Trojan.Starman.5174

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#24.101.160':445
'21#.#24.253.127':445
'21#.#24.44.129':445
'21#.#24.238.153':445
'21#.#24.186.154':445
'21#.#24.132.66':445
'21#.#24.67.1':445
'21#.#24.96.141':139
'21#.#24.82.83':445
'21#.#24.233.6':445
'21#.#24.212.96':445
'21#.#24.223.18':445
'21#.#24.22.223':445
'21#.#24.18.190':445
'21#.#24.21.161':445
'21#.#24.224.235':445
'21#.#24.104.26':445
'21#.#24.188.139':445
'21#.#24.106.188':445
'21#.#24.140.12':445
'21#.#24.88.77':445
'21#.#24.201.129':445
'21#.#24.24.141':445
'21#.#24.38.12':445
'21#.#24.196.150':445
'21#.#24.188.60':445
'21#.#24.43.157':445
'21#.#24.153.1':445
'21#.#24.14.89':139
'21#.#24.132.224':139
'21#.#24.213.174':139
'21#.#24.237.157':445
'21#.#24.231.163':445
'21#.#24.196.150':139
'21#.#24.24.141':139
'21#.#24.43.157':139
'21#.#24.18.167':139
'21#.#24.188.60':139
'21#.#24.38.12':139
'21#.#24.96.141':445
'21#.#24.18.167':445
'21#.#24.231.163':139
'21#.#24.153.1':139
'21#.#24.237.157':139
'21#.#24.24.215':445
'21#.#24.106.188':139
'21#.#24.238.153':139
'21#.#24.188.139':139
'21#.#24.201.129':139
'21#.#24.140.12':139
'21#.#24.186.154':139
'21#.#24.132.66':139
'21#.#24.233.6':139
'21#.#24.253.127':139
'21#.#24.44.129':139
'21#.#24.101.160':139
'21#.#24.24.215':139
'21#.#24.21.161':139
'21#.#24.214.214':139
'21#.#24.79.54':139
'21#.#24.16.166':139
'21#.#24.224.235':139
'21#.#24.104.26':139
'21#.#24.88.77':139
'21#.#24.22.223':139
'21#.#24.18.190':139
'21#.#24.223.18':139
'21#.#24.7.212':445
'21#.#24.5.23':445
'21#.#24.93.128':445
'21#.#24.51.37':445
'21#.#24.249.94':445
'21#.#24.101.111':445
'21#.#24.16.166':445
'21#.#24.214.214':445
'21#.#24.79.54':445
'21#.#24.104.101':445
'21#.#24.217.103':445
'21#.#24.106.52':445
'21#.#24.183.46':445
'21#.#24.67.1':139
'21#.#24.212.96':139
'21#.#24.82.83':139
'21#.#24.95.64':445
'21#.#24.2.77':445
'21#.#24.214.2':445
'21#.#24.77.156':445
'21#.#24.65.226':445
'21#.#24.13.0':445
'21#.#24.164.3':445
'21#.#24.133.164':445
'21#.#24.3.222':445
'21#.#24.47.11':445
'21#.#24.221.102':445
'21#.#24.27.9':445
'21#.#24.181.8':445
'21#.#24.93.114':445
'21#.#24.152.161':445
'21#.#24.65.139':445
'21#.#24.108.21':445
'21#.#24.246.228':445
'21#.#24.171.33':445
'21#.#24.19.18':445
'21#.#24.66.184':445
'21#.#24.45.233':445
'21#.#24.98.36':445
'21#.#24.148.100':445
'21#.#24.180.80':445
'21#.#24.68.91':445
'21#.#24.91.98':445
'21#.#24.85.91':445
'21#.#24.128.190':139
'21#.#24.128.19':139
'21#.#24.42.222':139
'21#.#24.4.158':445
'21#.#24.126.234':139
'21#.#24.42.187':139
'21#.#24.161.11':139
'21#.#24.80.151':139
'21#.#24.12.5':139
'21#.#24.94.42':139
'21#.#24.5.94':139
'21#.#24.11.138':445
'21#.#24.214.134':445
'21#.#24.95.250':445
'21#.#24.142.3':445
'21#.#24.86.175':445
'21#.#24.135.183':445
'21#.#24.134.139':445
'21#.#24.158.121':445
'21#.#24.137.80':445
'21#.#24.173.199':445
'21#.#24.27.99':445
'21#.#24.164.113':445
'21#.#24.180.80':139
'21#.#24.47.11':139
'21#.#24.148.100':139
'21#.#24.85.91':139
'21#.#24.68.91':139
'21#.#24.221.102':139
'21#.#24.27.9':139
'21#.#24.65.139':139
'21#.#24.133.164':139
'21#.#24.3.222':139
'21#.#24.164.3':139
'21#.#24.164.113':139
'21#.#24.66.184':139
'21#.#24.109.253':139
'21#.#24.130.157':139
'21#.#24.166.207':139
'21#.#24.45.233':139
'21#.#24.98.36':139
'21#.#24.91.98':139
'21#.#24.171.33':139
'21#.#24.19.18':139
'21#.#24.246.228':139
'21#.#24.158.121':139
'21#.#24.4.158':139
'21#.#24.134.139':139
'21#.#24.27.99':139
'21#.#24.137.80':139
'21#.#24.213.174':445
'21#.#24.166.207':445
'21#.#24.109.253':445
'21#.#24.130.157':445
'21#.#24.14.89':445
'21#.#24.132.224':445
'21#.#24.93.114':139
'21#.#24.142.3':139
'21#.#24.181.8':139
'21#.#24.108.21':139
'21#.#24.152.161':139
'21#.#24.86.175':139
'21#.#24.135.183':139
'21#.#24.173.199':139
'21#.#24.214.134':139
'21#.#24.95.250':139
'21#.#24.11.138':139
'21#.#24.229.129':445
'21#.#24.47.24':445
'21#.#24.130.11':445
'21#.#24.45.246':445
'21#.#24.10.66':445
'21#.#24.247.77':445
'21#.#24.22.171':445
'21#.#24.92.236':445
'21#.#24.27.209':445
'21#.#24.164.57':445
'21#.#24.83.99':445
'21#.#24.82.50':139
'21#.#24.22.82':139
'21#.#24.70.60':139
'21#.#24.187.250':139
'21#.#24.57.77':139
'21#.#24.68.115':139
'21#.#24.156.70':445
'21#.#24.246.164':445
'21#.#24.232.221':445
'21#.#24.26.245':445
'21#.#24.212.168':445
'21#.#24.213.207':445
'21#.#24.102.101':445
'21#.#24.188.129':445
'21#.#24.81.202':445
'21#.#24.129.148':445
'21#.#24.204.86':445
'21#.#24.212.51':445
'21#.#24.47.99':445
'21#.#24.12.122':445
'21#.#24.141.194':445
'21#.#24.94.199':445
'21#.#24.177.209':445
'21#.#24.20.134':445
'21#.#24.194.165':445
'21#.#24.126.194':445
'21#.#24.102.235':445
'21#.#24.149.40':445
'21#.#24.112.208':445
'21#.#24.168.104':445
'21#.#24.219.140':445
'21#.#24.108.149':445
'21#.#24.26.159':445
'21#.#24.128.181':139
'21#.#24.22.171':139
'21#.#24.92.236':139
'21#.#24.27.209':139
'21#.#24.164.57':139
'21#.#24.83.99':139
'21#.#24.126.194':139
'21#.#24.20.134':139
'21#.#24.149.40':139
'21#.#24.177.209':139
'21#.#24.102.235':139
'21#.#24.194.165':139
'21#.#24.212.168':139
'21#.#24.246.164':139
'21#.#24.232.221':139
'21#.#24.156.70':139
'21#.#24.26.245':139
'21#.#24.45.246':139
'21#.#24.47.24':139
'21#.#24.247.77':139
'21#.#24.229.129':139
'21#.#24.10.66':139
'21#.#24.130.11':139
'21#.#24.212.51':139
'21#.#24.47.99':139
'21#.#24.12.122':139
'21#.#24.141.194':139
'21#.#24.94.199':139
'21#.#24.138.253':139
'21#.#24.83.123':139
'21#.#24.131.86':139
'21#.#24.122.224':139
'21#.#24.135.127':139
'21#.#24.224.106':139
'21#.#24.112.208':139
'21#.#24.168.104':139
'21#.#24.219.140':139
'21#.#24.108.149':139
'21#.#24.26.159':139
'21#.#24.81.202':139
'21#.#24.102.101':139
'21#.#24.204.86':139
'21#.#24.213.207':139
'21#.#24.129.148':139
'21#.#24.188.129':139
'21#.#24.114.167':139
'21#.#24.196.47':139
'21#.#24.2.151':139
'21#.#24.205.97':139
'21#.#24.143.49':139
'21#.#24.213.12':139
'21#.#24.175.83':445
'21#.#24.205.97':445
'21#.#24.172.123':445
'21#.#24.160.80':139
'21#.#24.189.170':445
'21#.#24.116.189':445
'21#.#24.247.165':445
'21#.#24.180.214':445
'21#.#24.180.102':445
'21#.#24.10.181':445
'21#.#24.127.128':445
'21#.#24.172.123':139
'21#.#24.175.83':139
'21#.#24.189.170':139
'21#.#24.92.17':445
'21#.#24.237.137':445
'21#.#24.51.37':139
'21#.#24.249.94':139
'21#.#24.214.2':139
'21#.#24.77.156':139
'21#.#24.2.77':139
'21#.#24.93.128':139
'21#.#24.104.101':139
'21#.#24.217.103':139
'21#.#24.101.111':139
'21#.#24.7.212':139
'21#.#24.5.23':139
'21#.#24.196.47':445
'21#.#24.213.12':445
'21#.#24.114.167':445
'21#.#24.143.49':445
'21#.#24.2.151':445
'21#.#24.160.80':445
'21#.#24.95.64':139
'21#.#24.13.0':139
'21#.#24.65.226':139
'21#.#24.106.52':139
'21#.#24.183.46':139
'21#.#24.103.12':445
'21#.#24.232.221':9988
'21#.#24.156.70':9988
'21#.#24.45.246':9988
'21#.#24.22.82':445
'21#.#24.68.115':445
'21#.#24.26.245':9988
'21#.#24.126.194':9988
'21#.#24.47.24':9988
'21#.#24.22.171':9988
'21#.#24.246.164':9988
'21#.#24.177.209':9988
'21#.#24.122.224':445
'21#.#24.83.123':445
'21#.#24.224.106':445
'21#.#24.138.253':445
'21#.#24.135.127':445
'21#.#24.131.86':445
'21#.#24.70.60':445
'21#.#24.82.50':445
'21#.#24.57.77':445
'21#.#24.128.181':445
'21#.#24.187.250':445
'21#.#24.247.165':139
'21#.#24.127.128':139
'21#.#24.116.189':139
'21#.#24.10.181':139
'21#.#24.180.214':139
'21#.#24.92.17':139
'21#.#24.103.28':445
'21#.#24.11.14':445
'21#.#24.166.47':445
'21#.#24.237.137':139
'21#.#24.157.2':445
'21#.#24.83.99':9988
'21#.#24.247.77':9988
'21#.#24.194.165':9988
'21#.#24.112.208':9988
'21#.#24.130.11':9988
'21#.#24.157.2':139
'21#.#24.103.12':139
'21#.#24.180.102':139
'21#.#24.11.14':139
'21#.#24.166.47':139
'21#.#24.103.28':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней