Trojan.Starman.5366

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#3.126.221':139
'20#.#3.142.59':139
'20#.#3.150.71':445
'20#.#3.30.207':139
'20#.#3.53.162':139
'20#.#3.13.11':139
'20#.#3.144.193':445
'20#.#3.30.207':445
'20#.#3.53.162':445
'20#.#3.13.11':445
'20#.#3.54.45':445
'20#.#3.14.182':445
'20#.#3.228.110':445
'20#.#3.97.200':445
'20#.#3.123.59':445
'20#.#3.18.225':445
'20#.#3.237.65':445
'20#.#3.206.236':445
'20#.#3.198.144':445
'20#.#3.5.191':445
'20#.#3.54.45':139
'20#.#3.14.182':139
'20#.#3.228.110':139
'20#.93.71.5':445
'20#.#3.150.71':139
'20#.#3.144.193':139
'20#.#3.126.221':445
'20#.#3.87.72':139
'20#.#3.245.163':139
'20#.#3.101.66':139
'20#.#3.118.138':139
'20#.#3.33.95':139
'20#.#3.120.17':139
'20#.#3.33.101':139
'20#.#3.10.25':139
'20#.#3.218.35':139
'20#.#3.63.223':139
'20#.#3.141.123':139
'20#.#3.223.185':139
'20#.#3.28.14':139
'20#.#3.54.119':139
'20#.#3.77.235':139
'20#.#3.211.152':139
'20#.#3.142.59':445
'20#.#3.52.142':139
'20#.#3.89.93':139
'20#.#3.158.84':139
'20#.#3.22.231':139
'20#.#3.223.160':139
'20#.#3.82.189':139
'20#.#3.129.236':139
'20#.#3.178.167':139
'20#.#3.252.34':139
'20#.#3.201.103':445
'20#.#3.97.200':139
'20#.#3.123.59':139
'20#.#3.18.225':139
'20#.#3.237.65':139
'20#.#3.206.236':139
'20#.#3.198.144':139
'20#.#3.5.191':139
'20#.#3.111.95':445
'20#.#3.221.148':445
'20#.#3.24.221':445
'20#.93.71.5':139
'20#.#3.47.54':445
'20#.#3.205.231':445
'20#.#3.26.187':139
'20#.#3.132.201':139
'20#.#3.213.134':139
'20#.#3.2.201':139
'20#.#3.39.171':139
'20#.#3.188.198':139
'20#.#3.51.15':139
'20#.#3.20.161':139
'20#.#3.14.127':139
'20#.#3.201.103':139
'20#.#3.242.140':139
'20#.#3.23.131':139
'20#.#3.10.54':139
'20#.#3.50.226':445
'20#.#3.188.198':445
'20#.#3.26.187':445
'20#.#3.132.201':445
'20#.#3.74.180':445
'20#.#3.2.201':445
'20#.#3.39.171':445
'20#.#3.213.134':445
'20#.#3.10.54':445
'20#.#3.20.161':445
'20#.#3.14.127':445
'20#.#3.51.15':445
'20#.#3.242.140':445
'20#.#3.23.131':445
'20#.#3.213.62':445
'20#.#3.29.164':445
'20#.#3.235.69':445
'20#.#3.26.210':445
'20#.#3.150.26':445
'20#.#3.84.101':445
'20#.#3.17.83':445
'20#.#3.14.211':445
'20#.#3.178.235':445
'20#.#3.73.183':445
'20#.#3.107.10':445
'20#.#3.65.63':445
'20#.#3.211.64':445
'20#.#3.107.142':445
'20#.#3.74.220':445
'20#.#3.97.57':445
'20#.#3.61.52':445
'20#.#3.91.118':445
'20#.#3.64.13':445
'20#.#3.17.128':445
'20#.#3.166.148':139
'20#.#3.7.130':139
'20#.#3.249.95':139
'20#.#3.92.200':445
'20#.#3.171.130':445
'20#.#3.173.42':445
'20#.#3.61.52':139
'20#.#3.91.118':139
'20#.#3.64.13':139
'20#.#3.4.215':445
'20#.#3.229.28':445
'20#.#3.180.97':445
'20#.#3.107.142':139
'20#.#3.92.200':139
'20#.#3.171.130':139
'20#.#3.173.42':139
'20#.#3.74.220':139
'20#.#3.97.57':139
'20#.#3.17.128':139
'20#.#3.108.104':139
'20#.#3.42.236':139
'20#.#3.101.85':139
'20#.#3.35.27':139
'20#.#3.37.82':139
'20#.#3.61.90':139
'20#.#3.156.252':139
'20#.#3.165.168':139
'20#.#3.22.10':139
'20#.#3.83.210':139
'20#.#3.79.55':139
'20#.#3.79.152':139
'20#.#3.175.187':139
'20#.#3.13.217':139
'20#.#3.176.229':139
'20#.#3.67.129':139
'20#.#3.191.23':139
'20#.#3.15.226':139
'20#.#3.127.82':139
'20#.#3.158.132':139
'20#.#3.216.215':139
'20#.#3.227.128':139
'20#.#3.239.213':139
'20#.#3.36.122':139
'20#.#3.10.99':139
'20#.#3.124.67':139
'20#.#3.132.151':139
'20#.#3.142.55':445
'20#.#3.52.142':445
'20#.#3.89.93':445
'20#.#3.54.119':445
'20#.#3.4.215':139
'20#.#3.229.28':139
'20#.#3.180.97':139
'20#.#3.77.235':445
'20#.#3.178.167':445
'20#.#3.252.34':445
'20#.#3.22.231':445
'20#.#3.211.152':445
'20#.#3.158.84':445
'20#.#3.129.236':445
'20#.#3.4.107':139
'20#.#3.198.4':139
'20#.#3.92.214':139
'20#.#3.64.146':139
'20#.#3.192.123':139
'20#.93.5.52':139
'20#.#3.12.61':139
'20#.#3.70.140':139
'20#.#3.7.168':139
'20#.#3.142.55':139
'20#.#3.176.115':139
'20#.#3.60.59':139
'20#.#3.26.242':139
'20#.#3.223.160':445
'20#.93.5.52':445
'20#.#3.4.107':445
'20#.#3.198.4':445
'20#.#3.63.223':445
'20#.#3.64.146':445
'20#.#3.192.123':445
'20#.#3.92.214':445
'20#.#3.26.242':445
'20#.#3.70.140':445
'20#.#3.7.168':445
'20#.#3.12.61':445
'20#.#3.176.115':445
'20#.#3.60.59':445
'20#.#3.120.17':445
'20#.#3.87.72':445
'20#.#3.245.163':445
'20#.#3.82.189':445
'20#.#3.118.138':445
'20#.#3.33.95':445
'20#.#3.101.66':445
'20#.#3.28.14':445
'20#.#3.10.25':445
'20#.#3.218.35':445
'20#.#3.33.101':445
'20#.#3.141.123':445
'20#.#3.223.185':445
'20#.#3.109.236':445
'20#.#3.32.83':445
'20#.93.2.65':445
'20#.#3.226.178':445
'20#.#3.215.72':445
'20#.#3.183.69':445
'20#.#3.15.121':445
'20#.#3.39.144':445
'20#.#3.121.242':445
'20#.#3.160.218':445
'20#.#3.169.113':445
'20#.#3.89.169':445
'20#.#3.67.200':445
'20#.#3.8.213':445
'20#.#3.102.136':445
'20#.#3.136.60':445
'20#.#3.247.146':445
'20#.#3.247.47':445
'20#.#3.88.244':445
'20#.#3.92.43':445
'20#.#3.18.64':445
'20#.#3.201.78':445
'20#.93.7.51':445
'20#.#3.105.105':445
'20#.#3.26.10':445
'20#.#3.46.197':445
'20#.#3.68.183':445
'20#.#3.71.86':445
'20#.#3.26.238':445
'20#.#3.67.30':445
'20#.#3.38.134':445
'20#.#3.193.33':445
'20#.#3.136.87':445
'20#.#3.9.193':445
'20#.#3.109.236':9988
'20#.#3.160.218':9988
'20#.#3.68.183':9988
'20#.#3.96.161':445
'20#.#3.92.43':9988
'20#.#3.248.165':9988
'20#.#3.172.232':445
'20#.#3.150.189':445
'20#.#3.238.218':445
'20#.#3.57.49':445
'20#.#3.233.202':445
'20#.#3.242.50':445
'20#.#3.165.11':445
'20#.#3.178.244':445
'20#.#3.35.111':445
'20#.#3.133.131':445
'20#.#3.46.187':445
'20#.#3.28.191':445
'20#.#3.49.122':445
'20#.#3.191.106':445
'20#.#3.226.178':139
'20#.#3.215.72':139
'20#.#3.183.69':139
'20#.#3.18.64':139
'20#.#3.201.78':139
'20#.93.7.51':139
'20#.#3.109.236':139
'20#.#3.169.113':139
'20#.#3.89.169':139
'20#.#3.67.200':139
'20#.#3.32.83':139
'20#.93.2.65':139
'20#.#3.15.121':139
'20#.#3.247.146':139
'20#.#3.88.244':139
'20#.#3.191.106':139
'20#.#3.247.47':139
'20#.#3.67.33':139
'20#.#3.248.165':139
'20#.#3.8.213':139
'20#.#3.105.105':139
'20#.#3.26.10':139
'20#.#3.46.197':139
'20#.#3.102.136':139
'20#.#3.136.60':139
'20#.#3.92.43':139
'20#.#3.39.144':139
'20#.#3.38.134':139
'20#.#3.193.33':139
'20#.#3.136.87':139
'20#.#3.178.244':139
'20#.#3.35.111':139
'20#.#3.133.131':139
'20#.#3.71.86':139
'20#.#3.96.161':139
'20#.#3.67.33':445
'20#.#3.248.165':445
'20#.#3.26.238':139
'20#.#3.67.30':139
'20#.#3.9.193':139
'20#.#3.57.49':139
'20#.#3.233.202':139
'20#.#3.242.50':139
'20#.#3.121.242':139
'20#.#3.160.218':139
'20#.#3.68.183':139
'20#.#3.172.232':139
'20#.#3.46.187':139
'20#.#3.28.191':139
'20#.#3.49.122':139
'20#.#3.150.189':139
'20#.#3.238.218':139
'20#.#3.165.11':139
'20#.#3.115.233':139
'20#.93.46.9':139
'20#.#3.72.179':139
'20#.#3.159.73':139
'20#.#3.243.32':139
'20#.#3.233.242':139
'20#.#3.67.143':139
'20#.#3.159.73':445
'20#.#3.243.32':445
'20#.#3.233.242':445
'20#.#3.236.78':139
'20#.#3.41.242':139
'20#.#3.88.41':139
'20#.#3.147.170':445
'20#.#3.172.213':445
'20#.#3.92.96':445
'20#.#3.76.17':445
'20#.#3.114.75':445
'20#.#3.164.196':445
'20#.#3.203.189':445
'20#.#3.100.26':445
'20#.#3.72.128':445
'20#.#3.71.64':445
'20#.#3.190.146':445
'20#.#3.86.36':445
'20#.#3.48.77':445
'20#.#3.115.233':445
'20#.#3.29.164':139
'20#.#3.235.69':139
'20#.#3.17.83':139
'20#.#3.150.26':139
'20#.#3.84.101':139
'20#.#3.213.62':139
'20#.#3.107.10':139
'20#.#3.178.235':139
'20#.#3.73.183':139
'20#.#3.74.180':139
'20#.#3.65.63':139
'20#.#3.211.64':139
'20#.#3.14.211':139
'20#.#3.236.78':445
'20#.#3.41.242':445
'20#.#3.88.41':445
'20#.93.46.9':445
'20#.#3.72.179':445
'20#.#3.67.143':445
'20#.#3.47.54':139
'20#.#3.24.221':139
'20#.#3.50.226':139
'20#.#3.26.210':139
'20#.#3.205.231':139
'20#.#3.111.95':139
'20#.#3.221.148':139
'20#.#3.73.181':445
'20#.#3.117.132':139
'20#.#3.81.46':139
'20#.#3.40.61':139
'20#.#3.49.129':139
'20#.#3.254.253':139
'20#.#3.245.254':139
'20#.#3.48.40':139
'20#.#3.76.17':139
'20#.#3.114.75':139
'20#.#3.164.196':139
'20#.#3.76.209':139
'20#.#3.33.131':139
'20#.#3.73.181':139
'20#.#3.71.86':9988
'20#.#3.9.193':9988
'20#.#3.37.97':139
'20#.#3.49.122':9988
'20#.#3.133.131':9988
'20#.#3.193.33':9988
'20#.#3.158.138':139
'20#.#3.187.136':139
'20#.#3.183.249':139
'20#.#3.230.162':139
'20#.93.3.4':139
'20#.93.0.8':139
'20#.#3.101.29':139
'20#.#3.147.170':139
'20#.#3.230.162':445
'20#.#3.49.129':445
'20#.#3.254.253':445
'20#.#3.101.29':445
'20#.#3.187.136':445
'20#.#3.183.249':445
'20#.#3.245.254':445
'20#.#3.48.40':445
'20#.#3.76.209':445
'20#.#3.33.131':445
'20#.#3.117.132':445
'20#.#3.81.46':445
'20#.#3.40.61':445
'20#.#3.190.146':139
'20#.#3.86.36':139
'20#.#3.48.77':139
'20#.#3.172.213':139
'20#.#3.92.96':139
'20#.#3.203.189':139
'20#.#3.100.26':139
'20#.#3.158.138':445
'20#.93.3.4':445
'20#.93.0.8':445
'20#.#3.72.128':139
'20#.#3.71.64':139
'20#.#3.37.97':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней