19':139
'14.##0.9.210':139
'14.##0.40.103':139
'14.##0.13.127':139
'14.##0.103.94':139
'14.##0.94.204':139
'14.##0.39.18':139
'14.##0.17.86':139
'14.##0.213.209':139
'14.##0.141.9':139
'14.##0.67.141':139
'14.##0.68.46':139
'14.##0.242.11':139
'14.#00.4.87':139
'14.##0.137.46':139
'14.##0.162.56':139
'14.##0.131.10':139
'14.##0.0.106':139
'14.##0.10.24':139
'14.##0.99.12':139
'14.##0.64.30':139
'14.##0.113.81':139
'14.##0.50.186':139
'14.##0.121.184':139
'14.##0.188.55':139
'14.##0.60.35':139
'14.##0.2.161':139
'14.##0.175.251':139
'14.##0.143.154':139
'14.##0.163.245':139
'14.##0.30.189':445
'14.##0.30.189':139
'14.##0.208.189':139
'14.##0.208.189':445
'14.##0.202.14':139
'14.##0.86.220':139
'14.##0.163.245':445
'14.##0.136.236':139
'14.##0.242.11':9988
'14.##0.249.9':9988
'14.##0.188.55':9988
'14.##0.87.19':9988
'14.##0.9.210':9988
'14.##0.225.87':9988
'14.##0.121.184':9988
'14.##0.216.188':9988
'14.##0.175.251':9988
'14.##0.136.236':445
'14.##0.202.14':445
'14.##0.211.118':139
'14.##0.100.160':139
'14.##0.86.220':445
'14.##0.92.156':445
'14.##0.122.231':445
'14.##0.214.86':445
'14.##0.188.223':445
'14.##0.92.156':139
'14.##0.122.231':139
'14.##0.214.86':139
'14.##0.188.223':139
'14.##0.237.122':139
'14.##0.110.204':139
'14.##0.20.111':139
'14.##0.232.243':139
'14.##0.204.77':139
'14.##0.236.196':9988
'14.##0.99.12':445
'14.##0.131.10':445
'14.##0.162.56':445
'14.##0.10.24':445
'14.##0.0.106':445
'14.##0.123.15':445
'14.##0.159.42':445
'14.##0.60.245':445
'14.##0.248.254':445
'14.##0.143.154':445
'14.##0.60.35':445
'14.##0.188.55':445
'14.##0.175.251':445
'14.##0.2.161':445
'14.##0.68.46':445
'14.##0.242.11':445
'14.#00.4.87':445
'14.##0.137.46':445
'14.##0.94.204':9988
'14.##0.13.127':9988
'14.##0.122.112':445
'14.##0.234.122':445
'14.##0.50.186':9988
'14.##0.67.141':9988
'14.##0.213.209':9988
'14.##0.113.81':9988
'14.##0.149.236':9988
'14.##0.116.233':445
'14.##0.94.241':445
'14.##0.214.113':445
'14.##0.225.164':445
'14.##0.135.70':445
'14.##0.51.234':445
'14.##0.111.233':445
'14.##0.133.244':445
'14.##0.232.133':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней