Trojan.Starman.5933

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#03.76.79':445
'19#.#03.118.142':445
'19#.#03.72.45':445
'19#.#03.105.16':445
'19#.#03.14.130':445
'19#.#03.129.218':445
'19#.#03.99.207':445
'19#.#03.139.201':445
'19#.#03.47.232':445
'19#.#03.222.237':445
'19#.#03.48.6':445
'19#.#03.143.183':445
'19#.#03.73.66':445
'19#.#03.55.192':445
'19#.#03.122.32':445
'19#.#03.21.61':445
'19#.#03.48.94':445
'19#.#03.75.247':445
'19#.#03.198.239':445
'19#.#03.169.119':445
'19#.#03.238.226':445
'19#.#03.119.67':445
'19#.#03.226.42':445
'19#.#03.194.209':445
'19#.#03.139.181':445
'19#.#03.42.87':445
'19#.#03.14.42':445
'19#.#03.207.17':445
'19#.#03.99.197':139
'19#.#03.92.146':139
'19#.#03.80.70':139
'19#.#03.23.207':139
'19#.#03.139.56':139
'19#.#03.42.87':139
'19#.#03.14.42':139
'19#.#03.181.93':139
'19#.#03.1.172':445
'19#.#03.104.48':139
'19#.#03.139.181':139
'19#.#03.104.48':445
'19#.#03.181.93':445
'19#.#03.207.17':139
'19#.#03.226.42':139
'19#.#03.194.209':139
'19#.#03.72.45':139
'19#.#03.76.79':139
'19#.#03.14.130':139
'19#.#03.198.239':139
'19#.#03.105.16':139
'19#.#03.118.142':139
'19#.#03.47.232':139
'19#.#03.99.207':139
'19#.#03.48.6':139
'19#.#03.129.218':139
'19#.#03.222.237':139
'19#.#03.55.192':139
'19#.#03.143.183':139
'19#.#03.21.61':139
'19#.#03.32.118':139
'19#.#03.122.32':139
'19#.#03.73.66':139
'19#.#03.169.119':139
'19#.#03.75.247':139
'19#.#03.119.67':139
'19#.#03.48.94':139
'19#.#03.238.226':139
'19#.#03.35.177':445
'19#.#03.91.123':445
'19#.#03.105.243':445
'19#.#03.128.207':445
'19#.#03.233.128':445
'19#.#03.175.4':445
'19#.#03.149.152':445
'19#.#03.32.118':445
'19#.#03.42.71':445
'19#.#03.252.247':445
'19#.#03.204.180':445
'19#.#03.0.20':445
'19#.#03.29.161':445
'19#.#03.203.65':445
'19#.#03.139.201':139
'19#.#03.1.172':139
'19#.#03.199.17':445
'19#.#03.72.237':445
'19#.#03.207.13':445
'19#.#03.232.233':445
'19#.#03.157.206':445
'19#.#03.248.58':445
'19#.#03.82.23':139
'19#.#03.66.150':445
'19#.#03.101.230':445
'19#.#03.7.117':445
'19#.#03.46.194':445
'19#.#03.16.56':445
'19#.#03.136.117':445
'19#.#03.2.134':445
'19#.#03.146.11':445
'19#.#03.5.63':445
'19#.#03.131.77':445
'19#.#03.176.139':445
'19#.#03.230.137':445
'19#.#03.172.166':445
'19#.#03.176.221':445
'19#.#03.248.122':445
'19#.#03.144.248':445
'19#.#03.201.172':445
'19#.#03.121.105':445
'19#.#03.35.30':445
'19#.#03.51.72':445
'19#.#03.255.201':445
'19#.#03.124.59':445
'19#.#03.170.3':139
'19#.#03.59.81':139
'19#.#03.209.172':445
'19#.#03.148.119':445
'19#.#03.147.104':445
'19#.#03.43.116':139
'19#.#03.32.134':139
'19#.#03.0.181':139
'19#.#03.12.111':139
'19#.#03.217.69':139
'19#.#03.11.102':139
'19#.#03.83.116':445
'19#.#03.43.229':445
'19#.#03.206.203':445
'19#.#03.35.174':445
'19#.#03.229.35':445
'19#.#03.227.92':445
'19#.#03.18.23':445
'19#.#03.131.17':445
'19#.#03.22.142':445
'19#.#03.24.84':445
'19#.#03.78.60':445
'19#.#03.7.117':139
'19#.#03.66.150':139
'19#.#03.16.56':139
'19#.#03.35.30':139
'19#.#03.46.194':139
'19#.#03.101.230':139
'19#.#03.5.63':139
'19#.#03.2.134':139
'19#.#03.176.139':139
'19#.#03.136.117':139
'19#.#03.131.77':139
'19#.#03.176.221':139
'19#.#03.230.137':139
'19#.#03.144.248':139
'19#.#03.122.235':139
'19#.#03.248.122':139
'19#.#03.172.166':139
'19#.#03.51.72':139
'19#.#03.121.105':139
'19#.#03.124.59':139
'19#.#03.201.172':139
'19#.#03.255.201':139
'19#.#03.209.172':139
'19#.#03.23.207':445
'19#.#03.147.104':139
'19#.#03.131.17':139
'19#.#03.148.119':139
'19#.#03.139.56':445
'19#.#03.82.23':445
'19#.#03.122.235':445
'19#.#03.92.146':445
'19#.#03.80.70':445
'19#.#03.99.197':445
'19#.#03.206.203':139
'19#.#03.83.116':139
'19#.#03.229.35':139
'19#.#03.146.11':139
'19#.#03.35.174':139
'19#.#03.43.229':139
'19#.#03.22.142':139
'19#.#03.18.23':139
'19#.#03.78.60':139
'19#.#03.227.92':139
'19#.#03.24.84':139
'19#.#03.149.152':139
'19#.#03.133.190':445
'19#.#03.54.50':445
'19#.#03.240.191':445
'19#.#03.163.64':445
'19#.#03.12.125':445
'19#.#03.194.54':445
'19#.#03.19.245':445
'19#.#03.211.67':445
'19#.#03.50.130':445
'19#.#03.19.111':445
'19#.#03.106.55':445
'19#.#03.32.77':139
'19#.#03.176.173':139
'19#.#03.77.44':139
'19#.#03.7.29':139
'19#.#03.9.172':139
'19#.#03.58.222':139
'19#.#03.133.22':445
'19#.#03.93.114':445
'19#.#03.65.37':445
'19#.#03.146.58':139
'19#.#03.201.194':445
'19#.#03.93.151':445
'19#.#03.65.53':445
'19#.#03.33.166':445
'19#.#03.81.254':445
'19#.#03.207.145':445
'19#.#03.54.47':445
'19#.#03.159.211':445
'19#.#03.164.234':445
'19#.#03.142.206':445
'19#.#03.148.202':445
'19#.#03.77.216':445
'19#.#03.145.43':445
'19#.#03.72.59':445
'19#.#03.76.175':445
'19#.#03.114.162':445
'19#.#03.122.88':445
'19#.#03.126.149':445
'19#.#03.209.61':445
'19#.#03.253.208':445
'19#.#03.61.49':445
'19#.#03.160.7':445
'19#.#03.166.101':445
'19#.#03.211.67':139
'19#.#03.114.162':139
'19#.#03.19.245':139
'19#.#03.106.55':139
'19#.#03.50.130':139
'19#.#03.122.88':139
'19#.#03.126.149':139
'19#.#03.160.7':139
'19#.#03.72.59':139
'19#.#03.76.175':139
'19#.#03.145.43':139
'19#.#03.133.22':139
'19#.#03.65.37':139
'19#.#03.201.194':139
'19#.#03.12.125':139
'19#.#03.93.114':139
'19#.#03.163.64':139
'19#.#03.194.54':139
'19#.#03.19.111':139
'19#.#03.54.50':139
'19#.#03.240.191':139
'19#.#03.133.190':139
'19#.#03.164.234':139
'19#.#03.163.46':139
'19#.#03.159.211':139
'19#.#03.77.216':139
'19#.#03.142.206':139
'19#.103.5.0':139
'19#.#03.0.87':139
'19#.#03.23.131':139
'19#.#03.109.0':139
'19#.#03.149.58':139
'19#.#03.5.76':139
'19#.#03.253.208':139
'19#.#03.81.254':139
'19#.#03.209.61':139
'19#.#03.166.101':139
'19#.#03.61.49':139
'19#.#03.207.145':139
'19#.#03.54.47':139
'19#.#03.148.202':139
'19#.#03.65.53':139
'19#.#03.33.166':139
'19#.#03.93.151':139
'19#.#03.163.46':445
'19#.#03.0.198':139
'19#.#03.38.210':139
'19#.#03.74.97':139
'19#.#03.191.170':139
'19#.#03.129.86':139
'19#.#03.73.132':139
'19#.#03.129.86':445
'19#.#03.74.97':445
'19#.#03.191.170':445
'19#.#03.84.87':139
'19#.#03.52.231':445
'19#.#03.102.8':445
'19#.#03.9.226':445
'19#.#03.157.88':445
'19#.#03.152.181':445
'19#.#03.193.9':445
'19#.#03.34.195':445
'19#.#03.123.91':445
'19#.#03.52.231':139
'19#.#03.90.157':445
'19#.#03.24.3':445
'19#.#03.81.125':445
'19#.#03.233.128':139
'19#.#03.105.243':139
'19#.#03.128.207':139
'19#.#03.72.237':139
'19#.#03.207.13':139
'19#.#03.35.177':139
'19#.#03.204.180':139
'19#.#03.42.71':139
'19#.#03.252.247':139
'19#.#03.91.123':139
'19#.#03.175.4':139
'19#.#03.84.87':445
'19#.#03.203.65':139
'19#.#03.73.132':445
'19#.#03.0.198':445
'19#.#03.38.210':445
'19#.#03.0.20':139
'19#.#03.248.58':139
'19#.#03.232.233':139
'19#.#03.157.206':139
'19#.#03.29.161':139
'19#.#03.199.17':139
'19#.#03.126.149':9988
'19#.#03.81.254':9988
'19#.#03.93.114':9988
'19#.#03.58.222':445
'19#.#03.146.58':445
'19#.#03.160.7':9988
'19#.#03.166.101':9988
'19#.#03.19.111':9988
'19#.#03.209.61':9988
'19#.#03.19.245':9988
'19#.#03.114.162':9988
'19#.#03.5.76':445
'19#.#03.0.87':445
'19#.#03.109.0':445
'19#.103.5.0':445
'19#.#03.149.58':445
'19#.#03.23.131':445
'19#.#03.32.77':445
'19#.#03.176.173':445
'19#.#03.77.44':445
'19#.#03.7.29':445
'19#.#03.9.172':445
'19#.#03.34.195':139
'19#.#03.24.3':139
'19#.#03.9.226':139
'19#.#03.157.88':139
'19#.#03.102.8':139
'19#.#03.81.125':139
'19#.#03.21.121':445
'19#.#03.148.21':445
'19#.#03.120.146':445
'19#.#03.90.157':139
'19#.#03.123.91':139
'19#.#03.76.175':9988
'19#.#03.122.88':9988
'19#.#03.163.64':9988
'19#.#03.106.55':9988
'19#.#03.33.166':9988
'19#.#03.54.50':9988
'19#.#03.152.181':139
'19#.#03.193.9':139
'19#.#03.148.21':139
'19#.#03.120.146':139
'19#.#03.21.121':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней