Trojan.Starman.6311

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#50.44.205':139
'19#.#50.8.91':139
'19#.#50.30.69':139
'19#.#50.25.46':139
'19#.#50.126.165':139
'19#.#50.146.118':139
'19#.#50.65.150':139
'19#.#50.14.181':139
'19#.#50.104.141':139
'19#.#50.169.56':139
'19#.#50.253.140':139
'19#.#50.126.253':139
'19#.#50.32.182':139
'19#.#50.129.4':139
'19#.#50.247.186':139
'19#.#50.1.129':139
'19#.#50.22.251':139
'19#.#50.251.152':139
'19#.#50.8.204':139
'19#.#50.31.96':139
'19#.#50.147.65':139
'19#.#50.172.182':445
'19#.#50.129.4':445
'19#.#50.241.240':445
'19#.#50.80.130':445
'19#.#50.240.80':445
'19#.#50.126.253':445
'19#.#50.8.204':445
'19#.#50.253.140':445
'19#.#50.247.186':445
'19#.#50.32.182':445
'19#.#50.115.219':445
'19#.#50.220.159':445
'19#.#50.252.66':445
'19#.#50.120.243':139
'19#.#50.36.208':139
'19#.#50.82.52':445
'19#.#50.72.249':445
'19#.#50.158.249':445
'19#.#50.78.220':445
'19#.#50.73.78':445
'19#.#50.172.182':139
'19#.#50.198.149':139
'19#.#50.216.141':445
'19#.#50.105.195':139
'19#.#50.67.199':139
'19#.#50.9.34':139
'19#.#50.210.10':445
'19#.#50.192.3':445
'19#.#50.8.56':445
'19#.#50.221.108':445
'19#.#50.56.207':445
'19#.#50.192.3':139
'19#.#50.144.191':139
'19#.#50.210.10':139
'19#.#50.56.207':139
'19#.#50.8.56':139
'19#.#50.157.11':139
'19#.#50.198.156':139
'19#.#50.138.34':139
'19#.#50.90.45':139
'19#.#50.199.137':139
'19#.#50.144.191':445
'19#.#50.73.78':139
'19#.#50.158.249':139
'19#.#50.78.220':139
'19#.#50.115.219':139
'19#.#50.220.159':139
'19#.#50.240.80':139
'19#.#50.241.240':139
'19#.#50.80.130':139
'19#.#50.82.52':139
'19#.#50.72.249':139
'19#.#50.157.11':445
'19#.#50.198.156':445
'19#.#50.138.34':445
'19#.#50.90.45':445
'19#.#50.199.137':445
'19#.#50.198.149':445
'19#.#50.252.66':139
'19#.#50.105.195':445
'19#.#50.67.199':445
'19#.#50.9.34':445
'19#.#50.31.96':445
'19#.#50.87.117':139
'19#.#50.3.146':139
'19#.#50.177.48':139
'19#.#50.21.178':139
'19#.#50.105.183':139
'19#.#50.233.8':139
'19#.#50.53.57':139
'19#.#50.29.93':139
'19#.#50.91.69':139
'19#.#50.92.73':139
'19#.#50.124.89':445
'19#.#50.161.110':445
'19#.#50.184.41':445
'19#.#50.55.105':445
'19#.#50.85.134':445
'19#.#50.62.30':139
'19#.#50.51.1':139
'19#.#50.58.20':139
'19#.#50.217.136':445
'19#.#50.55.142':139
'19#.#50.102.237':139
'19#.#50.0.214':139
'19#.#50.22.250':139
'19#.#50.5.60':139
'19#.#50.96.27':139
'19#.#50.161.223':139
'19#.#50.78.120':139
'19#.#50.245.77':139
'19#.#50.241.103':139
'19#.#50.84.225':139
'19#.#50.149.105':139
'19#.#50.185.219':139
'19#.#50.28.93':139
'19#.#50.145.192':139
'19#.#50.106.57':139
'19#.#50.248.155':139
'19#.#50.171.182':139
'19#.#50.11.105':139
'19#.#50.205.7':139
'19#.#50.202.67':139
'19#.#50.190.116':139
'19#.#50.214.174':445
'19#.#50.147.65':445
'19#.#50.120.243':445
'19#.#50.65.150':445
'19#.#50.14.181':445
'19#.#50.146.118':445
'19#.#50.122.99':139
'19#.#50.77.207':139
'19#.#50.210.220':139
'19#.#50.36.208':445
'19#.#50.26.71':139
'19#.#50.25.46':445
'19#.#50.126.165':445
'19#.#50.22.251':445
'19#.#50.251.152':445
'19#.#50.1.129':445
'19#.#50.104.141':445
'19#.#50.169.56':445
'19#.#50.8.91':445
'19#.#50.30.69':445
'19#.#50.44.205':445
'19#.#50.145.71':139
'19#.#50.122.99':445
'19#.#50.77.207':445
'19#.#50.210.220':445
'19#.#50.217.136':139
'19#.#50.26.71':445
'19#.#50.128.234':445
'19#.#50.179.36':445
'19#.#50.103.158':445
'19#.#50.145.71':445
'19#.#50.23.74':445
'19#.#50.23.74':139
'19#.#50.128.234':139
'19#.#50.103.158':139
'19#.#50.85.134':139
'19#.#50.55.105':139
'19#.#50.124.89':139
'19#.#50.161.110':139
'19#.#50.184.41':139
'19#.#50.214.174':139
'19#.#50.179.36':139
'19#.#50.61.44':445
'19#.#50.218.49':445
'19#.#50.16.250':445
'19#.#50.134.109':445
'19#.#50.144.19':445
'19#.#50.159.98':445
'19#.#50.5.217':445
'19#.#50.119.122':445
'19#.#50.233.144':445
'19#.#50.200.218':445
'19#.#50.68.149':139
'19#.#50.52.68':139
'19#.#50.148.254':139
'19#.#50.93.178':139
'19#.#50.135.4':139
'19#.#50.243.171':139
'19#.#50.1.147':445
'19#.#50.215.129':139
'19#.#50.36.52':139
'19#.#50.7.122':139
'19#.#50.51.153':445
'19#.#50.96.32':445
'19#.#50.34.64':445
'19#.#50.185.132':445
'19#.#50.101.108':445
'19#.#50.209.179':445
'19#.#50.226.76':445
'19#.#50.210.174':445
'19#.#50.100.31':445
'19#.#50.187.180':445
'19#.#50.86.12':445
'19#.#50.159.129':445
'19#.#50.50.96':445
'19#.#50.5.105':445
'19#.#50.5.183':445
'19#.#50.13.126':445
'19#.#50.227.151':445
'19#.#50.104.159':445
'19#.#50.53.172':445
'19#.#50.59.247':445
'19#.#50.205.117':445
'19#.#50.204.159':139
'19#.#50.13.126':139
'19#.#50.5.105':139
'19#.#50.5.183':139
'19#.#50.5.217':139
'19#.#50.51.153':139
'19#.#50.205.117':139
'19#.#50.53.172':139
'19#.#50.59.247':139
'19#.#50.159.129':139
'19#.#50.50.96':139
'19#.#50.16.250':139
'19#.#50.61.44':139
'19#.#50.134.109':139
'19#.#50.1.147':139
'19#.#50.144.19':139
'19#.#50.119.122':139
'19#.#50.159.98':139
'19#.#50.200.218':139
'19#.#50.218.49':139
'19#.#50.233.144':139
'19#.#50.227.151':139
'19#.#50.73.70':139
'19#.#50.186.214':139
'19#.#50.172.27':139
'19#.#50.210.174':139
'19#.#50.54.192':139
'19#.#50.155.5':139
'19#.#50.75.238':139
'19#.#50.213.231':139
'19#.#50.102.126':139
'19#.#50.160.126':139
'19#.#50.185.132':139
'19#.#50.96.32':139
'19#.#50.209.179':139
'19#.#50.104.159':139
'19#.#50.101.108':139
'19#.#50.100.31':139
'19#.#50.226.76':139
'19#.#50.86.12':139
'19#.#50.34.64':139
'19#.#50.187.180':139
'19#.#50.54.192':445
'19#.#50.226.26':139
'19#.#50.237.243':445
'19#.#50.41.48':139
'19#.#50.190.213':139
'19#.#50.57.3':139
'19#.#50.105.72':445
'19#.#50.57.55':445
'19#.#50.27.130':445
'19#.#50.124.238':445
'19#.#50.56.212':445
'19#.#50.38.157':139
'19#.#50.108.211':139
'19#.#50.142.216':139
'19#.#50.112.205':139
'19#.#50.54.20':139
'19#.#50.155.151':139
'19#.#50.48.0':139
'19#.#50.45.254':139
'19#.#50.70.65':139
'19#.#50.220.205':139
'19#.#50.9.228':445
'19#.#50.48.0':445
'19#.#50.190.213':445
'19#.#50.155.151':445
'19#.#50.220.205':445
'19#.#50.45.254':445
'19#.#50.216.141':139
'19#.#50.221.108':139
'19#.#50.226.26':445
'19#.#50.57.3':445
'19#.#50.41.48':445
'19#.#50.75.133':445
'19#.#50.112.205':445
'19#.#50.132.214':445
'19#.#50.228.254':445
'19#.#50.83.22':445
'19#.#50.108.211':445
'19#.#50.70.65':445
'19#.#50.38.157':445
'19#.#50.54.20':445
'19#.#50.142.216':445
'19#.#50.75.133':139
'19#.#50.52.68':445
'19#.#50.36.52':445
'19#.#50.68.149':445
'19#.#50.135.4':445
'19#.#50.148.254':445
'19#.#50.1.147':9988
'19#.#50.16.250':9988
'19#.#50.243.171':445
'19#.#50.7.122':445
'19#.#50.215.129':445
'19#.#50.102.126':445
'19#.#50.160.126':445
'19#.#50.186.214':445
'19#.#50.172.27':445
'19#.#50.73.70':445
'19#.#50.204.159':445
'19#.#50.93.178':445
'19#.#50.75.238':445
'19#.#50.213.231':445
'19#.#50.155.5':445
'19#.#50.134.109':9988
'19#.#50.27.130':139
'19#.#50.105.72':139
'19#.#50.56.212':139
'19#.#50.237.243':139
'19#.#50.124.238':139
'19#.#50.83.22':139
'19#.#50.132.214':139
'19#.#50.228.254':139
'19#.#50.57.55':139
'19#.#50.9.228':139
'19#.#50.50.96':9988
'19#.#50.205.117':9988
'19#.#50.5.105':9988
'19#.#50.61.44':9988
'19#.#50.218.49':9988
'19#.#50.73.70':9988
'19#.#50.204.159':9988
'19#.#50.172.27':9988
'19#.#50.86.12':9988
'19#.#50.54.192':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней