Trojan.Starman.5418

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#16.150.118':139
'21#.#16.33.185':139
'21#.#16.0.47':139
'21#.#16.11.109':139
'21#.#16.147.11':139
'21#.#16.23.203':139
'21#.#16.88.131':139
'21#.#16.16.139':139
'21#.#16.105.115':139
'21#.#16.133.152':139
'21#.#16.155.225':139
'21#.#16.151.0':445
'21#.#16.106.2':445
'21#.#16.209.193':445
'21#.#16.1.68':445
'21#.#16.193.74':445
'21#.#16.52.17':139
'21#.#16.90.197':139
'21#.#16.86.196':139
'21#.#16.254.106':445
'21#.#16.126.137':445
'21#.#16.16.139':445
'21#.#16.23.203':445
'21#.#16.133.152':445
'21#.#16.33.185':445
'21#.#16.105.115':445
'21#.#16.135.4':445
'21#.#16.71.93':139
'21#.#16.136.186':445
'21#.#16.88.131':445
'21#.#16.212.239':445
'21#.#16.150.118':445
'21#.#16.86.196':445
'21#.#16.52.17':445
'21#.#16.135.4':139
'21#.#16.212.239':139
'21#.#16.136.186':139
'21#.#16.147.11':445
'21#.#16.0.47':445
'21#.#16.11.109':445
'21#.#16.90.197':445
'21#.#16.155.225':445
'21#.#16.126.137':139
'21#.#16.199.46':445
'21#.#16.254.106':139
'21#.#16.151.0':139
'21#.#16.106.2':139
'21#.#16.3.187':445
'21#.#16.75.100':445
'21#.#16.113.128':445
'21#.#16.89.179':445
'21#.#16.78.101':445
'21#.#16.209.193':139
'21#.#16.86.118':139
'21#.#16.68.130':139
'21#.#16.79.94':139
'21#.#16.219.218':139
'21#.#16.94.60':139
'21#.#16.1.68':139
'21#.#16.193.74':139
'21#.#16.98.19':139
'21#.#16.118.103':139
'21#.#16.252.85':139
'21#.#16.94.60':445
'21#.#16.79.94':445
'21#.#16.219.218':445
'21#.#16.124.3':445
'21#.#16.101.131':445
'21#.#16.252.85':445
'21#.#16.98.19':445
'21#.#16.118.103':445
'21#.#16.86.118':445
'21#.#16.68.130':445
'21#.#16.88.15':445
'21#.#16.56.74':445
'21#.#16.64.205':445
'21#.116.8.7':445
'21#.#16.27.195':445
'21#.#16.51.187':445
'21#.#16.190.217':445
'21#.#16.55.127':445
'21#.#16.217.106':445
'21#.#16.22.73':445
'21#.#16.97.102':445
'21#.#16.245.200':445
'21#.#16.86.168':445
'21#.#16.177.28':445
'21#.#16.98.133':445
'21#.#16.236.164':445
'21#.#16.165.27':445
'21#.#16.79.182':445
'21#.#16.158.221':445
'21#.#16.176.116':445
'21#.#16.188.86':445
'21#.#16.99.128':445
'21#.#16.83.143':445
'21#.#16.158.15':445
'21#.#16.196.17':445
'21#.#16.152.215':445
'21#.#16.142.201':445
'21#.#16.9.246':445
'21#.#16.154.13':445
'21#.#16.33.124':445
'21#.#16.31.248':445
'21#.#16.192.148':445
'21#.#16.93.221':139
'21#.#16.96.39':139
'21#.#16.2.145':139
'21#.#16.97.24':139
'21#.#16.42.184':139
'21#.#16.251.141':139
'21#.#16.152.251':139
'21#.#16.141.135':139
'21#.#16.132.52':139
'21#.#16.135.0':139
'21#.#16.190.178':139
'21#.#16.90.161':445
'21#.#16.245.0':139
'21#.#16.249.80':445
'21#.#16.77.74':445
'21#.#16.55.222':445
'21#.#16.66.48':139
'21#.#16.98.242':139
'21#.#16.196.10':139
'21#.#16.53.43':139
'21#.#16.144.61':139
'21#.#16.33.124':139
'21#.#16.90.161':139
'21#.#16.31.248':139
'21#.#16.196.17':139
'21#.#16.158.15':139
'21#.#16.154.13':139
'21#.#16.98.133':139
'21#.#16.249.80':139
'21#.#16.188.86':139
'21#.#16.177.28':139
'21#.#16.83.143':139
'21#.#16.54.22':139
'21#.#16.152.215':139
'21#.#16.120.132':139
'21#.#16.117.173':139
'21#.#16.101.158':139
'21#.#16.71.206':139
'21#.#16.142.201':139
'21#.#16.148.189':139
'21#.#16.96.53':139
'21#.#16.208.158':139
'21#.#16.117.173':445
'21#.#16.120.132':445
'21#.#16.101.158':445
'21#.#16.55.222':139
'21#.#16.71.93':445
'21#.#16.96.53':445
'21#.#16.208.158':445
'21#.#16.148.189':445
'21#.#16.54.22':445
'21#.#16.71.206':445
'21#.#16.236.164':139
'21#.#16.86.168':139
'21#.#16.245.200':139
'21#.#16.158.221':139
'21#.#16.79.182':139
'21#.#16.192.148':139
'21#.#16.9.246':139
'21#.#16.99.128':139
'21#.#16.77.74':139
'21#.#16.176.116':139
'21#.#16.165.27':139
'21#.#16.101.131':139
'21#.#16.81.17':445
'21#.#16.70.38':445
'21#.#16.196.96':445
'21#.#16.209.120':445
'21#.#16.187.196':445
'21#.#16.110.249':445
'21#.#16.182.124':445
'21#.#16.178.207':445
'21#.#16.101.6':445
'21#.#16.208.235':445
'21#.#16.96.137':445
'21#.#16.153.154':139
'21#.#16.148.146':139
'21#.#16.61.125':139
'21#.#16.224.90':139
'21#.#16.8.136':139
'21#.#16.221.74':139
'21#.#16.45.188':445
'21#.#16.84.40':139
'21#.#16.100.190':139
'21#.#16.106.117':139
'21#.#16.14.123':445
'21#.#16.211.79':445
'21#.#16.79.132':445
'21#.#16.43.117':445
'21#.#16.191.181':445
'21#.#16.53.226':445
'21#.#16.70.120':445
'21#.#16.179.200':445
'21#.#16.90.151':445
'21#.#16.64.214':445
'21#.#16.22.124':445
'21#.#16.206.140':445
'21#.#16.45.87':445
'21#.#16.128.171':445
'21#.#16.193.229':445
'21#.#16.113.166':445
'21#.#16.86.163':445
'21#.#16.27.129':445
'21#.#16.163.40':445
'21#.#16.104.23':445
'21#.#16.106.98':445
'21#.#16.128.171':139
'21#.#16.45.87':139
'21#.#16.113.166':139
'21#.#16.182.124':139
'21#.#16.193.229':139
'21#.#16.163.40':139
'21#.#16.86.163':139
'21#.#16.106.98':139
'21#.#16.206.140':139
'21#.#16.104.23':139
'21#.#16.110.249':139
'21#.#16.81.17':139
'21#.#16.96.137':139
'21#.#16.187.196':139
'21#.#16.45.188':139
'21#.#16.196.96':139
'21#.#16.208.235':139
'21#.#16.178.207':139
'21#.#16.101.6':139
'21#.#16.209.120':139
'21#.#16.70.38':139
'21#.#16.156.4':139
'21#.#16.74.141':139
'21#.#16.186.238':139
'21#.#16.70.120':139
'21#.#16.88.210':139
'21#.#16.31.69':139
'21#.#16.221.30':139
'21#.#16.69.201':139
'21#.#16.153.74':139
'21#.#16.10.119':139
'21#.#16.53.226':139
'21#.#16.191.181':139
'21#.#16.79.132':139
'21#.#16.43.117':139
'21#.#16.27.129':139
'21#.#16.22.124':139
'21#.#16.64.214':139
'21#.#16.179.200':139
'21#.#16.90.151':139
'21#.#16.14.123':139
'21#.#16.211.79':139
'21#.#16.175.216':445
'21#.#16.105.170':445
'21#.#16.6.133':445
'21#.#16.162.24':445
'21#.#16.132.162':445
'21#.#16.143.192':445
'21#.#16.42.4':445
'21#.#16.41.15':445
'21#.#16.34.228':445
'21#.#16.0.151':445
'21#.#16.56.41':445
'21#.#16.41.15':139
'21#.#16.143.192':139
'21#.#16.0.151':139
'21#.#16.105.170':139
'21#.#16.34.228':139
'21#.#16.18.145':139
'21#.#16.182.31':445
'21#.#16.171.194':139
'21#.#16.42.4':139
'21#.#16.77.143':139
'21#.#16.22.73':139
'21#.#16.97.102':139
'21#.#16.64.205':139
'21#.116.8.7':139
'21#.#16.56.74':139
'21#.#16.88.15':139
'21#.#16.124.3':139
'21#.#16.55.127':139
'21#.#16.217.106':139
'21#.#16.190.217':139
'21#.#16.51.187':139
'21#.#16.199.46':139
'21#.#16.89.179':139
'21#.#16.18.145':445
'21#.#16.77.143':445
'21#.#16.171.194':445
'21#.#16.75.100':139
'21#.#16.27.195':139
'21#.#16.3.187':139
'21#.#16.78.101':139
'21#.#16.113.128':139
'21#.#16.100.190':445
'21#.#16.106.117':445
'21#.#16.148.146':445
'21#.#16.61.125':445
'21#.#16.153.154':445
'21#.#16.187.196':9988
'21#.#16.96.137':9988
'21#.#16.70.38':9988
'21#.#16.84.40':445
'21#.#16.221.74':445
'21#.#16.8.136':445
'21#.#16.74.141':445
'21#.#16.153.74':445
'21#.#16.156.4':445
'21#.#16.88.210':445
'21#.#16.186.238':445
'21#.#16.221.30':445
'21#.#16.224.90':445
'21#.#16.31.69':445
'21#.#16.10.119':445
'21#.#16.69.201':445
'21#.#16.156.4':9988
'21#.#16.182.31':139
'21#.#16.70.120':9988
'21#.#16.211.79':9988
'21#.#16.64.214':9988
'21#.#16.6.133':139
'21#.#16.175.216':139
'21#.#16.132.162':139
'21#.#16.56.41':139
'21#.#16.162.24':139
'21#.#16.14.123':9988
'21#.#16.206.140':9988
'21#.#16.104.23':9988
'21#.#16.128.171':9988
'21#.#16.182.124':9988
'21#.#16.193.229':9988
'21#.#16.22.124':9988
'21#.#16.191.181':9988
'21#.#16.86.163':9988
'21#.#16.106.98':9988
'21#.#16.163.40':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней