Trojan.Starman.5217

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#48.235.212':445
'20#.#48.201.188':445
'20#.#48.200.231':445
'20#.#48.253.240':445
'20#.#48.1.61':445
'20#.#48.243.201':445
'20#.#48.183.79':445
'20#.#48.77.99':139
'20#.#48.87.187':445
'20#.#48.110.39':445
'20#.#48.32.117':445
'20#.#48.19.220':445
'20#.#48.105.58':445
'20#.#48.155.16':445
'20#.#48.89.51':445
'20#.#48.16.182':445
'20#.#48.3.15':445
'20#.#48.192.164':445
'20#.#48.10.181':445
'20#.#48.3.135':445
'20#.#48.202.138':445
'20#.#48.139.108':445
'20#.#48.177.37':445
'20#.#48.48.225':445
'20#.#48.13.26':445
'20#.#48.72.85':445
'20#.#48.86.61':445
'20#.#48.77.203':445
'20#.#48.191.119':139
'20#.#48.16.91':139
'20#.#48.239.133':139
'20#.#48.87.17':445
'20#.#48.235.159':445
'20#.#48.13.26':139
'20#.#48.177.37':139
'20#.#48.86.61':139
'20#.#48.126.143':139
'20#.#48.72.85':139
'20#.#48.48.225':139
'20#.#48.77.99':445
'20#.#48.126.143':445
'20#.#48.235.159':139
'20#.#48.77.203':139
'20#.#48.87.17':139
'20#.#48.116.77':445
'20#.#48.10.181':139
'20#.#48.253.240':139
'20#.#48.192.164':139
'20#.#48.139.108':139
'20#.#48.3.135':139
'20#.#48.1.61':139
'20#.#48.243.201':139
'20#.#48.110.39':139
'20#.#48.201.188':139
'20#.#48.200.231':139
'20#.#48.235.212':139
'20#.#48.116.77':139
'20#.#48.89.51':139
'20#.#48.109.169':139
'20#.#48.92.117':139
'20#.#48.103.185':139
'20#.#48.16.182':139
'20#.#48.3.15':139
'20#.#48.202.138':139
'20#.#48.105.58':139
'20#.#48.155.16':139
'20#.#48.19.220':139
'20#.#48.3.222':445
'20#.#48.43.93':445
'20#.#48.242.245':445
'20#.#48.90.254':445
'20#.#48.246.90':445
'20#.#48.156.155':445
'20#.#48.103.185':445
'20#.#48.109.169':445
'20#.#48.92.117':445
'20#.#48.101.56':445
'20#.#48.118.18':445
'20#.#48.5.163':445
'20#.#48.217.198':445
'20#.#48.183.79':139
'20#.#48.32.117':139
'20#.#48.87.187':139
'20#.#48.65.218':445
'20#.#48.11.97':445
'20#.#48.31.67':445
'20#.#48.189.180':445
'20#.#48.236.65':445
'20#.#48.25.182':445
'20#.#48.34.246':445
'20#.#48.144.89':445
'20#.#48.28.208':445
'20#.#48.195.242':445
'20#.#48.208.159':445
'20#.#48.8.30':445
'20#.#48.80.50':445
'20#.#48.166.12':445
'20#.#48.225.234':445
'20#.#48.57.84':445
'20#.#48.234.57':445
'20#.#48.203.163':445
'20#.#48.118.145':445
'20#.#48.164.12':445
'20#.#48.128.100':445
'20#.#48.15.250':445
'20#.#48.238.35':445
'20#.#48.120.50':445
'20#.#48.90.237':445
'20#.#48.81.152':445
'20#.#48.247.237':445
'20#.#48.52.14':445
'20#.#48.53.179':139
'20#.#48.117.58':139
'20#.#48.192.68':139
'20#.#48.52.250':445
'20#.#48.39.90':139
'20#.#48.67.35':139
'20#.#48.88.241':139
'20#.#48.96.200':139
'20#.#48.130.170':139
'20#.#48.70.103':139
'20#.#48.185.83':139
'20#.#48.104.29':445
'20#.#48.106.113':445
'20#.#48.119.46':445
'20#.#48.118.135':445
'20#.#48.46.29':445
'20#.#48.204.106':445
'20#.#48.110.36':445
'20#.#48.76.211':445
'20#.#48.28.9':445
'20#.#48.209.90':445
'20#.#48.9.68':445
'20#.#48.99.26':445
'20#.#48.90.237':139
'20#.#48.195.242':139
'20#.#48.120.50':139
'20#.#48.52.14':139
'20#.#48.81.152':139
'20#.#48.208.159':139
'20#.#48.8.30':139
'20#.#48.57.84':139
'20#.#48.144.89':139
'20#.#48.28.208':139
'20#.#48.34.246':139
'20#.#48.99.26':139
'20#.#48.128.100':139
'20#.#48.146.15':139
'20#.#48.249.33':139
'20#.148.9.3':139
'20#.#48.15.250':139
'20#.#48.238.35':139
'20#.#48.247.237':139
'20#.#48.118.145':139
'20#.#48.164.12':139
'20#.#48.203.163':139
'20#.#48.76.211':139
'20#.#48.52.250':139
'20#.#48.110.36':139
'20#.#48.9.68':139
'20#.#48.28.9':139
'20#.#48.239.133':445
'20#.148.9.3':445
'20#.#48.146.15':445
'20#.#48.249.33':445
'20#.#48.191.119':445
'20#.#48.16.91':445
'20#.#48.166.12':139
'20#.#48.118.135':139
'20#.#48.80.50':139
'20#.#48.234.57':139
'20#.#48.225.234':139
'20#.#48.46.29':139
'20#.#48.204.106':139
'20#.#48.209.90':139
'20#.#48.106.113':139
'20#.#48.119.46':139
'20#.#48.104.29':139
'20#.#48.193.46':445
'20#.#48.218.62':445
'20#.#48.153.237':445
'20#.#48.192.235':445
'20#.#48.138.185':445
'20#.#48.18.162':445
'20#.#48.60.19':445
'20#.#48.54.94':445
'20#.#48.197.173':445
'20#.#48.71.51':445
'20#.#48.192.221':445
'20#.#48.8.125':139
'20#.#48.11.8':139
'20#.#48.172.68':139
'20#.#48.22.40':139
'20#.#48.11.152':139
'20#.#48.245.10':139
'20#.#48.7.146':445
'20#.#48.57.110':445
'20#.#48.104.106':445
'20#.#48.75.167':445
'20#.#48.226.103':445
'20#.#48.74.86':445
'20#.#48.56.166':445
'20#.#48.18.108':445
'20#.#48.80.170':445
'20#.#48.6.91':445
'20#.#48.178.197':445
'20#.#48.50.134':445
'20#.#48.71.214':445
'20#.#48.43.201':445
'20#.#48.33.179':445
'20#.#48.201.33':445
'20#.#48.156.243':445
'20#.#48.32.192':445
'20#.#48.27.81':445
'20#.#48.77.123':445
'20#.#48.177.158':445
'20#.#48.19.140':445
'20#.#48.28.88':445
'20#.#48.85.28':445
'20#.#48.133.86':445
'20#.#48.253.40':445
'20#.#48.167.159':445
'20#.#48.84.183':139
'20#.#48.60.19':139
'20#.#48.54.94':139
'20#.#48.197.173':139
'20#.#48.71.51':139
'20#.#48.192.221':139
'20#.#48.77.123':139
'20#.#48.32.192':139
'20#.#48.19.140':139
'20#.#48.156.243':139
'20#.#48.177.158':139
'20#.#48.27.81':139
'20#.#48.226.103':139
'20#.#48.75.167':139
'20#.#48.104.106':139
'20#.#48.57.110':139
'20#.#48.192.235':139
'20#.#48.7.146':139
'20#.#48.218.62':139
'20#.#48.18.162':139
'20#.#48.193.46':139
'20#.#48.138.185':139
'20#.#48.153.237':139
'20#.#48.50.134':139
'20#.#48.71.214':139
'20#.#48.43.201':139
'20#.#48.33.179':139
'20#.#48.201.33':139
'20#.#48.178.47':139
'20#.#48.41.233':139
'20#.#48.233.172':139
'20#.#48.24.178':139
'20#.#48.20.82':139
'20#.#48.178.213':139
'20#.#48.28.88':139
'20#.#48.85.28':139
'20#.#48.133.86':139
'20#.#48.253.40':139
'20#.#48.167.159':139
'20#.#48.80.170':139
'20#.#48.56.166':139
'20#.#48.178.197':139
'20#.#48.74.86':139
'20#.#48.6.91':139
'20#.#48.18.108':139
'20#.#48.112.208':139
'20#.#48.113.6':139
'20#.#48.40.86':139
'20#.#48.3.61':139
'20#.#48.199.5':139
'20#.#48.64.47':139
'20#.#48.241.27':445
'20#.#48.3.61':445
'20#.#48.27.66':445
'20#.#48.70.189':139
'20#.#48.45.36':445
'20#.#48.19.90':445
'20#.#48.195.189':445
'20#.#48.51.153':445
'20#.#48.25.35':445
'20#.#48.232.41':445
'20#.#48.178.30':445
'20#.#48.27.66':139
'20#.#48.241.27':139
'20#.#48.45.36':139
'20#.#48.5.202':445
'20#.#48.90.247':445
'20#.#48.90.254':139
'20#.#48.246.90':139
'20#.#48.31.67':139
'20#.#48.189.180':139
'20#.#48.11.97':139
'20#.#48.242.245':139
'20#.#48.101.56':139
'20#.#48.118.18':139
'20#.#48.156.155':139
'20#.#48.3.222':139
'20#.#48.43.93':139
'20#.#48.113.6':445
'20#.#48.64.47':445
'20#.#48.112.208':445
'20#.#48.199.5':445
'20#.#48.40.86':445
'20#.#48.70.189':445
'20#.#48.236.65':139
'20#.#48.25.182':139
'20#.#48.65.218':139
'20#.#48.5.163':139
'20#.#48.217.198':139
'20#.#48.106.132':445
'20#.#48.60.19':9988
'20#.#48.77.123':9988
'20#.#48.218.62':9988
'20#.#48.11.8':445
'20#.#48.245.10':445
'20#.#48.192.221':9988
'20#.#48.57.110':9988
'20#.#48.28.88':9988
'20#.#48.80.170':9988
'20#.#48.54.94':9988
'20#.#48.156.243':9988
'20#.#48.24.178':445
'20#.#48.41.233':445
'20#.#48.178.213':445
'20#.#48.178.47':445
'20#.#48.20.82':445
'20#.#48.233.172':445
'20#.#48.172.68':445
'20#.#48.8.125':445
'20#.#48.11.152':445
'20#.#48.84.183':445
'20#.#48.22.40':445
'20#.#48.195.189':139
'20#.#48.178.30':139
'20#.#48.19.90':139
'20#.#48.232.41':139
'20#.#48.51.153':139
'20#.#48.5.202':139
'20#.#48.187.186':445
'20#.#48.106.202':445
'20#.#48.31.159':445
'20#.#48.90.247':139
'20#.#48.118.124':445
'20#.#48.32.192':9988
'20#.#48.133.86':9988
'20#.#48.19.140':9988
'20#.#48.167.159':9988
'20#.#48.192.235':9988
'20#.#48.118.124':139
'20#.#48.106.132':139
'20#.#48.25.35':139
'20#.#48.106.202':139
'20#.#48.31.159':139
'20#.#48.187.186':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней