Trojan.Starman.6407

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'20#.#1.228.167':445
'20#.#1.124.52':445
'20#.#1.178.1':445
'20#.#1.27.39':445
'20#.#1.47.225':445
'20#.#1.135.51':445
'20#.81.1.44':445
'20#.#1.47.24':445
'20#.#1.194.43':445
'20#.#1.117.102':445
'20#.#1.79.123':445
'20#.#1.147.29':445
'20#.#1.114.131':445
'20#.#1.52.201':445
'20#.#1.131.108':445
'20#.#1.107.156':445
'20#.#1.28.22':445
'20#.#1.70.195':445
'20#.#1.236.121':445
'20#.#1.244.15':139
'20#.#1.48.244':139
'20#.#1.11.48':139
'20#.#1.10.104':139
'20#.#1.48.161':139
'20#.#1.105.170':139
'20#.#1.105.171':139
'20#.#1.254.41':139
'20#.#1.3.254':139
'20#.#1.3.181':139
'20#.#1.111.142':139
'20#.#1.229.87':139
'20#.#1.151.135':445
'20#.#1.166.200':139
'20#.#1.9.207':139
'20#.#1.45.103':139
'20#.#1.127.208':139
'20#.#1.135.45':139
'20#.#1.254.145':139
'20#.#1.3.178':445
'20#.#1.38.225':445
'20#.#1.196.242':445
'20#.#1.164.234':445
'20#.#1.108.177':445
'20#.#1.43.169':445
'20#.#1.52.201':139
'20#.#1.114.131':139
'20#.#1.222.241':139
'20#.#1.3.178':139
'20#.#1.10.30':445
'20#.#1.84.67':445
'20#.#1.121.31':445
'20#.#1.209.59':445
'20#.#1.82.115':445
'20#.#1.149.91':445
'20#.#1.144.229':445
'20#.#1.12.100':445
'20#.#1.202.36':445
'20#.#1.101.241':445
'20#.#1.135.51':139
'20#.#1.194.43':139
'20#.#1.124.52':139
'20#.#1.228.167':139
'20#.#1.47.24':139
'20#.#1.151.135':139
'20#.#1.222.241':445
'20#.#1.47.225':139
'20#.81.1.44':139
'20#.#1.27.39':139
'20#.#1.131.108':139
'20#.#1.107.156':139
'20#.#1.147.29':139
'20#.#1.79.123':139
'20#.#1.70.195':139
'20#.#1.117.102':139
'20#.#1.178.1':139
'20#.#1.236.121':139
'20#.#1.28.22':139
'20#.#1.187.200':139
'20#.#1.12.232':139
'20#.#1.141.46':139
'20#.#1.66.178':139
'20#.#1.169.189':139
'20#.#1.255.61':139
'20#.#1.43.135':139
'20#.#1.114.43':139
'20#.#1.239.54':139
'20#.#1.156.110':139
'20#.#1.143.152':139
'20#.#1.148.183':139
'20#.#1.8.109':139
'20#.#1.27.96':139
'20#.81.0.36':139
'20#.#1.129.187':139
'20#.#1.148.148':139
'20#.#1.239.85':139
'20#.#1.76.130':139
'20#.#1.13.77':139
'20#.#1.143.152':445
'20#.#1.66.178':445
'20#.#1.148.148':445
'20#.#1.239.85':445
'20#.#1.169.189':445
'20#.#1.255.61':445
'20#.#1.239.54':445
'20#.#1.12.232':445
'20#.#1.141.46':445
'20#.#1.13.77':445
'20#.#1.136.175':139
'20#.#1.27.96':445
'20#.#1.46.114':139
'20#.#1.42.151':139
'20#.81.0.36':445
'20#.#1.129.187':445
'20#.#1.76.130':445
'20#.#1.148.183':445
'20#.#1.8.109':445
'20#.#1.135.96':445
'20#.#1.229.87':445
'20#.#1.9.207':445
'20#.#1.166.200':445
'20#.#1.111.142':445
'20#.#1.135.45':445
'20#.#1.127.208':445
'20#.#1.3.181':445
'20#.#1.254.145':445
'20#.#1.45.103':445
'20#.#1.135.96':139
'20#.#1.54.76':139
'20#.#1.25.209':139
'20#.#1.41.62':139
'20#.#1.135.119':139
'20#.#1.7.127':139
'20#.#1.70.38':139
'20#.#1.57.90':139
'20#.#1.19.152':139
'20#.#1.249.138':139
'20#.#1.54.76':445
'20#.#1.25.209':445
'20#.#1.41.62':445
'20#.#1.135.119':445
'20#.#1.7.127':445
'20#.#1.249.138':445
'20#.#1.57.90':445
'20#.#1.19.152':445
'20#.#1.70.38':445
'20#.#1.187.200':445
'20#.#1.244.15':445
'20#.#1.48.244':445
'20#.#1.11.48':445
'20#.#1.10.104':445
'20#.#1.48.161':445
'20#.#1.105.170':445
'20#.#1.105.171':445
'20#.#1.254.41':445
'20#.#1.3.254':445
'20#.81.43.4':445
'20#.81.68.8':445
'20#.#1.132.2':445
'20#.#1.243.139':139
'20#.#1.117.134':139
'20#.#1.108.22':445
'20#.#1.125.56':445
'20#.#1.31.163':445
'20#.#1.7.177':445
'20#.#1.176.240':445
'20#.#1.58.91':139
'20#.#1.158.154':139
'20#.#1.154.32':139
'20#.#1.36.169':139
'20#.#1.6.155':139
'20#.#1.130.32':139
'20#.#1.29.244':139
'20#.#1.202.66':139
'20#.#1.116.140':139
'20#.81.68.6':139
'20#.#1.165.214':445
'20#.#1.225.230':445
'20#.#1.200.25':445
'20#.#1.172.71':445
'20#.#1.102.38':445
'20#.81.2.1':445
'20#.#1.151.180':445
'20#.#1.11.241':445
'20#.#1.243.110':445
'20#.#1.132.54':445
'20#.#1.14.20':445
'20#.#1.208.218':445
'20#.#1.39.242':445
'20#.#1.223.45':445
'20#.#1.140.147':445
'20#.81.65.5':445
'20#.#1.54.64':445
'20#.#1.244.78':445
'20#.#1.4.205':445
'20#.#1.168.163':139
'20#.#1.244.78':139
'20#.#1.4.205':139
'20#.#1.208.218':139
'20#.#1.140.147':139
'20#.81.65.5':139
'20#.#1.200.25':139
'20#.#1.172.71':139
'20#.#1.54.64':139
'20#.#1.132.54':139
'20#.#1.14.20':139
'20#.#1.176.240':139
'20#.#1.108.22':139
'20#.81.68.8':139
'20#.#1.7.177':139
'20#.#1.132.2':139
'20#.#1.39.242':139
'20#.#1.223.45':139
'20#.#1.125.56':139
'20#.#1.31.163':139
'20#.#1.204.57':139
'20#.#1.18.148':139
'20#.#1.103.103':139
'20#.81.6.26':139
'20#.#1.18.204':139
'20#.#1.5.124':139
'20#.#1.163.164':139
'20#.#1.164.219':139
'20#.#1.60.123':139
'20#.#1.159.52':139
'20#.#1.102.38':139
'20#.#1.11.241':139
'20#.#1.165.214':139
'20#.#1.225.230':139
'20#.#1.243.110':139
'20#.#1.166.29':139
'20#.#1.133.165':139
'20#.81.2.1':139
'20#.#1.151.180':139
'20#.#1.166.29':445
'20#.#1.84.67':139
'20#.#1.121.31':139
'20#.#1.209.59':139
'20#.#1.82.115':139
'20#.#1.149.91':139
'20#.#1.144.229':139
'20#.#1.12.100':139
'20#.#1.202.36':139
'20#.#1.101.241':139
'20#.81.43.4':139
'20#.#1.38.125':139
'20#.#1.174.50':139
'20#.#1.209.146':139
'20#.#1.46.116':139
'20#.#1.146.25':139
'20#.#1.113.193':139
'20#.#1.247.201':139
'20#.#1.185.146':139
'20#.#1.156.185':139
'20#.#1.38.125':445
'20#.#1.174.50':445
'20#.#1.209.146':445
'20#.#1.46.116':445
'20#.#1.146.25':445
'20#.#1.113.193':445
'20#.#1.247.201':445
'20#.#1.185.146':445
'20#.#1.156.185':445
'20#.#1.242.248':445
'20#.#1.108.177':139
'20#.#1.38.225':139
'20#.#1.10.30':139
'20#.#1.164.234':139
'20#.#1.196.242':139
'20#.#1.122.52':445
'20#.#1.50.70':445
'20#.#1.43.169':139
'20#.#1.21.50':445
'20#.#1.242.248':139
'20#.#1.36.169':445
'20#.#1.6.155':445
'20#.#1.163.164':445
'20#.#1.168.163':445
'20#.#1.158.154':445
'20#.#1.116.140':445
'20#.81.68.6':445
'20#.#1.154.32':445
'20#.#1.130.32':445
'20#.#1.5.124':445
'20#.#1.103.103':445
'20#.81.6.26':445
'20#.#1.133.165':445
'20#.#1.159.52':445
'20#.#1.204.57':445
'20#.#1.164.219':445
'20#.#1.60.123':445
'20#.#1.18.148':445
'20#.#1.18.204':445
'20#.#1.11.241':9988
'20#.#1.168.163':9988
'20#.#1.225.230':9988
'20#.#1.102.38':9988
'20#.#1.36.169':9988
'20#.#1.122.52':139
'20#.#1.50.70':139
'20#.#1.6.155':9988
'20#.#1.21.50':139
'20#.#1.165.214':9988
'20#.#1.58.91':445
'20#.#1.243.139':445
'20#.#1.29.244':445
'20#.#1.202.66':445
'20#.#1.117.134':445
'20#.#1.132.54':9988
'20#.#1.172.71':9988
'20#.#1.108.22':9988
'20#.#1.244.78':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней