Trojan.Starman.5417

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#40.102.165':139
'20#.#40.236.87':139
'20#.#40.86.19':139
'20#.#40.90.236':139
'20#.#40.65.91':139
'20#.#40.121.44':139
'20#.#40.199.181':139
'20#.#40.59.199':139
'20#.#40.10.60':139
'20#.#40.160.224':139
'20#.#40.36.137':139
'20#.#40.181.96':139
'20#.#40.80.249':445
'20#.#40.6.185':445
'20#.#40.170.101':445
'20#.#40.123.7':445
'20#.#40.250.137':445
'20#.#40.155.131':445
'20#.#40.143.187':139
'20#.#40.178.27':139
'20#.#40.29.119':139
'20#.#40.129.171':445
'20#.#40.155.129':445
'20#.#40.117.155':139
'20#.#40.93.242':139
'20#.#40.37.29':139
'20#.#40.167.36':139
'20#.#40.78.150':139
'20#.#40.160.86':139
'20#.#40.123.172':139
'20#.#40.143.187':445
'20#.#40.178.27':445
'20#.#40.29.119':445
'20#.#40.29.104':139
'20#.#40.222.26':139
'20#.#40.117.155':445
'20#.#40.209.1':139
'20#.#40.198.206':139
'20#.#40.131.193':139
'20#.#40.32.10':139
'20#.#40.38.144':139
'20#.#40.19.118':139
'20#.#40.188.10':139
'20#.#40.147.178':139
'20#.#40.50.221':139
'20#.#40.69.186':139
'20#.#40.21.73':139
'20#.#40.5.212':139
'20#.#40.126.198':445
'20#.#40.79.15':445
'20#.#40.70.79':445
'20#.#40.98.170':445
'20#.#40.247.213':445
'20#.#40.75.88':445
'20#.#40.15.76':445
'20#.#40.54.137':445
'20#.#40.85.153':445
'20#.#40.152.71':445
'20#.#40.4.82':445
'20#.#40.198.151':445
'20#.#40.100.71':445
'20#.#40.47.201':445
'20#.#40.204.254':445
'20#.#40.162.20':445
'20#.#40.220.193':445
'20#.#40.115.166':445
'20#.#40.106.155':445
'20#.#40.120.243':445
'20#.#40.93.31':445
'20#.#40.210.93':445
'20#.#40.195.162':445
'20#.#40.55.191':445
'20#.#40.63.33':445
'20#.#40.170.101':139
'20#.#40.129.171':139
'20#.#40.155.129':139
'20#.#40.155.131':139
'20#.#40.80.249':139
'20#.#40.6.185':139
'20#.#40.95.26':445
'20#.#40.80.246':445
'20#.#40.138.68':445
'20#.#40.91.65':445
'20#.#40.155.223':445
'20#.#40.33.156':445
'20#.#40.91.65':139
'20#.#40.155.223':139
'20#.#40.33.156':139
'20#.#40.24.39':445
'20#.#40.57.223':445
'20#.#40.221.57':445
'20#.#40.126.198':139
'20#.#40.123.7':139
'20#.#40.250.137':139
'20#.#40.95.26':139
'20#.#40.80.246':139
'20#.#40.138.68':139
'20#.#40.90.236':445
'20#.#40.100.4':139
'20#.#40.16.137':139
'20#.#40.123.65':139
'20#.#40.153.6':139
'20#.#40.86.153':139
'20#.#40.141.27':139
'20#.#40.49.6':139
'20#.#40.238.64':139
'20#.#40.9.240':139
'20#.#40.48.203':139
'20#.#40.235.126':139
'20#.#40.233.167':139
'20#.#40.87.176':445
'20#.#40.158.237':445
'20#.#40.17.206':445
'20#.#40.39.156':445
'20#.#40.194.156':445
'20#.#40.123.119':445
'20#.#40.94.41':445
'20#.#40.14.177':445
'20#.#40.55.139':445
'20#.#40.186.90':445
'20#.#40.120.186':445
'20#.#40.170.125':445
'20#.#40.66.5':139
'20#.#40.85.66':139
'20#.#40.228.1':139
'20#.#40.82.153':139
'20#.#40.85.69':139
'20#.#40.4.243':139
'20#.#40.16.75':139
'20#.#40.115.16':139
'20#.#40.157.125':139
'20#.#40.97.73':139
'20#.#40.164.236':139
'20#.#40.75.92':139
'20#.#40.89.78':139
'20#.#40.173.66':139
'20#.#40.69.173':139
'20#.#40.185.132':139
'20#.#40.247.211':139
'20#.#40.60.5':139
'20#.#40.74.176':139
'20#.#40.117.223':139
'20#.#40.2.156':139
'20#.#40.114.92':139
'20#.#40.254.32':139
'20#.#40.199.62':139
'20#.#40.104.123':445
'20#.#40.198.206':445
'20#.#40.131.193':445
'20#.#40.69.186':445
'20#.#40.38.144':445
'20#.#40.19.118':445
'20#.#40.209.1':445
'20#.#40.147.178':445
'20#.#40.50.221':445
'20#.#40.78.150':445
'20#.#40.21.73':445
'20#.#40.5.212':445
'20#.#40.188.10':445
'20#.#40.236.87':445
'20#.#40.86.19':445
'20#.#40.160.224':445
'20#.#40.65.91':445
'20#.#40.121.44':445
'20#.#40.102.165':445
'20#.#40.59.199':445
'20#.#40.10.60':445
'20#.#40.32.10':445
'20#.#40.36.137':445
'20#.#40.181.96':445
'20#.#40.199.181':445
'20#.#40.17.206':139
'20#.#40.186.90':139
'20#.#40.120.186':139
'20#.#40.123.119':139
'20#.#40.87.176':139
'20#.#40.158.237':139
'20#.#40.55.139':139
'20#.#40.217.96':445
'20#.#40.52.192':445
'20#.#40.170.125':139
'20#.#40.94.41':139
'20#.#40.14.177':139
'20#.#40.37.29':445
'20#.#40.167.36':445
'20#.#40.29.104':445
'20#.#40.160.86':445
'20#.#40.123.172':445
'20#.#40.93.242':445
'20#.#40.104.123':139
'20#.#40.39.156':139
'20#.#40.194.156':139
'20#.#40.222.26':445
'20#.#40.217.96':139
'20#.#40.52.192':139
'20#.#40.253.20':445
'20#.#40.155.215':445
'20#.#40.16.97':445
'20#.#40.131.63':445
'20#.#40.243.148':445
'20#.#40.68.243':445
'20#.#40.138.146':445
'20#.#40.171.138':445
'20#.#40.208.81':445
'20#.#40.124.203':445
'20#.#40.159.201':445
'20#.#40.25.139':445
'20#.#40.181.243':445
'20#.#40.246.17':445
'20#.#40.37.246':445
'20#.#40.171.222':139
'20#.#40.147.189':139
'20#.#40.170.187':445
'20#.#40.111.205':445
'20#.#40.129.84':445
'20#.#40.194.42':445
'20#.#40.189.37':445
'20#.#40.9.98':445
'20#.#40.192.247':445
'20#.#40.69.62':445
'20#.#40.167.28':445
'20#.#40.44.232':445
'20#.#40.177.116':445
'20#.#40.164.232':445
'20#.#40.44.42':445
'20#.#40.122.136':445
'20#.#40.91.191':445
'20#.#40.35.201':445
'20#.#40.81.195':445
'20#.#40.231.51':445
'20#.#40.62.41':445
'20#.#40.186.238':445
'20#.#40.243.186':445
'20#.#40.72.243':445
'20#.#40.8.184':445
'20#.#40.10.191':445
'20#.#40.238.10':445
'20#.#40.235.15':445
'20#.#40.198.69':445
'20#.#40.222.111':445
'20#.#40.12.60':445
'20#.#40.23.209':445
'20#.#40.210.103':445
'20#.#40.147.164':139
'20#.#40.16.97':139
'20#.#40.124.203':139
'20#.#40.159.201':139
'20#.#40.68.243':139
'20#.#40.253.20':139
'20#.#40.155.215':139
'20#.#40.208.81':139
'20#.#40.8.184':139
'20#.#40.10.191':139
'20#.#40.25.139':139
'20#.#40.138.146':139
'20#.#40.171.138':139
'20#.#40.37.246':139
'20#.#40.189.37':139
'20#.#40.9.98':139
'20#.#40.170.187':139
'20#.#40.181.243':139
'20#.#40.246.17':139
'20#.#40.194.42':139
'20#.#40.131.63':139
'20#.#40.243.148':139
'20#.#40.192.247':139
'20#.#40.111.205':139
'20#.#40.129.84':139
'20#.#40.44.232':139
'20#.#40.81.195':139
'20#.#40.231.51':139
'20#.#40.44.42':139
'20#.#40.69.62':139
'20#.#40.167.28':139
'20#.#40.35.201':139
'20#.#40.157.237':139
'20#.#40.164.51':139
'20#.#40.62.41':139
'20#.#40.122.136':139
'20#.#40.91.191':139
'20#.#40.72.243':139
'20#.#40.12.60':139
'20#.#40.23.209':139
'20#.#40.238.10':139
'20#.#40.186.238':139
'20#.#40.243.186':139
'20#.#40.222.111':139
'20#.#40.177.116':139
'20#.#40.164.232':139
'20#.#40.210.103':139
'20#.#40.235.15':139
'20#.#40.198.69':139
'20#.#40.157.237':445
'20#.#40.47.201':139
'20#.#40.204.254':139
'20#.#40.162.20':139
'20#.#40.220.193':139
'20#.#40.115.166':139
'20#.#40.106.155':139
'20#.#40.120.243':139
'20#.#40.93.31':139
'20#.#40.210.93':139
'20#.#40.195.162':139
'20#.#40.55.191':139
'20#.#40.63.33':139
'20#.#40.171.156':139
'20#.#40.183.126':139
'20#.#40.242.241':139
'20#.#40.131.32':445
'20#.#40.39.104':445
'20#.#40.12.253':445
'20#.#40.94.197':139
'20#.#40.27.48':139
'20#.#40.168.62':139
'20#.#40.195.229':139
'20#.#40.185.147':139
'20#.#40.25.172':139
'20#.#40.171.156':445
'20#.#40.183.126':445
'20#.#40.242.241':445
'20#.#40.24.39':139
'20#.#40.57.223':139
'20#.#40.221.57':139
'20#.#40.94.197':445
'20#.#40.27.48':445
'20#.#40.168.62':445
'20#.#40.195.229':445
'20#.#40.185.147':445
'20#.#40.25.172':445
'20#.#40.79.15':139
'20#.#40.70.79':139
'20#.#40.98.170':139
'20#.#40.247.213':139
'20#.#40.75.88':139
'20#.#40.15.76':139
'20#.#40.54.137':139
'20#.#40.85.153':139
'20#.#40.152.71':139
'20#.#40.4.82':139
'20#.#40.198.151':139
'20#.#40.100.71':139
'20#.#40.139.136':445
'20#.#40.159.201':9988
'20#.#40.138.146':9988
'20#.#40.25.139':9988
'20#.#40.253.20':9988
'20#.#40.155.215':9988
'20#.#40.124.203':9988
'20#.#40.164.232':9988
'20#.#40.59.118':139
'20#.#40.120.80':139
'20#.#40.208.81':9988
'20#.#40.222.111':9988
'20#.#40.44.42':9988
'20#.#40.147.189':445
'20#.#40.181.243':9988
'20#.#40.170.187':9988
'20#.#40.164.51':445
'20#.#40.147.164':445
'20#.#40.171.222':445
'20#.#40.194.42':9988
'20#.#40.131.63':9988
'20#.#40.68.243':9988
'20#.#40.246.17':9988
'20#.#40.111.205':9988
'20#.#40.129.84':9988
'20#.#40.61.103':445
'20#.#40.44.214':445
'20#.#40.248.44':445
'20#.#40.12.253':139
'20#.#40.59.118':445
'20#.#40.120.80':445
'20#.#40.202.101':445
'20#.#40.139.213':445
'20#.#40.73.134':445
'20#.#40.44.248':445
'20#.#40.36.232':445
'20#.#40.102.94':445
'20#.#40.44.248':139
'20#.#40.36.232':139
'20#.#40.102.94':139
'20#.#40.61.103':139
'20#.#40.44.214':139
'20#.#40.248.44':139
'20#.#40.139.136':139
'20#.#40.131.32':139
'20#.#40.39.104':139
'20#.#40.202.101':139
'20#.#40.139.213':139
'20#.#40.73.134':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней