Trojan.Starman.5928

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#08.52.47':445
'21#.#08.199.56':445
'21#.#08.101.230':445
'21#.#08.5.194':445
'21#.#08.109.53':445
'21#.#08.138.135':445
'21#.#08.219.140':445
'21#.#08.164.153':445
'21#.#08.143.250':445
'21#.#08.38.105':445
'21#.#08.27.104':445
'21#.#08.239.254':445
'21#.#08.37.80':445
'21#.#08.6.73':445
'21#.#08.203.10':445
'21#.#08.176.226':445
'21#.#08.17.26':445
'21#.#08.145.215':445
'21#.#08.251.19':445
'21#.#08.1.148':445
'21#.#08.80.90':445
'21#.#08.61.80':445
'21#.#08.227.181':139
'21#.#08.172.167':139
'21#.#08.14.89':139
'21#.#08.254.162':445
'21#.#08.25.246':139
'21#.#08.216.171':139
'21#.#08.51.5':139
'21#.#08.121.138':139
'21#.#08.198.47':139
'21#.#08.54.186':139
'21#.#08.47.199':139
'21#.#08.185.224':445
'21#.#08.178.29':445
'21#.#08.178.139':445
'21#.#08.93.152':445
'21#.#08.37.151':445
'21#.#08.135.231':445
'21#.#08.254.162':139
'21#.#08.118.35':445
'21#.#08.118.35':139
'21#.#08.155.110':445
'21#.#08.53.123':445
'21#.#08.225.54':445
'21#.#08.27.104':139
'21#.#08.143.250':139
'21#.#08.38.105':139
'21#.#08.199.56':139
'21#.#08.138.135':139
'21#.#08.219.140':139
'21#.#08.178.139':139
'21#.#08.185.224':139
'21#.#08.37.151':139
'21#.#08.164.153':139
'21#.#08.93.152':139
'21#.#08.61.80':139
'21#.#08.1.148':139
'21#.#08.80.90':139
'21#.#08.37.80':139
'21#.#08.17.26':139
'21#.#08.145.215':139
'21#.#08.101.230':139
'21#.#08.52.47':139
'21#.#08.109.53':139
'21#.#08.251.19':139
'21#.#08.5.194':139
'21#.#08.142.3':445
'21#.#08.135.101':445
'21#.#08.117.179':445
'21#.#08.206.110':445
'21#.#08.179.142':445
'21#.#08.17.28':445
'21#.#08.6.236':445
'21#.#08.64.6':445
'21#.#08.236.159':445
'21#.#08.233.113':445
'21#.#08.94.237':445
'21#.#08.53.123':139
'21#.#08.186.40':445
'21#.#08.155.110':139
'21#.#08.178.29':139
'21#.#08.135.231':139
'21#.#08.12.103':445
'21#.#08.52.44':445
'21#.#08.211.150':445
'21#.#08.43.235':445
'21#.#08.60.79':445
'21#.#08.235.181':445
'21#.#08.103.130':139
'21#.#08.5.129':445
'21#.#08.18.58':445
'21#.#08.196.132':445
'21#.#08.142.134':445
'21#.#08.219.208':445
'21#.#08.130.66':445
'21#.#08.55.10':445
'21#.#08.131.55':445
'21#.#08.30.123':445
'21#.#08.142.243':445
'21#.#08.77.89':445
'21#.#08.103.130':445
'21#.#08.20.86':445
'21#.#08.121.138':445
'21#.#08.198.47':445
'21#.#08.51.5':445
'21#.#08.88.69':445
'21#.#08.66.238':445
'21#.#08.134.75':445
'21#.#08.12.253':445
'21#.#08.32.133':445
'21#.#08.253.56':445
'21#.#08.254.105':445
'21#.#08.5.161':445
'21#.#08.90.236':445
'21#.#08.112.56':445
'21#.#08.18.179':445
'21#.108.6.5':445
'21#.#08.139.64':139
'21#.#08.249.138':139
'21#.#08.41.206':445
'21#.#08.193.100':445
'21#.#08.210.217':445
'21#.#08.242.32':445
'21#.#08.143.241':445
'21#.#08.94.161':445
'21#.#08.241.130':445
'21#.#08.99.188':445
'21#.#08.107.143':445
'21#.#08.238.146':445
'21#.#08.84.238':445
'21#.#08.98.42':445
'21#.#08.235.107':445
'21#.#08.71.253':445
'21#.#08.47.199':445
'21#.#08.77.89':139
'21#.#08.30.123':139
'21#.#08.142.243':139
'21#.#08.18.58':139
'21#.#08.130.66':139
'21#.#08.55.10':139
'21#.#08.94.161':139
'21#.#08.242.32':139
'21#.#08.99.188':139
'21#.#08.131.55':139
'21#.#08.241.130':139
'21#.#08.253.56':139
'21#.#08.12.253':139
'21#.#08.32.133':139
'21#.#08.20.86':139
'21#.#08.88.69':139
'21#.#08.66.238':139
'21#.#08.196.132':139
'21#.#08.5.129':139
'21#.#08.219.208':139
'21#.#08.134.75':139
'21#.#08.142.134':139
'21#.#08.210.217':139
'21#.#08.41.206':139
'21#.#08.193.100':139
'21#.#08.5.161':139
'21#.108.6.5':139
'21#.#08.25.246':445
'21#.#08.216.171':445
'21#.#08.54.186':445
'21#.#08.172.167':445
'21#.#08.14.89':445
'21#.#08.227.181':445
'21#.#08.71.253':139
'21#.#08.98.42':139
'21#.#08.235.107':139
'21#.#08.143.241':139
'21#.#08.107.143':139
'21#.#08.238.146':139
'21#.#08.90.236':139
'21#.#08.254.105':139
'21#.#08.18.179':139
'21#.#08.84.238':139
'21#.#08.112.56':139
'21#.#08.67.68':445
'21#.#08.7.175':445
'21#.#08.205.181':445
'21#.#08.12.211':445
'21#.#08.64.86':445
'21#.#08.34.80':445
'21#.#08.168.191':445
'21#.#08.217.54':445
'21#.#08.107.58':445
'21#.#08.149.35':445
'21#.#08.218.96':445
'21#.#08.113.187':139
'21#.#08.34.206':139
'21#.#08.247.230':139
'21#.#08.47.35':139
'21#.#08.24.42':139
'21#.#08.212.192':139
'21#.#08.211.36':445
'21#.#08.164.70':445
'21#.#08.135.66':445
'21#.#08.96.181':445
'21#.#08.58.157':445
'21#.#08.24.99':445
'21#.#08.158.237':445
'21#.#08.51.91':445
'21#.#08.172.181':445
'21#.#08.96.120':445
'21#.#08.126.41':445
'21#.#08.17.248':445
'21#.#08.241.213':445
'21#.#08.244.81':445
'21#.#08.18.74':445
'21#.#08.189.144':445
'21#.#08.218.154':445
'21#.#08.5.19':445
'21#.#08.215.204':445
'21#.#08.13.242':445
'21#.#08.167.109':445
'21#.#08.201.239':445
'21#.#08.197.30':445
'21#.#08.240.215':445
'21#.#08.125.251':445
'21#.#08.225.201':445
'21#.#08.74.70':445
'21#.#08.71.10':139
'21#.#08.168.191':139
'21#.#08.217.54':139
'21#.#08.107.58':139
'21#.#08.149.35':139
'21#.#08.218.96':139
'21#.#08.13.242':139
'21#.#08.5.19':139
'21#.#08.201.239':139
'21#.#08.218.154':139
'21#.#08.167.109':139
'21#.#08.215.204':139
'21#.#08.164.70':139
'21#.#08.211.36':139
'21#.#08.96.181':139
'21#.#08.58.157':139
'21#.#08.135.66':139
'21#.#08.12.211':139
'21#.#08.7.175':139
'21#.#08.34.80':139
'21#.#08.67.68':139
'21#.#08.64.86':139
'21#.#08.205.181':139
'21#.#08.17.248':139
'21#.#08.241.213':139
'21#.#08.244.81':139
'21#.#08.18.74':139
'21#.#08.189.144':139
'21#.#08.7.83':139
'21#.#08.161.189':139
'21#.#08.179.250':139
'21#.#08.189.185':139
'21#.#08.132.25':139
'21#.#08.58.115':139
'21#.#08.125.251':139
'21#.#08.240.215':139
'21#.#08.197.30':139
'21#.#08.225.201':139
'21#.#08.74.70':139
'21#.#08.96.120':139
'21#.#08.158.237':139
'21#.#08.126.41':139
'21#.#08.24.99':139
'21#.#08.172.181':139
'21#.#08.51.91':139
'21#.#08.7.83':445
'21#.#08.106.202':445
'21#.#08.238.106':445
'21#.#08.65.59':445
'21#.#08.68.163':445
'21#.#08.97.68':445
'21#.#08.240.130':445
'21#.#08.230.115':445
'21#.#08.186.40':139
'21#.#08.110.191':445
'21#.#08.110.191':139
'21#.#08.230.115':139
'21#.#08.133.180':445
'21#.#08.225.133':445
'21#.#08.126.175':445
'21#.#08.2.160':445
'21#.#08.221.147':445
'21#.#08.163.235':445
'21#.#08.157.7':445
'21#.#08.60.246':445
'21#.#08.105.146':445
'21#.#08.108.173':445
'21#.#08.144.1':445
'21#.#08.236.159':139
'21#.#08.6.236':139
'21#.#08.94.237':139
'21#.#08.17.28':139
'21#.#08.233.113':139
'21#.#08.64.6':139
'21#.#08.6.73':139
'21#.#08.239.254':139
'21#.#08.176.226':139
'21#.#08.225.54':139
'21#.#08.203.10':139
'21#.#08.43.235':139
'21#.#08.52.44':139
'21#.#08.235.181':139
'21#.#08.12.103':139
'21#.#08.60.79':139
'21#.#08.211.150':139
'21#.#08.142.3':139
'21#.#08.135.101':139
'21#.#08.117.179':139
'21#.#08.206.110':139
'21#.#08.179.142':139
'21#.#08.240.130':139
'21#.#08.149.35':9988
'21#.#08.96.181':9988
'21#.#08.201.239':9988
'21#.#08.212.192':445
'21#.#08.215.204':9988
'21#.#08.67.68':9988
'21#.#08.205.181':9988
'21#.#08.164.70':9988
'21#.#08.12.211':9988
'21#.#08.217.54':9988
'21#.#08.167.109':9988
'21#.#08.161.189':445
'21#.#08.179.250':445
'21#.#08.189.185':445
'21#.#08.132.25':445
'21#.#08.58.115':445
'21#.#08.71.10':445
'21#.#08.113.187':445
'21#.#08.34.206':445
'21#.#08.247.230':445
'21#.#08.47.35':445
'21#.#08.24.42':445
'21#.#08.105.146':139
'21#.#08.157.7':139
'21#.#08.144.1':139
'21#.#08.163.235':139
'21#.#08.108.173':139
'21#.#08.60.246':139
'21#.#08.106.202':139
'21#.#08.238.106':139
'21#.#08.65.59':139
'21#.#08.68.163':139
'21#.#08.97.68':139
'21#.#08.5.19':9988
'21#.#08.34.80':9988
'21#.#08.58.157':9988
'21#.#08.64.86':9988
'21#.#08.7.175':9988
'21#.#08.218.96':9988
'21#.#08.133.180':139
'21#.#08.225.133':139
'21#.#08.126.175':139
'21#.#08.2.160':139
'21#.#08.221.147':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней