Trojan.Starman.5661

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#64.110.75':139
'21#.#64.68.110':139
'21#.#64.74.204':139
'21#.#64.198.94':139
'21#.#64.252.68':139
'21#.#64.115.16':139
'21#.#64.68.246':139
'21#.#64.43.106':139
'21#.#64.134.1':139
'21#.#64.97.237':139
'21#.#64.207.170':139
'21#.#64.18.124':139
'21#.#64.241.164':139
'21#.#64.131.57':139
'21#.#64.234.96':139
'21#.#64.162.199':139
'21#.#64.248.236':139
'21#.#64.227.248':139
'21#.#64.21.57':445
'21#.#64.68.79':445
'21#.#64.207.135':445
'21#.#64.189.129':445
'21#.#64.51.11':445
'21#.#64.4.31':445
'21#.#64.135.92':445
'21#.#64.238.190':445
'21#.#64.93.249':445
'21#.#64.17.226':139
'21#.#64.87.63':445
'21#.#64.192.196':139
'21#.#64.187.161':139
'21#.#64.160.80':445
'21#.#64.36.251':445
'21#.#64.54.37':445
'21#.#64.133.160':445
'21#.#64.174.190':445
'21#.#64.96.35':139
'21#.#64.25.130':445
'21#.#64.222.246':445
'21#.#64.94.171':445
'21#.#64.127.44':445
'21#.#64.132.108':445
'21#.#64.160.80':139
'21#.#64.133.160':139
'21#.#64.226.29':445
'21#.#64.87.63':139
'21#.#64.127.44':139
'21#.#64.25.130':139
'21#.#64.216.210':139
'21#.#64.94.171':139
'21#.#64.222.246':139
'21#.#64.95.225':445
'21#.#64.216.210':445
'21#.#64.132.108':139
'21#.#64.226.29':139
'21#.#64.135.92':139
'21#.#64.85.98':139
'21#.#64.93.249':139
'21#.#64.4.31':139
'21#.#64.64.214':139
'21#.#64.155.35':139
'21#.#64.93.42':139
'21#.#64.242.173':139
'21#.#64.49.195':139
'21#.#64.54.37':139
'21#.#64.207.135':139
'21#.#64.174.190':139
'21#.#64.36.251':139
'21#.#64.189.129':139
'21#.#64.51.11':139
'21#.#64.238.190':139
'21#.#64.21.57':139
'21#.#64.68.79':139
'21#.#64.85.98':445
'21#.#64.6.171':139
'21#.#64.8.72':139
'21#.#64.96.249':139
'21#.#64.81.35':139
'21#.#64.8.148':139
'21#.#64.139.127':139
'21#.#64.45.239':139
'21#.#64.137.8':139
'21#.#64.96.43':139
'21#.#64.52.98':445
'21#.#64.106.52':445
'21#.#64.38.53':445
'21#.#64.71.237':445
'21#.#64.81.106':445
'21#.#64.211.17':139
'21#.#64.80.107':139
'21#.#64.63.28':445
'21#.#64.156.182':139
'21#.#64.245.119':139
'21#.#64.154.186':139
'21#.#64.95.236':139
'21#.#64.184.102':139
'21#.#64.211.203':139
'21#.#64.58.10':139
'21#.#64.195.57':139
'21#.#64.36.187':139
'21#.#64.9.246':139
'21#.#64.245.219':139
'21#.#64.59.246':139
'21#.#64.9.87':139
'21#.#64.204.3':139
'21#.#64.226.219':139
'21#.#64.116.241':139
'21#.#64.177.124':139
'21#.#64.20.2':139
'21#.#64.240.84':139
'21#.#64.132.58':445
'21#.#64.248.236':445
'21#.#64.227.248':445
'21#.#64.207.170':445
'21#.#64.131.57':445
'21#.#64.234.96':445
'21#.#64.198.94':445
'21#.#64.110.75':445
'21#.#64.162.199':445
'21#.#64.74.204':445
'21#.#64.49.195':445
'21#.#64.155.35':445
'21#.#64.64.214':445
'21#.#64.242.173':445
'21#.#64.93.42':445
'21#.#64.241.164':445
'21#.#64.97.237':445
'21#.#64.96.35':445
'21#.#64.18.124':445
'21#.#64.38.53':139
'21#.#64.71.237':139
'21#.#64.52.112':139
'21#.#64.132.58':139
'21#.#64.52.98':139
'21#.#64.63.28':139
'21#.#64.52.112':445
'21#.#64.106.52':139
'21#.#64.81.106':139
'21#.#64.43.106':445
'21#.#64.134.1':445
'21#.#64.68.110':445
'21#.#64.252.68':445
'21#.#64.115.16':445
'21#.#64.187.161':445
'21#.#64.17.226':445
'21#.#64.68.246':445
'21#.#64.192.196':445
'21#.#64.235.141':139
'21#.#64.166.121':139
'21#.#64.245.47':139
'21#.#64.142.131':139
'21#.#64.78.185':139
'21#.#64.146.10':445
'21#.#64.53.99':445
'21#.#64.74.195':445
'21#.#64.75.11':445
'21#.#64.113.224':139
'21#.#64.132.68':139
'21#.#64.145.40':139
'21#.#64.41.48':139
'21#.#64.8.60':139
'21#.#64.234.67':139
'21#.#64.94.215':139
'21#.#64.79.108':139
'21#.#64.115.254':139
'21#.#64.111.48':445
'21#.#64.212.189':445
'21#.#64.233.18':445
'21#.#64.248.25':445
'21#.#64.102.52':445
'21#.#64.193.243':445
'21#.#64.214.195':445
'21#.#64.50.78':445
'21#.#64.244.49':445
'21#.#64.105.103':445
'21#.#64.2.232':445
'21#.#64.124.62':445
'21#.#64.63.220':445
'21#.#64.81.95':445
'21#.#64.145.183':445
'21#.#64.15.149':445
'21#.#64.1.179':445
'21#.#64.184.1':445
'21#.#64.16.75':139
'21#.#64.145.183':139
'21#.#64.15.149':139
'21#.#64.1.179':139
'21#.#64.184.1':139
'21#.#64.233.18':139
'21#.#64.212.189':139
'21#.#64.102.52':139
'21#.#64.248.25':139
'21#.#64.111.48':139
'21#.#64.74.195':139
'21#.#64.75.11':139
'21#.#64.146.10':139
'21#.#64.53.99':139
'21#.#64.124.62':139
'21#.#64.2.232':139
'21#.#64.81.95':139
'21#.#64.63.220':139
'21#.#64.105.103':139
'21#.#64.46.250':139
'21#.#64.103.250':139
'21#.#64.56.136':139
'21#.#64.167.132':139
'21#.#64.143.191':139
'21#.#64.208.141':139
'21#.#64.100.117':139
'21#.#64.77.246':139
'21#.#64.72.6':139
'21#.#64.193.243':139
'21#.#64.214.195':139
'21#.#64.50.78':139
'21#.#64.244.49':139
'21#.#64.239.56':139
'21#.#64.175.18':139
'21#.#64.41.100':139
'21#.#64.98.39':139
'21#.#64.17.222':139
'21#.#64.239.56':445
'21#.#64.88.78':139
'21#.#64.186.14':139
'21#.#64.109.134':139
'21#.#64.115.33':139
'21#.#64.17.244':139
'21#.#64.237.144':139
'21#.#64.71.157':139
'21#.#64.148.175':139
'21#.#64.132.205':139
'21#.#64.111.48':9988
'21#.#64.214.195':9988
'21#.#64.1.179':9988
'21#.#64.74.195':9988
'21#.#64.98.39':9988
'21#.#64.234.148':139
'21#.#64.213.9':139
'21#.#64.95.162':139
'21#.#64.66.236':139
'21#.#64.148.175':445
'21#.#64.132.205':445
'21#.#64.186.14':445
'21#.#64.17.244':445
'21#.#64.237.144':445
'21#.#64.66.26':445
'21#.#64.95.225':139
'21#.#64.71.157':445
'21#.#64.172.29':445
'21#.#64.95.162':445
'21#.#64.66.236':445
'21#.#64.172.29':139
'21#.#64.66.26':139
'21#.#64.234.148':445
'21#.#64.115.33':445
'21#.#64.88.78':445
'21#.#64.213.9':445
'21#.#64.109.134':445
'21#.#64.53.99':9988
'21#.#64.208.141':445
'21#.#64.100.117':445
'21#.#64.77.246':445
'21#.#64.72.6':445
'21#.#64.16.75':445
'21#.#64.113.224':445
'21#.#64.132.68':445
'21#.#64.145.40':445
'21#.#64.41.48':445
'21#.#64.175.18':445
'21#.#64.41.100':445
'21#.#64.98.39':445
'21#.#64.17.222':445
'21#.#64.56.136':445
'21#.#64.103.250':445
'21#.#64.143.191':445
'21#.#64.46.250':445
'21#.#64.167.132':445
'21#.#64.248.25':9988
'21#.#64.124.62':9988
'21#.#64.78.185':445
'21#.#64.244.49':9988
'21#.#64.81.95':9988
'21#.#64.17.222':9988
'21#.#64.102.52':9988
'21#.#64.145.183':9988
'21#.#64.239.56':9988
'21#.#64.115.254':445
'21#.#64.234.67':445
'21#.#64.8.60':445
'21#.#64.79.108':445
'21#.#64.94.215':445
'21#.#64.235.141':445
'21#.#64.166.121':445
'21#.#64.245.47':445
'21#.#64.142.131':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней