Trojan.Starman.5115

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#34.25.252':139
'12#.#34.107.228':139
'12#.#34.172.62':139
'12#.#34.34.26':139
'12#.#34.62.213':139
'12#.#34.91.110':139
'12#.#34.41.183':139
'12#.#34.58.174':139
'12#.#34.197.14':139
'12#.#34.45.104':139
'12#.#34.17.50':139
'12#.#34.111.15':139
'12#.#34.249.225':139
'12#.#34.54.4':139
'12#.#34.119.223':139
'12#.#34.49.126':139
'12#.#34.49.159':139
'12#.#34.127.84':139
'12#.#34.159.217':139
'12#.#34.113.108':139
'12#.#34.188.178':139
'12#.#34.49.159':445
'12#.#34.127.84':445
'12#.#34.159.217':445
'12#.#34.113.108':445
'12#.#34.188.178':445
'12#.#34.172.62':445
'12#.#34.25.252':445
'12#.#34.62.213':445
'12#.#34.17.50':445
'12#.#34.34.26':445
'12#.#34.249.225':445
'12#.#34.50.242':139
'12#.#34.7.167':139
'12#.#34.241.253':139
'12#.#34.49.12':139
'12#.#34.253.192':139
'12#.#34.54.4':445
'12#.#34.111.15':445
'12#.#34.49.126':445
'12#.#34.61.175':445
'12#.#34.119.223':445
'12#.#34.61.175':139
'12#.#34.254.222':139
'12#.#34.180.156':139
'12#.#34.222.102':139
'12#.#34.21.221':139
'12#.#34.102.75':139
'12#.#34.41.26':445
'12#.#34.207.74':445
'12#.#34.227.158':445
'12#.#34.243.100':139
'12#.#34.71.179':139
'12#.#34.79.40':139
'12#.#34.22.149':139
'12#.#34.183.219':139
'12#.#34.114.17':139
'12#.#34.112.41':139
'12#.#34.55.182':139
'12#.#34.173.131':139
'12#.#34.52.173':139
'12#.#34.130.243':139
'12#.#34.30.65':139
'12#.#34.99.41':139
'12#.#34.21.221':445
'12#.#34.102.75':445
'12#.#34.79.40':445
'12#.#34.173.131':445
'12#.#34.52.173':445
'12#.#34.243.100':445
'12#.#34.71.179':445
'12#.#34.180.156':445
'12#.#34.222.102':445
'12#.#34.254.222':445
'12#.#34.130.243':445
'12#.#34.112.41':445
'12#.#34.55.182':445
'12#.#34.1.23':445
'12#.#34.206.218':445
'12#.#34.207.49':445
'12#.#34.30.65':445
'12#.#34.99.41':445
'12#.#34.183.219':445
'12#.#34.114.17':445
'12#.#34.22.149':445
'12#.#34.107.228':445
'12#.#34.114.164':445
'12#.#34.28.72':139
'12#.#34.164.116':445
'12#.#34.138.100':445
'12#.#34.144.59':445
'12#.#34.93.194':139
'12#.#34.246.217':139
'12#.#34.199.44':139
'12#.#34.78.149':139
'12#.#34.4.142':139
'12#.#34.72.91':445
'12#.#34.19.218':445
'12#.#34.201.41':445
'12#.#34.75.209':445
'12#.#34.169.27':445
'12#.#34.185.200':445
'12#.#34.12.40':445
'12#.#34.174.12':445
'12#.#34.181.60':445
'12#.#34.109.200':445
'12#.#34.17.110':445
'12#.#34.47.25':139
'12#.#34.49.78':139
'12#.#34.193.88':139
'12#.#34.29.42':139
'12#.#34.36.36':139
'12#.#34.140.151':139
'12#.#34.197.123':139
'12#.#34.174.240':139
'12#.#34.231.131':139
'12#.#34.76.253':139
'12#.#34.43.175':139
'12#.#34.20.240':139
'12#.#34.64.241':139
'12#.#34.216.98':139
'12#.#34.191.185':139
'12#.#34.12.177':139
'12#.#34.146.122':139
'12#.#34.198.223':139
'12#.#34.38.232':139
'12#.#34.207.85':139
'12#.#34.202.211':139
'12#.#34.35.156':445
'12#.#34.198.49':139
'12#.#34.194.198':139
'12#.#34.127.243':139
'12#.#34.148.43':139
'12#.#34.167.96':139
'12#.#34.169.27':139
'12#.#34.185.200':139
'12#.#34.35.156':139
'12#.#34.223.194':139
'12#.#34.187.223':139
'12#.#34.8.142':139
'12#.#34.91.110':445
'12#.#34.41.183':445
'12#.#34.58.174':445
'12#.#34.197.14':445
'12#.#34.45.104':445
'12#.#34.50.242':445
'12#.#34.7.167':445
'12#.#34.241.253':445
'12#.#34.49.12':445
'12#.#34.253.192':445
'12#.#34.148.43':445
'12#.#34.167.96':445
'12#.#34.8.142':445
'12#.#34.164.116':139
'12#.#34.114.164':139
'12#.#34.223.194':445
'12#.#34.187.223':445
'12#.#34.194.198':445
'12#.#34.127.243':445
'12#.#34.198.49':445
'12#.#34.144.59':139
'12#.#34.109.200':139
'12#.#34.17.110':139
'12#.#34.201.41':139
'12#.#34.75.209':139
'12#.#34.19.218':139
'12#.#34.72.91':139
'12#.#34.138.100':139
'12#.#34.174.12':139
'12#.#34.181.60':139
'12#.#34.12.40':139
'12#.#34.86.219':445
'12#.#34.234.99':445
'12#.#34.49.142':445
'12#.#34.220.66':445
'12#.#34.244.139':445
'12#.#34.176.104':445
'12#.#34.97.46':445
'12#.#34.58.141':445
'12#.#34.144.57':445
'12#.#34.62.203':445
'12#.#34.130.219':445
'12#.#34.143.16':139
'12#.#34.202.64':139
'12#.#34.16.181':139
'12#.#34.244.122':139
'12#.#34.181.97':139
'12#.#34.177.202':445
'12#.#34.139.117':445
'12#.#34.37.85':139
'12#.#34.60.40':139
'12#.#34.85.60':139
'12#.#34.43.254':445
'12#.#34.148.1':445
'12#.#34.147.60':445
'12#.#34.87.142':445
'12#.#34.19.89':445
'12#.#34.144.243':445
'12#.#34.16.145':445
'12#.#34.243.61':445
'12#.#34.201.31':445
'12#.#34.44.166':445
'12#.#34.102.183':445
'12#.#34.1.139':445
'12#.#34.3.153':445
'12#.#34.47.88':445
'12#.#34.252.219':445
'12#.#34.162.111':445
'12#.#34.112.87':445
'12#.#34.100.63':445
'12#.#34.64.201':445
'12#.#34.19.131':445
'12#.#34.121.191':445
'12#.#34.40.23':139
'12#.#34.162.111':139
'12#.#34.47.88':139
'12#.#34.252.219':139
'12#.#34.176.104':139
'12#.#34.97.46':139
'12#.#34.121.191':139
'12#.#34.64.201':139
'12#.#34.19.131':139
'12#.#34.1.139':139
'12#.#34.3.153':139
'12#.#34.58.141':139
'12#.#34.130.219':139
'12#.#34.220.66':139
'12#.#34.244.139':139
'12#.#34.177.202':139
'12#.#34.139.117':139
'12#.#34.144.57':139
'12#.#34.62.203':139
'12#.#34.234.99':139
'12#.#34.49.142':139
'12#.#34.86.219':139
'12#.#34.249.227':139
'12#.#34.99.187':139
'12#.#34.55.70':139
'12#.#34.144.243':139
'12#.#34.16.145':139
'12#.#34.22.173':139
'12#.#34.249.251':139
'12#.#34.230.105':139
'12#.#34.73.179':139
'12#.#34.48.205':139
'12#.#34.243.61':139
'12#.#34.87.142':139
'12#.#34.19.89':139
'12#.#34.102.183':139
'12#.#34.112.87':139
'12#.#34.100.63':139
'12#.#34.201.31':139
'12#.#34.44.166':139
'12#.#34.148.1':139
'12#.#34.147.60':139
'12#.#34.43.254':139
'12#.#34.55.70':445
'12#.#34.97.17':445
'12#.#34.131.110':445
'12#.#34.85.229':445
'12#.#34.194.66':445
'12#.#34.229.208':445
'12#.#34.1.104':445
'12#.#34.117.149':445
'12#.#34.54.61':445
'12#.#34.219.110':445
'12#.#34.61.132':445
'12#.134.8.1':139
'12#.#34.235.17':139
'12#.#34.54.32':139
'12#.#34.64.198':139
'12#.#34.89.122':139
'12#.#34.15.89':139
'12#.#34.196.40':139
'12#.#34.134.140':139
'12#.#34.27.169':139
'12#.#34.164.93':139
'12#.#34.93.176':139
'12#.134.8.1':445
'12#.#34.227.158':139
'12#.#34.134.140':445
'12#.#34.27.169':445
'12#.#34.196.40':445
'12#.#34.207.49':139
'12#.#34.1.23':139
'12#.#34.206.218':139
'12#.#34.41.26':139
'12#.#34.207.74':139
'12#.#34.93.176':445
'12#.#34.122.175':445
'12#.#34.89.122':445
'12#.#34.0.254':445
'12#.#34.9.48':445
'12#.#34.153.91':445
'12#.#34.54.32':445
'12#.#34.164.93':445
'12#.#34.235.17':445
'12#.#34.15.89':445
'12#.#34.64.198':445
'12#.#34.122.175':139
'12#.#34.85.60':445
'12#.#34.37.85':445
'12#.#34.60.40':445
'12#.#34.143.16':445
'12#.#34.202.64':445
'12#.#34.234.99':9988
'12#.#34.62.203':9988
'12#.#34.220.66':9988
'12#.#34.244.139':9988
'12#.#34.139.117':9988
'12#.#34.16.181':445
'12#.#34.48.205':445
'12#.#34.230.105':445
'12#.#34.73.179':445
'12#.#34.249.227':445
'12#.#34.99.187':445
'12#.#34.244.122':445
'12#.#34.181.97':445
'12#.#34.40.23':445
'12#.#34.22.173':445
'12#.#34.249.251':445
'12#.#34.61.132':139
'12#.#34.54.61':139
'12#.#34.219.110':139
'12#.#34.97.17':139
'12#.#34.131.110':139
'12#.#34.153.91':139
'12#.#34.0.254':139
'12#.#34.9.48':139
'12#.#34.1.104':139
'12#.#34.117.149':139
'12#.#34.85.229':139
'12#.#34.87.142':9988
'12#.#34.147.60':9988
'12#.#34.102.183':9988
'12#.#34.58.141':9988
'12#.#34.112.87':9988
'12#.#34.194.66':139
'12#.#34.229.208':139
'12#.#34.249.227':9988
'12#.#34.43.254':9988
'12#.#34.44.166':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней