Trojan.Starman.6532

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'22#.#25.14.184':139
'22#.#25.93.15':139
'22#.#25.184.42':139
'22#.#25.85.31':139
'22#.#25.54.242':139
'22#.#25.32.10':139
'22#.#25.157.165':139
'22#.#25.85.21':139
'22#.#25.20.33':139
'22#.#25.74.129':139
'22#.#25.33.140':139
'22#.#25.252.102':139
'22#.#25.40.39':139
'22#.#25.164.81':139
'22#.#25.175.167':445
'22#.#25.60.223':139
'22#.#25.94.69':139
'22#.#25.122.81':139
'22#.#25.248.127':139
'22#.#25.59.181':139
'22#.#25.113.186':139
'22#.#25.60.223':445
'22#.#25.164.81':445
'22#.#25.18.74':139
'22#.#25.61.166':139
'22#.#25.76.62':139
'22#.#25.113.186':445
'22#.#25.248.127':445
'22#.#25.59.181':445
'22#.#25.252.102':445
'22#.#25.40.39':445
'22#.#25.82.214':139
'22#.#25.30.200':139
'22#.#25.135.203':139
'22#.#25.172.169':139
'22#.#25.222.156':139
'22#.#25.7.238':139
'22#.#25.129.79':139
'22#.#25.253.144':139
'22#.#25.83.149':139
'22#.#25.152.135':139
'22#.#25.149.152':139
'22#.#25.251.151':139
'22#.#25.160.62':139
'22#.#25.170.161':139
'22#.#25.175.120':139
'22#.#25.40.8':139
'22#.#25.162.44':139
'22#.#25.155.48':139
'22#.#25.33.248':139
'22#.#25.35.94':139
'22#.#25.132.222':139
'22#.#25.188.239':139
'22#.#25.109.11':445
'22#.#25.244.10':445
'22#.#25.232.223':445
'22#.#25.52.172':445
'22#.#25.16.163':445
'22#.#25.199.153':139
'22#.#25.20.76':139
'22#.#25.253.226':139
'22#.#25.45.145':445
'22#.#25.185.254':445
'22#.#25.132.222':445
'22#.#25.162.44':445
'22#.#25.35.94':445
'22#.#25.170.161':445
'22#.#25.160.62':445
'22#.#25.166.235':445
'22#.#25.15.228':445
'22#.#25.60.182':445
'22#.#25.33.248':445
'22#.#25.155.48':445
'22#.#25.251.151':445
'22#.#25.175.167':139
'22#.#25.253.226':445
'22#.#25.15.228':139
'22#.#25.60.182':139
'22#.#25.166.235':139
'22#.#25.175.120':445
'22#.#25.40.8':445
'22#.#25.188.239':445
'22#.#25.199.153':445
'22#.#25.20.76':445
'22#.#25.94.69':445
'22#.#25.95.27':445
'22#.#25.204.243':445
'22#.#25.26.231':445
'22#.#25.156.149':445
'22#.#25.231.156':445
'22#.#25.202.92':139
'22#.#25.27.90':139
'22#.#25.13.246':139
'22#.#25.123.146':445
'22#.#25.40.186':445
'22#.#25.36.126':445
'22#.#25.9.166':445
'22#.#25.245.17':445
'22#.#25.20.91':445
'22#.#25.40.186':139
'22#.#25.2.36':445
'22#.#25.126.223':445
'22#.#25.146.227':445
'22#.#25.95.54':445
'22#.#25.234.165':445
'22#.#25.152.133':445
'22#.#25.14.63':139
'22#.#25.12.14':139
'22#.#25.124.42':139
'22#.#25.193.98':139
'22#.#25.148.27':139
'22#.#25.9.52':139
'22#.#25.60.155':139
'22#.#25.121.113':139
'22#.#25.44.73':139
'22#.#25.16.186':139
'22#.#25.31.80':139
'22#.#25.157.33':139
'22#.#25.68.25':139
'22#.#25.30.29':139
'22#.#25.15.169':139
'22#.#25.133.63':139
'22#.#25.216.41':139
'22#.#25.172.59':139
'22#.#25.218.70':139
'22#.#25.249.67':139
'22#.#25.105.167':139
'22#.#25.172.169':445
'22#.#25.30.200':445
'22#.#25.7.238':445
'22#.#25.85.21':445
'22#.#25.74.129':445
'22#.#25.82.214':445
'22#.#25.135.203':445
'22#.#25.253.144':445
'22#.#25.129.79':445
'22#.#25.61.166':445
'22#.#25.32.10':445
'22#.#25.54.242':445
'22#.#25.85.31':445
'22#.#25.14.184':445
'22#.#25.122.81':445
'22#.#25.33.140':445
'22#.#25.20.33':445
'22#.#25.222.156':445
'22#.#25.157.165':445
'22#.#25.184.42':445
'22#.#25.93.15':445
'22#.#25.36.126':139
'22#.#25.156.149':139
'22#.#25.146.227':139
'22#.#25.95.54':139
'22#.#25.126.223':139
'22#.#25.204.243':139
'22#.#25.123.146':139
'22#.#25.95.27':139
'22#.#25.231.156':139
'22#.#25.26.231':139
'22#.#25.152.133':139
'22#.#25.76.62':445
'22#.#25.18.74':445
'22#.#25.152.135':445
'22#.#25.149.152':445
'22#.#25.83.149':445
'22#.#25.234.165':139
'22#.#25.245.17':139
'22#.#25.9.166':139
'22#.#25.2.36':139
'22#.#25.20.91':139
'22#.#25.45.38':445
'22#.#25.181.77':445
'22#.#25.106.36':445
'22#.#25.78.62':445
'22#.#25.130.62':445
'22#.#25.138.72':445
'22#.#25.171.139':445
'22#.#25.60.134':445
'22#.#25.189.224':445
'22#.#25.59.27':445
'22#.#25.21.251':445
'22#.#25.121.114':445
'22#.#25.16.189':139
'22#.#25.104.24':139
'22#.#25.121.94':139
'22#.#25.118.177':139
'22#.#25.94.118':139
'22#.#25.138.250':139
'22#.#25.224.244':445
'22#.#25.121.244':139
'22#.#25.214.172':139
'22#.#25.117.96':139
'22#.#25.88.254':445
'22#.#25.247.155':445
'22#.#25.60.219':445
'22#.#25.147.165':445
'22#.#25.181.106':445
'22#.#25.216.40':445
'22#.#25.150.246':445
'22#.#25.52.61':445
'22#.#25.163.108':445
'22#.#25.21.54':445
'22#.#25.200.57':445
'22#.#25.208.107':445
'22#.#25.201.150':445
'22#.#25.230.249':445
'22#.#25.68.125':445
'22#.#25.222.3':445
'22#.#25.48.220':445
'22#.#25.14.37':445
'22#.#25.139.76':445
'22#.#25.31.191':445
'22#.#25.129.247':445
'22#.#25.230.249':139
'22#.#25.208.107':139
'22#.#25.222.3':139
'22#.#25.60.134':139
'22#.#25.68.125':139
'22#.#25.139.76':139
'22#.#25.48.220':139
'22#.#25.129.247':139
'22#.#25.201.150':139
'22#.#25.31.191':139
'22#.#25.171.139':139
'22#.#25.138.72':139
'22#.#25.78.62':139
'22#.#25.130.62':139
'22#.#25.121.114':139
'22#.#25.224.244':139
'22#.#25.21.251':139
'22#.#25.189.224':139
'22#.#25.59.27':139
'22#.#25.181.77':139
'22#.#25.106.36':139
'22#.#25.12.150':139
'22#.#25.162.207':139
'22#.#25.84.218':139
'22#.#25.150.246':139
'22#.#25.111.191':139
'22#.#25.53.126':139
'22#.#25.43.103':139
'22#.#25.211.14':139
'22#.#25.206.88':139
'22#.#25.7.172':139
'22#.#25.216.40':139
'22#.#25.181.106':139
'22#.#25.60.219':139
'22#.#25.147.165':139
'22#.#25.14.37':139
'22#.#25.200.57':139
'22#.#25.21.54':139
'22#.#25.52.61':139
'22#.#25.163.108':139
'22#.#25.88.254':139
'22#.#25.247.155':139
'22#.#25.111.191':445
'22#.#25.244.10':139
'22#.#25.45.145':139
'22#.#25.109.11':139
'22#.#25.52.172':139
'22#.#25.16.163':139
'22#.#25.18.129':445
'22#.#25.129.109':445
'22#.#25.39.18':445
'22#.#25.185.254':139
'22#.#25.12.122':445
'22#.#25.232.223':139
'22#.#25.151.204':139
'22#.#25.131.151':139
'22#.#25.204.208':139
'22#.#25.52.186':139
'22#.#25.208.108':139
'22#.#25.37.68':139
'22#.#25.45.38':139
'22#.#25.67.212':139
'22#.#25.37.233':139
'22#.#25.50.238':139
'22#.#25.10.170':445
'22#.#25.38.106':445
'22#.#25.151.204':445
'22#.#25.50.238':445
'22#.#25.131.151':445
'22#.#25.67.212':445
'22#.#25.37.68':445
'22#.#25.149.77':445
'22#.#25.204.208':445
'22#.#25.57.56':445
'22#.#25.37.233':445
'22#.#25.39.104':445
'22#.#25.67.46':445
'22#.#25.81.103':445
'22#.#25.153.156':445
'22#.#25.156.126':445
'22#.#25.52.186':445
'22#.#25.169.201':445
'22#.#25.214.36':445
'22#.#25.1.98':445
'22#.#25.208.108':445
'22#.#25.117.96':445
'22#.#25.121.244':445
'22#.#25.214.172':445
'22#.#25.16.189':445
'22#.#25.104.24':445
'22#.#25.21.251':9988
'22#.#25.189.224':9988
'22#.#25.106.36':9988
'22#.#25.138.250':445
'22#.#25.121.114':9988
'22#.#25.121.94':445
'22#.#25.206.88':445
'22#.#25.7.172':445
'22#.#25.162.207':445
'22#.#25.84.218':445
'22#.#25.12.150':445
'22#.#25.118.177':445
'22#.#25.94.118':445
'22#.#25.43.103':445
'22#.#25.211.14':445
'22#.#25.53.126':445
'22#.#25.67.46':139
'22#.#25.149.77':139
'22#.#25.57.56':139
'22#.#25.81.103':139
'22#.#25.39.104':139
'22#.#25.10.170':139
'22#.#25.214.36':139
'22#.#25.1.98':139
'22#.#25.38.106':139
'22#.#25.169.201':139
'22#.#25.156.126':139
'22#.#25.208.107':9988
'22#.#25.31.191':9988
'22#.#25.68.125':9988
'22#.#25.171.139':9988
'22#.#25.60.134':9988
'22#.#25.12.122':139
'22#.#25.153.156':139
'22#.#25.39.18':139
'22#.#25.129.109':139
'22#.#25.18.129':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней