Trojan.Starman.5697

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#06.79.173':139
'21#.#06.126.79':139
'21#.#06.5.172':139
'21#.#06.199.126':139
'21#.#06.237.89':139
'21#.#06.60.154':139
'21#.#06.194.57':445
'21#.#06.212.4':139
'21#.#06.10.192':139
'21#.#06.82.32':139
'21#.#06.210.25':139
'21#.#06.166.120':139
'21#.#06.144.193':139
'21#.#06.88.221':139
'21#.#06.108.39':139
'21#.#06.224.84':139
'21#.#06.228.172':139
'21#.#06.67.162':139
'21#.#06.35.189':139
'21#.#06.114.11':139
'21#.#06.40.140':445
'21#.#06.116.133':445
'21#.#06.143.87':445
'21#.#06.1.126':445
'21#.#06.56.39':445
'21#.#06.108.39':445
'21#.#06.144.193':445
'21#.#06.88.221':445
'21#.#06.158.205':445
'21#.#06.238.252':445
'21#.#06.250.226':445
'21#.#06.7.251':445
'21#.#06.38.121':445
'21#.#06.51.51':445
'21#.#06.70.95':445
'21#.#06.27.178':445
'21#.#06.238.162':445
'21#.#06.226.189':445
'21#.#06.87.124':445
'21#.#06.145.188':445
'21#.#06.12.44':445
'21#.#06.112.240':445
'21#.#06.26.75':445
'21#.#06.168.47':445
'21#.#06.237.137':445
'21#.#06.194.163':445
'21#.#06.0.202':445
'21#.#06.30.203':445
'21#.#06.27.247':445
'21#.#06.152.187':445
'21#.#06.30.203':139
'21#.#06.194.163':139
'21#.#06.152.187':139
'21#.#06.112.240':139
'21#.#06.27.247':139
'21#.#06.121.26':445
'21#.#06.47.133':445
'21#.#06.114.26':139
'21#.#06.0.202':139
'21#.#06.176.50':139
'21#.#06.1.126':139
'21#.#06.56.39':139
'21#.#06.238.162':139
'21#.#06.226.189':139
'21#.#06.27.178':139
'21#.#06.158.205':139
'21#.#06.238.252':139
'21#.#06.116.133':139
'21#.#06.143.87':139
'21#.#06.40.140':139
'21#.#06.51.51':139
'21#.#06.70.95':139
'21#.#06.194.57':139
'21#.#06.176.50':445
'21#.#06.114.26':445
'21#.#06.87.124':139
'21#.#06.145.188':139
'21#.#06.7.251':139
'21#.#06.38.121':139
'21#.#06.250.226':139
'21#.#06.210.25':445
'21#.#06.188.94':139
'21#.#06.37.78':139
'21#.#06.196.3':139
'21#.#06.84.175':139
'21#.#06.38.187':139
'21#.#06.22.63':139
'21#.#06.118.135':139
'21#.#06.197.217':139
'21#.#06.95.137':139
'21#.#06.170.94':139
'21#.#06.99.38':139
'21#.#06.168.70':139
'21#.#06.160.37':445
'21#.#06.31.82':445
'21#.#06.88.133':445
'21#.#06.26.124':139
'21#.#06.255.26':139
'21#.#06.123.89':139
'21#.#06.56.3':139
'21#.#06.89.212':139
'21#.#06.185.60':139
'21#.#06.3.75':139
'21#.#06.60.195':139
'21#.#06.89.38':139
'21#.#06.194.180':139
'21#.#06.70.170':139
'21#.#06.43.82':139
'21#.#06.170.32':139
'21#.#06.79.192':139
'21#.#06.32.79':139
'21#.#06.108.107':139
'21#.#06.223.83':139
'21#.#06.100.153':139
'21#.#06.91.105':139
'21#.#06.53.27':139
'21#.#06.103.165':139
'21#.#06.190.80':139
'21#.#06.139.248':139
'21#.#06.143.223':139
'21#.#06.113.47':139
'21#.#06.212.4':445
'21#.#06.60.154':445
'21#.#06.82.32':445
'21#.#06.126.79':445
'21#.#06.10.192':445
'21#.#06.12.116':139
'21#.#06.28.197':139
'21#.#06.249.53':139
'21#.#06.39.86':139
'21#.#06.28.160':139
'21#.#06.67.162':445
'21#.#06.224.84':445
'21#.#06.114.11':445
'21#.#06.166.120':445
'21#.#06.35.189':445
'21#.#06.5.172':445
'21#.#06.79.173':445
'21#.#06.237.89':445
'21#.#06.228.172':445
'21#.#06.199.126':445
'21#.#06.28.197':445
'21#.#06.232.28':445
'21#.#06.12.116':445
'21#.#06.28.160':445
'21#.#06.249.53':445
'21#.#06.138.143':445
'21#.#06.82.52':445
'21#.#06.130.145':445
'21#.#06.160.184':445
'21#.#06.145.179':445
'21#.#06.130.145':139
'21#.#06.138.143':139
'21#.#06.145.179':139
'21#.#06.232.28':139
'21#.#06.160.184':139
'21#.#06.160.37':139
'21#.#06.39.86':445
'21#.#06.88.133':139
'21#.#06.82.52':139
'21#.#06.31.82':139
'21#.#06.12.44':139
'21#.#06.49.138':445
'21#.#06.108.179':445
'21#.#06.117.78':445
'21#.#06.24.217':139
'21#.#06.159.70':445
'21#.#06.49.196':445
'21#.#06.9.27':445
'21#.#06.253.150':445
'21#.#06.112.28':445
'21#.#06.50.123':445
'21#.#06.220.65':139
'21#.#06.136.194':139
'21#.#06.100.41':139
'21#.#06.191.198':139
'21#.#06.143.65':139
'21#.#06.103.112':139
'21#.#06.80.103':139
'21#.#06.58.246':139
'21#.#06.198.136':139
'21#.#06.21.24':139
'21#.#06.15.47':445
'21#.#06.169.30':445
'21#.#06.138.139':445
'21#.#06.138.197':445
'21#.#06.103.235':445
'21#.#06.16.159':445
'21#.#06.107.140':445
'21#.#06.226.239':445
'21#.#06.8.85':445
'21#.#06.172.154':445
'21#.#06.119.243':445
'21#.#06.165.92':445
'21#.#06.164.176':445
'21#.#06.112.4':445
'21#.#06.170.9':445
'21#.#06.47.72':445
'21#.#06.81.169':445
'21#.#06.65.19':445
'21#.#06.27.223':445
'21#.#06.225.157':445
'21#.#06.165.92':139
'21#.#06.27.223':139
'21#.#06.119.243':139
'21#.#06.170.9':139
'21#.#06.164.176':139
'21#.#06.81.169':139
'21#.#06.103.235':139
'21#.#06.47.72':139
'21#.#06.225.157':139
'21#.#06.65.19':139
'21#.#06.108.179':139
'21#.#06.112.28':139
'21#.#06.117.78':139
'21#.#06.159.70':139
'21#.#06.49.138':139
'21#.#06.9.27':139
'21#.#06.112.4':139
'21#.#06.49.196':139
'21#.#06.50.123':139
'21#.#06.253.150':139
'21#.#06.87.140':139
'21#.#06.12.175':139
'21#.#06.249.244':139
'21#.#06.23.124':139
'21#.#06.245.22':139
'21#.#06.184.48':139
'21#.#06.3.165':139
'21#.#06.53.98':139
'21#.#06.146.115':139
'21#.#06.65.80':139
'21#.#06.169.30':139
'21#.#06.8.85':139
'21#.#06.15.47':139
'21#.#06.138.197':139
'21#.#06.138.139':139
'21#.#06.107.140':139
'21#.#06.103.236':139
'21#.#06.16.159':139
'21#.#06.172.154':139
'21#.#06.226.239':139
'21#.#06.103.236':445
'21#.#06.195.203':139
'21#.#06.118.174':139
'21#.#06.203.47':139
'21#.#06.227.220':139
'21#.#06.174.207':139
'21#.#06.91.171':445
'21#.#06.90.247':445
'21#.#06.152.74':445
'21#.#06.33.180':139
'21#.#06.152.155':445
'21#.#06.157.72':139
'21#.#06.120.44':139
'21#.#06.73.52':139
'21#.#06.90.247':139
'21#.#06.51.116':139
'21#.#06.255.51':139
'21#.#06.29.197':139
'21#.#06.6.94':139
'21#.#06.21.234':139
'21#.#06.46.14':139
'21#.#06.118.174':445
'21#.#06.33.180':445
'21#.#06.195.203':445
'21#.#06.174.207':445
'21#.#06.203.47':445
'21#.#06.237.137':139
'21#.#06.26.75':139
'21#.#06.168.47':139
'21#.#06.121.26':139
'21#.#06.47.133':139
'21#.#06.120.44':445
'21#.#06.21.234':445
'21#.#06.157.72':445
'21#.#06.51.116':445
'21#.#06.73.52':445
'21#.#06.29.197':445
'21#.#06.227.220':445
'21#.#06.255.51':445
'21#.#06.46.14':445
'21#.#06.6.94':445
'21#.#06.220.65':445
'21#.#06.136.194':445
'21#.#06.100.41':445
'21#.#06.191.198':445
'21#.#06.143.65':445
'21#.#06.103.112':445
'21#.#06.80.103':445
'21#.#06.58.246':445
'21#.#06.198.136':445
'21#.#06.21.24':445
'21#.#06.87.140':445
'21#.#06.12.175':445
'21#.#06.249.244':445
'21#.#06.23.124':445
'21#.#06.245.22':445
'21#.#06.184.48':445
'21#.#06.3.165':445
'21#.#06.53.98':445
'21#.#06.146.115':445
'21#.#06.65.80':445
'21#.#06.103.236':9988
'21#.#06.245.22':9988
'21#.#06.16.159':9988
'21#.#06.226.239':9988
'21#.#06.8.85':9988
'21#.#06.152.74':139
'21#.#06.91.171':139
'21#.#06.152.155':139
'21#.#06.249.244':9988
'21#.#06.146.115':9988
'21#.#06.108.179':9988
'21#.#06.253.150':9988
'21#.#06.159.70':9988
'21#.#06.24.217':445
'21#.#06.50.123':9988
'21#.#06.15.47':9988
'21#.#06.169.30':9988
'21#.#06.27.223':9988
'21#.#06.112.4':9988
'21#.#06.164.176':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней