Trojan.Starman.5842

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#80.127.213':139
'20#.#80.109.128':139
'20#.#80.213.141':139
'20#.#80.116.32':445
'20#.#80.141.96':445
'20#.#80.38.163':139
'20#.#80.137.136':139
'20#.#80.75.36':139
'20#.#80.20.110':139
'20#.#80.36.20':139
'20#.#80.213.110':445
'20#.#80.157.103':445
'20#.#80.48.157':445
'20#.#80.59.97':445
'20#.#80.233.55':445
'20#.#80.178.249':445
'20#.#80.6.21':445
'20#.#80.112.76':445
'20#.#80.20.172':445
'20#.#80.210.247':445
'20#.#80.171.222':445
'20#.#80.172.21':139
'20#.#80.145.172':139
'20#.#80.22.32':445
'20#.#80.93.95':445
'20#.#80.120.52':445
'20#.#80.53.12':139
'20#.#80.161.229':139
'20#.#80.178.165':139
'20#.#80.21.39':139
'20#.#80.36.62':139
'20#.#80.137.136':445
'20#.#80.213.141':445
'20#.#80.127.213':445
'20#.#80.22.32':139
'20#.#80.93.95':139
'20#.#80.120.52':139
'20#.#80.75.36':445
'20#.#80.38.163':445
'20#.#80.36.20':445
'20#.#80.109.128':445
'20#.#80.20.110':445
'20#.#80.141.96':139
'20#.#80.183.170':445
'20#.#80.116.32':139
'20#.#80.112.76':139
'20#.#80.213.110':139
'20#.#80.31.13':445
'20#.#80.124.134':445
'20#.#80.167.249':445
'20#.#80.22.241':445
'20#.#80.127.134':445
'20#.#80.6.21':139
'20#.#80.178.249':139
'20#.#80.59.97':139
'20#.#80.233.55':139
'20#.#80.174.134':139
'20#.#80.168.245':139
'20#.#80.171.222':139
'20#.#80.20.172':139
'20#.#80.210.247':139
'20#.#80.157.103':139
'20#.#80.48.157':139
'20#.#80.129.227':445
'20#.#80.224.133':445
'20#.#80.163.4':445
'20#.#80.81.50':445
'20#.#80.4.226':445
'20#.#80.174.134':445
'20#.#80.168.245':445
'20#.#80.144.170':445
'20#.#80.28.221':445
'20#.#80.14.142':445
'20#.#80.142.52':445
'20#.#80.187.80':445
'20#.#80.13.23':445
'20#.#80.80.245':445
'20#.#80.15.220':445
'20#.#80.191.206':445
'20#.#80.9.170':445
'20#.#80.34.32':445
'20#.#80.15.10':445
'20#.#80.211.204':445
'20#.#80.101.73':445
'20#.#80.170.5':445
'20#.#80.76.251':445
'20#.#80.81.137':445
'20#.#80.63.224':445
'20#.#80.153.15':445
'20#.#80.248.141':445
'20#.#80.151.117':445
'20#.#80.35.174':445
'20#.#80.148.160':445
'20#.#80.243.3':445
'20#.#80.224.159':445
'20#.#80.27.184':445
'20#.#80.163.88':445
'20#.#80.138.38':445
'20#.#80.56.44':445
'20#.#80.36.198':445
'20#.#80.78.51':445
'20#.#80.211.237':445
'20#.#80.3.55':445
'20#.#80.137.161':445
'20#.#80.120.92':445
'20#.#80.215.82':139
'20#.#80.253.143':139
'20#.#80.100.85':139
'20#.#80.147.16':139
'20#.#80.224.146':139
'20#.#80.14.163':139
'20#.#80.1.214':139
'20#.#80.91.173':139
'20#.#80.109.195':139
'20#.#80.171.154':139
'20#.#80.22.223':139
'20#.#80.210.243':445
'20#.#80.199.228':445
'20#.#80.243.60':445
'20#.#80.77.115':445
'20#.#80.60.78':445
'20#.#80.65.76':445
'20#.#80.141.71':445
'20#.#80.133.106':445
'20#.#80.100.178':445
'20#.#80.187.43':445
'20#.#80.153.15':139
'20#.#80.81.137':139
'20#.#80.63.224':139
'20#.#80.211.237':139
'20#.#80.224.159':139
'20#.#80.243.3':139
'20#.#80.35.174':139
'20#.#80.148.160':139
'20#.#80.170.5':139
'20#.#80.76.251':139
'20#.#80.78.51':139
'20#.#80.36.198':139
'20#.#80.138.38':139
'20#.#80.56.44':139
'20#.#80.171.162':139
'20#.#80.224.171':139
'20#.#80.120.92':139
'20#.#80.3.55':139
'20#.#80.137.161':139
'20#.#80.27.184':139
'20#.#80.163.88':139
'20#.#80.21.39':445
'20#.#80.36.62':445
'20#.#80.145.172':445
'20#.#80.141.71':139
'20#.#80.172.21':445
'20#.#80.171.162':445
'20#.#80.224.171':445
'20#.#80.161.229':445
'20#.#80.178.165':445
'20#.#80.53.12':445
'20#.#80.65.76':139
'20#.#80.60.78':139
'20#.#80.243.60':139
'20#.#80.77.115':139
'20#.#80.248.141':139
'20#.#80.151.117':139
'20#.#80.187.43':139
'20#.#80.133.106':139
'20#.#80.100.178':139
'20#.#80.210.243':139
'20#.#80.199.228':139
'20#.#80.144.170':139
'20#.#80.32.226':445
'20#.#80.81.235':445
'20#.#80.4.62':445
'20#.#80.247.233':445
'20#.#80.203.228':445
'20#.#80.124.205':445
'20#.#80.51.50':445
'20#.#80.26.175':445
'20#.#80.179.93':445
'20#.#80.180.54':445
'20#.#80.234.1':445
'20#.#80.218.142':139
'20#.#80.31.28':139
'20#.#80.121.66':139
'20#.#80.92.28':139
'20#.#80.31.230':139
'20#.#80.165.121':139
'20#.#80.120.205':445
'20#.#80.193.115':139
'20#.#80.179.79':139
'20#.#80.90.187':139
'20#.#80.137.35':445
'20#.#80.21.68':445
'20#.#80.165.192':445
'20#.#80.99.240':445
'20#.#80.99.216':445
'20#.#80.2.83':445
'20#.#80.203.153':445
'20#.#80.2.109':445
'20#.#80.2.104':445
'20#.#80.108.197':445
'20#.#80.0.23':445
'20#.#80.169.143':445
'20#.#80.96.170':445
'20#.#80.100.222':445
'20#.#80.59.167':445
'20#.#80.25.65':445
'20#.#80.19.86':445
'20#.#80.126.2':445
'20#.#80.110.58':445
'20#.#80.24.223':445
'20#.#80.221.36':445
'20#.#80.100.222':139
'20#.#80.169.143':139
'20#.#80.25.65':139
'20#.#80.51.50':139
'20#.#80.59.167':139
'20#.#80.110.58':139
'20#.#80.19.86':139
'20#.#80.221.36':139
'20#.#80.96.170':139
'20#.#80.24.223':139
'20#.#80.124.205':139
'20#.#80.203.228':139
'20#.#80.4.62':139
'20#.#80.247.233':139
'20#.#80.234.1':139
'20#.#80.120.205':139
'20#.#80.180.54':139
'20#.#80.26.175':139
'20#.#80.179.93':139
'20#.#80.32.226':139
'20#.#80.81.235':139
'20#.#80.114.45':139
'20#.#80.117.45':139
'20#.#80.22.176':139
'20#.#80.203.153':139
'20#.#80.229.85':139
'20#.#80.117.120':139
'20#.#80.229.117':139
'20#.#80.119.220':139
'20#.#80.149.52':139
'20#.#80.4.192':139
'20#.#80.2.83':139
'20#.#80.99.216':139
'20#.#80.165.192':139
'20#.#80.99.240':139
'20#.#80.126.2':139
'20#.#80.0.23':139
'20#.#80.108.197':139
'20#.#80.2.109':139
'20#.#80.2.104':139
'20#.#80.137.35':139
'20#.#80.21.68':139
'20#.#80.153.40':445
'20#.#80.117.20':445
'20#.#80.110.24':445
'20#.#80.144.24':445
'20#.#80.24.149':445
'20#.#80.22.241':139
'20#.#80.127.134':139
'20#.#80.183.170':139
'20#.#80.214.88':445
'20#.#80.222.47':445
'20#.#80.242.15':445
'20#.#80.153.40':139
'20#.#80.117.20':139
'20#.#80.110.24':139
'20#.#80.144.24':139
'20#.#80.24.149':139
'20#.#80.236.71':445
'20#.#80.254.154':445
'20#.#80.11.166':445
'20#.#80.214.88':139
'20#.#80.222.47':139
'20#.#80.81.50':139
'20#.#80.4.226':139
'20#.#80.142.52':139
'20#.#80.9.170':139
'20#.#80.34.32':139
'20#.#80.28.221':139
'20#.#80.14.142':139
'20#.#80.224.133':139
'20#.#80.163.4':139
'20#.#80.129.227':139
'20#.#80.15.10':139
'20#.#80.15.220':139
'20#.#80.191.206':139
'20#.#80.124.134':139
'20#.#80.167.249':139
'20#.#80.31.13':139
'20#.#80.211.204':139
'20#.#80.101.73':139
'20#.#80.13.23':139
'20#.#80.80.245':139
'20#.#80.187.80':139
'20#.#80.179.79':445
'20#.#80.90.187':445
'20#.#80.31.28':445
'20#.#80.121.66':445
'20#.#80.218.142':445
'20#.#80.247.233':9988
'20#.#80.234.1':9988
'20#.#80.120.205':9988
'20#.#80.193.115':445
'20#.#80.165.121':445
'20#.#80.31.230':445
'20#.#80.117.45':445
'20#.#80.149.52':445
'20#.#80.114.45':445
'20#.#80.229.85':445
'20#.#80.22.176':445
'20#.#80.229.117':445
'20#.#80.92.28':445
'20#.#80.117.120':445
'20#.#80.4.192':445
'20#.#80.119.220':445
'20#.#80.21.68':9988
'20#.#80.2.83':9988
'20#.#80.99.216':9988
'20#.#80.110.58':9988
'20#.#80.19.86':9988
'20#.#80.254.154':139
'20#.#80.242.15':139
'20#.#80.236.71':139
'20#.#80.2.104':9988
'20#.#80.11.166':139
'20#.#80.221.36':9988
'20#.#80.26.175':9988
'20#.#80.51.50':9988
'20#.#80.179.93':9988
'20#.#80.203.228':9988
'20#.#80.4.62':9988
'20#.#80.96.170':9988
'20#.#80.24.223':9988
'20#.#80.169.143':9988
'20#.#80.59.167':9988
'20#.#80.100.222':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней