Trojan.Starman.5850

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'21#.#75.122.236':139
'21#.#75.176.122':139
'21#.#75.50.48':445
'21#.#75.12.130':445
'21#.#75.122.236':445
'21#.#75.68.99':139
'21#.#75.101.80':139
'21#.#75.176.122':445
'21#.#75.91.176':139
'21#.#75.100.204':445
'21#.#75.35.21':445
'21#.#75.99.34':445
'21#.#75.180.22':445
'21#.#75.19.189':445
'21#.#75.73.166':445
'21#.#75.15.154':445
'21#.#75.94.165':445
'21#.#75.173.84':445
'21#.#75.94.141':445
'21#.#75.37.31':139
'21#.#75.54.231':139
'21#.#75.239.14':139
'21#.#75.31.201':139
'21#.#75.247.176':139
'21#.#75.79.20':139
'21#.#75.58.187':139
'21#.#75.47.248':139
'21#.#75.221.214':139
'21#.#75.148.224':139
'21#.#75.6.128':139
'21#.#75.21.53':139
'21#.#75.52.128':139
'21#.#75.117.52':139
'21#.#75.46.75':139
'21#.#75.58.242':139
'21#.#75.225.21':139
'21#.#75.227.204':139
'21#.#75.2.101':139
'21#.#75.107.21':445
'21#.#75.237.215':445
'21#.#75.60.108':445
'21#.#75.50.141':445
'21#.#75.15.39':445
'21#.#75.236.191':445
'21#.#75.76.175':445
'21#.#75.49.83':445
'21#.#75.96.181':445
'21#.#75.171.96':445
'21#.#75.140.188':445
'21#.#75.213.60':445
'21#.#75.1.120':445
'21#.#75.50.48':139
'21#.#75.12.130':139
'21#.#75.251.27':445
'21#.#75.12.36':445
'21#.#75.227.161':445
'21#.#75.3.10':445
'21#.#75.195.15':445
'21#.#75.78.96':445
'21#.#75.73.30':445
'21#.#75.106.50':445
'21#.#75.93.84':445
'21#.#75.118.184':445
'21#.#75.93.117':445
'21#.#75.101.176':445
'21#.#75.20.119':445
'21#.#75.97.146':445
'21#.#75.49.242':445
'21#.#75.67.22':445
'21#.#75.20.62':445
'21#.#75.81.131':445
'21#.#75.24.27':445
'21#.#75.14.90':445
'21#.#75.205.94':445
'21#.#75.241.212':445
'21#.#75.203.194':445
'21#.#75.190.153':445
'21#.#75.72.140':139
'21#.#75.7.104':445
'21#.#75.68.206':445
'21#.#75.170.206':445
'21#.#75.76.104':445
'21#.#75.222.68':445
'21#.#75.216.95':445
'21#.#75.83.216':445
'21#.#75.31.223':445
'21#.#75.114.159':445
'21#.#75.72.140':445
'21#.#75.37.31':445
'21#.#75.54.231':445
'21#.#75.239.14':445
'21#.#75.31.201':445
'21#.#75.47.248':445
'21#.#75.79.20':445
'21#.#75.58.187':445
'21#.#75.247.176':445
'21#.#75.221.214':445
'21#.#75.60.248':445
'21#.#75.219.37':445
'21#.#75.90.238':445
'21#.#75.78.166':445
'21#.#75.179.72':445
'21#.#75.91.187':139
'21#.#75.219.56':139
'21#.#75.196.16':445
'21#.#75.8.149':445
'21#.#75.22.149':445
'21#.#75.42.27':445
'21#.#75.89.175':445
'21#.#75.242.138':445
'21#.#75.130.1':445
'21#.#75.42.34':445
'21#.#75.17.65':445
'21#.#75.214.17':445
'21#.#75.144.117':445
'21#.#75.64.187':445
'21#.#75.148.224':445
'21#.#75.42.34':139
'21#.#75.89.175':139
'21#.#75.130.1':139
'21#.#75.42.27':139
'21#.#75.144.117':139
'21#.#75.214.17':139
'21#.#75.22.149':139
'21#.#75.64.187':139
'21#.#75.17.65':139
'21#.#75.242.138':139
'21#.#75.7.104':139
'21#.#75.68.206':139
'21#.#75.170.206':139
'21#.#75.76.104':139
'21#.#75.222.68':139
'21#.#75.216.95':139
'21#.#75.83.216':139
'21#.#75.31.223':139
'21#.#75.114.159':139
'21#.#75.6.128':445
'21#.#75.21.53':445
'21#.#75.52.128':445
'21#.#75.117.52':445
'21#.#75.46.75':445
'21#.#75.58.242':445
'21#.#75.225.21':445
'21#.#75.227.204':445
'21#.#75.2.101':445
'21#.#75.101.80':445
'21#.#75.60.248':139
'21#.#75.219.37':139
'21#.#75.90.238':139
'21#.#75.78.166':139
'21#.#75.179.72':139
'21#.#75.91.176':445
'21#.#75.68.99':445
'21#.#75.196.16':139
'21#.#75.8.149':139
'21#.#75.100.204':139
'21#.#75.116.216':445
'21#.#75.49.214':445
'21#.#75.64.191':139
'21#.#75.157.10':139
'21#.#75.78.15':445
'21#.#75.193.35':445
'21#.#75.160.193':445
'21#.#75.35.149':445
'21#.#75.31.77':445
'21#.#75.179.9':139
'21#.#75.182.225':139
'21#.#75.123.64':139
'21#.#75.1.198':139
'21#.#75.225.56':139
'21#.#75.161.200':139
'21#.#75.173.115':139
'21#.#75.31.47':139
'21#.#75.31.128':139
'21#.#75.194.95':139
'21#.#75.9.23':445
'21#.#75.224.8':445
'21#.#75.61.134':445
'21#.#75.84.250':445
'21#.#75.193.223':445
'21#.#75.245.147':445
'21#.#75.49.84':445
'21#.#75.46.193':445
'21#.#75.85.246':445
'21#.#75.134.43':445
'21#.#75.66.192':445
'21#.#75.32.67':445
'21#.#75.37.138':445
'21#.#75.192.128':445
'21#.#75.216.71':445
'21#.#75.24.128':445
'21#.#75.37.130':445
'21#.#75.142.170':445
'21#.#75.109.143':445
'21#.#75.221.73':139
'21#.#75.142.170':139
'21#.#75.109.143':139
'21#.#75.32.67':139
'21#.#75.216.71':139
'21#.#75.24.128':139
'21#.#75.61.134':139
'21#.#75.84.250':139
'21#.#75.37.130':139
'21#.#75.134.43':139
'21#.#75.66.192':139
'21#.#75.78.15':139
'21#.#75.49.214':139
'21#.#75.31.77':139
'21#.#75.116.216':139
'21#.#75.35.149':139
'21#.#75.37.138':139
'21#.#75.192.128':139
'21#.#75.193.35':139
'21#.#75.160.193':139
'21#.#75.108.151':139
'21#.#75.65.126':139
'21#.#75.139.208':139
'21#.#75.14.187':139
'21#.#75.190.110':139
'21#.#75.240.150':139
'21#.#75.117.240':139
'21#.#75.54.240':139
'21#.#75.151.54':139
'21#.#75.221.243':139
'21#.#75.193.223':139
'21#.#75.46.193':139
'21#.#75.9.23':139
'21#.#75.224.8':139
'21#.#75.85.246':139
'21#.#75.197.49':139
'21#.#75.37.96':139
'21#.#75.245.147':139
'21#.#75.49.84':139
'21#.#75.197.49':445
'21#.#75.20.62':139
'21#.#75.14.90':139
'21#.#75.24.27':139
'21#.#75.67.22':139
'21#.#75.203.194':139
'21#.#75.241.212':139
'21#.#75.49.242':139
'21#.#75.190.153':139
'21#.#75.205.94':139
'21#.#75.81.131':139
'21#.#75.237.215':139
'21#.#75.236.191':139
'21#.#75.50.141':139
'21#.#75.15.39':139
'21#.#75.60.108':139
'21#.#75.76.175':139
'21#.#75.49.83':139
'21#.#75.96.181':139
'21#.#75.171.96':139
'21#.#75.35.21':139
'21#.#75.99.34':139
'21#.#75.180.22':139
'21#.#75.19.189':139
'21#.#75.73.166':139
'21#.#75.15.154':139
'21#.#75.94.165':139
'21#.#75.173.84':139
'21#.#75.94.141':139
'21#.#75.107.21':139
'21#.#75.78.96':139
'21#.#75.73.30':139
'21#.#75.106.50':139
'21#.#75.93.84':139
'21#.#75.118.184':139
'21#.#75.93.117':139
'21#.#75.101.176':139
'21#.#75.20.119':139
'21#.#75.97.146':139
'21#.#75.140.188':139
'21#.#75.1.198':445
'21#.#75.182.225':445
'21#.#75.117.240':445
'21#.#75.221.73':445
'21#.#75.225.56':445
'21#.#75.31.128':445
'21#.#75.194.95':445
'21#.#75.123.64':445
'21#.#75.161.200':445
'21#.#75.240.150':445
'21#.#75.139.208':445
'21#.#75.14.187':445
'21#.#75.37.96':445
'21#.#75.221.243':445
'21#.#75.108.151':445
'21#.#75.54.240':445
'21#.#75.151.54':445
'21#.#75.65.126':445
'21#.#75.190.110':445
'21#.#75.213.60':139
'21#.#75.1.120':139
'21#.#75.240.150':9988
'21#.#75.173.115':9988
'21#.#75.251.27':139
'21#.#75.12.36':139
'21#.#75.227.161':139
'21#.#75.3.10':139
'21#.#75.195.15':139
'21#.#75.54.240':9988
'21#.#75.179.9':445
'21#.#75.64.191':445
'21#.#75.173.115':445
'21#.#75.31.47':445
'21#.#75.157.10':445
'21#.#75.31.77':9988
'21#.#75.160.193':9988
'21#.#75.49.214':9988
'21#.#75.78.15':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней