Trojan.Starman.5389

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#07.174.174':139
'20#.#07.249.173':139
'20#.#07.229.103':139
'20#.#07.104.228':139
'20#.#07.172.93':139
'20#.#07.93.203':139
'20#.#07.218.13':139
'20#.#07.132.218':139
'20#.#07.88.22':139
'20#.#07.15.216':445
'20#.#07.222.87':445
'20#.#07.182.75':445
'20#.#07.144.72':445
'20#.#07.85.104':445
'20#.#07.213.3':139
'20#.#07.12.211':139
'20#.#07.44.85':445
'20#.#07.16.117':445
'20#.#07.17.77':445
'20#.#07.140.185':445
'20#.#07.222.87':139
'20#.#07.87.102':445
'20#.#07.90.28':445
'20#.#07.171.182':445
'20#.#07.201.29':445
'20#.#07.41.252':445
'20#.#07.108.81':445
'20#.#07.23.126':139
'20#.#07.144.72':139
'20#.#07.176.93':139
'20#.#07.204.23':139
'20#.#07.15.216':139
'20#.#07.85.104':139
'20#.#07.16.117':139
'20#.#07.182.75':139
'20#.#07.44.85':139
'20#.#07.23.126':445
'20#.#07.65.200':139
'20#.#07.145.51':139
'20#.#07.52.253':139
'20#.#07.12.233':139
'20#.#07.239.134':139
'20#.#07.25.249':139
'20#.#07.126.164':139
'20#.#07.134.103':139
'20#.#07.22.62':139
'20#.#07.109.146':139
'20#.#07.113.167':139
'20#.#07.225.183':139
'20#.#07.159.129':139
'20#.#07.230.201':139
'20#.#07.13.133':139
'20#.#07.17.0':139
'20#.#07.184.228':139
'20#.#07.32.0':139
'20#.#07.88.22':445
'20#.#07.132.218':445
'20#.#07.249.173':445
'20#.#07.174.174':445
'20#.#07.176.93':445
'20#.#07.172.93':445
'20#.#07.204.23':445
'20#.#07.93.203':445
'20#.#07.218.13':445
'20#.#07.145.62':139
'20#.#07.128.152':139
'20#.#07.164.97':139
'20#.#07.154.213':139
'20#.#07.213.3':445
'20#.#07.229.103':445
'20#.#07.104.228':445
'20#.#07.97.212':139
'20#.#07.12.211':445
'20#.#07.248.77':445
'20#.#07.25.18':139
'20#.#07.34.49':139
'20#.#07.44.146':139
'20#.#07.245.151':139
'20#.#07.117.67':139
'20#.#07.155.24':445
'20#.#07.174.120':445
'20#.#07.83.254':445
'20#.#07.40.51':445
'20#.#07.178.31':139
'20#.#07.26.99':139
'20#.#07.49.227':139
'20#.#07.58.65':139
'20#.#07.108.220':139
'20#.#07.56.234':139
'20#.#07.101.97':139
'20#.#07.78.116':139
'20#.#07.65.85':139
'20#.#07.109.210':445
'20#.#07.150.96':445
'20#.#07.202.86':445
'20#.#07.154.67':445
'20#.#07.127.215':445
'20#.#07.134.224':445
'20#.#07.83.254':139
'20#.#07.75.173':445
'20#.#07.254.66':445
'20#.#07.39.154':445
'20#.#07.178.116':445
'20#.#07.252.64':445
'20#.207.8.4':445
'20#.#07.197.7':445
'20#.#07.27.121':445
'20#.#07.3.88':445
'20#.#07.87.166':445
'20#.#07.133.187':445
'20#.#07.31.62':139
'20#.#07.65.85':445
'20#.#07.56.234':445
'20#.#07.58.65':445
'20#.#07.26.99':445
'20#.#07.78.116':445
'20#.#07.44.146':445
'20#.#07.245.151':445
'20#.#07.108.220':445
'20#.#07.101.97':445
'20#.#07.66.157':445
'20#.#07.253.161':445
'20#.#07.183.46':445
'20#.#07.121.66':445
'20#.#07.187.218':445
'20#.#07.49.227':445
'20#.#07.178.31':445
'20#.#07.15.107':445
'20#.#07.31.62':445
'20#.#07.183.46':139
'20#.#07.248.77':139
'20#.#07.201.29':139
'20#.#07.171.182':139
'20#.#07.121.66':139
'20#.#07.187.218':139
'20#.#07.15.107':139
'20#.#07.66.157':139
'20#.#07.253.161':139
'20#.#07.117.67':445
'20#.#07.87.102':139
'20#.#07.34.49':445
'20#.#07.25.18':445
'20#.#07.41.252':139
'20#.#07.90.28':139
'20#.#07.108.81':139
'20#.#07.140.185':139
'20#.#07.17.77':139
'20#.#07.15.34':139
'20#.#07.26.222':445
'20#.#07.142.136':445
'20#.#07.6.228':445
'20#.#07.2.145':445
'20#.#07.148.247':445
'20#.#07.48.174':139
'20#.#07.97.231':139
'20#.#07.56.231':139
'20#.#07.53.208':139
'20#.#07.53.208':445
'20#.#07.10.186':445
'20#.#07.54.123':445
'20#.#07.48.174':445
'20#.#07.33.16':445
'20#.#07.231.160':445
'20#.#07.56.231':445
'20#.#07.12.5':445
'20#.#07.97.231':445
'20#.#07.26.222':139
'20#.#07.148.247':139
'20#.#07.6.228':139
'20#.#07.2.145':139
'20#.#07.142.136':139
'20#.#07.156.197':445
'20#.#07.49.92':445
'20#.#07.228.18':445
'20#.#07.195.134':445
'20#.#07.33.16':139
'20#.#07.12.5':139
'20#.#07.231.160':139
'20#.#07.54.123':139
'20#.#07.5.180':139
'20#.#07.143.61':139
'20#.#07.61.163':139
'20#.#07.178.23':139
'20#.#07.10.186':139
'20#.#07.5.180':445
'20#.#07.13.26':139
'20#.#07.253.244':139
'20#.#07.0.181':139
'20#.#07.50.131':139
'20#.#07.108.70':139
'20#.#07.29.228':139
'20#.#07.25.202':139
'20#.#07.130.190':139
'20#.#07.135.27':139
'20#.#07.64.161':139
'20#.#07.54.140':139
'20#.#07.121.28':139
'20#.#07.8.35':139
'20#.#07.171.33':139
'20#.#07.98.38':139
'20#.#07.41.136':139
'20#.#07.62.64':139
'20#.#07.64.36':139
'20#.#07.134.71':139
'20#.#07.156.41':139
'20#.#07.114.160':139
'20#.#07.24.134':139
'20#.#07.71.104':139
'20#.#07.143.61':445
'20#.#07.178.23':445
'20#.#07.42.23':139
'20#.#07.61.163':445
'20#.#07.60.15':139
'20#.#07.1.251':139
'20#.#07.55.200':139
'20#.#07.86.245':139
'20#.#07.80.5':139
'20#.#07.50.175':139
'20#.#07.244.183':139
'20#.#07.52.108':139
'20#.#07.178.244':139
'20#.#07.22.160':445
'20#.#07.49.92':139
'20#.#07.45.147':139
'20#.#07.22.62':445
'20#.#07.128.152':445
'20#.#07.97.212':445
'20#.#07.169.205':139
'20#.#07.68.114':139
'20#.#07.2.133':139
'20#.#07.22.160':139
'20#.#07.134.103':445
'20#.#07.154.213':445
'20#.#07.145.51':445
'20#.#07.239.134':445
'20#.#07.156.197':139
'20#.#07.126.164':445
'20#.#07.164.97':445
'20#.#07.145.62':445
'20#.#07.25.249':445
'20#.#07.238.41':139
'20#.#07.162.108':139
'20#.#07.219.115':139
'20#.#07.115.237':139
'20#.#07.170.154':139
'20#.#07.160.192':139
'20#.#07.247.233':139
'20#.#07.235.122':139
'20#.#07.217.194':139
'20#.#07.2.225':139
'20#.#07.83.103':139
'20#.#07.52.19':139
'20#.#07.192.58':139
'20#.#07.36.23':139
'20#.#07.86.160':139
'20#.#07.219.219':139
'20#.#07.179.91':139
'20#.#07.34.112':139
'20#.#07.195.134':139
'20#.#07.34.112':445
'20#.#07.219.219':445
'20#.#07.36.23':445
'20#.#07.86.160':445
'20#.#07.219.115':445
'20#.#07.162.108':445
'20#.#07.235.122':445
'20#.#07.115.237':445
'20#.#07.238.41':445
'20#.#07.169.205':445
'20#.#07.192.58':445
'20#.#07.2.133':445
'20#.#07.45.147':445
'20#.#07.52.19':445
'20#.#07.83.103':445
'20#.#07.179.91':445
'20#.#07.68.114':445
'20#.#07.2.225':445
'20#.#07.32.0':445
'20#.#07.13.133':445
'20#.#07.230.201':445
'20#.#07.184.228':445
'20#.#07.17.0':445
'20#.#07.65.200':445
'20#.#07.228.18':139
'20#.#07.52.253':445
'20#.#07.12.233':445
'20#.#07.160.192':445
'20#.#07.247.233':445
'20#.#07.170.154':445
'20#.#07.217.194':445
'20#.#07.159.129':445
'20#.#07.109.146':445
'20#.#07.113.167':445
'20#.#07.225.183':445
'20#.#07.15.34':445
'20#.#07.119.236':445
'20#.#07.23.184':445
'20#.#07.124.114':445
'20#.#07.200.96':445
'20#.#07.167.74':445
'20#.#07.11.105':445
'20#.#07.160.72':445
'20#.#07.220.85':445
'20#.#07.130.107':445
'20#.#07.71.46':9988
'20#.#07.26.0':9988
'20#.#07.45.214':9988
'20#.#07.243.253':9988
'20#.#07.177.15':9988
'20#.#07.112.14':9988
'20#.#07.49.33':445
'20#.#07.186.132':9988
'20#.#07.76.92':9988
'20#.#07.164.150':445
'20#.#07.26.140':445
'20#.#07.167.15':445
'20#.#07.15.165':445
'20#.#07.251.191':445
'20#.#07.71.46':445
'20#.#07.234.22':445
'20#.#07.45.214':445
'20#.#07.243.253':445
'20#.#07.209.2':445
'20#.#07.81.98':445
'20#.#07.34.71':445
'20#.#07.70.140':445
'20#.#07.68.201':445
'20#.#07.100.160':445
'20#.#07.7.167':445
'20#.#07.80.1':445
'20#.#07.30.137':445
'20#.#07.164.150':9988
'20#.#07.14.30':139
'20#.#07.30.102':139
'20#.#07.229.105':139
'20#.#07.143.53':139
'20#.#07.151.97':139
'20#.#07.124.233':139
'20#.#07.233.179':139
'20#.#07.110.116':139
'20#.#07.61.165':139
'20#.#07.165.41':445
'20#.#07.233.137':445
'20#.#07.36.192':445
'20#.#07.239.8':445
'20#.#07.141.144':445
'20#.#07.11.191':139
'20#.#07.63.48':139
'20#.#07.184.188':139
'20#.#07.62.139':139
'20#.#07.36.192':139
'20#.#07.239.8':139
'20#.#07.129.161':139
'20#.#07.151.154':139
'20#.#07.233.137':139
'20#.#07.30.137':9988
'20#.#07.167.15':9988
'20#.#07.141.144':139
'20#.#07.165.41':139
'20#.#07.247.215':139
'20#.#07.216.17':139
'20#.#07.247.167':139
'20#.#07.219.247':139
'20#.#07.166.181':139
'20#.#07.64.70':139
'20#.#07.174.160':139
'20#.#07.94.212':139
'20#.#07.76.157':139
'20#.#07.23.26':445
'20#.#07.71.46':139
'20#.#07.234.22':139
'20#.#07.45.214':139
'20#.#07.243.253':139
'20#.#07.23.26':139
'20#.#07.177.196':139
'20#.#07.176.104':139
'20#.#07.26.19':139
'20#.#07.18.178':139
'20#.#07.100.160':139
'20#.#07.7.167':139
'20#.#07.80.1':139
'20#.#07.30.137':139
'20#.#07.167.15':139
'20#.#07.26.140':139
'20#.#07.251.191':139
'20#.#07.15.165':139
'20#.#07.164.150':139
'20#.#07.67.157':139
'20#.#07.29.30':139
'20#.#07.186.132':139
'20#.#07.185.77':139
'20#.#07.76.92':139
'20#.#07.112.14':139
'20#.#07.250.160':139
'20#.#07.61.242':139
'20#.#07.242.98':139
'20#.#07.89.95':139
'20#.#07.52.31':139
'20#.#07.145.83':139
'20#.#07.187.237':139
'20#.#07.166.89':139
'20#.#07.26.0':139
'20#.#07.177.15':139
'20#.#07.101.189':139
'20#.#07.174.52':139
'20#.#07.68.201':139
'20#.#07.26.0':445
'20#.#07.177.15':445
'20#.#07.101.189':445
'20#.#07.174.52':445
'20#.#07.186.132':445
'20#.#07.29.30':445
'20#.#07.76.92':445
'20#.#07.185.77':445
'20#.#07.67.157':445
'20#.#07.177.196':445
'20#.#07.176.104':445
'20#.#07.26.19':445
'20#.#07.18.178':445
'20#.#07.145.83':445
'20#.#07.52.31':445
'20#.#07.166.89':445
'20#.#07.187.237':445
'20#.#07.89.95':445
'20#.#07.130.107':139
'20#.#07.11.105':139
'20#.#07.167.74':139
'20#.#07.220.85':139
'20#.#07.160.72':139
'20#.#07.209.2':139
'20#.#07.81.98':139
'20#.#07.34.71':139
'20#.#07.70.140':139
'20#.#07.112.14':445
'20#.#07.250.160':445
'20#.#07.61.242':445
'20#.#07.242.98':445
'20#.#07.49.33':139
'20#.#07.119.236':139
'20#.#07.23.184':139
'20#.#07.124.114':139
'20#.#07.200.96':139
'20#.#07.151.154':445
'20#.#07.160.148':445
'20#.#07.179.132':445
'20#.#07.249.198':445
'20#.#07.186.163':445
'20#.#07.174.40':139
'20#.#07.43.244':139
'20#.#07.173.217':139
'20#.#07.7.229':139
'20#.#07.2.168':139
'20#.#07.1.218':445
'20#.#07.240.41':445
'20#.#07.5.211':445
'20#.#07.161.204':445
'20#.#07.81.230':445
'20#.#07.17.79':445
'20#.#07.11.94':445
'20#.#07.2.75':445
'20#.#07.245.51':445
'20#.#07.161.204':139
'20#.#07.1.218':139
'20#.#07.28.249':139
'20#.#07.204.70':139
'20#.#07.202.5':139
'20#.#07.81.230':139
'20#.#07.2.75':139
'20#.#07.5.211':139
'20#.#07.240.41':139
'20#.#07.136.101':139
'20#.#07.190.103':139
'20#.#07.251.122':139
'20#.#07.35.138':139
'20#.#07.245.221':139
'20#.#07.170.31':139
'20#.#07.73.12':139
'20#.#07.91.103':139
'20#.#07.160.250':139
'20#.#07.202.5':445
'20#.#07.39.154':139
'20#.#07.202.86':139
'20#.#07.87.166':139
'20#.#07.27.121':139
'20#.#07.154.67':139
'20#.#07.127.215':139
'20#.#07.254.66':139
'20#.#07.109.210':139
'20#.#07.150.96':139
'20#.#07.174.120':139
'20#.#07.133.187':139
'20#.#07.40.51':139
'20#.#07.155.24':139
'20#.#07.178.116':139
'20#.207.8.4':139
'20#.#07.3.88':139
'20#.#07.252.64':139
'20#.#07.197.7':139
'20#.#07.245.221':445
'20#.#07.91.103':445
'20#.#07.136.101':445
'20#.#07.190.103':445
'20#.#07.170.31':445
'20#.#07.28.249':445
'20#.#07.73.12':445
'20#.#07.160.250':445
'20#.#07.204.70':445
'20#.#07.174.40':445
'20#.#07.7.229':445
'20#.#07.134.224':139
'20#.#07.75.173':139
'20#.#07.2.168':445
'20#.#07.251.122':445
'20#.#07.35.138':445
'20#.#07.173.217':445
'20#.#07.43.244':445
'20#.#07.245.51':139
'20#.#07.56.41':139
'20#.#07.129.113':139
'20#.#07.216.115':139
'20#.#07.165.90':139
'20#.#07.184.188':445
'20#.#07.143.53':445
'20#.#07.14.30':445
'20#.#07.62.139':445
'20#.#07.151.97':445
'20#.#07.248.161':139
'20#.#07.182.237':139
'20#.#07.152.204':139
'20#.#07.212.15':139
'20#.#07.46.4':139
'20#.#07.173.56':139
'20#.#07.56.128':139
'20#.#07.10.116':139
'20#.#07.253.172':139
'20#.#07.216.17':445
'20#.#07.166.181':445
'20#.#07.219.247':445
'20#.#07.247.215':445
'20#.#07.94.212':445
'20#.#07.174.160':445
'20#.#07.129.161':445
'20#.#07.64.70':445
'20#.#07.76.157':445
'20#.#07.30.102':445
'20#.#07.229.105':445
'20#.#07.63.48':445
'20#.#07.11.191':445
'20#.#07.110.116':445
'20#.#07.233.179':445
'20#.#07.247.167':445
'20#.#07.61.165':445
'20#.#07.124.233':445
'20#.#07.5.185':139
'20#.#07.58.10':445
'20#.#07.9.104':445
'20#.#07.27.33':445
'20#.#07.91.1':445
'20#.#07.125.107':445
'20#.#07.152.204':445
'20#.#07.248.161':445
'20#.#07.212.15':445
'20#.#07.5.185':445
'20#.#07.11.94':139
'20#.#07.160.148':139
'20#.#07.17.79':139
'20#.#07.249.198':139
'20#.#07.186.163':139
'20#.#07.72.122':445
'20#.#07.44.250':445
'20#.#07.179.132':139
'20#.#07.101.247':445
'20#.#07.101.247':139
'20#.#07.72.122':139
'20#.#07.129.113':445
'20#.#07.44.250':139
'20#.#07.27.33':139
'20#.#07.9.104':139
'20#.#07.125.107':139
'20#.#07.91.1':139
'20#.#07.58.10':139
'20#.#07.253.172':445
'20#.#07.10.116':445
'20#.#07.46.4':445
'20#.#07.182.237':445
'20#.#07.173.56':445
'20#.#07.56.41':445
'20#.#07.165.90':445
'20#.#07.56.128':445
'20#.#07.216.115':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней