Trojan.Starman.5587

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#48.34.108':139
'21#.#48.30.126':445
'21#.#48.91.78':139
'21#.#48.211.91':139
'21#.#48.91.78':445
'21#.#48.201.174':139
'21#.#48.250.148':139
'21#.#48.211.91':445
'21#.#48.34.108':445
'21#.#48.30.126':139
'21#.#48.25.51':445
'21#.#48.107.105':445
'21#.#48.71.45':445
'21#.#48.114.168':445
'21#.#48.210.147':445
'21#.#48.89.217':445
'21#.#48.204.89':445
'21#.#48.92.210':445
'21#.#48.217.92':445
'21#.#48.99.2':139
'21#.#48.117.99':139
'21#.#48.205.249':139
'21#.#48.2.170':139
'21#.#48.80.84':139
'21#.#48.151.196':139
'21#.#48.109.152':139
'21#.#48.179.27':139
'21#.#48.33.163':139
'21#.#48.180.15':139
'21#.#48.92.102':139
'21#.#48.76.196':139
'21#.#48.235.186':139
'21#.#48.37.191':139
'21#.#48.94.113':139
'21#.#48.95.11':139
'21#.#48.157.118':139
'21#.#48.14.26':139
'21#.#48.86.237':139
'21#.#48.14.2':445
'21#.#48.41.209':445
'21#.#48.51.39':445
'21#.#48.238.240':445
'21#.#48.205.208':445
'21#.#48.208.51':445
'21#.#48.165.26':445
'21#.#48.27.76':445
'21#.#48.11.249':445
'21#.#48.43.74':445
'21#.#48.206.216':445
'21#.#48.29.127':445
'21#.#48.79.81':445
'21#.#48.204.89':139
'21#.#48.47.150':445
'21#.#48.247.137':445
'21#.#48.81.91':445
'21#.#48.121.147':445
'21#.#48.72.194':445
'21#.#48.143.149':445
'21#.#48.228.213':445
'21#.#48.125.228':445
'21#.#48.129.153':445
'21#.#48.157.107':445
'21#.#48.173.159':445
'21#.#48.11.232':445
'21#.#48.10.139':445
'21#.#48.219.75':445
'21#.#48.242.141':445
'21#.#48.180.105':445
'21#.#48.35.250':445
'21#.#48.66.128':445
'21#.#48.136.79':445
'21#.#48.114.136':445
'21#.#48.232.136':445
'21#.#48.136.183':445
'21#.#48.141.208':445
'21#.#48.207.193':445
'21#.#48.223.242':445
'21#.#48.44.62':445
'21#.#48.107.94':445
'21#.#48.96.213':445
'21#.#48.217.199':445
'21#.#48.247.147':445
'21#.#48.113.70':445
'21#.#48.22.102':445
'21#.#48.12.247':445
'21#.#48.6.13':445
'21#.248.7.7':445
'21#.#48.117.99':445
'21#.#48.80.84':445
'21#.#48.2.170':445
'21#.#48.99.2':445
'21#.#48.179.27':445
'21#.#48.109.152':445
'21#.#48.220.253':445
'21#.#48.33.163':445
'21#.#48.151.196':445
'21#.#48.106.237':445
'21#.#48.33.227':445
'21#.#48.65.228':445
'21#.#48.83.246':445
'21#.#48.50.201':445
'21#.#48.62.196':139
'21#.#48.185.92':139
'21#.#48.146.0':139
'21#.#48.10.22':139
'21#.#48.53.60':445
'21#.#48.31.35':445
'21#.#48.48.215':445
'21#.#48.130.106':445
'21#.#48.216.110':445
'21#.#48.133.194':445
'21#.#48.180.158':445
'21#.#48.254.226':445
'21#.#48.84.95':445
'21#.#48.166.140':445
'21#.#48.205.249':445
'21#.#48.216.110':139
'21#.#48.31.35':139
'21#.#48.22.102':139
'21#.#48.130.106':139
'21#.#48.48.215':139
'21#.#48.166.140':139
'21#.#48.180.158':139
'21#.#48.133.194':139
'21#.#48.84.95':139
'21#.#48.113.70':139
'21#.#48.96.213':139
'21#.#48.217.199':139
'21#.#48.220.253':139
'21#.248.7.7':139
'21#.#48.44.62':139
'21#.#48.12.247':139
'21#.#48.6.13':139
'21#.#48.107.94':139
'21#.#48.247.147':139
'21#.#48.76.196':445
'21#.#48.94.113':445
'21#.#48.37.191':445
'21#.#48.92.102':445
'21#.#48.14.26':445
'21#.#48.157.118':445
'21#.#48.180.15':445
'21#.#48.86.237':445
'21#.#48.95.11':445
'21#.#48.235.186':445
'21#.#48.65.228':139
'21#.#48.83.246':139
'21#.#48.254.226':139
'21#.#48.53.60':139
'21#.#48.106.237':139
'21#.#48.201.174':445
'21#.#48.250.148':445
'21#.#48.33.227':139
'21#.#48.50.201':139
'21#.#48.188.117':445
'21#.#48.193.45':445
'21#.#48.73.85':139
'21#.#48.25.73':139
'21#.#48.39.95':445
'21#.#48.39.215':445
'21#.#48.36.144':445
'21#.#48.24.17':445
'21#.#48.45.28':445
'21#.#48.157.24':139
'21#.#48.175.89':139
'21#.#48.70.140':139
'21#.#48.24.220':139
'21#.#48.14.28':139
'21#.#48.175.249':139
'21#.#48.153.79':139
'21#.#48.184.36':139
'21#.#48.77.176':139
'21#.#48.55.191':139
'21#.#48.15.39':445
'21#.#48.70.60':445
'21#.#48.147.23':445
'21#.#48.13.92':445
'21#.#48.162.69':445
'21#.#48.175.184':445
'21#.#48.60.51':445
'21#.#48.74.162':445
'21#.#48.128.74':445
'21#.#48.254.133':445
'21#.#48.112.229':445
'21#.#48.121.19':445
'21#.#48.60.223':445
'21#.#48.45.96':445
'21#.#48.106.28':445
'21#.#48.193.42':445
'21#.#48.215.171':445
'21#.#48.78.246':445
'21#.#48.43.78':445
'21#.#48.35.62':139
'21#.#48.78.246':139
'21#.#48.43.78':139
'21#.#48.121.19':139
'21#.#48.106.28':139
'21#.#48.193.42':139
'21#.#48.147.23':139
'21#.#48.13.92':139
'21#.#48.215.171':139
'21#.#48.254.133':139
'21#.#48.112.229':139
'21#.#48.39.95':139
'21#.#48.188.117':139
'21#.#48.45.28':139
'21#.#48.193.45':139
'21#.#48.24.17':139
'21#.#48.60.223':139
'21#.#48.45.96':139
'21#.#48.39.215':139
'21#.#48.36.144':139
'21#.#48.64.64':139
'21#.#48.95.225':139
'21#.#48.192.41':139
'21#.#48.64.175':139
'21#.#48.126.248':139
'21#.#48.65.93':139
'21#.#48.85.142':139
'21#.#48.165.47':139
'21#.#48.93.115':139
'21#.#48.194.172':139
'21#.#48.162.69':139
'21#.#48.74.162':139
'21#.#48.15.39':139
'21#.#48.70.60':139
'21#.#48.128.74':139
'21#.#48.60.51':139
'21#.#48.34.172':139
'21#.#48.175.184':139
'21#.#48.24.149':139
'21#.#48.35.250':139
'21#.#48.66.128':139
'21#.#48.136.79':139
'21#.#48.114.136':139
'21#.#48.232.136':139
'21#.#48.136.183':139
'21#.#48.141.208':139
'21#.#48.207.193':139
'21#.#48.223.242':139
'21#.#48.27.76':139
'21#.#48.205.208':139
'21#.#48.41.209':139
'21#.#48.206.216':139
'21#.#48.238.240':139
'21#.#48.51.39':139
'21#.#48.43.74':139
'21#.#48.165.26':139
'21#.#48.208.51':139
'21#.#48.11.249':139
'21#.#48.114.168':139
'21#.#48.25.51':139
'21#.#48.14.2':139
'21#.#48.71.45':139
'21#.#48.107.105':139
'21#.#48.217.92':139
'21#.#48.89.217':139
'21#.#48.210.147':139
'21#.#48.92.210':139
'21#.#48.10.139':139
'21#.#48.157.107':139
'21#.#48.228.213':139
'21#.#48.180.105':139
'21#.#48.129.153':139
'21#.#48.125.228':139
'21#.#48.242.141':139
'21#.#48.11.232':139
'21#.#48.173.159':139
'21#.#48.219.75':139
'21#.#48.121.147':139
'21#.#48.24.220':445
'21#.#48.35.62':445
'21#.#48.65.93':445
'21#.#48.85.142':445
'21#.#48.14.28':445
'21#.#48.175.249':445
'21#.#48.77.176':445
'21#.#48.175.89':445
'21#.#48.70.140':445
'21#.#48.93.115':445
'21#.#48.192.41':445
'21#.#48.194.172':445
'21#.#48.24.149':445
'21#.#48.34.172':445
'21#.#48.64.175':445
'21#.#48.126.248':445
'21#.#48.165.47':445
'21#.#48.64.64':445
'21#.#48.95.225':445
'21#.#48.47.150':139
'21#.#48.29.127':139
'21#.#48.77.176':9988
'21#.#48.55.191':9988
'21#.#48.79.81':139
'21#.#48.143.149':139
'21#.#48.81.91':139
'21#.#48.247.137':139
'21#.#48.72.194':139
'21#.#48.64.64':9988
'21#.#48.184.36':445
'21#.#48.157.24':445
'21#.#48.55.191':445
'21#.#48.153.79':445
'21#.#48.73.85':445
'21#.#48.43.78':9988
'21#.#48.70.60':9988
'21#.#48.25.73':445
'21#.#48.188.117':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней