Trojan.Starman.5291

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#18.185.52':445
'21#.#18.25.193':445
'21#.#18.3.131':139
'21#.#18.117.144':139
'21#.#18.76.233':445
'21#.#18.58.139':445
'21#.#18.3.131':445
'21#.#18.26.200':445
'21#.#18.43.130':445
'21#.#18.58.139':139
'21#.#18.216.162':445
'21#.#18.83.177':445
'21#.#18.206.229':445
'21#.#18.162.207':445
'21#.#18.185.52':139
'21#.#18.26.200':139
'21#.#18.43.130':139
'21#.#18.25.193':139
'21#.#18.76.233':139
'21#.#18.138.57':139
'21#.#18.23.62':139
'21#.#18.99.136':139
'21#.#18.128.29':139
'21#.#18.205.90':139
'21#.#18.160.75':139
'21#.#18.197.206':139
'21#.#18.124.205':139
'21#.#18.247.213':139
'21#.#18.228.228':139
'21#.#18.11.171':139
'21#.#18.109.68':139
'21#.#18.117.144':445
'21#.#18.215.182':139
'21#.#18.51.111':139
'21#.#18.100.248':139
'21#.#18.211.243':139
'21#.#18.59.136':139
'21#.#18.17.46':139
'21#.#18.139.141':445
'21#.#18.94.188':445
'21#.#18.79.46':445
'21#.#18.236.232':445
'21#.#18.56.106':445
'21#.#18.121.232':445
'21#.#18.88.224':445
'21#.#18.31.55':445
'21#.#18.83.163':445
'21#.#18.50.201':445
'21#.#18.241.123':445
'21#.#18.177.229':445
'21#.#18.238.155':445
'21#.#18.48.161':445
'21#.#18.61.129':445
'21#.#18.66.51':445
'21#.#18.169.102':445
'21#.#18.156.61':445
'21#.#18.229.240':445
'21#.#18.255.40':445
'21#.#18.104.104':445
'21#.#18.219.20':445
'21#.#18.137.17':445
'21#.#18.156.104':445
'21#.#18.11.190':445
'21#.#18.147.107':445
'21#.#18.81.92':445
'21#.#18.190.32':445
'21#.#18.24.166':445
'21#.#18.233.80':445
'21#.#18.65.233':445
'21#.#18.253.184':445
'21#.#18.20.120':445
'21#.#18.247.65':445
'21#.#18.103.200':445
'21#.#18.96.165':445
'21#.#18.12.197':445
'21#.#18.115.246':445
'21#.#18.125.88':445
'21#.#18.36.12':445
'21#.#18.85.166':445
'21#.#18.144.161':445
'21#.#18.220.91':445
'21#.#18.156.114':445
'21#.#18.53.143':445
'21#.#18.148.232':445
'21#.#18.176.77':445
'21#.#18.209.129':445
'21#.#18.247.213':445
'21#.#18.160.75':445
'21#.#18.205.90':445
'21#.#18.124.205':445
'21#.#18.197.206':445
'21#.#18.31.18':445
'21#.#18.68.30':445
'21#.#18.22.208':445
'21#.#18.162.143':445
'21#.#18.188.91':139
'21#.#18.84.104':139
'21#.#18.110.253':445
'21#.#18.142.164':139
'21#.#18.203.83':139
'21#.#18.156.11':139
'21#.#18.107.22':139
'21#.#18.229.202':139
'21#.#18.105.232':139
'21#.#18.71.131':445
'21#.#18.128.189':445
'21#.#18.61.108':445
'21#.#18.153.66':445
'21#.#18.69.30':445
'21#.#18.239.225':445
'21#.#18.114.25':445
'21#.#18.131.43':445
'21#.#18.20.240':445
'21#.#18.151.20':445
'21#.#18.156.114':139
'21#.#18.53.143':139
'21#.#18.148.232':139
'21#.#18.176.77':139
'21#.#18.153.66':139
'21#.#18.61.108':139
'21#.#18.239.225':139
'21#.#18.69.30':139
'21#.#18.128.189':139
'21#.#18.220.91':139
'21#.#18.31.18':139
'21#.#18.68.30':139
'21#.#18.22.208':139
'21#.#18.162.143':139
'21#.#18.209.129':139
'21#.#18.125.88':139
'21#.#18.36.12':139
'21#.#18.85.166':139
'21#.#18.144.161':139
'21#.#18.100.248':445
'21#.#18.211.243':445
'21#.#18.59.136':445
'21#.#18.17.46':445
'21#.#18.228.228':445
'21#.#18.138.57':445
'21#.#18.23.62':445
'21#.#18.99.136':445
'21#.#18.128.29':445
'21#.#18.51.111':445
'21#.#18.114.25':139
'21#.#18.131.43':139
'21#.#18.20.240':139
'21#.#18.151.20':139
'21#.#18.71.131':139
'21#.#18.11.171':445
'21#.#18.109.68':445
'21#.#18.110.253':139
'21#.#18.215.182':445
'21#.#18.176.236':445
'21#.#18.236.208':139
'21#.#18.94.111':445
'21#.#18.99.73':139
'21#.#18.203.29':139
'21#.#18.238.126':445
'21#.#18.18.67':445
'21#.#18.214.34':445
'21#.#18.176.64':445
'21#.#18.67.44':445
'21#.#18.241.42':139
'21#.#18.99.82':139
'21#.#18.218.174':139
'21#.#18.56.247':139
'21#.#18.74.192':139
'21#.#18.148.193':139
'21#.#18.187.160':139
'21#.#18.72.205':139
'21#.#18.74.140':139
'21#.#18.169.211':139
'21#.#18.212.206':445
'21#.#18.173.97':445
'21#.#18.190.116':445
'21#.#18.160.190':445
'21#.#18.237.97':445
'21#.#18.10.10':445
'21#.#18.216.43':445
'21#.#18.29.134':445
'21#.#18.62.40':445
'21#.#18.5.90':445
'21#.#18.93.193':445
'21#.#18.222.37':445
'21#.#18.88.166':445
'21#.#18.183.90':445
'21#.#18.19.86':445
'21#.#18.136.71':445
'21#.#18.68.18':445
'21#.#18.104.19':445
'21#.#18.25.191':445
'21#.#18.25.191':139
'21#.#18.136.71':139
'21#.#18.19.86':139
'21#.#18.104.19':139
'21#.#18.68.18':139
'21#.#18.160.190':139
'21#.#18.212.206':139
'21#.#18.5.90':139
'21#.#18.190.116':139
'21#.#18.222.37':139
'21#.#18.176.64':139
'21#.#18.94.111':139
'21#.#18.238.126':139
'21#.#18.67.44':139
'21#.#18.18.67':139
'21#.#18.183.90':139
'21#.#18.93.193':139
'21#.#18.214.34':139
'21#.#18.88.166':139
'21#.#18.67.135':139
'21#.#18.79.119':139
'21#.#18.145.229':139
'21#.#18.135.206':139
'21#.#18.127.40':139
'21#.#18.81.196':139
'21#.#18.122.50':139
'21#.#18.34.128':139
'21#.#18.47.60':139
'21#.#18.85.59':139
'21#.#18.29.134':139
'21#.#18.62.40':139
'21#.#18.173.97':139
'21#.#18.237.97':139
'21#.#18.10.10':139
'21#.#18.49.204':139
'21#.#18.98.124':139
'21#.#18.216.43':139
'21#.#18.203.216':139
'21#.#18.83.163':139
'21#.#18.121.232':139
'21#.#18.56.106':139
'21#.#18.31.55':139
'21#.#18.88.224':139
'21#.#18.233.80':139
'21#.#18.65.233':139
'21#.#18.253.184':139
'21#.#18.20.120':139
'21#.#18.94.188':139
'21#.#18.229.240':139
'21#.#18.66.51':139
'21#.#18.61.129':139
'21#.#18.156.61':139
'21#.#18.169.102':139
'21#.#18.236.232':139
'21#.#18.139.141':139
'21#.#18.50.201':139
'21#.#18.79.46':139
'21#.#18.190.32':139
'21#.#18.11.190':139
'21#.#18.156.104':139
'21#.#18.81.92':139
'21#.#18.147.107':139
'21#.#18.216.162':139
'21#.#18.83.177':139
'21#.#18.206.229':139
'21#.#18.162.207':139
'21#.#18.104.104':139
'21#.#18.115.246':139
'21#.#18.103.200':139
'21#.#18.247.65':139
'21#.#18.12.197':139
'21#.#18.96.165':139
'21#.#18.137.17':139
'21#.#18.255.40':139
'21#.#18.24.166':139
'21#.#18.219.20':139
'21#.#18.122.50':445
'21#.#18.56.247':445
'21#.#18.47.60':445
'21#.#18.81.196':445
'21#.#18.74.192':445
'21#.#18.148.193':445
'21#.#18.74.140':445
'21#.#18.99.82':445
'21#.#18.218.174':445
'21#.#18.34.128':445
'21#.#18.98.124':445
'21#.#18.85.59':445
'21#.#18.203.216':445
'21#.#18.49.204':445
'21#.#18.145.229':445
'21#.#18.79.119':445
'21#.#18.127.40':445
'21#.#18.135.206':445
'21#.#18.67.135':445
'21#.#18.145.229':9988
'21#.#18.187.160':9988
'21#.#18.212.206':9988
'21#.#18.98.124':9988
'21#.#18.176.236':139
'21#.#18.241.123':139
'21#.#18.177.229':139
'21#.#18.238.155':139
'21#.#18.48.161':139
'21#.#18.160.190':9988
'21#.#18.72.205':445
'21#.#18.241.42':445
'21#.#18.169.211':445
'21#.#18.187.160':445
'21#.#18.99.73':445
'21#.#18.176.64':9988
'21#.#18.190.116':9988
'21#.#18.203.29':445
'21#.#18.236.208':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней