Trojan.Starman.5415

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#12.63.24':445
'20#.#12.2.242':445
'20#.#12.178.165':445
'20#.#12.215.252':445
'20#.#12.81.23':445
'20#.#12.54.49':445
'20#.#12.71.189':445
'20#.#12.93.71':445
'20#.#12.10.143':445
'20#.#12.87.19':445
'20#.#12.5.28':445
'20#.#12.189.173':445
'20#.#12.4.136':445
'20#.#12.65.238':445
'20#.#12.0.133':445
'20#.#12.27.252':445
'20#.#12.17.118':445
'20#.#12.30.244':445
'20#.#12.215.33':445
'20#.#12.241.250':445
'20#.#12.76.242':445
'20#.#12.49.77':445
'20#.#12.9.53':445
'20#.#12.181.117':445
'20#.#12.250.180':445
'20#.#12.250.219':445
'20#.#12.156.189':139
'20#.#12.5.245':139
'20#.#12.14.130':139
'20#.#12.181.223':139
'20#.#12.177.223':139
'20#.#12.189.177':139
'20#.#12.212.105':139
'20#.#12.175.211':139
'20#.#12.101.175':139
'20#.#12.243.59':139
'20#.#12.110.1':139
'20#.#12.110.41':139
'20#.#12.104.17':445
'20#.#12.83.103':445
'20#.#12.174.249':445
'20#.#12.176.62':445
'20#.#12.57.28':445
'20#.#12.187.114':445
'20#.#12.248.65':445
'20#.#12.30.85':445
'20#.#12.87.198':445
'20#.#12.17.88':445
'20#.#12.96.144':445
'20#.#12.67.221':445
'20#.#12.198.175':445
'20#.#12.0.133':139
'20#.#12.27.252':139
'20#.#12.9.53':139
'20#.#12.30.244':139
'20#.#12.215.33':139
'20#.#12.65.238':139
'20#.#12.76.242':139
'20#.#12.49.77':139
'20#.#12.4.136':139
'20#.#12.181.117':139
'20#.#12.250.180':139
'20#.#12.241.250':139
'20#.#12.17.118':139
'20#.#12.127.13':445
'20#.#12.241.32':445
'20#.#12.170.101':445
'20#.#12.185.26':445
'20#.#12.11.185':445
'20#.#12.14.12':445
'20#.#12.76.79':445
'20#.#12.18.113':445
'20#.#12.48.53':445
'20#.#12.218.99':445
'20#.#12.150.50':445
'20#.#12.219.167':445
'20#.#12.215.252':139
'20#.#12.174.249':139
'20#.#12.176.62':139
'20#.#12.96.144':139
'20#.#12.187.114':139
'20#.#12.248.65':139
'20#.#12.83.103':139
'20#.#12.87.198':139
'20#.#12.17.88':139
'20#.#12.104.17':139
'20#.#12.67.221':139
'20#.#12.30.85':139
'20#.#12.198.175':139
'20#.#12.57.28':139
'20#.#12.2.242':139
'20#.#12.178.165':139
'20#.#12.87.19':139
'20#.#12.81.23':139
'20#.#12.54.49':139
'20#.#12.63.24':139
'20#.#12.93.71':139
'20#.#12.10.143':139
'20#.#12.250.219':139
'20#.#12.5.28':139
'20#.#12.189.173':139
'20#.#12.71.189':139
'20#.#12.112.105':445
'20#.#12.0.175':445
'20#.#12.144.56':445
'20#.#12.94.5':445
'20#.#12.183.155':445
'20#.#12.117.61':445
'20#.#12.90.65':445
'20#.#12.167.103':445
'20#.#12.106.167':445
'20#.#12.53.158':445
'20#.#12.59.245':445
'20#.#12.60.60':445
'20#.#12.231.67':445
'20#.#12.251.181':445
'20#.#12.39.251':445
'20#.#12.223.39':445
'20#.#12.119.177':445
'20#.#12.128.249':445
'20#.#12.252.145':445
'20#.#12.30.226':445
'20#.#12.5.129':445
'20#.#12.145.134':445
'20#.#12.160.178':445
'20#.#12.82.236':445
'20#.#12.246.26':445
'20#.#12.218.106':445
'20#.#12.100.89':139
'20#.#12.194.53':139
'20#.#12.2.25':139
'20#.#12.89.62':139
'20#.#12.3.178':139
'20#.#12.33.3':139
'20#.#12.151.36':139
'20#.#12.163.82':139
'20#.#12.239.52':139
'20#.#12.157.156':139
'20#.#12.157.47':139
'20#.#12.21.148':139
'20#.#12.120.99':445
'20#.#12.171.239':445
'20#.#12.143.213':445
'20#.#12.167.125':445
'20#.#12.79.218':445
'20#.#12.42.96':445
'20#.#12.21.167':445
'20#.#12.138.237':445
'20#.#12.159.203':445
'20#.#12.45.49':445
'20#.#12.107.81':445
'20#.#12.32.211':445
'20#.#12.237.150':445
'20#.#12.39.251':139
'20#.#12.223.39':139
'20#.#12.160.178':139
'20#.#12.128.249':139
'20#.#12.252.145':139
'20#.#12.251.181':139
'20#.#12.5.129':139
'20#.#12.145.134':139
'20#.#12.231.67':139
'20#.#12.82.236':139
'20#.#12.246.26':139
'20#.#12.30.226':139
'20#.#12.119.177':139
'20#.#12.156.189':445
'20#.#12.5.245':445
'20#.#12.14.130':445
'20#.#12.181.223':445
'20#.#12.177.223':445
'20#.#12.189.177':445
'20#.#12.212.105':445
'20#.#12.175.211':445
'20#.#12.101.175':445
'20#.#12.243.59':445
'20#.#12.110.1':445
'20#.#12.110.41':445
'20#.#12.94.5':139
'20#.#12.143.213':139
'20#.#12.167.125':139
'20#.#12.107.81':139
'20#.#12.42.96':139
'20#.#12.21.167':139
'20#.#12.171.239':139
'20#.#12.159.203':139
'20#.#12.45.49':139
'20#.#12.120.99':139
'20#.#12.32.211':139
'20#.#12.237.150':139
'20#.#12.138.237':139
'20#.#12.79.218':139
'20#.#12.0.175':139
'20#.#12.144.56':139
'20#.#12.53.158':139
'20#.#12.183.155':139
'20#.#12.117.61':139
'20#.#12.112.105':139
'20#.#12.167.103':139
'20#.#12.106.167':139
'20#.#12.218.106':139
'20#.#12.59.245':139
'20#.#12.60.60':139
'20#.#12.90.65':139
'20#.#12.200.241':445
'20#.#12.14.200':445
'20#.#12.213.14':445
'20#.#12.174.208':445
'20#.#12.246.238':445
'20#.#12.241.254':445
'20#.#12.3.213':445
'20#.#12.54.4':445
'20#.#12.47.91':445
'20#.#12.202.213':445
'20#.#12.27.203':445
'20#.#12.202.3':445
'20#.#12.210.170':445
'20#.#12.246.37':445
'20#.#12.120.12':445
'20#.#12.7.35':445
'20#.#12.220.138':445
'20#.#12.182.111':445
'20#.#12.29.113':445
'20#.#12.114.9':445
'20#.#12.200.113':445
'20#.#12.9.253':445
'20#.#12.236.65':445
'20#.#12.113.236':445
'20#.#12.41.76':445
'20#.#12.43.7':445
'20#.#12.80.139':445
'20#.#12.121.32':445
'20#.#12.20.129':445
'20#.#12.231.135':445
'20#.#12.121.231':445
'20#.#12.71.138':445
'20#.#12.8.142':445
'20#.#12.141.140':445
'20#.#12.79.95':445
'20#.#12.19.93':445
'20#.#12.8.176':445
'20#.#12.229.113':445
'20#.#12.22.139':445
'20#.#12.142.181':445
'20#.#12.75.143':445
'20#.#12.151.75':445
'20#.#12.233.67':445
'20#.#12.67.133':445
'20#.#12.182.67':445
'20#.#12.161.176':445
'20#.#12.244.171':445
'20#.#12.185.173':445
'20#.#12.171.203':445
'20#.#12.95.217':445
'20#.#12.225.172':445
'20#.#12.200.241':139
'20#.#12.14.200':139
'20#.#12.213.14':139
'20#.#12.174.208':139
'20#.#12.246.238':139
'20#.#12.241.254':139
'20#.#12.3.213':139
'20#.#12.54.4':139
'20#.#12.47.91':139
'20#.#12.202.213':139
'20#.#12.27.203':139
'20#.#12.202.3':139
'20#.#12.210.170':139
'20#.#12.246.37':139
'20#.#12.120.12':139
'20#.#12.7.35':139
'20#.#12.220.138':139
'20#.#12.182.111':139
'20#.#12.29.113':139
'20#.#12.114.9':139
'20#.#12.200.113':139
'20#.#12.9.253':139
'20#.#12.236.65':139
'20#.#12.113.236':139
'20#.#12.41.76':139
'20#.#12.43.7':139
'20#.#12.80.139':139
'20#.#12.121.32':139
'20#.#12.20.129':139
'20#.#12.231.135':139
'20#.#12.121.231':139
'20#.#12.71.138':139
'20#.#12.8.142':139
'20#.#12.141.140':139
'20#.#12.79.95':139
'20#.#12.19.93':139
'20#.#12.8.176':139
'20#.#12.229.113':139
'20#.#12.22.139':139
'20#.#12.142.181':139
'20#.#12.75.143':139
'20#.#12.151.75':139
'20#.#12.233.67':139
'20#.#12.67.133':139
'20#.#12.182.67':139
'20#.#12.161.176':139
'20#.#12.244.171':139
'20#.#12.185.173':139
'20#.#12.171.203':139
'20#.#12.95.217':139
'20#.#12.225.172':139
'20#.#12.44.73':445
'20#.#12.92.21':445
'20#.#12.157.153':445
'20#.#12.38.97':445
'20#.#12.83.128':445
'20#.#12.73.84':445
'20#.#12.160.118':445
'20#.#12.92.38':445
'20#.#12.144.91':445
'20#.#12.172.217':445
'20#.#12.139.150':445
'20#.#12.92.189':445
'20#.#12.43.167':445
'20#.#12.200.220':445
'20#.#12.41.230':445
'20#.#12.117.235':445
'20#.#12.4.210':445
'20#.#12.20.82':445
'20#.#12.154.174':445
'20#.#12.55.78':445
'20#.#12.24.44':445
'20#.#12.155.200':445
'20#.#12.88.63':445
'20#.#12.64.103':445
'20#.#12.163.192':445
'20#.#12.204.143':445
'20#.#12.127.13':139
'20#.#12.241.32':139
'20#.#12.170.101':139
'20#.#12.185.26':139
'20#.#12.11.185':139
'20#.#12.14.12':139
'20#.#12.76.79':139
'20#.#12.18.113':139
'20#.#12.48.53':139
'20#.#12.218.99':139
'20#.#12.150.50':139
'20#.#12.219.167':139
'20#.#12.30.47':445
'20#.#12.192.171':445
'20#.#12.156.192':445
'20#.#12.45.153':445
'20#.#12.28.98':445
'20#.#12.116.148':445
'20#.#12.154.178':445
'20#.#12.154.66':445
'20#.#12.2.154':445
'20#.#12.32.14':445
'20#.#12.120.142':445
'20#.#12.205.119':445
'20#.#12.122.243':445
'20#.#12.41.230':139
'20#.#12.117.235':139
'20#.#12.88.63':139
'20#.#12.20.82':139
'20#.#12.154.174':139
'20#.#12.200.220':139
'20#.#12.24.44':139
'20#.#12.155.200':139
'20#.#12.43.167':139
'20#.#12.64.103':139
'20#.#12.163.192':139
'20#.#12.55.78':139
'20#.#12.4.210':139
'20#.#12.174.208':9988
'20#.#12.246.238':9988
'20#.#12.202.213':9988
'20#.#12.29.113':9988
'20#.#12.220.138':9988
'20#.#12.182.111':9988
'20#.#12.67.133':9988
'20#.#12.182.67':9988
'20#.#12.71.138':9988
'20#.#12.27.203':9988
'20#.#12.47.91':9988
'20#.#12.233.67':9988
'20#.#12.38.97':139
'20#.#12.156.192':139
'20#.#12.45.153':139
'20#.#12.120.142':139
'20#.#12.116.148':139
'20#.#12.154.178':139
'20#.#12.192.171':139
'20#.#12.2.154':139
'20#.#12.32.14':139
'20#.#12.30.47':139
'20#.#12.205.119':139
'20#.#12.122.243':139
'20#.#12.154.66':139
'20#.#12.28.98':139
'20#.#12.92.21':139
'20#.#12.157.153':139
'20#.#12.172.217':139
'20#.#12.83.128':139
'20#.#12.73.84':139
'20#.#12.44.73':139
'20#.#12.92.38':139
'20#.#12.144.91':139
'20#.#12.204.143':139
'20#.#12.139.150':139
'20#.#12.92.189':139
'20#.#12.160.118':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней