Trojan.Starman.5718

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#17.233.91':139
'13#.#17.105.3':139
'13#.#17.76.79':139
'13#.#17.108.225':139
'13#.#17.35.59':139
'13#.#17.140.53':139
'13#.#17.64.213':139
'13#.#17.138.127':139
'13#.#17.5.97':139
'13#.#17.122.185':139
'13#.#17.63.54':139
'13#.#17.143.254':139
'13#.#17.186.253':139
'13#.#17.247.215':139
'13#.#17.121.135':139
'13#.#17.98.159':139
'13#.#17.59.28':139
'13#.#17.22.76':139
'13#.#17.213.179':139
'13#.#17.57.35':139
'13#.#17.74.180':139
'13#.#17.63.54':445
'13#.#17.108.225':445
'13#.#17.22.76':445
'13#.#17.213.179':445
'13#.#17.59.28':445
'13#.#17.105.3':445
'13#.#17.5.97':445
'13#.#17.233.91':445
'13#.#17.35.59':445
'13#.#17.76.79':445
'13#.#17.74.180':445
'13#.#17.95.80':139
'13#.#17.121.135':445
'13#.#17.30.185':139
'13#.#17.41.65':139
'13#.#17.58.15':139
'13#.#17.186.253':445
'13#.#17.57.35':445
'13#.#17.143.254':445
'13#.#17.98.159':445
'13#.#17.247.215':445
'13#.#17.107.164':139
'13#.#17.198.165':139
'13#.#17.241.202':139
'13#.#17.133.115':139
'13#.#17.202.27':139
'13#.#17.248.70':445
'13#.#17.29.184':445
'13#.#17.70.191':445
'13#.#17.63.46':445
'13#.#17.192.62':445
'13#.#17.106.166':139
'13#.#17.144.194':139
'13#.#17.54.201':139
'13#.#17.87.25':139
'13#.#17.190.108':139
'13#.#17.25.44':139
'13#.#17.248.198':139
'13#.#17.241.112':139
'13#.#17.188.203':139
'13#.#17.173.205':139
'13#.#17.72.114':139
'13#.#17.241.112':445
'13#.#17.106.166':445
'13#.#17.248.198':445
'13#.#17.72.114':445
'13#.#17.188.203':445
'13#.#17.107.164':445
'13#.#17.198.165':445
'13#.#17.241.202':445
'13#.#17.133.115':445
'13#.#17.202.27':445
'13#.#17.173.205':445
'13#.#17.28.59':445
'13#.#17.181.103':445
'13#.#17.100.172':445
'13#.#17.16.11':445
'13#.#17.132.202':445
'13#.#17.144.194':445
'13#.#17.54.201':445
'13#.#17.87.25':445
'13#.#17.25.44':445
'13#.#17.190.108':445
'13#.#17.122.185':445
'13#.#17.131.215':445
'13#.#17.20.11':445
'13#.#17.252.58':445
'13#.#17.87.115':445
'13#.#17.59.87':445
'13#.#17.141.221':139
'13#.#17.32.142':139
'13#.#17.222.28':139
'13#.#17.4.20':445
'13#.#17.29.4':139
'13#.#17.198.16':445
'13#.#17.61.125':445
'13#.#17.79.30':445
'13#.#17.125.152':445
'13#.#17.44.105':445
'13#.#17.151.244':445
'13#.#17.139.48':445
'13#.#17.32.9':445
'13#.#17.7.18':445
'13#.#17.30.188':445
'13#.#17.155.142':445
'13#.#17.165.41':139
'13#.#17.103.34':139
'13#.#17.24.41':139
'13#.#17.236.107':139
'13#.#17.186.163':139
'13#.#17.110.195':139
'13#.#17.208.96':139
'13#.#17.225.52':139
'13#.#17.94.42':139
'13#.#17.171.44':139
'13#.#17.107.52':139
'13#.#17.107.104':139
'13#.#17.172.186':139
'13#.#17.203.248':139
'13#.#17.57.33':139
'13#.#17.73.163':139
'13#.#17.113.58':139
'13#.#17.52.38':139
'13#.#17.130.156':139
'13#.#17.209.207':139
'13#.#17.191.179':139
'13#.#17.232.170':139
'13#.#17.218.232':139
'13#.#17.45.178':139
'13#.#17.21.68':139
'13#.#17.152.181':139
'13#.#17.61.125':139
'13#.#17.79.30':139
'13#.#17.125.152':139
'13#.#17.44.105':139
'13#.#17.151.244':139
'13#.#17.158.34':139
'13#.#17.41.65':445
'13#.#17.58.15':445
'13#.#17.64.213':445
'13#.#17.138.127':445
'13#.#17.140.53':445
'13#.#17.164.244':139
'13#.#17.110.234':139
'13#.#17.100.158':139
'13#.#17.30.185':445
'13#.#17.95.80':445
'13#.#17.110.234':445
'13#.#17.158.34':445
'13#.#17.164.244':445
'13#.#17.4.20':139
'13#.#17.100.158':445
'13#.#17.232.170':445
'13#.#17.218.232':445
'13#.#17.45.178':445
'13#.#17.21.68':445
'13#.#17.152.181':445
'13#.#17.20.11':139
'13#.#17.139.48':139
'13#.#17.32.9':139
'13#.#17.7.18':139
'13#.#17.30.188':139
'13#.#17.155.142':139
'13#.#17.252.58':139
'13#.#17.131.215':139
'13#.#17.59.87':139
'13#.#17.198.16':139
'13#.#17.87.115':139
'13#.#17.10.86':445
'13#.#17.174.157':445
'13#.#17.97.144':445
'13#.#17.42.66':445
'13#.#17.94.83':445
'13#.#17.88.217':445
'13#.#17.236.32':445
'13#.#17.54.98':445
'13#.#17.192.161':445
'13#.#17.173.200':445
'13#.#17.28.5':445
'13#.#17.50.237':139
'13#.#17.201.252':139
'13#.#17.138.248':139
'13#.#17.66.109':139
'13#.#17.84.232':139
'13#.#17.170.90':139
'13#.#17.11.61':445
'13#.#17.52.66':139
'13#.#17.235.164':139
'13#.#17.144.226':139
'13#.#17.28.160':445
'13#.#17.187.69':445
'13#.#17.77.49':445
'13#.#17.241.221':445
'13#.#17.37.24':445
'13#.#17.142.214':445
'13#.#17.167.4':445
'13#.#17.249.198':445
'13#.#17.200.139':445
'13#.#17.130.210':445
'13#.#17.53.231':445
'13#.#17.69.129':445
'13#.#17.209.69':445
'13#.#17.187.164':445
'13#.#17.248.193':445
'13#.#17.93.164':445
'13#.#17.253.47':445
'13#.#17.129.31':445
'13#.#17.2.62':445
'13#.#17.102.209':445
'13#.#17.85.203':445
'13#.#17.187.164':139
'13#.#17.69.129':139
'13#.#17.93.164':139
'13#.#17.236.32':139
'13#.#17.248.193':139
'13#.#17.2.62':139
'13#.#17.253.47':139
'13#.#17.85.203':139
'13#.#17.209.69':139
'13#.#17.102.209':139
'13#.#17.88.217':139
'13#.#17.97.144':139
'13#.#17.42.66':139
'13#.#17.11.61':139
'13#.#17.10.86':139
'13#.#17.94.83':139
'13#.#17.173.200':139
'13#.#17.54.98':139
'13#.#17.192.161':139
'13#.#17.28.5':139
'13#.#17.174.157':139
'13#.#17.36.61':139
'13#.#17.22.105':139
'13#.#17.7.28':139
'13#.#17.167.4':139
'13#.#17.27.167':139
'13#.#17.22.59':139
'13#.#17.11.57':139
'13#.#17.79.82':139
'13#.#17.179.113':139
'13#.#17.208.152':139
'13#.#17.142.214':139
'13#.#17.37.24':139
'13#.#17.77.49':139
'13#.#17.241.221':139
'13#.#17.129.31':139
'13#.#17.53.231':139
'13#.#17.130.210':139
'13#.#17.249.198':139
'13#.#17.200.139':139
'13#.#17.28.160':139
'13#.#17.187.69':139
'13#.#17.27.167':445
'13#.#17.227.166':445
'13#.#17.64.214':445
'13#.#17.86.188':445
'13#.#17.180.169':445
'13#.#17.97.181':445
'13#.#17.220.219':445
'13#.#17.238.220':445
'13#.#17.206.122':445
'13#.#17.55.64':445
'13#.#17.94.50':445
'13#.#17.88.79':139
'13#.#17.44.75':139
'13#.#17.38.173':139
'13#.#17.68.152':139
'13#.#17.0.53':139
'13#.#17.186.237':139
'13#.#17.250.197':139
'13#.#17.137.98':139
'13#.#17.9.188':139
'13#.#17.110.108':139
'13#.#17.65.132':139
'13#.#17.248.70':139
'13#.#17.29.184':139
'13#.#17.70.191':139
'13#.#17.63.46':139
'13#.#17.192.62':139
'13#.#17.28.59':139
'13#.#17.181.103':139
'13#.#17.100.172':139
'13#.#17.16.11':139
'13#.#17.132.202':139
'13#.#17.88.79':445
'13#.#17.44.75':445
'13#.#17.38.173':445
'13#.#17.68.152':445
'13#.#17.0.53':445
'13#.#17.186.237':445
'13#.#17.250.197':445
'13#.#17.137.98':445
'13#.#17.9.188':445
'13#.#17.110.108':445
'13#.#17.65.132':445
'13#.#17.144.226':445
'13#.#17.52.66':445
'13#.#17.235.164':445
'13#.#17.50.237':445
'13#.#17.201.252':445
'13#.#17.28.5':9988
'13#.#17.173.200':9988
'13#.#17.97.144':9988
'13#.#17.170.90':445
'13#.#17.94.83':9988
'13#.#17.138.248':445
'13#.#17.179.113':445
'13#.#17.208.152':445
'13#.#17.22.105':445
'13#.#17.7.28':445
'13#.#17.36.61':445
'13#.#17.66.109':445
'13#.#17.84.232':445
'13#.#17.11.57':445
'13#.#17.79.82':445
'13#.#17.22.59':445
'13#.#17.227.166':139
'13#.#17.64.214':139
'13#.#17.86.188':139
'13#.#17.180.169':139
'13#.#17.97.181':139
'13#.#17.220.219':139
'13#.#17.238.220':139
'13#.#17.206.122':139
'13#.#17.55.64':139
'13#.#17.94.50':139
'13#.#17.249.198':9988
'13#.#17.248.193':9988
'13#.#17.93.164':9988
'13#.#17.236.32':9988
'13#.#17.54.98':9988
'13#.#17.88.217':9988
'13#.#17.187.69':9988
'13#.#17.50.237':9988
'13#.#17.129.31':9988
'13#.#17.187.164':9988
'13#.#17.69.129':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней