Trojan.Starman.5234

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#41.108.13':139
'22#.#41.180.108':139
'22#.#41.2.62':139
'22#.#41.100.219':139
'22#.#41.30.11':139
'22#.#41.205.227':139
'22#.#41.182.205':139
'22#.#41.2.70':139
'22#.#41.87.132':139
'22#.#41.49.103':139
'22#.#41.102.175':139
'22#.#41.16.72':445
'22#.#41.132.62':445
'22#.#41.89.247':445
'22#.#41.37.223':445
'22#.#41.247.28':445
'22#.#41.101.138':139
'22#.#41.175.100':139
'22#.#41.164.173':139
'22#.#41.65.220':445
'22#.#41.131.151':139
'22#.#41.87.132':445
'22#.#41.49.103':445
'22#.#41.180.108':445
'22#.#41.2.62':445
'22#.#41.108.13':445
'22#.#41.220.7':445
'22#.#41.171.35':445
'22#.#41.182.205':445
'22#.#41.2.70':445
'22#.#41.205.227':445
'22#.#41.30.11':445
'22#.#41.0.171':139
'22#.#41.131.151':445
'22#.#41.79.112':139
'22#.#41.220.7':139
'22#.#41.171.35':139
'22#.#41.102.175':445
'22#.#41.100.219':445
'22#.#41.175.100':445
'22#.#41.164.173':445
'22#.#41.101.138':445
'22#.#41.161.236':445
'22#.#41.16.72':139
'22#.#41.132.62':139
'22#.#41.89.247':139
'22#.#41.37.223':139
'22#.#41.247.28':139
'22#.#41.59.89':445
'22#.#41.53.181':445
'22#.#41.52.87':445
'22#.#41.65.220':139
'22#.#41.184.70':445
'22#.#41.161.236':139
'22#.#41.37.195':139
'22#.#41.55.38':139
'22#.#41.156.205':139
'22#.#41.158.251':139
'22#.#41.76.219':139
'22#.#41.46.55':139
'22#.#41.107.44':139
'22#.#41.145.38':139
'22#.#41.96.195':139
'22#.#41.88.49':139
'22#.#41.37.195':445
'22#.#41.55.38':445
'22#.#41.156.205':445
'22#.#41.158.251':445
'22#.#41.76.219':445
'22#.#41.46.55':445
'22#.#41.107.44':445
'22#.#41.145.38':445
'22#.#41.96.195':445
'22#.#41.88.49':445
'22#.#41.251.176':445
'22#.#41.63.133':445
'22#.#41.200.213':445
'22#.#41.105.146':445
'22#.#41.162.210':445
'22#.#41.191.106':445
'22#.#41.175.141':445
'22#.#41.3.71':445
'22#.#41.141.242':445
'22#.#41.83.200':445
'22#.#41.242.83':445
'22#.#41.246.170':445
'22#.#41.98.110':445
'22#.#41.222.158':445
'22#.#41.1.226':445
'22#.#41.159.10':445
'22#.#41.101.27':445
'22#.#41.32.49':445
'22#.#41.12.205':445
'22#.#41.21.179':445
'22#.#41.41.21':445
'22#.#41.226.239':445
'22#.#41.86.149':445
'22#.#41.229.86':445
'22#.#41.105.196':445
'22#.#41.31.19':445
'22#.#41.110.53':445
'22#.#41.9.83':445
'22#.#41.193.28':445
'22#.#41.129.68':445
'22#.#41.200.144':445
'22#.#41.189.23':445
'22#.#41.52.133':139
'22#.#41.45.17':139
'22#.#41.105.118':139
'22#.#41.32.25':139
'22#.#41.150.243':139
'22#.#41.116.125':139
'22#.#41.247.149':139
'22#.#41.138.191':139
'22#.#41.4.52':139
'22#.#41.191.239':139
'22#.#41.73.55':139
'22#.#41.46.234':139
'22#.#41.107.32':139
'22#.#41.170.12':139
'22#.#41.179.147':445
'22#.#41.12.179':445
'22#.#41.121.52':139
'22#.#41.121.88':139
'22#.#41.61.70':139
'22#.#41.244.130':139
'22#.#41.6.194':139
'22#.#41.123.249':445
'22#.#41.86.149':139
'22#.#41.229.86':139
'22#.#41.105.196':139
'22#.#41.31.19':139
'22#.#41.110.53':139
'22#.#41.193.28':139
'22#.#41.9.83':139
'22#.#41.129.68':139
'22#.#41.200.144':139
'22#.#41.189.23':139
'22#.#41.123.249':139
'22#.#41.225.171':139
'22#.#41.121.235':139
'22#.#41.145.159':139
'22#.#41.79.112':445
'22#.#41.0.171':445
'22#.#41.168.106':139
'22#.#41.249.1':139
'22#.#41.108.5':139
'22#.#41.141.139':139
'22#.#41.27.202':139
'22#.#41.225.171':445
'22#.#41.121.235':445
'22#.#41.145.159':445
'22#.#41.179.147':139
'22#.#41.12.179':139
'22#.#41.168.106':445
'22#.#41.249.1':445
'22#.#41.108.5':445
'22#.#41.141.139':445
'22#.#41.27.202':445
'22#.#41.32.49':139
'22#.#41.222.158':139
'22#.#41.246.170':139
'22#.#41.159.10':139
'22#.#41.226.239':139
'22#.#41.1.226':139
'22#.#41.12.205':139
'22#.#41.101.27':139
'22#.#41.41.21':139
'22#.#41.98.110':139
'22#.#41.21.179':139
'22#.#41.251.176':139
'22#.#41.1.122':445
'22#.#41.17.252':445
'22#.#41.57.22':445
'22#.#41.202.2':445
'22#.#41.152.155':445
'22#.#41.144.88':445
'22#.#41.28.96':445
'22#.#41.58.62':445
'22#.#41.212.208':445
'22#.#41.142.95':445
'22#.#41.49.33':445
'22#.#41.92.162':139
'22#.#41.218.57':139
'22#.#41.79.3':139
'22#.#41.92.208':139
'22#.#41.57.174':139
'22#.#41.161.145':445
'22#.#41.34.121':445
'22#.#41.57.12':139
'22#.#41.127.21':139
'22#.#41.164.192':139
'22#.#41.131.33':445
'22#.#41.128.103':445
'22#.#41.189.240':445
'22#.#41.144.239':445
'22#.#41.83.206':445
'22#.#41.68.172':445
'22#.#41.25.46':445
'22#.#41.148.188':445
'22#.#41.17.99':445
'22#.#41.143.102':445
'22#.#41.237.15':445
'22#.#41.183.27':445
'22#.#41.154.228':445
'22#.#41.3.155':445
'22#.#41.204.4':445
'22#.#41.191.66':445
'22#.#41.125.5':445
'22#.#41.61.20':445
'22#.#41.146.179':445
'22#.#41.213.219':445
'22#.#41.90.194':445
'22#.#41.4.95':139
'22#.#41.191.66':139
'22#.#41.3.155':139
'22#.#41.204.4':139
'22#.#41.144.88':139
'22#.#41.28.96':139
'22#.#41.90.194':139
'22#.#41.146.179':139
'22#.#41.213.219':139
'22#.#41.183.27':139
'22#.#41.154.228':139
'22#.#41.58.62':139
'22#.#41.152.155':139
'22#.#41.49.33':139
'22#.#41.161.145':139
'22#.#41.57.22':139
'22#.#41.34.121':139
'22#.#41.212.208':139
'22#.#41.142.95':139
'22#.#41.17.252':139
'22#.#41.202.2':139
'22#.#41.1.122':139
'22#.#41.40.103':139
'22#.#41.164.152':139
'22#.#41.7.116':139
'22#.#41.68.172':139
'22#.#41.25.46':139
'22#.#41.7.115':139
'22#.#41.140.105':139
'22#.#41.74.17':139
'22#.#41.68.83':139
'22#.#41.178.120':139
'22#.#41.148.188':139
'22#.#41.144.239':139
'22#.#41.83.206':139
'22#.#41.237.15':139
'22#.#41.125.5':139
'22#.#41.61.20':139
'22#.#41.17.99':139
'22#.#41.143.102':139
'22#.#41.128.103':139
'22#.#41.189.240':139
'22#.#41.131.33':139
'22#.#41.157.138':445
'22#.#41.123.207':445
'22#.#41.101.104':445
'22#.#41.103.206':445
'22#.#41.179.28':445
'22#.#41.88.61':445
'22#.#41.54.1':445
'22#.#41.61.76':445
'22#.#41.215.212':445
'22#.#41.59.202':445
'22#.#41.78.75':445
'22#.#41.21.139':139
'22#.#41.79.154':139
'22#.#41.196.48':139
'22#.#41.88.61':139
'22#.#41.54.1':139
'22#.#41.13.237':139
'22#.#41.16.216':445
'22#.#41.62.112':139
'22#.#41.28.128':139
'22#.#41.72.5':139
'22#.#41.63.133':139
'22#.#41.200.213':139
'22#.#41.105.146':139
'22#.#41.162.210':139
'22#.#41.191.106':139
'22#.#41.175.141':139
'22#.#41.3.71':139
'22#.#41.141.242':139
'22#.#41.83.200':139
'22#.#41.242.83':139
'22#.#41.53.181':139
'22#.#41.28.128':445
'22#.#41.72.5':445
'22#.#41.79.154':445
'22#.#41.196.48':445
'22#.#41.21.139':445
'22#.#41.52.87':139
'22#.#41.59.89':139
'22#.#41.184.70':139
'22#.#41.62.112':445
'22#.#41.13.237':445
'22#.#41.61.76':139
'22#.#41.127.21':445
'22#.#41.164.192':445
'22#.#41.218.57':445
'22#.#41.79.3':445
'22#.#41.92.162':445
'22#.#41.34.121':9988
'22#.#41.57.22':9988
'22#.#41.49.33':9988
'22#.#41.57.12':445
'22#.#41.152.155':9988
'22#.#41.57.174':445
'22#.#41.68.83':445
'22#.#41.178.120':445
'22#.#41.164.152':445
'22#.#41.7.116':445
'22#.#41.40.103':445
'22#.#41.4.95':445
'22#.#41.92.208':445
'22#.#41.140.105':445
'22#.#41.74.17':445
'22#.#41.7.115':445
'22#.#41.103.206':139
'22#.#41.179.28':139
'22#.#41.78.75':139
'22#.#41.128.103':9988
'22#.#41.16.216':139
'22#.#41.215.212':139
'22#.#41.59.202':139
'22#.#41.123.207':139
'22#.#41.101.104':139
'22#.#41.157.138':139
'22#.#41.131.33':9988
'22#.#41.213.219':9988
'22#.#41.146.179':9988
'22#.#41.154.228':9988
'22#.#41.144.88':9988
'22#.#41.191.66':9988
'22#.#41.144.239':9988
'22#.#41.189.240':9988
'22#.#41.237.15':9988
'22#.#41.125.5':9988
'22#.#41.61.20':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней