Trojan.Starman.5044

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.201.1.6':139
'19#.#01.87.60':139
'19#.#01.17.50':139
'19#.#01.132.156':139
'19#.#01.2.133':139
'19#.#01.155.115':139
'19#.#01.101.54':139
'19#.#01.192.82':139
'19#.#01.59.223':139
'19#.#01.74.79':139
'19#.#01.189.150':139
'19#.#01.101.84':139
'19#.#01.23.237':139
'19#.#01.99.192':139
'19#.#01.126.240':139
'19#.#01.193.56':139
'19#.#01.127.184':139
'19#.#01.20.0':139
'19#.#01.87.37':139
'19#.#01.129.134':139
'19#.#01.49.136':139
'19#.#01.146.34':139
'19#.#01.20.0':445
'19#.#01.189.150':445
'19#.#01.127.184':445
'19#.#01.49.136':445
'19#.#01.87.37':445
'19#.201.1.6':445
'19#.#01.87.60':445
'19#.#01.17.50':445
'19#.#01.132.156':445
'19#.#01.2.133':445
'19#.#01.129.134':445
'19#.#01.220.34':139
'19#.#01.168.194':139
'19#.#01.57.2':139
'19#.#01.188.127':139
'19#.#01.68.249':139
'19#.#01.101.84':445
'19#.#01.23.237':445
'19#.#01.99.192':445
'19#.#01.126.240':445
'19#.#01.193.56':445
'19#.#01.104.88':139
'19#.#01.219.103':139
'19#.#01.88.117':139
'19#.#01.73.138':139
'19#.#01.117.108':139
'19#.#01.4.167':445
'19#.#01.222.245':445
'19#.#01.163.200':139
'19#.#01.211.219':139
'19#.#01.114.172':139
'19#.#01.143.142':139
'19#.#01.5.41':139
'19#.#01.9.244':139
'19#.#01.225.214':139
'19#.#01.26.242':139
'19#.#01.58.119':139
'19#.#01.36.34':139
'19#.#01.111.22':139
'19#.#01.22.126':139
'19#.#01.105.185':139
'19#.#01.30.102':139
'19#.#01.116.20':445
'19#.#01.117.108':445
'19#.#01.88.117':445
'19#.#01.73.138':445
'19#.#01.111.22':445
'19#.#01.143.142':445
'19#.#01.114.172':445
'19#.#01.163.200':445
'19#.#01.211.219':445
'19#.#01.104.88':445
'19#.#01.219.103':445
'19#.#01.36.34':445
'19#.#01.58.119':445
'19#.#01.225.214':445
'19#.#01.26.242':445
'19#.#01.33.204':445
'19#.#01.243.33':445
'19#.#01.30.102':445
'19#.#01.22.126':445
'19#.#01.105.185':445
'19#.#01.5.41':445
'19#.#01.9.244':445
'19#.#01.197.71':445
'19#.#01.71.254':445
'19#.#01.121.162':445
'19#.#01.125.214':445
'19#.#01.142.126':445
'19#.#01.134.8':139
'19#.#01.148.197':139
'19#.#01.8.54':139
'19#.#01.204.80':139
'19#.#01.54.204':139
'19#.#01.213.195':445
'19#.#01.162.137':445
'19#.#01.90.13':445
'19#.#01.6.211':445
'19#.#01.59.16':445
'19#.#01.212.81':445
'19#.#01.238.170':445
'19#.#01.72.198':445
'19#.#01.171.120':445
'19#.#01.87.108':445
'19#.#01.15.165':445
'19#.#01.176.235':139
'19#.#01.40.220':139
'19#.#01.136.243':139
'19#.#01.102.124':139
'19#.#01.106.164':139
'19#.#01.77.187':139
'19#.#01.194.95':139
'19#.#01.147.27':139
'19#.#01.117.159':139
'19#.#01.183.232':139
'19#.#01.239.56':139
'19#.#01.164.151':139
'19#.#01.209.9':139
'19#.#01.15.209':139
'19#.#01.10.186':139
'19#.#01.76.78':139
'19#.#01.215.89':139
'19#.#01.73.135':139
'19#.#01.8.69':139
'19#.#01.247.175':139
'19#.#01.192.15':139
'19#.#01.204.191':139
'19#.#01.156.107':139
'19#.#01.68.225':139
'19#.#01.13.239':139
'19#.#01.176.155':139
'19#.#01.240.217':139
'19#.#01.59.16':139
'19#.#01.212.81':139
'19#.#01.1.42':139
'19#.#01.137.182':139
'19#.#01.225.73':139
'19#.#01.168.194':445
'19#.#01.155.115':445
'19#.#01.101.54':445
'19#.#01.192.82':445
'19#.#01.59.223':445
'19#.#01.74.79':445
'19#.#01.57.2':445
'19#.#01.220.34':445
'19#.#01.68.249':445
'19#.#01.146.34':445
'19#.#01.188.127':445
'19#.#01.6.211':139
'19#.#01.240.217':445
'19#.#01.13.239':445
'19#.#01.176.155':445
'19#.#01.197.71':139
'19#.#01.71.254':139
'19#.#01.225.73':445
'19#.#01.1.42':445
'19#.#01.137.182':445
'19#.#01.156.107':445
'19#.#01.68.225':445
'19#.#01.121.162':139
'19#.#01.15.165':139
'19#.#01.171.120':139
'19#.#01.87.108':139
'19#.#01.162.137':139
'19#.#01.90.13':139
'19#.#01.125.214':139
'19#.#01.142.126':139
'19#.#01.213.195':139
'19#.#01.238.170':139
'19#.#01.72.198':139
'19#.#01.243.33':139
'19#.#01.50.32':445
'19#.#01.48.45':445
'19#.#01.163.74':445
'19#.#01.12.223':445
'19#.#01.11.29':445
'19#.#01.23.51':445
'19#.#01.23.149':445
'19#.#01.236.182':445
'19#.#01.133.127':445
'19#.#01.182.80':445
'19#.#01.76.236':445
'19#.#01.68.133':139
'19#.#01.119.128':139
'19#.#01.80.92':139
'19#.#01.5.105':139
'19#.#01.0.11':139
'19#.#01.195.194':445
'19#.#01.232.182':445
'19#.#01.170.234':139
'19#.#01.133.101':139
'19#.#01.83.141':139
'19#.#01.140.240':445
'19#.#01.21.214':445
'19#.#01.148.233':445
'19#.#01.158.126':445
'19#.#01.77.125':445
'19#.#01.126.81':445
'19#.#01.75.121':445
'19#.#01.145.75':445
'19#.#01.201.20':445
'19#.#01.51.21':445
'19#.#01.70.215':445
'19#.#01.55.253':445
'19#.#01.142.109':445
'19#.#01.128.238':445
'19#.#01.117.210':445
'19#.#01.248.198':445
'19#.#01.207.50':445
'19#.#01.0.61':445
'19#.#01.88.0':445
'19#.#01.184.244':445
'19#.#01.94.174':445
'19#.#01.15.191':445
'19#.#01.248.198':139
'19#.#01.207.50':139
'19#.#01.140.240':139
'19#.#01.23.51':139
'19#.#01.23.149':139
'19#.#01.94.174':139
'19#.#01.15.191':139
'19#.#01.128.238':139
'19#.#01.117.210':139
'19#.#01.142.109':139
'19#.#01.236.182':139
'19#.#01.163.74':139
'19#.#01.195.194':139
'19#.#01.76.236':139
'19#.#01.232.182':139
'19#.#01.11.29':139
'19#.#01.133.127':139
'19#.#01.182.80':139
'19#.#01.48.45':139
'19#.#01.12.223':139
'19#.#01.50.32':139
'19#.#01.184.244':139
'19#.#01.162.0':139
'19#.#01.69.225':139
'19#.#01.211.177':139
'19#.#01.75.121':139
'19#.#01.145.75':139
'19#.#01.203.106':139
'19#.#01.68.240':139
'19#.#01.112.195':139
'19#.#01.41.140':139
'19#.#01.13.184':139
'19#.#01.201.20':139
'19#.#01.77.125':139
'19#.#01.126.81':139
'19#.#01.55.253':139
'19#.#01.0.61':139
'19#.#01.88.0':139
'19#.#01.51.21':139
'19#.#01.70.215':139
'19#.#01.148.233':139
'19#.#01.158.126':139
'19#.#01.21.214':139
'19#.#01.219.21':445
'19#.#01.144.73':445
'19#.#01.72.230':445
'19#.#01.100.13':139
'19#.#01.99.91':445
'19#.#01.41.43':445
'19#.#01.6.87':445
'19#.#01.4.175':445
'19#.#01.17.149':445
'19#.#01.34.238':445
'19#.#01.80.230':139
'19#.#01.17.150':139
'19#.#01.132.20':139
'19#.#01.240.186':139
'19#.#01.97.138':139
'19#.#01.147.168':139
'19#.#01.74.174':139
'19#.#01.190.74':139
'19#.#01.97.250':139
'19#.#01.175.53':139
'19#.#01.205.174':139
'19#.#01.101.0':445
'19#.#01.190.74':445
'19#.#01.80.230':445
'19#.#01.74.174':445
'19#.#01.175.53':445
'19#.#01.97.250':445
'19#.#01.116.20':139
'19#.#01.33.204':139
'19#.#01.222.245':139
'19#.#01.100.13':445
'19#.#01.4.167':139
'19#.#01.205.174':445
'19#.#01.235.88':445
'19#.#01.217.234':445
'19#.#01.34.183':445
'19#.#01.232.214':445
'19#.#01.10.156':445
'19#.#01.17.150':445
'19#.#01.132.20':445
'19#.#01.240.186':445
'19#.#01.97.138':445
'19#.#01.147.168':445
'19#.#01.83.141':445
'19#.#01.170.234':445
'19#.#01.133.101':445
'19#.#01.68.133':445
'19#.#01.119.128':445
'19#.#01.12.223':9988
'19#.#01.23.51':9988
'19#.#01.163.74':9988
'19#.#01.195.194':9988
'19#.#01.232.182':9988
'19#.#01.80.92':445
'19#.#01.41.140':445
'19#.#01.13.184':445
'19#.#01.69.225':445
'19#.#01.211.177':445
'19#.#01.162.0':445
'19#.#01.5.105':445
'19#.#01.0.11':445
'19#.#01.68.240':445
'19#.#01.112.195':445
'19#.#01.203.106':445
'19#.#01.140.240':9988
'19#.#01.6.87':139
'19#.#01.101.0':139
'19#.#01.41.43':139
'19#.#01.34.238':139
'19#.#01.4.175':139
'19#.#01.235.88':139
'19#.#01.217.234':139
'19#.#01.34.183':139
'19#.#01.232.214':139
'19#.#01.10.156':139
'19#.#01.17.149':139
'19#.#01.162.0':9988
'19#.#01.41.140':9988
'19#.#01.145.75':9988
'19#.#01.128.238':9988
'19#.#01.201.20':9988
'19#.#01.144.73':139
'19#.#01.219.21':139
'19#.#01.72.230':139
'19#.#01.203.106':9988
'19#.#01.99.91':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней