Trojan.Starman.5219

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#68.214.51':139
'20#.#68.114.142':139
'20#.#68.51.218':139
'20#.#68.145.62':139
'20#.#68.218.144':139
'20#.#68.219.76':139
'20#.#68.101.69':139
'20#.#68.76.46':139
'20#.#68.240.82':139
'20#.#68.45.240':139
'20#.#68.63.118':139
'20#.#68.246.236':139
'20#.#68.184.173':139
'20#.#68.236.77':139
'20#.#68.253.253':139
'20#.#68.105.176':139
'20#.#68.41.51':139
'20#.#68.9.85':139
'20#.#68.218.162':139
'20#.#68.85.69':139
'20#.#68.198.250':139
'20#.#68.236.77':445
'20#.#68.246.236':445
'20#.#68.105.176':445
'20#.#68.254.217':445
'20#.#68.253.253':445
'20#.#68.218.162':445
'20#.#68.41.51':445
'20#.#68.198.250':445
'20#.#68.184.173':445
'20#.#68.85.69':445
'20#.#68.236.47':445
'20#.#68.232.178':445
'20#.#68.93.55':445
'20#.#68.24.79':139
'20#.#68.108.144':139
'20#.#68.211.177':139
'20#.#68.154.78':445
'20#.#68.28.93':445
'20#.#68.94.0':445
'20#.#68.36.56':445
'20#.#68.223.48':445
'20#.#68.14.183':139
'20#.#68.131.44':445
'20#.#68.93.17':139
'20#.#68.245.140':139
'20#.#68.17.94':139
'20#.#68.70.25':445
'20#.#68.246.216':445
'20#.#68.9.229':445
'20#.#68.181.160':445
'20#.#68.204.109':445
'20#.#68.0.97':139
'20#.#68.80.247':139
'20#.#68.7.100':139
'20#.#68.246.216':139
'20#.#68.9.229':139
'20#.#68.70.25':139
'20#.#68.110.184':139
'20#.#68.69.93':139
'20#.#68.191.248':139
'20#.#68.227.205':139
'20#.#68.248.227':139
'20#.#68.36.56':139
'20#.#68.223.48':139
'20#.#68.93.55':139
'20#.#68.14.183':445
'20#.#68.232.178':139
'20#.#68.236.47':139
'20#.#68.254.217':139
'20#.#68.28.93':139
'20#.#68.94.0':139
'20#.#68.154.78':139
'20#.#68.93.17':445
'20#.#68.248.227':445
'20#.#68.191.248':445
'20#.#68.227.205':445
'20#.#68.80.247':445
'20#.#68.7.100':445
'20#.#68.245.140':445
'20#.#68.17.94':445
'20#.#68.0.97':445
'20#.#68.110.184':445
'20#.#68.69.93':445
'20#.#68.175.126':139
'20#.#68.74.175':139
'20#.#68.33.117':139
'20#.#68.148.55':139
'20#.#68.157.243':139
'20#.#68.184.184':139
'20#.#68.72.217':139
'20#.#68.30.48':139
'20#.#68.19.116':139
'20#.#68.249.221':139
'20#.#68.143.253':139
'20#.#68.108.74':445
'20#.#68.128.129':445
'20#.#68.216.127':445
'20#.#68.154.46':445
'20#.#68.127.153':445
'20#.#68.115.103':445
'20#.#68.4.159':139
'20#.#68.54.195':445
'20#.#68.46.103':445
'20#.#68.61.117':445
'20#.#68.75.144':139
'20#.#68.177.113':139
'20#.#68.150.24':139
'20#.#68.0.113':139
'20#.#68.58.251':139
'20#.#68.131.209':139
'20#.#68.117.209':139
'20#.#68.124.109':139
'20#.#68.94.5':139
'20#.#68.79.248':139
'20#.#68.120.25':139
'20#.#68.128.197':139
'20#.#68.64.128':139
'20#.#68.180.249':139
'20#.#68.23.66':139
'20#.#68.189.126':139
'20#.#68.119.106':139
'20#.#68.217.27':139
'20#.#68.114.90':139
'20#.#68.90.8':139
'20#.#68.217.193':139
'20#.#68.24.79':445
'20#.#68.159.71':139
'20#.#68.211.177':445
'20#.#68.101.69':445
'20#.#68.108.144':445
'20#.#68.164.144':139
'20#.#68.251.164':139
'20#.#68.153.29':139
'20#.#68.31.246':139
'20#.#68.205.162':139
'20#.#68.219.76':445
'20#.#68.218.144':445
'20#.#68.51.218':445
'20#.#68.145.62':445
'20#.#68.9.85':445
'20#.#68.63.118':445
'20#.#68.45.240':445
'20#.#68.76.46':445
'20#.#68.240.82':445
'20#.#68.214.51':445
'20#.#68.114.142':445
'20#.#68.205.162':445
'20#.#68.153.29':445
'20#.#68.31.246':445
'20#.#68.115.103':139
'20#.#68.159.71':445
'20#.#68.144.208':445
'20#.#68.218.32':445
'20#.#68.42.186':445
'20#.#68.164.144':445
'20#.#68.251.164':445
'20#.#68.54.195':139
'20#.#68.154.46':139
'20#.#68.127.153':139
'20#.#68.218.32':139
'20#.#68.42.186':139
'20#.#68.144.208':139
'20#.#68.46.103':139
'20#.#68.61.117':139
'20#.#68.128.129':139
'20#.#68.216.127':139
'20#.#68.108.74':139
'20#.#68.24.38':445
'20#.#68.96.43':445
'20#.#68.2.66':445
'20#.#68.50.52':445
'20#.#68.129.223':445
'20#.#68.36.100':445
'20#.#68.104.134':445
'20#.#68.141.166':445
'20#.#68.250.20':445
'20#.#68.41.221':445
'20#.#68.78.100':445
'20#.#68.176.20':139
'20#.#68.165.211':139
'20#.#68.134.212':139
'20#.#68.22.59':139
'20#.#68.116.56':139
'20#.#68.124.102':139
'20#.#68.104.153':445
'20#.#68.140.50':139
'20#.#68.21.150':139
'20#.#68.178.122':139
'20#.#68.40.177':445
'20#.#68.71.40':445
'20#.#68.66.42':445
'20#.#68.80.253':445
'20#.#68.59.150':445
'20#.#68.123.187':445
'20#.#68.95.117':445
'20#.#68.79.1':445
'20#.#68.106.188':445
'20#.#68.80.56':445
'20#.#68.252.235':445
'20#.#68.13.250':445
'20#.#68.4.50':445
'20#.#68.125.184':445
'20#.#68.207.229':445
'20#.#68.67.3':445
'20#.#68.105.210':445
'20#.#68.236.138':445
'20#.#68.50.65':445
'20#.#68.157.215':445
'20#.#68.59.96':445
'20#.#68.125.184':139
'20#.#68.13.250':139
'20#.#68.67.3':139
'20#.#68.104.134':139
'20#.#68.207.229':139
'20#.#68.50.65':139
'20#.#68.105.210':139
'20#.#68.59.96':139
'20#.#68.4.50':139
'20#.#68.157.215':139
'20#.#68.36.100':139
'20#.#68.129.223':139
'20#.#68.2.66':139
'20#.#68.50.52':139
'20#.#68.78.100':139
'20#.#68.104.153':139
'20#.#68.41.221':139
'20#.#68.141.166':139
'20#.#68.250.20':139
'20#.#68.24.38':139
'20#.#68.96.43':139
'20#.#68.235.142':139
'20#.#68.247.55':139
'20#.#68.193.40':139
'20#.#68.95.117':139
'20#.#68.192.66':139
'20#.#68.6.203':139
'20#.#68.3.71':139
'20#.#68.247.26':139
'20#.#68.232.133':139
'20#.#68.150.252':139
'20#.#68.123.187':139
'20#.#68.59.150':139
'20#.#68.66.42':139
'20#.#68.80.253':139
'20#.#68.236.138':139
'20#.#68.252.235':139
'20#.#68.80.56':139
'20#.#68.79.1':139
'20#.#68.106.188':139
'20#.#68.40.177':139
'20#.#68.71.40':139
'20#.#68.28.108':445
'20#.#68.5.236':445
'20#.#68.136.203':139
'20#.#68.64.40':139
'20#.#68.0.167':139
'20#.#68.21.186':445
'20#.#68.51.21':445
'20#.#68.255.196':445
'20#.168.5.6':445
'20#.#68.110.19':445
'20#.#68.77.82':139
'20#.#68.113.61':139
'20#.#68.230.36':139
'20#.#68.239.72':139
'20#.#68.119.118':139
'20#.#68.198.226':139
'20#.#68.230.96':139
'20#.#68.18.161':139
'20#.#68.243.89':139
'20#.#68.123.230':139
'20#.#68.109.208':139
'20#.#68.77.82':445
'20#.#68.64.40':445
'20#.#68.18.161':445
'20#.#68.243.89':445
'20#.#68.230.96':445
'20#.#68.181.160':139
'20#.#68.204.109':139
'20#.#68.131.44':139
'20#.#68.0.167':445
'20#.#68.136.203':445
'20#.#68.109.208':445
'20#.#68.26.249':445
'20#.#68.119.118':445
'20#.#68.136.23':445
'20#.#68.200.29':445
'20#.#68.60.140':445
'20#.#68.230.36':445
'20#.#68.123.230':445
'20#.#68.113.61':445
'20#.#68.239.72':445
'20#.#68.198.226':445
'20#.#68.21.150':445
'20#.#68.178.122':445
'20#.#68.165.211':445
'20#.#68.134.212':445
'20#.#68.176.20':445
'20#.#68.104.153':9988
'20#.#68.50.52':9988
'20#.#68.78.100':9988
'20#.#68.140.50':445
'20#.#68.124.102':445
'20#.#68.116.56':445
'20#.#68.247.55':445
'20#.#68.232.133':445
'20#.#68.235.142':445
'20#.#68.192.66':445
'20#.#68.193.40':445
'20#.#68.3.71':445
'20#.#68.22.59':445
'20#.#68.6.203':445
'20#.#68.150.252':445
'20#.#68.247.26':445
'20#.#68.255.196':139
'20#.#68.21.186':139
'20#.#68.110.19':139
'20#.#68.5.236':139
'20#.168.5.6':139
'20#.#68.136.23':139
'20#.#68.26.249':139
'20#.#68.60.140':139
'20#.#68.51.21':139
'20#.#68.200.29':139
'20#.#68.28.108':139
'20#.#68.207.229':9988
'20#.#68.67.3':9988
'20#.#68.41.221':9988
'20#.#68.129.223':9988
'20#.#68.2.66':9988
'20#.#68.193.40':9988
'20#.#68.235.142':9988
'20#.#68.95.117':9988
'20#.#68.236.138':9988
'20#.#68.66.42':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней