Trojan.Starman.5296

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#0.11.190':139
'20#.#0.18.12':139
'20#.#0.242.60':139
'20#.#0.227.43':445
'20#.#0.28.220':139
'20#.#0.28.220':445
'20#.#0.242.60':445
'20#.#0.14.247':139
'20#.#0.157.39':139
'20#.#0.80.13':139
'20#.#0.73.26':445
'20#.#0.73.216':445
'20#.#0.202.68':445
'20#.#0.80.240':445
'20#.#0.81.15':445
'20#.#0.228.138':445
'20#.#0.193.166':445
'20#.#0.216.77':445
'20#.#0.252.86':445
'20#.#0.250.101':445
'20#.#0.113.221':139
'20#.#0.187.195':139
'20#.#0.145.59':139
'20#.#0.123.177':139
'20#.#0.223.80':139
'20#.#0.103.152':139
'20#.#0.147.56':139
'20#.#0.191.168':139
'20#.#0.9.188':139
'20#.#0.119.89':139
'20#.#0.80.13':445
'20#.#0.14.247':445
'20#.#0.157.39':445
'20#.#0.11.190':445
'20#.#0.18.12':445
'20#.#0.154.148':139
'20#.#0.24.125':139
'20#.#0.76.94':139
'20#.#0.51.78':139
'20#.#0.65.103':139
'20#.#0.66.186':445
'20#.#0.36.219':445
'20#.#0.186.214':445
'20#.#0.148.49':445
'20#.#0.138.54':445
'20#.#0.153.185':445
'20#.#0.221.153':445
'20#.#0.186.32':445
'20#.#0.186.101':445
'20#.#0.32.120':445
'20#.#0.216.77':139
'20#.#0.228.138':139
'20#.#0.250.101':139
'20#.#0.73.216':139
'20#.#0.252.86':139
'20#.#0.189.15':445
'20#.#0.132.19':445
'20#.#0.128.192':445
'20#.#0.193.166':139
'20#.#0.227.43':139
'20#.#0.53.94':445
'20#.#0.85.165':445
'20#.#0.112.222':445
'20#.#0.141.249':445
'20#.#0.120.91':445
'20#.#0.12.166':445
'20#.#0.211.12':445
'20#.#0.166.100':445
'20#.#0.170.44':445
'20#.#0.9.164':445
'20#.#0.80.161':445
'20#.#0.74.170':445
'20#.40.8.1':445
'20#.#0.107.3':445
'20#.40.0.98':445
'20#.#0.140.191':445
'20#.#0.73.159':445
'20#.#0.225.225':445
'20#.#0.163.192':445
'20#.#0.182.206':445
'20#.#0.43.179':445
'20#.#0.193.252':445
'20#.#0.254.195':445
'20#.#0.75.163':445
'20#.#0.142.232':445
'20#.#0.54.151':445
'20#.#0.193.71':445
'20#.#0.220.153':445
'20#.#0.55.217':445
'20#.#0.13.72':445
'20#.#0.147.56':445
'20#.#0.233.118':445
'20#.#0.103.152':445
'20#.#0.119.89':445
'20#.#0.191.168':445
'20#.#0.53.164':445
'20#.#0.189.36':445
'20#.#0.164.68':445
'20#.#0.231.38':445
'20#.#0.98.65':445
'20#.#0.163.131':139
'20#.#0.32.102':139
'20#.#0.213.75':445
'20#.#0.253.44':445
'20#.#0.164.187':445
'20#.40.0.12':139
'20#.#0.23.137':139
'20#.#0.4.104':139
'20#.#0.92.57':139
'20#.#0.55.216':139
'20#.#0.93.20':445
'20#.#0.193.1':445
'20#.#0.62.90':445
'20#.#0.108.237':445
'20#.#0.78.225':445
'20#.#0.59.120':445
'20#.#0.49.231':445
'20#.#0.112.0':445
'20#.#0.50.127':445
'20#.#0.123.43':445
'20#.#0.220.153':139
'20#.#0.54.151':139
'20#.#0.13.72':139
'20#.#0.193.252':139
'20#.#0.55.217':139
'20#.#0.62.90':139
'20#.#0.93.20':139
'20#.#0.78.225':139
'20#.#0.193.71':139
'20#.#0.108.237':139
'20#.#0.164.68':139
'20#.#0.53.164':139
'20#.#0.98.65':139
'20#.#0.233.118':139
'20#.#0.231.38':139
'20#.#0.254.195':139
'20#.#0.43.179':139
'20#.#0.142.232':139
'20#.#0.189.36':139
'20#.#0.75.163':139
'20#.#0.24.125':445
'20#.#0.123.177':445
'20#.#0.154.148':445
'20#.#0.65.103':445
'20#.#0.76.94':445
'20#.#0.187.195':445
'20#.#0.9.188':445
'20#.#0.113.221':445
'20#.#0.223.80':445
'20#.#0.145.59':445
'20#.#0.112.0':139
'20#.#0.59.120':139
'20#.#0.123.43':139
'20#.#0.193.1':139
'20#.#0.50.127':139
'20#.#0.213.75':139
'20#.#0.51.78':445
'20#.#0.164.187':139
'20#.#0.49.231':139
'20#.#0.253.44':139
'20#.#0.73.26':139
'20#.#0.33.107':445
'20#.#0.171.76':445
'20#.#0.225.226':445
'20#.40.40.3':139
'20#.#0.94.97':445
'20#.#0.140.4':445
'20#.#0.102.69':445
'20#.#0.47.94':445
'20#.#0.74.146':445
'20#.#0.76.48':445
'20#.#0.49.42':139
'20#.#0.236.37':139
'20#.#0.4.207':139
'20#.#0.234.236':139
'20#.#0.148.97':139
'20#.40.47.0':139
'20#.#0.99.217':139
'20#.#0.143.245':139
'20#.#0.230.195':139
'20#.40.75.7':139
'20#.#0.60.84':445
'20#.#0.197.52':445
'20#.#0.162.207':445
'20#.#0.165.191':445
'20#.#0.153.4':445
'20#.#0.246.228':445
'20#.#0.190.139':445
'20#.#0.229.22':445
'20#.#0.45.104':445
'20#.#0.86.172':445
'20#.#0.105.106':445
'20#.#0.44.13':445
'20#.#0.124.26':445
'20#.#0.58.83':445
'20#.#0.148.132':445
'20#.40.48.8':445
'20#.#0.173.12':445
'20#.#0.113.237':445
'20#.#0.55.225':445
'20#.#0.124.1':445
'20#.#0.44.13':139
'20#.#0.55.225':139
'20#.#0.105.106':139
'20#.#0.148.132':139
'20#.#0.124.26':139
'20#.#0.173.12':139
'20#.#0.165.191':139
'20#.40.48.8':139
'20#.#0.124.1':139
'20#.#0.113.237':139
'20#.#0.33.107':139
'20#.#0.74.146':139
'20#.#0.171.76':139
'20#.#0.76.48':139
'20#.#0.225.226':139
'20#.#0.102.69':139
'20#.#0.58.83':139
'20#.#0.140.4':139
'20#.#0.94.97':139
'20#.#0.47.94':139
'20#.#0.69.118':139
'20#.#0.65.204':139
'20#.#0.204.48':139
'20#.#0.150.61':139
'20#.#0.46.89':139
'20#.#0.79.237':139
'20#.#0.237.100':139
'20#.#0.184.54':139
'20#.#0.96.74':139
'20#.#0.93.194':139
'20#.#0.197.52':139
'20#.#0.45.104':139
'20#.#0.60.84':139
'20#.#0.153.4':139
'20#.#0.162.207':139
'20#.#0.190.139':139
'20#.#0.23.54':139
'20#.#0.246.228':139
'20#.#0.86.172':139
'20#.#0.229.22':139
'20#.#0.32.120':139
'20#.#0.186.32':139
'20#.#0.186.101':139
'20#.#0.66.186':139
'20#.#0.36.219':139
'20#.40.0.98':139
'20#.40.8.1':139
'20#.#0.107.3':139
'20#.#0.153.185':139
'20#.#0.221.153':139
'20#.#0.98.185':445
'20#.#0.128.192':139
'20#.#0.185.97':445
'20#.#0.60.13':445
'20#.#0.98.60':445
'20#.#0.138.54':139
'20#.#0.186.214':139
'20#.#0.148.49':139
'20#.#0.189.15':139
'20#.#0.132.19':139
'20#.#0.9.164':139
'20#.#0.166.100':139
'20#.#0.170.44':139
'20#.#0.53.94':139
'20#.#0.85.165':139
'20#.#0.81.15':139
'20#.#0.202.68':139
'20#.#0.80.240':139
'20#.#0.12.166':139
'20#.#0.211.12':139
'20#.#0.182.206':139
'20#.#0.225.225':139
'20#.#0.163.192':139
'20#.#0.80.161':139
'20#.#0.74.170':139
'20#.#0.120.91':139
'20#.#0.112.222':139
'20#.#0.141.249':139
'20#.#0.140.191':139
'20#.#0.73.159':139
'20#.#0.4.207':445
'20#.#0.49.42':445
'20#.#0.148.97':445
'20#.#0.237.100':445
'20#.#0.234.236':445
'20#.#0.143.245':445
'20#.40.47.0':445
'20#.40.75.7':445
'20#.#0.236.37':445
'20#.#0.230.195':445
'20#.#0.204.48':445
'20#.#0.69.118':445
'20#.#0.46.89':445
'20#.#0.23.54':445
'20#.#0.150.61':445
'20#.#0.184.54':445
'20#.#0.79.237':445
'20#.#0.93.194':445
'20#.#0.65.204':445
'20#.#0.96.74':445
'20#.#0.230.195':9988
'20#.#0.12.232':139
'20#.#0.69.118':9988
'20#.#0.162.207':9988
'20#.#0.197.52':9988
'20#.#0.98.185':139
'20#.#0.12.232':445
'20#.#0.185.97':139
'20#.#0.60.13':139
'20#.#0.98.60':139
'20#.#0.105.106':9988
'20#.#0.55.225':9988
'20#.#0.47.94':9988
'20#.40.40.3':445
'20#.#0.99.217':445
'20#.#0.165.191':9988
'20#.#0.153.4':9988
'20#.40.48.8':9988
'20#.#0.124.1':9988
'20#.#0.113.237':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней