Trojan.Starman.5901

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#35.46.228':139
'20#.#35.55.47':139
'20#.#35.183.247':445
'20#.#35.37.215':445
'20#.#35.45.123':445
'20#.#35.184.241':139
'20#.#35.189.137':139
'20#.#35.113.16':139
'20#.#35.66.21':139
'20#.#35.162.84':139
'20#.#35.47.129':139
'20#.#35.171.247':445
'20#.#35.112.79':445
'20#.#35.149.33':445
'20#.#35.215.252':445
'20#.#35.31.216':445
'20#.#35.0.137':445
'20#.#35.145.119':445
'20#.#35.132.11':445
'20#.#35.185.119':445
'20#.#35.24.219':445
'20#.#35.109.129':445
'20#.#35.189.137':445
'20#.#35.113.16':445
'20#.#35.66.21':445
'20#.#35.162.84':445
'20#.#35.47.129':445
'20#.#35.107.96':445
'20#.#35.113.222':445
'20#.#35.211.144':445
'20#.#35.218.58':445
'20#.#35.45.13':445
'20#.#35.207.1':445
'20#.#35.218.58':139
'20#.#35.113.222':139
'20#.#35.207.1':139
'20#.#35.107.96':139
'20#.#35.45.13':139
'20#.#35.211.144':139
'20#.#35.55.47':445
'20#.#35.184.241':445
'20#.#35.46.228':445
'20#.#35.105.39':139
'20#.#35.195.95':139
'20#.#35.0.137':139
'20#.#35.24.219':139
'20#.#35.112.79':139
'20#.#35.149.33':139
'20#.#35.171.247':139
'20#.#35.109.129':139
'20#.#35.37.215':139
'20#.#35.45.123':139
'20#.#35.132.11':139
'20#.#35.185.119':139
'20#.#35.145.119':139
'20#.#35.68.117':139
'20#.#35.137.138':139
'20#.#35.36.195':139
'20#.#35.13.127':139
'20#.#35.59.12':139
'20#.#35.19.60':139
'20#.#35.215.252':139
'20#.#35.31.216':139
'20#.#35.93.25':139
'20#.#35.66.62':139
'20#.#35.83.37':139
'20#.#35.59.12':445
'20#.#35.36.195':445
'20#.#35.13.127':445
'20#.#35.81.81':445
'20#.#35.51.24':445
'20#.#35.68.117':445
'20#.#35.83.37':445
'20#.#35.93.25':445
'20#.#35.66.62':445
'20#.#35.137.138':445
'20#.#35.19.60':445
'20#.#35.216.154':445
'20#.#35.115.16':445
'20#.#35.130.114':445
'20#.#35.183.247':139
'20#.#35.11.71':445
'20#.#35.251.142':445
'20#.#35.5.206':445
'20#.#35.19.226':445
'20#.#35.184.49':445
'20#.#35.52.119':445
'20#.#35.89.172':445
'20#.#35.34.187':445
'20#.#35.38.213':445
'20#.#35.132.104':445
'20#.#35.75.249':445
'20#.#35.137.13':445
'20#.#35.150.111':445
'20#.#35.41.19':445
'20#.#35.9.186':445
'20#.#35.29.92':445
'20#.#35.58.105':445
'20#.#35.71.147':445
'20#.#35.106.78':445
'20#.#35.219.156':445
'20#.#35.127.206':445
'20#.#35.213.204':445
'20#.#35.29.205':445
'20#.#35.19.5':445
'20#.#35.235.228':445
'20#.#35.13.176':445
'20#.#35.14.155':445
'20#.#35.89.150':445
'20#.#35.20.55':445
'20#.#35.203.155':139
'20#.#35.80.241':139
'20#.#35.63.25':139
'20#.#35.189.241':139
'20#.#35.15.223':139
'20#.#35.213.110':139
'20#.#35.115.240':139
'20#.#35.184.129':139
'20#.#35.207.116':139
'20#.#35.126.76':139
'20#.#35.3.185':139
'20#.#35.224.170':445
'20#.#35.88.32':445
'20#.#35.76.67':445
'20#.#35.241.92':445
'20#.#35.103.113':445
'20#.#35.202.120':445
'20#.#35.134.220':139
'20#.#35.133.134':139
'20#.#35.122.176':139
'20#.#35.186.227':139
'20#.#35.212.203':139
'20#.#35.19.5':139
'20#.#35.89.150':139
'20#.#35.219.156':139
'20#.#35.127.206':139
'20#.#35.106.78':139
'20#.#35.20.55':139
'20#.#35.75.249':139
'20#.#35.137.13':139
'20#.#35.13.176':139
'20#.#35.14.155':139
'20#.#35.235.228':139
'20#.#35.191.123':139
'20#.#35.47.181':139
'20#.#35.101.206':139
'20#.#35.105.39':445
'20#.#35.195.95':445
'20#.#35.183.99':139
'20#.#35.213.204':139
'20#.#35.29.205':139
'20#.#35.251.173':139
'20#.#35.51.17':139
'20#.#35.98.231':139
'20#.#35.202.120':139
'20#.#35.101.206':445
'20#.#35.88.32':139
'20#.#35.76.67':139
'20#.#35.224.170':139
'20#.#35.191.123':445
'20#.#35.98.231':445
'20#.#35.251.173':445
'20#.#35.51.17':445
'20#.#35.47.181':445
'20#.#35.183.99':445
'20#.#35.150.111':139
'20#.#35.58.105':139
'20#.#35.38.213':139
'20#.#35.132.104':139
'20#.#35.34.187':139
'20#.#35.71.147':139
'20#.#35.241.92':139
'20#.#35.103.113':139
'20#.#35.9.186':139
'20#.#35.29.92':139
'20#.#35.41.19':139
'20#.#35.51.24':139
'20#.#35.37.133':445
'20#.#35.221.186':445
'20#.#35.22.139':445
'20#.#35.27.99':445
'20#.#35.175.128':445
'20#.#35.71.168':445
'20#.#35.50.186':445
'20#.#35.56.51':445
'20#.#35.62.166':445
'20#.#35.151.193':445
'20#.#35.20.78':445
'20#.#35.251.189':139
'20#.#35.105.251':139
'20#.#35.189.214':139
'20#.#35.37.207':139
'20#.#35.214.37':139
'20#.#35.123.213':139
'20#.#35.109.79':445
'20#.#35.128.219':445
'20#.#35.46.154':445
'20#.#35.122.37':139
'20#.#35.227.215':445
'20#.#35.89.89':445
'20#.#35.134.254':445
'20#.#35.135.3':445
'20#.#35.71.246':445
'20#.#35.182.71':445
'20#.#35.160.17':445
'20#.#35.201.208':445
'20#.#35.252.62':445
'20#.#35.131.36':445
'20#.#35.191.56':445
'20#.#35.106.110':445
'20#.#35.119.203':445
'20#.#35.39.94':445
'20#.#35.203.176':445
'20#.#35.127.32':445
'20#.#35.176.41':445
'20#.#35.89.97':445
'20#.#35.38.104':445
'20#.#35.40.43':445
'20#.#35.164.34':445
'20#.#35.157.71':445
'20#.#35.87.101':445
'20#.#35.56.51':139
'20#.#35.127.32':139
'20#.#35.50.186':139
'20#.#35.20.78':139
'20#.#35.62.166':139
'20#.#35.176.41':139
'20#.#35.89.97':139
'20#.#35.157.71':139
'20#.#35.39.94':139
'20#.#35.203.176':139
'20#.#35.119.203':139
'20#.#35.227.215':139
'20#.#35.128.219':139
'20#.#35.27.99':139
'20#.#35.109.79':139
'20#.#35.46.154':139
'20#.#35.175.128':139
'20#.#35.71.168':139
'20#.#35.151.193':139
'20#.#35.221.186':139
'20#.#35.22.139':139
'20#.#35.37.133':139
'20#.#35.252.62':139
'20#.#35.160.252':139
'20#.#35.201.208':139
'20#.#35.106.110':139
'20#.#35.131.36':139
'20#.#35.30.215':139
'20#.#35.1.171':139
'20#.#35.241.4':139
'20#.#35.92.9':139
'20#.#35.24.176':139
'20#.#35.9.200':139
'20#.#35.40.43':139
'20#.#35.71.246':139
'20#.#35.38.104':139
'20#.#35.87.101':139
'20#.#35.164.34':139
'20#.#35.182.71':139
'20#.#35.160.17':139
'20#.#35.191.56':139
'20#.#35.134.254':139
'20#.#35.135.3':139
'20#.#35.89.89':139
'20#.#35.140.41':139
'20#.#35.9.188':139
'20#.#35.15.208':139
'20#.#35.49.87':139
'20#.#35.229.38':139
'20#.#35.113.171':139
'20#.#35.127.93':445
'20#.#35.164.36':445
'20#.#35.94.65':445
'20#.#35.177.218':445
'20#.#35.66.58':445
'20#.#35.94.65':139
'20#.#35.127.93':139
'20#.#35.66.58':139
'20#.#35.254.237':445
'20#.#35.177.218':139
'20#.#35.164.36':139
'20#.#35.73.85':139
'20#.#35.107.130':139
'20#.#35.69.205':139
'20#.#35.186.229':139
'20#.#35.204.187':139
'20#.#35.115.16':139
'20#.#35.251.142':139
'20#.#35.216.154':139
'20#.#35.11.71':139
'20#.#35.130.114':139
'20#.#35.52.119':139
'20#.#35.19.226':139
'20#.#35.81.81':139
'20#.#35.5.206':139
'20#.#35.89.172':139
'20#.#35.184.49':139
'20#.#35.73.85':445
'20#.#35.107.130':445
'20#.#35.69.205':445
'20#.#35.186.229':445
'20#.#35.204.187':445
'20#.#35.49.87':445
'20#.#35.9.188':445
'20#.#35.113.171':445
'20#.#35.140.41':445
'20#.#35.229.38':445
'20#.#35.15.208':445
'20#.#35.227.215':9988
'20#.#35.175.128':9988
'20#.#35.122.37':445
'20#.#35.105.251':445
'20#.#35.123.213':445
'20#.#35.27.99':9988
'20#.#35.203.176':9988
'20#.#35.157.71':9988
'20#.#35.40.43':9988
'20#.#35.71.168':9988
'20#.#35.71.246':9988
'20#.#35.9.200':445
'20#.#35.92.9':445
'20#.#35.24.176':445
'20#.#35.160.252':445
'20#.#35.30.215':445
'20#.#35.1.171':445
'20#.#35.189.214':445
'20#.#35.251.189':445
'20#.#35.214.37':445
'20#.#35.241.4':445
'20#.#35.37.207':445
'20#.#35.190.121':445
'20#.#35.113.157':445
'20#.#35.254.237':139
'20#.#35.194.141':139
'20#.#35.159.44':139
'20#.#35.131.174':445
'20#.#35.194.141':445
'20#.#35.159.44':445
'20#.#35.23.69':445
'20#.#35.2.96':445
'20#.#35.88.33':445
'20#.#35.176.41':9988
'20#.#35.62.166':9988
'20#.#35.89.97':9988
'20#.#35.151.193':9988
'20#.#35.119.203':9988
'20#.#35.190.121':139
'20#.#35.88.33':139
'20#.#35.23.69':139
'20#.#35.2.96':139
'20#.#35.113.157':139
'20#.#35.131.174':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней