Trojan.Starman.5111

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#73.232.121':139
'20#.#73.206.173':139
'20#.#73.64.26':139
'20#.#73.103.163':139
'20#.#73.115.213':139
'20#.#73.230.68':139
'20#.#73.166.101':139
'20#.#73.7.105':139
'20#.#73.180.251':139
'20#.#73.28.252':139
'20#.#73.3.138':139
'20#.#73.209.10':139
'20#.#73.26.70':139
'20#.#73.81.17':139
'20#.#73.207.153':139
'20#.#73.223.242':139
'20#.#73.15.188':139
'20#.#73.255.140':139
'20#.#73.108.40':139
'20#.#73.49.183':139
'20#.#73.193.49':139
'20#.#73.33.217':139
'20#.#73.108.40':445
'20#.#73.15.188':445
'20#.#73.193.49':445
'20#.#73.26.70':445
'20#.#73.49.183':445
'20#.#73.115.213':445
'20#.#73.64.26':445
'20#.#73.103.163':445
'20#.#73.255.140':445
'20#.#73.3.138':445
'20#.#73.209.10':445
'20#.#73.109.116':139
'20#.#73.93.47':139
'20#.#73.36.163':139
'20#.#73.26.42':139
'20#.#73.193.121':139
'20#.#73.223.242':445
'20#.#73.81.17':445
'20#.#73.207.153':445
'20#.#73.27.126':139
'20#.#73.194.135':445
'20#.#73.110.61':139
'20#.#73.13.110':139
'20#.#73.142.107':139
'20#.#73.1.177':139
'20#.#73.38.202':139
'20#.#73.199.65':139
'20#.#73.116.236':445
'20#.#73.241.136':139
'20#.#73.156.232':139
'20#.#73.45.51':139
'20#.#73.59.17':139
'20#.#73.117.37':139
'20#.#73.94.72':139
'20#.#73.37.225':139
'20#.#73.77.60':139
'20#.#73.132.250':139
'20#.#73.127.93':139
'20#.#73.11.162':139
'20#.#73.85.27':139
'20#.#73.94.199':139
'20#.#73.27.29':139
'20#.#73.62.10':445
'20#.#73.110.61':445
'20#.#73.13.110':445
'20#.#73.142.107':445
'20#.#73.1.177':445
'20#.#73.38.202':445
'20#.#73.199.65':445
'20#.#73.194.135':139
'20#.#73.241.136':445
'20#.#73.156.232':445
'20#.#73.45.51':445
'20#.#73.59.17':445
'20#.#73.117.37':445
'20#.#73.94.72':445
'20#.#73.37.225':445
'20#.#73.77.60':445
'20#.#73.132.250':445
'20#.#73.127.93':445
'20#.#73.11.162':445
'20#.#73.85.27':445
'20#.#73.94.199':445
'20#.#73.27.29':445
'20#.#73.232.121':445
'20#.#73.219.6':139
'20#.#73.168.222':139
'20#.#73.157.108':445
'20#.#73.134.183':445
'20#.#73.36.14':445
'20#.#73.100.241':139
'20#.#73.230.76':139
'20#.#73.156.187':139
'20#.#73.212.20':139
'20#.#73.140.175':139
'20#.#73.106.202':445
'20#.#73.79.211':445
'20#.#73.207.239':445
'20#.#73.50.149':445
'20#.#73.151.101':445
'20#.#73.21.224':445
'20#.#73.55.107':445
'20#.#73.249.54':445
'20#.#73.107.128':445
'20#.#73.251.207':445
'20#.#73.34.76':445
'20#.#73.247.68':139
'20#.#73.101.208':139
'20#.#73.184.7':139
'20#.#73.39.213':139
'20#.#73.25.29':139
'20#.#73.229.253':139
'20#.#73.55.253':139
'20#.#73.54.127':139
'20#.#73.127.109':139
'20#.#73.25.39':139
'20#.#73.123.10':139
'20#.#73.239.203':139
'20#.#73.106.110':139
'20#.#73.84.77':139
'20#.#73.122.169':139
'20#.#73.52.99':139
'20#.#73.124.16':139
'20#.#73.27.105':139
'20#.#73.176.73':139
'20#.#73.84.79':139
'20#.#73.88.253':139
'20#.#73.111.106':139
'20#.#73.175.108':139
'20#.#73.169.168':139
'20#.#73.182.28':139
'20#.#73.93.47':445
'20#.#73.27.126':445
'20#.#73.16.163':139
'20#.#73.178.74':139
'20#.#73.22.132':139
'20#.#73.10.163':139
'20#.#73.230.69':139
'20#.#73.109.116':445
'20#.#73.7.105':445
'20#.#73.230.68':445
'20#.#73.28.252':445
'20#.#73.206.173':445
'20#.#73.180.251':445
'20#.#73.193.121':445
'20#.#73.36.163':445
'20#.#73.26.42':445
'20#.#73.166.101':445
'20#.#73.33.217':445
'20#.#73.151.101':139
'20#.#73.175.108':445
'20#.#73.169.168':445
'20#.#73.182.28':445
'20#.#73.36.14':139
'20#.#73.157.108':139
'20#.#73.16.163':445
'20#.#73.178.74':445
'20#.#73.22.132':445
'20#.#73.10.163':445
'20#.#73.230.69':445
'20#.#73.134.183':139
'20#.#73.207.239':139
'20#.#73.251.207':139
'20#.#73.79.211':139
'20#.#73.21.224':139
'20#.#73.50.149':139
'20#.#73.249.54':139
'20#.#73.106.202':139
'20#.#73.55.107':139
'20#.#73.34.76':139
'20#.#73.107.128':139
'20#.#73.228.243':445
'20#.#73.120.229':445
'20#.#73.1.13':445
'20#.#73.86.204':445
'20#.#73.119.86':445
'20#.#73.59.161':445
'20#.#73.7.109':445
'20#.#73.96.188':445
'20#.#73.94.76':445
'20#.#73.222.61':445
'20#.#73.87.2':445
'20#.#73.172.128':139
'20#.#73.226.188':139
'20#.#73.52.145':139
'20#.#73.57.193':139
'20#.#73.110.109':139
'20#.#73.43.190':445
'20#.#73.190.42':445
'20#.#73.79.139':139
'20#.#73.92.227':139
'20#.#73.130.129':139
'20#.#73.7.136':445
'20#.#73.252.29':445
'20#.#73.250.40':445
'20#.#73.37.186':445
'20#.#73.119.196':445
'20#.#73.107.133':445
'20#.#73.22.144':445
'20#.#73.133.4':445
'20#.#73.120.228':445
'20#.#73.195.176':445
'20#.#73.101.179':445
'20#.#73.195.253':445
'20#.#73.88.58':445
'20#.#73.18.233':445
'20#.#73.93.102':445
'20#.#73.244.63':445
'20#.#73.51.244':445
'20#.#73.133.89':445
'20#.#73.159.26':445
'20#.#73.89.184':445
'20#.#73.83.8':445
'20#.#73.153.85':445
'20#.#73.244.63':139
'20#.#73.51.244':139
'20#.#73.7.136':139
'20#.#73.59.161':139
'20#.#73.7.109':139
'20#.#73.83.8':139
'20#.#73.153.85':139
'20#.#73.18.233':139
'20#.#73.93.102':139
'20#.#73.88.58':139
'20#.#73.96.188':139
'20#.#73.86.204':139
'20#.#73.119.86':139
'20#.#73.43.190':139
'20#.#73.87.2':139
'20#.#73.190.42':139
'20#.#73.94.76':139
'20#.#73.222.61':139
'20#.#73.120.229':139
'20#.#73.1.13':139
'20#.#73.228.243':139
'20#.#73.89.184':139
'20#.#73.25.96':139
'20#.#73.196.251':139
'20#.#73.125.142':139
'20#.#73.22.144':139
'20#.#73.133.4':139
'20#.#73.28.53':139
'20#.#73.96.37':139
'20#.#73.167.39':139
'20#.#73.35.221':139
'20#.#73.39.35':139
'20#.#73.120.228':139
'20#.#73.119.196':139
'20#.#73.107.133':139
'20#.#73.195.253':139
'20#.#73.133.89':139
'20#.#73.159.26':139
'20#.#73.195.176':139
'20#.#73.101.179':139
'20#.#73.250.40':139
'20#.#73.37.186':139
'20#.#73.252.29':139
'20#.#73.125.142':445
'20#.#73.252.167':445
'20#.#73.77.251':445
'20#.#73.164.238':445
'20#.#73.19.59':139
'20#.#73.142.2':445
'20#.#73.116.5':445
'20#.#73.26.229':445
'20#.#73.52.244':445
'20#.#73.243.148':445
'20#.#73.152.119':445
'20#.#73.229.181':139
'20#.#73.103.252':139
'20#.#73.29.48':139
'20#.#73.81.61':139
'20#.#73.218.61':139
'20#.#73.24.100':139
'20#.#73.68.156':139
'20#.#73.194.162':139
'20#.#73.227.176':139
'20#.#73.77.164':139
'20#.#73.34.78':139
'20#.#73.85.254':445
'20#.#73.227.176':445
'20#.#73.68.156':445
'20#.#73.34.78':445
'20#.#73.29.48':445
'20#.#73.77.164':445
'20#.#73.116.236':139
'20#.#73.62.10':139
'20#.#73.19.59':445
'20#.#73.194.162':445
'20#.#73.229.181':445
'20#.#73.103.252':445
'20#.#73.120.42':445
'20#.#73.161.218':445
'20#.#73.129.221':445
'20#.#73.102.85':445
'20#.#73.41.94':445
'20#.#73.24.100':445
'20#.#73.81.61':445
'20#.#73.218.61':445
'20#.#73.15.75':445
'20#.#73.163.26':445
'20#.#73.79.139':445
'20#.#73.119.86':9988
'20#.#73.130.129':445
'20#.#73.226.188':445
'20#.#73.92.227':445
'20#.#73.7.109':9988
'20#.#73.244.63':9988
'20#.#73.94.76':9988
'20#.#73.190.42':9988
'20#.#73.1.13':9988
'20#.#73.172.128':445
'20#.#73.39.35':445
'20#.#73.167.39':445
'20#.#73.35.221':445
'20#.#73.25.96':445
'20#.#73.196.251':445
'20#.#73.110.109':445
'20#.#73.52.145':445
'20#.#73.57.193':445
'20#.#73.28.53':445
'20#.#73.96.37':445
'20#.#73.93.102':9988
'20#.#73.102.85':139
'20#.#73.41.94':139
'20#.#73.85.254':139
'20#.#73.116.5':139
'20#.#73.26.229':139
'20#.#73.15.75':139
'20#.#73.163.26':139
'20#.#73.161.218':139
'20#.#73.129.221':139
'20#.#73.120.42':139
'20#.#73.52.244':139
'20#.#73.25.96':9988
'20#.#73.142.2':139
'20#.#73.125.142':9988
'20#.#73.195.253':9988
'20#.#73.37.186':9988
'20#.#73.243.148':139
'20#.#73.152.119':139
'20#.#73.77.251':139
'20#.#73.164.238':139
'20#.#73.252.167':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней