Trojan.Starman.5436

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#13.17.35':139
'19#.#13.182.17':139
'19#.#13.46.62':139
'19#.#13.46.126':139
'19#.#13.178.160':139
'19#.#13.207.236':139
'19#.#13.245.206':139
'19#.#13.0.51':139
'19#.#13.75.65':139
'19#.#13.69.13':139
'19#.#13.127.17':139
'19#.#13.227.118':139
'19#.#13.206.227':139
'19#.#13.118.131':139
'19#.#13.29.229':139
'19#.#13.28.198':139
'19#.#13.124.59':139
'19#.#13.9.11':139
'19#.#13.64.92':139
'19#.#13.9.61':139
'19#.#13.216.13':139
'19#.#13.216.13':445
'19#.#13.64.92':445
'19#.#13.9.61':445
'19#.#13.227.118':445
'19#.#13.206.227':445
'19#.#13.46.126':445
'19#.#13.178.160':445
'19#.#13.127.17':445
'19#.#13.124.59':445
'19#.#13.9.11':445
'19#.#13.118.131':445
'19#.#13.77.191':139
'19#.#13.135.64':139
'19#.#13.84.54':139
'19#.#13.195.245':139
'19#.#13.28.195':139
'19#.#13.29.229':445
'19#.#13.28.198':445
'19#.#13.102.137':445
'19#.#13.35.237':445
'19#.#13.5.217':445
'19#.#13.102.137':139
'19#.#13.201.20':139
'19#.#13.138.252':139
'19#.#13.10.156':139
'19#.#13.91.26':139
'19#.#13.77.103':139
'19#.#13.201.39':445
'19#.#13.230.95':445
'19#.#13.72.24':445
'19#.#13.225.1':139
'19#.#13.245.198':139
'19#.#13.33.105':139
'19#.#13.4.241':139
'19#.#13.134.37':139
'19#.#13.132.234':139
'19#.#13.54.165':139
'19#.#13.55.82':139
'19#.#13.132.102':139
'19#.#13.79.207':139
'19#.#13.97.63':139
'19#.#13.1.63':139
'19#.#13.94.225':139
'19#.#13.10.156':445
'19#.#13.201.20':445
'19#.#13.77.103':445
'19#.#13.33.105':445
'19#.#13.91.26':445
'19#.#13.35.237':139
'19#.#13.5.217':139
'19#.#13.245.198':445
'19#.#13.138.252':445
'19#.#13.225.1':445
'19#.#13.79.207':445
'19#.#13.132.234':445
'19#.#13.4.241':445
'19#.#13.55.82':445
'19#.#13.43.174':445
'19#.#13.54.165':445
'19#.#13.97.63':445
'19#.#13.132.102':445
'19#.#13.94.225':445
'19#.#13.134.37':445
'19#.#13.1.63':445
'19#.#13.46.62':445
'19#.#13.86.68':139
'19#.#13.24.198':139
'19#.#13.127.33':139
'19#.#13.4.226':445
'19#.#13.214.91':445
'19#.#13.110.91':139
'19#.#13.202.202':139
'19#.#13.95.168':139
'19#.#13.62.240':139
'19#.#13.99.188':139
'19#.#13.10.211':445
'19#.#13.13.70':445
'19#.#13.34.33':445
'19#.#13.160.214':445
'19#.#13.27.95':445
'19#.#13.177.31':445
'19#.113.9.7':445
'19#.#13.129.8':445
'19#.#13.41.72':445
'19#.#13.43.119':445
'19#.#13.160.199':445
'19#.#13.72.62':139
'19#.#13.27.238':139
'19#.#13.93.19':139
'19#.#13.77.15':139
'19#.#13.105.84':139
'19#.#13.47.104':139
'19#.#13.12.133':139
'19#.#13.110.26':139
'19#.#13.121.145':139
'19#.#13.2.144':139
'19#.#13.17.251':139
'19#.#13.161.130':139
'19#.#13.78.136':139
'19#.#13.35.60':139
'19#.#13.188.202':139
'19#.#13.44.189':139
'19#.#13.200.135':139
'19#.#13.250.199':139
'19#.#13.135.148':139
'19#.#13.33.94':139
'19#.#13.148.72':139
'19#.#13.101.237':445
'19#.#13.130.143':139
'19#.#13.5.64':139
'19#.#13.229.221':139
'19#.#13.135.64':445
'19#.#13.44.239':139
'19#.#13.246.123':139
'19#.#13.101.237':139
'19#.#13.102.222':139
'19#.#13.133.81':139
'19#.#13.128.240':139
'19#.#13.77.191':445
'19#.#13.69.13':445
'19#.#13.0.51':445
'19#.#13.75.65':445
'19#.#13.17.35':445
'19#.#13.182.17':445
'19#.#13.28.195':445
'19#.#13.84.54':445
'19#.#13.195.245':445
'19#.#13.207.236':445
'19#.#13.245.206':445
'19#.#13.229.221':445
'19#.#13.130.143':445
'19#.#13.44.239':445
'19#.#13.4.226':139
'19#.#13.214.91':139
'19#.#13.102.222':445
'19#.#13.246.123':445
'19#.#13.128.240':445
'19#.#13.5.64':445
'19#.#13.133.81':445
'19#.#13.10.211':139
'19#.#13.13.70':139
'19#.#13.34.33':139
'19#.#13.160.214':139
'19#.#13.27.95':139
'19#.#13.177.31':139
'19#.113.9.7':139
'19#.#13.129.8':139
'19#.#13.41.72':139
'19#.#13.43.119':139
'19#.#13.160.199':139
'19#.#13.43.174':139
'19#.#13.82.39':445
'19#.#13.166.151':445
'19#.#13.116.96':445
'19#.#13.188.84':445
'19#.#13.111.116':445
'19#.#13.29.238':445
'19#.#13.69.156':445
'19#.#13.238.247':445
'19#.#13.245.224':445
'19#.#13.22.53':445
'19#.#13.96.248':445
'19#.#13.31.159':139
'19#.#13.145.49':139
'19#.#13.106.171':139
'19#.#13.214.49':139
'19#.#13.74.84':139
'19#.#13.217.169':445
'19#.#13.189.225':445
'19#.#13.67.84':139
'19#.#13.116.45':139
'19#.#13.24.116':139
'19#.#13.134.34':445
'19#.#13.7.227':445
'19#.#13.111.169':445
'19#.#13.34.158':445
'19#.#13.155.224':445
'19#.#13.160.44':445
'19#.#13.61.112':445
'19#.#13.31.106':445
'19#.#13.79.155':445
'19#.#13.190.78':445
'19#.#13.195.27':445
'19#.#13.122.38':445
'19#.#13.154.7':445
'19#.#13.44.110':445
'19#.#13.79.45':445
'19#.#13.95.122':445
'19#.#13.12.28':445
'19#.#13.249.50':445
'19#.#13.72.206':445
'19#.#13.194.100':445
'19#.#13.64.235':445
'19#.#13.10.223':139
'19#.#13.95.122':139
'19#.#13.44.110':139
'19#.#13.79.45':139
'19#.#13.29.238':139
'19#.#13.69.156':139
'19#.#13.64.235':139
'19#.#13.72.206':139
'19#.#13.194.100':139
'19#.#13.122.38':139
'19#.#13.154.7':139
'19#.#13.238.247':139
'19#.#13.217.169':139
'19#.#13.188.84':139
'19#.#13.111.116':139
'19#.#13.96.248':139
'19#.#13.116.96':139
'19#.#13.245.224':139
'19#.#13.22.53':139
'19#.#13.166.151':139
'19#.#13.189.225':139
'19#.#13.82.39':139
'19#.#13.168.36':139
'19#.#13.109.104':139
'19#.#13.171.230':139
'19#.#13.160.44':139
'19#.#13.61.112':139
'19#.#13.45.192':139
'19#.#13.143.59':139
'19#.#13.148.218':139
'19#.#13.45.60':139
'19#.#13.32.166':139
'19#.#13.31.106':139
'19#.#13.34.158':139
'19#.#13.155.224':139
'19#.#13.195.27':139
'19#.#13.12.28':139
'19#.#13.249.50':139
'19#.#13.79.155':139
'19#.#13.190.78':139
'19#.#13.7.227':139
'19#.#13.111.169':139
'19#.#13.134.34':139
'19#.#13.171.230':445
'19#.#13.124.230':445
'19#.#13.207.124':445
'19#.#13.31.29':445
'19#.#13.227.176':139
'19#.#13.9.124':445
'19#.#13.142.170':445
'19#.#13.204.74':445
'19#.#13.120.81':445
'19#.#13.39.54':445
'19#.#13.248.183':445
'19#.#13.154.141':139
'19#.#13.198.194':139
'19#.#13.176.198':139
'19#.#13.194.187':139
'19#.#13.117.3':139
'19#.#13.124.204':139
'19#.#13.140.199':139
'19#.#13.109.3':139
'19#.#13.245.213':139
'19#.#13.84.57':139
'19#.#13.6.172':139
'19#.#13.140.199':445
'19#.#13.109.3':445
'19#.#13.245.213':445
'19#.#13.84.57':445
'19#.#13.6.172':445
'19#.#13.201.39':139
'19#.#13.230.95':139
'19#.#13.72.24':139
'19#.#13.154.141':445
'19#.#13.227.176':445
'19#.#13.176.198':445
'19#.#13.14.50':445
'19#.#13.171.187':445
'19#.#13.141.160':445
'19#.#13.147.52':445
'19#.#13.115.251':445
'19#.#13.194.187':445
'19#.#13.198.194':445
'19#.#13.124.204':445
'19#.#13.54.158':445
'19#.#13.117.3':445
'19#.#13.54.158':139
'19#.#13.24.116':445
'19#.#13.67.84':445
'19#.#13.116.45':445
'19#.#13.31.159':445
'19#.#13.145.49':445
'19#.#13.194.100':9988
'19#.#13.64.235':9988
'19#.#13.238.247':9988
'19#.#13.166.151':9988
'19#.#13.22.53':9988
'19#.#13.106.171':445
'19#.#13.32.166':445
'19#.#13.148.218':445
'19#.#13.45.60':445
'19#.#13.168.36':445
'19#.#13.109.104':445
'19#.#13.214.49':445
'19#.#13.74.84':445
'19#.#13.10.223':445
'19#.#13.45.192':445
'19#.#13.143.59':445
'19#.#13.142.170':139
'19#.#13.204.74':139
'19#.#13.120.81':139
'19#.#13.39.54':139
'19#.#13.248.183':139
'19#.#13.14.50':139
'19#.#13.171.187':139
'19#.#13.141.160':139
'19#.#13.147.52':139
'19#.#13.115.251':139
'19#.#13.207.124':139
'19#.#13.34.158':9988
'19#.#13.155.224':9988
'19#.#13.249.50':9988
'19#.#13.72.206':9988
'19#.#13.12.28':9988
'19#.#13.31.29':139
'19#.#13.124.230':139
'19#.#13.9.124':139
'19#.#13.111.169':9988
'19#.#13.145.49':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней