Trojan.Starman.5125

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#23.96.225':139
'20#.#23.53.107':139
'20#.#23.81.137':139
'20#.#23.133.179':139
'20#.#23.186.167':139
'20#.#23.96.68':445
'20#.#23.241.227':445
'20#.#23.134.144':445
'20#.#23.2.135':445
'20#.#23.215.1':445
'20#.#23.64.221':139
'20#.#23.67.157':139
'20#.#23.40.142':139
'20#.#23.81.214':139
'20#.#23.61.88':139
'20#.#23.21.128':139
'20#.#23.214.231':139
'20#.#23.127.241':139
'20#.#23.209.66':139
'20#.#23.241.208':139
'20#.#23.79.27':445
'20#.#23.58.250':445
'20#.#23.14.87':445
'20#.#23.195.239':445
'20#.#23.211.18':445
'20#.#23.40.84':445
'20#.#23.40.142':445
'20#.#23.64.221':445
'20#.#23.61.88':445
'20#.#23.146.14':445
'20#.#23.81.214':445
'20#.#23.22.182':445
'20#.#23.147.173':445
'20#.#23.127.2':445
'20#.#23.80.164':445
'20#.#23.3.81':445
'20#.#23.145.251':445
'20#.#23.178.146':445
'20#.#23.251.171':445
'20#.#23.10.212':445
'20#.#23.171.180':445
'20#.#23.146.14':139
'20#.#23.176.208':445
'20#.#23.144.249':445
'20#.#23.92.142':445
'20#.#23.12.248':445
'20#.#23.162.161':445
'20#.#23.22.10':445
'20#.#23.142.149':445
'20#.#23.9.72':445
'20#.#23.103.207':445
'20#.#23.114.184':445
'20#.#23.9.72':139
'20#.#23.22.10':139
'20#.#23.114.184':139
'20#.#23.144.249':139
'20#.#23.103.207':139
'20#.#23.193.19':445
'20#.#23.119.125':445
'20#.#23.94.25':445
'20#.#23.142.149':139
'20#.#23.12.198':445
'20#.#23.2.135':139
'20#.#23.145.251':139
'20#.#23.178.146':139
'20#.#23.251.171':139
'20#.#23.10.212':139
'20#.#23.171.180':139
'20#.#23.58.250':139
'20#.#23.14.87':139
'20#.#23.195.239':139
'20#.#23.211.18':139
'20#.#23.40.84':139
'20#.#23.241.227':139
'20#.#23.79.27':139
'20#.#23.96.68':139
'20#.#23.215.1':139
'20#.#23.134.144':139
'20#.#23.22.182':139
'20#.#23.147.173':139
'20#.#23.127.2':139
'20#.#23.80.164':139
'20#.#23.3.81':139
'20#.#23.83.168':139
'20#.#23.249.83':139
'20#.#23.251.33':139
'20#.#23.187.227':139
'20#.#23.219.28':139
'20#.#23.235.130':139
'20#.#23.192.6':139
'20#.#23.40.59':139
'20#.#23.18.131':139
'20#.#23.194.58':139
'20#.#23.107.198':139
'20#.#23.190.135':139
'20#.#23.46.144':139
'20#.#23.149.4':139
'20#.#23.144.155':139
'20#.#23.179.105':139
'20#.#23.15.173':139
'20#.#23.238.114':139
'20#.#23.45.205':139
'20#.#23.23.95':139
'20#.#23.43.221':139
'20#.#23.51.30':445
'20#.#23.224.50':445
'20#.#23.8.109':139
'20#.#23.237.148':139
'20#.#23.137.13':139
'20#.#23.46.144':445
'20#.#23.107.198':445
'20#.#23.144.155':445
'20#.#23.21.224':445
'20#.#23.149.4':445
'20#.#23.154.237':139
'20#.#23.198.183':139
'20#.#23.33.13':139
'20#.#23.156.173':139
'20#.#23.184.48':139
'20#.#23.38.14':139
'20#.#23.134.52':139
'20#.#23.105.58':139
'20#.#23.6.147':139
'20#.#23.169.17':139
'20#.#23.21.224':139
'20#.#23.166.175':139
'20#.#23.42.171':139
'20#.#23.222.251':139
'20#.#23.53.107':445
'20#.#23.228.211':139
'20#.#23.186.207':139
'20#.#23.95.150':139
'20#.#23.197.24':139
'20#.#23.4.203':139
'20#.#23.86.231':139
'20#.#23.127.241':445
'20#.#23.21.128':445
'20#.#23.241.208':445
'20#.#23.67.157':445
'20#.#23.209.66':445
'20#.#23.81.137':445
'20#.#23.96.225':445
'20#.#23.186.167':445
'20#.#23.214.231':445
'20#.#23.133.179':445
'20#.#23.193.74':139
'20#.#23.193.74':445
'20#.#23.131.193':445
'20#.#23.95.150':445
'20#.#23.197.24':445
'20#.#23.186.207':445
'20#.#23.51.30':139
'20#.#23.224.50':139
'20#.#23.215.90':445
'20#.#23.38.132':445
'20#.#23.51.144':445
'20#.#23.215.90':139
'20#.#23.228.211':445
'20#.#23.51.144':139
'20#.#23.131.193':139
'20#.#23.38.132':139
'20#.#23.4.203':445
'20#.#23.86.231':445
'20#.#23.42.171':445
'20#.#23.222.251':445
'20#.#23.166.175':445
'20#.#23.176.208':139
'20#.#23.157.153':445
'20#.#23.15.31':445
'20#.#23.86.157':445
'20#.#23.183.3':445
'20#.#23.207.153':445
'20#.#23.102.129':445
'20#.#23.9.167':445
'20#.#23.141.85':445
'20#.#23.25.143':445
'20#.#23.15.224':445
'20#.#23.10.193':139
'20#.#23.27.170':139
'20#.#23.2.184':139
'20#.#23.183.2':139
'20#.#23.113.249':139
'20#.#23.8.161':139
'20#.#23.99.236':445
'20#.#23.50.195':139
'20#.#23.176.39':139
'20#.#23.220.142':139
'20#.#23.142.132':445
'20#.#23.48.93':445
'20#.#23.218.202':445
'20#.#23.60.86':445
'20#.#23.112.207':445
'20#.#23.108.215':445
'20#.#23.157.126':445
'20#.#23.64.101':445
'20#.#23.194.54':445
'20#.#23.155.113':445
'20#.#23.80.133':445
'20#.#23.54.124':445
'20#.#23.178.29':445
'20#.#23.117.117':445
'20#.#23.134.91':445
'20#.#23.212.83':445
'20#.#23.116.78':445
'20#.#23.6.203':445
'20#.#23.17.227':445
'20#.#23.123.15':445
'20#.#23.129.155':445
'20#.#23.44.214':139
'20#.#23.212.83':139
'20#.#23.117.117':139
'20#.#23.134.91':139
'20#.#23.9.167':139
'20#.#23.142.132':139
'20#.#23.129.155':139
'20#.#23.17.227':139
'20#.#23.123.15':139
'20#.#23.54.124':139
'20#.#23.178.29':139
'20#.#23.86.157':139
'20#.#23.157.153':139
'20#.#23.207.153':139
'20#.#23.183.3':139
'20#.#23.99.236':139
'20#.#23.141.85':139
'20#.#23.102.129':139
'20#.#23.15.224':139
'20#.#23.15.31':139
'20#.#23.25.143':139
'20#.#23.116.78':139
'20#.#23.10.92':139
'20#.#23.2.113':139
'20#.#23.148.60':139
'20#.#23.64.101':139
'20#.#23.164.103':139
'20#.#23.176.85':139
'20#.#23.253.57':139
'20#.#23.53.179':139
'20#.#23.38.3':139
'20#.#23.179.37':139
'20#.#23.60.86':139
'20#.#23.48.93':139
'20#.#23.108.215':139
'20#.#23.6.203':139
'20#.#23.112.207':139
'20#.#23.194.54':139
'20#.#23.157.126':139
'20#.#23.80.133':139
'20#.#23.218.202':139
'20#.#23.155.113':139
'20#.#23.12.150':445
'20#.#23.177.208':445
'20#.#23.173.209':139
'20#.#23.37.26':139
'20#.#23.210.37':139
'20#.#23.230.146':445
'20#.#23.169.230':445
'20#.#23.88.93':445
'20#.#23.69.89':445
'20#.#23.96.181':445
'20#.#23.65.101':139
'20#.#23.54.125':139
'20#.#23.127.126':139
'20#.#23.100.42':139
'20#.#23.13.63':139
'20#.#23.7.151':139
'20#.#23.19.121':139
'20#.#23.2.215':139
'20#.#23.35.49':139
'20#.#23.139.34':139
'20#.#23.150.55':445
'20#.#23.12.198':139
'20#.#23.94.25':139
'20#.#23.173.209':445
'20#.#23.37.26':445
'20#.#23.210.37':445
'20#.#23.162.161':139
'20#.#23.92.142':139
'20#.#23.12.248':139
'20#.#23.193.19':139
'20#.#23.119.125':139
'20#.#23.65.101':445
'20#.#23.54.125':445
'20#.#23.127.126':445
'20#.#23.100.42':445
'20#.#23.13.63':445
'20#.#23.7.151':445
'20#.#23.19.121':445
'20#.#23.2.215':445
'20#.#23.35.49':445
'20#.#23.139.34':445
'20#.#23.150.55':139
'20#.#23.10.193':445
'20#.#23.27.170':445
'20#.#23.2.184':445
'20#.#23.183.2':445
'20#.#23.113.249':445
'20#.#23.8.161':445
'20#.#23.86.157':9988
'20#.#23.50.195':445
'20#.#23.176.39':445
'20#.#23.220.142':445
'20#.#23.2.113':445
'20#.#23.38.3':445
'20#.#23.10.92':445
'20#.#23.164.103':445
'20#.#23.148.60':445
'20#.#23.253.57':445
'20#.#23.44.214':445
'20#.#23.176.85':445
'20#.#23.179.37':445
'20#.#23.53.179':445
'20#.#23.157.153':9988
'20#.#23.12.150':139
'20#.#23.177.208':139
'20#.#23.2.184':9988
'20#.#23.253.57':9988
'20#.#23.183.2':9988
'20#.#23.230.146':139
'20#.#23.169.230':139
'20#.#23.88.93':139
'20#.#23.69.89':139
'20#.#23.96.181':139
'20#.#23.212.83':9988
'20#.#23.17.227':9988
'20#.#23.142.132':9988
'20#.#23.15.224':9988
'20#.#23.15.31':9988
'20#.#23.194.54':9988
'20#.#23.157.126':9988
'20#.#23.155.113':9988
'20#.#23.108.215':9988
'20#.#23.218.202':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней