Trojan.Starman.5804

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#16.125.241':445
'20#.#16.159.210':445
'20#.#16.33.205':445
'20#.#16.255.185':445
'20#.#16.51.192':445
'20#.#16.180.220':445
'20#.#16.28.185':445
'20#.#16.246.78':445
'20#.#16.55.50':445
'20#.#16.15.118':445
'20#.#16.163.28':445
'20#.#16.45.114':445
'20#.#16.111.180':445
'20#.#16.52.182':139
'20#.#16.112.190':139
'20#.#16.105.92':139
'20#.#16.209.184':139
'20#.#16.159.153':139
'20#.#16.115.176':139
'20#.#16.243.19':445
'20#.#16.109.130':445
'20#.#16.44.117':445
'20#.#16.16.252':445
'20#.#16.2.117':445
'20#.#16.94.123':445
'20#.#16.130.186':445
'20#.#16.124.138':445
'20#.#16.71.97':139
'20#.#16.53.71':139
'20#.#16.35.53':139
'20#.#16.154.201':139
'20#.#16.252.154':139
'20#.#16.83.237':139
'20#.#16.229.221':139
'20#.#16.67.83':139
'20#.#16.254.96':139
'20#.#16.174.136':139
'20#.#16.136.139':139
'20#.#16.7.36':139
'20#.#16.6.163':139
'20#.#16.209.184':445
'20#.#16.159.153':445
'20#.#16.115.176':445
'20#.#16.130.169':445
'20#.#16.253.168':445
'20#.#16.75.25':445
'20#.#16.52.182':445
'20#.#16.57.124':139
'20#.#16.62.35':139
'20#.#16.222.160':139
'20#.#16.112.190':445
'20#.#16.105.92':445
'20#.#16.126.145':139
'20#.#16.12.59':445
'20#.#16.208.217':445
'20#.#16.45.204':445
'20#.#16.26.79':445
'20#.#16.35.41':445
'20#.#16.103.48':445
'20#.#16.108.46':445
'20#.#16.235.112':445
'20#.#16.84.235':445
'20#.#16.19.84':445
'20#.#16.114.61':445
'20#.#16.229.95':445
'20#.#16.107.192':445
'20#.#16.84.235':139
'20#.#16.19.84':139
'20#.#16.85.72':139
'20#.#16.229.95':139
'20#.#16.107.192':139
'20#.#16.235.112':139
'20#.#16.151.99':139
'20#.#16.4.51':445
'20#.#16.155.11':445
'20#.#16.132.164':445
'20#.#16.26.239':139
'20#.#16.38.181':445
'20#.#16.149.38':445
'20#.#16.85.72':445
'20#.#16.163.28':139
'20#.#16.45.114':139
'20#.#16.111.180':139
'20#.#16.159.210':139
'20#.#16.33.205':139
'20#.#16.28.185':139
'20#.#16.246.78':139
'20#.#16.130.169':139
'20#.#16.253.168':139
'20#.#16.75.25':139
'20#.#16.55.50':139
'20#.#16.15.118':139
'20#.#16.124.138':139
'20#.#16.2.117':139
'20#.#16.94.123':139
'20#.#16.130.186':139
'20#.#16.151.99':445
'20#.#16.26.239':445
'20#.#16.243.19':139
'20#.#16.109.130':139
'20#.#16.51.192':139
'20#.#16.180.220':139
'20#.#16.125.241':139
'20#.#16.44.117':139
'20#.#16.16.252':139
'20#.#16.255.185':139
'20#.#16.220.237':445
'20#.#16.2.56':445
'20#.#16.201.147':445
'20#.#16.94.209':445
'20#.#16.25.32':445
'20#.#16.172.31':445
'20#.#16.20.202':445
'20#.#16.109.210':445
'20#.#16.127.204':445
'20#.#16.244.121':445
'20#.#16.46.20':445
'20#.#16.127.139':445
'20#.#16.146.204':445
'20#.#16.170.56':445
'20#.#16.15.198':445
'20#.#16.147.100':445
'20#.#16.16.233':139
'20#.#16.22.26':139
'20#.#16.60.114':445
'20#.#16.186.10':445
'20#.#16.152.61':445
'20#.#16.183.254':445
'20#.#16.252.182':445
'20#.#16.28.241':445
'20#.#16.71.80':445
'20#.#16.254.52':445
'20#.#16.7.245':445
'20#.#16.134.74':139
'20#.#16.121.112':139
'20#.#16.253.60':139
'20#.#16.82.160':139
'20#.#16.64.39':139
'20#.#16.145.101':139
'20#.#16.85.153':139
'20#.#16.168.187':139
'20#.#16.1.97':139
'20#.#16.111.253':139
'20#.#16.74.83':139
'20#.#16.211.145':139
'20#.#16.21.174':139
'20#.#16.16.233':445
'20#.#16.22.26':445
'20#.#16.38.129':139
'20#.#16.19.167':445
'20#.#16.198.107':445
'20#.#16.81.30':445
'20#.#16.149.136':139
'20#.#16.151.112':139
'20#.#16.77.156':139
'20#.#16.184.193':139
'20#.#16.107.173':139
'20#.#16.220.57':139
'20#.#16.112.220':139
'20#.#16.7.36':445
'20#.#16.6.163':445
'20#.#16.67.83':445
'20#.#16.35.53':445
'20#.#16.229.221':445
'20#.#16.136.139':445
'20#.#16.254.96':445
'20#.#16.83.11':445
'20#.#16.49.89':445
'20#.#16.60.114':139
'20#.#16.174.136':445
'20#.#16.14.188':445
'20#.#16.98.14':445
'20#.#16.49.89':139
'20#.#16.126.145':445
'20#.#16.57.124':445
'20#.#16.14.188':139
'20#.#16.98.14':139
'20#.#16.83.11':139
'20#.#16.62.35':445
'20#.#16.83.237':445
'20#.#16.71.97':445
'20#.#16.53.71':445
'20#.#16.222.160':445
'20#.#16.154.201':445
'20#.#16.252.154':445
'20#.#16.170.56':139
'20#.#16.46.20':139
'20#.#16.127.139':139
'20#.#16.146.204':139
'20#.#16.2.56':139
'20#.#16.201.147':139
'20#.#16.20.202':139
'20#.#16.109.210':139
'20#.#16.19.167':139
'20#.#16.198.107':139
'20#.#16.81.30':139
'20#.#16.127.204':139
'20#.#16.244.121':139
'20#.#16.7.245':139
'20#.#16.28.241':139
'20#.#16.71.80':139
'20#.#16.254.52':139
'20#.#16.15.198':139
'20#.#16.147.100':139
'20#.#16.186.10':139
'20#.#16.152.61':139
'20#.#16.25.32':139
'20#.#16.172.31':139
'20#.#16.220.237':139
'20#.#16.183.254':139
'20#.#16.252.182':139
'20#.#16.94.209':139
'20#.#16.161.153':445
'20#.#16.204.252':445
'20#.#16.131.161':445
'20#.#16.44.100':445
'20#.#16.33.5':445
'20#.#16.27.122':445
'20#.#16.60.208':445
'20#.#16.214.100':445
'20#.#16.84.74':445
'20#.#16.80.219':445
'20#.#16.139.83':445
'20#.#16.66.42':445
'20#.#16.52.241':445
'20#.#16.249.206':445
'20#.#16.82.167':445
'20#.#16.34.233':445
'20#.#16.81.158':445
'20#.#16.11.214':445
'20#.#16.67.120':445
'20#.#16.102.106':445
'20#.#16.250.61':445
'20#.#16.10.240':445
'20#.#16.21.39':445
'20#.#16.246.126':445
'20#.#16.183.147':445
'20#.#16.61.184':445
'20#.#16.2.97':445
'20#.#16.251.165':445
'20#.#16.144.252':445
'20#.#16.112.128':445
'20#.#16.168.151':445
'20#.#16.125.175':445
'20#.#16.0.98':445
'20#.#16.178.49':445
'20#.#16.34.233':9988
'20#.#16.102.106':9988
'20#.#16.246.126':9988
'20#.#16.17.46':445
'20#.#16.146.71':445
'20#.#16.81.158':9988
'20#.#16.183.23':445
'20#.#16.255.116':445
'20#.#16.16.220':445
'20#.#16.197.38':445
'20#.#16.56.147':445
'20#.#16.221.89':445
'20#.#16.99.98':445
'20#.#16.236.22':445
'20#.#16.49.209':445
'20#.#16.219.36':445
'20#.#16.107.150':445
'20#.#16.44.199':445
'20#.#16.22.252':445
'20#.#16.33.5':139
'20#.#16.27.122':139
'20#.#16.204.252':139
'20#.#16.10.240':139
'20#.#16.21.39':139
'20#.#16.44.100':139
'20#.#16.161.153':139
'20#.#16.66.42':139
'20#.#16.214.100':139
'20#.#16.52.241':139
'20#.#16.131.161':139
'20#.#16.60.208':139
'20#.#16.139.83':139
'20#.#16.81.158':139
'20#.#16.162.247':139
'20#.#16.67.120':139
'20#.#16.61.48':139
'20#.#16.249.206':139
'20#.#16.11.214':139
'20#.#16.82.167':139
'20#.#16.183.147':139
'20#.#16.61.184':139
'20#.#16.250.61':139
'20#.#16.34.233':139
'20#.#16.102.106':139
'20#.#16.246.126':139
'20#.#16.84.74':139
'20#.#16.125.175':139
'20#.#16.0.98':139
'20#.#16.251.165':139
'20#.#16.49.209':139
'20#.#16.219.36':139
'20#.#16.168.151':139
'20#.#16.144.252':139
'20#.#16.146.71':139
'20#.#16.61.48':445
'20#.#16.162.247':445
'20#.#16.112.128':139
'20#.#16.178.49':139
'20#.#16.17.46':139
'20#.#16.56.147':139
'20#.#16.221.89':139
'20#.#16.183.23':139
'20#.#16.80.219':139
'20#.#16.2.97':139
'20#.#16.197.38':139
'20#.#16.255.116':139
'20#.#16.44.199':139
'20#.#16.22.252':139
'20#.#16.236.22':139
'20#.#16.16.220':139
'20#.#16.99.98':139
'20#.#16.107.150':139
'20#.#16.17.154':445
'20#.#16.29.227':445
'20#.#16.43.28':445
'20#.#16.198.34':445
'20#.#16.27.12':445
'20#.#16.1.245':445
'20#.#16.112.101':445
'20#.#16.27.206':445
'20#.#16.52.27':445
'20#.#16.224.81':445
'20#.#16.2.114':445
'20#.#16.108.17':445
'20#.#16.206.138':445
'20#.#16.216.139':139
'20#.#16.11.87':139
'20#.#16.242.73':139
'20#.#16.67.170':139
'20#.#16.84.139':139
'20#.#16.60.122':139
'20#.#16.120.242':139
'20#.#16.229.164':445
'20#.#16.176.11':445
'20#.#16.113.40':445
'20#.#16.1.108':139
'20#.#16.241.3':139
'20#.#16.233.105':139
'20#.#16.163.107':445
'20#.#16.155.11':139
'20#.#16.132.164':139
'20#.#16.26.79':139
'20#.#16.38.181':139
'20#.#16.149.38':139
'20#.#16.4.51':139
'20#.#16.35.41':139
'20#.#16.45.204':139
'20#.#16.108.46':139
'20#.#16.114.61':139
'20#.#16.103.48':139
'20#.#16.12.59':139
'20#.#16.208.217':139
'20#.#16.67.170':445
'20#.#16.84.139':445
'20#.#16.60.122':445
'20#.#16.44.174':445
'20#.#16.92.45':445
'20#.#16.47.57':445
'20#.#16.216.139':445
'20#.#16.1.108':445
'20#.#16.241.3':445
'20#.#16.233.105':445
'20#.#16.11.87':445
'20#.#16.242.73':445
'20#.#16.120.242':445
'20#.#16.145.13':139
'20#.#16.47.116':139
'20#.#16.44.73':139
'20#.#16.219.36':9988
'20#.#16.251.165':9988
'20#.#16.25.202':139
'20#.#16.75.105':139
'20#.#16.250.229':139
'20#.#16.25.202':445
'20#.#16.145.13':445
'20#.#16.51.89':139
'20#.216.8.9':139
'20#.#16.238.252':139
'20#.#16.21.39':9988
'20#.#16.161.153':9988
'20#.#16.131.161':9988
'20#.#16.183.147':9988
'20#.#16.61.184':9988
'20#.#16.250.61':9988
'20#.#16.66.42':9988
'20#.#16.107.150':9988
'20#.#16.22.252':9988
'20#.#16.236.22':9988
'20#.#16.214.100':9988
'20#.#16.84.74':9988
'20#.#16.80.219':9988
'20#.#16.47.116':445
'20#.#16.2.114':139
'20#.#16.108.17':139
'20#.#16.206.138':139
'20#.#16.29.227':139
'20#.#16.43.28':139
'20#.#16.112.101':139
'20#.#16.27.206':139
'20#.#16.44.174':139
'20#.#16.92.45':139
'20#.#16.47.57':139
'20#.#16.52.27':139
'20#.#16.224.81':139
'20#.#16.163.107':139
'20#.216.8.9':445
'20#.#16.238.252':445
'20#.#16.250.229':445
'20#.#16.44.73':445
'20#.#16.75.105':445
'20#.#16.51.89':445
'20#.#16.229.164':139
'20#.#16.27.12':139
'20#.#16.1.245':139
'20#.#16.17.154':139
'20#.#16.176.11':139
'20#.#16.113.40':139
'20#.#16.198.34':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней