Trojan.Starman.5910

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#2.105.68':139
'19#.#2.71.105':139
'19#.#2.68.120':139
'19#.#2.56.101':139
'19#.#2.120.56':139
'19#.#2.244.230':139
'19#.#2.165.34':139
'19#.#2.143.252':139
'19#.#2.112.40':139
'19#.#2.124.1':139
'19#.#2.153.120':139
'19#.#2.67.169':139
'19#.#2.26.241':139
'19#.#2.12.236':139
'19#.22.7.74':139
'19#.#2.167.220':139
'19#.#2.34.227':139
'19#.#2.126.170':139
'19#.#2.121.232':139
'19#.#2.75.185':139
'19#.#2.100.72':139
'19#.#2.202.126':139
'19#.#2.211.50':139
'19#.#2.124.100':445
'19#.#2.74.65':445
'19#.#2.127.113':445
'19#.#2.4.241':139
'19#.#2.39.51':445
'19#.#2.95.38':445
'19#.22.8.64':445
'19#.#2.57.250':445
'19#.#2.227.91':445
'19#.#2.62.212':445
'19#.#2.19.221':445
'19#.#2.240.198':139
'19#.#2.214.214':139
'19#.#2.116.124':139
'19#.22.34.0':139
'19#.#2.111.169':139
'19#.#2.68.89':139
'19#.#2.10.38':139
'19#.22.12.7':139
'19#.#2.245.113':139
'19#.#2.10.58':139
'19#.#2.147.249':139
'19#.#2.173.30':139
'19#.#2.249.37':445
'19#.#2.104.204':445
'19#.#2.79.129':445
'19#.#2.22.222':445
'19#.#2.23.177':445
'19#.#2.57.88':445
'19#.#2.127.253':445
'19#.#2.186.61':445
'19#.#2.28.171':445
'19#.#2.244.113':445
'19#.#2.41.137':445
'19#.#2.141.89':445
'19#.#2.235.179':445
'19#.#2.35.150':445
'19#.#2.29.156':445
'19#.#2.249.174':445
'19#.#2.33.230':445
'19#.#2.108.217':445
'19#.#2.229.35':445
'19#.#2.214.228':445
'19#.22.42.5':445
'19#.#2.137.109':445
'19#.#2.163.137':445
'19#.#2.227.91':139
'19#.22.8.64':139
'19#.#2.19.221':139
'19#.#2.95.38':139
'19#.#2.62.212':139
'19#.#2.57.250':139
'19#.#2.41.51':139
'19#.22.3.1':139
'19#.#2.217.247':139
'19#.#2.30.146':139
'19#.#2.160.5':139
'19#.#2.74.65':139
'19#.#2.131.211':445
'19#.#2.116.78':445
'19#.22.48.4':445
'19#.#2.229.62':445
'19#.#2.220.252':445
'19#.#2.66.11':445
'19#.#2.127.113':139
'19#.#2.124.100':139
'19#.#2.39.51':139
'19#.#2.215.73':445
'19#.#2.42.145':445
'19#.#2.240.57':139
'19#.#2.193.14':139
'19#.#2.133.152':139
'19#.#2.14.123':139
'19#.#2.169.5':139
'19#.#2.108.183':139
'19#.#2.206.219':139
'19#.#2.175.206':139
'19#.#2.219.233':139
'19#.#2.163.155':139
'19#.#2.233.71':139
'19#.#2.64.227':139
'19#.#2.168.85':139
'19#.#2.150.115':139
'19#.#2.111.171':139
'19#.#2.149.60':139
'19#.#2.7.217':139
'19#.#2.38.74':139
'19#.#2.211.147':139
'19#.#2.73.179':139
'19#.#2.147.160':139
'19#.#2.64.38':139
'19#.#2.83.128':139
'19#.#2.74.61':139
'19#.#2.32.84':139
'19#.#2.4.240':139
'19#.#2.125.139':139
'19#.#2.120.181':139
'19#.#2.42.36':139
'19#.#2.149.118':139
'19#.#2.121.66':139
'19#.#2.43.63':139
'19#.#2.11.107':139
'19#.#2.125.236':139
'19#.#2.139.135':139
'19#.#2.242.143':139
'19#.#2.187.128':139
'19#.#2.93.163':139
'19#.#2.77.176':139
'19#.#2.22.153':139
'19#.#2.234.64':139
'19#.#2.222.29':139
'19#.22.57.2':139
'19#.#2.234.252':139
'19#.#2.194.132':139
'19#.#2.59.96':139
'19#.#2.75.185':445
'19#.#2.67.169':445
'19#.#2.121.232':445
'19#.#2.211.50':445
'19#.#2.100.72':445
'19#.#2.56.101':445
'19#.#2.71.105':445
'19#.#2.244.230':445
'19#.#2.105.68':445
'19#.#2.120.56':445
'19#.#2.68.120':445
'19#.#2.202.126':445
'19#.#2.41.51':445
'19#.22.3.1':445
'19#.#2.217.247':445
'19#.#2.30.146':445
'19#.#2.160.5':445
'19#.#2.167.220':445
'19#.#2.12.236':445
'19#.#2.126.170':445
'19#.#2.26.241':445
'19#.#2.34.227':445
'19#.22.7.74':445
'19#.#2.245.113':445
'19#.#2.240.198':445
'19#.22.12.7':445
'19#.#2.173.30':445
'19#.#2.10.58':445
'19#.#2.4.241':445
'19#.#2.159.25':139
'19#.#2.129.186':139
'19#.#2.26.80':139
'19#.#2.186.5':139
'19#.#2.108.74':139
'19#.#2.147.249':445
'19#.#2.165.34':445
'19#.#2.143.252':445
'19#.#2.112.40':445
'19#.#2.124.1':445
'19#.#2.153.120':445
'19#.#2.111.169':445
'19#.#2.116.124':445
'19#.#2.10.38':445
'19#.#2.214.214':445
'19#.#2.68.89':445
'19#.22.34.0':445
'19#.#2.205.96':445
'19#.#2.165.24':445
'19#.#2.112.20':445
'19#.#2.39.151':445
'19#.#2.130.136':445
'19#.#2.155.130':445
'19#.#2.126.123':445
'19#.#2.255.173':445
'19#.#2.0.163':445
'19#.#2.179.47':445
'19#.#2.247.26':445
'19#.#2.185.246':445
'19#.#2.205.175':445
'19#.#2.196.105':139
'19#.#2.30.138':139
'19#.#2.97.186':139
'19#.#2.69.39':139
'19#.#2.108.51':139
'19#.#2.57.32':445
'19#.#2.220.231':445
'19#.#2.183.226':445
'19#.#2.112.151':445
'19#.#2.115.237':445
'19#.#2.94.15':445
'19#.#2.134.131':445
'19#.#2.241.32':445
'19#.#2.78.157':445
'19#.#2.165.23':445
'19#.#2.2.249':445
'19#.#2.8.241':445
'19#.#2.249.164':445
'19#.#2.77.106':445
'19#.#2.156.171':445
'19#.#2.133.11':445
'19#.#2.188.78':445
'19#.#2.176.52':445
'19#.#2.101.105':445
'19#.#2.176.83':445
'19#.#2.2.169':445
'19#.#2.145.26':445
'19#.#2.94.222':445
'19#.#2.96.71':445
'19#.#2.168.21':445
'19#.#2.225.49':445
'19#.#2.102.90':445
'19#.#2.116.194':445
'19#.#2.14.92':445
'19#.#2.179.47':139
'19#.#2.255.173':139
'19#.#2.185.246':139
'19#.#2.126.123':139
'19#.#2.247.26':139
'19#.#2.0.163':139
'19#.#2.101.105':139
'19#.#2.176.83':139
'19#.#2.2.169':139
'19#.#2.145.26':139
'19#.#2.94.222':139
'19#.#2.112.20':139
'19#.#2.94.15':139
'19#.#2.183.226':139
'19#.#2.57.32':139
'19#.#2.220.231':139
'19#.#2.112.151':139
'19#.#2.115.237':139
'19#.#2.39.151':139
'19#.#2.165.24':139
'19#.#2.155.130':139
'19#.#2.205.175':139
'19#.#2.130.136':139
'19#.#2.156.171':139
'19#.#2.249.164':139
'19#.#2.133.11':139
'19#.#2.8.241':139
'19#.#2.188.78':139
'19#.#2.77.106':139
'19#.#2.232.63':139
'19#.#2.1.136':139
'19#.#2.63.232':139
'19#.#2.85.25':139
'19#.#2.23.146':139
'19#.#2.241.32':139
'19#.#2.102.90':139
'19#.#2.168.21':139
'19#.#2.14.92':139
'19#.#2.96.71':139
'19#.#2.116.194':139
'19#.#2.176.52':139
'19#.#2.78.157':139
'19#.#2.134.131':139
'19#.#2.2.249':139
'19#.#2.225.49':139
'19#.#2.165.23':139
'19#.#2.41.137':139
'19#.#2.28.171':139
'19#.#2.244.113':139
'19#.#2.104.204':139
'19#.#2.57.88':139
'19#.#2.127.253':139
'19#.22.48.4':139
'19#.#2.131.211':139
'19#.#2.220.252':139
'19#.#2.186.61':139
'19#.#2.229.62':139
'19#.#2.249.37':139
'19#.#2.163.137':139
'19#.22.42.5':139
'19#.#2.137.109':139
'19#.#2.35.150':139
'19#.#2.108.217':139
'19#.#2.229.35':139
'19#.#2.23.177':139
'19#.#2.79.129':139
'19#.#2.22.222':139
'19#.#2.214.228':139
'19#.#2.141.89':139
'19#.#2.74.179':445
'19#.#2.164.37':445
'19#.#2.59.60':445
'19#.#2.27.171':445
'19#.#2.16.213':445
'19#.#2.137.2':445
'19#.#2.204.137':445
'19#.#2.50.185':445
'19#.22.20.9':445
'19#.#2.182.136':445
'19#.#2.242.207':445
'19#.#2.172.220':445
'19#.#2.42.145':139
'19#.#2.255.71':445
'19#.#2.215.73':139
'19#.#2.116.78':139
'19#.#2.66.11':139
'19#.#2.161.201':445
'19#.#2.63.114':445
'19#.#2.148.115':445
'19#.#2.229.28':445
'19#.#2.40.59':445
'19#.#2.202.228':445
'19#.#2.168.21':9988
'19#.#2.165.23':9988
'19#.#2.96.71':9988
'19#.#2.205.175':9988
'19#.#2.220.231':9988
'19#.#2.134.131':9988
'19#.#2.97.186':9988
'19#.#2.255.71':139
'19#.#2.108.51':9988
'19#.#2.241.32':9988
'19#.#2.249.164':9988
'19#.#2.155.130':9988
'19#.#2.232.63':445
'19#.#2.1.136':445
'19#.#2.63.232':445
'19#.#2.85.25':445
'19#.#2.23.146':445
'19#.#2.69.39':445
'19#.#2.30.138':445
'19#.#2.183.226':9988
'19#.#2.196.105':445
'19#.#2.108.51':445
'19#.#2.97.186':445
'19#.22.20.9':139
'19#.#2.204.137':139
'19#.#2.242.207':139
'19#.#2.137.2':139
'19#.#2.182.136':139
'19#.#2.50.185':139
'19#.#2.29.156':139
'19#.#2.235.179':139
'19#.#2.33.230':139
'19#.#2.205.96':139
'19#.#2.249.174':139
'19#.#2.164.37':139
'19#.#2.229.28':139
'19#.#2.63.114':139
'19#.#2.202.228':139
'19#.#2.161.201':139
'19#.#2.40.59':139
'19#.#2.148.115':139
'19#.#2.59.60':139
'19#.#2.74.179':139
'19#.#2.16.213':139
'19#.#2.172.220':139
'19#.#2.27.171':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней