Trojan.Starman.5760

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#1.111.197':139
'21#.#1.199.47':139
'21#.#1.105.208':139
'21#.#1.214.117':139
'21#.#1.207.214':139
'21#.#1.78.32':139
'21#.#1.24.58':139
'21#.#1.136.55':139
'21#.#1.61.198':139
'21#.#1.55.61':139
'21#.#1.66.126':139
'21#.#1.247.3':139
'21#.#1.0.108':139
'21#.#1.205.189':139
'21#.#1.248.178':139
'21#.#1.44.188':139
'21#.#1.118.88':139
'21#.#1.172.48':139
'21#.#1.159.181':139
'21#.#1.48.160':139
'21#.#1.82.24':139
'21#.#1.190.26':445
'21#.#1.205.189':445
'21#.#1.97.157':445
'21#.#1.247.8':445
'21#.#1.138.246':445
'21#.#1.247.3':445
'21#.#1.159.181':445
'21#.#1.66.126':445
'21#.#1.248.178':445
'21#.#1.0.108':445
'21#.#1.114.244':445
'21#.#1.81.115':445
'21#.#1.244.94':445
'21#.#1.21.168':445
'21#.#1.95.22':445
'21#.#1.71.59':445
'21#.21.43.1':445
'21#.#1.233.178':445
'21#.21.2.5':445
'21#.#1.155.16':445
'21#.#1.10.59':445
'21#.#1.13.181':445
'21#.#1.36.64':445
'21#.#1.168.51':139
'21#.#1.177.223':445
'21#.#1.241.143':445
'21#.#1.139.79':445
'21#.#1.41.47':445
'21#.#1.53.50':445
'21#.#1.50.152':445
'21#.#1.139.79':139
'21#.#1.180.52':139
'21#.#1.241.143':139
'21#.#1.50.152':139
'21#.#1.41.47':139
'21#.#1.132.75':139
'21#.#1.184.13':139
'21#.#1.16.211':139
'21#.#1.152.180':139
'21#.#1.59.152':139
'21#.#1.180.52':445
'21#.#1.233.178':139
'21#.#1.71.59':139
'21#.#1.155.16':139
'21#.#1.81.115':139
'21#.21.2.5':139
'21#.#1.97.157':139
'21#.#1.190.26':139
'21#.#1.138.246':139
'21#.21.43.1':139
'21#.#1.247.8':139
'21#.#1.132.75':445
'21#.#1.184.13':445
'21#.#1.16.211':445
'21#.#1.152.180':445
'21#.#1.59.152':445
'21#.#1.244.94':139
'21#.#1.114.244':139
'21#.#1.95.22':139
'21#.#1.168.51':445
'21#.#1.21.168':139
'21#.#1.246.25':139
'21#.#1.244.245':139
'21#.#1.165.216':139
'21#.#1.35.28':139
'21#.#1.233.35':139
'21#.#1.98.228':139
'21#.#1.249.98':139
'21#.#1.228.127':139
'21#.#1.80.121':139
'21#.#1.122.176':139
'21#.#1.38.25':445
'21#.#1.40.104':445
'21#.#1.156.169':445
'21#.#1.80.125':445
'21#.#1.24.197':445
'21#.#1.46.175':139
'21#.#1.96.116':139
'21#.#1.175.46':139
'21#.#1.57.52':445
'21#.#1.46.233':139
'21#.#1.206.154':139
'21#.#1.96.87':139
'21#.#1.16.169':139
'21#.#1.15.184':139
'21#.#1.145.211':139
'21#.#1.119.233':139
'21#.#1.59.74':139
'21#.#1.102.4':139
'21#.#1.54.254':139
'21#.#1.105.82':139
'21#.#1.254.100':139
'21#.#1.43.59':139
'21#.#1.102.209':139
'21#.#1.58.245':139
'21#.#1.19.128':139
'21#.#1.45.103':139
'21#.#1.15.21':139
'21#.#1.211.15':139
'21#.#1.122.23':139
'21#.#1.183.227':139
'21#.#1.104.176':139
'21#.#1.24.58':445
'21#.#1.82.24':445
'21#.#1.78.32':445
'21#.#1.55.61':445
'21#.#1.136.55':445
'21#.#1.50.214':139
'21#.#1.129.155':139
'21#.#1.65.12':139
'21#.#1.36.82':139
'21#.#1.179.42':139
'21#.#1.118.88':445
'21#.#1.214.117':445
'21#.#1.44.188':445
'21#.#1.48.160':445
'21#.#1.172.48':445
'21#.#1.199.47':445
'21#.#1.61.198':445
'21#.#1.111.197':445
'21#.#1.207.214':445
'21#.#1.105.208':445
'21#.#1.35.15':139
'21#.#1.50.214':445
'21#.#1.129.155':445
'21#.#1.65.12':445
'21#.#1.36.82':445
'21#.#1.179.42':445
'21#.#1.58.50':445
'21#.#1.129.133':445
'21#.#1.19.208':445
'21#.#1.35.15':445
'21#.#1.90.123':445
'21#.#1.129.133':139
'21#.#1.80.125':139
'21#.#1.58.50':139
'21#.#1.90.123':139
'21#.#1.19.208':139
'21#.#1.40.104':139
'21#.#1.57.52':139
'21#.#1.38.25':139
'21#.#1.24.197':139
'21#.#1.156.169':139
'21#.#1.75.244':445
'21#.#1.4.137':445
'21#.21.48.3':445
'21#.#1.69.143':445
'21#.#1.116.150':445
'21#.#1.19.249':445
'21#.#1.11.78':445
'21#.#1.156.115':445
'21#.#1.113.169':445
'21#.#1.138.85':445
'21#.#1.207.123':139
'21#.#1.161.155':139
'21#.#1.123.195':139
'21#.#1.4.192':139
'21#.#1.195.95':139
'21#.#1.124.83':139
'21#.#1.181.189':139
'21#.#1.40.171':139
'21#.#1.234.185':139
'21#.#1.154.56':139
'21#.#1.242.9':445
'21#.#1.8.104':445
'21#.#1.225.5':445
'21#.#1.67.194':445
'21#.#1.112.188':445
'21#.#1.143.252':445
'21#.#1.255.185':445
'21#.21.7.35':445
'21#.#1.29.20':445
'21#.#1.169.67':445
'21#.#1.153.206':445
'21#.#1.216.240':445
'21#.#1.75.242':445
'21#.#1.230.76':445
'21#.#1.247.150':445
'21#.#1.8.128':445
'21#.#1.114.89':445
'21#.#1.121.114':445
'21#.#1.125.139':445
'21#.#1.167.197':445
'21#.#1.224.22':445
'21#.#1.230.76':139
'21#.#1.216.240':139
'21#.#1.8.128':139
'21#.#1.242.9':139
'21#.#1.247.150':139
'21#.#1.125.139':139
'21#.#1.114.89':139
'21#.#1.224.22':139
'21#.#1.75.242':139
'21#.#1.167.197':139
'21#.#1.75.244':139
'21#.#1.113.169':139
'21#.#1.4.137':139
'21#.#1.116.150':139
'21#.#1.69.143':139
'21#.#1.19.249':139
'21#.#1.11.78':139
'21#.#1.156.115':139
'21#.21.48.3':139
'21#.#1.138.85':139
'21#.#1.121.114':139
'21#.#1.26.176':139
'21#.#1.22.136':139
'21#.#1.172.146':139
'21#.#1.209.125':139
'21#.#1.252.98':139
'21#.#1.127.116':139
'21#.#1.165.1':139
'21#.#1.106.164':139
'21#.#1.89.242':139
'21#.#1.136.152':139
'21#.#1.8.104':139
'21#.#1.225.5':139
'21#.#1.67.194':139
'21#.#1.112.188':139
'21#.#1.143.252':139
'21#.#1.255.185':139
'21#.21.7.35':139
'21#.#1.29.20':139
'21#.#1.169.67':139
'21#.#1.153.206':139
'21#.#1.195.83':139
'21#.#1.8.152':139
'21#.#1.84.36':139
'21#.#1.59.80':139
'21#.#1.156.186':139
'21#.#1.164.171':445
'21#.#1.237.163':445
'21#.#1.70.155':445
'21#.#1.251.181':445
'21#.#1.89.251':445
'21#.#1.14.104':139
'21#.#1.242.37':139
'21#.21.4.50':139
'21#.#1.124.108':139
'21#.#1.125.127':139
'21#.#1.149.80':139
'21#.#1.80.138':139
'21#.#1.106.101':139
'21#.21.4.32':139
'21#.#1.129.90':139
'21#.#1.205.237':445
'21#.#1.195.83':445
'21#.#1.8.152':445
'21#.#1.84.36':445
'21#.#1.59.80':445
'21#.#1.156.186':445
'21#.#1.13.181':139
'21#.#1.53.50':139
'21#.#1.10.59':139
'21#.#1.177.223':139
'21#.#1.36.64':139
'21#.#1.14.104':445
'21#.#1.242.37':445
'21#.21.4.50':445
'21#.#1.124.108':445
'21#.#1.125.127':445
'21#.#1.149.80':445
'21#.#1.80.138':445
'21#.#1.106.101':445
'21#.21.4.32':445
'21#.#1.129.90':445
'21#.#1.207.123':445
'21#.#1.161.155':445
'21#.#1.123.195':445
'21#.#1.4.192':445
'21#.#1.195.95':445
'21#.#1.124.83':445
'21#.#1.181.189':445
'21#.#1.40.171':445
'21#.#1.234.185':445
'21#.#1.154.56':445
'21#.#1.26.176':445
'21#.#1.22.136':445
'21#.#1.172.146':445
'21#.#1.209.125':445
'21#.#1.252.98':445
'21#.#1.127.116':445
'21#.#1.165.1':445
'21#.#1.106.164':445
'21#.#1.89.242':445
'21#.#1.136.152':445
'21#.#1.69.143':9988
'21#.#1.181.189':9988
'21#.#1.251.181':139
'21#.#1.207.123':9988
'21#.#1.89.242':9988
'21#.#1.106.164':9988
'21#.#1.237.163':139
'21#.#1.205.237':139
'21#.#1.164.171':139
'21#.#1.89.251':139
'21#.#1.70.155':139
'21#.#1.8.128':9988
'21#.#1.224.22':9988
'21#.#1.242.9':9988
'21#.#1.75.244':9988
'21#.#1.19.249':9988
'21#.21.7.35':9988
'21#.#1.172.146':9988
'21#.#1.255.185':9988
'21#.#1.125.139':9988
'21#.#1.114.89':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней