Trojan.Starman.5093

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#7.158.220':139
'20#.#7.75.204':139
'20#.#7.152.185':139
'20#.#7.204.223':139
'20#.#7.47.161':139
'20#.#7.82.195':139
'20#.#7.212.133':139
'20#.#7.39.236':139
'20#.#7.109.223':139
'20#.#7.42.131':139
'20#.#7.202.71':139
'20#.#7.44.248':139
'20#.#7.184.44':139
'20#.#7.23.235':139
'20#.#7.69.74':139
'20#.#7.119.162':139
'20#.#7.196.250':139
'20#.#7.175.198':139
'20#.#7.100.145':139
'20#.#7.206.11':139
'20#.#7.65.237':139
'20#.#7.106.234':445
'20#.#7.26.107':445
'20#.#7.234.26':445
'20#.#7.213.66':445
'20#.#7.178.80':445
'20#.#7.119.162':445
'20#.#7.23.235':445
'20#.#7.69.74':445
'20#.#7.104.206':445
'20#.#7.100.164':445
'20#.#7.160.9':445
'20#.#7.130.212':139
'20#.#7.137.178':139
'20#.#7.10.142':139
'20#.#7.241.211':139
'20#.#7.147.18':139
'20#.#7.16.78':445
'20#.27.90.8':445
'20#.#7.45.203':445
'20#.#7.184.194':445
'20#.#7.11.254':445
'20#.#7.100.164':139
'20#.#7.15.56':139
'20#.#7.250.248':139
'20#.#7.85.185':139
'20#.#7.196.105':139
'20#.#7.53.127':139
'20#.#7.13.159':445
'20#.#7.118.180':445
'20#.#7.98.237':445
'20#.#7.127.121':139
'20#.#7.13.131':139
'20#.#7.248.155':139
'20#.#7.70.55':445
'20#.#7.86.15':445
'20#.#7.54.198':445
'20#.#7.173.11':445
'20#.#7.198.20':445
'20#.#7.118.180':139
'20#.#7.90.177':139
'20#.#7.13.159':139
'20#.#7.237.6':445
'20#.#7.98.237':139
'20#.#7.160.9':139
'20#.#7.213.66':139
'20#.27.90.8':139
'20#.#7.45.203':139
'20#.#7.16.78':139
'20#.#7.26.107':139
'20#.#7.104.206':139
'20#.#7.106.234':139
'20#.#7.178.80':139
'20#.#7.234.26':139
'20#.#7.11.254':139
'20#.#7.53.127':445
'20#.#7.85.185':445
'20#.#7.196.105':445
'20#.#7.90.177':445
'20#.#7.248.155':445
'20#.#7.13.131':445
'20#.#7.184.194':139
'20#.#7.127.121':445
'20#.#7.15.56':445
'20#.#7.250.248':445
'20#.#7.44.248':445
'20#.#7.37.200':139
'20#.#7.152.99':139
'20#.#7.13.23':139
'20#.#7.66.160':139
'20#.#7.49.223':139
'20#.27.25.4':139
'20#.#7.120.135':139
'20#.#7.85.75':139
'20#.#7.88.195':139
'20#.#7.59.153':139
'20#.#7.158.154':139
'20#.#7.41.11':139
'20#.#7.143.148':139
'20#.#7.22.109':445
'20#.#7.164.131':445
'20#.#7.77.168':445
'20#.#7.154.177':139
'20#.#7.154.154':139
'20#.#7.177.127':139
'20#.#7.117.133':139
'20#.#7.147.31':139
'20#.#7.10.127':139
'20#.#7.42.245':139
'20#.#7.39.247':139
'20#.#7.189.175':139
'20#.#7.54.237':139
'20#.#7.155.228':139
'20#.#7.34.114':139
'20#.#7.125.184':139
'20#.#7.41.163':139
'20#.#7.14.130':139
'20#.#7.155.33':139
'20#.#7.49.208':139
'20#.#7.123.50':139
'20#.#7.207.133':139
'20#.#7.243.232':139
'20#.#7.132.243':139
'20#.#7.171.213':139
'20#.#7.174.123':139
'20#.#7.77.219':139
'20#.#7.60.170':139
'20#.#7.249.132':139
'20#.#7.2.107':445
'20#.#7.39.236':445
'20#.#7.82.195':445
'20#.#7.42.131':445
'20#.#7.75.204':445
'20#.#7.109.223':445
'20#.#7.10.142':445
'20#.#7.130.212':445
'20#.#7.147.18':445
'20#.#7.212.133':445
'20#.#7.241.211':445
'20#.#7.158.220':445
'20#.#7.100.145':445
'20#.#7.196.250':445
'20#.#7.65.237':445
'20#.#7.184.44':445
'20#.#7.206.11':445
'20#.#7.47.161':445
'20#.#7.152.185':445
'20#.#7.204.223':445
'20#.#7.175.198':445
'20#.#7.202.71':445
'20#.#7.66.120':445
'20#.#7.11.245':445
'20#.#7.120.138':445
'20#.#7.77.168':139
'20#.#7.22.109':139
'20#.#7.48.231':445
'20#.#7.142.3':445
'20#.#7.102.26':445
'20#.#7.247.11':445
'20#.#7.244.246':445
'20#.#7.164.131':139
'20#.#7.11.245':139
'20#.#7.247.11':139
'20#.#7.66.120':139
'20#.#7.137.178':445
'20#.#7.120.138':139
'20#.#7.142.3':139
'20#.#7.2.107':139
'20#.#7.48.231':139
'20#.#7.244.246':139
'20#.#7.102.26':139
'20#.#7.163.207':445
'20#.#7.26.64':445
'20#.#7.0.224':445
'20#.27.9.41':445
'20#.#7.51.91':445
'20#.#7.84.144':445
'20#.#7.186.17':445
'20#.#7.144.168':445
'20#.#7.207.187':445
'20#.#7.168.207':445
'20#.#7.215.141':445
'20#.#7.198.168':139
'20#.#7.56.35':139
'20#.27.1.92':139
'20#.#7.69.161':139
'20#.#7.209.185':139
'20#.#7.50.163':445
'20#.#7.255.101':445
'20#.#7.70.74':139
'20#.#7.126.210':139
'20#.#7.53.148':139
'20#.#7.7.248':445
'20#.#7.253.7':445
'20#.#7.247.143':445
'20#.#7.110.46':445
'20#.#7.44.114':445
'20#.#7.201.219':445
'20#.#7.34.56':445
'20#.#7.109.9':445
'20#.#7.215.214':445
'20#.#7.40.124':445
'20#.#7.124.12':445
'20#.#7.86.24':445
'20#.#7.24.229':445
'20#.#7.13.125':445
'20#.#7.34.23':445
'20#.#7.127.149':445
'20#.#7.94.137':445
'20#.#7.13.48':445
'20#.#7.132.252':445
'20#.#7.131.11':445
'20#.#7.239.102':445
'20#.#7.41.114':139
'20#.#7.127.149':139
'20#.#7.13.125':139
'20#.#7.34.23':139
'20#.#7.84.144':139
'20#.#7.186.17':139
'20#.#7.239.102':139
'20#.#7.132.252':139
'20#.#7.131.11':139
'20#.#7.86.24':139
'20#.#7.24.229':139
'20#.#7.144.168':139
'20#.27.9.41':139
'20#.#7.163.207':139
'20#.#7.50.163':139
'20#.#7.255.101':139
'20#.#7.215.141':139
'20#.#7.207.187':139
'20#.#7.168.207':139
'20#.#7.26.64':139
'20#.#7.51.91':139
'20#.#7.0.224':139
'20#.#7.253.111':139
'20#.#7.4.253':139
'20#.#7.111.118':139
'20#.#7.201.219':139
'20#.#7.34.56':139
'20#.#7.117.146':139
'20#.#7.113.149':139
'20#.#7.125.218':139
'20#.#7.149.250':139
'20#.#7.23.69':139
'20#.#7.109.9':139
'20#.#7.110.46':139
'20#.#7.44.114':139
'20#.#7.124.12':139
'20#.#7.94.137':139
'20#.#7.13.48':139
'20#.#7.215.214':139
'20#.#7.40.124':139
'20#.#7.253.7':139
'20#.#7.247.143':139
'20#.#7.7.248':139
'20#.#7.111.118':445
'20#.#7.237.6':139
'20#.#7.57.176':445
'20#.#7.86.15':139
'20#.#7.54.198':139
'20#.#7.70.55':139
'20#.#7.30.206':445
'20#.#7.241.244':445
'20#.#7.180.14':445
'20#.#7.117.136':445
'20#.#7.217.117':445
'20#.#7.198.20':139
'20#.#7.100.117':139
'20#.#7.232.169':139
'20#.#7.160.34':139
'20#.#7.227.91':139
'20#.#7.94.220':139
'20#.#7.10.112':139
'20#.#7.173.11':139
'20#.#7.54.56':139
'20#.#7.217.232':139
'20#.#7.56.82':139
'20#.#7.160.34':445
'20#.#7.100.117':445
'20#.#7.94.220':445
'20#.#7.96.57':445
'20#.#7.227.91':445
'20#.#7.54.56':445
'20#.#7.10.112':445
'20#.#7.56.82':445
'20#.#7.232.169':445
'20#.#7.217.232':445
'20#.#7.121.59':445
'20#.#7.85.42':445
'20#.#7.59.215':445
'20#.#7.249.161':445
'20#.#7.60.93':445
'20#.#7.21.139':445
'20#.#7.127.60':445
'20#.#7.72.104':445
'20#.#7.60.236':445
'20#.#7.66.38':445
'20#.#7.235.171':445
'20#.#7.96.57':139
'20#.#7.53.148':445
'20#.#7.70.74':445
'20#.#7.126.210':445
'20#.#7.198.168':445
'20#.#7.56.35':445
'20#.#7.163.207':9988
'20#.#7.127.149':9988
'20#.#7.26.64':9988
'20#.#7.215.141':9988
'20#.#7.50.163':9988
'20#.27.1.92':445
'20#.#7.23.69':445
'20#.#7.125.218':445
'20#.#7.149.250':445
'20#.#7.253.111':445
'20#.#7.4.253':445
'20#.#7.69.161':445
'20#.#7.209.185':445
'20#.#7.41.114':445
'20#.#7.117.146':445
'20#.#7.113.149':445
'20#.#7.59.215':139
'20#.#7.66.38':139
'20#.#7.85.42':139
'20#.#7.21.139':139
'20#.#7.249.161':139
'20#.#7.72.104':139
'20#.#7.121.59':139
'20#.#7.127.60':139
'20#.#7.235.171':139
'20#.#7.60.236':139
'20#.#7.60.93':139
'20#.#7.149.250':9988
'20#.#7.57.176':139
'20#.#7.4.253':9988
'20#.#7.239.102':9988
'20#.#7.34.56':9988
'20#.#7.30.206':139
'20#.#7.241.244':139
'20#.#7.180.14':139
'20#.#7.117.136':139
'20#.#7.217.117':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней