Trojan.Starman.6563

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'20#.#20.89.160':445
'20#.#20.7.123':445
'20#.#20.107.111':139
'20#.#20.89.160':139
'20#.#20.247.95':445
'20#.#20.107.111':445
'20#.#20.164.208':139
'20#.#20.122.187':445
'20#.#20.186.240':445
'20#.#20.122.176':445
'20#.#20.55.227':445
'20#.#20.164.1':445
'20#.#20.176.112':445
'20#.#20.240.83':445
'20#.#20.7.123':139
'20#.#20.247.95':139
'20#.#20.186.240':139
'20#.#20.122.187':139
'20#.#20.90.40':139
'20#.#20.15.47':139
'20#.#20.0.224':139
'20#.#20.29.163':139
'20#.#20.11.219':139
'20#.#20.100.101':139
'20#.#20.22.102':139
'20#.#20.154.180':139
'20#.#20.172.178':139
'20#.#20.68.23':139
'20#.#20.181.36':139
'20#.#20.128.127':139
'20#.#20.123.55':139
'20#.#20.35.184':139
'20#.#20.77.30':139
'20#.#20.245.74':139
'20#.#20.250.154':139
'20#.#20.7.75':139
'20#.#20.182.184':139
'20#.#20.190.133':445
'20#.#20.152.244':445
'20#.#20.248.163':445
'20#.#20.241.206':445
'20#.#20.4.136':445
'20#.#20.79.47':445
'20#.#20.209.73':445
'20#.#20.25.65':445
'20#.#20.238.156':445
'20#.#20.29.238':445
'20#.#20.26.178':445
'20#.#20.4.184':445
'20#.#20.162.6':445
'20#.#20.8.189':445
'20#.#20.253.155':445
'20#.#20.117.36':445
'20#.#20.206.116':445
'20#.#20.205.228':445
'20#.#20.36.206':445
'20#.#20.172.230':445
'20#.#20.100.23':445
'20#.#20.98.99':445
'20#.#20.16.203':445
'20#.#20.143.232':445
'20#.#20.17.150':445
'20#.#20.32.143':445
'20#.#20.243.5':445
'20#.#20.241.134':445
'20#.#20.209.188':445
'20#.#20.54.109':445
'20#.#20.220.2':445
'20#.#20.43.85':445
'20#.#20.196.107':445
'20#.#20.50.33':445
'20#.#20.82.94':445
'20#.#20.114.174':445
'20#.#20.81.238':445
'20#.#20.205.215':445
'20#.#20.137.32':139
'20#.#20.36.153':445
'20#.#20.4.170':445
'20#.#20.8.103':445
'20#.#20.17.228':445
'20#.#20.106.123':445
'20#.#20.143.222':445
'20#.#20.250.143':445
'20#.#20.226.48':445
'20#.#20.222.228':445
'20#.#20.172.178':445
'20#.#20.68.23':445
'20#.#20.0.224':445
'20#.#20.100.101':445
'20#.#20.22.102':445
'20#.#20.57.122':445
'20#.#20.162.88':445
'20#.#20.154.180':445
'20#.#20.137.32':445
'20#.#20.49.251':445
'20#.#20.241.14':445
'20#.#20.55.150':139
'20#.#20.219.35':445
'20#.#20.14.187':445
'20#.#20.7.71':139
'20#.#20.130.42':139
'20#.#20.128.130':139
'20#.#20.188.207':139
'20#.#20.34.193':139
'20#.#20.240.191':445
'20#.#20.46.29':445
'20#.#20.78.49':445
'20#.#20.88.166':445
'20#.#20.147.46':445
'20#.#20.60.226':445
'20#.#20.39.210':445
'20#.#20.183.32':445
'20#.#20.184.192':445
'20#.#20.15.47':445
'20#.#20.49.251':139
'20#.#20.78.49':139
'20#.#20.143.222':139
'20#.#20.250.143':139
'20#.#20.88.166':139
'20#.#20.147.46':139
'20#.#20.183.32':139
'20#.#20.240.191':139
'20#.#20.46.29':139
'20#.#20.8.103':139
'20#.#20.17.228':139
'20#.#20.162.88':139
'20#.#20.57.122':139
'20#.#20.36.153':139
'20#.#20.226.48':139
'20#.#20.222.228':139
'20#.#20.106.123':139
'20#.#20.4.170':139
'20#.#20.184.192':139
'20#.#20.77.30':445
'20#.#20.7.75':445
'20#.#20.181.36':445
'20#.#20.128.127':445
'20#.#20.182.184':445
'20#.#20.29.163':445
'20#.#20.11.219':445
'20#.#20.245.74':445
'20#.#20.250.154':445
'20#.#20.219.35':139
'20#.#20.14.187':139
'20#.#20.60.226':139
'20#.#20.39.210':139
'20#.#20.241.14':139
'20#.#20.123.55':445
'20#.#20.90.40':445
'20#.#20.164.208':445
'20#.#20.35.184':445
'20#.#20.5.247':445
'20#.#20.49.144':139
'20#.#20.51.29':139
'20#.#20.154.111':139
'20#.#20.101.171':139
'20#.#20.7.146':445
'20#.#20.10.114':445
'20#.#20.13.240':445
'20#.#20.201.250':445
'20#.#20.218.215':445
'20#.#20.51.82':139
'20#.#20.74.109':139
'20#.#20.195.58':139
'20#.#20.2.169':139
'20#.#20.62.17':139
'20#.#20.11.126':139
'20#.#20.9.39':139
'20#.#20.51.152':139
'20#.#20.126.51':139
'20#.#20.106.124':445
'20#.#20.222.220':445
'20#.#20.109.168':445
'20#.#20.91.137':445
'20#.#20.208.101':445
'20#.#20.228.187':445
'20#.#20.242.74':445
'20#.#20.5.219':445
'20#.#20.93.208':445
'20#.#20.194.18':445
'20#.#20.173.218':445
'20#.#20.125.251':445
'20#.#20.250.203':445
'20#.#20.197.68':445
'20#.#20.124.85':445
'20#.#20.123.165':445
'20#.#20.71.249':445
'20#.#20.175.147':445
'20#.#20.175.37':445
'20#.#20.146.116':139
'20#.#20.175.147':139
'20#.#20.175.37':139
'20#.#20.125.251':139
'20#.#20.124.85':139
'20#.#20.123.165':139
'20#.#20.208.101':139
'20#.#20.222.220':139
'20#.#20.71.249':139
'20#.#20.91.137':139
'20#.#20.10.114':139
'20#.#20.7.146':139
'20#.#20.106.124':139
'20#.#20.197.68':139
'20#.#20.250.203':139
'20#.#20.13.240':139
'20#.#20.173.218':139
'20#.#20.201.250':139
'20#.#20.218.215':139
'20#.#20.109.168':139
'20#.#20.251.42':139
'20#.#20.107.17':139
'20#.#20.68.119':139
'20#.#20.236.27':139
'20#.#20.75.184':139
'20#.#20.252.203':139
'20#.#20.146.252':139
'20#.#20.127.226':139
'20#.#20.50.184':139
'20#.#20.194.18':139
'20#.#20.242.74':139
'20#.#20.228.187':139
'20#.#20.93.208':139
'20#.#20.5.219':139
'20#.#20.70.145':139
'20#.#20.119.17':139
'20#.#20.95.245':139
'20#.#20.227.5':139
'20#.#20.95.245':445
'20#.#20.172.230':139
'20#.#20.43.85':139
'20#.#20.209.73':139
'20#.#20.25.65':139
'20#.#20.196.107':139
'20#.#20.50.33':139
'20#.#20.81.238':139
'20#.#20.54.109':139
'20#.#20.220.2':139
'20#.#20.241.206':139
'20#.#20.4.136':139
'20#.#20.117.36':139
'20#.#20.206.116':139
'20#.#20.152.244':139
'20#.#20.238.156':139
'20#.#20.29.238':139
'20#.#20.248.163':139
'20#.#20.79.47':139
'20#.#20.205.215':139
'20#.#20.190.133':139
'20#.#20.164.1':139
'20#.#20.32.143':139
'20#.#20.243.5':139
'20#.#20.176.112':139
'20#.#20.240.83':139
'20#.#20.161.133':445
'20#.#20.122.176':139
'20#.#20.55.227':139
'20#.#20.16.203':139
'20#.#20.143.232':139
'20#.#20.82.94':139
'20#.#20.114.174':139
'20#.#20.100.23':139
'20#.#20.241.134':139
'20#.#20.209.188':139
'20#.#20.98.99':139
'20#.#20.17.150':139
'20#.#20.36.206':139
'20#.#20.146.252':445
'20#.#20.146.116':445
'20#.#20.50.184':445
'20#.#20.252.203':445
'20#.#20.195.58':445
'20#.#20.74.109':445
'20#.#20.62.17':445
'20#.#20.2.169':445
'20#.#20.51.82':445
'20#.#20.70.145':445
'20#.#20.68.119':445
'20#.#20.227.5':445
'20#.#20.119.17':445
'20#.#20.236.27':445
'20#.#20.75.184':445
'20#.#20.127.226':445
'20#.#20.251.42':445
'20#.#20.107.17':445
'20#.#20.51.152':445
'20#.#20.5.247':139
'20#.#20.162.6':139
'20#.#20.49.144':9988
'20#.#20.161.133':139
'20#.#20.8.189':139
'20#.#20.253.155':139
'20#.#20.205.228':139
'20#.#20.26.178':139
'20#.#20.4.184':139
'20#.#20.9.39':445
'20#.#20.154.111':445
'20#.#20.126.51':445
'20#.#20.11.126':445
'20#.#20.101.171':445
'20#.#20.173.218':9988
'20#.#20.51.152':9988
'20#.#20.49.144':445
'20#.#20.51.29':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней