Trojan.Starman.5872

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#.135.206':139
'22#.#.249.91':139
'22#.#.181.12':139
'22#.#.133.159':139
'22#.9.37.80':139
'22#.9.8.77':139
'22#.#.114.238':139
'22#.#.207.166':139
'22#.#.19.103':139
'22#.#.114.250':139
'22#.9.81.23':139
'22#.#.28.190':139
'22#.#.47.125':139
'22#.#.94.184':139
'22#.#.70.215':139
'22#.#.184.136':139
'22#.#.157.46':139
'22#.9.9.180':139
'22#.#.159.231':139
'22#.#.81.215':139
'22#.#.51.157':139
'22#.9.76.85':139
'22#.#.186.32':139
'22#.#.16.199':445
'22#.#.159.236':445
'22#.#.219.237':445
'22#.#.223.123':139
'22#.9.87.17':445
'22#.9.64.6':445
'22#.9.18.83':445
'22#.#.101.159':445
'22#.#.238.40':445
'22#.#.221.25':445
'22#.#.176.144':445
'22#.9.1.231':139
'22#.#.217.231':139
'22#.#.166.144':139
'22#.#.229.216':139
'22#.#.143.229':139
'22#.#.179.210':139
'22#.#.233.114':139
'22#.#.123.128':139
'22#.#.127.14':139
'22#.#.51.117':139
'22#.#.147.110':139
'22#.#.129.34':139
'22#.#.83.132':445
'22#.#.141.21':445
'22#.#.34.203':445
'22#.#.234.102':445
'22#.#.109.234':445
'22#.#.130.190':445
'22#.9.53.37':445
'22#.#.192.236':445
'22#.#.229.11':445
'22#.9.220.5':445
'22#.#.148.105':445
'22#.9.70.49':445
'22#.9.19.81':445
'22#.9.244.3':445
'22#.#.181.229':445
'22#.#.187.181':445
'22#.#.107.238':445
'22#.9.56.13':445
'22#.#.11.200':445
'22#.#.212.186':445
'22#.#.76.116':445
'22#.#.30.251':445
'22#.#.124.154':445
'22#.#.238.40':139
'22#.9.18.83':139
'22#.#.176.144':139
'22#.9.64.6':139
'22#.#.221.25':139
'22#.#.101.159':139
'22#.#.25.161':139
'22#.#.33.251':139
'22#.9.6.249':139
'22#.#.163.101':139
'22#.9.28.98':139
'22#.#.114.76':445
'22#.9.92.50':445
'22#.#.204.106':445
'22#.9.98.33':445
'22#.#.135.122':445
'22#.#.225.186':445
'22#.#.219.237':139
'22#.#.16.199':139
'22#.#.159.236':139
'22#.#.109.32':445
'22#.9.87.17':139
'22#.#.163.101':445
'22#.9.177.4':139
'22#.#.181.246':139
'22#.9.26.55':139
'22#.#.157.233':139
'22#.#.38.173':139
'22#.#.206.163':139
'22#.#.232.215':139
'22#.9.8.124':139
'22#.9.216.3':139
'22#.#.71.249':139
'22#.#.54.172':139
'22#.#.106.97':139
'22#.9.26.0':139
'22#.#.200.212':139
'22#.#.198.10':139
'22#.#.212.197':139
'22#.9.12.78':139
'22#.#.180.156':139
'22#.#.163.156':139
'22#.#.205.202':139
'22#.#.85.121':139
'22#.#.75.133':139
'22#.#.125.211':139
'22#.#.251.102':139
'22#.9.3.89':139
'22#.9.25.89':139
'22#.#.182.66':139
'22#.#.214.133':139
'22#.#.137.148':139
'22#.#.111.14':139
'22#.#.162.201':139
'22#.#.244.85':139
'22#.#.113.201':139
'22#.#.80.186':139
'22#.#.237.196':139
'22#.9.25.22':139
'22#.#.242.54':139
'22#.#.201.152':139
'22#.#.48.167':139
'22#.9.5.25':139
'22#.#.254.60':139
'22#.#.160.58':139
'22#.#.35.227':139
'22#.9.93.25':139
'22#.#.162.207':139
'22#.#.209.76':139
'22#.9.37.80':445
'22#.9.76.85':445
'22#.9.9.180':445
'22#.#.159.231':445
'22#.#.133.159':445
'22#.#.81.215':445
'22#.9.8.77':445
'22#.#.114.250':445
'22#.#.135.206':445
'22#.#.51.157':445
'22#.#.181.12':445
'22#.9.6.249':445
'22#.#.33.251':445
'22#.#.25.161':445
'22#.9.28.98':445
'22#.#.129.34':445
'22#.#.70.215':445
'22#.#.157.46':445
'22#.#.47.125':445
'22#.#.28.190':445
'22#.#.94.184':445
'22#.#.184.136':445
'22#.#.249.91':445
'22#.#.147.110':445
'22#.#.127.14':445
'22#.#.223.123':445
'22#.#.233.114':445
'22#.#.123.128':445
'22#.#.51.117':445
'22#.#.73.201':139
'22#.#.116.91':139
'22#.#.210.171':139
'22#.#.235.223':139
'22#.#.168.54':139
'22#.#.207.166':445
'22#.#.186.32':445
'22#.#.19.103':445
'22#.9.81.23':445
'22#.#.114.238':445
'22#.#.229.216':445
'22#.#.179.210':445
'22#.#.166.144':445
'22#.#.217.231':445
'22#.#.143.229':445
'22#.9.1.231':445
'22#.#.157.177':445
'22#.#.223.24':445
'22#.#.193.68':445
'22#.9.35.74':445
'22#.9.1.165':445
'22#.9.74.42':445
'22#.#.80.141':445
'22#.9.27.63':445
'22#.#.74.179':445
'22#.#.207.180':445
'22#.#.66.185':445
'22#.9.20.67':445
'22#.#.107.173':139
'22#.#.233.126':139
'22#.#.142.244':139
'22#.#.123.151':139
'22#.9.15.6':139
'22#.#.247.165':445
'22#.#.146.49':445
'22#.#.147.175':445
'22#.#.49.133':445
'22#.#.251.247':445
'22#.#.129.18':445
'22#.#.199.122':445
'22#.#.180.220':445
'22#.#.125.176':445
'22#.9.51.4':445
'22#.9.74.46':445
'22#.#.87.213':445
'22#.9.3.126':445
'22#.#.208.163':445
'22#.#.84.101':445
'22#.#.163.121':445
'22#.#.10.103':445
'22#.#.137.116':445
'22#.#.212.86':445
'22#.#.212.45':445
'22#.#.162.245':445
'22#.#.122.41':445
'22#.9.7.156':445
'22#.#.128.18':445
'22#.#.60.215':445
'22#.#.236.251':445
'22#.#.163.173':445
'22#.#.137.127':445
'22#.#.173.136':445
'22#.#.201.73':139
'22#.#.207.180':139
'22#.9.27.63':139
'22#.9.20.67':139
'22#.#.80.141':139
'22#.#.66.185':139
'22#.#.74.179':139
'22#.#.162.245':139
'22#.#.212.86':139
'22#.9.7.156':139
'22#.#.199.122':139
'22#.#.122.41':139
'22#.#.49.133':139
'22#.#.146.49':139
'22#.#.129.18':139
'22#.#.251.247':139
'22#.#.247.165':139
'22#.#.147.175':139
'22#.#.223.24':139
'22#.#.193.68':139
'22#.9.35.74':139
'22#.9.1.165':139
'22#.9.74.42':139
'22#.#.212.45':139
'22#.#.163.121':139
'22#.#.208.163':139
'22#.#.137.116':139
'22#.9.3.126':139
'22#.#.10.103':139
'22#.#.84.101':139
'22#.#.158.181':139
'22#.9.74.73':139
'22#.#.75.182':139
'22#.#.64.201':139
'22#.#.133.75':139
'22#.#.163.173':139
'22#.#.60.215':139
'22#.#.173.136':139
'22#.#.128.18':139
'22#.#.137.127':139
'22#.#.236.251':139
'22#.#.180.220':139
'22#.#.125.176':139
'22#.9.51.4':139
'22#.9.74.46':139
'22#.#.87.213':139
'22#.#.64.201':445
'22#.#.229.11':139
'22#.9.53.37':139
'22#.#.148.105':139
'22#.#.130.190':139
'22#.9.220.5':139
'22#.#.192.236':139
'22#.#.204.106':139
'22#.#.114.76':139
'22#.#.135.122':139
'22#.#.124.154':139
'22#.9.98.33':139
'22#.#.212.186':139
'22#.9.56.13':139
'22#.#.30.251':139
'22#.#.107.238':139
'22#.#.76.116':139
'22#.#.11.200':139
'22#.#.83.132':139
'22#.#.141.21':139
'22#.#.34.203':139
'22#.#.234.102':139
'22#.#.109.234':139
'22#.9.92.50':139
'22#.#.245.28':445
'22#.#.194.230':445
'22#.#.201.86':445
'22#.#.116.16':445
'22#.9.3.83':445
'22#.#.112.151':445
'22#.#.107.237':445
'22#.#.160.195':445
'22#.9.79.14':445
'22#.#.122.92':445
'22#.#.194.55':445
'22#.#.85.231':445
'22#.#.126.98':445
'22#.#.95.233':445
'22#.#.225.186':139
'22#.#.109.32':139
'22#.9.46.35':445
'22#.#.129.97':445
'22#.#.59.129':445
'22#.#.152.242':445
'22#.#.251.248':445
'22#.#.58.102':445
'22#.9.19.81':139
'22#.9.27.63':9988
'22#.#.122.41':9988
'22#.9.1.165':9988
'22#.9.74.42':9988
'22#.#.207.180':9988
'22#.#.212.86':9988
'22#.#.95.233':139
'22#.#.85.231':139
'22#.#.87.213':9988
'22#.#.163.173':9988
'22#.#.236.251':9988
'22#.9.74.73':445
'22#.#.201.73':445
'22#.#.158.181':445
'22#.#.133.75':445
'22#.#.75.182':445
'22#.#.123.151':445
'22#.#.233.126':445
'22#.#.193.68':9988
'22#.#.107.173':445
'22#.9.15.6':445
'22#.#.142.244':445
'22#.#.126.98':139
'22#.9.79.14':139
'22#.#.107.237':139
'22#.#.194.55':139
'22#.#.112.151':139
'22#.#.122.92':139
'22#.#.160.195':139
'22#.9.244.3':139
'22#.9.70.49':139
'22#.#.187.181':139
'22#.#.157.177':139
'22#.#.181.229':139
'22#.#.152.242':139
'22#.#.129.97':139
'22#.#.58.102':139
'22#.9.46.35':139
'22#.#.251.248':139
'22#.#.59.129':139
'22#.#.245.28':139
'22#.#.194.230':139
'22#.#.201.86':139
'22#.#.116.16':139
'22#.9.3.83':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней