Trojan.Starman.5865

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#61.119.250':139
'21#.#61.128.119':139
'21#.#61.250.127':139
'21#.#61.11.7':139
'21#.#61.2.116':139
'21#.#61.154.242':139
'21#.#61.85.108':139
'21#.#61.30.167':139
'21#.#61.150.80':139
'21#.#61.29.1':139
'21#.#61.140.145':139
'21#.#61.244.99':139
'21#.#61.6.163':139
'21#.#61.246.204':139
'21#.#61.149.82':139
'21#.#61.113.10':139
'21#.#61.171.37':139
'21#.#61.128.114':139
'21#.#61.221.158':139
'21#.#61.230.38':139
'21#.#61.90.230':139
'21#.#61.6.163':445
'21#.#61.230.38':445
'21#.#61.244.99':445
'21#.#61.113.10':445
'21#.#61.246.204':445
'21#.#61.128.114':445
'21#.#61.140.145':445
'21#.#61.171.37':445
'21#.#61.90.230':445
'21#.#61.221.158':445
'21#.#61.149.82':445
'21#.#61.33.218':139
'21#.#61.0.108':445
'21#.#61.218.128':139
'21#.#61.10.52':139
'21#.#61.129.9':139
'21#.#61.66.119':445
'21#.#61.93.56':445
'21#.#61.247.40':445
'21#.#61.33.245':445
'21#.#61.20.249':445
'21#.#61.93.56':139
'21#.#61.184.180':139
'21#.#61.203.95':139
'21#.#61.181.65':139
'21#.#61.139.17':139
'21#.#61.65.139':139
'21#.#61.126.54':445
'21#.#61.48.61':445
'21#.#61.141.187':445
'21#.#61.9.207':139
'21#.#61.203.107':445
'21#.#61.178.14':139
'21#.#61.216.252':139
'21#.#61.81.66':139
'21#.#61.202.14':139
'21#.#61.48.61':139
'21#.#61.14.166':139
'21#.#61.8.167':139
'21#.#61.36.97':139
'21#.#61.252.239':139
'21#.#61.4.220':139
'21#.#61.142.27':139
'21#.#61.203.95':445
'21#.#61.9.207':445
'21#.#61.184.180':445
'21#.#61.65.139':445
'21#.#61.181.65':445
'21#.#61.247.40':139
'21#.#61.66.119':139
'21#.#61.20.249':139
'21#.#61.0.108':139
'21#.#61.33.245':139
'21#.#61.139.17':445
'21#.#61.81.66':445
'21#.#61.4.220':445
'21#.#61.216.252':445
'21#.#61.14.166':445
'21#.#61.202.14':445
'21#.#61.36.97':445
'21#.#61.178.14':445
'21#.#61.8.167':445
'21#.#61.142.27':445
'21#.#61.252.239':445
'21#.#61.124.76':139
'21#.#61.190.124':139
'21#.#61.222.252':139
'21#.#61.88.174':139
'21#.#61.234.15':139
'21#.#61.237.217':139
'21#.#61.177.229':139
'21#.#61.165.60':139
'21#.#61.223.177':139
'21#.#61.29.117':139
'21#.#61.136.19':445
'21#.#61.217.109':445
'21#.#61.212.40':445
'21#.#61.118.56':445
'21#.#61.79.155':445
'21#.#61.124.79':445
'21#.#61.19.134':445
'21#.#61.125.250':445
'21#.#61.18.44':445
'21#.#61.167.29':445
'21#.#61.44.117':445
'21#.#61.252.120':139
'21#.#61.114.127':139
'21#.#61.187.66':139
'21#.#61.11.153':139
'21#.#61.122.74':139
'21#.#61.88.107':139
'21#.#61.77.85':139
'21#.#61.76.251':139
'21#.#61.150.121':139
'21#.#61.62.36':139
'21#.#61.154.239':139
'21#.#61.251.21':139
'21#.#61.13.199':139
'21#.#61.115.244':139
'21#.#61.28.153':139
'21#.#61.192.214':139
'21#.#61.55.11':139
'21#.#61.220.54':139
'21#.#61.140.167':139
'21#.#61.54.18':139
'21#.#61.83.196':139
'21#.#61.1.23':445
'21#.#61.90.64':139
'21#.#61.48.157':139
'21#.#61.33.218':445
'21#.#61.129.9':445
'21#.#61.218.128':445
'21#.#61.197.136':139
'21#.#61.32.231':139
'21#.#61.101.230':139
'21#.#61.105.100':139
'21#.#61.7.206':139
'21#.#61.10.52':445
'21#.#61.119.250':445
'21#.#61.128.119':445
'21#.#61.250.127':445
'21#.#61.11.7':445
'21#.#61.2.116':445
'21#.#61.154.242':445
'21#.#61.85.108':445
'21#.#61.30.167':445
'21#.#61.150.80':445
'21#.#61.29.1':445
'21#.#61.48.157':445
'21#.#61.105.100':445
'21#.#61.90.64':445
'21#.#61.125.250':139
'21#.#61.136.19':139
'21#.#61.32.231':445
'21#.#61.106.14':445
'21#.#61.197.136':445
'21#.#61.7.206':445
'21#.#61.101.230':445
'21#.#61.19.134':139
'21#.#61.124.79':139
'21#.#61.118.56':139
'21#.#61.79.155':139
'21#.#61.106.14':139
'21#.#61.1.23':139
'21#.#61.44.117':139
'21#.#61.18.44':139
'21#.#61.167.29':139
'21#.#61.217.109':139
'21#.#61.212.40':139
'21#.#61.126.54':139
'21#.#61.59.180':445
'21#.#61.159.254':445
'21#.#61.243.210':445
'21#.#61.74.222':445
'21#.#61.88.77':445
'21#.#61.46.175':445
'21#.#61.8.47':445
'21#.#61.194.199':445
'21#.#61.69.130':445
'21#.#61.188.35':445
'21#.#61.232.89':445
'21#.#61.8.186':139
'21#.#61.236.63':139
'21#.#61.88.93':139
'21#.#61.23.165':139
'21#.#61.249.17':139
'21#.#61.214.153':445
'21#.#61.76.228':445
'21#.#61.193.18':139
'21#.#61.93.23':139
'21#.#61.58.126':139
'21#.#61.193.149':445
'21#.#61.85.128':445
'21#.#61.170.17':445
'21#.#61.59.229':445
'21#.#61.33.87':445
'21#.#61.10.93':445
'21#.#61.173.209':445
'21#.#61.46.47':445
'21#.#61.95.223':445
'21#.#61.241.29':445
'21#.#61.67.39':445
'21#.#61.123.28':445
'21#.#61.1.14':445
'21#.#61.28.180':445
'21#.#61.4.222':445
'21#.#61.155.20':445
'21#.#61.147.158':445
'21#.#61.119.2':445
'21#.#61.80.219':445
'21#.#61.167.153':445
'21#.#61.84.224':445
'21#.#61.232.100':139
'21#.#61.155.20':139
'21#.#61.28.180':139
'21#.#61.4.222':139
'21#.#61.46.175':139
'21#.#61.8.47':139
'21#.#61.84.224':139
'21#.#61.80.219':139
'21#.#61.167.153':139
'21#.#61.123.28':139
'21#.#61.1.14':139
'21#.#61.194.199':139
'21#.#61.214.153':139
'21#.#61.76.228':139
'21#.#61.88.77':139
'21#.#61.74.222':139
'21#.#61.232.89':139
'21#.#61.69.130':139
'21#.#61.188.35':139
'21#.#61.159.254':139
'21#.#61.243.210':139
'21#.#61.59.180':139
'21#.#61.136.239':139
'21#.#61.192.49':139
'21#.#61.210.1':139
'21#.#61.10.93':139
'21#.#61.173.209':139
'21#.#61.158.159':139
'21#.#61.2.222':139
'21#.#61.194.36':139
'21#.#61.206.192':139
'21#.#61.42.222':139
'21#.#61.46.47':139
'21#.#61.59.229':139
'21#.#61.33.87':139
'21#.#61.67.39':139
'21#.#61.147.158':139
'21#.#61.119.2':139
'21#.#61.95.223':139
'21#.#61.241.29':139
'21#.#61.85.128':139
'21#.#61.170.17':139
'21#.#61.193.149':139
'21#.#61.151.226':445
'21#.#61.102.128':445
'21#.#61.27.226':445
'21#.#61.148.49':139
'21#.#61.108.39':139
'21#.#61.242.30':445
'21#.#61.43.157':445
'21#.#61.35.168':445
'21#.#61.225.58':445
'21#.#61.205.67':445
'21#.#61.77.9':139
'21#.#61.15.64':139
'21#.#61.159.15':139
'21#.#61.64.203':139
'21#.#61.141.57':139
'21#.#61.2.27':139
'21#.#61.113.195':139
'21#.#61.109.22':139
'21#.#61.80.206':139
'21#.#61.157.158':139
'21#.#61.250.157':139
'21#.#61.113.195':445
'21#.#61.109.22':445
'21#.#61.80.206':445
'21#.#61.157.158':445
'21#.#61.250.157':445
'21#.#61.203.107':139
'21#.#61.141.187':139
'21#.#61.108.39':445
'21#.#61.77.9':445
'21#.#61.148.49':445
'21#.#61.159.15':445
'21#.#61.230.210':445
'21#.#61.105.133':445
'21#.#61.94.34':445
'21#.#61.161.107':445
'21#.#61.186.161':445
'21#.#61.64.203':445
'21#.#61.15.64':445
'21#.#61.2.27':445
'21#.#61.238.84':445
'21#.#61.141.57':445
'21#.#61.238.84':139
'21#.#61.93.23':445
'21#.#61.58.126':445
'21#.#61.236.63':445
'21#.#61.88.93':445
'21#.#61.8.186':445
'21#.#61.69.130':9988
'21#.#61.194.199':9988
'21#.#61.159.254':9988
'21#.#61.193.18':445
'21#.#61.214.153':9988
'21#.#61.249.17':445
'21#.#61.206.192':445
'21#.#61.42.222':445
'21#.#61.192.49':445
'21#.#61.210.1':445
'21#.#61.136.239':445
'21#.#61.232.100':445
'21#.#61.23.165':445
'21#.#61.2.222':445
'21#.#61.194.36':445
'21#.#61.158.159':445
'21#.#61.242.30':139
'21#.#61.43.157':139
'21#.#61.35.168':139
'21#.#61.225.58':139
'21#.#61.205.67':139
'21#.#61.230.210':139
'21#.#61.105.133':139
'21#.#61.94.34':139
'21#.#61.161.107':139
'21#.#61.186.161':139
'21#.#61.102.128':139
'21#.#61.67.39':9988
'21#.#61.33.87':9988
'21#.#61.119.2':9988
'21#.#61.46.175':9988
'21#.#61.147.158':9988
'21#.#61.27.226':139
'21#.#61.151.226':139
'21#.#61.232.100':9988
'21#.#61.170.17':9988
'21#.#61.10.93':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней