Trojan.Starman.5190

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#14.12.137':139
'20#.#14.59.95':139
'20#.#14.43.199':139
'20#.#14.35.115':139
'20#.#14.144.181':139
'20#.#14.131.197':139
'20#.#14.226.40':139
'20#.#14.249.42':139
'20#.#14.186.205':139
'20#.#14.27.221':139
'20#.#14.76.16':139
'20#.#14.54.8':139
'20#.#14.155.253':139
'20#.#14.13.148':139
'20#.#14.4.224':139
'20#.#14.134.5':139
'20#.#14.21.233':139
'20#.#14.224.5':139
'20#.#14.153.65':445
'20#.#14.250.19':445
'20#.#14.97.130':445
'20#.#14.126.135':445
'20#.#14.240.249':445
'20#.#14.18.128':445
'20#.#14.119.247':445
'20#.#14.28.241':445
'20#.#14.128.28':445
'20#.#14.52.228':139
'20#.#14.246.92':139
'20#.#14.25.68':139
'20#.#14.125.32':139
'20#.#14.32.127':139
'20#.#14.94.184':445
'20#.#14.55.240':445
'20#.#14.14.128':445
'20#.#14.215.22':445
'20#.#14.215.22':139
'20#.#14.94.184':139
'20#.#14.130.84':445
'20#.#14.14.128':139
'20#.#14.55.240':139
'20#.#14.153.65':139
'20#.#14.250.19':139
'20#.#14.97.130':139
'20#.#14.126.135':139
'20#.#14.9.20':445
'20#.#14.173.9':445
'20#.#14.21.108':445
'20#.#14.20.21':445
'20#.#14.13.104':445
'20#.#14.130.84':139
'20#.#14.86.211':445
'20#.#14.3.184':445
'20#.#14.86.211':139
'20#.#14.28.13':139
'20#.#14.208.196':139
'20#.#14.68.64':139
'20#.#14.35.110':139
'20#.#14.46.71':139
'20#.#14.248.174':139
'20#.#14.128.249':139
'20#.#14.124.177':139
'20#.#14.50.11':139
'20#.#14.128.28':139
'20#.#14.18.128':139
'20#.#14.240.249':139
'20#.#14.28.241':139
'20#.#14.119.247':139
'20#.#14.13.224':139
'20#.#14.28.104':139
'20#.#14.108.244':139
'20#.#14.192.153':139
'20#.#14.108.244':445
'20#.#14.58.46':139
'20#.#14.109.44':139
'20#.#14.56.7':139
'20#.#14.238.42':139
'20#.#14.231.241':139
'20#.#14.117.18':139
'20#.#14.220.204':139
'20#.#14.135.117':139
'20#.#14.123.43':139
'20#.#14.114.117':445
'20#.#14.112.114':139
'20#.#14.114.117':139
'20#.#14.116.76':445
'20#.#14.64.61':139
'20#.#14.197.181':139
'20#.#14.29.95':139
'20#.#14.108.93':139
'20#.#14.46.108':139
'20#.#14.179.112':139
'20#.#14.64.157':139
'20#.#14.166.228':139
'20#.#14.113.8':139
'20#.#14.171.209':139
'20#.#14.222.131':139
'20#.#14.133.204':139
'20#.#14.121.81':139
'20#.#14.108.113':139
'20#.#14.109.220':139
'20#.#14.180.131':139
'20#.#14.112.182':139
'20#.#14.9.95':139
'20#.#14.37.233':139
'20#.#14.138.218':139
'20#.#14.230.68':139
'20#.#14.198.124':139
'20#.#14.165.233':139
'20#.#14.128.249':445
'20#.#14.54.8':445
'20#.#14.50.11':445
'20#.#14.248.174':445
'20#.#14.155.253':445
'20#.#14.13.148':445
'20#.#14.21.233':445
'20#.#14.27.221':445
'20#.#14.76.16':445
'20#.#14.28.104':445
'20#.#14.68.64':445
'20#.#14.192.153':445
'20#.#14.13.224':445
'20#.#14.35.110':445
'20#.#14.46.71':445
'20#.#14.124.177':445
'20#.#14.28.13':445
'20#.#14.208.196':445
'20#.#14.226.40':445
'20#.#14.25.68':445
'20#.#14.186.205':445
'20#.#14.131.197':445
'20#.#14.125.32':445
'20#.#14.32.127':445
'20#.#14.116.76':139
'20#.#14.52.228':445
'20#.#14.246.92':445
'20#.#14.134.5':445
'20#.#14.43.199':445
'20#.#14.224.5':445
'20#.#14.4.224':445
'20#.#14.35.115':445
'20#.#14.144.181':445
'20#.#14.249.42':445
'20#.#14.12.137':445
'20#.#14.59.95':445
'20#.#14.12.216':445
'20#.#14.10.118':139
'20#.#14.112.80':139
'20#.#14.119.161':139
'20#.#14.226.118':139
'20#.#14.6.137':139
'20#.#14.252.140':445
'20#.#14.172.253':445
'20#.#14.30.34':139
'20#.#14.29.61':445
'20#.#14.171.174':139
'20#.#14.109.0':139
'20#.#14.187.92':139
'20#.#14.241.24':139
'20#.#14.41.175':139
'20#.#14.226.171':139
'20#.#14.160.195':139
'20#.#14.214.97':139
'20#.#14.64.16':139
'20#.#14.58.43':445
'20#.#14.62.117':445
'20#.#14.114.135':445
'20#.#14.188.148':445
'20#.#14.51.188':445
'20#.#14.207.27':445
'20#.#14.220.207':445
'20#.#14.80.188':445
'20#.#14.28.59':445
'20#.#14.85.165':445
'20#.#14.89.230':445
'20#.#14.26.102':445
'20#.#14.9.227':445
'20#.#14.70.168':445
'20#.#14.52.205':445
'20#.#14.61.243':445
'20#.#14.132.191':445
'20#.#14.204.152':445
'20#.#14.61.243':139
'20#.#14.114.135':139
'20#.#14.204.152':139
'20#.#14.52.205':139
'20#.#14.188.148':139
'20#.#14.51.188':139
'20#.#14.80.188':139
'20#.#14.58.43':139
'20#.#14.62.117':139
'20#.#14.29.61':139
'20#.#14.252.140':139
'20#.#14.26.102':139
'20#.#14.172.253':139
'20#.#14.9.227':139
'20#.#14.70.168':139
'20#.#14.132.191':139
'20#.#14.85.165':139
'20#.#14.89.230':139
'20#.#14.9.74':139
'20#.#14.69.83':139
'20#.#14.111.14':139
'20#.#14.127.199':139
'20#.#14.127.185':139
'20#.#14.118.214':139
'20#.#14.92.244':139
'20#.#14.116.103':139
'20#.#14.11.28':139
'20#.#14.220.207':139
'20#.#14.105.48':139
'20#.#14.28.59':139
'20#.#14.207.27':139
'20#.#14.109.243':139
'20#.#14.141.76':139
'20#.#14.119.17':139
'20#.#14.181.109':139
'20#.#14.242.180':139
'20#.#14.105.48':445
'20#.#14.68.26':139
'20#.#14.65.28':139
'20#.#14.240.100':139
'20#.#14.146.197':139
'20#.#14.207.178':139
'20#.#14.16.33':139
'20#.#14.109.10':139
'20#.#14.96.101':139
'20#.#14.1.135':139
'20#.#14.61.243':9988
'20#.#14.132.191':9988
'20#.#14.252.140':9988
'20#.#14.89.230':9988
'20#.#14.85.165':9988
'20#.#14.26.102':9988
'20#.#14.29.61':9988
'20#.#14.9.227':9988
'20#.#14.58.43':9988
'20#.#14.65.28':445
'20#.#14.207.178':445
'20#.#14.146.197':445
'20#.#14.68.26':445
'20#.#14.96.101':445
'20#.#14.109.10':445
'20#.#14.188.119':445
'20#.#14.1.135':445
'20#.#14.16.33':445
'20#.#14.21.108':139
'20#.#14.20.21':139
'20#.#14.188.119':139
'20#.#14.12.216':139
'20#.#14.9.20':139
'20#.#14.3.184':139
'20#.#14.240.100':445
'20#.#14.173.9':139
'20#.#14.13.104':139
'20#.#14.11.28':445
'20#.#14.118.214':445
'20#.#14.127.185':445
'20#.#14.116.103':445
'20#.#14.92.244':445
'20#.#14.171.174':445
'20#.#14.109.0':445
'20#.#14.187.92':445
'20#.#14.241.24':445
'20#.#14.242.180':445
'20#.#14.141.76':445
'20#.#14.109.243':445
'20#.#14.181.109':445
'20#.#14.119.17':445
'20#.#14.9.74':445
'20#.#14.69.83':445
'20#.#14.111.14':445
'20#.#14.127.199':445
'20#.#14.70.168':9988
'20#.#14.51.188':9988
'20#.#14.6.137':445
'20#.#14.30.34':445
'20#.#14.204.152':9988
'20#.#14.62.117':9988
'20#.#14.80.188':9988
'20#.#14.188.148':9988
'20#.#14.114.135':9988
'20#.#14.64.16':445
'20#.#14.226.171':445
'20#.#14.41.175':445
'20#.#14.214.97':445
'20#.#14.160.195':445
'20#.#14.10.118':445
'20#.#14.112.80':445
'20#.#14.119.161':445
'20#.#14.226.118':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней