Trojan.Starman.5808

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#.243.152':139
'21#.#.38.212':139
'21#.#.153.116':139
'21#.#.52.137':445
'21#.#.116.232':139
'21#.#.227.56':139
'21#.3.243.5':139
'21#.#.101.91':139
'21#.#.212.158':139
'21#.#.130.241':139
'21#.#.135.230':445
'21#.3.186.8':445
'21#.3.39.93':445
'21#.#.51.235':445
'21#.#.17.181':445
'21#.#.137.107':445
'21#.3.5.247':445
'21#.#.219.146':445
'21#.#.80.214':445
'21#.3.59.62':445
'21#.#.108.235':445
'21#.#.196.161':139
'21#.3.243.5':445
'21#.#.196.161':445
'21#.#.227.56':445
'21#.#.130.241':445
'21#.#.101.91':445
'21#.#.87.203':445
'21#.#.48.109':445
'21#.3.203.7':445
'21#.#.172.89':445
'21#.3.148.3':445
'21#.#.212.158':445
'21#.#.87.203':139
'21#.#.48.109':139
'21#.3.203.7':139
'21#.#.172.89':139
'21#.3.148.3':139
'21#.#.243.152':445
'21#.#.38.212':445
'21#.#.153.116':445
'21#.3.23.55':139
'21#.#.116.232':445
'21#.#.108.235':139
'21#.#.80.214':139
'21#.3.59.62':139
'21#.3.186.8':139
'21#.3.39.93':139
'21#.#.52.137':139
'21#.3.0.176':445
'21#.#.135.230':139
'21#.3.5.247':139
'21#.#.219.146':139
'21#.#.51.235':139
'21#.#.163.190':139
'21#.#.35.177':139
'21#.#.139.72':139
'21#.#.115.234':139
'21#.3.60.76':139
'21#.#.17.181':139
'21#.#.137.107':139
'21#.3.27.92':139
'21#.3.54.84':139
'21#.#.231.124':139
'21#.#.101.64':445
'21#.3.60.76':445
'21#.#.139.72':445
'21#.#.115.234':445
'21#.#.93.162':445
'21#.3.64.54':445
'21#.#.231.124':445
'21#.3.27.92':445
'21#.3.54.84':445
'21#.#.163.190':445
'21#.#.35.177':445
'21#.#.129.170':445
'21#.#.87.228':445
'21#.3.69.88':445
'21#.#.139.119':445
'21#.#.143.213':445
'21#.#.56.119':445
'21#.#.22.106':445
'21#.#.191.42':445
'21#.#.26.110':445
'21#.#.16.245':445
'21#.#.55.188':445
'21#.3.23.55':445
'21#.#.116.45':445
'21#.#.126.25':445
'21#.#.159.154':445
'21#.3.23.8':445
'21#.#.154.23':445
'21#.3.53.55':445
'21#.#.239.110':445
'21#.#.110.104':445
'21#.#.51.219':445
'21#.#.60.209':445
'21#.3.7.203':445
'21#.#.40.223':445
'21#.#.39.160':445
'21#.#.223.53':445
'21#.3.16.32':445
'21#.#.17.107':445
'21#.#.184.191':445
'21#.#.202.184':445
'21#.#.191.186':445
'21#.#.227.161':445
'21#.#.183.214':445
'21#.#.31.148':445
'21#.#.166.83':139
'21#.#.129.39':139
'21#.#.239.31':139
'21#.#.175.129':139
'21#.3.75.85':139
'21#.#.170.95':139
'21#.#.66.208':139
'21#.#.162.89':139
'21#.#.47.115':139
'21#.#.179.223':139
'21#.#.27.154':139
'21#.#.23.182':445
'21#.3.5.229':445
'21#.#.215.150':445
'21#.#.52.147':445
'21#.3.80.49':445
'21#.#.170.88':139
'21#.#.37.171':139
'21#.#.94.120':139
'21#.#.192.237':139
'21#.3.91.43':139
'21#.#.183.214':139
'21#.#.191.186':139
'21#.#.227.161':139
'21#.#.40.223':139
'21#.#.39.160':139
'21#.3.23.8':139
'21#.#.154.23':139
'21#.3.7.203':139
'21#.#.184.191':139
'21#.#.202.184':139
'21#.#.223.53':139
'21#.#.251.193':139
'21#.#.53.242':139
'21#.#.128.72':139
'21#.#.17.210':139
'21#.3.55.18':139
'21#.3.16.32':139
'21#.#.17.107':139
'21#.3.89.51':139
'21#.#.249.16':139
'21#.3.3.110':139
'21#.#.159.154':139
'21#.3.55.18':445
'21#.#.128.72':445
'21#.#.17.210':445
'21#.#.23.182':139
'21#.3.5.229':139
'21#.3.3.110':445
'21#.3.89.51':445
'21#.#.249.16':445
'21#.#.251.193':445
'21#.#.53.242':445
'21#.#.215.150':139
'21#.#.60.209':139
'21#.#.110.104':139
'21#.#.51.219':139
'21#.#.116.45':139
'21#.#.126.25':139
'21#.#.52.147':139
'21#.3.80.49':139
'21#.#.31.148':139
'21#.3.53.55':139
'21#.#.239.110':139
'21#.3.64.54':139
'21#.#.225.235':445
'21#.#.97.225':445
'21#.#.60.187':445
'21#.#.196.60':445
'21#.#.117.180':445
'21#.#.125.87':445
'21#.#.180.223':445
'21#.#.100.60':445
'21#.#.73.208':445
'21#.#.125.10':445
'21#.#.42.228':445
'21#.#.58.137':139
'21#.#.197.46':139
'21#.#.41.133':139
'21#.#.80.139':139
'21#.#.93.148':139
'21#.#.191.174':445
'21#.#.153.72':445
'21#.#.195.69':139
'21#.#.36.197':139
'21#.#.244.60':139
'21#.#.54.235':445
'21#.#.239.96':445
'21#.#.211.19':445
'21#.#.185.199':445
'21#.3.102.1':445
'21#.#.47.119':445
'21#.#.213.100':445
'21#.#.211.182':445
'21#.3.26.16':445
'21#.#.128.197':445
'21#.3.7.184':445
'21#.#.50.143':445
'21#.#.212.211':445
'21#.3.3.99':445
'21#.#.140.52':445
'21#.#.116.50':445
'21#.#.209.214':445
'21#.3.47.87':445
'21#.3.84.34':445
'21#.#.248.59':445
'21#.#.201.197':445
'21#.#.235.111':445
'21#.#.116.50':139
'21#.#.209.214':139
'21#.#.54.235':139
'21#.#.125.87':139
'21#.#.180.223':139
'21#.#.201.197':139
'21#.#.235.111':139
'21#.3.3.99':139
'21#.#.140.52':139
'21#.#.212.211':139
'21#.#.100.60':139
'21#.#.117.180':139
'21#.#.196.60':139
'21#.#.191.174':139
'21#.#.42.228':139
'21#.#.153.72':139
'21#.#.73.208':139
'21#.#.125.10':139
'21#.#.97.225':139
'21#.#.60.187':139
'21#.#.225.235':139
'21#.#.248.59':139
'21#.#.130.183':139
'21#.#.11.131':139
'21#.3.7.145':139
'21#.#.213.100':139
'21#.#.211.182':139
'21#.#.206.11':139
'21#.3.5.113':139
'21#.3.12.42':139
'21#.3.65.77':139
'21#.#.178.135':139
'21#.3.26.16':139
'21#.3.102.1':139
'21#.#.47.119':139
'21#.#.50.143':139
'21#.3.47.87':139
'21#.3.84.34':139
'21#.#.128.197':139
'21#.3.7.184':139
'21#.#.211.19':139
'21#.#.185.199':139
'21#.#.239.96':139
'21#.3.7.145':445
'21#.3.72.93':445
'21#.#.136.181':445
'21#.3.33.8':445
'21#.#.171.99':139
'21#.3.173.8':139
'21#.#.156.92':445
'21#.3.40.98':445
'21#.3.44.98':445
'21#.3.68.66':445
'21#.#.202.161':445
'21#.#.178.253':139
'21#.#.156.92':139
'21#.3.40.98':139
'21#.3.44.98':139
'21#.3.68.66':139
'21#.#.202.161':139
'21#.#.129.230':139
'21#.#.253.185':139
'21#.#.253.176':139
'21#.#.126.33':139
'21#.#.176.204':139
'21#.#.126.33':445
'21#.#.16.245':139
'21#.#.55.188':139
'21#.3.69.88':139
'21#.#.139.119':139
'21#.#.87.228':139
'21#.#.129.170':139
'21#.#.93.162':139
'21#.#.191.42':139
'21#.#.26.110':139
'21#.#.22.106':139
'21#.#.56.119':139
'21#.#.253.185':445
'21#.#.178.253':445
'21#.#.129.230':445
'21#.#.176.204':445
'21#.#.253.176':445
'21#.#.101.64':139
'21#.#.143.213':139
'21#.3.0.176':139
'21#.#.171.99':445
'21#.3.173.8':445
'21#.#.195.69':445
'21#.#.60.187':9988
'21#.#.244.60':445
'21#.#.197.46':445
'21#.#.36.197':445
'21#.#.125.10':9988
'21#.#.100.60':9988
'21#.#.191.174':9988
'21#.#.117.180':9988
'21#.#.196.60':9988
'21#.#.58.137':445
'21#.#.178.135':445
'21#.3.12.42':445
'21#.3.65.77':445
'21#.#.130.183':445
'21#.#.11.131':445
'21#.#.93.148':445
'21#.#.41.133':445
'21#.#.80.139':445
'21#.#.206.11':445
'21#.3.5.113':445
'21#.#.140.52':9988
'21#.#.129.193':445
'21#.3.81.99':445
'21#.#.136.203':445
'21#.#.246.209':139
'21#.#.112.93':139
'21#.3.72.93':139
'21#.#.136.181':139
'21#.3.33.8':139
'21#.#.246.209':445
'21#.#.112.93':445
'21#.3.81.99':139
'21#.#.212.211':9988
'21#.#.125.87':9988
'21#.#.235.111':9988
'21#.#.54.235':9988
'21#.#.248.59':9988
'21#.#.136.203':139
'21#.#.129.193':139
'21#.#.180.223':9988
'21#.#.209.214':9988
'21#.#.201.197':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней