Trojan.Starman.5736

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#25.184.240':139
'21#.#25.0.243':139
'21#.#25.241.16':139
'21#.#25.67.64':139
'21#.#25.25.37':139
'21#.#25.38.34':139
'21#.#25.158.113':139
'21#.#25.82.130':139
'21#.#25.161.178':139
'21#.#25.48.162':139
'21#.#25.124.203':139
'21#.#25.109.217':139
'21#.#25.234.181':139
'21#.#25.45.21':139
'21#.#25.174.253':139
'21#.#25.223.236':139
'21#.#25.91.231':139
'21#.#25.195.157':139
'21#.#25.255.38':139
'21#.#25.185.106':139
'21#.#25.97.127':139
'21#.#25.223.236':445
'21#.#25.109.217':445
'21#.#25.45.21':445
'21#.#25.11.177':445
'21#.#25.174.253':445
'21#.#25.255.38':445
'21#.#25.91.231':445
'21#.#25.97.127':445
'21#.#25.234.181':445
'21#.#25.185.106':445
'21#.#25.106.61':445
'21#.#25.107.71':139
'21#.#25.185.158':445
'21#.#25.197.188':139
'21#.#25.24.134':139
'21#.#25.189.24':139
'21#.#25.4.140':445
'21#.#25.192.1':445
'21#.#25.244.63':445
'21#.#25.234.215':445
'21#.#25.181.19':445
'21#.#25.145.44':139
'21#.#25.182.178':139
'21#.#25.231.220':139
'21#.#25.131.30':139
'21#.#25.170.96':139
'21#.#25.156.244':445
'21#.#25.79.206':445
'21#.#25.124.209':445
'21#.#25.236.115':445
'21#.#25.107.60':445
'21#.#25.180.216':139
'21#.#25.177.115':139
'21#.#25.113.205':139
'21#.#25.79.206':139
'21#.#25.124.209':139
'21#.#25.156.244':139
'21#.#25.33.151':139
'21#.#25.164.145':139
'21#.#25.22.94':139
'21#.#25.74.10':139
'21#.#25.227.63':139
'21#.#25.234.215':139
'21#.#25.181.19':139
'21#.#25.185.158':139
'21#.#25.145.44':445
'21#.#25.182.178':445
'21#.#25.106.61':139
'21#.#25.11.177':139
'21#.#25.192.1':139
'21#.#25.244.63':139
'21#.#25.4.140':139
'21#.#25.231.220':445
'21#.#25.227.63':445
'21#.#25.22.94':445
'21#.#25.74.10':445
'21#.#25.177.115':445
'21#.#25.113.205':445
'21#.#25.131.30':445
'21#.#25.170.96':445
'21#.#25.180.216':445
'21#.#25.33.151':445
'21#.#25.164.145':445
'21#.#25.195.157':445
'21#.#25.140.235':139
'21#.#25.227.123':139
'21#.#25.129.173':139
'21#.#25.41.10':139
'21#.#25.178.165':139
'21#.#25.246.139':139
'21#.#25.28.226':139
'21#.#25.139.101':139
'21#.#25.85.227':139
'21#.#25.233.75':139
'21#.#25.44.148':139
'21#.#25.77.189':445
'21#.#25.144.222':445
'21#.#25.141.28':445
'21#.#25.41.246':445
'21#.#25.105.41':445
'21#.#25.130.166':445
'21#.#25.147.130':139
'21#.#25.236.26':445
'21#.#25.47.129':445
'21#.#25.109.25':445
'21#.#25.8.189':139
'21#.#25.213.192':139
'21#.#25.14.138':139
'21#.#25.8.173':139
'21#.#25.186.122':139
'21#.#25.137.214':139
'21#.#25.63.216':139
'21#.#25.79.168':139
'21#.#25.186.56':139
'21#.#25.251.88':139
'21#.#25.235.113':139
'21#.#25.15.5':139
'21#.#25.232.133':139
'21#.#25.223.191':139
'21#.#25.37.195':139
'21#.#25.192.142':139
'21#.#25.116.157':139
'21#.#25.180.8':139
'21#.#25.177.246':139
'21#.#25.248.123':139
'21#.#25.161.128':139
'21#.#25.107.71':445
'21#.#25.175.158':139
'21#.#25.197.188':445
'21#.#25.24.134':445
'21#.#25.189.24':445
'21#.#25.135.160':139
'21#.#25.137.254':139
'21#.#25.152.211':139
'21#.#25.36.137':139
'21#.#25.122.233':139
'21#.#25.158.113':445
'21#.#25.241.16':445
'21#.#25.184.240':445
'21#.#25.25.37':445
'21#.#25.124.203':445
'21#.#25.67.64':445
'21#.#25.82.130':445
'21#.#25.38.34':445
'21#.#25.48.162':445
'21#.#25.0.243':445
'21#.#25.161.178':445
'21#.#25.122.233':445
'21#.#25.152.211':445
'21#.#25.175.158':445
'21#.#25.130.166':139
'21#.#25.36.137':445
'21#.#25.45.201':445
'21#.#25.245.141':445
'21#.#25.17.177':445
'21#.#25.135.160':445
'21#.#25.137.254':445
'21#.#25.236.26':139
'21#.#25.41.246':139
'21#.#25.105.41':139
'21#.#25.245.141':139
'21#.#25.17.177':139
'21#.#25.45.201':139
'21#.#25.47.129':139
'21#.#25.109.25':139
'21#.#25.144.222':139
'21#.#25.141.28':139
'21#.#25.77.189':139
'21#.#25.107.60':139
'21#.#25.6.213':445
'21#.#25.184.118':445
'21#.#25.224.114':445
'21#.#25.17.30':445
'21#.#25.100.104':445
'21#.#25.27.99':445
'21#.#25.16.95':445
'21#.#25.158.201':445
'21#.#25.5.179':445
'21#.#25.182.200':445
'21#.#25.32.116':445
'21#.#25.214.184':139
'21#.#25.91.232':139
'21#.125.9.2':139
'21#.#25.10.123':139
'21#.#25.246.164':139
'21#.#25.28.150':139
'21#.#25.185.183':445
'21#.#25.140.105':139
'21#.#25.237.223':139
'21#.#25.43.225':139
'21#.#25.191.143':445
'21#.#25.72.32':445
'21#.#25.129.36':445
'21#.#25.64.162':445
'21#.#25.35.239':445
'21#.#25.149.196':445
'21#.#25.116.116':445
'21#.#25.204.101':445
'21#.#25.80.34':445
'21#.#25.198.99':445
'21#.#25.143.91':445
'21#.#25.119.234':445
'21#.#25.37.139':445
'21#.#25.234.142':445
'21#.#25.36.194':445
'21#.#25.165.27':445
'21#.#25.37.2':445
'21#.#25.24.127':445
'21#.#25.80.31':445
'21#.#25.249.88':445
'21#.#25.74.39':445
'21#.#25.234.142':139
'21#.#25.119.234':139
'21#.#25.165.27':139
'21#.#25.16.95':139
'21#.#25.36.194':139
'21#.#25.80.31':139
'21#.#25.37.2':139
'21#.#25.74.39':139
'21#.#25.37.139':139
'21#.#25.249.88':139
'21#.#25.27.99':139
'21#.#25.100.104':139
'21#.#25.224.114':139
'21#.#25.17.30':139
'21#.#25.185.183':139
'21#.#25.32.116':139
'21#.#25.182.200':139
'21#.#25.158.201':139
'21#.#25.5.179':139
'21#.#25.6.213':139
'21#.#25.184.118':139
'21#.#25.30.10':139
'21#.#25.186.37':139
'21#.#25.131.91':139
'21#.#25.116.116':139
'21#.#25.29.220':139
'21#.#25.155.227':139
'21#.#25.98.169':139
'21#.#25.36.43':139
'21#.#25.184.186':139
'21#.#25.164.156':139
'21#.#25.149.196':139
'21#.#25.35.239':139
'21#.#25.129.36':139
'21#.#25.64.162':139
'21#.#25.24.127':139
'21#.#25.143.91':139
'21#.#25.198.99':139
'21#.#25.204.101':139
'21#.#25.80.34':139
'21#.#25.191.143':139
'21#.#25.72.32':139
'21#.#25.29.220':445
'21#.#25.0.98':445
'21#.#25.89.125':445
'21#.#25.179.83':139
'21#.#25.129.107':139
'21#.#25.161.67':139
'21#.#25.69.232':445
'21#.#25.37.191':445
'21#.#25.64.136':445
'21#.#25.134.97':445
'21#.#25.123.102':445
'21#.#25.78.188':139
'21#.#25.193.59':139
'21#.#25.235.192':139
'21#.#25.120.100':139
'21#.#25.63.118':139
'21#.#25.9.150':139
'21#.#25.40.129':139
'21#.#25.61.22':139
'21#.#25.45.0':139
'21#.#25.70.252':139
'21#.#25.5.223':139
'21#.#25.40.129':445
'21#.#25.61.22':445
'21#.#25.45.0':445
'21#.#25.70.252':445
'21#.#25.5.223':445
'21#.#25.179.83':445
'21#.#25.236.115':139
'21#.#25.161.67':445
'21#.#25.78.188':445
'21#.#25.129.107':445
'21#.#25.235.192':445
'21#.#25.189.174':445
'21#.#25.124.184':445
'21#.#25.155.223':445
'21#.#25.35.33':445
'21#.#25.52.72':445
'21#.#25.120.100':445
'21#.#25.193.59':445
'21#.#25.9.150':445
'21#.#25.160.99':445
'21#.#25.63.118':445
'21#.#25.43.225':445
'21#.#25.140.105':445
'21#.#25.237.223':445
'21#.#25.214.184':445
'21#.#25.91.232':445
'21#.#25.5.179':9988
'21#.#25.27.99':9988
'21#.#25.32.116':9988
'21#.#25.28.150':445
'21#.#25.100.104':9988
'21#.125.9.2':445
'21#.#25.184.186':445
'21#.#25.164.156':445
'21#.#25.186.37':445
'21#.#25.131.91':445
'21#.#25.30.10':445
'21#.#25.10.123':445
'21#.#25.246.164':445
'21#.#25.98.169':445
'21#.#25.36.43':445
'21#.#25.155.227':445
'21#.#25.37.191':139
'21#.#25.35.33':139
'21#.#25.69.232':139
'21#.#25.123.102':139
'21#.#25.64.136':139
'21#.#25.124.184':139
'21#.#25.160.99':139
'21#.#25.189.174':139
'21#.#25.52.72':139
'21#.#25.155.223':139
'21#.#25.134.97':139
'21#.#25.191.143':9988
'21#.#25.72.32':9988
'21#.#25.74.39':9988
'21#.#25.16.95':9988
'21#.#25.234.142':9988
'21#.#25.0.98':139
'21#.#25.89.125':139
'21#.#25.28.150':9988
'21#.#25.149.196':9988
'21#.#25.237.223':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней