Trojan.Starman.5935

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#38.33.183':445
'20#.#38.111.163':445
'20#.#38.112.248':445
'20#.#38.177.112':445
'20#.#38.38.31':445
'20#.#38.178.37':445
'20#.#38.125.198':445
'20#.#38.137.176':445
'20#.#38.109.75':445
'20#.#38.27.164':445
'20#.#38.2.124':445
'20#.#38.148.2':445
'20#.#38.171.224':445
'20#.#38.207.39':445
'20#.#38.47.228':139
'20#.#38.144.75':139
'20#.#38.21.120':139
'20#.#38.141.230':139
'20#.#38.97.142':139
'20#.#38.63.97':139
'20#.#38.1.41':139
'20#.#38.142.251':445
'20#.#38.48.235':445
'20#.#38.158.104':445
'20#.#38.196.13':139
'20#.#38.32.242':139
'20#.#38.10.165':445
'20#.#38.144.75':445
'20#.#38.21.120':445
'20#.#38.1.41':445
'20#.#38.97.142':445
'20#.#38.63.97':445
'20#.#38.47.228':445
'20#.#38.196.13':445
'20#.#38.126.125':139
'20#.#38.236.146':139
'20#.#38.114.210':139
'20#.#38.32.242':445
'20#.#38.197.91':139
'20#.#38.112.44':139
'20#.#38.141.230':445
'20#.#38.14.140':445
'20#.#38.246.153':445
'20#.#38.131.246':445
'20#.#38.74.154':445
'20#.#38.239.63':445
'20#.#38.132.223':445
'20#.#38.167.132':445
'20#.#38.219.52':445
'20#.#38.66.222':445
'20#.#38.38.134':445
'20#.#38.212.55':445
'20#.#38.119.167':445
'20#.#38.34.184':445
'20#.#38.15.157':445
'20#.#38.155.134':445
'20#.#38.136.155':445
'20#.#38.42.173':445
'20#.#38.199.239':445
'20#.#38.179.71':445
'20#.#38.87.193':445
'20#.#38.142.251':139
'20#.#38.48.235':139
'20#.#38.158.104':139
'20#.#38.138.131':445
'20#.#38.82.90':445
'20#.#38.10.165':139
'20#.#38.133.32':445
'20#.#38.42.173':139
'20#.#38.199.239':139
'20#.#38.179.71':139
'20#.#38.116.43':445
'20#.#38.158.163':139
'20#.#38.133.32':139
'20#.#38.15.157':139
'20#.#38.138.131':139
'20#.#38.82.90':139
'20#.#38.158.163':445
'20#.#38.155.134':139
'20#.#38.136.155':139
'20#.#38.87.193':139
'20#.#38.14.140':139
'20#.#38.246.153':139
'20#.#38.131.246':139
'20#.#38.74.154':139
'20#.#38.239.63':139
'20#.#38.132.223':139
'20#.#38.167.132':139
'20#.#38.219.52':139
'20#.#38.66.222':139
'20#.#38.38.134':139
'20#.#38.212.55':139
'20#.#38.119.167':139
'20#.#38.34.184':139
'20#.#38.27.164':139
'20#.#38.178.37':139
'20#.#38.33.183':139
'20#.#38.111.163':139
'20#.#38.207.39':139
'20#.#38.177.112':139
'20#.#38.38.31':139
'20#.#38.112.248':139
'20#.#38.171.224':139
'20#.#38.137.176':139
'20#.#38.109.75':139
'20#.#38.125.198':139
'20#.#38.2.124':139
'20#.#38.148.2':139
'20#.#38.122.180':445
'20#.#38.69.94':445
'20#.#38.121.7':445
'20#.#38.162.217':445
'20#.#38.181.172':445
'20#.#38.123.154':445
'20#.#38.141.47':445
'20#.#38.157.199':445
'20#.#38.190.158':445
'20#.#38.9.158':445
'20#.#38.62.66':445
'20#.#38.131.62':445
'20#.#38.62.241':445
'20#.#38.173.19':445
'20#.#38.101.68':445
'20#.#38.207.224':445
'20#.#38.121.236':445
'20#.#38.190.23':139
'20#.#38.17.242':139
'20#.#38.82.26':139
'20#.#38.165.90':445
'20#.#38.41.162':445
'20#.#38.81.41':445
'20#.#38.124.193':445
'20#.#38.107.32':445
'20#.#38.72.232':445
'20#.#38.167.50':445
'20#.#38.87.103':139
'20#.#38.164.171':139
'20#.#38.61.164':139
'20#.#38.190.23':445
'20#.#38.82.26':445
'20#.#38.60.42':139
'20#.#38.216.61':139
'20#.#38.65.159':139
'20#.#38.246.111':139
'20#.#38.178.149':139
'20#.#38.201.215':139
'20#.#38.53.202':139
'20#.#38.253.28':139
'20#.#38.184.18':445
'20#.#38.67.5':445
'20#.#38.255.66':445
'20#.#38.101.60':445
'20#.#38.199.130':445
'20#.#38.164.9':445
'20#.#38.103.145':445
'20#.#38.24.98':445
'20#.#38.1.121':445
'20#.#38.120.250':445
'20#.#38.17.242':445
'20#.#38.242.123':445
'20#.#38.232.243':445
'20#.#38.223.197':445
'20#.#38.207.224':139
'20#.#38.165.90':139
'20#.#38.101.68':139
'20#.#38.126.83':445
'20#.#38.65.54':445
'20#.#38.175.83':445
'20#.#38.121.236':139
'20#.#38.41.162':139
'20#.#38.81.41':139
'20#.#38.124.193':139
'20#.#38.107.32':139
'20#.#38.72.232':139
'20#.#38.167.50':139
'20#.#38.123.111':445
'20#.#38.126.83':139
'20#.#38.65.54':139
'20#.#38.175.83':139
'20#.#38.50.15':139
'20#.#38.246.49':139
'20#.#38.123.111':139
'20#.#38.197.91':445
'20#.#38.114.210':445
'20#.#38.50.15':445
'20#.#38.246.49':445
'20#.#38.112.44':445
'20#.#38.126.125':445
'20#.#38.236.146':445
'20#.#38.67.5':139
'20#.#38.255.66':139
'20#.#38.101.60':139
'20#.#38.190.158':139
'20#.#38.62.241':139
'20#.#38.103.145':139
'20#.#38.24.98':139
'20#.#38.1.121':139
'20#.#38.120.250':139
'20#.#38.184.18':139
'20#.#38.242.123':139
'20#.#38.232.243':139
'20#.#38.223.197':139
'20#.#38.164.9':139
'20#.#38.123.154':139
'20#.#38.122.180':139
'20#.#38.69.94':139
'20#.#38.173.19':139
'20#.#38.162.217':139
'20#.#38.181.172':139
'20#.#38.121.7':139
'20#.#38.199.130':139
'20#.#38.157.199':139
'20#.#38.9.158':139
'20#.#38.141.47':139
'20#.#38.62.66':139
'20#.#38.131.62':139
'20#.#38.232.215':445
'20#.#38.146.210':445
'20#.#38.33.148':445
'20#.#38.127.168':445
'20#.#38.150.100':445
'20#.#38.4.151':445
'20#.#38.83.233':445
'20#.#38.65.116':445
'20#.#38.170.176':445
'20#.#38.9.86':445
'20#.#38.44.69':445
'20#.#38.113.200':445
'20#.#38.137.113':445
'20#.#38.61.137':445
'20#.#38.29.251':445
'20#.#38.108.136':445
'20#.#38.40.221':445
'20#.#38.174.157':445
'20#.#38.163.195':445
'20#.#38.247.13':445
'20#.#38.228.143':445
'20#.#38.190.4':445
'20#.#38.112.127':445
'20#.#38.129.99':445
'20#.#38.100.169':445
'20#.#38.112.31':445
'20#.#38.57.112':445
'20#.#38.9.57':445
'20#.#38.45.224':445
'20#.#38.94.128':445
'20#.#38.15.106':445
'20#.#38.219.96':445
'20#.#38.148.43':445
'20#.#38.141.111':445
'20#.#38.84.136':445
'20#.#38.190.4':9988
'20#.#38.129.99':9988
'20#.#38.100.169':9988
'20#.#38.161.20':9988
'20#.#38.40.221':9988
'20#.#38.174.157':9988
'20#.#38.57.75':445
'20#.#38.140.18':445
'20#.#38.206.232':445
'20#.#38.70.119':445
'20#.#38.122.176':445
'20#.#38.133.123':445
'20#.#38.18.8':445
'20#.#38.214.108':445
'20#.#38.124.35':445
'20#.#38.152.131':445
'20#.#38.74.153':445
'20#.#38.5.159':445
'20#.#38.87.132':445
'20#.#38.250.6':445
'20#.#38.150.100':139
'20#.#38.4.151':139
'20#.#38.83.233':139
'20#.#38.129.99':139
'20#.#38.100.169':139
'20#.#38.29.251':139
'20#.#38.146.210':139
'20#.#38.113.200':139
'20#.#38.137.113':139
'20#.#38.61.137':139
'20#.#38.33.148':139
'20#.#38.127.168':139
'20#.#38.65.116':139
'20#.#38.112.127':139
'20#.#38.161.20':139
'20#.#38.26.174':139
'20#.#38.108.136':139
'20#.#38.228.143':139
'20#.#38.189.91':139
'20#.#38.163.195':139
'20#.#38.247.13':139
'20#.#38.112.31':139
'20#.#38.57.112':139
'20#.#38.9.57':139
'20#.#38.40.221':139
'20#.#38.174.157':139
'20#.#38.190.4':139
'20#.#38.219.96':139
'20#.#38.148.43':139
'20#.#38.141.111':139
'20#.#38.152.131':139
'20#.#38.74.153':139
'20#.#38.57.75':139
'20#.#38.45.224':139
'20#.#38.189.91':445
'20#.#38.161.20':445
'20#.#38.26.174':445
'20#.#38.94.128':139
'20#.#38.15.106':139
'20#.#38.84.136':139
'20#.#38.124.35':139
'20#.#38.122.176':139
'20#.#38.133.123':139
'20#.#38.18.8':139
'20#.#38.170.176':139
'20#.#38.9.86':139
'20#.#38.44.69':139
'20#.#38.140.18':139
'20#.#38.5.159':139
'20#.#38.87.132':139
'20#.#38.250.6':139
'20#.#38.70.119':139
'20#.#38.206.232':139
'20#.#38.214.108':139
'20#.#38.42.33':445
'20#.#38.27.1':445
'20#.#38.230.143':445
'20#.#38.232.215':139
'20#.#38.116.43':139
'20#.#38.149.163':445
'20#.#38.26.169':445
'20#.#38.14.7':445
'20#.#38.104.187':445
'20#.#38.32.145':445
'20#.#38.123.212':445
'20#.#38.137.206':445
'20#.#38.2.153':445
'20#.#38.215.195':139
'20#.#38.250.56':139
'20#.#38.80.233':139
'20#.#38.27.53':139
'20#.#38.7.47':139
'20#.#38.198.8':139
'20#.#38.57.198':139
'20#.#38.215.26':139
'20#.#38.185.68':139
'20#.#38.27.134':139
'20#.#38.89.227':139
'20#.#38.216.215':139
'20#.#38.5.217':139
'20#.#38.130.6':139
'20#.#38.80.233':445
'20#.#38.27.53':445
'20#.#38.215.26':445
'20#.#38.198.8':445
'20#.#38.57.198':445
'20#.#38.250.56':445
'20#.#38.216.215':445
'20#.#38.27.134':445
'20#.#38.89.227':445
'20#.#38.215.195':445
'20#.#38.5.217':445
'20#.#38.130.6':445
'20#.#38.185.68':445
'20#.#38.7.47':445
'20#.#38.150.163':445
'20#.#38.3.227':445
'20#.#38.215.99':445
'20#.#38.125.245':445
'20#.#38.82.188':445
'20#.#38.52.203':445
'20#.#38.245.214':445
'20#.#38.110.251':445
'20#.#38.49.179':445
'20#.#38.209.39':445
'20#.#38.203.251':445
'20#.#38.78.162':445
'20#.#38.80.225':445
'20#.#38.93.193':139
'20#.#38.179.146':139
'20#.#38.221.109':139
'20#.#38.206.232':9988
'20#.#38.250.6':9988
'20#.#38.145.82':139
'20#.#38.157.105':139
'20#.#38.93.193':445
'20#.#38.179.146':445
'20#.#38.221.109':445
'20#.#38.39.59':139
'20#.#38.39.16':139
'20#.#38.145.82':445
'20#.#38.18.8':9988
'20#.#38.83.233':9988
'20#.#38.146.210':9988
'20#.#38.33.148':9988
'20#.#38.29.251':9988
'20#.#38.150.100':9988
'20#.#38.4.151':9988
'20#.#38.65.116':9988
'20#.#38.44.69':9988
'20#.#38.122.176':9988
'20#.#38.133.123':9988
'20#.#38.113.200':9988
'20#.#38.137.113':9988
'20#.#38.61.137':9988
'20#.#38.52.203':139
'20#.#38.215.99':139
'20#.#38.245.214':139
'20#.#38.125.245':139
'20#.#38.82.188':139
'20#.#38.150.163':139
'20#.#38.3.227':139
'20#.#38.110.251':139
'20#.#38.49.179':139
'20#.#38.209.39':139
'20#.#38.203.251':139
'20#.#38.80.225':139
'20#.#38.78.162':139
'20#.#38.32.145':139
'20#.#38.149.163':139
'20#.#38.42.33':139
'20#.#38.27.1':139
'20#.#38.157.105':445
'20#.#38.39.59':445
'20#.#38.39.16':445
'20#.#38.230.143':139
'20#.#38.2.153':139
'20#.#38.14.7':139
'20#.#38.104.187':139
'20#.#38.26.169':139
'20#.#38.123.212':139
'20#.#38.137.206':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней