Trojan.Starman.5332

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#46.84.243':445
'21#.#46.238.110':445
'21#.#46.84.63':445
'21#.#46.84.176':445
'21#.#46.176.210':445
'21#.#46.73.80':445
'21#.#46.173.62':445
'21#.#46.9.254':445
'21#.#46.62.101':445
'21#.#46.173.174':445
'21#.#46.95.97':445
'21#.#46.184.190':445
'21#.#46.164.196':445
'21#.#46.141.207':445
'21#.#46.163.242':445
'21#.#46.4.108':445
'21#.#46.130.196':445
'21#.#46.202.220':445
'21#.#46.212.254':445
'21#.#46.150.34':445
'21#.#46.251.239':445
'21#.#46.56.34':445
'21#.#46.184.233':139
'21#.#46.99.102':139
'21#.#46.231.62':445
'21#.#46.26.70':445
'21#.#46.140.128':445
'21#.#46.166.88':139
'21#.#46.224.151':139
'21#.#46.72.9':139
'21#.#46.151.109':139
'21#.#46.64.196':139
'21#.#46.109.243':139
'21#.#46.162.175':445
'21#.#46.81.22':445
'21#.#46.209.142':445
'21#.#46.26.153':445
'21#.#46.7.157':445
'21#.#46.211.218':445
'21#.#46.231.62':139
'21#.#46.34.57':445
'21#.#46.140.128':139
'21#.#46.34.57':139
'21#.#46.26.70':139
'21#.#46.192.146':445
'21#.#46.73.80':139
'21#.#46.173.174':139
'21#.#46.238.110':139
'21#.#46.84.63':139
'21#.#46.84.243':139
'21#.#46.95.97':139
'21#.#46.26.153':139
'21#.#46.7.157':139
'21#.#46.9.254':139
'21#.#46.62.101':139
'21#.#46.173.62':139
'21#.#46.130.196':139
'21#.#46.251.239':139
'21#.#46.164.196':139
'21#.#46.141.207':139
'21#.#46.184.190':139
'21#.#46.56.34':139
'21#.#46.84.176':139
'21#.#46.176.210':139
'21#.#46.212.254':139
'21#.#46.150.34':139
'21#.#46.202.220':139
'21#.#46.79.38':445
'21#.#46.115.87':445
'21#.#46.61.63':445
'21#.#46.225.51':445
'21#.#46.219.51':445
'21#.#46.146.114':445
'21#.#46.38.16':445
'21#.#46.38.63':445
'21#.#46.113.189':445
'21#.#46.239.146':445
'21#.#46.178.239':445
'21#.#46.211.218':139
'21#.#46.177.231':445
'21#.#46.81.22':139
'21#.#46.209.142':139
'21#.#46.162.175':139
'21#.#46.230.177':445
'21#.#46.165.32':445
'21#.#46.18.154':445
'21#.#46.105.78':445
'21#.#46.180.230':445
'21#.#46.130.66':445
'21#.#46.147.125':139
'21#.#46.6.152':445
'21#.#46.24.213':445
'21#.#46.45.47':445
'21#.#46.74.152':445
'21#.#46.115.196':445
'21#.#46.27.147':445
'21#.#46.92.250':445
'21#.#46.208.40':445
'21#.#46.244.193':445
'21#.#46.251.211':445
'21#.#46.194.5':445
'21#.#46.226.152':445
'21#.#46.175.148':445
'21#.#46.217.86':445
'21#.#46.72.9':445
'21#.#46.147.125':445
'21#.#46.104.66':445
'21#.#46.174.148':445
'21#.#46.247.35':445
'21#.#46.69.11':445
'21#.#46.227.19':445
'21#.#46.152.126':445
'21#.#46.207.224':445
'21#.#46.23.66':445
'21#.#46.12.223':445
'21#.#46.255.69':445
'21#.#46.194.61':445
'21#.#46.201.3':445
'21#.#46.198.147':139
'21#.#46.136.53':139
'21#.#46.240.219':139
'21#.#46.10.9':445
'21#.#46.220.9':139
'21#.#46.87.73':445
'21#.#46.31.1':445
'21#.#46.224.85':445
'21#.#46.44.254':445
'21#.#46.86.45':445
'21#.#46.196.30':445
'21#.#46.77.75':445
'21#.#46.129.175':445
'21#.#46.108.252':445
'21#.#46.103.38':445
'21#.#46.58.84':445
'21#.#46.224.151':445
'21#.#46.27.147':139
'21#.#46.251.211':139
'21#.#46.24.213':139
'21#.#46.45.47':139
'21#.#46.6.152':139
'21#.#46.194.5':139
'21#.#46.44.254':139
'21#.#46.86.45':139
'21#.#46.208.40':139
'21#.#46.244.193':139
'21#.#46.92.250':139
'21#.#46.104.66':139
'21#.#46.227.19':139
'21#.#46.175.148':139
'21#.#46.217.86':139
'21#.#46.226.152':139
'21#.#46.152.126':139
'21#.#46.74.152':139
'21#.#46.115.196':139
'21#.#46.247.35':139
'21#.#46.69.11':139
'21#.#46.174.148':139
'21#.#46.201.3':139
'21#.#46.10.9':139
'21#.#46.23.66':139
'21#.#46.12.223':139
'21#.#46.207.224':139
'21#.#46.184.233':445
'21#.#46.109.243':445
'21#.#46.151.109':445
'21#.#46.64.196':445
'21#.#46.99.102':445
'21#.#46.166.88':445
'21#.#46.196.30':139
'21#.#46.103.38':139
'21#.#46.31.1':139
'21#.#46.224.85':139
'21#.#46.87.73':139
'21#.#46.58.84':139
'21#.#46.255.69':139
'21#.#46.194.61':139
'21#.#46.129.175':139
'21#.#46.108.252':139
'21#.#46.77.75':139
'21#.#46.4.108':139
'21#.#46.209.204':445
'21#.#46.90.78':445
'21#.#46.244.141':445
'21#.#46.246.219':445
'21#.#46.108.220':445
'21#.#46.86.241':445
'21#.#46.77.38':445
'21#.#46.244.111':445
'21#.#46.110.155':445
'21#.#46.127.197':445
'21#.#46.203.120':445
'21#.#46.140.47':139
'21#.#46.40.189':139
'21#.#46.5.222':139
'21#.#46.44.245':139
'21#.#46.164.237':139
'21#.#46.147.41':139
'21#.#46.54.80':445
'21#.#46.64.84':445
'21#.#46.152.33':445
'21#.#46.220.53':445
'21#.#46.213.151':445
'21#.#46.74.225':445
'21#.#46.209.74':445
'21#.#46.224.147':445
'21#.#46.213.34':445
'21#.#46.147.227':445
'21#.#46.91.209':445
'21#.#46.186.156':445
'21#.#46.185.223':445
'21#.#46.146.136':445
'21#.#46.169.139':445
'21#.#46.33.232':445
'21#.#46.222.93':445
'21#.#46.175.142':445
'21#.#46.133.97':445
'21#.#46.215.59':445
'21#.#46.239.214':445
'21#.#46.90.148':445
'21#.#46.143.183':445
'21#.#46.38.85':445
'21#.#46.93.204':445
'21#.#46.162.141':445
'21#.#46.135.149':445
'21#.#46.110.67':139
'21#.#46.77.38':139
'21#.#46.244.111':139
'21#.#46.110.155':139
'21#.#46.127.197':139
'21#.#46.203.120':139
'21#.#46.215.59':139
'21#.#46.175.142':139
'21#.#46.90.148':139
'21#.#46.222.93':139
'21#.#46.239.214':139
'21#.#46.133.97':139
'21#.#46.152.33':139
'21#.#46.220.53':139
'21#.#46.213.151':139
'21#.#46.64.84':139
'21#.#46.54.80':139
'21#.#46.246.219':139
'21#.#46.90.78':139
'21#.#46.86.241':139
'21#.#46.209.204':139
'21#.#46.108.220':139
'21#.#46.244.141':139
'21#.#46.186.156':139
'21#.#46.185.223':139
'21#.#46.146.136':139
'21#.#46.169.139':139
'21#.#46.33.232':139
'21#.#46.98.189':139
'21#.#46.63.216':139
'21#.#46.167.160':139
'21#.#46.51.130':139
'21#.#46.246.66':139
'21#.#46.52.23':139
'21#.#46.143.183':139
'21#.#46.38.85':139
'21#.#46.93.204':139
'21#.#46.162.141':139
'21#.#46.135.149':139
'21#.#46.213.34':139
'21#.#46.209.74':139
'21#.#46.91.209':139
'21#.#46.74.225':139
'21#.#46.147.227':139
'21#.#46.224.147':139
'21#.#46.98.189':445
'21#.#46.3.124':445
'21#.#46.48.71':445
'21#.#46.203.114':445
'21#.#46.159.216':445
'21#.#46.119.110':445
'21#.#46.115.47':139
'21#.#46.115.47':445
'21#.#46.109.167':445
'21#.#46.32.35':139
'21#.#46.109.167':139
'21#.#46.147.254':139
'21#.#46.36.234':445
'21#.#46.101.39':445
'21#.#46.39.3':445
'21#.#46.243.224':445
'21#.#46.68.124':445
'21#.#46.16.101':445
'21#.#46.144.201':445
'21#.#46.106.68':445
'21#.#46.84.41':445
'21#.#46.133.16':445
'21#.#46.31.133':445
'21#.#46.146.114':139
'21#.#46.239.146':139
'21#.#46.115.87':139
'21#.#46.61.63':139
'21#.#46.79.38':139
'21#.#46.178.239':139
'21#.#46.192.146':139
'21#.#46.163.242':139
'21#.#46.38.63':139
'21#.#46.113.189':139
'21#.#46.38.16':139
'21#.#46.230.177':139
'21#.#46.180.230':139
'21#.#46.177.231':139
'21#.#46.147.254':445
'21#.#46.32.35':445
'21#.#46.130.66':139
'21#.#46.225.51':139
'21#.#46.219.51':139
'21#.#46.18.154':139
'21#.#46.105.78':139
'21#.#46.165.32':139
'21#.#46.43.80':445
'21#.#46.152.33':9988
'21#.#46.90.148':9988
'21#.#46.110.155':9988
'21#.#46.147.41':445
'21#.#46.246.219':9988
'21#.#46.222.93':9988
'21#.#46.244.111':9988
'21#.#46.239.214':9988
'21#.#46.90.78':9988
'21#.#46.209.204':9988
'21#.#46.215.59':9988
'21#.#46.63.216':445
'21#.#46.167.160':445
'21#.#46.51.130':445
'21#.#46.246.66':445
'21#.#46.52.23':445
'21#.#46.110.67':445
'21#.#46.140.47':445
'21#.#46.40.189':445
'21#.#46.5.222':445
'21#.#46.44.245':445
'21#.#46.164.237':445
'21#.#46.84.41':139
'21#.#46.144.201':139
'21#.#46.31.133':139
'21#.#46.16.101':139
'21#.#46.133.16':139
'21#.#46.106.68':139
'21#.#46.3.124':139
'21#.#46.48.71':139
'21#.#46.203.114':139
'21#.#46.159.216':139
'21#.#46.119.110':139
'21#.#46.244.141':9988
'21#.#46.203.120':9988
'21#.#46.86.241':9988
'21#.#46.220.53':9988
'21#.#46.54.80':9988
'21#.#46.43.80':139
'21#.#46.36.234':139
'21#.#46.101.39':139
'21#.#46.39.3':139
'21#.#46.243.224':139
'21#.#46.68.124':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней