Trojan.Starman.5363

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#6.131.240':139
'20#.#6.24.126':139
'20#.#6.110.72':139
'20#.#6.200.151':139
'20#.#6.55.164':139
'20#.#6.42.170':139
'20#.#6.163.242':139
'20#.#6.6.253':139
'20#.#6.126.94':139
'20#.#6.99.88':139
'20#.#6.94.193':139
'20#.#6.160.55':139
'20#.#6.156.159':139
'20#.66.35.3':139
'20#.#6.34.76':139
'20#.#6.255.134':139
'20#.#6.215.156':139
'20#.#6.115.239':139
'20#.#6.37.100':139
'20#.#6.82.19':139
'20#.#6.95.236':139
'20#.#6.110.25':139
'20#.#6.127.52':139
'20#.#6.23.115':445
'20#.#6.217.223':445
'20#.#6.166.235':445
'20#.#6.53.48':445
'20#.#6.131.53':445
'20#.66.4.17':445
'20#.#6.171.168':445
'20#.#6.139.109':445
'20#.#6.154.152':445
'20#.#6.171.98':445
'20#.#6.60.143':445
'20#.#6.81.51':139
'20#.#6.208.80':139
'20#.#6.120.220':139
'20#.#6.27.125':139
'20#.#6.70.28':139
'20#.#6.88.188':139
'20#.#6.246.149':139
'20#.#6.53.191':139
'20#.#6.93.30':139
'20#.#6.95.120':139
'20#.#6.65.241':139
'20#.#6.139.109':139
'20#.#6.64.181':445
'20#.#6.66.128':445
'20#.#6.143.124':445
'20#.#6.28.138':445
'20#.#6.55.98':445
'20#.#6.230.66':445
'20#.#6.72.213':445
'20#.#6.133.72':445
'20#.#6.186.88':445
'20#.#6.151.230':445
'20#.#6.127.93':445
'20#.#6.128.206':445
'20#.#6.178.110':445
'20#.#6.99.91':445
'20#.#6.205.178':445
'20#.#6.91.100':445
'20#.#6.56.92':445
'20#.#6.21.131':445
'20#.#6.59.171':445
'20#.#6.2.101':445
'20#.#6.126.150':445
'20#.#6.71.25':445
'20#.#6.6.113':445
'20#.#6.166.235':139
'20#.#6.23.115':139
'20#.#6.131.53':139
'20#.#6.35.193':445
'20#.#6.53.48':139
'20#.#6.217.223':139
'20#.#6.154.152':139
'20#.#6.171.168':139
'20#.#6.60.143':139
'20#.66.4.17':139
'20#.#6.171.98':139
'20#.#6.83.232':139
'20#.#6.87.201':139
'20#.#6.71.179':139
'20#.#6.100.118':139
'20#.#6.187.209':139
'20#.#6.35.193':139
'20#.#6.83.232':445
'20#.#6.87.201':445
'20#.#6.71.179':445
'20#.#6.100.118':445
'20#.#6.187.209':445
'20#.#6.210.126':139
'20#.#6.38.211':139
'20#.#6.127.4':139
'20#.#6.28.179':139
'20#.#6.163.67':139
'20#.#6.141.150':139
'20#.#6.123.142':139
'20#.#6.77.224':139
'20#.#6.50.46':139
'20#.#6.36.30':139
'20#.#6.201.137':139
'20#.#6.182.185':139
'20#.#6.108.55':139
'20#.#6.13.215':139
'20#.#6.134.199':139
'20#.#6.13.135':139
'20#.#6.124.38':139
'20#.#6.122.132':139
'20#.#6.109.116':139
'20#.#6.139.174':139
'20#.#6.111.56':139
'20#.#6.126.38':139
'20#.#6.163.26':139
'20#.#6.203.148':139
'20#.#6.120.221':139
'20#.#6.76.37':139
'20#.#6.154.74':139
'20#.#6.180.218':139
'20#.#6.55.220':139
'20#.#6.47.140':139
'20#.#6.80.205':139
'20#.#6.255.171':139
'20#.#6.104.181':139
'20#.#6.90.209':139
'20#.#6.74.148':139
'20#.#6.30.147':139
'20#.66.43.3':139
'20#.#6.117.25':139
'20#.#6.22.99':139
'20#.#6.69.200':139
'20#.#6.87.63':139
'20#.#6.66.173':139
'20#.#6.190.240':139
'20#.#6.250.149':139
'20#.#6.231.249':139
'20#.#6.200.86':445
'20#.#6.131.240':445
'20#.#6.24.126':445
'20#.#6.110.72':445
'20#.#6.200.151':445
'20#.#6.55.164':445
'20#.#6.42.170':445
'20#.#6.163.242':445
'20#.#6.6.253':445
'20#.#6.126.94':445
'20#.#6.99.88':445
'20#.#6.94.193':445
'20#.#6.160.55':445
'20#.#6.156.159':445
'20#.66.35.3':445
'20#.#6.34.76':445
'20#.#6.255.134':445
'20#.#6.215.156':445
'20#.#6.115.239':445
'20#.#6.37.100':445
'20#.#6.82.19':445
'20#.#6.95.236':445
'20#.#6.110.25':445
'20#.#6.127.52':445
'20#.#6.14.161':139
'20#.#6.97.200':139
'20#.#6.18.122':139
'20#.#6.28.90':139
'20#.#6.236.26':139
'20#.#6.200.86':139
'20#.#6.14.161':445
'20#.#6.97.200':445
'20#.#6.18.122':445
'20#.#6.28.90':445
'20#.#6.236.26':445
'20#.#6.81.51':445
'20#.#6.208.80':445
'20#.#6.120.220':445
'20#.#6.27.125':445
'20#.#6.70.28':445
'20#.#6.88.188':445
'20#.#6.246.149':445
'20#.#6.53.191':445
'20#.#6.93.30':445
'20#.#6.95.120':445
'20#.#6.65.241':445
'20#.#6.220.122':445
'20#.#6.178.106':445
'20#.#6.36.190':445
'20#.#6.203.100':445
'20#.#6.229.190':445
'20#.#6.33.199':445
'20#.#6.144.37':445
'20#.#6.11.78':445
'20#.#6.30.80':445
'20#.#6.41.43':445
'20#.#6.113.143':445
'20#.#6.80.76':445
'20#.#6.123.12':139
'20#.#6.163.204':139
'20#.#6.181.148':139
'20#.#6.163.191':139
'20#.#6.45.85':139
'20#.#6.19.122':445
'20#.#6.0.160':445
'20#.#6.196.13':445
'20#.#6.228.124':445
'20#.#6.47.167':445
'20#.#6.22.240':445
'20#.#6.58.118':445
'20#.#6.5.192':445
'20#.#6.167.0':445
'20#.#6.37.54':445
'20#.66.8.72':445
'20#.#6.53.166':445
'20#.#6.208.212':445
'20#.#6.54.220':445
'20#.#6.87.15':445
'20#.#6.144.183':445
'20#.#6.39.12':445
'20#.#6.45.181':445
'20#.#6.250.110':445
'20#.#6.202.53':445
'20#.#6.43.247':445
'20#.#6.141.103':445
'20#.#6.162.111':445
'20#.#6.38.19':445
'20#.#6.113.115':445
'20#.#6.243.211':445
'20#.#6.171.221':445
'20#.#6.43.206':445
'20#.#6.59.250':445
'20#.#6.119.174':139
'20#.#6.41.43':139
'20#.#6.11.78':139
'20#.#6.80.76':139
'20#.#6.144.37':139
'20#.#6.113.143':139
'20#.#6.30.80':139
'20#.#6.43.247':139
'20#.#6.250.110':139
'20#.#6.162.111':139
'20#.#6.58.118':139
'20#.#6.141.103':139
'20#.#6.19.122':139
'20#.#6.0.160':139
'20#.#6.47.167':139
'20#.#6.228.124':139
'20#.#6.22.240':139
'20#.#6.196.13':139
'20#.#6.178.106':139
'20#.#6.36.190':139
'20#.#6.203.100':139
'20#.#6.229.190':139
'20#.#6.33.199':139
'20#.#6.202.53':139
'20#.#6.144.183':139
'20#.#6.54.220':139
'20#.#6.45.181':139
'20#.#6.208.212':139
'20#.#6.39.12':139
'20#.#6.87.15':139
'20#.#6.254.126':139
'20#.#6.106.254':139
'20#.#6.140.34':139
'20#.#6.210.86':139
'20#.#6.40.210':139
'20#.#6.171.221':139
'20#.#6.113.115':139
'20#.#6.59.250':139
'20#.#6.38.19':139
'20#.#6.43.206':139
'20#.#6.243.211':139
'20#.#6.5.192':139
'20#.#6.167.0':139
'20#.#6.37.54':139
'20#.66.8.72':139
'20#.#6.53.166':139
'20#.#6.143.124':139
'20#.#6.64.181':139
'20#.#6.55.98':139
'20#.#6.59.171':139
'20#.#6.28.138':139
'20#.#6.66.128':139
'20#.#6.186.88':139
'20#.#6.72.213':139
'20#.#6.127.93':139
'20#.#6.230.66':139
'20#.#6.151.230':139
'20#.#6.99.91':139
'20#.#6.128.206':139
'20#.#6.91.100':139
'20#.#6.220.122':139
'20#.#6.205.178':139
'20#.#6.178.110':139
'20#.#6.2.101':139
'20#.#6.21.131':139
'20#.#6.71.25':139
'20#.#6.56.92':139
'20#.#6.126.150':139
'20#.#6.133.72':139
'20#.#6.149.218':445
'20#.#6.38.254':445
'20#.#6.198.132':445
'20#.#6.49.130':445
'20#.#6.7.238':445
'20#.#6.160.248':445
'20#.#6.75.88':445
'20#.#6.122.234':445
'20#.#6.101.37':445
'20#.#6.15.112':445
'20#.#6.150.93':445
'20#.#6.226.53':445
'20#.#6.250.225':445
'20#.#6.53.185':445
'20#.#6.6.113':139
'20#.#6.92.220':445
'20#.#6.123.119':445
'20#.#6.66.17':445
'20#.#6.130.45':445
'20#.#6.82.90':445
'20#.#6.132.184':445
'20#.#6.100.163':445
'20#.#6.122.234':139
'20#.#6.11.78':9988
'20#.#6.228.124':9988
'20#.#6.113.143':9988
'20#.#6.33.199':9988
'20#.#6.22.240':9988
'20#.#6.144.37':9988
'20#.#6.250.110':9988
'20#.#6.202.53':9988
'20#.#6.58.118':9988
'20#.#6.80.76':9988
'20#.#6.30.80':9988
'20#.#6.254.126':445
'20#.#6.106.254':445
'20#.#6.140.34':445
'20#.#6.210.86':445
'20#.#6.40.210':445
'20#.#6.119.174':445
'20#.#6.123.12':445
'20#.#6.163.204':445
'20#.#6.181.148':445
'20#.#6.163.191':445
'20#.#6.45.85':445
'20#.#6.140.34':9988
'20#.#6.198.132':139
'20#.#6.149.218':139
'20#.#6.7.238':139
'20#.#6.130.45':139
'20#.#6.49.130':139
'20#.#6.38.254':139
'20#.#6.101.37':139
'20#.#6.75.88':139
'20#.#6.150.93':139
'20#.#6.160.248':139
'20#.#6.15.112':139
'20#.#6.53.185':139
'20#.#6.226.53':139
'20#.#6.92.220':139
'20#.#6.163.191':9988
'20#.#6.163.204':9988
'20#.#6.250.225':139
'20#.#6.82.90':139
'20#.#6.66.17':139
'20#.#6.100.163':139
'20#.#6.123.119':139
'20#.#6.132.184':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней