Trojan.Starman.5042

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#96.174.78':445
'20#.#96.74.102':445
'20#.#96.79.129':445
'20#.#96.81.19':445
'20#.#96.66.58':445
'20#.#96.106.44':445
'20#.#96.95.123':445
'20#.#96.111.176':445
'20#.#96.100.85':445
'20#.#96.193.131':445
'20#.#96.81.104':445
'20#.#96.22.128':445
'20#.#96.107.77':445
'20#.#96.127.240':445
'20#.#96.155.167':445
'20#.#96.240.165':445
'20#.#96.22.134':445
'20#.#96.164.231':445
'20#.#96.214.72':445
'20#.#96.0.66':445
'20#.#96.114.48':445
'20#.#96.5.114':445
'20#.#96.37.2':445
'20#.#96.11.174':139
'20#.#96.133.137':139
'20#.#96.209.88':445
'20#.#96.209.88':139
'20#.#96.37.80':445
'20#.#96.53.59':139
'20#.#96.178.45':139
'20#.#96.140.215':139
'20#.#96.46.102':139
'20#.#96.126.103':139
'20#.#96.102.54':139
'20#.#96.175.228':445
'20#.#96.88.181':445
'20#.#96.116.12':445
'20#.#96.58.249':445
'20#.#96.8.221':445
'20#.#96.90.153':445
'20#.#96.220.251':445
'20#.#96.37.80':139
'20#.#96.251.60':445
'20#.#96.93.88':445
'20#.#96.61.21':445
'20#.#96.120.239':445
'20#.#96.193.131':139
'20#.#96.81.104':139
'20#.#96.106.44':139
'20#.#96.174.78':139
'20#.#96.74.102':139
'20#.#96.100.85':139
'20#.#96.58.249':139
'20#.#96.8.221':139
'20#.#96.37.2':139
'20#.#96.95.123':139
'20#.#96.111.176':139
'20#.#96.114.48':139
'20#.#96.5.114':139
'20#.#96.22.134':139
'20#.#96.22.128':139
'20#.#96.107.77':139
'20#.#96.0.66':139
'20#.#96.66.58':139
'20#.#96.79.129':139
'20#.#96.81.19':139
'20#.#96.164.231':139
'20#.#96.214.72':139
'20#.#96.116.12':139
'20#.#96.212.36':445
'20#.#96.108.193':445
'20#.#96.112.33':445
'20#.#96.149.155':445
'20#.#96.54.224':445
'20#.#96.121.74':445
'20#.#96.190.252':445
'20#.#96.34.247':445
'20#.#96.12.211':445
'20#.#96.52.121':445
'20#.#96.132.58':445
'20#.#96.90.153':139
'20#.#96.61.21':139
'20#.#96.93.88':139
'20#.#96.175.228':139
'20#.#96.88.181':139
'20#.#96.251.60':139
'20#.#96.127.77':445
'20#.#96.132.127':445
'20#.#96.35.87':445
'20#.#96.220.251':139
'20#.#96.13.86':445
'20#.#96.39.14':139
'20#.#96.127.119':445
'20#.#96.127.215':445
'20#.#96.119.75':445
'20#.#96.180.108':445
'20#.#96.151.140':445
'20#.#96.138.204':445
'20#.#96.116.114':445
'20#.#96.101.46':445
'20#.#96.81.82':445
'20#.#96.161.190':445
'20#.#96.126.18':445
'20#.#96.73.184':445
'20#.#96.102.88':445
'20#.#96.39.14':445
'20#.#96.178.45':445
'20#.#96.140.215':445
'20#.#96.83.189':445
'20#.#96.9.52':445
'20#.#96.109.36':445
'20#.#96.93.17':445
'20#.#96.112.16':445
'20#.#96.155.238':445
'20#.#96.187.115':445
'20#.#96.225.146':445
'20#.#96.72.225':445
'20#.#96.72.117':445
'20#.#96.169.86':445
'20#.#96.56.117':445
'20#.#96.30.197':445
'20#.#96.36.35':139
'20#.#96.187.163':139
'20#.#96.172.144':445
'20#.#96.218.248':445
'20#.#96.185.218':445
'20#.#96.138.71':445
'20#.#96.146.28':445
'20#.#96.141.104':445
'20#.#96.108.74':445
'20#.#96.71.239':445
'20#.#96.123.137':445
'20#.#96.157.125':445
'20#.#96.86.99':445
'20#.#96.40.26':445
'20#.#96.62.102':445
'20#.#96.7.45':445
'20#.#96.46.102':445
'20#.#96.161.190':139
'20#.#96.126.18':139
'20#.#96.138.204':139
'20#.#96.127.119':139
'20#.#96.127.215':139
'20#.#96.81.82':139
'20#.#96.108.74':139
'20#.#96.71.239':139
'20#.#96.187.115':139
'20#.#96.116.114':139
'20#.#96.101.46':139
'20#.#96.112.16':139
'20#.#96.155.238':139
'20#.#96.83.189':139
'20#.#96.73.184':139
'20#.#96.102.88':139
'20#.#96.93.17':139
'20#.#96.151.140':139
'20#.#96.119.75':139
'20#.#96.180.108':139
'20#.#96.9.52':139
'20#.#96.109.36':139
'20#.#96.141.104':139
'20#.#96.218.248':139
'20#.#96.185.218':139
'20#.#96.30.197':139
'20#.#96.225.146':139
'20#.#96.72.225':139
'20#.#96.172.144':139
'20#.#96.126.103':445
'20#.#96.102.54':445
'20#.#96.53.59':445
'20#.#96.11.174':445
'20#.#96.133.137':445
'20#.#96.62.102':139
'20#.#96.7.45':139
'20#.#96.123.137':139
'20#.#96.138.71':139
'20#.#96.146.28':139
'20#.#96.40.26':139
'20#.#96.56.117':139
'20#.#96.72.117':139
'20#.#96.169.86':139
'20#.#96.157.125':139
'20#.#96.86.99':139
'20#.#96.127.240':139
'20#.#96.88.8':445
'20#.#96.132.87':445
'20#.#96.8.80':445
'20#.#96.38.57':445
'20#.#96.79.218':445
'20#.#96.87.132':445
'20#.#96.161.137':445
'20#.#96.179.195':445
'20#.#96.166.84':445
'20#.#96.107.87':445
'20#.#96.142.248':445
'20#.#96.91.236':139
'20#.#96.195.178':139
'20#.#96.236.139':139
'20#.#96.131.209':139
'20#.#96.215.235':139
'20#.#96.21.191':445
'20#.#96.37.19':445
'20#.#96.165.36':445
'20#.#96.181.137':445
'20#.#96.110.148':445
'20#.#96.36.180':445
'20#.#96.166.34':445
'20#.#96.240.69':445
'20#.#96.159.232':445
'20#.#96.96.33':445
'20#.#96.73.122':445
'20#.#96.14.151':445
'20#.#96.244.124':445
'20#.#96.33.134':445
'20#.#96.184.228':445
'20#.#96.56.156':445
'20#.#96.154.96':445
'20#.#96.7.145':445
'20#.#96.250.101':445
'20#.#96.103.128':445
'20#.#96.153.27':445
'20#.#96.222.238':445
'20#.#96.240.101':445
'20#.#96.140.59':445
'20#.#96.129.139':445
'20#.#96.218.167':445
'20#.#96.61.49':445
'20#.#96.117.140':445
'20#.#96.134.49':445
'20#.#96.208.245':139
'20#.#96.166.84':139
'20#.#96.161.137':139
'20#.#96.142.248':139
'20#.#96.87.132':139
'20#.#96.107.87':139
'20#.#96.179.195':139
'20#.#96.153.27':139
'20#.#96.250.101':139
'20#.#96.240.101':139
'20#.#96.166.34':139
'20#.#96.222.238':139
'20#.#96.36.180':139
'20#.#96.37.19':139
'20#.#96.110.148':139
'20#.#96.21.191':139
'20#.#96.165.36':139
'20#.#96.181.137':139
'20#.#96.88.8':139
'20#.#96.132.87':139
'20#.#96.8.80':139
'20#.#96.38.57':139
'20#.#96.79.218':139
'20#.#96.103.128':139
'20#.#96.56.156':139
'20#.#96.33.134':139
'20#.#96.7.145':139
'20#.#96.244.124':139
'20#.#96.154.96':139
'20#.#96.184.228':139
'20#.#96.224.194':139
'20#.#96.244.241':139
'20#.#96.221.99':139
'20#.#96.79.184':139
'20#.#96.73.76':139
'20#.#96.61.49':139
'20#.#96.218.167':139
'20#.#96.134.49':139
'20#.#96.140.59':139
'20#.#96.117.140':139
'20#.#96.129.139':139
'20#.#96.240.69':139
'20#.#96.159.232':139
'20#.#96.96.33':139
'20#.#96.73.122':139
'20#.#96.14.151':139
'20#.#96.79.184':445
'20#.#96.210.92':445
'20#.#96.106.36':445
'20#.#96.175.113':445
'20#.#96.151.159':445
'20#.#96.243.151':445
'20#.#96.42.198':445
'20#.#96.188.251':445
'20#.#96.77.108':445
'20#.#96.207.190':445
'20#.#96.1.138':445
'20#.#96.3.81':445
'20#.#96.131.237':445
'20#.#96.41.220':445
'20#.#96.236.249':445
'20#.#96.223.109':445
'20#.#96.78.42':445
'20#.#96.42.112':445
'20#.#96.148.174':445
'20#.#96.108.175':445
'20#.#96.49.147':445
'20#.#96.196.181':445
'20#.#96.63.162':445
'20#.#96.105.39':445
'20#.#96.52.121':139
'20#.#96.132.58':139
'20#.#96.121.74':139
'20#.#96.212.36':139
'20#.#96.108.193':139
'20#.#96.12.211':139
'20#.#96.155.167':139
'20#.#96.240.165':139
'20#.#96.120.239':139
'20#.#96.190.252':139
'20#.#96.34.247':139
'20#.#96.34.122':445
'20#.#96.13.86':139
'20#.#96.236.7':445
'20#.#96.236.7':139
'20#.#96.34.122':139
'20#.#96.35.87':139
'20#.#96.54.224':139
'20#.#96.112.33':139
'20#.#96.149.155':139
'20#.#96.127.77':139
'20#.#96.132.127':139
'20#.#96.105.39':139
'20#.#96.240.101':9988
'20#.#96.134.49':9988
'20#.#96.161.137':9988
'20#.#96.181.137':9988
'20#.#96.222.238':9988
'20#.#96.140.59':9988
'20#.#96.79.218':9988
'20#.#96.166.34':9988
'20#.#96.37.19':9988
'20#.#96.117.140':9988
'20#.#96.142.248':9988
'20#.#96.244.241':445
'20#.#96.208.245':445
'20#.#96.224.194':445
'20#.#96.73.76':445
'20#.#96.221.99':445
'20#.#96.131.209':445
'20#.#96.195.178':445
'20#.#96.132.87':9988
'20#.#96.91.236':445
'20#.#96.215.235':445
'20#.#96.236.139':445
'20#.#96.36.180':9988
'20#.#96.210.92':139
'20#.#96.106.36':139
'20#.#96.175.113':139
'20#.#96.151.159':139
'20#.#96.243.151':139
'20#.#96.42.198':139
'20#.#96.188.251':139
'20#.#96.77.108':139
'20#.#96.207.190':139
'20#.#96.1.138':139
'20#.#96.3.81':139
'20#.#96.131.237':139
'20#.#96.41.220':139
'20#.#96.236.249':139
'20#.#96.223.109':139
'20#.#96.78.42':139
'20#.#96.42.112':139
'20#.#96.148.174':139
'20#.#96.108.175':139
'20#.#96.49.147':139
'20#.#96.196.181':139
'20#.#96.63.162':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней