Trojan.Starman.5241

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#5.236.20':139
'20#.#5.18.186':139
'20#.#5.20.34':139
'20#.#5.88.245':139
'20#.#5.142.217':139
'20#.#5.3.167':139
'20#.#5.250.252':139
'20#.#5.253.245':139
'20#.#5.26.99':139
'20#.#5.85.127':139
'20#.#5.245.215':139
'20#.#5.20.71':139
'20#.#5.176.20':139
'20#.#5.71.218':445
'20#.#5.98.53':445
'20#.#5.40.163':445
'20#.#5.167.149':139
'20#.#5.216.112':139
'20#.#5.228.143':139
'20#.#5.237.112':139
'20#.#5.50.229':139
'20#.#5.142.217':445
'20#.#5.20.34':445
'20#.#5.88.245':445
'20#.#5.216.112':445
'20#.#5.245.215':445
'20#.#5.85.127':445
'20#.#5.253.245':445
'20#.#5.26.99':445
'20#.#5.236.20':445
'20#.#5.18.186':445
'20#.#5.167.149':445
'20#.#5.76.119':139
'20#.#5.72.133':139
'20#.#5.113.161':139
'20#.#5.85.77':139
'20#.65.9.17':139
'20#.#5.50.229':445
'20#.#5.228.143':445
'20#.#5.237.112':445
'20#.#5.20.71':445
'20#.#5.176.20':445
'20#.#5.167.119':445
'20#.#5.167.119':139
'20#.#5.98.53':139
'20#.#5.6.207':139
'20#.#5.195.198':139
'20#.#5.62.136':139
'20#.#5.37.56':445
'20#.#5.52.234':445
'20#.65.31.8':445
'20#.#5.40.163':139
'20#.#5.71.218':139
'20#.#5.61.226':139
'20#.#5.221.254':139
'20#.#5.243.204':139
'20#.#5.194.172':139
'20#.#5.137.187':139
'20#.#5.82.214':139
'20#.#5.74.17':139
'20#.#5.93.163':139
'20#.#5.2.115':139
'20#.#5.51.131':139
'20#.#5.89.51':139
'20#.#5.2.115':445
'20#.#5.74.17':445
'20#.#5.89.51':445
'20#.#5.243.204':445
'20#.#5.51.131':445
'20#.#5.62.136':445
'20#.#5.6.207':445
'20#.#5.195.198':445
'20#.#5.93.163':445
'20#.#5.61.226':445
'20#.#5.221.254':445
'20#.#5.85.12':445
'20#.#5.50.226':445
'20#.#5.63.190':445
'20#.#5.234.6':445
'20#.#5.113.46':445
'20#.#5.82.214':445
'20#.#5.194.172':445
'20#.#5.137.187':445
'20#.#5.55.207':445
'20#.#5.18.47':445
'20#.#5.3.167':445
'20#.#5.135.247':445
'20#.65.2.81':445
'20#.#5.131.161':445
'20#.#5.59.56':445
'20#.#5.24.224':445
'20#.#5.98.99':139
'20#.#5.46.191':139
'20#.#5.186.236':445
'20#.#5.220.217':445
'20#.#5.97.220':445
'20#.#5.217.236':445
'20#.65.81.9':445
'20#.65.1.82':445
'20#.#5.170.223':445
'20#.#5.251.33':445
'20#.#5.15.194':445
'20#.#5.3.135':445
'20#.#5.135.212':445
'20#.65.6.27':445
'20#.#5.62.148':445
'20#.#5.73.24':445
'20#.#5.76.110':139
'20#.#5.136.10':139
'20#.#5.142.245':139
'20#.#5.165.190':139
'20#.#5.91.165':139
'20#.#5.178.240':139
'20#.#5.19.66':139
'20#.#5.227.129':139
'20#.#5.140.136':139
'20#.#5.130.173':139
'20#.#5.189.242':139
'20#.#5.73.114':139
'20#.#5.66.131':139
'20#.#5.209.56':139
'20#.65.9.27':139
'20#.#5.214.56':139
'20#.#5.134.211':139
'20#.#5.7.250':139
'20#.#5.177.55':139
'20#.#5.69.66':139
'20#.#5.149.109':139
'20#.#5.33.224':445
'20#.#5.33.224':139
'20#.#5.251.33':139
'20#.#5.112.94':139
'20#.#5.203.47':139
'20#.#5.187.12':139
'20#.65.1.82':139
'20#.#5.62.148':139
'20#.65.81.9':139
'20#.#5.15.194':139
'20#.#5.170.223':139
'20#.#5.47.116':139
'20#.#5.113.161':445
'20#.#5.76.119':445
'20#.65.9.17':445
'20#.#5.250.252':445
'20#.#5.85.77':445
'20#.#5.246.140':139
'20#.#5.115.246':139
'20#.#5.172.175':139
'20#.#5.72.133':445
'20#.#5.90.254':139
'20#.#5.172.175':445
'20#.#5.246.140':445
'20#.#5.90.254':445
'20#.#5.97.220':139
'20#.#5.186.236':139
'20#.#5.187.12':445
'20#.#5.112.94':445
'20#.#5.203.47':445
'20#.#5.115.246':445
'20#.#5.47.116':445
'20#.#5.220.217':139
'20#.#5.135.212':139
'20#.#5.217.236':139
'20#.#5.3.135':139
'20#.#5.73.24':139
'20#.65.6.27':139
'20#.#5.135.247':139
'20#.65.2.81':139
'20#.#5.131.161':139
'20#.#5.59.56':139
'20#.#5.24.224':139
'20#.#5.18.47':139
'20#.#5.38.188':445
'20#.#5.110.85':445
'20#.#5.168.117':445
'20#.#5.230.125':445
'20#.#5.178.83':445
'20#.#5.177.156':445
'20#.#5.205.70':445
'20#.#5.156.221':445
'20#.#5.31.183':445
'20#.#5.119.23':445
'20#.#5.87.203':445
'20#.65.63.5':139
'20#.#5.157.126':139
'20#.#5.252.35':139
'20#.#5.239.103':139
'20#.#5.57.65':139
'20#.#5.19.254':445
'20#.#5.19.31':445
'20#.65.50.3':139
'20#.#5.184.157':139
'20#.#5.2.185':139
'20#.#5.135.77':445
'20#.#5.163.136':445
'20#.#5.140.153':445
'20#.#5.36.203':445
'20#.#5.243.77':445
'20#.#5.47.254':445
'20#.#5.28.48':445
'20#.#5.254.75':445
'20#.#5.185.184':445
'20#.#5.192.156':445
'20#.#5.80.124':445
'20#.#5.34.108':445
'20#.#5.4.106':445
'20#.#5.112.44':445
'20#.#5.226.248':445
'20#.65.9.68':445
'20#.#5.168.151':445
'20#.#5.182.168':445
'20#.#5.151.231':445
'20#.#5.159.158':445
'20#.#5.19.174':445
'20#.#5.89.229':139
'20#.65.9.68':139
'20#.#5.112.44':139
'20#.#5.226.248':139
'20#.#5.177.156':139
'20#.#5.205.70':139
'20#.#5.19.174':139
'20#.#5.151.231':139
'20#.#5.159.158':139
'20#.#5.34.108':139
'20#.#5.4.106':139
'20#.#5.156.221':139
'20#.#5.230.125':139
'20#.#5.87.203':139
'20#.#5.178.83':139
'20#.#5.19.31':139
'20#.#5.19.254':139
'20#.#5.31.183':139
'20#.#5.119.23':139
'20#.#5.110.85':139
'20#.#5.38.188':139
'20#.#5.168.117':139
'20#.#5.234.134':139
'20#.#5.179.63':139
'20#.#5.90.203':139
'20#.#5.47.254':139
'20#.#5.28.48':139
'20#.#5.249.215':139
'20#.#5.145.231':139
'20#.#5.215.107':139
'20#.65.2.72':139
'20#.#5.107.47':139
'20#.#5.254.75':139
'20#.#5.36.203':139
'20#.#5.243.77':139
'20#.#5.80.124':139
'20#.#5.168.151':139
'20#.#5.182.168':139
'20#.#5.185.184':139
'20#.#5.192.156':139
'20#.#5.163.136':139
'20#.#5.140.153':139
'20#.#5.135.77':139
'20#.#5.90.203':445
'20#.#5.250.144':445
'20#.#5.236.231':445
'20#.#5.34.215':445
'20#.#5.5.221':445
'20#.#5.214.249':445
'20#.#5.177.103':445
'20#.#5.241.177':445
'20#.#5.102.231':445
'20#.#5.157.249':445
'20#.#5.187.39':445
'20#.#5.38.157':445
'20#.#5.210.92':139
'20#.#5.67.103':139
'20#.#5.251.176':139
'20#.#5.46.230':139
'20#.#5.112.41':139
'20#.#5.8.243':139
'20#.#5.71.50':139
'20#.#5.177.119':139
'20#.#5.104.152':139
'20#.#5.71.228':139
'20#.#5.52.234':139
'20#.#5.234.6':139
'20#.#5.37.56':139
'20#.#5.71.50':445
'20#.65.31.8':139
'20#.#5.50.226':139
'20#.#5.55.207':139
'20#.#5.85.12':139
'20#.#5.113.46':139
'20#.#5.63.190':139
'20#.#5.8.243':445
'20#.#5.112.41':445
'20#.#5.251.176':445
'20#.#5.46.230':445
'20#.65.2.66':445
'20#.#5.254.154':445
'20#.#5.71.228':445
'20#.#5.177.119':445
'20#.#5.104.152':445
'20#.#5.210.92':445
'20#.#5.67.103':445
'20#.#5.254.154':139
'20#.#5.2.185':445
'20#.65.50.3':445
'20#.#5.184.157':445
'20#.65.63.5':445
'20#.#5.157.126':445
'20#.#5.226.248':9988
'20#.65.9.68':9988
'20#.#5.177.156':9988
'20#.#5.19.31':9988
'20#.#5.178.83':9988
'20#.#5.252.35':445
'20#.#5.107.47':445
'20#.#5.215.107':445
'20#.65.2.72':445
'20#.#5.234.134':445
'20#.#5.179.63':445
'20#.#5.239.103':445
'20#.#5.57.65':445
'20#.#5.89.229':445
'20#.#5.249.215':445
'20#.#5.145.231':445
'20#.#5.236.231':139
'20#.#5.157.249':139
'20#.#5.250.144':139
'20#.#5.214.249':139
'20#.#5.34.215':139
'20#.#5.241.177':139
'20#.65.2.66':139
'20#.#5.177.103':139
'20#.#5.187.39':139
'20#.#5.102.231':139
'20#.#5.5.221':139
'20#.#5.19.174':9988
'20#.#5.151.231':9988
'20#.#5.159.158':9988
'20#.#5.34.108':9988
'20#.#5.4.106':9988
'20#.#5.135.77':9988
'20#.#5.38.157':139
'20#.#5.140.153':9988
'20#.#5.168.151':9988
'20#.#5.36.203':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней