Trojan.Starman.5932

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#3.42.199':139
'21#.33.8.65':139
'21#.#3.106.58':139
'21#.#3.65.196':139
'21#.#3.58.155':139
'21#.#3.69.33':139
'21#.#3.49.198':139
'21#.#3.36.15':139
'21#.#3.149.247':139
'21#.#3.72.133':139
'21#.#3.81.108':139
'21#.#3.175.196':445
'21#.#3.103.135':445
'21#.33.41.4':445
'21#.#3.130.203':445
'21#.#3.3.224':445
'21#.#3.2.224':139
'21#.#3.115.140':139
'21#.#3.123.158':139
'21#.#3.78.40':139
'21#.#3.192.88':139
'21#.#3.42.199':445
'21#.33.8.65':445
'21#.#3.106.58':445
'21#.#3.65.196':445
'21#.#3.58.155':445
'21#.#3.69.33':445
'21#.#3.49.198':445
'21#.#3.36.15':445
'21#.#3.149.247':445
'21#.#3.72.133':445
'21#.#3.81.108':445
'21#.#3.16.239':139
'21#.#3.14.231':139
'21#.#3.73.152':139
'21#.#3.193.70':139
'21#.33.1.9':139
'21#.#3.2.224':445
'21#.#3.115.140':445
'21#.#3.123.158':445
'21#.#3.78.40':445
'21#.#3.192.88':445
'21#.#3.196.133':445
'21#.#3.3.224':139
'21#.33.41.4':139
'21#.#3.130.203':139
'21#.#3.133.114':139
'21#.#3.196.133':139
'21#.#3.205.97':445
'21#.#3.205.204':445
'21#.#3.98.12':445
'21#.#3.175.196':139
'21#.#3.103.135':139
'21#.#3.114.212':139
'21#.#3.84.195':139
'21#.#3.33.176':139
'21#.#3.89.175':139
'21#.#3.209.2':139
'21#.#3.137.208':139
'21#.#3.24.90':139
'21#.#3.213.8':139
'21#.#3.155.178':139
'21#.#3.38.117':139
'21#.#3.26.224':139
'21#.#3.38.117':445
'21#.#3.26.224':445
'21#.#3.33.176':445
'21#.#3.89.175':445
'21#.#3.84.195':445
'21#.#3.114.212':445
'21#.#3.133.114':445
'21#.#3.213.8':445
'21#.#3.155.178':445
'21#.#3.24.90':445
'21#.#3.137.208':445
'21#.#3.21.95':445
'21#.#3.27.247':445
'21#.#3.187.248':445
'21#.#3.34.43':445
'21#.#3.25.143':445
'21#.#3.191.180':445
'21#.#3.209.2':445
'21#.#3.8.172':445
'21#.#3.39.42':445
'21#.#3.172.41':445
'21#.#3.193.70':445
'21#.#3.30.64':445
'21#.#3.206.49':445
'21#.#3.69.139':445
'21#.#3.11.131':445
'21#.#3.163.10':445
'21#.#3.121.190':445
'21#.#3.48.108':445
'21#.#3.90.30':445
'21#.#3.102.186':445
'21#.#3.250.232':445
'21#.#3.155.129':445
'21#.#3.172.91':445
'21#.#3.77.98':445
'21#.#3.245.204':445
'21#.33.2.72':445
'21#.#3.241.246':445
'21#.#3.255.184':445
'21#.#3.9.178':445
'21#.#3.230.25':445
'21#.#3.241.36':445
'21#.#3.242.11':445
'21#.#3.41.250':139
'21#.#3.206.42':139
'21#.#3.173.91':139
'21#.#3.90.117':139
'21#.#3.91.171':139
'21#.#3.192.152':139
'21#.#3.27.63':139
'21#.#3.153.40':139
'21#.#3.241.205':139
'21#.#3.40.241':139
'21#.#3.117.244':139
'21#.#3.2.230':139
'21#.#3.130.84':139
'21#.#3.4.161':139
'21#.#3.217.69':139
'21#.#3.67.166':139
'21#.#3.4.159':139
'21#.#3.247.40':139
'21#.#3.182.204':139
'21#.#3.217.184':139
'21#.#3.48.254':139
'21#.#3.205.214':445
'21#.#3.241.246':139
'21#.#3.245.204':139
'21#.33.2.72':139
'21#.#3.148.96':139
'21#.#3.205.214':139
'21#.#3.242.11':139
'21#.#3.230.25':139
'21#.#3.241.36':139
'21#.#3.172.91':139
'21#.#3.77.98':139
'21#.#3.81.225':139
'21#.#3.14.231':445
'21#.#3.178.57':139
'21#.#3.16.239':445
'21#.33.1.9':445
'21#.#3.73.152':445
'21#.#3.49.217':139
'21#.#3.223.135':139
'21#.#3.216.213':139
'21#.#3.146.200':139
'21#.#3.217.146':139
'21#.#3.146.200':445
'21#.#3.217.146':445
'21#.#3.178.57':445
'21#.#3.121.190':139
'21#.#3.48.108':139
'21#.#3.81.225':445
'21#.#3.148.96':445
'21#.#3.223.135':445
'21#.#3.216.213':445
'21#.#3.49.217':445
'21#.#3.90.30':139
'21#.#3.11.131':139
'21#.#3.163.10':139
'21#.#3.155.129':139
'21#.#3.255.184':139
'21#.#3.9.178':139
'21#.#3.102.186':139
'21#.#3.250.232':139
'21#.#3.206.49':139
'21#.#3.69.139':139
'21#.#3.30.64':139
'21#.#3.168.113':445
'21#.#3.127.154':445
'21#.33.46.1':445
'21#.#3.93.211':445
'21#.#3.244.208':445
'21#.#3.110.6':445
'21#.#3.152.153':445
'21#.33.5.80':445
'21#.#3.160.238':445
'21#.#3.169.160':445
'21#.#3.53.44':445
'21#.#3.101.88':139
'21#.33.1.12':139
'21#.33.5.39':139
'21#.#3.197.111':139
'21#.#3.233.180':139
'21#.#3.151.164':445
'21#.#3.78.202':445
'21#.#3.207.219':139
'21#.#3.253.126':139
'21#.#3.192.241':139
'21#.#3.202.188':445
'21#.#3.172.202':445
'21#.#3.188.167':445
'21#.#3.50.89':445
'21#.#3.166.206':445
'21#.#3.53.164':445
'21#.#3.20.125':445
'21#.#3.139.94':445
'21#.#3.72.173':445
'21#.#3.35.86':445
'21#.#3.217.80':445
'21#.#3.226.205':445
'21#.#3.86.227':445
'21#.#3.206.92':445
'21#.#3.158.4':445
'21#.#3.92.232':445
'21#.#3.13.135':445
'21#.#3.167.39':445
'21#.#3.135.57':445
'21#.#3.39.87':445
'21#.#3.57.39':445
'21#.#3.185.111':139
'21#.#3.92.232':139
'21#.#3.206.92':139
'21#.#3.158.4':139
'21#.#3.110.6':139
'21#.#3.152.153':139
'21#.#3.57.39':139
'21#.#3.135.57':139
'21#.#3.39.87':139
'21#.#3.226.205':139
'21#.#3.86.227':139
'21#.33.5.80':139
'21#.#3.93.211':139
'21#.#3.244.208':139
'21#.#3.78.202':139
'21#.#3.151.164':139
'21#.33.46.1':139
'21#.#3.160.238':139
'21#.#3.169.160':139
'21#.#3.127.154':139
'21#.#3.53.44':139
'21#.#3.168.113':139
'21#.#3.109.80':139
'21#.#3.10.218':139
'21#.#3.61.226':139
'21#.#3.53.164':139
'21#.#3.20.125':139
'21#.#3.37.30':139
'21#.#3.118.36':139
'21#.#3.7.144':139
'21#.#3.42.139':139
'21#.#3.84.106':139
'21#.#3.139.94':139
'21#.#3.50.89':139
'21#.#3.166.206':139
'21#.#3.217.80':139
'21#.#3.13.135':139
'21#.#3.167.39':139
'21#.#3.72.173':139
'21#.#3.35.86':139
'21#.#3.172.202':139
'21#.#3.188.167':139
'21#.#3.202.188':139
'21#.#3.61.226':445
'21#.#3.150.21':445
'21#.#3.39.43':445
'21#.#3.89.254':445
'21#.#3.121.17':445
'21#.#3.29.115':445
'21#.#3.162.150':445
'21#.#3.111.138':445
'21#.#3.81.50':445
'21#.#3.140.191':445
'21#.#3.199.219':445
'21#.#3.125.76':445
'21#.#3.137.160':139
'21#.#3.217.193':139
'21#.#3.86.204':139
'21#.#3.80.177':139
'21#.#3.158.27':139
'21#.#3.12.143':139
'21#.#3.174.236':445
'21#.#3.76.94':139
'21#.#3.17.208':139
'21#.#3.110.107':139
'21#.#3.187.248':139
'21#.#3.21.95':139
'21#.#3.25.143':139
'21#.#3.205.204':139
'21#.#3.34.43':139
'21#.#3.8.172':139
'21#.#3.191.180':139
'21#.#3.172.41':139
'21#.#3.27.247':139
'21#.#3.39.42':139
'21#.#3.205.97':139
'21#.#3.137.160':445
'21#.#3.217.193':445
'21#.#3.86.204':445
'21#.#3.80.177':445
'21#.#3.158.27':445
'21#.#3.12.143':445
'21#.#3.98.12':139
'21#.#3.76.94':445
'21#.#3.17.208':445
'21#.#3.110.107':445
'21#.#3.111.138':139
'21#.#3.192.241':445
'21#.#3.207.219':445
'21#.#3.253.126':445
'21#.#3.101.88':445
'21#.33.1.12':445
'21#.#3.160.238':9988
'21#.33.5.80':9988
'21#.#3.127.154':9988
'21#.#3.168.113':9988
'21#.#3.244.208':9988
'21#.33.5.39':445
'21#.#3.84.106':445
'21#.#3.7.144':445
'21#.#3.42.139':445
'21#.#3.109.80':445
'21#.#3.10.218':445
'21#.#3.197.111':445
'21#.#3.233.180':445
'21#.#3.185.111':445
'21#.#3.37.30':445
'21#.#3.118.36':445
'21#.#3.89.254':139
'21#.#3.150.21':139
'21#.#3.29.115':139
'21#.#3.125.76':139
'21#.#3.121.17':139
'21#.#3.81.50':139
'21#.#3.162.150':139
'21#.#3.199.219':139
'21#.#3.39.43':139
'21#.#3.140.191':139
'21#.#3.174.236':139
'21#.#3.39.87':9988
'21#.#3.57.39':9988
'21#.#3.226.205':9988
'21#.#3.110.6':9988
'21#.#3.158.4':9988
'21#.#3.188.167':9988
'21#.#3.35.86':9988
'21#.#3.50.89':9988
'21#.#3.135.57':9988
'21#.#3.13.135':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней