Trojan.Starman.5994

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#6.196.35':139
'20#.#6.194.4':139
'20#.#6.234.15':139
'20#.#6.48.201':139
'20#.#6.171.70':139
'20#.#6.114.161':139
'20#.#6.147.208':139
'20#.#6.221.91':139
'20#.#6.16.59':139
'20#.#6.164.96':139
'20#.#6.231.63':139
'20#.#6.127.99':139
'20#.#6.184.162':139
'20#.16.99.6':139
'20#.#6.46.13':139
'20#.16.7.18':139
'20#.#6.149.222':139
'20#.#6.52.241':139
'20#.#6.233.0':139
'20#.#6.209.230':139
'20#.#6.234.34':139
'20#.#6.54.168':139
'20#.#6.209.230':445
'20#.#6.234.34':445
'20#.#6.184.162':445
'20#.16.99.6':445
'20#.#6.127.99':445
'20#.#6.231.63':445
'20#.#6.48.201':445
'20#.#6.52.241':445
'20#.#6.233.0':445
'20#.#6.149.222':445
'20#.16.7.18':445
'20#.#6.50.86':139
'20#.#6.27.35':139
'20#.#6.201.206':139
'20#.#6.177.71':139
'20#.#6.231.26':139
'20#.#6.18.248':445
'20#.#6.46.13':445
'20#.#6.152.0':445
'20#.#6.133.78':445
'20#.#6.129.89':445
'20#.#6.16.44':139
'20#.#6.117.125':139
'20#.#6.62.188':139
'20#.16.13.3':139
'20#.#6.212.242':139
'20#.#6.40.16':445
'20#.#6.139.1':445
'20#.#6.78.201':139
'20#.#6.198.90':139
'20#.#6.201.44':139
'20#.16.3.47':139
'20#.#6.101.106':139
'20#.#6.106.105':139
'20#.#6.106.194':139
'20#.#6.139.1':139
'20#.#6.193.139':139
'20#.#6.128.220':139
'20#.#6.129.145':139
'20#.#6.248.133':139
'20#.#6.8.116':139
'20#.#6.15.166':139
'20#.#6.193.139':445
'20#.#6.198.90':445
'20#.#6.201.44':445
'20#.#6.117.125':445
'20#.#6.62.188':445
'20#.#6.16.44':445
'20#.#6.152.0':139
'20#.#6.18.248':139
'20#.#6.129.89':139
'20#.#6.78.201':445
'20#.#6.133.78':139
'20#.#6.212.242':445
'20#.#6.8.116':445
'20#.#6.15.166':445
'20#.#6.106.105':445
'20#.#6.106.194':445
'20#.#6.101.106':445
'20#.16.3.47':445
'20#.16.13.3':445
'20#.#6.129.145':445
'20#.#6.248.133':445
'20#.#6.128.220':445
'20#.#6.121.163':139
'20#.#6.85.103':139
'20#.#6.139.3':139
'20#.#6.1.179':445
'20#.#6.239.48':139
'20#.#6.153.135':139
'20#.#6.73.154':139
'20#.#6.117.105':139
'20#.#6.167.217':139
'20#.#6.111.167':139
'20#.#6.54.182':445
'20#.16.0.5':445
'20#.#6.36.52':445
'20#.#6.119.21':445
'20#.#6.55.209':445
'20#.#6.116.5':445
'20#.#6.219.18':445
'20#.#6.187.219':445
'20#.#6.15.174':445
'20#.#6.55.196':445
'20#.16.4.56':445
'20#.#6.92.198':139
'20#.#6.104.89':139
'20#.#6.165.116':139
'20#.#6.147.165':139
'20#.#6.196.91':139
'20#.#6.184.50':139
'20#.#6.69.214':139
'20#.#6.70.91':139
'20#.#6.78.46':139
'20#.#6.197.164':139
'20#.#6.60.51':139
'20#.#6.86.47':139
'20#.#6.98.153':139
'20#.#6.75.61':139
'20#.#6.153.123':139
'20#.#6.14.102':139
'20#.#6.228.3':139
'20#.#6.64.41':139
'20#.#6.172.64':139
'20#.#6.229.208':139
'20#.#6.187.13':139
'20#.#6.33.45':139
'20#.#6.27.35':445
'20#.#6.71.139':139
'20#.#6.50.86':445
'20#.#6.231.26':445
'20#.#6.201.206':445
'20#.#6.45.23':139
'20#.#6.80.203':139
'20#.#6.81.32':139
'20#.#6.76.192':139
'20#.#6.36.196':139
'20#.#6.177.71':445
'20#.#6.194.4':445
'20#.#6.16.59':445
'20#.#6.196.35':445
'20#.#6.171.70':445
'20#.#6.234.15':445
'20#.#6.147.208':445
'20#.#6.54.168':445
'20#.#6.114.161':445
'20#.#6.164.96':445
'20#.#6.221.91':445
'20#.#6.160.96':139
'20#.#6.76.192':445
'20#.#6.36.196':445
'20#.#6.71.139':445
'20#.#6.54.182':139
'20#.#6.1.179':139
'20#.#6.160.96':445
'20#.#6.230.153':445
'20#.#6.80.203':445
'20#.#6.81.32':445
'20#.#6.45.23':445
'20#.#6.187.219':139
'20#.#6.119.21':139
'20#.16.0.5':139
'20#.#6.116.5':139
'20#.#6.230.153':139
'20#.#6.55.209':139
'20#.#6.15.174':139
'20#.#6.219.18':139
'20#.16.4.56':139
'20#.#6.36.52':139
'20#.#6.55.196':139
'20#.#6.196.78':445
'20#.#6.9.196':445
'20#.#6.57.80':445
'20#.#6.45.219':445
'20#.#6.42.174':445
'20#.#6.37.138':445
'20#.#6.24.37':445
'20#.#6.138.38':445
'20#.#6.151.216':445
'20#.#6.226.107':445
'20#.#6.139.240':445
'20#.#6.197.207':139
'20#.#6.236.111':139
'20#.#6.51.66':139
'20#.#6.230.56':139
'20#.#6.173.91':139
'20#.#6.100.222':445
'20#.#6.103.234':445
'20#.#6.80.95':139
'20#.#6.116.94':139
'20#.#6.61.209':139
'20#.#6.47.220':445
'20#.#6.221.143':445
'20#.#6.201.77':445
'20#.#6.101.112':445
'20#.#6.44.86':445
'20#.#6.143.166':445
'20#.#6.14.40':445
'20#.#6.162.230':445
'20#.16.6.26':445
'20#.#6.244.248':445
'20#.#6.80.74':445
'20#.#6.146.70':445
'20#.#6.31.154':445
'20#.#6.154.211':445
'20#.#6.131.21':445
'20#.#6.162.150':445
'20#.#6.120.186':445
'20#.#6.211.200':445
'20#.16.9.20':445
'20#.#6.200.189':445
'20#.#6.212.165':445
'20#.#6.56.177':445
'20#.#6.162.150':139
'20#.#6.120.186':139
'20#.#6.47.220':139
'20#.#6.37.138':139
'20#.#6.24.37':139
'20#.#6.212.165':139
'20#.#6.56.177':139
'20#.#6.154.211':139
'20#.#6.131.21':139
'20#.#6.31.154':139
'20#.#6.138.38':139
'20#.#6.139.240':139
'20#.#6.42.174':139
'20#.#6.100.222':139
'20#.#6.45.219':139
'20#.#6.103.234':139
'20#.#6.151.216':139
'20#.#6.226.107':139
'20#.#6.9.196':139
'20#.#6.57.80':139
'20#.#6.196.78':139
'20#.#6.200.189':139
'20#.#6.191.12':139
'20#.#6.24.33':139
'20#.#6.37.195':139
'20#.#6.14.40':139
'20#.#6.162.230':139
'20#.#6.114.141':139
'20#.#6.27.123':139
'20#.#6.99.110':139
'20#.#6.3.186':139
'20#.#6.14.17':139
'20#.16.6.26':139
'20#.#6.44.86':139
'20#.#6.143.166':139
'20#.#6.146.70':139
'20#.#6.211.200':139
'20#.16.9.20':139
'20#.#6.244.248':139
'20#.#6.80.74':139
'20#.#6.201.77':139
'20#.#6.101.112':139
'20#.#6.221.143':139
'20#.#6.220.204':445
'20#.#6.139.249':445
'20#.#6.190.222':445
'20#.#6.97.109':139
'20#.#6.147.226':139
'20#.#6.177.145':445
'20#.#6.32.206':445
'20#.#6.244.101':445
'20#.#6.204.110':445
'20#.#6.10.172':445
'20#.#6.17.162':139
'20#.#6.131.85':139
'20#.#6.6.135':139
'20#.#6.147.192':139
'20#.#6.68.229':139
'20#.#6.61.87':139
'20#.#6.54.140':139
'20#.#6.63.224':139
'20#.#6.99.211':139
'20#.#6.40.91':139
'20#.#6.210.251':139
'20#.#6.103.167':445
'20#.#6.99.211':445
'20#.#6.54.140':445
'20#.#6.210.251':445
'20#.#6.6.135':445
'20#.#6.40.91':445
'20#.#6.147.226':445
'20#.#6.40.16':139
'20#.#6.97.109':445
'20#.#6.63.224':445
'20#.#6.17.162':445
'20#.#6.131.85':445
'20#.#6.145.102':445
'20#.#6.108.53':445
'20#.#6.90.183':445
'20#.#6.73.107':445
'20#.#6.251.76':445
'20#.#6.61.87':445
'20#.#6.147.192':445
'20#.#6.68.229':445
'20#.#6.101.108':445
'20#.16.64.7':445
'20#.#6.61.209':445
'20#.#6.80.95':445
'20#.#6.116.94':445
'20#.#6.197.207':445
'20#.#6.236.111':445
'20#.#6.226.107':9988
'20#.#6.138.38':9988
'20#.#6.9.196':9988
'20#.#6.151.216':9988
'20#.#6.57.80':9988
'20#.#6.51.66':445
'20#.#6.3.186':445
'20#.#6.14.17':445
'20#.#6.24.33':445
'20#.#6.37.195':445
'20#.#6.191.12':445
'20#.#6.230.56':445
'20#.#6.173.91':445
'20#.#6.27.123':445
'20#.#6.99.110':445
'20#.#6.114.141':445
'20#.#6.154.211':9988
'20#.#6.73.107':139
'20#.#6.251.76':139
'20#.#6.103.167':139
'20#.#6.177.145':139
'20#.#6.32.206':139
'20#.#6.101.108':139
'20#.16.64.7':139
'20#.#6.108.53':139
'20#.#6.90.183':139
'20#.#6.145.102':139
'20#.#6.244.101':139
'20#.#6.201.77':9988
'20#.#6.230.56':9988
'20#.#6.101.112':9988
'20#.16.9.20':9988
'20#.#6.146.70':9988
'20#.#6.204.110':139
'20#.#6.10.172':139
'20#.#6.139.249':139
'20#.#6.190.222':139
'20#.#6.220.204':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней