Trojan.Starman.5761

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#4.156.7':445
'21#.#4.34.159':445
'21#.#4.124.235':445
'21#.#4.5.176':445
'21#.#4.45.252':445
'21#.#4.235.20':445
'21#.#4.85.248':445
'21#.#4.142.111':445
'21#.#4.176.43':445
'21#.#4.195.161':139
'21#.#4.224.41':139
'21#.#4.164.45':139
'21#.#4.63.52':139
'21#.#4.48.62':139
'21#.#4.113.163':445
'21#.#4.68.189':445
'21#.#4.4.179':139
'21#.#4.15.202':139
'21#.#4.224.41':445
'21#.#4.48.62':445
'21#.#4.63.52':445
'21#.#4.195.161':445
'21#.#4.4.179':445
'21#.74.40.7':139
'21#.#4.109.123':139
'21#.#4.15.202':445
'21#.#4.51.17':139
'21#.#4.28.203':445
'21#.#4.158.239':445
'21#.#4.80.74':445
'21#.#4.242.76':445
'21#.#4.210.218':445
'21#.#4.132.26':445
'21#.#4.164.45':445
'21#.#4.47.222':445
'21#.#4.165.3':445
'21#.#4.132.26':139
'21#.#4.226.166':445
'21#.#4.87.227':445
'21#.#4.20.93':445
'21#.#4.113.0':445
'21#.#4.230.20':445
'21#.#4.65.57':445
'21#.#4.197.12':445
'21#.#4.70.168':445
'21#.#4.110.240':445
'21#.#4.26.238':445
'21#.#4.142.42':445
'21#.#4.15.109':445
'21#.#4.238.107':445
'21#.#4.52.238':445
'21#.#4.160.112':445
'21#.#4.51.15':445
'21#.#4.146.217':445
'21#.#4.112.147':445
'21#.#4.80.74':139
'21#.#4.242.76':139
'21#.#4.235.20':139
'21#.#4.85.248':139
'21#.#4.28.203':139
'21#.#4.47.222':139
'21#.#4.165.3':139
'21#.#4.158.239':139
'21#.#4.210.218':139
'21#.#4.124.235':139
'21#.#4.5.176':139
'21#.#4.113.163':139
'21#.#4.68.189':139
'21#.#4.156.7':139
'21#.#4.142.111':139
'21#.#4.176.43':139
'21#.#4.34.159':139
'21#.#4.45.252':139
'21#.#4.111.213':139
'21#.#4.105.63':139
'21#.#4.32.40':445
'21#.#4.87.206':139
'21#.#4.199.6':139
'21#.#4.133.243':139
'21#.#4.212.0':139
'21#.#4.20.11':139
'21#.#4.23.171':139
'21#.#4.254.80':445
'21#.#4.103.112':445
'21#.#4.166.25':445
'21#.#4.158.149':445
'21#.#4.25.237':445
'21#.#4.186.148':445
'21#.#4.10.231':445
'21#.#4.220.96':445
'21#.#4.97.129':445
'21#.#4.0.163':139
'21#.74.49.1':139
'21#.#4.103.129':139
'21#.#4.163.103':139
'21#.74.42.5':139
'21#.#4.21.21':139
'21#.#4.127.10':139
'21#.#4.120.16':139
'21#.#4.28.76':139
'21#.#4.152.6':139
'21#.#4.77.213':139
'21#.#4.113.20':139
'21#.#4.98.146':139
'21#.#4.127.237':139
'21#.#4.84.66':139
'21#.#4.72.136':139
'21#.#4.59.206':139
'21#.#4.177.59':139
'21#.#4.25.188':445
'21#.#4.25.188':139
'21#.#4.166.25':139
'21#.#4.121.91':139
'21#.#4.187.217':139
'21#.#4.158.149':139
'21#.#4.25.237':139
'21#.#4.220.96':139
'21#.#4.254.80':139
'21#.#4.103.112':139
'21#.#4.165.78':139
'21#.#4.120.245':139
'21#.#4.216.64':139
'21#.#4.2.187':139
'21#.#4.167.11':139
'21#.#4.209.245':139
'21#.#4.88.191':139
'21#.#4.80.217':139
'21#.#4.79.240':139
'21#.#4.167.11':445
'21#.#4.80.217':445
'21#.#4.165.78':445
'21#.#4.120.245':445
'21#.#4.79.240':445
'21#.#4.121.91':445
'21#.#4.187.217':445
'21#.#4.209.245':445
'21#.#4.88.191':445
'21#.#4.10.231':139
'21#.#4.32.40':139
'21#.#4.97.129':139
'21#.#4.186.148':139
'21#.#4.51.17':445
'21#.#4.216.64':445
'21#.#4.2.187':445
'21#.74.40.7':445
'21#.#4.109.123':445
'21#.#4.61.156':445
'21#.#4.231.143':139
'21#.#4.244.41':139
'21#.#4.47.241':139
'21#.#4.70.181':139
'21#.#4.91.61':139
'21#.#4.55.145':445
'21#.#4.73.124':445
'21#.#4.208.248':445
'21#.#4.148.148':445
'21#.74.99.3':139
'21#.#4.51.189':139
'21#.#4.152.106':139
'21#.74.3.99':139
'21#.#4.185.4':139
'21#.#4.216.14':139
'21#.#4.151.12':139
'21#.#4.63.222':139
'21#.#4.154.217':139
'21#.#4.33.65':445
'21#.#4.126.33':445
'21#.74.90.2':445
'21#.#4.65.48':445
'21#.#4.124.55':445
'21#.#4.208.180':445
'21#.#4.69.55':445
'21#.#4.49.70':445
'21#.#4.72.143':445
'21#.#4.82.112':445
'21#.#4.254.179':445
'21#.#4.136.177':445
'21#.#4.82.227':445
'21#.#4.91.134':445
'21#.#4.82.99':445
'21#.#4.71.120':445
'21#.#4.81.49':445
'21#.#4.131.89':445
'21#.#4.115.55':139
'21#.#4.82.99':139
'21#.#4.71.120':139
'21#.#4.81.49':139
'21#.#4.131.89':139
'21#.74.90.2':139
'21#.#4.126.33':139
'21#.#4.124.55':139
'21#.#4.65.48':139
'21#.#4.33.65':139
'21#.#4.148.148':139
'21#.#4.136.177':139
'21#.#4.73.124':139
'21#.#4.208.248':139
'21#.#4.55.145':139
'21#.#4.254.179':139
'21#.#4.91.134':139
'21#.#4.82.227':139
'21#.#4.82.112':139
'21#.#4.66.129':139
'21#.#4.162.30':139
'21#.#4.2.248':139
'21#.#4.141.173':139
'21#.#4.122.12':139
'21#.#4.192.27':139
'21#.#4.147.144':139
'21#.#4.218.59':139
'21#.#4.27.218':139
'21#.#4.208.180':139
'21#.#4.69.55':139
'21#.#4.49.70':139
'21#.#4.72.143':139
'21#.#4.74.244':139
'21#.#4.172.55':139
'21#.#4.21.224':139
'21#.#4.57.44':139
'21#.#4.251.67':139
'21#.#4.61.156':139
'21#.#4.15.109':139
'21#.#4.150.22':139
'21#.#4.64.72':139
'21#.#4.238.107':139
'21#.#4.52.238':139
'21#.#4.146.217':139
'21#.#4.26.238':139
'21#.#4.142.42':139
'21#.#4.74.244':9988
'21#.#4.124.55':9988
'21#.#4.172.55':9988
'21#.#4.208.180':9988
'21#.#4.126.33':9988
'21#.#4.157.209':139
'21#.#4.194.157':139
'21#.#4.49.162':139
'21#.#4.103.181':139
'21#.#4.197.12':139
'21#.#4.49.162':445
'21#.#4.110.240':139
'21#.#4.65.57':139
'21#.#4.103.181':445
'21#.#4.150.22':445
'21#.#4.64.72':445
'21#.#4.157.209':445
'21#.#4.194.157':445
'21#.#4.51.15':139
'21#.#4.20.93':139
'21#.#4.112.147':139
'21#.#4.160.112':139
'21#.#4.113.0':139
'21#.#4.230.20':139
'21#.#4.70.168':139
'21#.#4.226.166':139
'21#.#4.87.227':139
'21#.#4.72.143':9988
'21#.#4.27.218':445
'21#.#4.192.27':445
'21#.#4.122.12':445
'21#.#4.218.59':445
'21#.#4.147.144':445
'21#.74.3.99':445
'21#.74.99.3':445
'21#.#4.115.55':445
'21#.#4.152.106':445
'21#.#4.251.67':445
'21#.#4.172.55':445
'21#.#4.74.244':445
'21#.#4.57.44':445
'21#.#4.21.224':445
'21#.#4.66.129':445
'21#.#4.162.30':445
'21#.#4.2.248':445
'21#.#4.141.173':445
'21#.#4.55.145':9988
'21#.#4.208.248':9988
'21#.#4.244.41':445
'21#.#4.91.61':445
'21#.#4.73.124':9988
'21#.74.90.2':9988
'21#.#4.69.55':9988
'21#.#4.131.89':9988
'21#.#4.82.99':9988
'21#.#4.63.222':445
'21#.#4.154.217':445
'21#.#4.51.189':445
'21#.#4.185.4':445
'21#.#4.216.14':445
'21#.#4.70.181':445
'21#.#4.231.143':445
'21#.#4.151.12':445
'21#.#4.47.241':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней