Trojan.Starman.5630

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#19.248.70':139
'21#.#19.4.33':139
'21#.#19.70.132':139
'21#.#19.99.158':139
'21#.#19.61.99':139
'21#.#19.10.210':139
'21#.#19.46.62':139
'21#.#19.46.204':139
'21#.#19.4.168':139
'21#.#19.143.5':139
'21#.#19.158.127':139
'21#.#19.153.65':445
'21#.#19.199.197':445
'21#.#19.50.188':445
'21#.#19.50.200':445
'21#.#19.244.239':445
'21#.#19.53.72':139
'21#.#19.127.47':139
'21#.#19.170.123':139
'21#.#19.36.245':139
'21#.#19.120.187':139
'21#.#19.248.70':445
'21#.#19.4.33':445
'21#.#19.70.132':445
'21#.#19.99.158':445
'21#.#19.61.99':445
'21#.#19.10.210':445
'21#.#19.46.62':445
'21#.#19.46.204':445
'21#.#19.4.168':445
'21#.#19.143.5':445
'21#.#19.158.127':445
'21#.#19.118.9':139
'21#.#19.64.5':139
'21#.#19.65.250':139
'21#.#19.237.242':139
'21#.#19.83.187':139
'21#.#19.53.72':445
'21#.#19.127.47':445
'21#.#19.170.123':445
'21#.#19.36.245':445
'21#.#19.120.187':445
'21#.#19.221.34':445
'21#.#19.244.239':139
'21#.#19.50.188':139
'21#.#19.50.200':139
'21#.#19.215.245':139
'21#.#19.221.34':139
'21#.#19.210.183':445
'21#.#19.21.246':445
'21#.#19.255.238':445
'21#.#19.153.65':139
'21#.#19.199.197':139
'21#.#19.245.171':139
'21#.#19.138.230':139
'21#.#19.66.76':139
'21#.#19.15.103':139
'21#.#19.28.79':139
'21#.#19.44.84':139
'21#.#19.32.150':139
'21#.#19.171.169':139
'21#.#19.192.115':139
'21#.#19.89.118':139
'21#.#19.189.150':139
'21#.#19.89.118':445
'21#.#19.189.150':445
'21#.#19.66.76':445
'21#.#19.15.103':445
'21#.#19.138.230':445
'21#.#19.245.171':445
'21#.#19.215.245':445
'21#.#19.171.169':445
'21#.#19.192.115':445
'21#.#19.32.150':445
'21#.#19.44.84':445
'21#.#19.166.222':445
'21#.#19.43.167':445
'21#.#19.223.35':445
'21#.#19.112.170':445
'21#.#19.44.195':445
'21#.#19.206.170':445
'21#.#19.28.79':445
'21#.#19.248.227':445
'21#.#19.221.159':445
'21#.#19.142.126':445
'21#.#19.237.242':445
'21#.#19.244.71':445
'21#.#19.163.236':445
'21#.#19.94.144':445
'21#.#19.115.72':445
'21#.#19.107.31':445
'21#.#19.221.28':445
'21#.#19.125.207':445
'21#.#19.28.117':445
'21#.#19.47.213':445
'21#.#19.170.234':445
'21#.#19.255.41':445
'21#.#19.74.244':445
'21#.#19.72.65':445
'21#.#19.200.194':445
'21#.#19.16.141':445
'21#.#19.255.108':445
'21#.#19.241.189':445
'21#.#19.14.10':445
'21#.#19.102.67':445
'21#.#19.240.129':445
'21#.#19.67.107':445
'21#.#19.75.16':139
'21#.#19.34.237':139
'21#.#19.16.119':139
'21#.#19.26.59':139
'21#.#19.144.124':139
'21#.#19.254.83':139
'21#.#19.144.247':139
'21#.#19.107.220':139
'21#.#19.63.117':139
'21#.#19.218.150':139
'21#.#19.199.74':139
'21#.#19.109.192':139
'21#.#19.157.26':139
'21#.#19.166.125':139
'21#.#19.121.92':139
'21#.#19.126.24':139
'21#.#19.121.180':139
'21#.#19.35.234':139
'21#.#19.73.14':139
'21#.#19.100.130':139
'21#.#19.62.146':139
'21#.#19.125.198':445
'21#.#19.255.108':139
'21#.#19.200.194':139
'21#.#19.16.141':139
'21#.#19.173.233':139
'21#.#19.125.198':139
'21#.#19.67.107':139
'21#.#19.102.67':139
'21#.#19.240.129':139
'21#.#19.74.244':139
'21#.#19.72.65':139
'21#.#19.121.229':139
'21#.#19.64.5':445
'21#.#19.170.63':139
'21#.#19.118.9':445
'21#.#19.83.187':445
'21#.#19.65.250':445
'21#.#19.202.37':139
'21#.#19.246.0':139
'21#.#19.142.212':139
'21#.#19.3.233':139
'21#.#19.136.96':139
'21#.#19.3.233':445
'21#.#19.136.96':445
'21#.#19.170.63':445
'21#.#19.221.28':139
'21#.#19.125.207':139
'21#.#19.121.229':445
'21#.#19.173.233':445
'21#.#19.246.0':445
'21#.#19.142.212':445
'21#.#19.202.37':445
'21#.#19.28.117':139
'21#.#19.115.72':139
'21#.#19.107.31':139
'21#.#19.255.41':139
'21#.#19.241.189':139
'21#.#19.14.10':139
'21#.#19.47.213':139
'21#.#19.170.234':139
'21#.#19.163.236':139
'21#.#19.94.144':139
'21#.#19.244.71':139
'21#.#19.5.17':445
'21#.#19.199.13':445
'21#.#19.41.64':445
'21#.#19.109.81':445
'21#.#19.228.6':445
'21#.#19.66.98':445
'21#.#19.143.16':445
'21#.#19.59.170':445
'21#.#19.84.204':445
'21#.#19.112.41':445
'21#.#19.22.213':445
'21#.#19.239.150':139
'21#.#19.61.35':139
'21#.#19.6.44':139
'21#.#19.15.20':139
'21#.#19.177.70':139
'21#.#19.213.100':445
'21#.#19.219.194':445
'21#.#19.184.146':139
'21#.#19.178.207':139
'21#.#19.192.61':139
'21#.#19.49.44':445
'21#.#19.234.190':445
'21#.#19.42.137':445
'21#.#19.204.189':445
'21#.#19.137.204':445
'21#.#19.118.210':445
'21#.#19.124.113':445
'21#.#19.96.241':445
'21#.#19.241.114':445
'21#.#19.16.97':445
'21#.#19.57.142':445
'21#.#19.70.51':445
'21#.#19.224.69':445
'21#.#19.51.69':445
'21#.#19.206.24':445
'21#.#19.110.84':445
'21#.#19.247.134':445
'21#.#19.206.90':445
'21#.#19.134.184':445
'21#.#19.129.224':445
'21#.#19.28.102':445
'21#.#19.231.93':139
'21#.#19.110.84':139
'21#.#19.51.69':139
'21#.#19.206.24':139
'21#.#19.66.98':139
'21#.#19.143.16':139
'21#.#19.28.102':139
'21#.#19.134.184':139
'21#.#19.129.224':139
'21#.#19.70.51':139
'21#.#19.224.69':139
'21#.#19.59.170':139
'21#.#19.109.81':139
'21#.#19.228.6':139
'21#.#19.219.194':139
'21#.#19.213.100':139
'21#.#19.22.213':139
'21#.#19.84.204':139
'21#.#19.112.41':139
'21#.#19.199.13':139
'21#.#19.41.64':139
'21#.#19.5.17':139
'21#.#19.131.218':139
'21#.#19.232.137':139
'21#.#19.248.124':139
'21#.#19.118.210':139
'21#.#19.124.113':139
'21#.#19.58.92':139
'21#.#19.94.58':139
'21#.#19.91.230':139
'21#.#19.112.207':139
'21#.#19.19.126':139
'21#.#19.96.241':139
'21#.#19.204.189':139
'21#.#19.137.204':139
'21#.#19.206.90':139
'21#.#19.247.134':139
'21#.#19.57.142':139
'21#.#19.241.114':139
'21#.#19.16.97':139
'21#.#19.234.190':139
'21#.#19.42.137':139
'21#.#19.49.44':139
'21#.#19.248.124':445
'21#.#19.16.118':445
'21#.#19.25.103':445
'21#.#19.105.60':445
'21#.#19.182.8':445
'21#.#19.118.143':445
'21#.#19.97.242':445
'21#.#19.251.37':445
'21#.#19.134.142':445
'21#.#19.18.95':445
'21#.#19.178.122':445
'21#.#19.35.243':445
'21#.#19.246.175':139
'21#.#19.74.134':139
'21#.#19.104.162':139
'21#.#19.119.56':139
'21#.#19.78.112':139
'21#.#19.239.52':139
'21#.#19.148.228':445
'21#.#19.228.61':139
'21#.#19.227.210':139
'21#.#19.92.200':139
'21#.#19.223.35':139
'21#.#19.166.222':139
'21#.#19.44.195':139
'21#.#19.21.246':139
'21#.#19.112.170':139
'21#.#19.248.227':139
'21#.#19.206.170':139
'21#.#19.142.126':139
'21#.#19.43.167':139
'21#.#19.221.159':139
'21#.#19.210.183':139
'21#.#19.246.175':445
'21#.#19.74.134':445
'21#.#19.104.162':445
'21#.#19.119.56':445
'21#.#19.78.112':445
'21#.#19.239.52':445
'21#.#19.255.238':139
'21#.#19.228.61':445
'21#.#19.227.210':445
'21#.#19.92.200':445
'21#.#19.251.37':139
'21#.#19.192.61':445
'21#.#19.184.146':445
'21#.#19.178.207':445
'21#.#19.239.150':445
'21#.#19.61.35':445
'21#.#19.59.170':9988
'21#.#19.51.69':9988
'21#.#19.84.204':9988
'21#.#19.219.194':9988
'21#.#19.109.81':9988
'21#.#19.6.44':445
'21#.#19.19.126':445
'21#.#19.91.230':445
'21#.#19.112.207':445
'21#.#19.131.218':445
'21#.#19.232.137':445
'21#.#19.15.20':445
'21#.#19.177.70':445
'21#.#19.231.93':445
'21#.#19.58.92':445
'21#.#19.94.58':445
'21#.#19.105.60':139
'21#.#19.16.118':139
'21#.#19.118.143':139
'21#.#19.35.243':139
'21#.#19.182.8':139
'21#.#19.134.142':139
'21#.#19.97.242':139
'21#.#19.178.122':139
'21#.#19.25.103':139
'21#.#19.18.95':139
'21#.#19.148.228':139
'21#.#19.28.102':9988
'21#.#19.206.90':9988
'21#.#19.247.134':9988
'21#.#19.224.69':9988
'21#.#19.129.224':9988
'21#.#19.232.137':9988
'21#.#19.112.207':9988
'21#.#19.131.218':9988
'21#.#19.204.189':9988
'21#.#19.96.241':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней