Trojan.Starman.6408

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#5.152.195':445
'20#.#5.26.48':445
'20#.#5.99.212':139
'20#.#5.198.138':139
'20#.75.18.1':445
'20#.#5.52.58':445
'20#.#5.164.239':445
'20#.#5.22.27':445
'20#.#5.151.22':445
'20#.#5.72.50':139
'20#.#5.146.150':139
'20#.#5.40.134':139
'20#.#5.50.240':139
'20#.#5.200.127':139
'20#.#5.168.222':139
'20#.#5.11.56':139
'20#.#5.216.200':139
'20#.#5.176.98':139
'20#.#5.242.152':445
'20#.#5.192.93':445
'20#.#5.70.201':445
'20#.#5.178.53':445
'20#.#5.44.101':445
'20#.#5.77.219':445
'20#.#5.31.86':445
'20#.#5.124.94':445
'20#.#5.25.78':445
'20#.#5.97.148':445
'20#.#5.86.90':445
'20#.#5.55.32':445
'20#.#5.47.86':445
'20#.#5.119.172':445
'20#.#5.49.233':445
'20#.#5.27.42':445
'20#.#5.208.149':445
'20#.#5.86.213':445
'20#.#5.1.118':445
'20#.#5.110.197':139
'20#.#5.86.213':139
'20#.#5.1.118':139
'20#.#5.55.32':139
'20#.#5.49.233':139
'20#.#5.27.42':139
'20#.#5.44.101':139
'20#.#5.192.93':139
'20#.#5.208.149':139
'20#.#5.178.53':139
'20#.#5.151.22':139
'20#.#5.52.58':139
'20#.75.18.1':139
'20#.#5.22.27':139
'20#.#5.164.239':139
'20#.#5.119.172':139
'20#.#5.86.90':139
'20#.#5.242.152':139
'20#.#5.47.86':139
'20#.#5.70.201':139
'20#.#5.170.176':139
'20#.#5.219.170':139
'20#.#5.247.13':139
'20#.#5.68.119':139
'20#.#5.56.50':139
'20#.#5.115.149':139
'20#.#5.146.147':139
'20#.#5.232.245':139
'20#.#5.201.24':139
'20#.#5.97.148':139
'20#.#5.31.86':139
'20#.#5.77.219':139
'20#.#5.25.78':139
'20#.#5.124.94':139
'20#.#5.101.153':139
'20#.#5.3.207':139
'20#.#5.130.210':139
'20#.#5.78.131':139
'20#.#5.130.210':445
'20#.#5.65.38':139
'20#.75.42.3':139
'20#.#5.166.121':139
'20#.#5.53.37':139
'20#.#5.158.75':139
'20#.#5.72.83':139
'20#.#5.226.87':139
'20#.#5.196.192':139
'20#.#5.71.196':139
'20#.#5.65.224':139
'20#.#5.213.65':139
'20#.#5.50.45':139
'20#.#5.224.244':139
'20#.#5.37.98':139
'20#.#5.29.130':139
'20#.#5.76.85':139
'20#.#5.184.11':139
'20#.#5.91.15':139
'20#.#5.248.62':139
'20#.#5.123.130':139
'20#.#5.89.16':139
'20#.#5.165.196':139
'20#.#5.193.37':139
'20#.#5.108.133':139
'20#.#5.43.67':139
'20#.#5.46.218':139
'20#.#5.203.134':139
'20#.75.1.58':139
'20#.75.8.8':139
'20#.#5.124.71':139
'20#.#5.79.248':139
'20#.#5.122.79':139
'20#.#5.203.124':139
'20#.#5.13.148':139
'20#.#5.23.252':139
'20#.#5.66.31':139
'20#.#5.56.81':139
'20#.#5.98.89':139
'20#.#5.146.147':445
'20#.#5.110.197':445
'20#.#5.201.24':445
'20#.#5.115.149':445
'20#.#5.40.134':445
'20#.#5.146.150':445
'20#.#5.200.127':445
'20#.#5.50.240':445
'20#.#5.72.50':445
'20#.#5.3.207':445
'20#.#5.247.13':445
'20#.#5.78.131':445
'20#.#5.101.153':445
'20#.#5.68.119':445
'20#.#5.56.50':445
'20#.#5.232.245':445
'20#.#5.170.176':445
'20#.#5.219.170':445
'20#.#5.216.200':445
'20#.#5.79.228':139
'20#.#5.38.210':139
'20#.#5.177.128':139
'20#.#5.172.60':139
'20#.#5.122.19':139
'20#.#5.57.59':139
'20#.#5.88.188':139
'20#.#5.17.63':139
'20#.#5.141.209':139
'20#.#5.11.56':445
'20#.#5.99.212':445
'20#.#5.176.98':445
'20#.#5.168.222':445
'20#.#5.198.138':445
'20#.#5.124.145':139
'20#.#5.36.153':139
'20#.#5.114.140':139
'20#.#5.34.244':139
'20#.#5.26.48':139
'20#.#5.68.195':139
'20#.#5.8.149':139
'20#.#5.81.148':139
'20#.#5.209.160':139
'20#.#5.187.77':445
'20#.#5.246.194':445
'20#.#5.243.253':445
'20#.#5.75.242':445
'20#.#5.98.103':445
'20#.#5.2.108':139
'20#.#5.16.188':139
'20#.#5.64.60':139
'20#.#5.200.63':139
'20#.#5.51.187':139
'20#.#5.22.28':139
'20#.#5.147.225':139
'20#.#5.16.132':139
'20#.#5.48.125':139
'20#.#5.35.244':445
'20#.#5.26.146':445
'20#.#5.173.201':445
'20#.#5.35.251':445
'20#.#5.44.173':445
'20#.#5.44.209':445
'20#.#5.179.105':445
'20#.#5.141.58':445
'20#.#5.150.192':445
'20#.#5.205.218':445
'20#.#5.214.216':445
'20#.75.9.15':445
'20#.#5.125.91':445
'20#.#5.66.18':445
'20#.75.88.5':445
'20#.#5.91.10':445
'20#.#5.89.235':445
'20#.#5.184.220':445
'20#.#5.93.251':445
'20#.#5.108.235':139
'20#.#5.184.220':139
'20#.#5.93.251':139
'20#.75.9.15':139
'20#.75.88.5':139
'20#.#5.91.10':139
'20#.#5.44.173':139
'20#.#5.26.146':139
'20#.#5.89.235':139
'20#.#5.35.251':139
'20#.#5.98.103':139
'20#.#5.246.194':139
'20#.#5.187.77':139
'20#.#5.75.242':139
'20#.#5.243.253':139
'20#.#5.66.18':139
'20#.#5.214.216':139
'20#.#5.35.244':139
'20#.#5.125.91':139
'20#.#5.173.201':139
'20#.#5.241.21':139
'20#.#5.47.241':139
'20#.#5.98.157':139
'20#.#5.100.40':139
'20#.75.2.48':139
'20#.#5.169.206':139
'20#.#5.122.124':139
'20#.#5.196.2':139
'20#.#5.253.145':139
'20#.#5.205.218':139
'20#.#5.179.105':139
'20#.#5.44.209':139
'20#.#5.150.192':139
'20#.#5.141.58':139
'20#.#5.209.111':139
'20#.#5.143.196':139
'20#.#5.143.28':139
'20#.#5.127.122':139
'20#.#5.143.28':445
'20#.#5.167.158':139
'20#.#5.120.102':139
'20#.#5.160.248':139
'20#.#5.0.160':139
'20#.#5.178.241':139
'20#.#5.47.143':139
'20#.#5.93.97':139
'20#.75.0.17':139
'20#.#5.47.201':139
'20#.#5.143.196':9988
'20#.#5.108.235':9988
'20#.#5.44.209':9988
'20#.#5.209.111':9988
'20#.#5.64.60':9988
'20#.#5.18.96':139
'20#.#5.123.216':139
'20#.#5.200.63':9988
'20#.#5.22.140':139
'20#.#5.59.219':139
'20#.#5.47.201':445
'20#.#5.47.143':445
'20#.#5.178.241':445
'20#.75.0.17':445
'20#.#5.93.97':445
'20#.#5.182.94':445
'20#.#5.152.195':139
'20#.#5.59.219':445
'20#.#5.29.245':445
'20#.#5.22.140':445
'20#.#5.18.96':445
'20#.#5.29.245':139
'20#.#5.182.94':139
'20#.#5.123.216':445
'20#.#5.167.158':445
'20#.#5.120.102':445
'20#.#5.160.248':445
'20#.#5.0.160':445
'20#.#5.173.201':9988
'20#.#5.122.124':445
'20#.#5.108.235':445
'20#.#5.253.145':445
'20#.#5.169.206':445
'20#.#5.64.60':445
'20#.#5.16.188':445
'20#.#5.51.187':445
'20#.#5.200.63':445
'20#.#5.2.108':445
'20#.#5.143.196':445
'20#.#5.98.157':445
'20#.#5.127.122':445
'20#.#5.209.111':445
'20#.#5.100.40':445
'20#.75.2.48':445
'20#.#5.196.2':445
'20#.#5.241.21':445
'20#.#5.47.241':445
'20#.#5.16.132':445
'20#.#5.66.18':9988
'20#.#5.184.220':9988
'20#.#5.35.244':9988
'20#.#5.125.91':9988
'20#.#5.91.10':9988
'20#.#5.44.173':9988
'20#.#5.26.146':9988
'20#.#5.89.235':9988
'20#.#5.35.251':9988
'20#.#5.147.225':445
'20#.#5.81.148':445
'20#.#5.48.125':445
'20#.#5.22.28':445
'20#.#5.209.160':445
'20#.#5.246.194':9988
'20#.#5.243.253':9988
'20#.#5.68.195':445
'20#.#5.8.149':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней