Trojan.Starman.5260

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#02.220.117':445
'20#.#02.46.135':445
'20#.#02.216.191':445
'20#.#02.95.21':445
'20#.#02.191.149':445
'20#.#02.234.114':139
'20#.#02.235.2':139
'20#.#02.133.24':139
'20#.#02.137.104':139
'20#.#02.217.1':139
'20#.#02.48.178':445
'20#.#02.26.239':445
'20#.#02.32.11':445
'20#.#02.99.51':445
'20#.#02.21.30':445
'20#.#02.111.49':445
'20#.#02.80.60':445
'20#.#02.126.77':445
'20#.#02.149.130':445
'20#.#02.4.79':445
'20#.#02.130.174':445
'20#.#02.132.139':139
'20#.#02.1.155':445
'20#.#02.242.81':445
'20#.#02.91.170':445
'20#.#02.132.139':445
'20#.#02.225.59':445
'20#.#02.86.37':139
'20#.#02.49.126':139
'20#.#02.151.88':139
'20#.#02.77.128':445
'20#.#02.108.127':445
'20#.#02.235.2':445
'20#.#02.242.81':139
'20#.#02.77.128':139
'20#.#02.1.155':139
'20#.#02.225.59':139
'20#.#02.91.170':139
'20#.#02.133.24':445
'20#.#02.234.114':445
'20#.#02.217.1':445
'20#.#02.108.127':139
'20#.#02.137.104':445
'20#.#02.120.103':445
'20#.#02.126.77':139
'20#.#02.48.178':139
'20#.#02.80.60':139
'20#.#02.130.174':139
'20#.#02.149.130':139
'20#.#02.220.117':139
'20#.#02.46.135':139
'20#.#02.216.191':139
'20#.#02.95.21':139
'20#.#02.191.149':139
'20#.#02.4.79':139
'20#.#02.238.36':139
'20#.#02.120.103':139
'20#.#02.77.47':139
'20#.#02.156.168':139
'20#.#02.86.189':139
'20#.#02.26.239':139
'20#.#02.32.11':139
'20#.#02.99.51':139
'20#.#02.21.30':139
'20#.#02.111.49':139
'20#.#02.122.176':445
'20#.#02.46.74':445
'20#.#02.16.169':445
'20#.#02.236.199':445
'20#.#02.143.201':445
'20#.#02.97.134':445
'20#.#02.77.47':445
'20#.#02.238.36':445
'20#.#02.86.189':445
'20#.#02.42.40':445
'20#.#02.156.168':445
'20#.#02.70.69':445
'20#.#02.59.252':445
'20#.#02.64.39':445
'20#.#02.9.186':445
'20#.#02.102.122':445
'20#.#02.187.102':445
'20#.#02.211.43':445
'20#.#02.255.49':445
'20#.#02.10.98':445
'20#.#02.183.132':445
'20#.#02.25.183':445
'20#.#02.117.176':445
'20#.#02.242.221':445
'20#.#02.189.160':445
'20#.#02.134.244':445
'20#.#02.134.193':445
'20#.#02.64.65':445
'20#.#02.49.133':445
'20#.#02.65.50':445
'20#.#02.37.78':445
'20#.102.7.2':445
'20#.#02.156.165':445
'20#.#02.163.95':445
'20#.#02.220.5':445
'20#.#02.77.134':445
'20#.#02.202.2':445
'20#.#02.134.202':445
'20#.#02.182.245':445
'20#.#02.238.192':445
'20#.#02.165.134':445
'20#.#02.174.219':445
'20#.#02.134.174':445
'20#.#02.144.151':445
'20#.#02.160.94':139
'20#.#02.36.129':139
'20#.#02.75.106':139
'20#.#02.153.44':139
'20#.#02.105.224':139
'20#.#02.39.237':139
'20#.#02.228.122':139
'20#.#02.69.27':139
'20#.#02.201.23':139
'20#.#02.207.129':139
'20#.#02.145.246':139
'20#.#02.68.86':445
'20#.#02.27.68':445
'20#.#02.142.96':445
'20#.#02.32.94':445
'20#.#02.127.74':445
'20#.#02.26.4':445
'20#.#02.250.240':139
'20#.#02.40.41':445
'20#.#02.190.26':445
'20#.#02.217.189':445
'20#.#02.3.73':445
'20#.#02.238.192':139
'20#.#02.156.165':139
'20#.#02.182.245':139
'20#.#02.134.174':139
'20#.#02.165.134':139
'20#.#02.117.176':139
'20#.#02.242.221':139
'20#.#02.189.160':139
'20#.#02.134.244':139
'20#.#02.134.193':139
'20#.#02.174.219':139
'20#.#02.7.54':139
'20#.#02.3.73':139
'20#.#02.64.148':139
'20#.#02.136.43':139
'20#.#02.56.199':139
'20#.#02.163.95':139
'20#.#02.220.5':139
'20#.#02.77.134':139
'20#.#02.202.2':139
'20#.#02.134.202':139
'20#.#02.37.78':139
'20#.#02.151.88':445
'20#.#02.86.37':445
'20#.#02.26.4':139
'20#.#02.217.189':139
'20#.#02.40.41':139
'20#.#02.64.148':445
'20#.#02.7.54':445
'20#.#02.56.199':445
'20#.#02.49.126':445
'20#.#02.136.43':445
'20#.#02.190.26':139
'20#.#02.49.133':139
'20#.#02.144.151':139
'20#.#02.64.65':139
'20#.102.7.2':139
'20#.#02.65.50':139
'20#.#02.68.86':139
'20#.#02.27.68':139
'20#.#02.142.96':139
'20#.#02.32.94':139
'20#.#02.127.74':139
'20#.#02.4.60':445
'20#.#02.121.226':445
'20#.#02.109.188':445
'20#.#02.48.56':445
'20#.#02.30.198':445
'20#.#02.69.94':445
'20#.#02.172.193':445
'20#.#02.94.162':445
'20#.#02.110.124':445
'20#.#02.162.157':445
'20#.#02.163.40':445
'20#.#02.83.171':139
'20#.#02.162.219':139
'20#.#02.86.11':139
'20#.#02.196.60':139
'20#.#02.185.28':139
'20#.#02.125.211':445
'20#.#02.171.166':445
'20#.#02.255.169':445
'20#.#02.81.192':139
'20#.#02.248.152':139
'20#.#02.188.140':445
'20#.#02.138.65':445
'20#.#02.195.34':445
'20#.#02.66.82':445
'20#.#02.50.232':445
'20#.#02.254.40':445
'20#.#02.30.223':445
'20#.#02.63.14':445
'20#.#02.221.217':445
'20#.#02.148.12':445
'20#.#02.58.216':445
'20#.#02.104.39':445
'20#.#02.97.15':445
'20#.#02.243.32':445
'20#.#02.159.143':445
'20#.#02.0.156':445
'20#.#02.143.46':445
'20#.#02.54.176':445
'20#.#02.41.172':445
'20#.#02.212.203':445
'20#.#02.103.210':445
'20#.#02.131.179':445
'20#.#02.45.184':139
'20#.#02.188.140':139
'20#.#02.0.156':139
'20#.#02.172.193':139
'20#.#02.94.162':139
'20#.#02.69.94':139
'20#.#02.243.32':139
'20#.#02.103.210':139
'20#.#02.97.15':139
'20#.#02.143.46':139
'20#.#02.159.143':139
'20#.#02.162.157':139
'20#.#02.125.211':139
'20#.#02.171.166':139
'20#.#02.163.40':139
'20#.#02.48.56':139
'20#.#02.255.169':139
'20#.#02.121.226':139
'20#.#02.110.124':139
'20#.#02.4.60':139
'20#.#02.30.198':139
'20#.#02.109.188':139
'20#.#02.131.179':139
'20#.#02.150.63':139
'20#.#02.48.204':139
'20#.#02.63.14':139
'20#.#02.221.217':139
'20#.#02.30.223':139
'20#.#02.100.151':139
'20#.#02.19.20':139
'20#.#02.217.249':139
'20#.#02.121.104':139
'20#.#02.28.121':139
'20#.#02.58.216':139
'20#.#02.104.39':139
'20#.#02.50.232':139
'20#.#02.41.172':139
'20#.#02.212.203':139
'20#.#02.54.176':139
'20#.#02.195.34':139
'20#.#02.148.12':139
'20#.#02.138.65':139
'20#.#02.254.40':139
'20#.#02.66.82':139
'20#.#02.225.210':445
'20#.#02.95.38':445
'20#.#02.19.78':445
'20#.#02.16.24':139
'20#.#02.176.125':139
'20#.#02.22.214':445
'20#.#02.81.156':445
'20#.#02.5.36':445
'20#.#02.92.125':445
'20#.#02.57.175':445
'20#.#02.71.56':139
'20#.#02.95.38':139
'20#.#02.92.125':139
'20#.#02.225.210':139
'20#.#02.121.110':445
'20#.#02.19.78':139
'20#.#02.81.156':139
'20#.#02.34.118':139
'20#.#02.22.214':139
'20#.#02.57.175':139
'20#.#02.5.36':139
'20#.#02.34.118':445
'20#.#02.70.69':139
'20#.#02.143.201':139
'20#.#02.255.49':139
'20#.#02.10.98':139
'20#.#02.211.43':139
'20#.#02.16.169':139
'20#.#02.42.40':139
'20#.#02.46.74':139
'20#.#02.97.134':139
'20#.#02.236.199':139
'20#.#02.25.183':139
'20#.#02.122.176':139
'20#.#02.102.122':139
'20#.#02.176.125':445
'20#.#02.71.56':445
'20#.#02.16.24':445
'20#.#02.64.39':139
'20#.#02.183.132':139
'20#.#02.59.252':139
'20#.#02.187.102':139
'20#.#02.9.186':139
'20#.#02.46.100':445
'20#.#02.248.152':445
'20#.#02.125.211':9988
'20#.#02.81.192':445
'20#.#02.83.171':445
'20#.#02.162.219':445
'20#.#02.109.188':9988
'20#.#02.4.60':9988
'20#.#02.48.56':9988
'20#.#02.171.166':9988
'20#.#02.255.169':9988
'20#.#02.86.11':445
'20#.#02.28.121':445
'20#.#02.217.249':445
'20#.#02.121.104':445
'20#.#02.150.63':445
'20#.#02.48.204':445
'20#.#02.196.60':445
'20#.#02.185.28':445
'20#.#02.45.184':445
'20#.#02.100.151':445
'20#.#02.19.20':445
'20#.#02.121.226':9988
'20#.#02.46.100':139
'20#.#02.121.110':139
'20#.#02.48.117':139
'20#.#02.150.21':139
'20#.#02.117.150':139
'20#.#02.117.150':445
'20#.#02.48.117':445
'20#.#02.150.21':445
'20#.#02.103.72':445
'20#.#02.248.240':445
'20#.#02.248.240':139
'20#.#02.188.140':9988
'20#.#02.159.143':9988
'20#.#02.243.32':9988
'20#.#02.110.124':9988
'20#.#02.172.193':9988
'20#.#02.41.172':9988
'20#.#02.103.72':139
'20#.#02.212.203':9988
'20#.#02.143.46':9988
'20#.#02.103.210':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней