Trojan.Starman.5274

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#17.48.243':139
'22#.#17.150.42':139
'22#.#17.90.89':139
'22#.#17.159.109':139
'22#.#17.38.191':139
'22#.#17.57.210':139
'22#.#17.38.122':139
'22#.#17.195.144':139
'22#.#17.235.155':139
'22#.#17.254.151':139
'22#.#17.125.146':139
'22#.#17.92.99':139
'22#.#17.145.154':139
'22#.#17.158.244':139
'22#.#17.37.58':139
'22#.#17.70.53':139
'22#.#17.89.216':139
'22#.#17.213.202':139
'22#.#17.35.247':139
'22#.#17.217.228':139
'22#.#17.36.108':139
'22#.#17.89.216':445
'22#.#17.213.202':445
'22#.#17.35.247':445
'22#.#17.217.228':445
'22#.#17.36.108':445
'22#.#17.90.89':445
'22#.#17.48.243':445
'22#.#17.38.191':445
'22#.#17.125.146':445
'22#.#17.159.109':445
'22#.#17.145.154':445
'22#.#17.147.192':445
'22#.#17.140.164':445
'22#.#17.129.12':139
'22#.#17.52.85':139
'22#.#17.211.224':139
'22#.#17.158.244':445
'22#.#17.92.99':445
'22#.#17.70.53':445
'22#.#17.6.220':445
'22#.#17.37.58':445
'22#.#17.17.200':139
'22#.#17.219.137':445
'22#.#17.129.160':139
'22#.#17.134.88':139
'22#.#17.145.133':139
'22#.#17.117.187':445
'22#.#17.43.172':445
'22#.#17.97.44':445
'22#.#17.172.240':445
'22#.#17.205.97':445
'22#.#17.88.131':139
'22#.#17.46.76':139
'22#.#17.29.161':139
'22#.#17.18.55':139
'22#.#17.161.205':139
'22#.#17.242.41':139
'22#.#17.72.27':139
'22#.#17.218.237':139
'22#.#17.244.107':139
'22#.#17.107.75':139
'22#.#17.112.216':139
'22#.#17.134.88':445
'22#.#17.145.133':445
'22#.#17.88.131':445
'22#.#17.72.27':445
'22#.#17.218.237':445
'22#.#17.140.164':139
'22#.#17.6.220':139
'22#.#17.147.192':139
'22#.#17.129.160':445
'22#.#17.17.200':445
'22#.#17.244.107':445
'22#.#17.161.205':445
'22#.#17.242.41':445
'22#.#17.218.157':445
'22#.#17.34.113':445
'22#.#17.57.220':445
'22#.#17.107.75':445
'22#.#17.112.216':445
'22#.#17.29.161':445
'22#.#17.18.55':445
'22#.#17.46.76':445
'22#.#17.220.179':445
'22#.#17.69.8':139
'22#.#17.166.39':445
'22#.#17.24.203':445
'22#.#17.61.47':445
'22#.#17.11.172':139
'22#.#17.218.238':139
'22#.#17.136.143':139
'22#.#17.59.59':139
'22#.#17.131.11':139
'22#.#17.2.214':445
'22#.#17.219.26':445
'22#.#17.96.221':445
'22#.#17.54.70':445
'22#.#17.22.201':445
'22#.#17.39.189':445
'22#.#17.5.61':445
'22#.#17.106.50':445
'22#.#17.61.135':445
'22#.#17.246.231':445
'22#.#17.116.224':445
'22#.#17.245.102':139
'22#.#17.77.244':139
'22#.#17.57.84':139
'22#.#17.47.136':139
'22#.#17.4.201':139
'22#.#17.197.155':139
'22#.#17.239.202':139
'22#.#17.66.177':139
'22#.#17.174.49':139
'22#.#17.216.13':139
'22#.#17.40.150':139
'22#.#17.165.96':139
'22#.#17.137.251':139
'22#.#17.96.2':139
'22#.#17.59.186':139
'22#.#17.231.168':139
'22#.#17.103.72':139
'22#.#17.150.102':139
'22#.#17.80.37':139
'22#.#17.90.201':139
'22#.#17.253.129':139
'22#.#17.50.39':139
'22#.#17.113.236':139
'22#.#17.79.213':139
'22#.#17.34.108':139
'22#.#17.213.242':139
'22#.#17.39.189':139
'22#.#17.54.70':139
'22#.#17.22.201':139
'22#.#17.72.219':139
'22#.#17.74.38':139
'22#.#17.83.34':139
'22#.#17.195.144':445
'22#.#17.57.210':445
'22#.#17.254.151':445
'22#.#17.150.42':445
'22#.#17.235.155':445
'22#.#17.129.12':445
'22#.#17.173.29':139
'22#.#17.211.224':445
'22#.#17.38.122':445
'22#.#17.52.85':445
'22#.#17.34.108':445
'22#.#17.213.242':445
'22#.#17.83.34':445
'22#.#17.220.179':139
'22#.#17.173.29':445
'22#.#17.72.219':445
'22#.#17.74.38':445
'22#.#17.113.236':445
'22#.#17.79.213':445
'22#.#17.50.39':445
'22#.#17.166.39':139
'22#.#17.116.224':139
'22#.#17.61.135':139
'22#.#17.246.231':139
'22#.#17.219.26':139
'22#.#17.96.221':139
'22#.#17.24.203':139
'22#.#17.61.47':139
'22#.#17.2.214':139
'22#.#17.5.61':139
'22#.#17.106.50':139
'22#.#17.127.3':445
'22#.#17.75.146':445
'22#.#17.4.163':445
'22#.#17.8.26':445
'22#.#17.179.102':445
'22#.#17.142.123':445
'22#.#17.98.122':445
'22#.#17.233.220':445
'22#.#17.216.12':445
'22#.#17.100.90':445
'22#.#17.3.84':445
'22#.#17.73.250':139
'22#.#17.91.183':139
'22#.#17.0.179':139
'22#.#17.16.139':139
'22#.#17.9.141':139
'22#.#17.111.25':139
'22#.#17.136.248':445
'22#.#17.25.43':139
'22#.#17.153.41':139
'22#.#17.115.165':139
'22#.#17.124.43':445
'22#.#17.39.171':445
'22#.#17.109.127':445
'22#.#17.18.247':445
'22#.#17.78.24':445
'22#.#17.15.14':445
'22#.#17.135.219':445
'22#.#17.15.23':445
'22#.#17.58.28':445
'22#.#17.16.7':445
'22#.#17.216.102':445
'22#.#17.104.176':445
'22#.#17.188.153':445
'22#.#17.78.163':445
'22#.#17.118.115':445
'22#.#17.32.136':445
'22#.#17.27.115':445
'22#.#17.100.148':445
'22#.#17.188.61':445
'22#.#17.6.173':445
'22#.#17.25.71':445
'22#.#17.78.163':139
'22#.#17.104.176':139
'22#.#17.32.136':139
'22#.#17.98.122':139
'22#.#17.118.115':139
'22#.#17.188.61':139
'22#.#17.27.115':139
'22#.#17.25.71':139
'22#.#17.188.153':139
'22#.#17.6.173':139
'22#.#17.142.123':139
'22#.#17.4.163':139
'22#.#17.179.102':139
'22#.#17.3.84':139
'22#.#17.8.26':139
'22#.#17.136.248':139
'22#.#17.100.90':139
'22#.#17.233.220':139
'22#.#17.216.12':139
'22#.#17.127.3':139
'22#.#17.75.146':139
'22#.#17.6.201':139
'22#.#17.12.169':139
'22#.#17.223.209':139
'22#.#17.135.219':139
'22#.#17.137.144':139
'22#.#17.237.251':139
'22#.#17.20.141':139
'22#.#17.80.230':139
'22#.#17.36.154':139
'22#.#17.230.88':139
'22#.#17.15.14':139
'22#.#17.78.24':139
'22#.#17.109.127':139
'22#.#17.18.247':139
'22#.#17.100.148':139
'22#.#17.216.102':139
'22#.#17.16.7':139
'22#.#17.15.23':139
'22#.#17.58.28':139
'22#.#17.124.43':139
'22#.#17.39.171':139
'22#.#17.30.193':445
'22#.#17.6.195':445
'22#.#17.234.117':445
'22#.#17.97.129':139
'22#.#17.24.179':445
'22#.#17.4.104':445
'22#.#17.154.171':445
'22#.#17.6.63':445
'22#.#17.160.7':445
'22#.#17.168.188':445
'22#.#17.66.227':139
'22#.#17.164.179':139
'22#.#17.192.21':139
'22#.#17.202.194':139
'22#.#17.252.173':139
'22#.#17.20.45':139
'22#.#17.190.232':139
'22#.#17.106.178':139
'22#.#17.22.168':139
'22#.#17.139.167':139
'22#.#17.187.48':139
'22#.#17.205.97':139
'22#.#17.97.44':139
'22#.#17.172.240':139
'22#.#17.97.129':445
'22#.#17.219.137':139
'22#.#17.57.220':139
'22#.#17.218.157':139
'22#.#17.34.113':139
'22#.#17.117.187':139
'22#.#17.43.172':139
'22#.#17.66.227':445
'22#.#17.164.179':445
'22#.#17.192.21':445
'22#.#17.202.194':445
'22#.#17.252.173':445
'22#.#17.20.45':445
'22#.#17.190.232':445
'22#.#17.106.178':445
'22#.#17.22.168':445
'22#.#17.139.167':445
'22#.#17.187.48':445
'22#.#17.153.41':445
'22#.#17.115.165':445
'22#.#17.91.183':445
'22#.#17.0.179':445
'22#.#17.73.250':445
'22#.#17.75.146':9988
'22#.#17.216.12':9988
'22#.#17.179.102':9988
'22#.#17.25.43':445
'22#.#17.111.25':445
'22#.#17.9.141':445
'22#.#17.12.169':445
'22#.#17.36.154':445
'22#.#17.6.201':445
'22#.#17.137.144':445
'22#.#17.223.209':445
'22#.#17.20.141':445
'22#.#17.16.139':445
'22#.#17.237.251':445
'22#.#17.230.88':445
'22#.#17.80.230':445
'22#.#17.30.193':139
'22#.#17.6.195':139
'22#.#17.234.117':139
'22#.#17.237.251':9988
'22#.#17.24.179':139
'22#.#17.4.104':139
'22#.#17.154.171':139
'22#.#17.6.63':139
'22#.#17.160.7':139
'22#.#17.168.188':139
'22#.#17.80.230':9988
'22#.#17.25.71':9988
'22#.#17.188.61':9988
'22#.#17.142.123':9988
'22#.#17.100.90':9988
'22#.#17.233.220':9988
'22#.#17.124.43':9988
'22#.#17.6.201':9988
'22#.#17.78.24':9988
'22#.#17.27.115':9988
'22#.#17.100.148':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней