Trojan.Starman.5293

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#3.119.138':139
'20#.#3.8.184':139
'20#.#3.127.36':139
'20#.#3.73.26':139
'20#.#3.37.73':139
'20#.#3.170.177':139
'20#.#3.57.170':139
'20#.#3.75.112':139
'20#.#3.173.65':139
'20#.#3.51.158':139
'20#.#3.230.137':139
'20#.53.90.4':445
'20#.53.96.4':445
'20#.53.4.43':445
'20#.#3.135.202':445
'20#.#3.155.189':445
'20#.#3.25.122':139
'20#.#3.64.160':139
'20#.#3.30.195':139
'20#.#3.53.189':445
'20#.#3.12.91':139
'20#.#3.8.184':445
'20#.#3.173.65':445
'20#.#3.119.138':445
'20#.#3.37.73':445
'20#.#3.127.36':445
'20#.#3.57.170':445
'20#.#3.41.234':445
'20#.#3.170.177':445
'20#.#3.51.158':445
'20#.#3.75.112':445
'20#.#3.73.26':445
'20#.#3.234.250':139
'20#.#3.59.235':139
'20#.#3.75.144':139
'20#.#3.41.234':139
'20#.#3.3.153':139
'20#.#3.64.160':445
'20#.#3.230.137':445
'20#.#3.25.122':445
'20#.#3.12.91':445
'20#.#3.30.195':445
'20#.#3.74.62':445
'20#.53.4.43':139
'20#.53.90.4':139
'20#.#3.155.189':139
'20#.#3.74.62':139
'20#.#3.135.202':139
'20#.#3.137.228':445
'20#.#3.161.165':445
'20#.#3.107.72':445
'20#.53.96.4':139
'20#.#3.53.189':139
'20#.#3.14.172':139
'20#.#3.43.208':139
'20#.#3.82.124':139
'20#.#3.107.245':139
'20#.#3.172.135':139
'20#.#3.71.114':139
'20#.#3.225.124':139
'20#.#3.80.179':139
'20#.#3.152.218':139
'20#.#3.239.78':139
'20#.#3.218.127':139
'20#.#3.82.124':445
'20#.#3.239.78':445
'20#.#3.43.208':445
'20#.#3.71.114':445
'20#.#3.107.245':445
'20#.#3.80.179':445
'20#.#3.14.172':445
'20#.#3.225.124':445
'20#.#3.218.127':445
'20#.#3.152.218':445
'20#.#3.172.135':445
'20#.#3.108.73':445
'20#.#3.98.53':445
'20#.#3.85.118':445
'20#.53.4.99':445
'20#.#3.43.51':445
'20#.#3.73.197':445
'20#.#3.33.199':445
'20#.#3.26.162':445
'20#.#3.128.62':445
'20#.#3.85.219':445
'20#.#3.3.153':445
'20#.#3.140.132':445
'20#.#3.27.150':445
'20#.#3.91.27':445
'20#.#3.52.41':445
'20#.#3.238.51':445
'20#.#3.146.7':445
'20#.#3.46.29':445
'20#.#3.108.132':445
'20#.#3.244.161':445
'20#.#3.222.229':445
'20#.#3.30.101':445
'20#.#3.20.19':445
'20#.#3.33.30':445
'20#.#3.19.36':445
'20#.#3.75.98':445
'20#.#3.77.111':445
'20#.#3.13.171':445
'20#.#3.148.254':445
'20#.#3.25.120':445
'20#.#3.229.162':445
'20#.#3.17.230':445
'20#.#3.55.104':139
'20#.53.1.38':139
'20#.#3.36.69':139
'20#.#3.193.211':139
'20#.#3.87.194':139
'20#.#3.146.91':139
'20#.53.7.57':139
'20#.#3.28.168':139
'20#.#3.110.0':139
'20#.#3.193.222':139
'20#.#3.16.92':139
'20#.#3.231.50':139
'20#.#3.245.230':139
'20#.#3.50.129':139
'20#.#3.206.115':445
'20#.#3.129.111':139
'20#.#3.153.172':139
'20#.#3.146.20':139
'20#.#3.160.69':139
'20#.#3.12.213':139
'20#.#3.106.62':139
'20#.#3.139.84':445
'20#.#3.19.36':139
'20#.#3.20.19':139
'20#.#3.77.111':139
'20#.#3.139.84':139
'20#.#3.75.98':139
'20#.#3.25.120':139
'20#.#3.13.171':139
'20#.#3.17.230':139
'20#.#3.33.30':139
'20#.#3.229.162':139
'20#.#3.18.21':139
'20#.#3.198.60':139
'20#.#3.143.237':139
'20#.#3.59.235':445
'20#.#3.75.144':445
'20#.#3.234.250':445
'20#.#3.142.127':139
'20#.#3.249.19':139
'20#.#3.10.78':139
'20#.#3.146.27':139
'20#.#3.48.221':139
'20#.#3.143.237':445
'20#.#3.146.27':445
'20#.#3.198.60':445
'20#.#3.46.29':139
'20#.#3.206.115':139
'20#.#3.249.19':445
'20#.#3.18.21':445
'20#.#3.142.127':445
'20#.#3.48.221':445
'20#.#3.10.78':445
'20#.#3.146.7':139
'20#.#3.238.51':139
'20#.#3.91.27':139
'20#.#3.52.41':139
'20#.#3.148.254':139
'20#.#3.30.101':139
'20#.#3.222.229':139
'20#.#3.108.132':139
'20#.#3.244.161':139
'20#.#3.140.132':139
'20#.#3.27.150':139
'20#.#3.33.199':139
'20#.#3.175.126':445
'20#.#3.236.174':445
'20#.#3.126.214':445
'20#.#3.155.184':445
'20#.#3.51.218':445
'20#.#3.131.32':445
'20#.#3.235.92':445
'20#.#3.165.220':445
'20#.#3.182.181':445
'20#.#3.124.208':445
'20#.#3.254.151':445
'20#.53.6.85':139
'20#.#3.201.189':139
'20#.#3.5.254':139
'20#.#3.44.126':139
'20#.#3.67.203':139
'20#.#3.110.200':445
'20#.#3.151.191':445
'20#.#3.43.226':139
'20#.#3.93.33':139
'20#.#3.145.242':139
'20#.#3.173.197':445
'20#.#3.108.23':445
'20#.#3.60.24':445
'20#.#3.80.39':445
'20#.#3.180.35':445
'20#.#3.68.113':445
'20#.#3.165.222':445
'20#.#3.56.173':445
'20#.#3.219.72':445
'20#.#3.172.150':445
'20#.#3.106.107':445
'20#.#3.117.6':445
'20#.#3.73.39':445
'20#.#3.28.191':445
'20#.#3.233.249':445
'20#.#3.191.124':445
'20#.#3.195.199':445
'20#.#3.220.234':445
'20#.#3.201.198':445
'20#.#3.44.125':445
'20#.#3.156.160':445
'20#.#3.106.23':139
'20#.#3.191.124':139
'20#.#3.28.191':139
'20#.#3.233.249':139
'20#.#3.131.32':139
'20#.#3.235.92':139
'20#.#3.156.160':139
'20#.#3.201.198':139
'20#.#3.44.125':139
'20#.#3.117.6':139
'20#.#3.73.39':139
'20#.#3.165.220':139
'20#.#3.155.184':139
'20#.#3.110.200':139
'20#.#3.51.218':139
'20#.#3.254.151':139
'20#.#3.151.191':139
'20#.#3.182.181':139
'20#.#3.124.208':139
'20#.#3.236.174':139
'20#.#3.126.214':139
'20#.#3.175.126':139
'20#.#3.179.38':139
'20#.#3.255.30':139
'20#.#3.166.227':139
'20#.#3.68.113':139
'20#.#3.165.222':139
'20#.#3.107.154':139
'20#.#3.71.76':139
'20#.#3.39.102':139
'20#.#3.34.50':139
'20#.#3.60.103':139
'20#.#3.56.173':139
'20#.#3.80.39':139
'20#.#3.180.35':139
'20#.#3.106.107':139
'20#.#3.195.199':139
'20#.#3.220.234':139
'20#.#3.219.72':139
'20#.#3.172.150':139
'20#.#3.108.23':139
'20#.#3.60.24':139
'20#.#3.173.197':139
'20#.#3.166.227':445
'20#.#3.54.42':445
'20#.#3.115.53':445
'20#.#3.206.5':445
'20#.#3.57.72':445
'20#.#3.117.126':445
'20#.#3.38.235':445
'20#.#3.68.39':445
'20#.#3.235.45':445
'20#.#3.51.115':445
'20#.#3.54.198':445
'20#.#3.133.108':445
'20#.#3.121.118':139
'20#.#3.24.178':139
'20#.#3.76.131':139
'20#.#3.68.39':139
'20#.#3.18.176':139
'20#.#3.236.125':139
'20#.#3.46.28':139
'20#.#3.246.17':139
'20#.#3.160.144':139
'20#.#3.149.207':139
'20#.#3.85.118':139
'20#.#3.108.73':139
'20#.#3.43.51':139
'20#.#3.161.165':139
'20#.53.4.99':139
'20#.#3.26.162':139
'20#.#3.73.197':139
'20#.#3.85.219':139
'20#.#3.98.53':139
'20#.#3.128.62':139
'20#.#3.137.228':139
'20#.#3.24.178':445
'20#.#3.160.144':445
'20#.#3.121.118':445
'20#.#3.18.176':445
'20#.#3.76.131':445
'20#.#3.46.28':445
'20#.#3.107.72':139
'20#.#3.236.125':445
'20#.#3.149.207':445
'20#.#3.246.17':445
'20#.#3.38.235':139
'20#.#3.145.242':445
'20#.#3.43.226':445
'20#.#3.93.33':445
'20#.53.6.85':445
'20#.#3.201.189':445
'20#.#3.131.32':9988
'20#.#3.180.35':9988
'20#.#3.165.220':9988
'20#.#3.110.200':9988
'20#.#3.124.208':9988
'20#.#3.5.254':445
'20#.#3.34.50':445
'20#.#3.39.102':445
'20#.#3.60.103':445
'20#.#3.179.38':445
'20#.#3.255.30':445
'20#.#3.44.126':445
'20#.#3.67.203':445
'20#.#3.106.23':445
'20#.#3.107.154':445
'20#.#3.71.76':445
'20#.#3.117.126':139
'20#.#3.206.5':139
'20#.#3.57.72':139
'20#.#3.58.76':445
'20#.#3.133.108':139
'20#.#3.54.198':139
'20#.#3.235.45':139
'20#.#3.51.115':139
'20#.#3.54.42':139
'20#.#3.115.53':139
'20#.#3.58.76':139
'20#.#3.191.124':9988
'20#.#3.233.249':9988
'20#.#3.220.234':9988
'20#.#3.73.39':9988
'20#.#3.195.199':9988
'20#.#3.117.6':9988
'20#.#3.44.125':9988
'20#.#3.60.24':9988
'20#.#3.80.39':9988
'20#.#3.156.160':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней