Trojan.Starman.4983

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#79.179.158':445
'21#.#79.137.146':445
'21#.#79.119.7':445
'21#.#79.243.20':445
'21#.#79.210.166':445
'21#.#79.238.244':445
'21#.#79.239.174':445
'21#.#79.193.171':445
'21#.#79.15.106':445
'21#.#79.158.219':139
'21#.#79.104.20':139
'21#.#79.13.166':139
'21#.#79.169.128':139
'21#.#79.94.68':139
'21#.#79.182.80':139
'21#.#79.19.200':445
'21#.#79.169.97':139
'21#.#79.224.154':139
'21#.#79.115.115':445
'21#.#79.217.92':445
'21#.#79.198.102':445
'21#.#79.166.197':445
'21#.#79.26.217':445
'21#.#79.50.109':445
'21#.#79.17.25':445
'21#.#79.146.26':445
'21#.#79.24.72':445
'21#.#79.147.204':445
'21#.#79.8.88':445
'21#.#79.63.158':445
'21#.#79.90.187':445
'21#.#79.238.40':445
'21#.#79.189.154':445
'21#.#79.196.25':445
'21#.#79.24.229':445
'21#.#79.165.25':445
'21#.#79.216.170':139
'21#.#79.239.174':139
'21#.#79.63.158':139
'21#.#79.15.106':139
'21#.#79.238.244':139
'21#.#79.90.187':139
'21#.#79.238.40':139
'21#.#79.24.229':139
'21#.#79.147.204':139
'21#.#79.8.88':139
'21#.#79.19.200':139
'21#.#79.119.7':139
'21#.#79.251.219':445
'21#.#79.3.60':445
'21#.#79.243.20':139
'21#.#79.210.166':139
'21#.#79.193.171':139
'21#.#79.179.158':139
'21#.#79.137.146':139
'21#.#79.17.25':139
'21#.#79.63.219':139
'21#.#79.24.72':139
'21#.#79.50.109':139
'21#.#79.115.219':139
'21#.#79.17.53':139
'21#.#79.250.48':139
'21#.#79.8.182':139
'21#.#79.69.21':139
'21#.#79.196.25':139
'21#.#79.198.102':139
'21#.#79.165.25':139
'21#.#79.189.154':139
'21#.#79.166.197':139
'21#.#79.26.217':139
'21#.#79.146.26':139
'21#.#79.115.115':139
'21#.#79.217.92':139
'21#.#79.63.219':445
'21#.#79.138.147':139
'21#.#79.99.144':139
'21#.#79.203.134':139
'21#.#79.231.1':139
'21#.#79.201.150':139
'21#.#79.175.31':139
'21#.#79.188.149':139
'21#.#79.229.200':139
'21#.#79.70.51':139
'21#.#79.219.51':139
'21#.#79.96.4':139
'21#.#79.139.24':139
'21#.#79.232.193':139
'21#.#79.88.35':139
'21#.#79.122.49':139
'21#.#79.134.251':139
'21#.#79.57.245':139
'21#.#79.125.129':139
'21#.#79.252.184':139
'21#.#79.236.251':139
'21#.#79.235.133':139
'21#.#79.184.86':139
'21#.#79.231.212':139
'21#.#79.14.25':139
'21#.#79.57.85':139
'21#.#79.22.214':139
'21#.#79.134.75':139
'21#.#79.131.80':139
'21#.#79.81.15':139
'21#.#79.221.196':139
'21#.#79.132.206':139
'21#.#79.76.166':139
'21#.#79.164.46':139
'21#.#79.72.137':139
'21#.#79.186.61':139
'21#.#79.96.186':139
'21#.#79.24.75':139
'21#.#79.169.97':445
'21#.#79.224.154':445
'21#.#79.104.20':445
'21#.#79.94.68':445
'21#.#79.182.80':445
'21#.#79.166.130':139
'21#.#79.132.20':139
'21#.#79.58.89':139
'21#.#79.223.110':139
'21#.#79.69.21':445
'21#.#79.17.53':445
'21#.#79.115.219':445
'21#.#79.8.182':445
'21#.#79.250.48':445
'21#.#79.169.128':445
'21#.#79.158.219':445
'21#.#79.216.170':445
'21#.#79.13.166':445
'21#.#79.57.7':445
'21#.#79.213.159':139
'21#.#79.143.134':445
'21#.#79.192.178':445
'21#.#79.12.81':139
'21#.#79.113.252':139
'21#.#79.217.153':139
'21#.#79.233.208':139
'21#.#79.151.96':139
'21#.#79.192.178':139
'21#.#79.57.7':139
'21#.#79.155.250':139
'21#.#79.143.134':139
'21#.#79.58.89':445
'21#.#79.132.20':445
'21#.#79.155.250':445
'21#.#79.223.110':445
'21#.#79.166.130':445
'21#.#79.91.2':445
'21#.#79.76.48':139
'21#.#79.250.19':139
'21#.#79.210.105':139
'21#.#79.48.210':139
'21#.#79.96.95':139
'21#.#79.198.65':445
'21#.#79.112.106':445
'21#.#79.7.110':445
'21#.#79.67.216':445
'21#.#79.145.47':139
'21#.#79.97.227':139
'21#.#79.159.92':139
'21#.#79.5.159':139
'21#.#79.139.101':139
'21#.#79.128.25':139
'21#.#79.106.128':139
'21#.#79.73.190':139
'21#.#79.24.239':139
'21#.#79.66.113':445
'21#.#79.88.93':445
'21#.#79.87.91':445
'21#.#79.96.87':445
'21#.#79.38.236':445
'21#.#79.53.40':445
'21#.#79.85.29':445
'21#.#79.87.46':445
'21#.#79.22.250':445
'21#.#79.157.0':445
'21#.#79.38.34':445
'21#.#79.246.205':445
'21#.#79.153.138':445
'21#.#79.21.37':445
'21#.#79.144.223':445
'21#.#79.247.16':445
'21#.#79.34.14':445
'21#.#79.223.33':445
'21#.#79.2.34':139
'21#.#79.144.223':139
'21#.#79.247.16':139
'21#.#79.34.14':139
'21#.#79.223.33':139
'21#.#79.87.91':139
'21#.#79.88.93':139
'21#.#79.38.236':139
'21#.#79.96.87':139
'21#.#79.66.113':139
'21#.#79.198.65':139
'21#.#79.112.106':139
'21#.#79.67.216':139
'21#.#79.7.110':139
'21#.#79.246.205':139
'21#.#79.38.34':139
'21#.#79.21.37':139
'21#.#79.153.138':139
'21#.#79.157.0':139
'21#.#79.222.102':139
'21#.#79.9.45':139
'21#.#79.40.165':139
'21#.#79.160.249':139
'21#.#79.52.144':139
'21#.#79.51.164':139
'21#.#79.122.71':139
'21#.#79.67.170':139
'21#.#79.93.113':139
'21#.#79.53.40':139
'21#.#79.85.29':139
'21#.#79.87.46':139
'21#.#79.22.250':139
'21#.#79.98.85':139
'21#.#79.19.218':139
'21#.#79.65.163':139
'21#.#79.234.38':139
'21#.#79.35.93':139
'21#.#79.98.85':445
'21#.#79.77.147':139
'21#.#79.176.44':139
'21#.#79.73.218':139
'21#.#79.195.241':139
'21#.#79.36.160':139
'21#.#79.73.218':445
'21#.#79.195.241':445
'21#.#79.99.147':139
'21#.#79.84.14':139
'21#.#79.7.110':9988
'21#.#79.21.37':9988
'21#.#79.153.138':9988
'21#.#79.144.223':9988
'21#.#79.66.113':9988
'21#.#79.96.87':9988
'21#.#79.98.85':9988
'21#.#79.198.65':9988
'21#.#79.247.16':9988
'21#.#79.251.219':139
'21#.#79.3.60':139
'21#.#79.10.207':139
'21#.#79.91.2':139
'21#.#79.222.191':445
'21#.#79.5.44':445
'21#.#79.10.207':445
'21#.#79.31.148':445
'21#.#79.195.8':445
'21#.#79.36.160':445
'21#.#79.99.147':445
'21#.#79.77.147':445
'21#.#79.176.44':445
'21#.#79.84.14':445
'21#.#79.195.8':139
'21#.#79.5.44':139
'21#.#79.222.191':139
'21#.#79.31.148':139
'21#.#79.19.218':9988
'21#.#79.51.164':445
'21#.#79.122.71':445
'21#.#79.67.170':445
'21#.#79.93.113':445
'21#.#79.2.34':445
'21#.#79.145.47':445
'21#.#79.97.227':445
'21#.#79.159.92':445
'21#.#79.5.159':445
'21#.#79.19.218':445
'21#.#79.65.163':445
'21#.#79.234.38':445
'21#.#79.35.93':445
'21#.#79.40.165':445
'21#.#79.9.45':445
'21#.#79.52.144':445
'21#.#79.160.249':445
'21#.#79.222.102':445
'21#.#79.88.93':9988
'21#.#79.67.216':9988
'21#.#79.96.95':445
'21#.#79.35.93':9988
'21#.#79.87.91':9988
'21#.#79.85.29':9988
'21#.#79.38.34':9988
'21#.#79.22.250':9988
'21#.#79.234.38':9988
'21#.#79.24.239':445
'21#.#79.128.25':445
'21#.#79.139.101':445
'21#.#79.73.190':445
'21#.#79.106.128':445
'21#.#79.76.48':445
'21#.#79.250.19':445
'21#.#79.210.105':445
'21#.#79.48.210':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней