Trojan.Starman.5881

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#18.51.34':445
'21#.#18.204.4':445
'21#.#18.177.132':445
'21#.#18.88.130':445
'21#.#18.0.244':445
'21#.#18.147.201':445
'21#.#18.242.186':139
'21#.#18.34.243':139
'21#.#18.32.202':139
'21#.#18.60.249':445
'21#.#18.19.144':445
'21#.#18.48.222':445
'21#.#18.240.109':445
'21#.#18.17.162':445
'21#.#18.141.143':445
'21#.#18.194.244':445
'21#.#18.241.240':445
'21#.#18.225.124':445
'21#.#18.117.239':445
'21#.#18.54.180':445
'21#.#18.79.159':445
'21#.#18.6.24':445
'21#.#18.129.233':445
'21#.#18.141.144':445
'21#.#18.224.11':445
'21#.#18.34.243':445
'21#.#18.42.38':445
'21#.#18.240.162':445
'21#.#18.7.178':445
'21#.#18.1.155':139
'21#.#18.129.18':445
'21#.#18.127.174':445
'21#.#18.71.122':445
'21#.#18.141.144':139
'21#.#18.240.162':139
'21#.#18.129.233':139
'21#.#18.42.38':139
'21#.#18.224.11':139
'21#.#18.127.174':139
'21#.#18.32.202':445
'21#.#18.242.186':445
'21#.#18.7.178':139
'21#.#18.71.122':139
'21#.#18.129.18':139
'21#.#18.170.185':445
'21#.#18.54.180':139
'21#.#18.225.124':139
'21#.#18.6.24':139
'21#.#18.241.240':139
'21#.#18.79.159':139
'21#.#18.117.239':139
'21#.#18.51.34':139
'21#.#18.204.4':139
'21#.#18.177.132':139
'21#.#18.88.130':139
'21#.#18.0.244':139
'21#.#18.27.24':139
'21#.#18.126.89':139
'21#.#18.150.76':139
'21#.#18.243.110':139
'21#.#18.1.44':139
'21#.#18.170.185':139
'21#.#18.48.222':139
'21#.#18.240.109':139
'21#.#18.17.162':139
'21#.#18.141.143':139
'21#.#18.194.244':139
'21#.#18.64.164':445
'21#.#18.166.142':445
'21#.#18.31.180':445
'21#.#18.22.148':445
'21#.#18.180.155':445
'21#.#18.101.41':445
'21#.#18.27.24':445
'21#.#18.126.89':445
'21#.#18.150.76':445
'21#.#18.243.110':445
'21#.#18.1.44':445
'21#.#18.236.171':445
'21#.#18.124.79':445
'21#.#18.19.144':139
'21#.#18.147.201':139
'21#.#18.60.249':139
'21#.#18.50.124':445
'21#.#18.167.172':445
'21#.#18.202.140':445
'21#.#18.21.242':445
'21#.#18.53.14':445
'21#.#18.174.56':445
'21#.#18.185.33':445
'21#.#18.142.184':445
'21#.#18.33.56':445
'21#.#18.242.76':445
'21#.#18.56.181':445
'21#.#18.69.147':445
'21#.#18.136.113':445
'21#.#18.208.241':445
'21#.#18.73.21':445
'21#.#18.21.128':445
'21#.#18.239.56':445
'21#.#18.176.88':445
'21#.#18.186.175':445
'21#.#18.87.170':445
'21#.#18.1.97':445
'21#.#18.189.140':445
'21#.#18.246.186':445
'21#.#18.164.120':445
'21#.#18.1.186':445
'21#.#18.99.8':445
'21#.#18.55.244':445
'21#.#18.218.131':445
'21#.#18.215.246':139
'21#.#18.116.185':139
'21#.#18.7.13':139
'21#.#18.68.44':139
'21#.#18.36.68':139
'21#.#18.238.89':139
'21#.#18.177.205':139
'21#.#18.165.54':139
'21#.#18.41.82':139
'21#.#18.204.45':139
'21#.#18.27.204':139
'21#.#18.102.213':445
'21#.#18.203.130':445
'21#.#18.88.160':445
'21#.#18.30.42':445
'21#.#18.199.246':445
'21#.#18.22.211':445
'21#.#18.116.81':445
'21#.#18.134.38':139
'21#.#18.91.14':445
'21#.#18.126.76':445
'21#.#18.155.68':445
'21#.#18.252.169':445
'21#.#18.99.8':139
'21#.#18.164.120':139
'21#.#18.218.131':139
'21#.#18.246.186':139
'21#.#18.55.244':139
'21#.#18.1.186':139
'21#.#18.185.33':139
'21#.#18.142.184':139
'21#.#18.33.56':139
'21#.#18.242.76':139
'21#.#18.56.181':139
'21#.#18.32.61':139
'21#.#18.199.31':139
'21#.#18.61.114':139
'21#.#18.56.2':139
'21#.#18.114.56':139
'21#.#18.252.169':139
'21#.#18.176.88':139
'21#.#18.186.175':139
'21#.#18.87.170':139
'21#.#18.1.97':139
'21#.#18.189.140':139
'21#.#18.91.14':139
'21#.#18.116.81':139
'21#.#18.155.68':139
'21#.#18.22.211':139
'21#.#18.126.76':139
'21#.#18.1.155':445
'21#.#18.32.61':445
'21#.#18.199.31':445
'21#.#18.61.114':445
'21#.#18.56.2':445
'21#.#18.114.56':445
'21#.#18.73.21':139
'21#.#18.136.113':139
'21#.#18.239.56':139
'21#.#18.69.147':139
'21#.#18.21.128':139
'21#.#18.208.241':139
'21#.#18.102.213':139
'21#.#18.203.130':139
'21#.#18.88.160':139
'21#.#18.30.42':139
'21#.#18.199.246':139
'21#.#18.101.41':139
'21#.#18.16.169':445
'21#.#18.121.218':445
'21#.#18.55.73':445
'21#.#18.69.34':445
'21#.#18.160.188':445
'21#.#18.73.224':445
'21#.#18.172.69':445
'21#.#18.7.229':445
'21#.#18.33.21':445
'21#.#18.109.11':445
'21#.#18.127.125':445
'21#.#18.203.170':139
'21#.#18.13.92':139
'21#.#18.194.218':139
'21#.#18.40.68':139
'21#.#18.218.149':139
'21#.#18.229.12':139
'21#.#18.4.203':445
'21#.#18.241.138':445
'21#.#18.154.62':445
'21#.#18.97.29':445
'21#.#18.82.237':445
'21#.#18.82.225':445
'21#.#18.88.184':445
'21#.#18.189.141':445
'21#.#18.190.138':445
'21#.#18.128.166':445
'21#.#18.126.201':445
'21#.#18.29.254':445
'21#.#18.71.40':445
'21#.#18.172.234':445
'21#.#18.76.226':445
'21#.#18.142.77':445
'21#.#18.177.35':445
'21#.#18.116.177':445
'21#.#18.66.6':445
'21#.#18.165.117':445
'21#.#18.117.165':445
'21#.#18.190.116':445
'21#.#18.43.176':445
'21#.#18.157.72':445
'21#.#18.95.253':445
'21#.#18.206.189':445
'21#.#18.193.206':445
'21#.#18.176.207':139
'21#.#18.172.69':139
'21#.#18.7.229':139
'21#.#18.33.21':139
'21#.#18.109.11':139
'21#.#18.127.125':139
'21#.#18.165.117':139
'21#.#18.116.177':139
'21#.#18.190.116':139
'21#.#18.177.35':139
'21#.#18.117.165':139
'21#.#18.66.6':139
'21#.#18.97.29':139
'21#.#18.154.62':139
'21#.#18.82.237':139
'21#.#18.241.138':139
'21#.#18.69.34':139
'21#.#18.4.203':139
'21#.#18.121.218':139
'21#.#18.73.224':139
'21#.#18.16.169':139
'21#.#18.160.188':139
'21#.#18.55.73':139
'21#.#18.29.254':139
'21#.#18.71.40':139
'21#.#18.172.234':139
'21#.#18.76.226':139
'21#.#18.142.77':139
'21#.#18.165.38':139
'21#.#18.250.91':139
'21#.#18.56.251':139
'21#.#18.109.234':139
'21#.#18.172.72':139
'21#.#18.249.196':139
'21#.#18.43.176':139
'21#.#18.157.72':139
'21#.#18.95.253':139
'21#.#18.206.189':139
'21#.#18.193.206':139
'21#.#18.190.138':139
'21#.#18.88.184':139
'21#.#18.126.201':139
'21#.#18.82.225':139
'21#.#18.128.166':139
'21#.#18.189.141':139
'21#.#18.182.163':139
'21#.#18.28.185':139
'21#.#18.100.14':139
'21#.#18.10.3':139
'21#.#18.64.8':139
'21#.#18.234.33':139
'21#.#18.28.101':445
'21#.#18.29.133':445
'21#.#18.169.139':445
'21#.#18.121.72':139
'21#.#18.133.110':139
'21#.#18.25.65':445
'21#.#18.33.66':445
'21#.#18.1.214':445
'21#.#18.230.89':445
'21#.#18.39.102':445
'21#.#18.167.173':445
'21#.#18.29.133':139
'21#.#18.92.162':139
'21#.#18.28.101':139
'21#.#18.88.167':445
'21#.#18.169.139':139
'21#.#18.21.242':139
'21#.#18.167.172':139
'21#.#18.174.56':139
'21#.#18.50.124':139
'21#.#18.53.14':139
'21#.#18.202.140':139
'21#.#18.64.164':139
'21#.#18.166.142':139
'21#.#18.31.180':139
'21#.#18.22.148':139
'21#.#18.180.155':139
'21#.#18.100.14':445
'21#.#18.182.163':445
'21#.#18.64.8':445
'21#.#18.92.162':445
'21#.#18.10.3':445
'21#.#18.28.185':445
'21#.#18.236.171':139
'21#.#18.124.79':139
'21#.#18.133.110':445
'21#.#18.234.33':445
'21#.#18.121.72':445
'21#.#18.90.77':445
'21#.#18.97.29':9988
'21#.#18.33.21':9988
'21#.#18.4.203':9988
'21#.#18.13.92':445
'21#.#18.229.12':445
'21#.#18.109.11':9988
'21#.#18.157.72':9988
'21#.#18.190.116':9988
'21#.#18.69.34':9988
'21#.#18.117.165':9988
'21#.#18.193.206':9988
'21#.#18.109.234':445
'21#.#18.250.91':445
'21#.#18.249.196':445
'21#.#18.165.38':445
'21#.#18.172.72':445
'21#.#18.56.251':445
'21#.#18.194.218':445
'21#.#18.203.170':445
'21#.#18.218.149':445
'21#.#18.176.207':445
'21#.#18.40.68':445
'21#.#18.33.66':139
'21#.#18.167.173':139
'21#.#18.25.65':139
'21#.#18.39.102':139
'21#.#18.1.214':139
'21#.#18.88.167':139
'21#.#18.118.96':445
'21#.#18.46.16':445
'21#.#18.7.237':445
'21#.#18.118.229':445
'21#.#18.43.245':445
'21#.#18.116.177':9988
'21#.#18.118.229':139
'21#.#18.95.253':9988
'21#.#18.165.117':9988
'21#.#18.127.125':9988
'21#.#18.43.245':139
'21#.#18.90.77':139
'21#.#18.230.89':139
'21#.#18.46.16':139
'21#.#18.7.237':139
'21#.#18.118.96':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней