Trojan.Starman.5908

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#36.32.110':139
'21#.#36.55.105':139
'21#.#36.110.162':139
'21#.#36.24.84':139
'21#.#36.135.59':139
'21#.#36.144.19':139
'21#.#36.203.143':139
'21#.#36.19.198':139
'21#.#36.130.35':139
'21#.#36.198.48':139
'21#.#36.6.235':139
'21#.#36.107.100':139
'21#.#36.69.107':139
'21#.#36.76.197':139
'21#.#36.57.206':139
'21#.#36.246.168':139
'21#.#36.34.88':139
'21#.#36.23.165':139
'21#.#36.53.6':139
'21#.#36.145.69':139
'21#.#36.233.144':139
'21#.#36.76.197':445
'21#.#36.107.100':445
'21#.#36.246.168':445
'21#.#36.206.116':445
'21#.#36.57.206':445
'21#.#36.53.6':445
'21#.#36.34.88':445
'21#.#36.233.144':445
'21#.#36.69.107':445
'21#.#36.145.69':445
'21#.#36.123.1':445
'21#.#36.110.124':139
'21#.#36.238.57':139
'21#.#36.195.55':139
'21#.#36.226.203':139
'21#.#36.151.163':139
'21#.#36.43.200':445
'21#.#36.54.138':445
'21#.#36.121.94':445
'21#.#36.22.18':445
'21#.#36.161.72':445
'21#.#36.206.116':139
'21#.#36.27.251':139
'21#.#36.225.107':139
'21#.#36.86.182':139
'21#.#36.135.3':139
'21#.#36.44.49':139
'21#.#36.197.84':445
'21#.#36.244.65':445
'21#.#36.173.51':445
'21#.#36.65.1':139
'21#.#36.108.44':139
'21#.#36.242.134':139
'21#.#36.236.58':139
'21#.#36.45.114':139
'21#.#36.244.65':139
'21#.#36.173.51':139
'21#.#36.197.84':139
'21#.#36.192.147':139
'21#.#36.135.33':139
'21#.#36.68.60':139
'21#.#36.63.240':139
'21#.#36.42.3':139
'21#.#36.108.44':445
'21#.#36.22.18':139
'21#.#36.65.1':445
'21#.#36.27.251':445
'21#.#36.225.107':445
'21#.#36.54.138':139
'21#.#36.123.1':139
'21#.#36.43.200':139
'21#.#36.161.72':139
'21#.#36.121.94':139
'21#.#36.86.182':445
'21#.#36.42.3':445
'21#.#36.68.60':445
'21#.#36.63.240':445
'21#.#36.236.58':445
'21#.#36.45.114':445
'21#.#36.135.3':445
'21#.#36.44.49':445
'21#.#36.242.134':445
'21#.#36.192.147':445
'21#.#36.135.33':445
'21#.#36.23.165':445
'21#.#36.25.102':139
'21#.#36.229.15':139
'21#.#36.27.123':139
'21#.#36.144.164':139
'21#.#36.218.144':139
'21#.#36.169.254':139
'21#.#36.127.228':139
'21#.#36.254.30':139
'21#.#36.129.179':139
'21#.#36.31.77':139
'21#.#36.68.198':139
'21#.#36.107.113':445
'21#.#36.215.174':445
'21#.#36.128.6':445
'21#.#36.68.247':445
'21#.#36.71.205':445
'21#.#36.177.248':445
'21#.#36.168.7':139
'21#.#36.62.139':445
'21#.#36.35.91':445
'21#.#36.232.120':445
'21#.#36.139.31':139
'21#.#36.94.97':139
'21#.#36.54.187':139
'21#.#36.117.63':139
'21#.#36.38.208':139
'21#.#36.18.188':139
'21#.#36.10.19':139
'21#.#36.188.42':139
'21#.#36.8.201':139
'21#.#36.43.104':139
'21#.#36.107.72':139
'21#.#36.174.195':139
'21#.#36.89.101':139
'21#.#36.37.242':139
'21#.#36.41.187':139
'21#.#36.63.208':139
'21#.#36.47.15':139
'21#.#36.57.227':139
'21#.#36.96.254':139
'21#.#36.72.78':139
'21#.#36.146.114':139
'21#.#36.31.190':445
'21#.#36.110.124':445
'21#.#36.238.57':445
'21#.#36.195.55':445
'21#.#36.226.203':445
'21#.#36.151.163':445
'21#.#36.225.69':139
'21#.#36.116.182':139
'21#.#36.18.29':139
'21#.#36.9.238':139
'21#.#36.125.109':139
'21#.#36.203.143':445
'21#.#36.110.162':445
'21#.#36.32.110':445
'21#.#36.135.59':445
'21#.#36.6.235':445
'21#.#36.24.84':445
'21#.#36.19.198':445
'21#.#36.144.19':445
'21#.#36.198.48':445
'21#.#36.55.105':445
'21#.#36.130.35':445
'21#.#36.125.109':445
'21#.#36.18.29':445
'21#.#36.9.238':445
'21#.#36.62.139':139
'21#.#36.177.248':139
'21#.#36.220.230':445
'21#.#36.92.224':445
'21#.#36.103.29':445
'21#.#36.225.69':445
'21#.#36.116.182':445
'21#.#36.232.120':139
'21#.#36.31.190':139
'21#.#36.68.247':139
'21#.#36.92.224':139
'21#.#36.103.29':139
'21#.#36.220.230':139
'21#.#36.215.174':139
'21#.#36.35.91':139
'21#.#36.107.113':139
'21#.#36.71.205':139
'21#.#36.128.6':139
'21#.#36.142.101':445
'21#.#36.75.126':445
'21#.#36.7.154':445
'21#.#36.10.38':445
'21#.#36.222.90':445
'21#.#36.178.206':445
'21#.#36.34.39':445
'21#.#36.206.47':445
'21#.#36.63.173':445
'21#.#36.50.175':445
'21#.#36.90.204':445
'21#.#36.175.75':139
'21#.#36.134.30':139
'21#.#36.75.185':139
'21#.#36.51.12':139
'21#.#36.185.50':139
'21#.#36.204.53':445
'21#.#36.217.200':445
'21#.#36.139.154':139
'21#.#36.91.26':139
'21#.#36.39.33':139
'21#.#36.165.90':445
'21#.#36.96.87':445
'21#.#36.76.142':445
'21#.#36.68.154':445
'21#.#36.182.188':445
'21#.#36.22.60':445
'21#.#36.148.127':445
'21#.#36.34.121':445
'21#.#36.68.159':445
'21#.#36.225.212':445
'21#.#36.173.100':445
'21#.#36.236.206':445
'21#.#36.33.237':445
'21#.#36.186.151':445
'21#.#36.40.240':445
'21#.#36.192.104':445
'21#.#36.5.25':445
'21#.#36.57.96':445
'21#.#36.86.226':445
'21#.#36.44.33':445
'21#.#36.46.214':445
'21#.#36.39.121':139
'21#.#36.192.104':139
'21#.#36.186.151':139
'21#.#36.40.240':139
'21#.#36.178.206':139
'21#.#36.34.39':139
'21#.#36.46.214':139
'21#.#36.86.226':139
'21#.#36.44.33':139
'21#.#36.236.206':139
'21#.#36.33.237':139
'21#.#36.206.47':139
'21#.#36.90.204':139
'21#.#36.222.90':139
'21#.#36.217.200':139
'21#.#36.204.53':139
'21#.#36.10.38':139
'21#.#36.63.173':139
'21#.#36.50.175':139
'21#.#36.75.126':139
'21#.#36.7.154':139
'21#.#36.142.101':139
'21#.#36.44.17':139
'21#.#36.225.164':139
'21#.#36.10.161':139
'21#.#36.22.60':139
'21#.#36.148.127':139
'21#.#36.150.231':139
'21#.#36.61.88':139
'21#.#36.181.248':139
'21#.#36.157.92':139
'21#.#36.234.204':139
'21#.#36.34.121':139
'21#.#36.68.154':139
'21#.#36.182.188':139
'21#.#36.173.100':139
'21#.#36.5.25':139
'21#.#36.57.96':139
'21#.#36.68.159':139
'21#.#36.225.212':139
'21#.#36.96.87':139
'21#.#36.76.142':139
'21#.#36.165.90':139
'21#.#36.10.161':445
'21#.#36.88.222':445
'21#.#36.29.238':445
'21#.#36.121.189':445
'21#.#36.163.49':139
'21#.#36.51.163':139
'21#.#36.207.221':445
'21#.#36.98.208':445
'21#.#36.129.221':445
'21#.#36.77.101':445
'21#.#36.206.220':445
'21#.#36.50.37':139
'21#.#36.209.66':139
'21#.#36.52.181':139
'21#.#36.0.73':139
'21#.#36.101.152':139
'21#.#36.161.92':139
'21#.#36.148.219':139
'21#.#36.36.154':139
'21#.#36.142.53':139
'21#.#36.37.110':139
'21#.#36.185.201':139
'21#.#36.185.201':445
'21#.#36.142.53':445
'21#.#36.37.110':445
'21#.#36.209.66':445
'21#.#36.52.181':445
'21#.#36.163.49':445
'21#.#36.51.163':445
'21#.#36.50.37':445
'21#.#36.148.219':445
'21#.#36.36.154':445
'21#.#36.0.73':445
'21#.#36.64.117':445
'21#.#36.110.19':445
'21#.#36.136.90':445
'21#.#36.219.96':445
'21#.#36.40.7':445
'21#.#36.101.152':445
'21#.#36.161.92':445
'21#.#36.228.219':445
'21#.#36.110.9':445
'21#.#36.105.110':445
'21#.#36.228.219':139
'21#.#36.39.33':445
'21#.#36.139.154':445
'21#.#36.91.26':445
'21#.#36.175.75':445
'21#.#36.134.30':445
'21#.#36.40.240':9988
'21#.#36.33.237':9988
'21#.#36.206.47':9988
'21#.#36.63.173':9988
'21#.#36.50.175':9988
'21#.#36.75.185':445
'21#.#36.234.204':445
'21#.#36.181.248':445
'21#.#36.157.92':445
'21#.#36.44.17':445
'21#.#36.225.164':445
'21#.#36.51.12':445
'21#.#36.185.50':445
'21#.#36.39.121':445
'21#.#36.150.231':445
'21#.#36.61.88':445
'21#.#36.219.96':139
'21#.#36.40.7':139
'21#.#36.98.208':139
'21#.#36.129.221':139
'21#.#36.207.221':139
'21#.#36.110.9':139
'21#.#36.105.110':139
'21#.#36.110.19':139
'21#.#36.136.90':139
'21#.#36.64.117':139
'21#.#36.206.220':139
'21#.#36.182.188':9988
'21#.#36.44.17':9988
'21#.#36.173.100':9988
'21#.#36.86.226':9988
'21#.#36.5.25':9988
'21#.#36.29.238':139
'21#.#36.77.101':139
'21#.#36.88.222':139
'21#.#36.175.75':9988
'21#.#36.121.189':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней