Trojan.Starman.5830

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#76.123.123':139
'22#.#76.151.203':139
'22#.176.2.3':139
'22#.#76.184.235':139
'22#.#76.31.12':139
'22#.#76.137.58':139
'22#.#76.140.38':139
'22#.#76.48.140':139
'22#.#76.215.23':139
'22#.#76.28.227':139
'22#.#76.122.254':139
'22#.#76.220.94':139
'22#.#76.51.245':139
'22#.#76.48.26':139
'22#.#76.245.64':139
'22#.#76.163.246':139
'22#.#76.65.27':139
'22#.#76.11.244':139
'22#.#76.171.245':139
'22#.#76.95.172':139
'22#.#76.196.76':139
'22#.#76.72.71':139
'22#.#76.197.124':139
'22#.#76.24.134':445
'22#.#76.116.121':445
'22#.#76.166.81':445
'22#.#76.190.141':445
'22#.#76.161.193':445
'22#.#76.113.188':445
'22#.#76.84.178':445
'22#.#76.77.84':445
'22#.#76.178.46':445
'22#.#76.227.181':445
'22#.#76.46.228':445
'22#.#76.20.181':445
'22#.#76.91.10':139
'22#.#76.70.94':139
'22#.#76.10.129':139
'22#.#76.196.55':139
'22#.#76.53.247':139
'22#.#76.32.87':139
'22#.#76.88.94':445
'22#.#76.5.150':445
'22#.#76.180.156':445
'22#.#76.148.110':445
'22#.#76.10.12':445
'22#.#76.40.230':445
'22#.#76.168.41':445
'22#.#76.84.75':445
'22#.#76.156.26':445
'22#.#76.233.64':445
'22#.#76.150.195':445
'22#.#76.37.177':445
'22#.#76.27.243':445
'22#.#76.34.61':445
'22#.#76.18.68':445
'22#.#76.150.219':445
'22#.#76.183.226':445
'22#.#76.12.102':445
'22#.#76.130.221':445
'22#.#76.136.231':445
'22#.#76.144.173':445
'22#.#76.74.145':445
'22#.#76.215.238':445
'22#.#76.136.26':445
'22#.#76.162.117':445
'22#.#76.30.33':445
'22#.#76.83.226':445
'22#.#76.46.26':445
'22#.#76.178.46':139
'22#.#76.84.178':139
'22#.#76.46.228':139
'22#.#76.113.188':139
'22#.#76.227.181':139
'22#.#76.77.84':139
'22#.#76.123.230':139
'22#.#76.109.129':139
'22#.#76.243.242':139
'22#.#76.4.77':139
'22#.#76.243.4':139
'22#.#76.116.121':139
'22#.#76.180.156':139
'22#.#76.88.94':139
'22#.#76.10.12':139
'22#.#76.37.229':445
'22#.#76.148.110':139
'22#.#76.5.150':139
'22#.#76.166.81':139
'22#.#76.24.134':139
'22#.#76.161.193':139
'22#.#76.20.181':139
'22#.#76.190.141':139
'22#.#76.4.77':445
'22#.#76.136.46':139
'22#.#76.38.25':139
'22#.#76.206.213':139
'22#.#76.90.225':139
'22#.#76.239.96':139
'22#.#76.100.17':139
'22#.#76.235.3':139
'22#.#76.83.231':139
'22#.#76.119.117':139
'22#.#76.243.90':139
'22#.#76.2.244':139
'22#.#76.14.135':139
'22#.#76.127.191':139
'22#.#76.68.214':139
'22#.#76.134.237':139
'22#.#76.139.116':139
'22#.#76.237.242':139
'22#.#76.31.122':139
'22#.#76.59.115':139
'22#.#76.135.124':139
'22#.#76.14.55':139
'22#.#76.175.35':139
'22#.#76.131.222':139
'22#.#76.84.132':445
'22#.#76.30.40':445
'22#.#76.25.229':139
'22#.#76.98.63':139
'22#.#76.136.197':139
'22#.#76.202.134':445
'22#.#76.81.152':445
'22#.#76.235.118':445
'22#.#76.33.246':445
'22#.#76.218.131':445
'22#.#76.203.218':445
'22#.#76.13.206':139
'22#.#76.48.3':139
'22#.#76.14.223':139
'22#.#76.26.69':139
'22#.#76.40.51':139
'22#.#76.209.92':139
'22#.#76.133.91':139
'22#.#76.153.16':139
'22#.#76.205.52':139
'22#.#76.66.235':139
'22#.#76.78.238':139
'22#.#76.158.169':139
'22#.#76.220.94':445
'22#.#76.184.235':445
'22#.#76.95.172':445
'22#.#76.196.76':445
'22#.#76.171.245':445
'22#.#76.31.12':445
'22#.#76.137.58':445
'22#.#76.28.227':445
'22#.#76.151.203':445
'22#.176.2.3':445
'22#.#76.123.123':445
'22#.#76.72.71':445
'22#.#76.109.129':445
'22#.#76.163.246':445
'22#.#76.123.230':445
'22#.#76.243.4':445
'22#.#76.243.242':445
'22#.#76.65.27':445
'22#.#76.11.244':445
'22#.#76.197.124':445
'22#.#76.48.26':445
'22#.#76.245.64':445
'22#.#76.51.245':445
'22#.#76.33.246':139
'22#.#76.81.152':139
'22#.#76.203.218':139
'22#.#76.202.134':139
'22#.#76.218.131':139
'22#.#76.235.118':139
'22#.#76.160.190':139
'22#.#76.70.20':139
'22#.#76.125.5':139
'22#.#76.25.186':139
'22#.#76.14.25':139
'22#.#76.30.40':139
'22#.#76.48.140':445
'22#.#76.196.55':445
'22#.#76.140.38':445
'22#.#76.122.254':445
'22#.#76.215.23':445
'22#.#76.53.247':445
'22#.#76.32.87':445
'22#.#76.84.132':139
'22#.#76.70.94':445
'22#.#76.10.129':445
'22#.#76.91.10':445
'22#.#76.212.103':445
'22#.#76.62.244':445
'22#.#76.64.113':445
'22#.#76.33.56':445
'22#.#76.200.33':445
'22#.#76.74.160':445
'22#.#76.7.171':445
'22#.#76.208.24':445
'22#.#76.18.104':445
'22#.#76.236.138':445
'22#.#76.7.38':445
'22#.#76.134.85':445
'22#.#76.81.200':139
'22#.#76.155.58':139
'22#.#76.70.33':139
'22#.#76.210.228':139
'22#.#76.114.234':139
'22#.#76.56.171':445
'22#.#76.21.177':445
'22#.#76.17.203':445
'22#.#76.243.157':445
'22#.#76.251.218':445
'22#.#76.69.21':445
'22#.#76.154.36':445
'22#.#76.4.169':445
'22#.#76.113.241':445
'22#.#76.132.200':445
'22#.#76.28.151':445
'22#.#76.35.174':445
'22#.#76.51.16':445
'22#.#76.23.31':445
'22#.#76.209.100':445
'22#.#76.33.90':445
'22#.#76.250.167':445
'22#.#76.84.148':445
'22#.#76.55.98':445
'22#.#76.122.234':445
'22#.#76.7.129':445
'22#.#76.98.67':445
'22#.#76.111.0':445
'22#.#76.210.112':445
'22#.#76.23.215':445
'22#.#76.212.154':445
'22#.#76.240.100':445
'22#.#76.109.204':445
'22#.#76.216.99':445
'22#.#76.18.104':139
'22#.#76.7.171':139
'22#.#76.7.38':139
'22#.#76.74.160':139
'22#.#76.236.138':139
'22#.#76.208.24':139
'22#.#76.55.98':139
'22#.#76.122.234':139
'22#.#76.7.129':139
'22#.#76.111.0':139
'22#.#76.98.67':139
'22#.#76.62.244':139
'22#.#76.243.157':139
'22#.#76.251.218':139
'22#.#76.134.85':139
'22#.#76.69.21':139
'22#.#76.17.203':139
'22#.#76.21.177':139
'22#.#76.64.113':139
'22#.#76.212.103':139
'22#.#76.200.33':139
'22#.#76.56.171':139
'22#.#76.33.56':139
'22#.#76.209.100':139
'22#.#76.23.31':139
'22#.#76.250.167':139
'22#.#76.35.174':139
'22#.#76.33.90':139
'22#.#76.51.16':139
'22#.#76.204.24':139
'22#.#76.95.226':139
'22#.#76.39.55':139
'22#.#76.248.194':139
'22#.#76.199.29':139
'22#.#76.4.169':139
'22#.#76.23.215':139
'22#.#76.240.100':139
'22#.#76.216.99':139
'22#.#76.210.112':139
'22#.#76.109.204':139
'22#.#76.212.154':139
'22#.#76.113.241':139
'22#.#76.154.36':139
'22#.#76.28.151':139
'22#.#76.132.200':139
'22#.#76.84.148':139
'22#.#76.248.194':445
'22#.#76.34.61':139
'22#.#76.37.177':139
'22#.#76.150.219':139
'22#.#76.150.195':139
'22#.#76.18.68':139
'22#.#76.27.243':139
'22#.#76.169.124':445
'22#.#76.90.238':445
'22#.#76.50.188':445
'22#.#76.37.229':139
'22#.#76.12.198':445
'22#.#76.168.41':139
'22#.#76.30.33':139
'22#.#76.136.26':139
'22#.#76.46.26':139
'22#.#76.215.238':139
'22#.#76.83.226':139
'22#.#76.162.117':139
'22#.#76.84.75':139
'22#.#76.40.230':139
'22#.#76.233.64':139
'22#.#76.183.226':139
'22#.#76.156.26':139
'22#.#76.2.184':445
'22#.#76.246.2':445
'22#.#76.183.243':445
'22#.#76.155.50':445
'22#.#76.167.153':445
'22#.#76.172.144':445
'22#.#76.167.104':445
'22#.#76.251.237':445
'22#.#76.98.61':445
'22#.#76.176.242':445
'22#.#76.155.28':445
'22#.#76.12.155':445
'22#.#76.197.40':445
'22#.#76.238.187':445
'22#.#76.158.245':445
'22#.#76.108.208':445
'22#.#76.207.63':445
'22#.#76.128.63':445
'22#.#76.48.37':445
'22#.#76.198.186':445
'22#.#76.88.185':445
'22#.#76.217.17':445
'22#.#76.104.149':445
'22#.#76.50.188':139
'22#.#76.169.124':139
'22#.#76.12.198':139
'22#.#76.23.31':9988
'22#.#76.39.55':9988
'22#.#76.90.238':139
'22#.#76.197.40':139
'22#.#76.238.187':139
'22#.#76.158.245':139
'22#.#76.108.208':139
'22#.#76.207.63':139
'22#.#76.251.218':9988
'22#.#76.95.226':445
'22#.#76.210.228':445
'22#.#76.204.24':445
'22#.#76.199.29':445
'22#.#76.39.55':445
'22#.#76.114.234':445
'22#.#76.111.0':9988
'22#.#76.216.99':9988
'22#.#76.155.58':445
'22#.#76.70.33':445
'22#.#76.81.200':445
'22#.#76.98.61':139
'22#.#76.167.104':139
'22#.#76.155.28':139
'22#.#76.172.144':139
'22#.#76.176.242':139
'22#.#76.251.237':139
'22#.#76.12.102':139
'22#.#76.130.221':139
'22#.#76.136.231':139
'22#.#76.144.173':139
'22#.#76.74.145':139
'22#.#76.246.2':139
'22#.#76.88.185':139
'22#.#76.48.37':139
'22#.#76.104.149':139
'22#.#76.128.63':139
'22#.#76.217.17':139
'22#.#76.198.186':139
'22#.#76.183.243':139
'22#.#76.2.184':139
'22#.#76.167.153':139
'22#.#76.12.155':139
'22#.#76.155.50':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней