Trojan.Starman.5724

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#00.52.185':139
'20#.#00.104.90':139
'20#.#00.5.43':139
'20#.#00.13.95':139
'20#.#00.77.147':139
'20#.#00.223.10':139
'20#.#00.53.176':139
'20#.#00.11.143':139
'20#.#00.43.23':139
'20#.#00.52.212':139
'20#.#00.10.227':139
'20#.#00.72.155':139
'20#.#00.139.220':139
'20#.#00.22.232':139
'20#.#00.176.22':139
'20#.#00.94.87':139
'20#.#00.128.94':139
'20#.#00.163.87':139
'20#.#00.30.91':139
'20#.#00.69.8':139
'20#.#00.122.21':445
'20#.#00.34.23':445
'20#.#00.141.190':445
'20#.#00.127.150':445
'20#.#00.190.133':445
'20#.#00.3.57':445
'20#.#00.226.50':445
'20#.#00.171.220':445
'20#.#00.127.219':445
'20#.#00.24.127':445
'20#.#00.95.135':445
'20#.#00.186.102':445
'20#.#00.88.69':445
'20#.#00.234.173':445
'20#.#00.125.169':445
'20#.#00.51.113':445
'20#.200.5.4':445
'20#.#00.23.17':445
'20#.#00.20.161':445
'20#.#00.16.101':445
'20#.#00.37.179':139
'20#.#00.211.124':445
'20#.#00.90.108':445
'20#.#00.214.145':445
'20#.#00.111.65':445
'20#.#00.73.49':445
'20#.#00.234.173':139
'20#.#00.125.169':139
'20#.#00.67.161':445
'20#.#00.4.27':445
'20#.#00.108.222':445
'20#.#00.73.49':139
'20#.#00.214.145':139
'20#.#00.111.65':139
'20#.#00.202.74':445
'20#.#00.88.152':445
'20#.#00.108.222':139
'20#.#00.67.161':139
'20#.#00.4.27':139
'20#.#00.211.124':139
'20#.#00.90.108':139
'20#.#00.127.219':139
'20#.#00.24.127':139
'20#.#00.34.23':139
'20#.#00.141.190':139
'20#.#00.122.21':139
'20#.#00.36.159':139
'20#.#00.152.101':139
'20#.#00.226.50':139
'20#.#00.171.220':139
'20#.#00.3.57':139
'20#.#00.20.161':139
'20#.#00.16.101':139
'20#.#00.186.102':139
'20#.#00.88.69':139
'20#.#00.95.135':139
'20#.#00.127.150':139
'20#.#00.190.133':139
'20#.200.5.4':139
'20#.#00.23.17':139
'20#.#00.51.113':139
'20#.#00.36.159':445
'20#.#00.93.162':139
'20#.#00.241.17':139
'20#.#00.214.63':139
'20#.#00.240.67':139
'20#.#00.63.69':139
'20#.#00.223.38':139
'20#.#00.43.16':139
'20#.#00.164.193':139
'20#.#00.1.87':139
'20#.#00.191.84':139
'20#.#00.25.33':139
'20#.#00.106.78':139
'20#.#00.209.19':139
'20#.#00.44.142':139
'20#.#00.145.44':139
'20#.#00.81.238':139
'20#.#00.192.51':139
'20#.#00.83.192':139
'20#.#00.21.149':139
'20#.#00.61.153':139
'20#.#00.69.38':139
'20#.#00.153.69':139
'20#.#00.172.10':139
'20#.#00.27.153':139
'20#.#00.44.117':139
'20#.#00.73.163':139
'20#.#00.36.92':139
'20#.#00.200.182':139
'20#.#00.128.86':139
'20#.#00.54.205':139
'20#.#00.103.235':139
'20#.#00.6.212':139
'20#.#00.21.125':139
'20#.#00.226.1':139
'20#.#00.169.55':139
'20#.#00.181.184':139
'20#.#00.26.108':139
'20#.#00.185.99':139
'20#.#00.22.107':139
'20#.#00.100.84':139
'20#.#00.141.170':139
'20#.#00.77.147':445
'20#.#00.5.43':445
'20#.#00.13.95':445
'20#.#00.94.87':445
'20#.#00.128.94':445
'20#.#00.52.212':445
'20#.#00.11.143':445
'20#.#00.43.23':445
'20#.#00.52.185':445
'20#.#00.104.90':445
'20#.#00.176.22':445
'20#.#00.139.220':445
'20#.#00.22.232':445
'20#.#00.152.101':445
'20#.#00.37.179':445
'20#.#00.69.8':445
'20#.#00.163.87':445
'20#.#00.30.91':445
'20#.#00.10.227':445
'20#.#00.72.155':445
'20#.#00.166.140':445
'20#.#00.78.167':445
'20#.#00.141.0':445
'20#.#00.3.109':445
'20#.#00.199.83':445
'20#.#00.209.225':139
'20#.#00.169.209':139
'20#.#00.135.184':445
'20#.#00.44.95':445
'20#.#00.43.221':445
'20#.#00.199.83':139
'20#.#00.141.0':139
'20#.#00.3.109':139
'20#.#00.223.10':445
'20#.#00.53.176':445
'20#.#00.43.221':139
'20#.#00.135.184':139
'20#.#00.44.95':139
'20#.#00.166.140':139
'20#.#00.78.167':139
'20#.#00.156.87':445
'20#.#00.32.175':445
'20#.#00.175.241':445
'20#.#00.87.175':445
'20#.#00.195.6':445
'20#.#00.83.244':445
'20#.#00.151.253':445
'20#.#00.30.19':445
'20#.#00.102.32':445
'20#.#00.8.92':445
'20#.#00.8.252':139
'20#.#00.119.193':139
'20#.#00.238.114':139
'20#.#00.134.228':139
'20#.#00.115.53':139
'20#.#00.93.251':139
'20#.#00.30.11':139
'20#.#00.221.58':139
'20#.#00.32.66':139
'20#.#00.59.68':139
'20#.#00.149.97':445
'20#.#00.103.149':445
'20#.#00.207.200':445
'20#.#00.161.92':445
'20#.#00.230.167':445
'20#.#00.58.60':445
'20#.#00.254.207':445
'20#.#00.29.237':445
'20#.#00.81.73':445
'20#.#00.90.201':445
'20#.#00.85.66':445
'20#.#00.91.103':445
'20#.#00.159.177':445
'20#.#00.0.128':445
'20#.#00.130.242':445
'20#.#00.91.190':445
'20#.#00.243.74':445
'20#.#00.49.228':445
'20#.#00.61.23':445
'20#.#00.48.93':445
'20#.#00.22.229':139
'20#.#00.85.66':139
'20#.#00.91.103':139
'20#.#00.159.177':139
'20#.#00.0.128':139
'20#.#00.130.242':139
'20#.#00.91.190':139
'20#.#00.243.74':139
'20#.#00.49.228':139
'20#.#00.61.23':139
'20#.#00.48.93':139
'20#.#00.195.6':139
'20#.#00.87.175':139
'20#.#00.8.92':139
'20#.#00.175.241':139
'20#.#00.156.87':139
'20#.#00.83.244':139
'20#.#00.151.253':139
'20#.#00.30.19':139
'20#.#00.32.175':139
'20#.#00.102.32':139
'20#.#00.252.174':139
'20#.#00.35.139':139
'20#.#00.147.251':139
'20#.#00.71.237':139
'20#.#00.112.108':139
'20#.#00.63.18':139
'20#.#00.150.83':139
'20#.#00.121.172':139
'20#.#00.249.203':139
'20#.#00.172.71':139
'20#.#00.149.97':139
'20#.#00.103.149':139
'20#.#00.207.200':139
'20#.#00.161.92':139
'20#.#00.230.167':139
'20#.#00.58.60':139
'20#.#00.254.207':139
'20#.#00.29.237':139
'20#.#00.81.73':139
'20#.#00.90.201':139
'20#.#00.71.237':445
'20#.#00.39.31':139
'20#.#00.219.110':139
'20#.#00.214.173':139
'20#.#00.57.99':139
'20#.#00.232.51':139
'20#.#00.3.72':445
'20#.#00.5.180':445
'20#.#00.214.237':445
'20#.#00.202.74':139
'20#.#00.88.152':139
'20#.#00.213.206':139
'20#.#00.96.203':139
'20#.#00.205.43':139
'20#.#00.125.236':139
'20#.#00.44.2':139
'20#.#00.165.132':139
'20#.#00.181.80':139
'20#.#00.131.232':139
'20#.#00.37.97':139
'20#.#00.38.200':139
'20#.#00.165.132':445
'20#.#00.181.80':445
'20#.#00.131.232':445
'20#.#00.37.97':445
'20#.#00.38.200':445
'20#.#00.39.31':445
'20#.#00.219.110':445
'20#.#00.214.173':445
'20#.#00.57.99':445
'20#.#00.232.51':445
'20#.#00.144.172':445
'20#.#00.170.144':445
'20#.#00.172.156':445
'20#.#00.178.152':445
'20#.#00.156.188':445
'20#.#00.213.206':445
'20#.#00.96.203':445
'20#.#00.205.43':445
'20#.#00.125.236':445
'20#.#00.44.2':445
'20#.#00.170.144':139
'20#.#00.8.252':445
'20#.#00.119.193':445
'20#.#00.238.114':445
'20#.#00.134.228':445
'20#.#00.115.53':445
'20#.#00.93.251':445
'20#.#00.30.11':445
'20#.#00.221.58':445
'20#.#00.32.66':445
'20#.#00.59.68':445
'20#.#00.35.139':445
'20#.#00.249.203':445
'20#.#00.252.174':445
'20#.#00.112.108':445
'20#.#00.147.251':445
'20#.#00.150.83':445
'20#.#00.22.229':445
'20#.#00.63.18':445
'20#.#00.172.71':445
'20#.#00.121.172':445
'20#.#00.214.237':139
'20#.#00.3.72':139
'20#.#00.134.228':9988
'20#.#00.254.207':9988
'20#.#00.249.203':9988
'20#.#00.172.156':139
'20#.#00.144.172':139
'20#.#00.156.188':139
'20#.#00.5.180':139
'20#.#00.178.152':139
'20#.#00.159.177':9988
'20#.#00.207.200':9988
'20#.#00.32.175':9988
'20#.#00.102.32':9988
'20#.#00.156.87':9988
'20#.#00.147.251':9988
'20#.#00.71.237':9988
'20#.#00.90.201':9988
'20#.#00.103.149':9988
'20#.#00.81.73':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней