Trojan.Starman.5621

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#03.211.52':445
'21#.#03.66.109':445
'21#.#03.215.183':445
'21#.#03.17.195':445
'21#.#03.184.17':445
'21#.#03.158.9':445
'21#.#03.39.171':445
'21#.#03.74.167':445
'21#.#03.92.55':445
'21#.#03.181.230':445
'21#.#03.80.64':445
'21#.#03.129.202':445
'21#.#03.209.180':445
'21#.#03.116.211':445
'21#.#03.38.227':445
'21#.#03.87.211':445
'21#.#03.78.136':445
'21#.#03.226.107':445
'21#.#03.101.155':445
'21#.#03.74.128':445
'21#.#03.97.164':445
'21#.#03.115.96':445
'21#.#03.84.19':445
'21#.#03.36.133':445
'21#.#03.205.158':445
'21#.#03.140.200':445
'21#.#03.252.91':445
'21#.#03.123.46':445
'21#.#03.21.214':445
'21#.#03.21.31':445
'21#.#03.169.156':445
'21#.#03.19.220':445
'21#.#03.108.165':445
'21#.#03.56.61':445
'21#.#03.83.182':445
'21#.#03.222.49':445
'21#.#03.82.71':445
'21#.#03.229.80':445
'21#.#03.231.14':445
'21#.#03.8.15':445
'21#.#03.19.220':139
'21#.#03.231.14':139
'21#.#03.169.156':139
'21#.#03.83.182':139
'21#.#03.108.165':139
'21#.#03.82.71':139
'21#.#03.36.133':139
'21#.#03.222.49':139
'21#.#03.8.15':139
'21#.#03.229.80':139
'21#.#03.66.109':139
'21#.#03.92.55':139
'21#.#03.211.52':139
'21#.#03.184.17':139
'21#.#03.215.183':139
'21#.#03.39.171':139
'21#.#03.56.61':139
'21#.#03.158.9':139
'21#.#03.181.230':139
'21#.#03.74.167':139
'21#.#03.223.84':445
'21#.#03.186.64':445
'21#.#03.123.100':445
'21#.#03.39.235':445
'21#.#03.59.30':445
'21#.#03.6.25':445
'21#.#03.130.5':445
'21#.#03.25.192':445
'21#.#03.148.58':445
'21#.#03.10.90':445
'21#.#03.115.96':139
'21#.#03.21.214':139
'21#.#03.97.164':139
'21#.#03.205.158':139
'21#.#03.84.19':139
'21#.#03.252.91':139
'21#.#03.109.196':445
'21#.#03.140.200':139
'21#.#03.21.31':139
'21#.#03.123.46':139
'21#.#03.104.93':445
'21#.#03.5.110':445
'21#.#03.57.32':445
'21#.#03.97.95':139
'21#.#03.31.187':445
'21#.#03.29.110':445
'21#.#03.124.189':445
'21#.#03.54.159':445
'21#.#03.108.39':445
'21#.#03.74.79':445
'21#.#03.24.97':139
'21#.#03.8.25':139
'21#.#03.97.34':139
'21#.#03.129.109':139
'21#.#03.80.80':139
'21#.#03.100.100':139
'21#.#03.62.0':139
'21#.#03.101.25':139
'21#.#03.64.7':139
'21#.#03.255.141':139
'21#.#03.64.232':445
'21#.#03.34.65':445
'21#.#03.232.161':445
'21#.#03.80.115':445
'21#.#03.162.116':445
'21#.#03.41.178':445
'21#.#03.75.189':445
'21#.#03.189.125':445
'21#.#03.42.34':445
'21#.#03.225.65':445
'21#.#03.111.59':445
'21#.#03.108.126':445
'21#.#03.127.224':445
'21#.#03.70.120':445
'21#.#03.53.145':445
'21#.#03.108.202':445
'21#.#03.75.181':445
'21#.#03.252.210':445
'21#.#03.32.30':445
'21#.#03.42.234':445
'21#.#03.108.126':139
'21#.#03.32.30':139
'21#.#03.111.59':139
'21#.#03.53.145':139
'21#.#03.127.224':139
'21#.#03.75.181':139
'21#.#03.80.115':139
'21#.#03.108.202':139
'21#.#03.42.234':139
'21#.#03.252.210':139
'21#.#03.5.110':139
'21#.#03.108.39':139
'21#.#03.104.93':139
'21#.#03.31.187':139
'21#.#03.57.32':139
'21#.#03.124.189':139
'21#.#03.70.120':139
'21#.#03.29.110':139
'21#.#03.74.79':139
'21#.#03.54.159':139
'21#.#03.122.238':139
'21#.#03.114.16':139
'21#.#03.111.152':139
'21#.#03.165.143':139
'21#.#03.17.155':139
'21#.#03.129.189':139
'21#.#03.58.234':139
'21#.#03.224.32':139
'21#.#03.204.113':139
'21#.#03.32.205':139
'21#.#03.34.65':139
'21#.#03.42.34':139
'21#.#03.64.232':139
'21#.#03.162.116':139
'21#.#03.232.161':139
'21#.#03.75.189':139
'21#.#03.113.31':139
'21#.#03.41.178':139
'21#.#03.225.65':139
'21#.#03.189.125':139
'21#.#03.195.85':445
'21#.#03.24.195':445
'21#.#03.184.234':445
'21#.#03.209.235':139
'21#.#03.209.241':445
'21#.#03.179.157':445
'21#.#03.94.55':445
'21#.#03.10.207':445
'21#.#03.53.25':445
'21#.#03.218.231':445
'21#.#03.49.179':139
'21#.#03.18.104':139
'21#.#03.23.43':139
'21#.#03.90.199':139
'21#.#03.68.107':139
'21#.#03.107.199':139
'21#.#03.142.231':139
'21#.#03.117.30':139
'21#.#03.99.53':139
'21#.#03.30.99':139
'21#.#03.18.66':445
'21#.#03.58.49':445
'21#.#03.10.131':445
'21#.#03.54.18':445
'21#.#03.39.68':445
'21#.#03.6.197':445
'21#.#03.244.63':445
'21#.#03.241.183':445
'21#.#03.62.217':445
'21#.#03.217.164':445
'21#.#03.21.176':445
'21#.#03.56.183':445
'21#.#03.114.165':445
'21#.#03.229.132':445
'21#.#03.156.118':445
'21#.#03.19.202':445
'21#.#03.139.7':445
'21#.#03.16.137':445
'21#.#03.164.199':445
'21#.#03.110.188':445
'21#.#03.56.183':139
'21#.#03.164.199':139
'21#.#03.21.176':139
'21#.#03.156.118':139
'21#.#03.114.165':139
'21#.#03.139.7':139
'21#.#03.54.18':139
'21#.#03.19.202':139
'21#.#03.110.188':139
'21#.#03.16.137':139
'21#.#03.24.195':139
'21#.#03.53.25':139
'21#.#03.195.85':139
'21#.#03.184.234':139
'21#.#03.209.241':139
'21#.#03.94.55':139
'21#.#03.229.132':139
'21#.#03.179.157':139
'21#.#03.218.231':139
'21#.#03.10.207':139
'21#.#03.137.116':139
'21#.#03.8.19':139
'21#.#03.71.100':139
'21#.#03.147.113':139
'21#.#03.100.16':139
'21#.#03.106.167':139
'21#.#03.240.161':139
'21#.#03.64.67':139
'21#.#03.18.230':139
'21#.#03.112.232':139
'21#.#03.58.49':139
'21#.#03.62.217':139
'21#.#03.18.66':139
'21#.#03.39.68':139
'21#.#03.10.131':139
'21#.#03.244.63':139
'21#.#03.130.151':139
'21#.#03.6.197':139
'21#.#03.217.164':139
'21#.#03.241.183':139
'21#.#03.38.117':445
'21#.#03.64.30':445
'21#.#03.18.137':445
'21#.#03.231.11':139
'21#.#03.137.190':445
'21#.#03.109.196':139
'21#.#03.39.235':139
'21#.#03.231.11':445
'21#.#03.46.31':445
'21#.#03.12.72':445
'21#.#03.64.67':9988
'21#.#03.137.190':139
'21#.#03.18.66':9988
'21#.#03.62.217':9988
'21#.#03.112.232':9988
'21#.#03.46.31':139
'21#.#03.12.72':139
'21#.#03.64.30':139
'21#.#03.18.137':139
'21#.#03.38.117':139
'21#.#03.129.202':139
'21#.#03.101.155':139
'21#.#03.80.64':139
'21#.#03.38.227':139
'21#.#03.209.180':139
'21#.#03.78.136':139
'21#.#03.17.195':139
'21#.#03.87.211':139
'21#.#03.74.128':139
'21#.#03.226.107':139
'21#.#03.186.64':139
'21#.#03.148.58':139
'21#.#03.223.84':139
'21#.#03.59.30':139
'21#.#03.123.100':139
'21#.#03.130.5':139
'21#.#03.116.211':139
'21#.#03.6.25':139
'21#.#03.10.90':139
'21#.#03.25.192':139
'21#.#03.23.43':445
'21#.#03.49.179':445
'21#.#03.68.107':445
'21#.#03.240.161':445
'21#.#03.90.199':445
'21#.#03.117.30':445
'21#.#03.107.199':445
'21#.#03.30.99':445
'21#.#03.18.104':445
'21#.#03.99.53':445
'21#.#03.71.100':445
'21#.#03.137.116':445
'21#.#03.100.16':445
'21#.#03.130.151':445
'21#.#03.147.113':445
'21#.#03.64.67':445
'21#.#03.106.167':445
'21#.#03.112.232':445
'21#.#03.8.19':445
'21#.#03.18.230':445
'21#.#03.110.188':9988
'21#.#03.16.137':9988
'21#.#03.164.199':9988
'21#.#03.21.176':9988
'21#.#03.56.183':9988
'21#.#03.6.197':9988
'21#.#03.39.68':9988
'21#.#03.58.49':9988
'21#.#03.19.202':9988
'21#.#03.139.7':9988
'21#.#03.184.234':9988
'21#.#03.195.85':9988
'21#.#03.209.241':9988
'21#.#03.142.231':445
'21#.#03.209.235':445
'21#.#03.156.118':9988
'21#.#03.114.165':9988
'21#.#03.53.25':9988
'21#.#03.24.195':9988
'21#.#03.218.231':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней