Trojan.Starman.5041

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#51.40.65':139
'20#.#51.244.235':139
'20#.#51.161.14':139
'20#.#51.157.210':139
'20#.#51.15.80':139
'20#.#51.41.248':139
'20#.#51.49.84':139
'20#.#51.40.28':139
'20#.#51.60.145':139
'20#.#51.89.152':139
'20#.#51.87.158':139
'20#.#51.113.1':139
'20#.#51.23.240':139
'20#.#51.1.191':139
'20#.#51.128.130':445
'20#.#51.190.175':445
'20#.#51.210.223':139
'20#.#51.97.250':139
'20#.#51.30.88':139
'20#.#51.95.43':139
'20#.#51.107.178':139
'20#.#51.4.160':139
'20#.#51.157.210':445
'20#.#51.15.80':445
'20#.#51.87.158':445
'20#.#51.210.223':445
'20#.#51.97.250':445
'20#.#51.89.152':445
'20#.#51.60.145':445
'20#.#51.244.235':445
'20#.#51.161.14':445
'20#.#51.40.65':445
'20#.#51.30.88':445
'20#.#51.148.164':139
'20#.#51.154.148':139
'20#.#51.44.171':139
'20#.#51.53.120':139
'20#.#51.197.38':139
'20#.#51.95.43':445
'20#.#51.107.178':445
'20#.#51.23.240':445
'20#.#51.1.191':445
'20#.#51.113.1':445
'20#.#51.148.178':139
'20#.#51.115.217':139
'20#.#51.38.162':139
'20#.#51.61.35':139
'20#.#51.162.61':139
'20#.#51.19.32':445
'20#.#51.37.169':445
'20#.#51.190.175':139
'20#.#51.20.46':139
'20#.#51.128.130':139
'20#.#51.35.73':139
'20#.#51.31.40':139
'20#.#51.128.16':139
'20#.#51.76.141':139
'20#.#51.226.230':139
'20#.#51.117.85':139
'20#.#51.52.25':139
'20#.#51.186.46':139
'20#.#51.40.231':139
'20#.#51.165.78':139
'20#.#51.51.165':139
'20#.#51.4.110':445
'20#.#51.35.73':445
'20#.#51.61.35':445
'20#.#51.186.46':445
'20#.#51.40.231':445
'20#.#51.52.25':445
'20#.#51.115.217':445
'20#.#51.20.46':445
'20#.#51.148.178':445
'20#.#51.162.61':445
'20#.#51.38.162':445
'20#.#51.51.165':445
'20#.#51.174.167':445
'20#.#51.226.230':445
'20#.#51.146.100':445
'20#.#51.191.6':445
'20#.#51.118.115':445
'20#.#51.128.16':445
'20#.#51.165.78':445
'20#.#51.31.40':445
'20#.#51.117.85':445
'20#.#51.76.141':445
'20#.#51.139.92':445
'20#.#51.16.3':445
'20#.#51.4.164':445
'20#.#51.106.26':445
'20#.#51.164.8':445
'20#.#51.47.150':139
'20#.#51.170.49':139
'20#.#51.92.233':139
'20#.#51.150.16':445
'20#.#51.181.206':445
'20#.#51.181.200':445
'20#.#51.63.133':445
'20#.#51.130.135':445
'20#.#51.184.28':445
'20#.#51.78.240':445
'20#.#51.28.103':445
'20#.#51.217.80':445
'20#.#51.74.217':445
'20#.#51.80.17':445
'20#.#51.190.107':445
'20#.#51.63.249':445
'20#.#51.29.230':139
'20#.#51.39.54':139
'20#.#51.96.15':139
'20#.#51.206.193':139
'20#.#51.219.112':139
'20#.#51.225.194':139
'20#.#51.237.140':139
'20#.#51.134.235':139
'20#.#51.55.23':139
'20#.#51.53.27':139
'20#.#51.23.53':139
'20#.#51.112.103':139
'20#.#51.89.118':139
'20#.#51.216.65':139
'20#.#51.89.202':139
'20#.#51.252.100':139
'20#.#51.68.80':139
'20#.#51.25.195':139
'20#.#51.160.219':139
'20#.#51.229.114':139
'20#.#51.33.139':139
'20#.#51.115.33':139
'20#.#51.81.160':139
'20#.#51.78.82':139
'20#.#51.150.230':139
'20#.#51.105.174':139
'20#.#51.231.253':139
'20#.#51.184.28':139
'20#.#51.63.133':139
'20#.#51.28.103':139
'20#.#51.178.26':139
'20#.#51.78.240':139
'20#.#51.203.218':139
'20#.#51.4.160':445
'20#.#51.53.120':445
'20#.#51.49.84':445
'20#.#51.40.28':445
'20#.#51.41.248':445
'20#.#51.154.148':445
'20#.#51.105.33':139
'20#.#51.148.164':445
'20#.#51.197.38':445
'20#.#51.44.171':445
'20#.#51.130.135':139
'20#.#51.203.218':445
'20#.#51.105.174':445
'20#.#51.105.33':445
'20#.#51.150.16':139
'20#.#51.181.206':139
'20#.#51.78.82':445
'20#.#51.178.26':445
'20#.#51.81.160':445
'20#.#51.231.253':445
'20#.#51.150.230':445
'20#.#51.16.3':139
'20#.#51.217.80':139
'20#.#51.74.217':139
'20#.#51.80.17':139
'20#.#51.190.107':139
'20#.#51.63.249':139
'20#.#51.4.164':139
'20#.#51.139.92':139
'20#.#51.164.8':139
'20#.#51.181.200':139
'20#.#51.106.26':139
'20#.#51.246.80':445
'20#.#51.201.42':445
'20#.#51.80.203':445
'20#.#51.229.105':445
'20#.#51.14.75':445
'20#.#51.13.189':445
'20#.#51.36.29':445
'20#.#51.190.52':445
'20#.#51.237.84':445
'20#.#51.83.240':445
'20#.#51.123.157':445
'20#.#51.34.209':139
'20#.#51.60.92':139
'20#.#51.209.70':139
'20#.#51.191.166':139
'20#.#51.70.217':139
'20#.#51.203.42':445
'20#.#51.75.125':445
'20#.#51.248.224':139
'20#.#51.145.22':139
'20#.#51.224.190':139
'20#.#51.101.36':445
'20#.#51.242.148':445
'20#.#51.128.11':445
'20#.#51.43.47':445
'20#.#51.76.119':445
'20#.#51.63.62':445
'20#.#51.111.26':445
'20#.#51.55.46':445
'20#.#51.27.107':445
'20#.#51.12.246':445
'20#.#51.106.35':445
'20#.#51.174.79':445
'20#.#51.6.49':445
'20#.#51.14.79':445
'20#.#51.201.252':445
'20#.#51.82.101':445
'20#.#51.48.40':445
'20#.#51.247.245':445
'20#.#51.243.72':445
'20#.#51.54.43':445
'20#.#51.231.36':445
'20#.#51.109.70':445
'20#.#51.82.101':139
'20#.#51.48.40':139
'20#.#51.101.36':139
'20#.#51.13.189':139
'20#.#51.36.29':139
'20#.#51.231.36':139
'20#.#51.109.70':139
'20#.#51.14.79':139
'20#.#51.201.252':139
'20#.#51.6.49':139
'20#.#51.190.52':139
'20#.#51.75.125':139
'20#.#51.229.105':139
'20#.#51.203.42':139
'20#.#51.123.157':139
'20#.#51.14.75':139
'20#.#51.237.84':139
'20#.#51.83.240':139
'20#.#51.201.42':139
'20#.#51.80.203':139
'20#.#51.246.80':139
'20#.#51.54.43':139
'20#.#51.9.195':139
'20#.#51.112.10':139
'20#.#51.7.173':139
'20#.#51.111.26':139
'20#.#51.55.46':139
'20#.#51.38.93':139
'20#.#51.44.181':139
'20#.#51.44.77':139
'20#.#51.217.111':139
'20#.#51.189.204':139
'20#.#51.27.107':139
'20#.#51.76.119':139
'20#.#51.63.62':139
'20#.#51.174.79':139
'20#.#51.247.245':139
'20#.#51.243.72':139
'20#.#51.12.246':139
'20#.#51.106.35':139
'20#.#51.128.11':139
'20#.#51.43.47':139
'20#.#51.242.148':139
'20#.#51.16.238':445
'20#.#51.148.233':445
'20#.#51.85.71':445
'20#.#51.83.35':445
'20#.#51.111.102':445
'20#.#51.174.245':445
'20#.#51.58.174':445
'20#.#51.48.30':445
'20#.#51.135.110':445
'20#.#51.88.58':445
'20#.#51.196.24':139
'20#.#51.136.193':139
'20#.#51.199.118':139
'20#.#51.194.17':139
'20#.#51.162.56':139
'20#.#51.17.162':139
'20#.#51.3.10':139
'20#.#51.24.2':139
'20#.#51.77.153':139
'20#.#51.166.172':139
'20#.#51.169.38':139
'20#.#51.91.59':445
'20#.#51.19.32':139
'20#.#51.37.169':139
'20#.#51.196.24':445
'20#.#51.3.10':445
'20#.#51.24.2':445
'20#.#51.146.100':139
'20#.#51.174.167':139
'20#.#51.118.115':139
'20#.#51.4.110':139
'20#.#51.191.6':139
'20#.#51.77.153':445
'20#.#51.162.56':445
'20#.#51.17.162':445
'20#.#51.85.126':445
'20#.#51.151.91':445
'20#.#51.47.208':445
'20#.#51.166.172':445
'20#.#51.169.38':445
'20#.#51.199.118':445
'20#.#51.194.17':445
'20#.#51.136.193':445
'20#.#51.224.190':445
'20#.#51.248.224':445
'20#.#51.145.22':445
'20#.#51.34.209':445
'20#.#51.60.92':445
'20#.#51.36.29':9988
'20#.#51.6.49':9988
'20#.#51.246.80':9988
'20#.#51.80.203':9988
'20#.#51.229.105':9988
'20#.#51.209.70':445
'20#.#51.217.111':445
'20#.#51.189.204':445
'20#.#51.112.10':445
'20#.#51.7.173':445
'20#.#51.9.195':445
'20#.#51.191.166':445
'20#.#51.70.217':445
'20#.#51.44.181':445
'20#.#51.44.77':445
'20#.#51.38.93':445
'20#.#51.14.79':9988
'20#.#51.48.30':139
'20#.#51.174.245':139
'20#.#51.88.58':139
'20#.#51.148.233':139
'20#.#51.135.110':139
'20#.#51.47.208':139
'20#.#51.85.126':139
'20#.#51.151.91':139
'20#.#51.58.174':139
'20#.#51.91.59':139
'20#.#51.16.238':139
'20#.#51.63.62':9988
'20#.#51.43.47':9988
'20#.#51.247.245':9988
'20#.#51.109.70':9988
'20#.#51.54.43':9988
'20#.#51.111.102':139
'20#.#51.85.71':139
'20#.#51.83.35':139
'20#.#51.242.148':9988
'20#.#51.106.35':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней