Trojan.Starman.5639

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#18.139.236':445
'20#.#18.2.25':445
'20#.#18.30.189':445
'20#.#18.83.209':445
'20#.#18.210.89':445
'20#.#18.25.48':445
'20#.#18.242.139':445
'20#.#18.48.50':445
'20#.#18.188.8':445
'20#.#18.50.69':445
'20#.#18.199.0':445
'20#.#18.45.12':445
'20#.#18.154.32':139
'20#.#18.66.52':139
'20#.#18.64.99':139
'20#.#18.80.120':445
'20#.#18.128.138':445
'20#.#18.121.44':445
'20#.#18.60.214':445
'20#.#18.41.204':445
'20#.#18.198.117':445
'20#.#18.25.194':445
'20#.#18.59.147':445
'20#.#18.31.184':445
'20#.#18.148.102':445
'20#.#18.240.248':445
'20#.#18.212.216':445
'20#.#18.146.197':445
'20#.#18.216.147':445
'20#.#18.26.54':445
'20#.#18.155.85':445
'20#.#18.119.63':445
'20#.#18.113.119':445
'20#.#18.63.155':445
'20#.#18.13.210':445
'20#.#18.154.204':445
'20#.#18.208.177':445
'20#.#18.106.223':445
'20#.#18.73.69':445
'20#.#18.216.150':445
'20#.#18.102.100':445
'20#.#18.63.155':139
'20#.#18.119.63':139
'20#.#18.154.204':139
'20#.#18.198.117':139
'20#.#18.13.210':139
'20#.#18.73.69':139
'20#.#18.208.177':139
'20#.#18.102.100':139
'20#.#18.113.119':139
'20#.#18.216.150':139
'20#.#18.139.236':139
'20#.#18.2.25':139
'20#.#18.30.189':139
'20#.#18.83.209':139
'20#.#18.210.89':139
'20#.#18.25.48':139
'20#.#18.242.139':139
'20#.#18.48.50':139
'20#.#18.188.8':139
'20#.#18.50.69':139
'20#.#18.106.223':139
'20#.#18.149.113':139
'20#.#18.144.23':139
'20#.#18.122.166':139
'20#.#18.212.30':139
'20#.#18.166.212':139
'20#.#18.208.109':139
'20#.#18.248.179':139
'20#.#18.128.219':139
'20#.#18.41.141':139
'20#.#18.70.182':139
'20#.#18.25.194':139
'20#.#18.59.147':139
'20#.#18.31.184':139
'20#.#18.148.102':139
'20#.#18.240.248':139
'20#.#18.212.216':139
'20#.#18.146.197':139
'20#.#18.216.147':139
'20#.#18.26.54':139
'20#.#18.155.85':139
'20#.#18.212.30':445
'20#.#18.21.63':139
'20#.#18.3.201':139
'20#.#18.58.42':139
'20#.#18.252.60':139
'20#.#18.41.252':139
'20#.#18.8.126':139
'20#.#18.177.174':139
'20#.#18.127.224':139
'20#.#18.96.158':139
'20#.#18.71.96':139
'20#.#18.106.51':139
'20#.#18.70.84':139
'20#.#18.144.143':139
'20#.#18.34.175':139
'20#.#18.35.26':139
'20#.#18.216.222':139
'20#.#18.61.90':139
'20#.#18.146.19':139
'20#.#18.51.71':139
'20#.#18.22.61':139
'20#.#18.11.178':139
'20#.#18.28.219':445
'20#.#18.180.50':445
'20#.#18.32.192':445
'20#.#18.55.168':445
'20#.#18.46.106':445
'20#.#18.102.96':445
'20#.#18.124.102':445
'20#.#18.252.178':445
'20#.#18.25.80':445
'20#.#18.194.202':445
'20#.#18.57.7':445
'20#.#18.84.132':445
'20#.#18.196.97':445
'20#.#18.155.11':139
'20#.#18.39.175':445
'20#.#18.6.50':445
'20#.#18.8.181':445
'20#.#18.142.232':445
'20#.#18.185.158':445
'20#.#18.139.43':445
'20#.#18.196.97':139
'20#.#18.57.7':139
'20#.#18.39.175':139
'20#.#18.64.99':445
'20#.#18.154.32':445
'20#.#18.142.232':139
'20#.#18.6.50':139
'20#.#18.139.43':139
'20#.#18.84.132':139
'20#.#18.185.158':139
'20#.#18.144.23':445
'20#.#18.41.141':445
'20#.#18.149.113':445
'20#.#18.166.212':445
'20#.#18.122.166':445
'20#.#18.248.179':445
'20#.#18.66.52':445
'20#.#18.208.109':445
'20#.#18.70.182':445
'20#.#18.128.219':445
'20#.#18.8.181':139
'20#.#18.149.45':139
'20#.#18.203.67':139
'20#.#18.198.120':139
'20#.#18.39.140':139
'20#.#18.172.11':139
'20#.#18.64.4':139
'20#.#18.142.239':139
'20#.#18.4.58':139
'20#.#18.151.203':139
'20#.#18.23.123':139
'20#.#18.28.219':139
'20#.#18.180.50':139
'20#.#18.32.192':139
'20#.#18.55.168':139
'20#.#18.46.106':139
'20#.#18.102.96':139
'20#.#18.124.102':139
'20#.#18.252.178':139
'20#.#18.25.80':139
'20#.#18.194.202':139
'20#.#18.128.138':139
'20#.#18.169.107':445
'20#.#18.27.169':445
'20#.#18.107.21':445
'20#.#18.72.230':445
'20#.#18.21.73':445
'20#.#18.5.97':445
'20#.#18.211.104':445
'20#.#18.108.3':445
'20#.#18.150.27':445
'20#.#18.14.6':445
'20#.#18.172.159':139
'20#.#18.241.25':139
'20#.#18.129.112':139
'20#.#18.189.116':139
'20#.#18.2.190':139
'20#.#18.18.15':139
'20#.#18.20.69':139
'20#.#18.216.102':139
'20#.#18.74.248':139
'20#.#18.40.158':139
'20#.#18.37.38':445
'20#.#18.226.49':445
'20#.#18.102.124':445
'20#.#18.155.223':445
'20#.#18.12.6':445
'20#.#18.195.12':445
'20#.#18.14.21':445
'20#.#18.88.96':445
'20#.#18.52.11':445
'20#.#18.99.102':445
'20#.#18.128.99':445
'20#.#18.205.41':445
'20#.#18.41.137':445
'20#.#18.58.126':445
'20#.#18.244.249':445
'20#.#18.64.159':445
'20#.#18.87.61':445
'20#.#18.164.147':445
'20#.#18.144.93':445
'20#.#18.116.178':445
'20#.#18.217.16':445
'20#.#18.58.126':139
'20#.#18.205.41':139
'20#.#18.64.159':139
'20#.#18.37.38':139
'20#.#18.244.249':139
'20#.#18.144.93':139
'20#.#18.87.61':139
'20#.#18.217.16':139
'20#.#18.41.137':139
'20#.#18.116.178':139
'20#.#18.169.107':139
'20#.#18.27.169':139
'20#.#18.72.230':139
'20#.#18.107.21':139
'20#.#18.21.73':139
'20#.#18.5.97':139
'20#.#18.211.104':139
'20#.#18.108.3':139
'20#.#18.150.27':139
'20#.#18.14.6':139
'20#.#18.164.147':139
'20#.#18.120.14':139
'20#.#18.139.79':139
'20#.#18.53.48':139
'20#.#18.121.160':139
'20#.#18.78.208':139
'20#.#18.48.194':139
'20#.#18.115.211':139
'20#.#18.19.21':139
'20#.#18.231.86':139
'20#.#18.133.0':139
'20#.#18.226.49':139
'20#.#18.102.124':139
'20#.#18.155.223':139
'20#.#18.12.6':139
'20#.#18.195.12':139
'20#.#18.14.21':139
'20#.#18.88.96':139
'20#.#18.52.11':139
'20#.#18.99.102':139
'20#.#18.128.99':139
'20#.#18.121.160':445
'20#.#18.0.184':139
'20#.#18.206.84':445
'20#.#18.63.140':139
'20#.#18.206.111':139
'20#.#18.7.126':139
'20#.#18.37.232':445
'20#.#18.15.38':445
'20#.#18.38.196':445
'20#.#18.128.206':445
'20#.#18.231.20':445
'20#.#18.39.109':139
'20#.#18.83.232':139
'20#.#18.185.58':139
'20#.#18.116.14':139
'20#.#18.221.20':139
'20#.#18.235.117':139
'20#.#18.90.34':139
'20#.#18.50.32':139
'20#.#18.9.190':139
'20#.#18.188.240':139
'20#.#18.41.157':445
'20#.#18.0.184':445
'20#.#18.199.0':139
'20#.#18.63.140':445
'20#.#18.206.111':445
'20#.#18.7.126':445
'20#.#18.121.44':139
'20#.#18.80.120':139
'20#.#18.41.204':139
'20#.#18.45.12':139
'20#.#18.60.214':139
'20#.#18.39.109':445
'20#.#18.83.232':445
'20#.#18.185.58':445
'20#.#18.116.14':445
'20#.#18.221.20':445
'20#.#18.235.117':445
'20#.#18.90.34':445
'20#.#18.50.32':445
'20#.#18.9.190':445
'20#.#18.188.240':445
'20#.#18.241.25':445
'20#.#18.74.248':445
'20#.#18.172.159':445
'20#.#18.2.190':445
'20#.#18.129.112':445
'20#.#18.20.69':445
'20#.#18.21.73':9988
'20#.#18.18.15':445
'20#.#18.40.158':445
'20#.#18.216.102':445
'20#.#18.139.79':445
'20#.#18.231.86':445
'20#.#18.120.14':445
'20#.#18.78.208':445
'20#.#18.53.48':445
'20#.#18.115.211':445
'20#.#18.189.116':445
'20#.#18.48.194':445
'20#.#18.133.0':445
'20#.#18.19.21':445
'20#.#18.164.147':9988
'20#.#18.206.84':139
'20#.#18.128.206':139
'20#.#18.74.248':9988
'20#.#18.241.25':9988
'20#.#18.172.159':9988
'20#.#18.15.38':139
'20#.#18.41.157':139
'20#.#18.37.232':139
'20#.#18.231.20':139
'20#.#18.38.196':139
'20#.#18.52.11':9988
'20#.#18.102.124':9988
'20#.#18.226.49':9988
'20#.#18.12.6':9988
'20#.#18.155.223':9988
'20#.#18.231.86':9988
'20#.#18.133.0':9988
'20#.#18.120.14':9988
'20#.#18.99.102':9988
'20#.#18.128.99':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней