Trojan.Starman.5445

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#11.234.241':139
'20#.#11.1.52':139
'20#.#11.151.164':139
'20#.#11.222.190':139
'20#.#11.112.181':139
'20#.#11.213.253':139
'20#.#11.61.24':139
'20#.#11.85.90':139
'20#.#11.122.37':139
'20#.#11.97.216':139
'20#.#11.56.157':139
'20#.#11.38.151':139
'20#.#11.178.213':139
'20#.#11.78.76':139
'20#.#11.125.217':139
'20#.#11.62.190':139
'20#.#11.12.36':139
'20#.#11.62.111':139
'20#.#11.104.118':139
'20#.#11.111.146':139
'20#.#11.51.171':139
'20#.#11.190.250':139
'20#.#11.70.173':445
'20#.#11.86.95':445
'20#.#11.72.86':445
'20#.#11.61.187':445
'20#.#11.62.48':445
'20#.#11.46.54':445
'20#.#11.45.118':445
'20#.#11.8.194':445
'20#.#11.192.18':445
'20#.#11.254.1':445
'20#.#11.65.20':445
'20#.#11.146.226':139
'20#.#11.177.238':139
'20#.#11.94.70':139
'20#.#11.29.125':139
'20#.#11.3.76':139
'20#.#11.250.100':445
'20#.#11.95.91':445
'20#.#11.143.208':445
'20#.#11.128.37':139
'20#.#11.138.24':445
'20#.#11.36.178':445
'20#.#11.75.163':445
'20#.#11.178.68':445
'20#.#11.132.203':445
'20#.#11.121.74':445
'20#.#11.24.207':139
'20#.#11.103.105':445
'20#.#11.206.200':139
'20#.#11.103.105':139
'20#.#11.242.67':139
'20#.#11.185.251':445
'20#.#11.118.125':445
'20#.#11.7.221':445
'20#.#11.170.210':445
'20#.#11.25.196':445
'20#.#11.43.43':445
'20#.#11.241.70':445
'20#.#11.111.238':445
'20#.#11.141.138':445
'20#.#11.225.114':445
'20#.#11.150.29':445
'20#.#11.242.67':445
'20#.#11.8.194':139
'20#.#11.46.54':139
'20#.#11.254.1':139
'20#.#11.86.95':139
'20#.#11.192.18':139
'20#.#11.45.98':139
'20#.#11.63.45':139
'20#.#11.11.254':139
'20#.#11.45.118':139
'20#.#11.48.242':139
'20#.#11.70.173':139
'20#.#11.143.208':139
'20#.#11.250.100':139
'20#.#11.138.24':139
'20#.#11.206.200':445
'20#.#11.24.207':445
'20#.#11.62.48':139
'20#.#11.72.86':139
'20#.#11.61.187':139
'20#.#11.95.91':139
'20#.#11.65.20':139
'20#.#11.48.242':445
'20#.#11.36.80':139
'20#.#11.195.35':139
'20#.#11.53.27':139
'20#.#11.234.251':139
'20#.#11.244.234':139
'20#.#11.191.45':139
'20#.#11.180.83':139
'20#.#11.177.143':139
'20#.#11.1.195':139
'20#.#11.59.118':139
'20#.#11.57.23':139
'20#.#11.12.227':139
'20#.#11.119.166':139
'20#.#11.41.251':139
'20#.#11.94.140':139
'20#.#11.177.225':139
'20#.#11.30.47':139
'20#.#11.244.212':139
'20#.#11.105.151':139
'20#.#11.41.6':139
'20#.#11.112.27':139
'20#.#11.18.21':139
'20#.#11.95.65':139
'20#.#11.162.84':139
'20#.#11.14.101':139
'20#.#11.148.185':139
'20#.#11.83.83':139
'20#.#11.77.42':139
'20#.#11.143.76':139
'20#.#11.42.45':139
'20#.#11.109.251':139
'20#.#11.107.13':139
'20#.#11.145.222':139
'20#.#11.59.25':139
'20#.#11.107.14':139
'20#.#11.147.169':139
'20#.#11.220.11':139
'20#.#11.197.8':139
'20#.#11.144.19':139
'20#.#11.98.249':139
'20#.#11.179.159':139
'20#.#11.121.107':139
'20#.#11.226.121':139
'20#.#11.222.190':445
'20#.#11.112.181':445
'20#.#11.56.157':445
'20#.#11.12.36':445
'20#.#11.62.111':445
'20#.#11.122.37':445
'20#.#11.97.216':445
'20#.#11.1.52':445
'20#.#11.151.164':445
'20#.#11.234.241':445
'20#.#11.104.118':445
'20#.#11.125.217':445
'20#.#11.62.190':445
'20#.#11.63.45':445
'20#.#11.11.254':445
'20#.#11.45.98':445
'20#.#11.111.146':445
'20#.#11.51.171':445
'20#.#11.178.213':445
'20#.#11.78.76':445
'20#.#11.38.151':445
'20#.#11.85.90':445
'20#.#11.67.196':445
'20#.#11.113.244':445
'20#.#11.72.24':445
'20#.#11.113.244':139
'20#.#11.217.144':139
'20#.#11.132.207':139
'20#.#11.140.133':139
'20#.#11.236.120':139
'20#.#11.217.144':445
'20#.#11.50.244':139
'20#.#11.67.196':139
'20#.#11.29.125':445
'20#.#11.3.76':445
'20#.#11.190.250':445
'20#.#11.213.253':445
'20#.#11.61.24':445
'20#.#11.128.37':445
'20#.#11.72.24':139
'20#.#11.177.238':445
'20#.#11.94.70':445
'20#.#11.146.226':445
'20#.#11.24.204':445
'20#.#11.20.239':445
'20#.#11.65.45':445
'20#.#11.14.9':445
'20#.#11.66.237':445
'20#.#11.100.159':445
'20#.#11.150.145':445
'20#.#11.146.147':445
'20#.#11.200.21':445
'20#.#11.189.127':445
'20#.#11.152.69':445
'20#.#11.48.18':139
'20#.#11.129.136':139
'20#.#11.30.75':139
'20#.#11.30.14':139
'20#.#11.74.252':139
'20#.#11.51.128':445
'20#.#11.147.12':445
'20#.#11.32.186':139
'20#.#11.208.24':139
'20#.#11.45.151':139
'20#.#11.18.165':445
'20#.#11.109.1':445
'20#.#11.12.240':445
'20#.#11.104.170':445
'20#.#11.37.68':445
'20#.#11.81.251':445
'20#.#11.91.24':445
'20#.#11.139.198':445
'20#.#11.74.9':445
'20#.#11.103.88':445
'20#.#11.4.205':445
'20#.#11.128.172':445
'20#.#11.234.27':445
'20#.#11.207.233':445
'20#.#11.28.34':445
'20#.#11.33.153':445
'20#.#11.34.33':445
'20#.#11.201.85':445
'20#.#11.134.215':445
'20#.#11.109.207':445
'20#.#11.84.208':445
'20#.#11.191.195':445
'20#.#11.33.153':139
'20#.#11.34.33':139
'20#.#11.18.165':139
'20#.#11.100.159':139
'20#.#11.150.145':139
'20#.#11.84.208':139
'20#.#11.191.195':139
'20#.#11.207.233':139
'20#.#11.28.34':139
'20#.#11.234.27':139
'20#.#11.146.147':139
'20#.#11.66.237':139
'20#.#11.152.69':139
'20#.#11.14.9':139
'20#.#11.147.12':139
'20#.#11.51.128':139
'20#.#11.200.21':139
'20#.#11.189.127':139
'20#.#11.20.239':139
'20#.#11.65.45':139
'20#.#11.24.204':139
'20#.#11.109.207':139
'20#.#11.31.251':139
'20#.#11.2.32':139
'20#.#11.251.172':139
'20#.#11.91.24':139
'20#.#11.139.198':139
'20#.#11.164.228':139
'20#.#11.82.144':139
'20#.#11.244.248':139
'20#.#11.211.105':139
'20#.#11.254.130':139
'20#.#11.74.9':139
'20#.#11.37.68':139
'20#.#11.81.251':139
'20#.#11.128.172':139
'20#.#11.201.85':139
'20#.#11.134.215':139
'20#.#11.103.88':139
'20#.#11.4.205':139
'20#.#11.12.240':139
'20#.#11.104.170':139
'20#.#11.109.1':139
'20#.#11.251.172':445
'20#.#11.121.74':139
'20#.#11.178.68':139
'20#.#11.132.203':139
'20#.#11.111.238':139
'20#.#11.185.251':139
'20#.#11.125.35':445
'20#.#11.10.34':445
'20#.#11.61.79':445
'20#.#11.36.178':139
'20#.#11.75.163':139
'20#.#11.241.70':139
'20#.#11.43.43':139
'20#.#11.170.210':139
'20#.#11.25.196':139
'20#.#11.97.18':139
'20#.#11.11.138':139
'20#.#11.150.29':139
'20#.#11.141.138':139
'20#.#11.225.114':139
'20#.#11.118.125':139
'20#.#11.7.221':139
'20#.#11.72.252':445
'20#.#11.62.120':445
'20#.#11.108.215':445
'20#.#11.90.154':445
'20#.#11.218.67':445
'20#.#11.103.156':445
'20#.#11.97.18':445
'20#.#11.11.138':445
'20#.#11.247.64':445
'20#.#11.1.76':445
'20#.#11.31.117':445
'20#.#11.51.226':445
'20#.#11.42.44':445
'20#.#11.73.170':445
'20#.#11.243.89':445
'20#.#11.15.73':445
'20#.#11.98.228':445
'20#.#11.214.196':445
'20#.#11.53.195':445
'20#.#11.148.139':445
'20#.#11.78.77':445
'20#.#11.51.16':445
'20#.#11.32.186':445
'20#.#11.152.69':9988
'20#.#11.45.151':445
'20#.#11.129.136':445
'20#.#11.208.24':445
'20#.#11.139.198':9988
'20#.#11.61.79':139
'20#.#11.74.9':9988
'20#.#11.65.45':9988
'20#.#11.191.195':9988
'20#.#11.48.18':445
'20#.#11.254.130':445
'20#.#11.244.248':445
'20#.#11.211.105':445
'20#.#11.31.251':445
'20#.#11.2.32':445
'20#.#11.74.252':445
'20#.#11.30.75':445
'20#.#11.30.14':445
'20#.#11.164.228':445
'20#.#11.82.144':445
'20#.#11.125.35':139
'20#.#11.90.154':139
'20#.#11.103.156':139
'20#.#11.218.67':139
'20#.#11.53.195':139
'20#.#11.51.226':139
'20#.#11.31.117':139
'20#.#11.247.64':139
'20#.#11.1.76':139
'20#.#11.62.120':139
'20#.#11.108.215':139
'20#.#11.214.196':139
'20#.#11.98.228':139
'20#.#11.243.89':139
'20#.#11.15.73':139
'20#.#11.10.34':139
'20#.#11.72.252':139
'20#.#11.51.16':139
'20#.#11.148.139':139
'20#.#11.78.77':139
'20#.#11.42.44':139
'20#.#11.73.170':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней