Trojan.Starman.5334

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#21.205.198':139
'12#.#21.12.206':139
'12#.#21.146.142':139
'12#.#21.234.239':139
'12#.#21.184.99':139
'12#.#21.227.172':139
'12#.#21.65.253':139
'12#.#21.125.190':139
'12#.#21.147.34':139
'12#.#21.153.78':139
'12#.#21.191.58':139
'12#.#21.243.5':139
'12#.#21.114.243':139
'12#.#21.10.217':139
'12#.#21.50.59':139
'12#.#21.10.91':139
'12#.#21.77.128':139
'12#.#21.97.75':139
'12#.#21.228.52':139
'12#.#21.195.164':139
'12#.#21.222.70':139
'12#.#21.222.70':445
'12#.#21.228.52':445
'12#.#21.195.164':445
'12#.#21.243.5':445
'12#.#21.114.243':445
'12#.#21.234.239':445
'12#.#21.184.99':445
'12#.#21.191.58':445
'12#.#21.77.128':445
'12#.#21.97.75':445
'12#.#21.10.217':445
'12#.#21.33.46':139
'12#.#21.202.244':445
'12#.#21.46.2':139
'12#.#21.27.251':139
'12#.#21.2.28':139
'12#.#21.50.59':445
'12#.#21.10.91':445
'12#.#21.3.160':445
'12#.#21.220.210':445
'12#.#21.30.81':445
'12#.#21.3.160':139
'12#.#21.82.239':139
'12#.#21.21.154':139
'12#.#21.246.68':139
'12#.#21.2.182':139
'12#.#21.68.3':139
'12#.#21.19.50':445
'12#.#21.111.162':445
'12#.#21.49.133':445
'12#.#21.110.186':139
'12#.#21.133.44':445
'12#.#21.26.214':139
'12#.#21.79.199':139
'12#.#21.32.40':139
'12#.#21.34.187':139
'12#.#21.237.195':139
'12#.#21.140.65':139
'12#.#21.211.172':139
'12#.#21.99.211':139
'12#.#21.173.141':139
'12#.#21.41.136':139
'12#.#21.60.194':139
'12#.#21.246.68':445
'12#.#21.82.239':445
'12#.#21.68.3':445
'12#.#21.26.214':445
'12#.#21.2.182':445
'12#.#21.220.210':139
'12#.#21.30.81':139
'12#.#21.202.244':139
'12#.#21.21.154':445
'12#.#21.110.186':445
'12#.#21.99.211':445
'12#.#21.34.187':445
'12#.#21.79.199':445
'12#.#21.140.65':445
'12#.#21.88.185':445
'12#.#21.237.195':445
'12#.#21.173.141':445
'12#.#21.211.172':445
'12#.#21.60.194':445
'12#.#21.32.40':445
'12#.#21.41.136':445
'12#.#21.50.253':139
'12#.#21.61.51':139
'12#.#21.48.56':139
'12#.#21.169.159':445
'12#.#21.225.250':445
'12#.#21.74.188':139
'12#.#21.39.251':139
'12#.#21.59.32':139
'12#.#21.19.233':139
'12#.#21.239.245':139
'12#.#21.179.47':445
'12#.#21.245.187':445
'12#.#21.12.49':445
'12#.#21.212.103':445
'12#.#21.29.240':445
'12#.#21.160.111':445
'12#.#21.136.64':445
'12#.#21.204.167':445
'12#.#21.126.169':445
'12#.#21.164.125':445
'12#.#21.169.146':445
'12#.#21.244.190':139
'12#.#21.156.101':139
'12#.#21.28.70':139
'12#.#21.66.153':139
'12#.#21.144.122':139
'12#.#21.159.176':139
'12#.#21.203.43':139
'12#.#21.176.226':139
'12#.#21.22.90':139
'12#.#21.227.103':139
'12#.#21.87.163':139
'12#.#21.60.198':139
'12#.#21.36.108':139
'12#.#21.198.141':139
'12#.#21.31.43':139
'12#.#21.141.145':139
'12#.#21.84.98':139
'12#.#21.6.209':139
'12#.#21.50.11':139
'12#.#21.130.184':139
'12#.#21.165.245':139
'12#.#21.93.189':445
'12#.#21.106.112':139
'12#.#21.212.127':139
'12#.#21.63.197':139
'12#.#21.33.46':445
'12#.#21.178.34':139
'12#.#21.164.211':139
'12#.#21.93.189':139
'12#.#21.197.179':139
'12#.#21.84.79':139
'12#.#21.6.198':139
'12#.#21.46.2':445
'12#.#21.147.34':445
'12#.#21.153.78':445
'12#.#21.12.206':445
'12#.#21.146.142':445
'12#.#21.205.198':445
'12#.#21.27.251':445
'12#.#21.2.28':445
'12#.#21.65.253':445
'12#.#21.125.190':445
'12#.#21.227.172':445
'12#.#21.63.197':445
'12#.#21.106.112':445
'12#.#21.178.34':445
'12#.#21.169.159':139
'12#.#21.225.250':139
'12#.#21.197.179':445
'12#.#21.164.211':445
'12#.#21.6.198':445
'12#.#21.212.127':445
'12#.#21.84.79':445
'12#.#21.179.47':139
'12#.#21.245.187':139
'12#.#21.12.49':139
'12#.#21.212.103':139
'12#.#21.29.240':139
'12#.#21.160.111':139
'12#.#21.136.64':139
'12#.#21.204.167':139
'12#.#21.126.169':139
'12#.#21.164.125':139
'12#.#21.169.146':139
'12#.#21.9.124':445
'12#.#21.36.8':445
'12#.#21.198.19':445
'12#.#21.68.223':445
'12#.#21.71.69':445
'12#.#21.220.45':445
'12#.#21.123.186':445
'12#.#21.136.6':445
'12#.#21.226.152':445
'12#.#21.179.204':445
'12#.#21.22.9':445
'12#.#21.2.167':139
'12#.#21.82.5':139
'12#.#21.29.215':139
'12#.#21.37.41':139
'12#.#21.76.203':139
'12#.#21.3.162':445
'12#.#21.223.176':445
'12#.#21.82.74':139
'12#.#21.143.81':139
'12#.#21.2.143':139
'12#.#21.90.4':445
'12#.#21.186.219':445
'12#.#21.23.145':445
'12#.#21.182.124':445
'12#.#21.156.112':445
'12#.#21.98.235':445
'12#.#21.80.204':445
'12#.#21.199.185':445
'12#.#21.101.195':445
'12#.#21.12.224':445
'12#.#21.151.68':445
'12#.#21.250.14':445
'12#.#21.167.250':445
'12#.#21.14.141':445
'12#.#21.91.212':445
'12#.#21.222.97':445
'12#.#21.91.21':445
'12#.#21.73.146':445
'12#.#21.36.197':445
'12#.#21.180.168':445
'12#.#21.184.180':445
'12#.#21.232.248':139
'12#.#21.222.97':139
'12#.#21.14.141':139
'12#.#21.91.212':139
'12#.#21.220.45':139
'12#.#21.123.186':139
'12#.#21.184.180':139
'12#.#21.36.197':139
'12#.#21.180.168':139
'12#.#21.250.14':139
'12#.#21.167.250':139
'12#.#21.136.6':139
'12#.#21.3.162':139
'12#.#21.71.69':139
'12#.#21.68.223':139
'12#.#21.223.176':139
'12#.#21.22.9':139
'12#.#21.226.152':139
'12#.#21.179.204':139
'12#.#21.36.8':139
'12#.#21.198.19':139
'12#.#21.9.124':139
'12#.#21.224.50':139
'12#.#21.19.245':139
'12#.#21.55.121':139
'12#.#21.98.235':139
'12#.#21.80.204':139
'12#.#21.59.41':139
'12#.#21.150.76':139
'12#.#21.178.11':139
'12#.#21.150.69':139
'12#.#21.195.75':139
'12#.#21.199.185':139
'12#.#21.182.124':139
'12#.#21.156.112':139
'12#.#21.151.68':139
'12#.#21.91.21':139
'12#.#21.73.146':139
'12#.#21.101.195':139
'12#.#21.12.224':139
'12#.#21.186.219':139
'12#.#21.23.145':139
'12#.#21.90.4':139
'12#.#21.11.7':445
'12#.#21.139.141':445
'12#.#21.187.58':445
'12#.#21.123.64':139
'12#.#21.27.53':445
'12#.#21.148.68':445
'12#.#21.203.180':445
'12#.#21.69.57':445
'12#.#21.50.149':445
'12#.#21.146.103':445
'12#.#21.192.89':139
'12#.#21.95.181':139
'12#.#21.178.95':139
'12#.#21.47.21':139
'12#.#21.179.85':139
'12#.#21.215.179':139
'12#.#21.217.222':139
'12#.#21.101.239':139
'12#.#21.144.143':139
'12#.#21.32.178':139
'12#.#21.219.32':139
'12#.#21.192.89':445
'12#.#21.123.64':445
'12#.#21.101.239':445
'12#.#21.144.143':445
'12#.#21.217.222':445
'12#.#21.111.162':139
'12#.#21.88.185':139
'12#.#21.19.50':139
'12#.#21.133.44':139
'12#.#21.49.133':139
'12#.#21.219.32':445
'12#.#21.2.133':445
'12#.#21.179.85':445
'12#.#21.172.154':445
'12#.#21.138.105':445
'12#.#21.55.21':445
'12#.#21.178.95':445
'12#.#21.32.178':445
'12#.#21.95.181':445
'12#.#21.215.179':445
'12#.#21.47.21':445
'12#.#21.2.133':139
'12#.#21.143.81':445
'12#.#21.2.143':445
'12#.#21.82.5':445
'12#.#21.29.215':445
'12#.#21.2.167':445
'12#.#21.136.6':9988
'12#.#21.14.141':9988
'12#.#21.226.152':9988
'12#.#21.82.74':445
'12#.#21.179.204':9988
'12#.#21.76.203':445
'12#.#21.150.69':445
'12#.#21.195.75':445
'12#.#21.19.245':445
'12#.#21.55.121':445
'12#.#21.224.50':445
'12#.#21.232.248':445
'12#.#21.37.41':445
'12#.#21.150.76':445
'12#.#21.178.11':445
'12#.#21.59.41':445
'12#.#21.146.103':139
'12#.#21.69.57':139
'12#.#21.50.149':139
'12#.#21.11.7':139
'12#.#21.139.141':139
'12#.#21.55.21':139
'12#.#21.172.154':139
'12#.#21.138.105':139
'12#.#21.148.68':139
'12#.#21.203.180':139
'12#.#21.187.58':139
'12#.#21.23.145':9988
'12#.#21.90.4':9988
'12#.#21.73.146':9988
'12#.#21.250.14':9988
'12#.#21.167.250':9988
'12#.#21.29.215':9988
'12#.#21.27.53':139
'12#.#21.19.245':9988
'12#.#21.12.224':9988
'12#.#21.199.185':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней