Trojan.Starman.5818

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#5.48.226':139
'12#.#5.72.48':139
'12#.#5.160.79':139
'12#.#5.201.63':139
'12#.#5.244.201':139
'12#.#5.17.47':139
'12#.#5.238.245':139
'12#.#5.68.110':139
'12#.#5.124.43':139
'12#.#5.59.238':139
'12#.#5.149.136':139
'12#.#5.153.47':139
'12#.#5.136.221':139
'12#.#5.35.21':139
'12#.#5.221.157':139
'12#.#5.163.23':139
'12#.#5.63.162':139
'12#.#5.51.215':139
'12#.#5.76.226':139
'12#.#5.4.179':139
'12#.#5.55.31':139
'12#.#5.221.157':445
'12#.#5.136.221':445
'12#.#5.35.21':445
'12#.#5.45.46':445
'12#.#5.96.13':445
'12#.#5.4.179':445
'12#.#5.51.215':445
'12#.#5.76.226':445
'12#.#5.149.136':445
'12#.#5.153.47':445
'12#.#5.64.154':445
'12#.#5.240.25':445
'12#.#5.254.252':445
'12#.#5.176.52':139
'12#.#5.196.28':445
'12#.#5.175.90':445
'12#.#5.30.176':445
'12#.#5.90.45':445
'12#.#5.202.239':445
'12#.#5.45.203':445
'12#.#5.96.13':139
'12#.#5.9.146':445
'12#.#5.207.28':445
'12#.#5.101.38':139
'12#.#5.55.155':139
'12#.#5.28.106':139
'12#.#5.176.92':445
'12#.#5.139.150':445
'12#.#5.109.76':445
'12#.#5.39.158':445
'12#.#5.190.32':445
'12#.#5.96.36':139
'12#.#5.90.136':139
'12#.#5.203.177':139
'12#.#5.176.92':139
'12#.#5.139.150':139
'12#.#5.223.113':139
'12#.#5.197.21':139
'12#.#5.75.148':139
'12#.75.5.51':139
'12#.#5.40.33':139
'12#.#5.203.177':445
'12#.#5.240.25':139
'12#.#5.202.239':139
'12#.#5.64.154':139
'12#.#5.196.28':139
'12#.#5.254.252':139
'12#.#5.30.176':139
'12#.#5.45.46':139
'12#.#5.175.90':139
'12#.#5.45.203':139
'12#.#5.90.45':139
'12#.#5.40.33':445
'12#.#5.75.148':445
'12#.75.5.51':445
'12#.#5.96.36':445
'12#.#5.90.136':445
'12#.#5.28.106':445
'12#.#5.101.38':445
'12#.#5.55.155':445
'12#.#5.223.113':445
'12#.#5.197.21':445
'12#.75.89.4':139
'12#.#5.29.41':139
'12#.#5.112.159':139
'12#.#5.114.106':139
'12#.#5.63.197':139
'12#.#5.42.29':139
'12#.#5.23.28':139
'12#.#5.165.149':139
'12#.#5.86.194':139
'12#.#5.113.110':139
'12#.#5.208.176':445
'12#.#5.199.208':445
'12#.#5.177.45':445
'12#.#5.59.250':445
'12#.#5.46.73':445
'12#.#5.83.253':139
'12#.#5.65.79':139
'12#.#5.82.13':445
'12#.#5.177.131':445
'12#.#5.13.182':445
'12#.#5.136.15':139
'12#.#5.185.253':139
'12#.#5.12.213':139
'12#.#5.30.161':139
'12#.#5.94.36':139
'12#.#5.178.63':139
'12#.#5.244.160':139
'12#.#5.252.147':139
'12#.#5.74.147':139
'12#.#5.80.58':139
'12#.#5.177.62':139
'12#.#5.155.203':139
'12#.#5.36.144':139
'12#.#5.135.241':139
'12#.#5.173.161':139
'12#.#5.131.173':139
'12#.#5.216.7':139
'12#.#5.216.179':139
'12#.#5.32.131':139
'12#.#5.235.69':139
'12#.#5.16.68':139
'12#.#5.208.167':445
'12#.#5.176.52':445
'12#.#5.127.165':139
'12#.#5.55.31':445
'12#.#5.17.47':445
'12#.#5.238.245':445
'12#.#5.181.208':139
'12#.#5.47.231':139
'12#.#5.46.44':139
'12#.#5.167.97':139
'12#.#5.214.167':139
'12#.#5.244.201':445
'12#.#5.160.79':445
'12#.#5.201.63':445
'12#.#5.163.23':445
'12#.#5.63.162':445
'12#.#5.59.238':445
'12#.#5.68.110':445
'12#.#5.124.43':445
'12#.#5.48.226':445
'12#.#5.72.48':445
'12#.#5.241.139':139
'12#.#5.214.167':445
'12#.#5.46.44':445
'12#.#5.167.97':445
'12#.#5.82.13':139
'12#.#5.127.165':445
'12#.#5.196.26':445
'12#.#5.168.3':445
'12#.#5.241.139':445
'12#.#5.181.208':445
'12#.#5.47.231':445
'12#.#5.59.250':139
'12#.#5.46.73':139
'12#.#5.208.167':139
'12#.#5.196.26':139
'12#.#5.168.3':139
'12#.#5.177.131':139
'12#.#5.13.182':139
'12#.#5.199.208':139
'12#.#5.177.45':139
'12#.#5.208.176':139
'12#.#5.109.76':139
'12#.#5.79.130':445
'12#.#5.236.85':445
'12#.#5.103.46':445
'12#.#5.61.52':445
'12#.#5.245.166':445
'12#.#5.98.229':445
'12#.#5.179.56':445
'12#.#5.131.15':445
'12#.#5.29.27':445
'12#.#5.106.103':445
'12#.#5.123.4':139
'12#.#5.115.220':139
'12#.#5.39.227':139
'12#.#5.113.9':139
'12#.#5.211.34':139
'12#.#5.143.172':139
'12#.#5.27.224':445
'12#.#5.169.183':139
'12#.75.11.5':139
'12#.#5.183.156':139
'12#.#5.53.120':445
'12#.#5.52.194':445
'12#.#5.10.90':445
'12#.#5.39.183':445
'12#.#5.49.42':445
'12#.#5.29.26':445
'12#.#5.185.209':445
'12#.#5.185.5':445
'12#.#5.197.82':445
'12#.#5.177.207':445
'12#.#5.65.169':445
'12#.#5.111.148':445
'12#.#5.158.56':445
'12#.#5.209.184':445
'12#.#5.77.124':445
'12#.#5.177.68':445
'12#.#5.82.167':445
'12#.75.3.26':445
'12#.#5.77.83':445
'12#.#5.155.198':445
'12#.#5.3.228':445
'12#.#5.8.174':139
'12#.#5.177.68':139
'12#.#5.209.184':139
'12#.#5.77.124':139
'12#.#5.179.56':139
'12#.#5.53.120':139
'12#.#5.3.228':139
'12#.#5.77.83':139
'12#.#5.155.198':139
'12#.#5.111.148':139
'12#.#5.158.56':139
'12#.#5.27.224':139
'12#.#5.106.103':139
'12#.#5.103.46':139
'12#.#5.29.27':139
'12#.#5.245.166':139
'12#.#5.131.15':139
'12#.#5.98.229':139
'12#.#5.79.130':139
'12#.#5.61.52':139
'12#.#5.236.85':139
'12#.#5.82.167':139
'12#.#5.147.116':139
'12#.#5.72.169':139
'12#.#5.44.137':139
'12#.#5.185.5':139
'12#.#5.72.221':139
'12#.#5.184.145':139
'12#.#5.174.39':139
'12#.#5.79.62':139
'12#.#5.206.41':139
'12#.#5.88.206':139
'12#.#5.52.194':139
'12#.#5.39.183':139
'12#.#5.29.26':139
'12#.75.3.26':139
'12#.#5.49.42':139
'12#.#5.197.82':139
'12#.#5.185.209':139
'12#.#5.65.169':139
'12#.#5.10.90':139
'12#.#5.177.207':139
'12#.#5.164.18':139
'12#.#5.132.40':445
'12#.75.18.1':139
'12#.#5.34.159':139
'12#.#5.207.201':139
'12#.#5.126.173':445
'12#.#5.134.95':445
'12#.#5.14.46':445
'12#.#5.82.37':445
'12#.#5.198.96':445
'12#.#5.54.137':139
'12#.#5.107.240':139
'12#.#5.32.45':139
'12#.#5.232.129':139
'12#.#5.42.117':139
'12#.#5.113.91':139
'12#.#5.236.62':139
'12#.#5.174.46':139
'12#.#5.81.235':139
'12#.#5.41.14':139
'12#.#5.214.179':445
'12#.#5.207.201':445
'12#.75.18.1':445
'12#.#5.34.159':445
'12#.#5.113.91':445
'12#.#5.236.62':445
'12#.#5.39.158':139
'12#.#5.190.32':139
'12#.#5.207.28':139
'12#.#5.164.18':445
'12#.#5.9.146':139
'12#.#5.42.117':445
'12#.#5.32.45':445
'12#.#5.232.129':445
'12#.#5.110.180':445
'12#.#5.32.82':445
'12#.#5.41.14':445
'12#.#5.174.46':445
'12#.#5.81.235':445
'12#.#5.54.137':445
'12#.#5.107.240':445
'12#.#5.32.82':139
'12#.#5.123.4':445
'12#.#5.115.220':445
'12#.#5.39.227':445
'12#.#5.113.9':445
'12#.#5.211.34':445
'12#.#5.143.172':445
'12#.#5.27.224':9988
'12#.#5.169.183':445
'12#.75.11.5':445
'12#.#5.183.156':445
'12#.#5.72.169':445
'12#.#5.206.41':445
'12#.#5.147.116':445
'12#.#5.72.221':445
'12#.#5.44.137':445
'12#.#5.174.39':445
'12#.#5.8.174':445
'12#.#5.184.145':445
'12#.#5.88.206':445
'12#.#5.79.62':445
'12#.#5.106.103':9988
'12#.#5.82.37':139
'12#.#5.198.96':139
'12#.#5.132.40':139
'12#.#5.123.4':9988
'12#.75.11.5':9988
'12#.#5.214.179':139
'12#.#5.110.180':139
'12#.#5.134.95':139
'12#.#5.14.46':139
'12#.#5.126.173':139
'12#.#5.209.184':9988
'12#.#5.3.228':9988
'12#.#5.53.120':9988
'12#.#5.103.46':9988
'12#.#5.98.229':9988
'12#.#5.185.5':9988
'12#.#5.184.145':9988
'12#.#5.197.82':9988
'12#.#5.111.148':9988
'12#.75.3.26':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней