Trojan.Starman.5892

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#36.137.32':445
'20#.#36.93.58':445
'20#.#36.180.247':445
'20#.#36.39.68':445
'20#.#36.89.202':445
'20#.#36.106.207':445
'20#.#36.159.212':445
'20#.#36.147.100':445
'20#.#36.233.52':445
'20#.#36.52.4':445
'20#.#36.133.207':139
'20#.#36.107.141':139
'20#.#36.120.83':139
'20#.#36.207.164':139
'20#.#36.174.189':139
'20#.#36.59.156':139
'20#.#36.22.179':139
'20#.#36.218.189':139
'20#.#36.44.219':139
'20#.#36.145.157':445
'20#.#36.30.91':445
'20#.#36.89.198':445
'20#.#36.115.89':445
'20#.#36.82.30':445
'20#.#36.104.42':445
'20#.#36.30.95':445
'20#.#36.21.121':445
'20#.#36.123.223':445
'20#.#36.198.5':445
'20#.#36.112.139':445
'20#.#36.106.136':445
'20#.#36.1.77':445
'20#.#36.10.167':445
'20#.#36.161.198':445
'20#.#36.140.25':445
'20#.#36.236.36':445
'20#.#36.34.162':445
'20#.#36.107.34':445
'20#.#36.0.36':139
'20#.#36.34.162':139
'20#.#36.107.34':139
'20#.#36.106.136':139
'20#.#36.161.198':139
'20#.#36.140.25':139
'20#.#36.89.198':139
'20#.#36.115.89':139
'20#.#36.236.36':139
'20#.#36.198.5':139
'20#.#36.112.139':139
'20#.#36.89.202':139
'20#.#36.147.100':139
'20#.#36.137.32':139
'20#.#36.93.58':139
'20#.#36.233.52':139
'20#.#36.1.77':139
'20#.#36.10.167':139
'20#.#36.106.207':139
'20#.#36.159.212':139
'20#.#36.51.185':139
'20#.#36.217.227':139
'20#.#36.56.153':139
'20#.#36.190.170':139
'20#.#36.148.72':139
'20#.#36.82.44':139
'20#.#36.146.226':139
'20#.#36.211.88':139
'20#.#36.175.121':139
'20#.#36.225.43':139
'20#.#36.82.30':139
'20#.#36.21.121':139
'20#.#36.145.157':139
'20#.#36.30.91':139
'20#.#36.123.223':139
'20#.#36.111.45':139
'20#.#36.161.91':139
'20#.#36.104.42':139
'20#.#36.30.95':139
'20#.#36.111.45':445
'20#.#36.128.140':139
'20#.#36.177.128':139
'20#.#36.117.232':139
'20#.#36.143.115':139
'20#.#36.24.29':139
'20#.#36.193.197':139
'20#.#36.5.58':139
'20#.#36.55.167':139
'20#.#36.118.56':139
'20#.#36.195.79':139
'20#.#36.132.50':139
'20#.#36.191.132':139
'20#.#36.96.209':139
'20#.#36.49.234':139
'20#.#36.20.191':139
'20#.#36.245.88':139
'20#.#36.74.122':139
'20#.#36.46.3':139
'20#.#36.0.88':139
'20#.#36.40.148':139
'20#.#36.225.226':139
'20#.#36.159.204':139
'20#.#36.38.240':139
'20#.#36.23.16':445
'20#.#36.32.155':445
'20#.#36.53.143':445
'20#.#36.37.151':445
'20#.#36.12.37':445
'20#.#36.227.216':139
'20#.#36.209.250':139
'20#.#36.232.209':139
'20#.#36.127.163':139
'20#.#36.251.56':139
'20#.#36.149.39':139
'20#.#36.119.186':139
'20#.#36.142.218':139
'20#.#36.194.206':139
'20#.#36.186.187':139
'20#.#36.132.214':139
'20#.#36.120.83':445
'20#.#36.207.164':445
'20#.#36.146.226':445
'20#.#36.0.36':445
'20#.#36.133.207':445
'20#.#36.218.189':445
'20#.#36.44.219':445
'20#.#36.107.141':445
'20#.#36.174.189':445
'20#.#36.82.44':445
'20#.#36.56.153':445
'20#.#36.190.170':445
'20#.#36.161.91':445
'20#.#36.225.43':445
'20#.#36.51.185':445
'20#.#36.211.88':445
'20#.#36.175.121':445
'20#.#36.217.227':445
'20#.#36.148.72':445
'20#.#36.27.232':139
'20#.#36.0.199':139
'20#.#36.245.227':139
'20#.#36.232.41':139
'20#.#36.176.228':139
'20#.#36.134.183':139
'20#.#36.36.186':139
'20#.#36.33.243':139
'20#.#36.183.63':139
'20#.#36.184.68':139
'20#.#36.23.16':139
'20#.#36.37.151':139
'20#.#36.59.156':445
'20#.#36.22.179':445
'20#.#36.12.37':139
'20#.#36.71.56':139
'20#.#36.170.223':139
'20#.#36.32.155':139
'20#.#36.53.143':139
'20#.#36.39.68':139
'20#.#36.4.38':445
'20#.#36.149.156':445
'20#.#36.93.22':139
'20#.#36.216.92':139
'20#.#36.174.187':445
'20#.#36.46.181':445
'20#.#36.196.81':445
'20#.#36.12.143':445
'20#.#36.44.102':445
'20#.#36.22.120':139
'20#.#36.7.192':139
'20#.#36.59.38':139
'20#.#36.194.30':139
'20#.#36.85.196':139
'20#.#36.206.147':139
'20#.#36.121.2':139
'20#.#36.119.179':139
'20#.#36.100.4':139
'20#.#36.115.99':139
'20#.#36.1.38':445
'20#.#36.62.139':445
'20#.#36.214.128':445
'20#.#36.12.50':445
'20#.#36.93.62':445
'20#.#36.1.32':445
'20#.#36.21.16':445
'20#.#36.124.176':445
'20#.#36.191.210':445
'20#.#36.220.254':445
'20#.#36.0.186':445
'20#.#36.238.214':445
'20#.#36.179.241':445
'20#.#36.129.204':445
'20#.#36.18.49':445
'20#.#36.175.231':445
'20#.#36.231.20':445
'20#.#36.142.200':445
'20#.#36.65.29':445
'20#.#36.234.201':139
'20#.#36.142.200':139
'20#.#36.65.29':139
'20#.#36.238.214':139
'20#.#36.18.49':139
'20#.#36.175.231':139
'20#.#36.214.128':139
'20#.#36.12.50':139
'20#.#36.231.20':139
'20#.#36.220.254':139
'20#.#36.0.186':139
'20#.#36.174.187':139
'20#.#36.12.143':139
'20#.#36.4.38':139
'20#.#36.149.156':139
'20#.#36.44.102':139
'20#.#36.179.241':139
'20#.#36.129.204':139
'20#.#36.46.181':139
'20#.#36.196.81':139
'20#.#36.40.13':139
'20#.#36.43.17':139
'20#.#36.60.27':139
'20#.#36.66.201':139
'20#.#36.50.234':139
'20#.#36.230.174':139
'20#.#36.141.48':139
'20#.#36.177.182':139
'20#.#36.241.118':139
'20#.#36.107.250':139
'20#.#36.93.62':139
'20#.#36.124.176':139
'20#.#36.1.38':139
'20#.#36.62.139':139
'20#.#36.191.210':139
'20#.#36.167.97':139
'20#.#36.242.97':139
'20#.#36.1.32':139
'20#.#36.21.16':139
'20#.#36.167.97':445
'20#.#36.187.190':139
'20#.#36.82.46':139
'20#.#36.103.253':139
'20#.#36.201.160':139
'20#.#36.55.53':139
'20#.#36.55.70':139
'20#.#36.77.165':139
'20#.#36.76.175':139
'20#.#36.139.177':139
'20#.#36.225.82':139
'20#.#36.130.167':139
'20#.#36.102.108':139
'20#.#36.241.118':9988
'20#.#36.59.38':9988
'20#.#36.241.162':139
'20#.#36.116.57':139
'20#.#36.106.89':139
'20#.#36.150.171':139
'20#.#36.134.69':139
'20#.#36.55.53':445
'20#.#36.76.175':445
'20#.#36.187.190':445
'20#.#36.82.46':445
'20#.#36.139.177':445
'20#.#36.52.4':139
'20#.#36.180.247':139
'20#.#36.55.70':445
'20#.#36.77.165':445
'20#.#36.201.160':445
'20#.#36.241.162':445
'20#.#36.150.171':445
'20#.#36.130.167':445
'20#.#36.102.108':445
'20#.#36.134.69':445
'20#.#36.225.82':445
'20#.#36.103.253':445
'20#.#36.116.57':445
'20#.#36.106.89':445
'20#.#36.40.13':9988
'20#.#36.194.30':445
'20#.#36.85.196':445
'20#.#36.141.48':445
'20#.#36.234.201':445
'20#.#36.7.192':445
'20#.#36.100.4':445
'20#.#36.115.99':445
'20#.#36.59.38':445
'20#.#36.206.147':445
'20#.#36.230.174':445
'20#.#36.60.27':445
'20#.#36.66.201':445
'20#.#36.242.97':445
'20#.#36.107.250':445
'20#.#36.40.13':445
'20#.#36.177.182':445
'20#.#36.241.118':445
'20#.#36.43.17':445
'20#.#36.50.234':445
'20#.#36.214.128':9988
'20#.#36.12.50':9988
'20#.#36.18.49':9988
'20#.#36.231.20':9988
'20#.#36.1.38':9988
'20#.#36.191.210':9988
'20#.#36.1.32':9988
'20#.#36.93.62':9988
'20#.#36.124.176':9988
'20#.#36.238.214':9988
'20#.#36.22.120':445
'20#.#36.93.22':445
'20#.#36.121.2':445
'20#.#36.119.179':445
'20#.#36.216.92':445
'20#.#36.46.181':9988
'20#.#36.196.81':9988
'20#.#36.12.143':9988
'20#.#36.44.102':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней