Trojan.Starman.5906

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#30.1.49':445
'20#.#30.67.93':445
'20#.#30.14.106':445
'20#.#30.48.124':445
'20#.#30.141.66':445
'20#.#30.58.143':445
'20#.#30.111.84':445
'20#.#30.83.70':445
'20#.#30.79.8':445
'20#.#30.91.152':445
'20#.#30.241.92':445
'20#.#30.130.106':445
'20#.#30.202.13':445
'20#.#30.78.201':445
'20#.#30.28.81':445
'20#.#30.136.136':445
'20#.#30.6.239':445
'20#.#30.92.157':445
'20#.#30.248.167':445
'20#.#30.23.18':445
'20#.#30.35.97':445
'20#.#30.4.100':445
'20#.#30.141.46':139
'20#.#30.40.219':139
'20#.#30.189.230':139
'20#.#30.119.240':139
'20#.#30.3.234':139
'20#.#30.169.11':139
'20#.#30.35.25':139
'20#.#30.91.175':139
'20#.#30.164.91':139
'20#.#30.105.231':139
'20#.#30.213.50':139
'20#.#30.81.5':139
'20#.#30.19.253':139
'20#.#30.86.86':139
'20#.#30.122.3':445
'20#.#30.86.122':445
'20#.#30.19.253':445
'20#.#30.232.85':445
'20#.#30.81.5':445
'20#.#30.232.85':139
'20#.#30.86.86':445
'20#.#30.83.70':139
'20#.#30.58.143':139
'20#.#30.91.152':139
'20#.#30.67.93':139
'20#.#30.79.8':139
'20#.#30.86.122':139
'20#.#30.21.177':445
'20#.#30.122.3':139
'20#.#30.111.84':139
'20#.#30.4.100':139
'20#.#30.1.49':139
'20#.#30.248.167':139
'20#.#30.6.239':139
'20#.#30.35.97':139
'20#.#30.202.13':139
'20#.#30.23.18':139
'20#.#30.141.66':139
'20#.#30.14.106':139
'20#.#30.48.124':139
'20#.#30.92.157':139
'20#.#30.241.92':139
'20#.#30.87.163':445
'20#.#30.215.191':445
'20#.#30.66.56':445
'20#.#30.21.20':445
'20#.#30.61.11':445
'20#.#30.36.107':445
'20#.#30.20.13':445
'20#.#30.10.90':445
'20#.#30.172.160':445
'20#.#30.146.204':445
'20#.#30.208.193':445
'20#.#30.10.143':445
'20#.#30.14.64':445
'20#.#30.252.200':445
'20#.#30.75.43':445
'20#.#30.23.174':445
'20#.#30.191.81':445
'20#.#30.145.65':445
'20#.#30.147.217':445
'20#.#30.68.202':445
'20#.#30.8.96':445
'20#.#30.188.220':445
'20#.#30.53.146':139
'20#.#30.149.192':445
'20#.#30.66.249':445
'20#.#30.28.4':445
'20#.#30.185.123':445
'20#.#30.3.109':445
'20#.#30.76.44':445
'20#.#30.176.220':445
'20#.#30.235.89':445
'20#.#30.26.245':445
'20#.#30.148.38':445
'20#.#30.30.20':445
'20#.#30.53.146':445
'20#.#30.37.198':445
'20#.#30.35.25':445
'20#.#30.91.175':445
'20#.#30.169.11':445
'20#.#30.145.26':445
'20#.#30.6.145':445
'20#.#30.59.145':445
'20#.#30.40.141':445
'20#.#30.39.167':445
'20#.#30.143.29':445
'20#.#30.63.87':445
'20#.#30.41.241':445
'20#.#30.47.218':445
'20#.#30.10.235':445
'20#.#30.250.199':445
'20#.#30.96.101':139
'20#.#30.198.96':139
'20#.#30.101.230':139
'20#.#30.73.112':445
'20#.#30.210.93':139
'20#.#30.246.93':445
'20#.#30.116.85':445
'20#.#30.71.91':445
'20#.#30.124.247':445
'20#.#30.40.116':445
'20#.#30.179.171':445
'20#.#30.243.191':445
'20#.#30.22.243':445
'20#.#30.191.151':445
'20#.#30.109.71':445
'20#.#30.151.109':445
'20#.#30.235.89':139
'20#.#30.76.44':139
'20#.#30.148.38':139
'20#.#30.66.249':139
'20#.#30.26.245':139
'20#.#30.179.171':139
'20#.#30.124.247':139
'20#.#30.40.116':139
'20#.#30.176.220':139
'20#.#30.143.29':139
'20#.#30.149.192':139
'20#.#30.59.145':139
'20#.#30.145.26':139
'20#.#30.39.167':139
'20#.#30.37.198':139
'20#.#30.40.141':139
'20#.#30.3.109':139
'20#.#30.28.4':139
'20#.#30.185.123':139
'20#.#30.6.145':139
'20#.#30.30.20':139
'20#.#30.116.85':139
'20#.#30.119.240':445
'20#.#30.3.234':445
'20#.#30.213.50':445
'20#.#30.41.241':139
'20#.#30.73.112':139
'20#.#30.164.91':445
'20#.#30.105.231':445
'20#.#30.40.219':445
'20#.#30.189.230':445
'20#.#30.141.46':445
'20#.#30.63.87':139
'20#.#30.191.151':139
'20#.#30.243.191':139
'20#.#30.151.109':139
'20#.#30.71.91':139
'20#.#30.109.71':139
'20#.#30.250.199':139
'20#.#30.47.218':139
'20#.#30.10.235':139
'20#.#30.22.243':139
'20#.#30.246.93':139
'20#.#30.130.106':139
'20#.#30.23.252':445
'20#.#30.161.223':445
'20#.#30.59.43':445
'20#.#30.198.193':445
'20#.#30.23.199':445
'20#.#30.117.3':445
'20#.#30.94.117':445
'20#.#30.38.13':445
'20#.#30.138.124':445
'20#.#30.13.236':445
'20#.#30.194.8':445
'20#.#30.158.145':139
'20#.#30.143.248':139
'20#.#30.155.213':139
'20#.#30.13.7':139
'20#.#30.107.70':139
'20#.#30.48.228':445
'20#.#30.9.33':445
'20#.#30.18.55':139
'20#.#30.144.245':139
'20#.#30.208.47':139
'20#.#30.22.94':445
'20#.#30.14.58':445
'20#.#30.2.171':445
'20#.#30.130.132':445
'20#.#30.247.24':445
'20#.#30.74.157':445
'20#.#30.35.20':445
'20#.#30.85.189':445
'20#.#30.38.206':445
'20#.#30.201.174':445
'20#.#30.98.5':445
'20#.#30.24.49':445
'20#.#30.168.157':445
'20#.#30.130.168':445
'20#.#30.157.86':445
'20#.#30.237.21':445
'20#.#30.211.104':445
'20#.#30.135.197':445
'20#.#30.52.36':445
'20#.#30.199.243':445
'20#.#30.1.133':445
'20#.#30.127.73':445
'20#.#30.237.21':139
'20#.#30.211.104':139
'20#.#30.22.94':139
'20#.#30.117.3':139
'20#.#30.94.117':139
'20#.#30.1.133':139
'20#.#30.127.73':139
'20#.#30.130.168':139
'20#.#30.157.86':139
'20#.#30.168.157':139
'20#.#30.38.13':139
'20#.#30.198.193':139
'20#.#30.23.199':139
'20#.#30.194.8':139
'20#.#30.48.228':139
'20#.#30.9.33':139
'20#.#30.138.124':139
'20#.#30.13.236':139
'20#.#30.161.223':139
'20#.#30.59.43':139
'20#.#30.23.252':139
'20#.#30.199.243':139
'20#.#30.64.205':139
'20#.#30.154.75':139
'20#.#30.65.138':139
'20#.#30.35.20':139
'20#.#30.85.189':139
'20#.#30.143.100':139
'20#.#30.161.94':139
'20#.#30.100.203':139
'20#.#30.24.46':139
'20#.#30.187.211':139
'20#.#30.38.206':139
'20#.#30.247.24':139
'20#.#30.74.157':139
'20#.#30.24.49':139
'20#.#30.135.197':139
'20#.#30.52.36':139
'20#.#30.201.174':139
'20#.#30.98.5':139
'20#.#30.2.171':139
'20#.#30.130.132':139
'20#.#30.14.58':139
'20#.#30.65.138':445
'20#.#30.196.245':445
'20#.#30.32.225':445
'20#.#30.245.140':445
'20#.#30.32.225':139
'20#.#30.51.153':139
'20#.#30.23.174':139
'20#.#30.191.81':139
'20#.#30.87.163':139
'20#.#30.51.153':445
'20#.#30.21.177':139
'20#.#30.196.245':139
'20#.#30.0.175':445
'20#.#30.2.152':445
'20#.#30.40.218':445
'20#.#30.128.2':445
'20#.#30.84.105':445
'20#.#30.39.225':445
'20#.#30.245.140':139
'20#.#30.49.123':445
'20#.#30.196.141':445
'20#.#30.39.163':445
'20#.#30.75.43':139
'20#.#30.208.193':139
'20#.#30.172.160':139
'20#.#30.146.204':139
'20#.#30.215.191':139
'20#.#30.66.56':139
'20#.#30.136.136':139
'20#.#30.78.201':139
'20#.#30.28.81':139
'20#.#30.20.13':139
'20#.#30.10.90':139
'20#.#30.21.20':139
'20#.#30.188.220':139
'20#.#30.68.202':139
'20#.#30.8.96':139
'20#.#30.14.64':139
'20#.#30.252.200':139
'20#.#30.61.11':139
'20#.#30.36.107':139
'20#.#30.10.143':139
'20#.#30.145.65':139
'20#.#30.147.217':139
'20#.#30.18.55':445
'20#.#30.201.174':9988
'20#.#30.208.47':445
'20#.#30.143.248':445
'20#.#30.144.245':445
'20#.#30.23.252':9988
'20#.#30.13.236':9988
'20#.#30.130.132':9988
'20#.#30.237.21':9988
'20#.#30.22.94':9988
'20#.#30.158.145':445
'20#.#30.187.211':445
'20#.#30.100.203':445
'20#.#30.24.46':445
'20#.#30.64.205':445
'20#.#30.154.75':445
'20#.#30.107.70':445
'20#.#30.155.213':445
'20#.#30.13.7':445
'20#.#30.143.100':445
'20#.#30.161.94':445
'20#.#30.38.13':9988
'20#.#30.40.218':139
'20#.#30.0.175':139
'20#.#30.84.105':139
'20#.#30.14.58':9988
'20#.#30.128.2':139
'20#.#30.49.123':139
'20#.#30.39.225':139
'20#.#30.39.163':139
'20#.#30.2.152':139
'20#.#30.196.141':139
'20#.#30.23.199':9988
'20#.#30.98.5':9988
'20#.#30.194.8':9988
'20#.#30.38.206':9988
'20#.#30.198.193':9988
'20#.#30.247.24':9988
'20#.#30.138.124':9988
'20#.#30.9.33':9988
'20#.#30.48.228':9988
'20#.#30.117.3':9988
'20#.#30.161.223':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней