Trojan.Starman.5781

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#54.4.212':445
'22#.#54.32.86':445
'22#.#54.39.26':445
'22#.#54.142.237':445
'22#.#54.175.154':445
'22#.#54.61.4':445
'22#.#54.232.151':445
'22#.#54.162.185':445
'22#.#54.18.151':445
'22#.#54.169.37':445
'22#.154.5.2':445
'22#.#54.2.103':445
'22#.#54.191.66':445
'22#.#54.152.122':445
'22#.#54.99.208':445
'22#.#54.155.204':445
'22#.#54.64.47':445
'22#.#54.193.33':445
'22#.#54.237.192':445
'22#.#54.229.243':445
'22#.#54.235.38':445
'22#.#54.82.129':445
'22#.#54.10.28':139
'22#.#54.32.26':139
'22#.#54.45.129':139
'22#.#54.251.10':445
'22#.#54.55.74':139
'22#.#54.200.41':139
'22#.#54.175.217':139
'22#.#54.129.175':139
'22#.#54.226.174':139
'22#.#54.172.163':139
'22#.#54.219.186':139
'22#.#54.161.197':445
'22#.#54.123.35':445
'22#.#54.197.94':445
'22#.#54.43.48':445
'22#.#54.94.43':445
'22#.#54.207.241':445
'22#.#54.251.10':139
'22#.#54.244.130':445
'22#.#54.244.130':139
'22#.#54.54.46':445
'22#.#54.47.38':445
'22#.#54.201.117':445
'22#.154.5.2':139
'22#.#54.18.151':139
'22#.#54.169.37':139
'22#.#54.32.86':139
'22#.#54.61.4':139
'22#.#54.232.151':139
'22#.#54.197.94':139
'22#.#54.161.197':139
'22#.#54.94.43':139
'22#.#54.162.185':139
'22#.#54.43.48':139
'22#.#54.82.129':139
'22#.#54.229.243':139
'22#.#54.235.38':139
'22#.#54.191.66':139
'22#.#54.64.47':139
'22#.#54.193.33':139
'22#.#54.39.26':139
'22#.#54.4.212':139
'22#.#54.175.154':139
'22#.#54.237.192':139
'22#.#54.142.237':139
'22#.#54.188.75':445
'22#.#54.12.152':445
'22#.#54.192.227':445
'22#.#54.202.70':445
'22#.#54.45.139':445
'22#.#54.94.31':445
'22#.#54.180.138':445
'22#.#54.134.26':445
'22#.#54.18.185':445
'22#.#54.209.232':445
'22#.#54.89.193':445
'22#.#54.47.38':139
'22#.#54.189.69':445
'22#.#54.54.46':139
'22#.#54.123.35':139
'22#.#54.207.241':139
'22#.154.8.7':445
'22#.#54.137.66':445
'22#.#54.109.18':445
'22#.#54.30.170':445
'22#.#54.126.192':445
'22#.#54.71.92':445
'22#.#54.40.83':139
'22#.#54.150.83':445
'22#.#54.181.150':445
'22#.#54.83.253':445
'22#.#54.10.40':445
'22#.#54.152.75':445
'22#.#54.116.89':445
'22#.#54.47.96':445
'22#.#54.53.212':445
'22#.#54.49.62':445
'22#.#54.164.197':445
'22#.#54.80.165':445
'22#.#54.40.83':445
'22#.#54.237.151':445
'22#.#54.129.175':445
'22#.#54.226.174':445
'22#.#54.175.217':445
'22#.#54.28.159':445
'22#.#54.139.224':445
'22#.#54.77.140':445
'22#.#54.224.57':445
'22#.#54.242.22':445
'22#.#54.126.217':445
'22#.#54.92.93':445
'22#.#54.118.91':445
'22#.#54.78.209':445
'22#.#54.189.93':445
'22#.#54.184.188':445
'22#.#54.163.165':445
'22#.#54.62.153':139
'22#.#54.52.108':139
'22#.#54.29.202':445
'22#.#54.196.4':445
'22#.#54.232.174':445
'22#.#54.157.69':445
'22#.#54.148.157':445
'22#.#54.69.145':445
'22#.#54.60.129':445
'22#.#54.145.205':445
'22#.#54.48.70':445
'22#.#54.83.56':445
'22#.#54.2.118':445
'22#.#54.159.21':445
'22#.#54.197.128':445
'22#.#54.94.197':445
'22#.#54.219.186':445
'22#.#54.80.165':139
'22#.#54.49.62':139
'22#.#54.164.197':139
'22#.#54.181.150':139
'22#.#54.116.89':139
'22#.#54.47.96':139
'22#.#54.69.145':139
'22#.#54.157.69':139
'22#.#54.145.205':139
'22#.#54.53.212':139
'22#.#54.60.129':139
'22#.#54.126.217':139
'22#.#54.224.57':139
'22#.#54.242.22':139
'22#.#54.237.151':139
'22#.#54.28.159':139
'22#.#54.139.224':139
'22#.#54.83.253':139
'22#.#54.150.83':139
'22#.#54.152.75':139
'22#.#54.77.140':139
'22#.#54.10.40':139
'22#.#54.232.174':139
'22#.#54.29.202':139
'22#.#54.196.4':139
'22#.#54.118.91':139
'22#.#54.163.165':139
'22#.#54.55.74':445
'22#.#54.200.41':445
'22#.#54.172.163':445
'22#.#54.32.26':445
'22#.#54.45.129':445
'22#.#54.10.28':445
'22#.#54.94.197':139
'22#.#54.159.21':139
'22#.#54.197.128':139
'22#.#54.148.157':139
'22#.#54.48.70':139
'22#.#54.83.56':139
'22#.#54.78.209':139
'22#.#54.92.93':139
'22#.#54.184.188':139
'22#.#54.2.118':139
'22#.#54.189.93':139
'22#.#54.46.164':445
'22#.#54.193.189':445
'22#.#54.251.113':445
'22#.#54.152.84':445
'22#.#54.49.164':445
'22#.#54.30.42':445
'22#.#54.75.224':445
'22#.#54.53.107':445
'22#.#54.82.19':445
'22#.#54.164.254':445
'22#.#54.46.119':445
'22#.#54.93.111':139
'22#.#54.55.245':139
'22#.#54.190.62':139
'22#.#54.211.154':139
'22#.#54.255.36':139
'22#.#54.78.52':139
'22#.#54.103.36':445
'22#.#54.102.125':445
'22#.#54.50.206':445
'22#.#54.44.64':445
'22#.#54.170.140':445
'22#.#54.55.119':445
'22#.#54.93.55':445
'22#.#54.118.181':445
'22#.#54.19.176':445
'22#.#54.181.185':445
'22#.#54.54.19':445
'22#.#54.32.199':445
'22#.#54.30.63':445
'22#.#54.154.233':445
'22#.#54.89.144':445
'22#.#54.12.211':445
'22#.#54.101.63':445
'22#.#54.211.58':445
'22#.#54.63.73':445
'22#.#54.6.140':445
'22#.#54.87.227':445
'22#.#54.189.63':445
'22#.#54.46.242':445
'22#.#54.190.46':445
'22#.#54.31.9':445
'22#.#54.74.91':445
'22#.#54.73.41':445
'22#.#54.232.9':139
'22#.#54.75.224':139
'22#.#54.53.107':139
'22#.#54.82.19':139
'22#.#54.164.254':139
'22#.#54.46.119':139
'22#.#54.6.140':139
'22#.#54.211.58':139
'22#.#54.189.63':139
'22#.#54.101.63':139
'22#.#54.87.227':139
'22#.#54.63.73':139
'22#.#54.103.36':139
'22#.#54.102.125':139
'22#.#54.50.206':139
'22#.#54.44.64':139
'22#.#54.170.140':139
'22#.#54.152.84':139
'22#.#54.193.189':139
'22#.#54.30.42':139
'22#.#54.46.164':139
'22#.#54.49.164':139
'22#.#54.251.113':139
'22#.#54.32.199':139
'22#.#54.30.63':139
'22#.#54.154.233':139
'22#.#54.89.144':139
'22#.#54.12.211':139
'22#.#54.152.30':139
'22#.#54.196.37':139
'22#.#54.156.222':139
'22#.#54.84.40':139
'22#.#54.255.248':139
'22#.#54.138.14':139
'22#.#54.46.242':139
'22#.#54.190.46':139
'22#.#54.31.9':139
'22#.#54.74.91':139
'22#.#54.73.41':139
'22#.#54.19.176':139
'22#.#54.93.55':139
'22#.#54.54.19':139
'22#.#54.55.119':139
'22#.#54.181.185':139
'22#.#54.118.181':139
'22#.#54.152.30':445
'22#.#54.63.57':445
'22#.#54.117.98':445
'22#.#54.82.136':445
'22#.#54.200.18':445
'22#.#54.172.199':445
'22#.#54.66.163':445
'22#.#54.14.245':445
'22#.#54.189.69':139
'22#.#54.112.93':445
'22#.#54.112.93':139
'22#.#54.14.245':139
'22#.#54.246.27':445
'22#.#54.184.72':445
'22#.#54.136.157':445
'22#.#54.126.90':445
'22#.#54.157.126':445
'22#.#54.142.92':445
'22#.#54.126.230':445
'22#.#54.18.196':445
'22#.#54.74.31':445
'22#.#54.183.80':445
'22#.#54.66.89':445
'22#.#54.18.185':139
'22#.#54.180.138':139
'22#.#54.89.193':139
'22#.#54.94.31':139
'22#.#54.209.232':139
'22#.#54.134.26':139
'22#.#54.152.122':139
'22#.#54.2.103':139
'22#.#54.155.204':139
'22#.#54.201.117':139
'22#.#54.99.208':139
'22#.#54.30.170':139
'22#.#54.137.66':139
'22#.#54.71.92':139
'22#.154.8.7':139
'22#.#54.126.192':139
'22#.#54.109.18':139
'22#.#54.188.75':139
'22#.#54.12.152':139
'22#.#54.192.227':139
'22#.#54.202.70':139
'22#.#54.45.139':139
'22#.#54.66.163':139
'22#.#54.46.119':9988
'22#.#54.101.63':9988
'22#.#54.44.64':9988
'22#.#54.78.52':445
'22#.#54.102.125':9988
'22#.#54.53.107':9988
'22#.#54.103.36':9988
'22#.#54.189.63':9988
'22#.#54.152.84':9988
'22#.#54.82.19':9988
'22#.#54.193.189':9988
'22#.#54.196.37':445
'22#.#54.156.222':445
'22#.#54.84.40':445
'22#.#54.255.248':445
'22#.#54.138.14':445
'22#.#54.232.9':445
'22#.#54.93.111':445
'22#.#54.55.245':445
'22#.#54.190.62':445
'22#.#54.211.154':445
'22#.#54.255.36':445
'22#.#54.74.31':139
'22#.#54.126.230':139
'22#.#54.66.89':139
'22#.#54.142.92':139
'22#.#54.183.80':139
'22#.#54.18.196':139
'22#.#54.63.57':139
'22#.#54.117.98':139
'22#.#54.82.136':139
'22#.#54.200.18':139
'22#.#54.172.199':139
'22#.#54.49.164':9988
'22#.#54.30.42':9988
'22#.#54.211.58':9988
'22#.#54.251.113':9988
'22#.#54.6.140':9988
'22#.#54.46.164':9988
'22#.#54.246.27':139
'22#.#54.184.72':139
'22#.#54.136.157':139
'22#.#54.126.90':139
'22#.#54.157.126':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней