Trojan.Starman.6108

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#5.34.146':445
'22#.#5.69.225':445
'22#.#5.177.12':445
'22#.#5.116.86':445
'22#.#5.15.68':445
'22#.#5.40.251':445
'22#.#5.38.194':139
'22#.#5.68.12':139
'22#.#5.89.42':139
'22#.#5.177.123':139
'22#.#5.88.177':139
'22#.#5.70.88':139
'22#.#5.55.129':445
'22#.#5.67.36':445
'22#.#5.97.154':445
'22#.#5.36.95':445
'22#.#5.57.36':445
'22#.#5.10.57':445
'22#.#5.17.184':445
'22#.#5.68.159':445
'22#.#5.222.160':445
'22#.#5.59.182':445
'22#.#5.238.17':445
'22#.#5.146.179':445
'22#.#5.25.112':139
'22#.#5.247.75':139
'22#.#5.196.95':139
'22#.#5.200.7':139
'22#.#5.146.188':139
'22#.#5.181.170':139
'22#.#5.43.73':139
'22#.#5.38.194':445
'22#.#5.70.88':445
'22#.#5.89.42':445
'22#.#5.197.175':139
'22#.#5.177.123':445
'22#.#5.88.177':445
'22#.#5.155.234':139
'22#.#5.184.55':139
'22#.#5.158.60':139
'22#.#5.115.224':139
'22#.#5.186.192':139
'22#.#5.31.228':139
'22#.#5.98.223':139
'22#.#5.103.56':139
'22#.#5.188.102':139
'22#.#5.87.76':139
'22#.#5.78.165':139
'22#.#5.15.105':139
'22#.#5.95.69':445
'22#.#5.19.29':445
'22#.#5.245.18':445
'22#.#5.218.162':445
'22#.#5.148.105':445
'22#.#5.174.148':445
'22#.#5.197.38':445
'22#.#5.85.185':139
'22#.#5.230.85':139
'22#.#5.68.230':139
'22#.#5.215.17':139
'22#.#5.111.215':139
'22#.#5.185.111':139
'22#.#5.211.242':445
'22#.#5.85.113':445
'22#.#5.122.53':445
'22#.#5.195.12':445
'22#.#5.221.192':445
'22#.#5.27.13':445
'22#.#5.71.107':445
'22#.#5.23.72':445
'22#.#5.111.163':445
'22#.#5.255.169':445
'22#.#5.200.160':445
'22#.#5.128.225':445
'22#.#5.95.69':139
'22#.#5.34.146':139
'22#.#5.69.225':139
'22#.#5.177.12':139
'22#.#5.116.86':139
'22#.#5.15.68':139
'22#.#5.40.251':139
'22#.#5.85.185':445
'22#.#5.230.85':445
'22#.#5.68.230':445
'22#.#5.215.17':445
'22#.#5.111.215':445
'22#.#5.185.111':445
'22#.#5.55.129':139
'22#.#5.67.36':139
'22#.#5.97.154':139
'22#.#5.36.95':139
'22#.#5.57.36':139
'22#.#5.10.57':139
'22#.#5.17.184':139
'22#.#5.68.159':139
'22#.#5.222.160':139
'22#.#5.59.182':139
'22#.#5.238.17':139
'22#.#5.146.179':139
'22#.#5.49.57':445
'22#.#5.228.12':445
'22#.#5.127.79':445
'22#.#5.54.208':445
'22#.#5.95.91':445
'22#.#5.113.87':445
'22#.#5.36.34':139
'22#.#5.197.35':139
'22#.#5.75.197':139
'22#.#5.65.228':445
'22#.#5.202.141':445
'22#.#5.33.248':445
'22#.#5.168.59':445
'22#.#5.5.190':445
'22#.#5.96.114':445
'22#.#5.131.217':445
'22#.#5.149.188':445
'22#.#5.90.74':445
'22#.#5.68.79':445
'22#.#5.201.177':445
'22#.#5.68.152':445
'22#.#5.116.84':445
'22#.#5.1.139':445
'22#.#5.126.143':445
'22#.#5.250.75':139
'22#.#5.60.193':139
'22#.#5.51.183':139
'22#.#5.169.118':139
'22#.#5.85.11':139
'22#.#5.31.191':139
'22#.#5.203.111':139
'22#.#5.10.248':139
'22#.#5.36.34':445
'22#.#5.197.35':445
'22#.#5.95.116':139
'22#.#5.138.91':139
'22#.#5.76.94':139
'22#.#5.61.86':139
'22#.#5.77.67':139
'22#.#5.225.211':139
'22#.#5.42.73':139
'22#.#5.112.99':139
'22#.#5.213.4':139
'22#.#5.177.10':139
'22#.#5.54.103':139
'22#.#5.183.5':139
'22#.#5.120.225':139
'22#.#5.188.120':139
'22#.#5.155.182':139
'22#.#5.128.215':445
'22#.#5.181.170':445
'22#.#5.247.75':445
'22#.#5.43.73':445
'22#.#5.103.56':445
'22#.#5.146.188':445
'22#.#5.188.102':445
'22#.#5.239.165':139
'22#.#5.128.8':139
'22#.#5.13.128':139
'22#.#5.196.95':445
'22#.#5.200.7':445
'22#.#5.197.175':445
'22#.#5.31.228':445
'22#.#5.186.192':445
'22#.#5.184.55':445
'22#.#5.68.12':445
'22#.#5.25.112':445
'22#.#5.115.224':445
'22#.#5.78.165':445
'22#.#5.15.105':445
'22#.#5.98.223':445
'22#.#5.155.234':445
'22#.#5.158.60':445
'22#.#5.87.76':445
'22#.#5.128.215':139
'22#.#5.49.57':139
'22#.#5.228.12':139
'22#.#5.127.79':139
'22#.#5.54.208':139
'22#.#5.95.91':139
'22#.#5.113.87':139
'22#.#5.239.165':445
'22#.#5.128.8':445
'22#.#5.13.128':445
'22#.#5.65.228':139
'22#.#5.202.141':139
'22#.#5.33.248':139
'22#.#5.168.59':139
'22#.#5.96.114':139
'22#.#5.5.190':139
'22#.#5.131.217':139
'22#.#5.149.188':139
'22#.#5.90.74':139
'22#.#5.68.79':139
'22#.#5.201.177':139
'22#.#5.68.152':139
'22#.#5.116.84':139
'22#.#5.1.139':139
'22#.#5.126.143':139
'22#.#5.156.25':445
'22#.#5.98.122':445
'22#.#5.158.55':445
'22#.#5.168.121':445
'22#.#5.191.93':445
'22#.#5.236.41':445
'22#.#5.122.174':445
'22#.#5.105.74':445
'22#.#5.53.66':445
'22#.35.66.5':445
'22#.#5.192.22':445
'22#.#5.163.31':445
'22#.#5.17.115':445
'22#.#5.177.13':445
'22#.#5.53.112':445
'22#.35.2.62':445
'22#.#5.132.151':139
'22#.#5.213.127':445
'22#.#5.36.120':445
'22#.#5.110.111':445
'22#.#5.71.180':445
'22#.35.15.8':445
'22#.35.31.8':445
'22#.#5.52.86':445
'22#.#5.120.202':445
'22#.#5.77.196':445
'22#.#5.110.147':445
'22#.#5.16.245':445
'22#.#5.109.43':445
'22#.#5.177.203':445
'22#.#5.28.251':445
'22#.#5.171.8':445
'22#.#5.157.98':445
'22#.#5.37.62':445
'22#.#5.17.143':445
'22#.35.7.87':445
'22#.#5.43.21':445
'22#.#5.79.111':445
'22#.#5.147.108':445
'22#.#5.49.45':445
'22#.#5.190.130':445
'22#.#5.66.249':445
'22#.#5.210.126':445
'22#.#5.146.199':445
'22#.#5.150.14':445
'22#.#5.37.49':445
'22#.#5.203.79':445
'22#.#5.46.172':445
'22#.#5.244.32':445
'22#.#5.242.114':445
'22#.#5.55.77':139
'22#.#5.158.55':139
'22#.#5.168.121':139
'22#.#5.192.22':139
'22#.#5.236.41':139
'22#.#5.122.174':139
'22#.#5.98.122':139
'22#.#5.53.66':139
'22#.35.66.5':139
'22#.#5.77.196':139
'22#.#5.163.31':139
'22#.#5.17.115':139
'22#.#5.105.74':139
'22#.#5.36.120':139
'22#.#5.177.13':139
'22#.#5.110.111':139
'22#.#5.53.112':139
'22#.#5.213.127':139
'22#.#5.120.202':139
'22#.#5.71.180':139
'22#.35.15.8':139
'22#.#5.191.93':139
'22#.#5.52.86':139
'22#.35.2.62':139
'22#.35.31.8':139
'22#.#5.66.249':139
'22#.#5.16.245':139
'22#.#5.109.43':139
'22#.35.7.87':139
'22#.#5.28.251':139
'22#.#5.171.8':139
'22#.#5.110.147':139
'22#.#5.37.62':139
'22#.#5.17.143':139
'22#.#5.185.144':139
'22#.#5.43.21':139
'22#.#5.79.111':139
'22#.#5.157.98':139
'22#.#5.49.45':139
'22#.#5.190.130':139
'22#.#5.46.172':139
'22#.#5.210.126':139
'22#.#5.146.199':139
'22#.#5.147.108':139
'22#.#5.37.49':139
'22#.#5.203.79':139
'22#.#5.177.203':139
'22#.#5.244.32':139
'22#.#5.242.114':139
'22#.#5.150.14':139
'22#.#5.5.153':445
'22#.#5.159.26':139
'22#.#5.164.36':139
'22#.#5.72.36':445
'22#.#5.119.180':445
'22#.#5.142.102':445
'22#.35.2.24':139
'22#.#5.194.2':139
'22#.#5.156.25':139
'22#.#5.247.166':139
'22#.#5.160.253':139
'22#.35.97.0':139
'22#.#5.157.101':445
'22#.#5.177.120':445
'22#.#5.117.177':445
'22#.#5.129.19':445
'22#.#5.202.128':445
'22#.#5.183.202':445
'22#.#5.238.195':445
'22#.#5.241.34':445
'22#.#5.181.86':445
'22#.#5.94.149':445
'22#.#5.48.124':445
'22#.#5.15.49':445
'22#.#5.195.12':139
'22#.#5.245.18':139
'22#.#5.218.162':139
'22#.#5.159.26':445
'22#.#5.174.148':139
'22#.#5.197.38':139
'22#.#5.19.29':139
'22#.35.2.24':445
'22#.35.97.0':445
'22#.#5.194.2':445
'22#.#5.164.36':445
'22#.#5.247.166':445
'22#.#5.160.253':445
'22#.#5.85.113':139
'22#.#5.122.53':139
'22#.#5.255.169':139
'22#.#5.221.192':139
'22#.#5.27.13':139
'22#.#5.211.242':139
'22#.#5.23.72':139
'22#.#5.111.163':139
'22#.#5.148.105':139
'22#.#5.200.160':139
'22#.#5.128.225':139
'22#.#5.71.107':139
'22#.#5.19.127':445
'22#.#5.146.199':9988
'22#.#5.240.11':139
'22#.#5.136.250':139
'22#.#5.192.22':9988
'22#.#5.17.115':9988
'22#.#5.53.66':9988
'22#.#5.188.88':139
'22#.#5.157.221':139
'22#.#5.127.143':139
'22#.#5.41.147':139
'22#.#5.12.201':139
'22#.#5.127.80':139
'22#.#5.53.112':9988
'22#.35.2.62':9988
'22#.#5.36.120':9988
'22#.#5.185.144':445
'22#.#5.55.77':445
'22#.#5.132.151':445
'22#.#5.98.122':9988
'22#.#5.158.55':9988
'22#.#5.168.121':9988
'22#.#5.120.202':9988
'22#.#5.236.41':9988
'22#.#5.122.174':9988
'22#.#5.19.127':139
'22#.#5.5.153':139
'22#.#5.240.11':445
'22#.#5.136.250':445
'22#.#5.72.36':139
'22#.#5.119.180':139
'22#.#5.142.102':139
'22#.#5.188.88':445
'22#.#5.157.221':445
'22#.#5.127.143':445
'22#.#5.41.147':445
'22#.#5.12.201':445
'22#.#5.127.80':445
'22#.#5.157.101':139
'22#.#5.177.120':139
'22#.#5.117.177':139
'22#.#5.129.19':139
'22#.#5.202.128':139
'22#.#5.183.202':139
'22#.#5.238.195':139
'22#.#5.241.34':139
'22#.#5.181.86':139
'22#.#5.94.149':139
'22#.#5.48.124':139
'22#.#5.15.49':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней