Trojan.Starman.5349

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#67.17.53':139
'21#.#67.92.71':139
'21#.#67.134.38':139
'21#.#67.205.209':139
'21#.#67.176.209':139
'21#.#67.39.246':139
'21#.#67.206.160':139
'21#.#67.244.253':139
'21#.#67.36.92':139
'21#.#67.254.35':139
'21#.#67.209.60':139
'21#.#67.59.121':139
'21#.#67.164.207':139
'21#.#67.61.130':139
'21#.#67.52.141':139
'21#.#67.130.52':139
'21#.#67.223.159':139
'21#.#67.60.128':139
'21#.#67.64.203':139
'21#.#67.252.229':139
'21#.#67.70.242':139
'21#.#67.187.181':139
'21#.#67.59.121':445
'21#.#67.164.207':445
'21#.#67.61.130':445
'21#.#67.52.141':445
'21#.#67.130.52':445
'21#.#67.223.159':445
'21#.#67.60.128':445
'21#.#67.64.203':445
'21#.#67.252.229':445
'21#.#67.70.242':445
'21#.#67.141.82':445
'21#.#67.179.66':139
'21#.#67.97.88':139
'21#.#67.98.58':139
'21#.#67.171.147':139
'21#.#67.101.69':139
'21#.#67.197.233':445
'21#.#67.47.224':445
'21#.#67.37.215':445
'21#.#67.79.12':445
'21#.#67.10.234':445
'21#.#67.199.29':139
'21#.#67.47.238':139
'21#.#67.51.99':139
'21#.#67.158.230':139
'21#.#67.12.4':139
'21#.#67.42.243':445
'21#.#67.96.43':445
'21#.#67.14.46':139
'21#.#67.99.108':139
'21#.#67.46.99':139
'21#.#67.230.48':139
'21#.#67.211.187':139
'21#.#67.161.154':139
'21#.#67.96.43':139
'21#.#67.34.238':445
'21#.#67.42.243':139
'21#.#67.28.143':139
'21#.#67.31.172':139
'21#.#67.100.239':139
'21#.#67.101.36':139
'21#.#67.28.96':139
'21#.#67.211.187':445
'21#.#67.14.46':445
'21#.#67.79.12':139
'21#.#67.46.99':445
'21#.#67.99.108':445
'21#.#67.47.238':445
'21#.#67.47.224':139
'21#.#67.141.82':139
'21#.#67.197.233':139
'21#.#67.10.234':139
'21#.#67.37.215':139
'21#.#67.199.29':445
'21#.#67.101.36':445
'21#.#67.28.143':445
'21#.#67.161.154':445
'21#.#67.100.239':445
'21#.#67.28.96':445
'21#.#67.12.4':445
'21#.#67.51.99':445
'21#.#67.158.230':445
'21#.#67.31.172':445
'21#.#67.230.48':445
'21#.#67.228.22':139
'21#.#67.252.244':139
'21#.#67.70.71':139
'21#.#67.199.189':139
'21#.#67.3.89':139
'21#.#67.22.71':139
'21#.#67.44.71':139
'21#.#67.187.142':139
'21#.#67.69.185':139
'21#.#67.8.164':139
'21#.#67.233.254':139
'21#.#67.164.113':445
'21#.#67.199.232':445
'21#.#67.144.154':445
'21#.#67.7.148':445
'21#.#67.0.250':445
'21#.#67.45.179':445
'21#.#67.14.22':445
'21#.#67.149.113':445
'21#.#67.48.69':445
'21#.#67.71.14':445
'21#.#67.205.44':139
'21#.#67.128.137':139
'21#.#67.105.154':139
'21#.#67.140.172':139
'21#.#67.183.99':139
'21#.#67.88.208':139
'21#.#67.27.25':139
'21#.#67.181.169':139
'21#.#67.183.17':139
'21#.#67.166.25':139
'21#.#67.92.92':139
'21#.#67.60.67':139
'21#.#67.248.87':139
'21#.#67.150.91':139
'21#.#67.158.89':139
'21#.#67.145.241':139
'21#.#67.128.65':139
'21#.#67.227.156':139
'21#.#67.232.226':139
'21#.#67.177.184':139
'21#.#67.219.131':139
'21#.#67.34.151':139
'21#.#67.98.58':445
'21#.#67.179.66':445
'21#.#67.101.69':445
'21#.#67.187.181':445
'21#.#67.171.147':445
'21#.#67.85.35':139
'21#.#67.100.181':139
'21#.#67.166.253':139
'21#.#67.97.88':445
'21#.#67.253.126':139
'21#.#67.206.160':445
'21#.#67.134.38':445
'21#.#67.17.53':445
'21#.#67.176.209':445
'21#.#67.209.60':445
'21#.#67.205.209':445
'21#.#67.244.253':445
'21#.#67.39.246':445
'21#.#67.254.35':445
'21#.#67.92.71':445
'21#.#67.36.92':445
'21#.#67.97.44':139
'21#.#67.166.253':445
'21#.#67.85.35':445
'21#.#67.253.126':445
'21#.#67.45.179':139
'21#.#67.14.22':139
'21#.#67.241.135':445
'21#.#67.144.141':445
'21#.#67.137.178':445
'21#.#67.100.181':445
'21#.#67.97.44':445
'21#.#67.149.113':139
'21#.#67.7.148':139
'21#.#67.0.250':139
'21#.#67.144.141':139
'21#.#67.137.178':139
'21#.#67.241.135':139
'21#.#67.48.69':139
'21#.#67.71.14':139
'21#.#67.199.232':139
'21#.#67.144.154':139
'21#.#67.164.113':139
'21#.#67.83.59':445
'21#.#67.48.71':445
'21#.#67.190.100':445
'21#.#67.37.72':445
'21#.#67.29.200':445
'21#.#67.37.219':445
'21#.#67.108.57':445
'21#.#67.162.162':445
'21#.#67.70.190':445
'21#.#67.190.25':445
'21#.#67.55.156':445
'21#.#67.141.88':445
'21#.#67.145.229':139
'21#.#67.40.190':139
'21#.#67.21.66':139
'21#.#67.169.220':139
'21#.#67.61.212':139
'21#.#67.60.236':445
'21#.#67.89.25':445
'21#.#67.155.156':139
'21#.#67.49.95':139
'21#.#67.93.144':139
'21#.#67.35.162':445
'21#.#67.178.158':445
'21#.#67.218.84':445
'21#.#67.140.81':445
'21#.#67.167.27':445
'21#.#67.119.117':445
'21#.#67.7.168':445
'21#.#67.87.123':445
'21#.#67.147.202':445
'21#.#67.125.125':445
'21#.#67.2.19':445
'21#.#67.244.74':445
'21#.#67.197.111':445
'21#.#67.20.169':445
'21#.#67.178.16':445
'21#.#67.17.46':445
'21#.#67.245.175':445
'21#.#67.32.72':445
'21#.#67.65.153':445
'21#.#67.205.49':445
'21#.#67.169.227':445
'21#.#67.133.172':445
'21#.#67.17.46':139
'21#.#67.245.175':139
'21#.#67.35.162':139
'21#.#67.108.57':139
'21#.#67.162.162':139
'21#.#67.169.227':139
'21#.#67.133.172':139
'21#.#67.20.169':139
'21#.#67.178.16':139
'21#.#67.197.111':139
'21#.#67.70.190':139
'21#.#67.141.88':139
'21#.#67.29.200':139
'21#.#67.60.236':139
'21#.#67.37.219':139
'21#.#67.89.25':139
'21#.#67.190.25':139
'21#.#67.55.156':139
'21#.#67.190.100':139
'21#.#67.37.72':139
'21#.#67.48.71':139
'21#.#67.205.49':139
'21#.#67.123.237':139
'21#.#67.79.124':139
'21#.#67.18.105':139
'21#.#67.7.168':139
'21#.#67.87.123':139
'21#.#67.237.185':139
'21#.#67.130.27':139
'21#.#67.52.48':139
'21#.#67.213.79':139
'21#.#67.192.59':139
'21#.#67.147.202':139
'21#.#67.167.27':139
'21#.#67.119.117':139
'21#.#67.244.74':139
'21#.#67.32.72':139
'21#.#67.65.153':139
'21#.#67.125.125':139
'21#.#67.2.19':139
'21#.#67.218.84':139
'21#.#67.140.81':139
'21#.#67.178.158':139
'21#.#67.212.28':445
'21#.#67.97.63':445
'21#.#67.34.238':139
'21#.#67.46.168':139
'21#.#67.83.59':139
'21#.#67.136.42':445
'21#.#67.178.146':445
'21#.#67.42.70':445
'21#.#67.81.97':445
'21#.#67.128.119':445
'21#.#67.26.126':139
'21#.#67.100.46':139
'21#.#67.29.184':139
'21#.#67.108.29':139
'21#.#67.92.210':139
'21#.#67.181.53':139
'21#.#67.233.11':139
'21#.#67.20.2':139
'21#.#67.147.152':139
'21#.#67.125.177':139
'21#.#67.20.107':139
'21#.#67.64.111':445
'21#.#67.125.177':445
'21#.#67.20.107':445
'21#.#67.29.184':445
'21#.#67.108.29':445
'21#.#67.100.46':445
'21#.#67.26.126':445
'21#.#67.46.168':445
'21#.#67.20.2':445
'21#.#67.147.152':445
'21#.#67.233.11':445
'21#.#67.181.53':445
'21#.#67.140.53':445
'21#.#67.247.20':445
'21#.#67.22.121':445
'21#.#67.65.167':445
'21#.#67.64.194':445
'21#.#67.77.235':445
'21#.#67.92.210':445
'21#.#67.151.117':445
'21#.#67.241.124':445
'21#.#67.49.252':445
'21#.#67.93.144':445
'21#.#67.155.156':445
'21#.#67.49.95':445
'21#.#67.145.229':445
'21#.#67.40.190':445
'21#.#67.190.100':9988
'21#.#67.55.156':9988
'21#.#67.141.88':9988
'21#.#67.89.25':9988
'21#.#67.29.200':9988
'21#.#67.21.66':445
'21#.#67.213.79':445
'21#.#67.192.59':445
'21#.#67.79.124':445
'21#.#67.18.105':445
'21#.#67.123.237':445
'21#.#67.169.220':445
'21#.#67.61.212':445
'21#.#67.130.27':445
'21#.#67.52.48':445
'21#.#67.237.185':445
'21#.#67.162.162':9988
'21#.#67.22.121':139
'21#.#67.140.53':139
'21#.#67.64.194':139
'21#.#67.64.111':139
'21#.#67.65.167':139
'21#.#67.151.117':139
'21#.#67.77.235':139
'21#.#67.49.252':139
'21#.#67.247.20':139
'21#.#67.241.124':139
'21#.#67.178.146':139
'21#.#67.87.123':9988
'21#.#67.212.28':139
'21#.#67.140.81':9988
'21#.#67.35.162':9988
'21#.#67.65.153':9988
'21#.#67.42.70':139
'21#.#67.136.42':139
'21#.#67.128.119':139
'21#.#67.97.63':139
'21#.#67.81.97':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней