Trojan.Starman.5003

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#82.54.81':445
'21#.#82.233.73':445
'21#.#82.186.156':445
'21#.#82.106.210':445
'21#.#82.189.204':445
'21#.#82.123.254':445
'21#.#82.70.24':445
'21#.#82.94.108':445
'21#.#82.35.152':445
'21#.#82.156.30':445
'21#.#82.27.47':445
'21#.#82.116.145':139
'21#.#82.204.103':445
'21#.#82.244.42':445
'21#.#82.2.48':445
'21#.#82.6.218':445
'21#.#82.53.72':445
'21#.#82.201.218':445
'21#.#82.111.119':445
'21#.#82.181.152':445
'21#.#82.10.120':445
'21#.#82.156.217':445
'21#.#82.57.172':445
'21#.#82.217.120':445
'21#.#82.170.103':445
'21#.#82.116.145':445
'21#.#82.81.30':445
'21#.#82.103.81':445
'21#.#82.25.29':445
'21#.#82.226.24':445
'21#.#82.66.111':445
'21#.#82.29.66':445
'21#.#82.62.226':445
'21#.#82.90.55':445
'21#.#82.207.154':445
'21#.#82.47.128':445
'21#.#82.41.65':445
'21#.#82.106.210':139
'21#.#82.54.81':139
'21#.#82.6.218':139
'21#.#82.186.156':139
'21#.#82.233.73':139
'21#.#82.35.152':139
'21#.#82.123.254':139
'21#.#82.189.204':139
'21#.#82.94.108':139
'21#.#82.204.103':139
'21#.#82.156.30':139
'21#.#82.15.158':445
'21#.#82.228.73':445
'21#.#82.27.47':139
'21#.#82.201.218':139
'21#.#82.2.48':139
'21#.#82.244.42':139
'21#.#82.53.72':139
'21#.#82.70.24':139
'21#.#82.57.172':139
'21#.#82.181.152':139
'21#.#82.207.154':139
'21#.#82.156.217':139
'21#.#82.10.120':139
'21#.#82.103.81':139
'21#.#82.170.103':139
'21#.#82.217.120':139
'21#.#82.81.30':139
'21#.#82.29.66':139
'21#.#82.25.29':139
'21#.#82.111.119':139
'21#.#82.66.111':139
'21#.#82.226.24':139
'21#.#82.41.65':139
'21#.#82.90.55':139
'21#.#82.62.226':139
'21#.#82.47.128':139
'21#.#82.134.215':139
'21#.#82.3.135':139
'21#.#82.193.53':139
'21#.#82.215.192':139
'21#.#82.136.233':139
'21#.#82.34.239':139
'21#.#82.15.83':139
'21#.#82.161.47':139
'21#.#82.35.183':139
'21#.#82.6.134':139
'21#.#82.50.42':139
'21#.#82.71.217':139
'21#.#82.243.195':139
'21#.#82.116.15':139
'21#.#82.87.15':139
'21#.#82.53.108':139
'21#.#82.50.224':139
'21#.#82.228.249':139
'21#.#82.30.57':139
'21#.#82.170.157':445
'21#.#82.83.170':445
'21#.#82.48.124':139
'21#.#82.193.122':445
'21#.#82.65.99':445
'21#.#82.64.193':445
'21#.#82.71.217':445
'21#.#82.71.220':445
'21#.#82.221.126':445
'21#.#82.112.126':139
'21#.#82.9.84':139
'21#.#82.70.94':139
'21#.#82.127.29':139
'21#.#82.78.128':139
'21#.#82.1.75':139
'21#.#82.66.251':139
'21#.#82.208.77':139
'21#.#82.247.208':139
'21#.#82.177.157':139
'21#.#82.59.177':139
'21#.#82.176.191':139
'21#.#82.86.40':139
'21#.#82.224.59':139
'21#.#82.236.250':445
'21#.#82.211.197':445
'21#.#82.60.224':139
'21#.#82.38.122':445
'21#.#82.211.197':139
'21#.#82.71.212':139
'21#.#82.38.122':139
'21#.#82.236.250':139
'21#.#82.77.72':139
'21#.182.9.1':139
'21#.#82.3.227':139
'21#.#82.191.76':139
'21#.#82.203.201':139
'21#.#82.71.212':445
'21#.#82.193.122':139
'21#.#82.170.157':139
'21#.#82.224.59':445
'21#.#82.60.224':445
'21#.#82.83.170':139
'21#.#82.221.126':139
'21#.#82.64.193':139
'21#.#82.65.99':139
'21#.#82.71.220':139
'21#.#82.203.201':445
'21#.182.9.1':445
'21#.#82.77.72':445
'21#.#82.191.76':445
'21#.#82.3.227':445
'21#.#82.177.157':445
'21#.#82.59.177':445
'21#.#82.176.191':445
'21#.#82.86.40':445
'21#.#82.16.116':139
'21#.#82.120.150':139
'21#.#82.46.33':139
'21#.#82.143.153':139
'21#.#82.28.89':139
'21#.#82.176.22':445
'21#.#82.67.175':445
'21#.#82.66.3':445
'21#.#82.123.173':445
'21#.#82.107.120':139
'21#.#82.132.60':139
'21#.#82.41.128':139
'21#.#82.28.115':139
'21#.#82.212.127':139
'21#.#82.192.200':139
'21#.#82.149.74':139
'21#.#82.5.43':139
'21#.#82.200.144':139
'21#.#82.74.68':445
'21#.#82.208.73':445
'21#.#82.136.208':445
'21#.#82.146.10':445
'21#.#82.23.193':445
'21#.#82.139.136':445
'21#.#82.159.144':445
'21#.#82.32.160':445
'21#.#82.76.139':445
'21#.#82.145.76':445
'21#.#82.150.174':445
'21#.#82.131.150':445
'21#.#82.89.74':445
'21#.#82.103.216':445
'21#.#82.207.131':445
'21#.#82.69.246':445
'21#.#82.0.65':445
'21#.#82.193.254':445
'21#.#82.197.47':445
'21#.#82.197.47':139
'21#.#82.69.246':139
'21#.#82.207.131':139
'21#.#82.193.254':139
'21#.#82.0.65':139
'21#.#82.208.73':139
'21#.#82.136.208':139
'21#.#82.146.10':139
'21#.#82.23.193':139
'21#.#82.176.22':139
'21#.#82.67.175':139
'21#.#82.66.3':139
'21#.#82.123.173':139
'21#.#82.74.68':139
'21#.#82.150.174':139
'21#.#82.131.150':139
'21#.#82.89.74':139
'21#.#82.103.216':139
'21#.#82.139.136':139
'21#.#82.0.246':139
'21#.#82.198.0':139
'21#.#82.11.151':139
'21#.#82.234.11':139
'21#.#82.222.197':139
'21#.#82.169.62':139
'21#.#82.211.179':139
'21#.#82.23.114':139
'21#.#82.152.117':139
'21#.#82.159.144':139
'21#.#82.32.160':139
'21#.#82.76.139':139
'21#.#82.145.76':139
'21#.#82.213.127':139
'21#.#82.201.208':139
'21#.#82.185.182':139
'21#.#82.114.227':139
'21#.#82.173.40':139
'21#.#82.12.128':139
'21#.#82.125.12':139
'21#.#82.43.92':139
'21#.#82.53.219':139
'21#.#82.186.203':139
'21#.#82.64.83':139
'21#.#82.172.63':139
'21#.#82.40.100':139
'21#.#82.62.110':139
'21#.#82.136.208':9988
'21#.#82.145.76':9988
'21#.#82.23.193':9988
'21#.#82.208.73':9988
'21#.#82.159.144':9988
'21#.#82.152.117':9988
'21#.#82.132.60':9988
'21#.#82.213.127':9988
'21#.#82.185.182':9988
'21#.#82.116.171':139
'21#.#82.62.110':445
'21#.#82.64.83':445
'21#.#82.186.203':445
'21#.#82.40.100':445
'21#.#82.172.63':445
'21#.#82.182.230':445
'21#.#82.28.139':445
'21#.#82.116.171':445
'21#.#82.16.54':445
'21#.#82.28.139':139
'21#.#82.15.158':139
'21#.#82.16.54':139
'21#.#82.182.230':139
'21#.#82.228.73':139
'21#.#82.12.128':445
'21#.#82.125.12':445
'21#.#82.43.92':445
'21#.#82.53.219':445
'21#.#82.152.117':445
'21#.#82.169.62':445
'21#.#82.222.197':445
'21#.#82.23.114':445
'21#.#82.211.179':445
'21#.#82.107.120':445
'21#.#82.132.60':445
'21#.#82.41.128':445
'21#.#82.28.115':445
'21#.#82.173.40':445
'21#.#82.201.208':445
'21#.#82.213.127':445
'21#.#82.114.227':445
'21#.#82.185.182':445
'21#.#82.0.246':445
'21#.#82.198.0':445
'21#.#82.11.151':445
'21#.#82.234.11':445
'21#.#82.212.127':445
'21#.#82.123.173':9988
'21#.#82.176.22':9988
'21#.#82.67.175':9988
'21#.#82.66.3':9988
'21#.#82.74.68':9988
'21#.#82.0.65':9988
'21#.#82.146.10':9988
'21#.#82.89.74':9988
'21#.#82.103.216':9988
'21#.#82.192.200':445
'21#.#82.149.74':445
'21#.#82.5.43':445
'21#.#82.200.144':445
'21#.#82.46.33':445
'21#.#82.120.150':445
'21#.#82.28.89':445
'21#.#82.143.153':445
'21#.#82.16.116':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней