Trojan.Starman.5124

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#0.236.163':139
'20#.#0.129.209':139
'20#.#0.163.166':139
'20#.#0.54.10':139
'20#.#0.167.53':139
'20#.#0.163.203':139
'20#.#0.78.73':139
'20#.#0.241.102':139
'20#.#0.181.164':139
'20#.#0.221.111':139
'20#.#0.120.103':139
'20#.80.0.39':139
'20#.#0.41.195':139
'20#.#0.60.15':139
'20#.#0.84.30':139
'20#.80.5.82':139
'20#.#0.174.188':139
'20#.#0.101.220':139
'20#.80.9.78':139
'20#.#0.71.189':139
'20#.#0.54.11':139
'20#.#0.14.245':445
'20#.#0.60.15':445
'20#.#0.245.31':445
'20#.#0.75.85':445
'20#.#0.31.221':445
'20#.80.0.39':445
'20#.80.9.78':445
'20#.#0.120.103':445
'20#.#0.84.30':445
'20#.#0.41.195':445
'20#.#0.71.160':445
'20#.#0.119.227':445
'20#.#0.34.53':445
'20#.#0.89.241':139
'20#.#0.210.67':445
'20#.#0.44.170':445
'20#.#0.203.44':445
'20#.#0.42.194':445
'20#.#0.142.135':445
'20#.#0.250.183':445
'20#.#0.29.89':445
'20#.#0.197.28':445
'20#.#0.89.49':445
'20#.#0.69.39':139
'20#.#0.69.147':139
'20#.#0.66.101':445
'20#.#0.15.65':445
'20#.#0.76.191':445
'20#.#0.110.219':445
'20#.#0.243.93':445
'20#.#0.15.65':139
'20#.#0.197.244':139
'20#.#0.66.101':139
'20#.#0.243.93':139
'20#.#0.76.191':139
'20#.#0.94.169':139
'20#.#0.133.59':139
'20#.#0.106.131':139
'20#.#0.73.23':139
'20#.#0.98.102':139
'20#.#0.197.244':445
'20#.#0.42.194':139
'20#.#0.44.170':139
'20#.#0.250.183':139
'20#.#0.119.227':139
'20#.#0.142.135':139
'20#.#0.245.31':139
'20#.#0.14.245':139
'20#.#0.31.221':139
'20#.#0.203.44':139
'20#.#0.75.85':139
'20#.#0.94.169':445
'20#.#0.133.59':445
'20#.#0.106.131':445
'20#.#0.73.23':445
'20#.#0.98.102':445
'20#.#0.34.53':139
'20#.#0.71.160':139
'20#.#0.210.67':139
'20#.#0.69.39':445
'20#.#0.69.147':445
'20#.#0.71.189':445
'20#.#0.39.45':139
'20#.#0.45.39':139
'20#.#0.39.225':139
'20#.#0.179.123':139
'20#.#0.124.99':139
'20#.#0.73.113':139
'20#.#0.80.214':139
'20#.#0.26.134':139
'20#.#0.4.104':139
'20#.#0.3.144':139
'20#.#0.185.112':445
'20#.#0.178.54':445
'20#.#0.185.167':445
'20#.#0.12.163':445
'20#.#0.134.16':445
'20#.#0.72.248':139
'20#.#0.228.87':139
'20#.#0.135.204':139
'20#.#0.14.208':445
'20#.#0.164.47':139
'20#.#0.149.203':139
'20#.#0.101.90':139
'20#.#0.16.145':139
'20#.#0.162.21':139
'20#.#0.154.62':139
'20#.#0.213.176':139
'20#.#0.135.241':139
'20#.#0.14.111':139
'20#.#0.54.178':139
'20#.#0.198.65':139
'20#.#0.186.185':139
'20#.#0.92.221':139
'20#.#0.69.133':139
'20#.#0.75.175':139
'20#.#0.28.149':139
'20#.#0.182.148':139
'20#.#0.92.199':139
'20#.#0.174.98':139
'20#.#0.6.221':139
'20#.#0.48.70':139
'20#.#0.243.41':139
'20#.#0.54.11':445
'20#.#0.89.241':445
'20#.#0.78.73':445
'20#.#0.241.102':445
'20#.#0.163.203':445
'20#.#0.249.207':139
'20#.#0.208.109':139
'20#.#0.234.77':139
'20#.#0.77.148':139
'20#.#0.213.20':139
'20#.#0.54.10':445
'20#.#0.167.53':445
'20#.#0.174.188':445
'20#.#0.101.220':445
'20#.80.5.82':445
'20#.#0.181.164':445
'20#.#0.221.111':445
'20#.#0.129.209':445
'20#.#0.163.166':445
'20#.#0.236.163':445
'20#.#0.249.208':139
'20#.#0.249.207':445
'20#.#0.208.109':445
'20#.#0.234.77':445
'20#.#0.77.148':445
'20#.#0.213.20':445
'20#.80.60.2':445
'20#.#0.51.122':445
'20#.#0.194.58':445
'20#.#0.249.208':445
'20#.#0.120.249':445
'20#.#0.51.122':139
'20#.#0.12.163':139
'20#.80.60.2':139
'20#.#0.120.249':139
'20#.#0.194.58':139
'20#.#0.178.54':139
'20#.#0.14.208':139
'20#.#0.185.167':139
'20#.#0.134.16':139
'20#.#0.185.112':139
'20#.#0.110.219':139
'20#.#0.97.74':445
'20#.#0.10.94':445
'20#.#0.100.254':445
'20#.#0.39.26':445
'20#.#0.178.75':445
'20#.80.73.9':445
'20#.#0.147.218':445
'20#.#0.58.167':445
'20#.#0.10.116':445
'20#.#0.163.200':445
'20#.80.6.89':139
'20#.#0.64.21':139
'20#.#0.123.165':139
'20#.#0.164.230':139
'20#.#0.199.157':139
'20#.#0.32.189':139
'20#.#0.31.120':139
'20#.#0.33.89':139
'20#.#0.246.85':139
'20#.#0.33.31':139
'20#.#0.77.19':445
'20#.#0.141.38':445
'20#.#0.206.234':445
'20#.#0.138.155':445
'20#.#0.189.145':445
'20#.#0.239.140':445
'20#.#0.60.52':445
'20#.#0.58.11':445
'20#.#0.111.202':445
'20#.#0.25.183':445
'20#.#0.202.91':445
'20#.#0.112.144':445
'20#.#0.109.115':445
'20#.#0.16.112':445
'20#.#0.137.139':445
'20#.#0.30.124':445
'20#.#0.209.15':445
'20#.#0.195.81':445
'20#.#0.38.25':445
'20#.#0.141.135':445
'20#.#0.53.53':445
'20#.#0.16.112':139
'20#.#0.112.144':139
'20#.#0.30.124':139
'20#.#0.77.19':139
'20#.#0.137.139':139
'20#.#0.38.25':139
'20#.#0.209.15':139
'20#.#0.53.53':139
'20#.#0.109.115':139
'20#.#0.141.135':139
'20#.#0.97.74':139
'20#.#0.10.94':139
'20#.#0.39.26':139
'20#.#0.100.254':139
'20#.#0.178.75':139
'20#.80.73.9':139
'20#.#0.147.218':139
'20#.#0.58.167':139
'20#.#0.10.116':139
'20#.#0.163.200':139
'20#.#0.195.81':139
'20#.#0.201.38':139
'20#.#0.61.237':139
'20#.#0.42.147':139
'20#.#0.79.58':139
'20#.#0.81.179':139
'20#.#0.121.199':139
'20#.#0.170.121':139
'20#.#0.157.42':139
'20#.#0.191.97':139
'20#.#0.198.184':139
'20#.#0.141.38':139
'20#.#0.206.234':139
'20#.#0.138.155':139
'20#.#0.189.145':139
'20#.#0.239.140':139
'20#.#0.60.52':139
'20#.#0.58.11':139
'20#.#0.111.202':139
'20#.#0.25.183':139
'20#.#0.202.91':139
'20#.#0.79.58':445
'20#.#0.245.49':139
'20#.#0.134.120':139
'20#.#0.200.169':139
'20#.#0.27.72':139
'20#.#0.71.163':139
'20#.#0.75.125':445
'20#.#0.167.75':445
'20#.#0.255.102':445
'20#.#0.212.198':445
'20#.80.23.6':445
'20#.#0.220.24':139
'20#.#0.128.231':139
'20#.#0.75.189':139
'20#.#0.124.181':139
'20#.#0.96.125':139
'20#.80.6.15':139
'20#.#0.110.59':139
'20#.#0.115.223':139
'20#.#0.191.92':139
'20#.#0.50.128':139
'20#.#0.135.166':445
'20#.#0.71.163':445
'20#.#0.200.169':445
'20#.#0.27.72':445
'20#.80.6.15':445
'20#.#0.110.59':445
'20#.#0.29.89':139
'20#.#0.197.28':139
'20#.#0.89.49':139
'20#.#0.245.49':445
'20#.#0.134.120':445
'20#.#0.96.125':445
'20#.#0.75.189':445
'20#.#0.124.181':445
'20#.#0.212.94':445
'20#.#0.181.143':445
'20#.#0.50.128':445
'20#.#0.115.223':445
'20#.#0.191.92':445
'20#.#0.220.24':445
'20#.#0.128.231':445
'20#.#0.64.21':445
'20#.#0.246.85':445
'20#.80.6.89':445
'20#.#0.199.157':445
'20#.#0.123.165':445
'20#.#0.31.120':445
'20#.#0.178.75':9988
'20#.#0.32.189':445
'20#.#0.33.31':445
'20#.#0.33.89':445
'20#.#0.61.237':445
'20#.#0.191.97':445
'20#.#0.201.38':445
'20#.#0.81.179':445
'20#.#0.42.147':445
'20#.#0.170.121':445
'20#.#0.164.230':445
'20#.#0.121.199':445
'20#.#0.198.184':445
'20#.#0.157.42':445
'20#.#0.10.94':9988
'20#.80.23.6':139
'20#.#0.255.102':139
'20#.#0.212.198':139
'20#.#0.201.38':9988
'20#.#0.170.121':9988
'20#.#0.212.94':139
'20#.#0.181.143':139
'20#.#0.135.166':139
'20#.#0.75.125':139
'20#.#0.167.75':139
'20#.#0.109.115':9988
'20#.#0.141.135':9988
'20#.#0.112.144':9988
'20#.#0.30.124':9988
'20#.#0.16.112':9988
'20#.#0.25.183':9988
'20#.#0.60.52':9988
'20#.#0.111.202':9988
'20#.#0.38.25':9988
'20#.#0.138.155':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней