Trojan.Starman.4985

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#18.137.140':139
'20#.#18.233.177':139
'20#.#18.130.183':139
'20#.#18.153.244':139
'20#.#18.184.6':139
'20#.#18.149.223':139
'20#.#18.18.47':139
'20#.#18.223.85':139
'20#.#18.238.207':139
'20#.#18.245.85':139
'20#.#18.244.189':139
'20#.#18.106.95':139
'20#.#18.28.75':139
'20#.#18.61.51':139
'20#.#18.3.13':139
'20#.#18.72.2':139
'20#.#18.29.95':139
'20#.#18.164.125':139
'20#.#18.35.170':139
'20#.#18.17.180':139
'20#.#18.64.18':139
'20#.#18.160.4':139
'20#.#18.17.180':445
'20#.#18.64.18':445
'20#.#18.28.75':445
'20#.#18.61.51':445
'20#.#18.106.95':445
'20#.#18.244.189':445
'20#.#18.153.244':445
'20#.#18.164.125':445
'20#.#18.35.170':445
'20#.#18.29.95':445
'20#.#18.72.2':445
'20#.#18.129.232':139
'20#.#18.6.50':139
'20#.#18.79.51':139
'20#.#18.120.175':139
'20#.#18.176.6':139
'20#.#18.133.89':445
'20#.#18.3.13':445
'20#.#18.106.232':445
'20#.#18.119.121':139
'20#.#18.252.154':445
'20#.#18.5.58':139
'20#.#18.36.122':139
'20#.#18.149.128':139
'20#.#18.8.83':139
'20#.#18.9.144':139
'20#.#18.55.43':139
'20#.#18.47.29':445
'20#.#18.46.83':139
'20#.#18.68.131':139
'20#.#18.46.87':139
'20#.#18.155.236':139
'20#.#18.61.221':139
'20#.#18.156.61':139
'20#.#18.93.181':139
'20#.#18.47.29':139
'20#.#18.56.224':139
'20#.#18.125.55':139
'20#.#18.7.83':139
'20#.#18.94.111':139
'20#.#18.40.156':139
'20#.#18.162.10':139
'20#.#18.56.224':445
'20#.#18.68.131':445
'20#.#18.46.87':445
'20#.#18.36.122':445
'20#.#18.149.128':445
'20#.#18.5.58':445
'20#.#18.106.232':139
'20#.#18.133.89':139
'20#.#18.252.154':139
'20#.#18.46.83':445
'20#.#18.55.43':445
'20#.#18.9.144':445
'20#.#18.40.156':445
'20#.#18.162.10':445
'20#.#18.156.61':445
'20#.#18.93.181':445
'20#.#18.61.221':445
'20#.#18.155.236':445
'20#.#18.8.83':445
'20#.#18.7.83':445
'20#.#18.94.111':445
'20#.#18.125.55':445
'20#.#18.184.6':445
'20#.#18.175.101':139
'20#.#18.135.58':139
'20#.#18.101.136':139
'20#.#18.19.20':445
'20#.#18.36.3':139
'20#.#18.137.132':139
'20#.#18.204.138':139
'20#.#18.226.200':139
'20#.#18.159.162':139
'20#.#18.123.86':139
'20#.#18.195.196':445
'20#.#18.47.151':445
'20#.#18.99.161':445
'20#.#18.60.182':445
'20#.#18.54.204':445
'20#.#18.119.54':445
'20#.#18.134.79':445
'20#.#18.181.133':445
'20#.#18.84.208':445
'20#.#18.179.99':445
'20#.#18.42.69':445
'20#.#18.41.161':139
'20#.#18.19.5':139
'20#.#18.161.140':139
'20#.#18.123.21':139
'20#.#18.182.202':139
'20#.#18.254.184':139
'20#.#18.128.219':139
'20#.#18.137.91':139
'20#.#18.155.158':139
'20#.#18.105.48':139
'20#.#18.210.130':139
'20#.#18.23.69':139
'20#.#18.222.11':139
'20#.#18.69.179':139
'20#.#18.50.124':139
'20#.#18.66.133':139
'20#.#18.7.195':139
'20#.#18.175.89':139
'20#.#18.247.253':139
'20#.#18.208.139':139
'20#.#18.75.44':139
'20#.#18.21.140':139
'20#.#18.119.121':445
'20#.#18.21.120':139
'20#.#18.6.50':445
'20#.#18.79.51':445
'20#.#18.129.232':445
'20#.#18.105.125':139
'20#.#18.31.56':139
'20#.#18.46.173':139
'20#.#18.31.21':139
'20#.#18.255.30':139
'20#.#18.176.6':445
'20#.#18.238.207':445
'20#.#18.245.85':445
'20#.#18.233.177':445
'20#.#18.130.183':445
'20#.#18.137.140':445
'20#.#18.160.4':445
'20#.#18.120.175':445
'20#.#18.18.47':445
'20#.#18.223.85':445
'20#.#18.149.223':445
'20#.#18.119.31':139
'20#.#18.31.21':445
'20#.#18.255.30':445
'20#.#18.21.120':445
'20#.#18.195.196':139
'20#.#18.19.20':139
'20#.#18.119.31':445
'20#.#18.245.140':445
'20#.#18.31.56':445
'20#.#18.46.173':445
'20#.#18.105.125':445
'20#.#18.181.133':139
'20#.#18.60.182':139
'20#.#18.47.151':139
'20#.#18.119.54':139
'20#.#18.245.140':139
'20#.#18.54.204':139
'20#.#18.84.208':139
'20#.#18.134.79':139
'20#.#18.42.69':139
'20#.#18.99.161':139
'20#.#18.179.99':139
'20#.#18.116.173':445
'20#.#18.86.241':445
'20#.#18.2.186':445
'20#.#18.240.158':445
'20#.#18.250.213':445
'20#.#18.158.250':445
'20#.#18.111.173':445
'20#.#18.121.120':445
'20#.#18.33.167':445
'20#.#18.18.6':445
'20#.#18.7.192':445
'20#.#18.75.146':445
'20#.#18.109.124':139
'20#.#18.142.16':139
'20#.#18.115.49':139
'20#.#18.17.153':139
'20#.#18.103.129':139
'20#.#18.169.103':445
'20#.#18.8.169':445
'20#.#18.223.25':139
'20#.#18.41.142':139
'20#.#18.25.42':139
'20#.#18.235.121':445
'20#.#18.208.134':445
'20#.#18.107.62':445
'20#.#18.226.68':445
'20#.#18.196.212':445
'20#.#18.237.208':445
'20#.#18.186.20':445
'20#.#18.3.119':445
'20#.#18.20.97':445
'20#.#18.121.100':445
'20#.#18.86.206':445
'20#.#18.205.216':445
'20#.#18.159.136':445
'20#.#18.150.53':445
'20#.#18.170.85':445
'20#.#18.58.115':445
'20#.#18.37.45':445
'20#.#18.90.59':445
'20#.#18.241.102':445
'20#.#18.233.214':445
'20#.#18.39.150':445
'20#.#18.96.204':445
'20#.#18.58.115':139
'20#.#18.37.45':139
'20#.#18.235.121':139
'20#.#18.111.173':139
'20#.#18.121.120':139
'20#.#18.39.150':139
'20#.#18.96.204':139
'20#.#18.150.53':139
'20#.#18.170.85':139
'20#.#18.159.136':139
'20#.#18.33.167':139
'20#.#18.250.213':139
'20#.#18.158.250':139
'20#.#18.75.146':139
'20#.#18.8.169':139
'20#.#18.169.103':139
'20#.#18.18.6':139
'20#.#18.7.192':139
'20#.#18.2.186':139
'20#.#18.240.158':139
'20#.#18.86.241':139
'20#.#18.233.214':139
'20#.#18.177.40':139
'20#.#18.147.32':139
'20#.#18.104.117':139
'20#.#18.186.20':139
'20#.#18.3.119':139
'20#.#18.2.91':139
'20#.#18.106.1':139
'20#.#18.91.10':139
'20#.#18.153.95':139
'20#.#18.84.197':139
'20#.#18.20.97':139
'20#.#18.196.212':139
'20#.#18.237.208':139
'20#.#18.205.216':139
'20#.#18.90.59':139
'20#.#18.241.102':139
'20#.#18.121.100':139
'20#.#18.86.206':139
'20#.#18.107.62':139
'20#.#18.226.68':139
'20#.#18.208.134':139
'20#.#18.104.117':445
'20#.#18.57.186':445
'20#.#18.254.68':445
'20#.#18.218.141':445
'20#.#18.97.252':139
'20#.#18.116.173':139
'20#.#18.88.52':445
'20#.#18.58.48':445
'20#.#18.51.99':445
'20#.#18.200.138':445
'20#.#18.99.76':445
'20#.#18.252.131':139
'20#.#18.66.240':139
'20#.#18.23.13':139
'20#.#18.207.208':139
'20#.#18.196.239':139
'20#.#18.196.112':139
'20#.#18.31.164':139
'20#.#18.254.201':139
'20#.#18.75.182':139
'20#.#18.155.110':139
'20#.#18.150.155':139
'20#.#18.195.222':445
'20#.#18.155.110':445
'20#.#18.150.155':445
'20#.#18.23.13':445
'20#.#18.207.208':445
'20#.#18.66.240':445
'20#.#18.252.131':445
'20#.#18.97.252':445
'20#.#18.254.201':445
'20#.#18.75.182':445
'20#.#18.31.164':445
'20#.#18.196.112':445
'20#.#18.92.157':445
'20#.#18.145.192':445
'20#.#18.18.221':445
'20#.#18.171.81':445
'20#.#18.36.157':445
'20#.#18.70.220':445
'20#.#18.196.239':445
'20#.#18.113.218':445
'20#.#18.158.146':445
'20#.#18.10.208':445
'20#.#18.223.25':445
'20#.#18.158.250':9988
'20#.#18.25.42':445
'20#.#18.142.16':445
'20#.#18.41.142':445
'20#.#18.18.6':9988
'20#.#18.7.192':9988
'20#.#18.8.169':9988
'20#.#18.169.103':9988
'20#.#18.250.213':9988
'20#.#18.109.124':445
'20#.#18.84.197':445
'20#.#18.91.10':445
'20#.#18.153.95':445
'20#.#18.177.40':445
'20#.#18.147.32':445
'20#.#18.103.129':445
'20#.#18.115.49':445
'20#.#18.17.153':445
'20#.#18.2.91':445
'20#.#18.106.1':445
'20#.#18.33.167':9988
'20#.#18.18.221':139
'20#.#18.92.157':139
'20#.#18.36.157':139
'20#.#18.195.222':139
'20#.#18.171.81':139
'20#.#18.113.218':139
'20#.#18.70.220':139
'20#.#18.10.208':139
'20#.#18.145.192':139
'20#.#18.158.146':139
'20#.#18.58.48':139
'20#.#18.218.141':139
'20#.#18.57.186':139
'20#.#18.39.150':9988
'20#.#18.58.115':9988
'20#.#18.150.53':9988
'20#.#18.51.99':139
'20#.#18.88.52':139
'20#.#18.99.76':139
'20#.#18.254.68':139
'20#.#18.200.138':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней