Trojan.Starman.4996

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#32.36.185':139
'21#.#32.254.36':139
'21#.#32.18.185':139
'21#.#32.82.131':139
'21#.#32.27.237':139
'21#.#32.208.162':139
'21#.#32.178.126':139
'21#.#32.52.71':139
'21#.#32.178.1':139
'21#.#32.141.20':139
'21#.#32.140.223':139
'21#.#32.210.133':139
'21#.#32.143.109':139
'21#.#32.249.73':445
'21#.#32.28.233':445
'21#.#32.180.62':445
'21#.#32.220.26':139
'21#.#32.223.92':139
'21#.#32.187.96':139
'21#.#32.57.191':139
'21#.#32.118.29':139
'21#.#32.27.237':445
'21#.#32.18.185':445
'21#.#32.82.131':445
'21#.#32.223.92':445
'21#.#32.140.223':445
'21#.#32.141.20':445
'21#.#32.52.71':445
'21#.#32.178.1':445
'21#.#32.36.185':445
'21#.#32.254.36':445
'21#.#32.220.26':445
'21#.#32.19.61':139
'21#.#32.23.188':139
'21#.#32.61.17':139
'21#.#32.214.177':139
'21#.#32.17.214':139
'21#.#32.118.29':445
'21#.#32.187.96':445
'21#.#32.57.191':445
'21#.#32.210.133':445
'21#.#32.143.109':445
'21#.#32.211.24':445
'21#.#32.211.24':139
'21#.#32.28.233':139
'21#.#32.129.46':139
'21#.#32.56.198':139
'21#.#32.3.217':139
'21#.#32.97.158':445
'21#.#32.122.96':445
'21#.#32.246.106':445
'21#.#32.180.62':139
'21#.#32.249.73':139
'21#.#32.59.253':139
'21#.#32.197.195':139
'21#.#32.241.139':139
'21#.#32.165.69':139
'21#.#32.241.189':139
'21#.#32.1.243':139
'21#.#32.3.17':139
'21#.#32.101.72':139
'21#.#32.172.98':139
'21#.#32.135.163':139
'21#.#32.2.85':139
'21#.#32.172.98':445
'21#.#32.3.17':445
'21#.#32.2.85':445
'21#.#32.241.139':445
'21#.#32.135.163':445
'21#.#32.3.217':445
'21#.#32.129.46':445
'21#.#32.56.198':445
'21#.#32.101.72':445
'21#.#32.59.253':445
'21#.#32.197.195':445
'21#.#32.142.106':445
'21#.#32.82.104':445
'21#.#32.98.40':445
'21#.#32.155.76':445
'21#.#32.241.241':445
'21#.#32.1.243':445
'21#.#32.165.69':445
'21#.#32.241.189':445
'21#.#32.206.226':445
'21#.#32.15.91':445
'21#.#32.208.162':445
'21#.#32.157.72':445
'21#.#32.127.157':445
'21#.#32.127.61':445
'21#.#32.192.197':445
'21#.#32.146.156':445
'21#.#32.248.81':139
'21#.#32.28.6':139
'21#.#32.125.173':445
'21#.#32.57.52':445
'21#.#32.21.107':445
'21#.#32.48.14':445
'21#.#32.194.62':445
'21#.#32.150.56':445
'21#.#32.200.29':445
'21#.#32.210.105':445
'21#.#32.208.224':445
'21#.#32.133.199':445
'21#.#32.14.50':445
'21#.#32.70.166':445
'21#.#32.28.88':445
'21#.#32.167.28':445
'21#.#32.54.227':139
'21#.#32.223.54':139
'21#.#32.227.96':139
'21#.#32.253.137':139
'21#.#32.17.82':139
'21#.#32.156.238':139
'21#.#32.1.130':139
'21#.#32.67.248':139
'21#.#32.124.210':139
'21#.#32.38.172':139
'21#.#32.27.245':139
'21#.#32.128.71':139
'21#.#32.12.128':139
'21#.#32.12.127':139
'21#.#32.217.144':139
'21#.#32.49.75':139
'21#.#32.51.0':139
'21#.#32.109.75':139
'21#.#32.68.249':139
'21#.#32.145.112':139
'21#.#32.115.23':139
'21#.#32.155.228':445
'21#.#32.155.228':139
'21#.#32.210.105':139
'21#.#32.187.242':139
'21#.#32.78.186':139
'21#.#32.242.171':139
'21#.#32.150.56':139
'21#.#32.28.88':139
'21#.#32.194.62':139
'21#.#32.208.224':139
'21#.#32.200.29':139
'21#.#32.176.49':139
'21#.#32.61.17':445
'21#.#32.19.61':445
'21#.#32.17.214':445
'21#.#32.178.126':445
'21#.#32.214.177':445
'21#.#32.243.1':139
'21#.#32.104.242':139
'21#.#32.2.161':139
'21#.#32.23.188':445
'21#.#32.176.90':139
'21#.#32.2.161':445
'21#.#32.243.1':445
'21#.#32.176.90':445
'21#.#32.21.107':139
'21#.#32.125.173':139
'21#.#32.242.171':445
'21#.#32.187.242':445
'21#.#32.78.186':445
'21#.#32.104.242':445
'21#.#32.176.49':445
'21#.#32.57.52':139
'21#.#32.14.50':139
'21#.#32.48.14':139
'21#.#32.133.199':139
'21#.#32.167.28':139
'21#.#32.70.166':139
'21#.#32.157.72':139
'21#.#32.127.157':139
'21#.#32.127.61':139
'21#.#32.192.197':139
'21#.#32.146.156':139
'21#.#32.15.91':139
'21#.#32.88.106':445
'21#.#32.44.28':445
'21#.#32.230.204':445
'21#.#32.198.86':445
'21#.#32.194.102':445
'21#.#32.193.9':445
'21#.#32.28.97':445
'21#.#32.132.225':445
'21#.#32.206.209':445
'21#.#32.124.65':445
'21#.#32.62.5':445
'21#.#32.71.209':139
'21#.#32.183.7':139
'21#.#32.14.55':139
'21#.#32.49.14':139
'21#.#32.123.98':139
'21#.#32.217.36':445
'21#.#32.212.162':445
'21#.#32.75.70':139
'21#.#32.248.229':139
'21#.#32.148.141':139
'21#.#32.248.9':445
'21#.#32.35.107':445
'21#.#32.8.103':445
'21#.#32.13.220':445
'21#.#32.105.250':445
'21#.#32.34.18':445
'21#.#32.143.133':445
'21#.#32.138.206':445
'21#.#32.87.55':445
'21#.#32.20.207':445
'21#.#32.145.119':445
'21#.#32.81.93':445
'21#.#32.213.73':445
'21#.#32.204.203':445
'21#.#32.141.159':445
'21#.#32.204.16':445
'21#.#32.25.180':445
'21#.#32.94.163':445
'21#.#32.205.200':445
'21#.#32.169.131':445
'21#.#32.199.131':445
'21#.#32.158.63':139
'21#.#32.204.16':139
'21#.#32.204.203':139
'21#.#32.141.159':139
'21#.#32.193.9':139
'21#.#32.28.97':139
'21#.#32.199.131':139
'21#.#32.205.200':139
'21#.#32.169.131':139
'21#.#32.81.93':139
'21#.#32.213.73':139
'21#.#32.132.225':139
'21#.#32.212.162':139
'21#.#32.194.102':139
'21#.#32.217.36':139
'21#.#32.62.5':139
'21#.#32.198.86':139
'21#.#32.206.209':139
'21#.#32.124.65':139
'21#.#32.44.28':139
'21#.#32.230.204':139
'21#.#32.88.106':139
'21#.#32.126.60':139
'21#.#32.46.103':139
'21#.#32.68.191':139
'21#.#32.34.18':139
'21#.#32.143.133':139
'21#.#32.134.93':139
'21#.#32.223.124':139
'21#.#32.127.21':139
'21#.#32.91.144':139
'21#.#32.122.181':139
'21#.#32.138.206':139
'21#.#32.13.220':139
'21#.#32.105.250':139
'21#.#32.145.119':139
'21#.#32.25.180':139
'21#.#32.94.163':139
'21#.#32.87.55':139
'21#.#32.20.207':139
'21#.#32.35.107':139
'21#.#32.8.103':139
'21#.#32.248.9':139
'21#.#32.68.191':445
'21#.#32.214.173':445
'21#.#32.57.215':445
'21#.#32.95.202':445
'21#.#32.230.56':445
'21#.#32.109.230':445
'21#.#32.105.42':445
'21#.#32.90.105':445
'21#.#32.42.198':445
'21#.#32.55.57':445
'21#.#32.198.54':445
'21#.#32.57.4':445
'21#.#32.125.80':139
'21#.#32.128.118':139
'21#.#32.101.173':139
'21#.#32.17.248':139
'21#.#32.63.242':139
'21#.#32.147.7':139
'21#.#32.60.57':139
'21#.#32.246.25':139
'21#.#32.178.117':139
'21#.#32.227.97':139
'21#.#32.122.96':139
'21#.#32.155.76':139
'21#.#32.97.158':139
'21#.#32.60.57':445
'21#.#32.246.106':139
'21#.#32.82.104':139
'21#.#32.206.226':139
'21#.#32.142.106':139
'21#.#32.241.241':139
'21#.#32.98.40':139
'21#.#32.147.7':445
'21#.#32.63.242':445
'21#.#32.101.173':445
'21#.#32.17.248':445
'21#.#32.168.173':445
'21#.#32.169.87':445
'21#.#32.227.97':445
'21#.#32.246.25':445
'21#.#32.178.117':445
'21#.#32.125.80':445
'21#.#32.128.118':445
'21#.#32.169.87':139
'21#.#32.148.141':445
'21#.#32.75.70':445
'21#.#32.248.229':445
'21#.#32.71.209':445
'21#.#32.183.7':445
'21#.#32.206.209':9988
'21#.#32.124.65':9988
'21#.#32.230.204':9988
'21#.#32.198.86':9988
'21#.#32.212.162':9988
'21#.#32.14.55':445
'21#.#32.122.181':445
'21#.#32.127.21':445
'21#.#32.91.144':445
'21#.#32.126.60':445
'21#.#32.46.103':445
'21#.#32.49.14':445
'21#.#32.123.98':445
'21#.#32.158.63':445
'21#.#32.134.93':445
'21#.#32.223.124':445
'21#.#32.57.215':139
'21#.#32.55.57':139
'21#.#32.214.173':139
'21#.#32.109.230':139
'21#.#32.95.202':139
'21#.#32.90.105':139
'21#.#32.168.173':139
'21#.#32.105.42':139
'21#.#32.198.54':139
'21#.#32.42.198':139
'21#.#32.230.56':139
'21#.#32.141.159':9988
'21#.#32.199.131':9988
'21#.#32.204.16':9988
'21#.#32.193.9':9988
'21#.#32.28.97':9988
'21#.#32.87.55':9988
'21#.#32.57.4':139
'21#.#32.13.220':9988
'21#.#32.205.200':9988
'21#.#32.145.119':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней