Trojan.Starman.5067

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#51.153.126':139
'21#.#51.79.196':139
'21#.#51.126.72':139
'21#.#51.197.236':139
'21#.#51.72.239':139
'21#.#51.10.92':139
'21#.#51.32.10':139
'21#.#51.6.87':139
'21#.#51.236.77':139
'21#.#51.159.42':139
'21#.#51.243.25':139
'21#.#51.162.5':139
'21#.#51.180.244':139
'21#.#51.7.236':139
'21#.#51.69.229':139
'21#.#51.254.212':139
'21#.#51.32.222':139
'21#.#51.26.33':139
'21#.#51.165.82':139
'21#.#51.56.228':139
'21#.#51.115.129':139
'21#.#51.32.222':445
'21#.#51.26.33':445
'21#.#51.165.82':445
'21#.#51.56.228':445
'21#.#51.115.129':445
'21#.#51.126.72':445
'21#.#51.153.126':445
'21#.#51.72.239':445
'21#.#51.243.25':445
'21#.#51.197.236':445
'21#.#51.180.244':445
'21#.#51.44.80':139
'21#.#51.64.165':139
'21#.#51.207.157':139
'21#.#51.34.110':139
'21#.#51.27.143':139
'21#.#51.7.236':445
'21#.#51.162.5':445
'21#.#51.254.212':445
'21#.#51.228.173':445
'21#.#51.69.229':445
'21#.#51.228.173':139
'21#.#51.75.235':139
'21#.#51.31.147':139
'21#.#51.218.121':139
'21#.#51.133.46':139
'21#.#51.121.207':139
'21#.#51.73.24':445
'21#.#51.23.166':445
'21#.#51.1.114':445
'21#.#51.34.1':139
'21#.#51.4.38':139
'21#.#51.151.241':139
'21#.#51.12.212':139
'21#.#51.162.144':139
'21#.#51.217.41':139
'21#.#51.78.157':139
'21#.#51.42.39':139
'21#.#51.143.230':139
'21#.#51.85.248':139
'21#.#51.81.126':139
'21#.#51.2.132':139
'21#.#51.158.109':139
'21#.#51.133.46':445
'21#.#51.121.207':445
'21#.#51.151.241':445
'21#.#51.143.230':445
'21#.#51.85.248':445
'21#.#51.34.1':445
'21#.#51.4.38':445
'21#.#51.31.147':445
'21#.#51.218.121':445
'21#.#51.75.235':445
'21#.#51.81.126':445
'21#.#51.78.157':445
'21#.#51.42.39':445
'21#.#51.3.252':445
'21#.#51.123.45':445
'21#.#51.155.49':445
'21#.#51.2.132':445
'21#.#51.158.109':445
'21#.#51.162.144':445
'21#.#51.217.41':445
'21#.#51.12.212':445
'21#.#51.79.196':445
'21#.#51.130.138':445
'21#.#51.95.180':139
'21#.#51.220.157':445
'21#.#51.244.162':445
'21#.#51.40.214':445
'21#.#51.162.158':139
'21#.#51.56.141':139
'21#.#51.16.207':139
'21#.#51.249.186':139
'21#.#51.59.250':139
'21#.#51.76.187':445
'21#.#51.16.156':445
'21#.#51.199.15':445
'21#.#51.148.134':445
'21#.#51.172.117':445
'21#.#51.227.227':445
'21#.#51.11.151':445
'21#.#51.9.11':445
'21#.#51.151.117':445
'21#.#51.137.222':445
'21#.#51.117.138':445
'21#.#51.83.89':139
'21#.#51.14.36':139
'21#.#51.19.63':139
'21#.#51.169.182':139
'21#.#51.117.162':139
'21#.#51.244.96':139
'21#.#51.149.142':139
'21#.#51.97.70':139
'21#.#51.229.177':139
'21#.#51.86.163':139
'21#.#51.94.172':139
'21#.#51.149.162':139
'21#.#51.9.96':139
'21#.#51.61.102':139
'21#.#51.128.146':139
'21#.#51.112.128':139
'21#.#51.139.51':139
'21#.#51.179.10':139
'21#.#51.62.168':139
'21#.#51.253.126':139
'21#.#51.28.181':139
'21#.#51.118.82':445
'21#.#51.228.113':139
'21#.#51.163.131':139
'21#.#51.45.52':139
'21#.#51.0.30':139
'21#.#51.136.190':139
'21#.#51.172.117':139
'21#.#51.227.227':139
'21#.#51.118.82':139
'21#.#51.179.45':139
'21#.#51.249.175':139
'21#.#51.30.159':139
'21#.#51.10.92':445
'21#.#51.32.10':445
'21#.#51.6.87':445
'21#.#51.236.77':445
'21#.#51.159.42':445
'21#.#51.44.80':445
'21#.#51.64.165':445
'21#.#51.207.157':445
'21#.#51.34.110':445
'21#.#51.27.143':445
'21#.#51.0.30':445
'21#.#51.136.190':445
'21#.#51.30.159':445
'21#.#51.220.157':139
'21#.#51.130.138':139
'21#.#51.179.45':445
'21#.#51.249.175':445
'21#.#51.163.131':445
'21#.#51.45.52':445
'21#.#51.228.113':445
'21#.#51.40.214':139
'21#.#51.137.222':139
'21#.#51.117.138':139
'21#.#51.199.15':139
'21#.#51.148.134':139
'21#.#51.16.156':139
'21#.#51.76.187':139
'21#.#51.244.162':139
'21#.#51.9.11':139
'21#.#51.151.117':139
'21#.#51.11.151':139
'21#.#51.0.98':445
'21#.#51.197.244':445
'21#.#51.76.46':445
'21#.#51.168.10':445
'21#.#51.17.167':445
'21#.#51.70.29':445
'21#.#51.131.27':445
'21#.#51.58.191':445
'21#.#51.223.184':445
'21#.#51.185.17':445
'21#.#51.8.72':445
'21#.#51.168.14':139
'21#.#51.83.17':139
'21#.#51.120.92':139
'21#.#51.146.196':139
'21#.#51.191.226':139
'21#.#51.32.46':445
'21#.#51.20.250':445
'21#.#51.212.155':139
'21#.#51.47.194':139
'21#.#51.113.41':139
'21#.#51.58.110':445
'21#.#51.152.5':445
'21#.#51.94.95':445
'21#.#51.217.133':445
'21#.#51.196.225':445
'21#.#51.55.95':445
'21#.#51.101.5':445
'21#.#51.76.155':445
'21#.#51.43.96':445
'21#.#51.248.199':445
'21#.#51.240.119':445
'21#.#51.219.89':445
'21#.#51.124.148':445
'21#.#51.17.55':445
'21#.#51.14.141':445
'21#.#51.26.112':445
'21#.#51.71.1':445
'21#.#51.227.70':445
'21#.#51.40.121':445
'21#.#51.176.158':445
'21#.#51.143.27':445
'21#.#51.200.28':139
'21#.#51.26.112':139
'21#.#51.17.55':139
'21#.#51.14.141':139
'21#.#51.70.29':139
'21#.#51.131.27':139
'21#.#51.143.27':139
'21#.#51.40.121':139
'21#.#51.176.158':139
'21#.#51.219.89':139
'21#.#51.124.148':139
'21#.#51.58.191':139
'21#.#51.168.10':139
'21#.#51.17.167':139
'21#.#51.8.72':139
'21#.#51.20.250':139
'21#.#51.32.46':139
'21#.#51.223.184':139
'21#.#51.185.17':139
'21#.#51.197.244':139
'21#.#51.76.46':139
'21#.#51.0.98':139
'21#.#51.138.58':139
'21#.#51.85.245':139
'21#.#51.168.100':139
'21#.#51.55.95':139
'21#.#51.101.5':139
'21#.#51.145.117':139
'21#.#51.28.152':139
'21#.#51.224.58':139
'21#.#51.52.88':139
'21#.#51.102.58':139
'21#.#51.76.155':139
'21#.#51.217.133':139
'21#.#51.196.225':139
'21#.#51.240.119':139
'21#.#51.71.1':139
'21#.#51.227.70':139
'21#.#51.43.96':139
'21#.#51.248.199':139
'21#.#51.152.5':139
'21#.#51.94.95':139
'21#.#51.58.110':139
'21#.#51.168.100':445
'21#.#51.66.243':445
'21#.#51.139.35':445
'21#.#51.15.174':445
'21#.#51.60.213':445
'21#.#51.15.115':445
'21#.#51.55.192':445
'21#.#51.180.75':445
'21#.#51.207.238':445
'21#.#51.142.146':445
'21#.#51.189.39':445
'21#.#51.2.46':139
'21#.#51.79.111':139
'21#.#51.71.109':139
'21#.#51.111.19':139
'21#.#51.138.200':139
'21#.#51.18.139':139
'21#.#51.127.41':139
'21#.#51.195.167':139
'21#.#51.160.246':139
'21#.#51.225.21':139
'21#.#51.138.224':139
'21#.#51.2.46':445
'21#.#51.1.114':139
'21#.#51.195.167':445
'21#.#51.160.246':445
'21#.#51.127.41':445
'21#.#51.155.49':139
'21#.#51.3.252':139
'21#.#51.123.45':139
'21#.#51.73.24':139
'21#.#51.23.166':139
'21#.#51.138.224':445
'21#.#51.200.27':445
'21#.#51.138.200':445
'21#.#51.201.57':445
'21#.#51.43.123':445
'21#.#51.109.58':445
'21#.#51.71.109':445
'21#.#51.225.21':445
'21#.#51.79.111':445
'21#.#51.18.139':445
'21#.#51.111.19':445
'21#.#51.200.27':139
'21#.#51.113.41':445
'21#.#51.212.155':445
'21#.#51.47.194':445
'21#.#51.168.14':445
'21#.#51.83.17':445
'21#.#51.8.72':9988
'21#.#51.0.98':9988
'21#.#51.32.46':9988
'21#.#51.168.10':9988
'21#.#51.20.250':9988
'21#.#51.120.92':445
'21#.#51.102.58':445
'21#.#51.224.58':445
'21#.#51.52.88':445
'21#.#51.138.58':445
'21#.#51.85.245':445
'21#.#51.146.196':445
'21#.#51.191.226':445
'21#.#51.200.28':445
'21#.#51.145.117':445
'21#.#51.28.152':445
'21#.#51.189.39':139
'21#.#51.207.238':139
'21#.#51.142.146':139
'21#.#51.66.243':139
'21#.#51.139.35':139
'21#.#51.109.58':139
'21#.#51.201.57':139
'21#.#51.43.123':139
'21#.#51.55.192':139
'21#.#51.180.75':139
'21#.#51.15.174':139
'21#.#51.219.89':9988
'21#.#51.124.148':9988
'21#.#51.14.141':9988
'21#.#51.223.184':9988
'21#.#51.58.191':9988
'21#.#51.60.213':139
'21#.#51.15.115':139
'21#.#51.138.58':9988
'21#.#51.176.158':9988
'21#.#51.94.95':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней