Trojan.Starman.5409

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#48.57.147':445
'21#.#48.47.230':445
'21#.#48.193.38':445
'21#.#48.152.139':445
'21#.#48.139.81':445
'21#.#48.42.183':445
'21#.#48.234.42':445
'21#.#48.136.177':445
'21#.#48.47.253':445
'21#.#48.17.220':445
'21#.#48.76.247':445
'21#.#48.63.197':445
'21#.#48.100.135':445
'21#.#48.247.148':445
'21#.#48.68.106':445
'21#.#48.70.202':445
'21#.#48.75.22':445
'21#.#48.216.67':445
'21#.#48.65.216':445
'21#.#48.131.234':445
'21#.#48.197.24':445
'21#.#48.74.196':445
'21#.#48.210.78':445
'21#.#48.24.210':445
'21#.#48.161.74':445
'21#.#48.213.127':445
'21#.#48.226.74':445
'21#.#48.241.161':445
'21#.#48.240.37':445
'21#.#48.78.108':445
'21#.#48.42.70':445
'21#.#48.129.42':445
'21#.#48.61.226':445
'21#.#48.11.183':445
'21#.#48.19.129':445
'21#.#48.249.33':445
'21#.#48.18.253':445
'21#.#48.71.19':445
'21#.#48.34.71':445
'21#.#48.21.220':139
'21#.#48.129.42':139
'21#.#48.19.129':139
'21#.#48.11.183':139
'21#.#48.42.70':139
'21#.#48.71.19':139
'21#.#48.18.253':139
'21#.#48.78.108':139
'21#.#48.34.71':139
'21#.#48.249.33':139
'21#.#48.61.226':139
'21#.#48.47.230':139
'21#.#48.139.81':139
'21#.#48.152.139':139
'21#.#48.57.147':139
'21#.#48.136.177':139
'21#.#48.234.42':139
'21#.#48.131.234':139
'21#.#48.47.253':139
'21#.#48.42.183':139
'21#.#48.210.78':139
'21#.#48.150.180':139
'21#.#48.104.122':139
'21#.#48.210.55':139
'21#.#48.136.209':139
'21#.#48.9.88':139
'21#.#48.246.29':139
'21#.#48.60.28':139
'21#.#48.26.247':139
'21#.#48.26.26':139
'21#.#48.56.118':139
'21#.#48.74.196':139
'21#.#48.161.74':139
'21#.#48.24.210':139
'21#.#48.197.24':139
'21#.#48.241.161':139
'21#.#48.226.74':139
'21#.#48.90.50':139
'21#.#48.240.37':139
'21#.#48.213.127':139
'21#.#48.3.219':139
'21#.#48.58.108':139
'21#.#48.35.100':139
'21#.#48.120.152':139
'21#.#48.43.239':139
'21#.#48.16.163':139
'21#.#48.74.234':139
'21#.#48.138.180':139
'21#.#48.55.252':139
'21#.#48.180.33':139
'21#.#48.250.238':139
'21#.#48.238.250':139
'21#.#48.189.100':139
'21#.#48.173.42':139
'21#.#48.194.45':139
'21#.#48.213.129':139
'21#.#48.235.106':139
'21#.#48.24.90':139
'21#.#48.116.203':139
'21#.#48.253.242':139
'21#.#48.125.203':445
'21#.#48.131.222':445
'21#.#48.131.159':445
'21#.#48.95.214':445
'21#.#48.87.209':445
'21#.#48.65.156':445
'21#.#48.225.65':445
'21#.#48.27.243':445
'21#.#48.172.31':445
'21#.#48.179.98':445
'21#.#48.179.21':139
'21#.#48.4.33':445
'21#.#48.117.56':139
'21#.#48.22.5':139
'21#.#48.214.125':445
'21#.#48.233.166':445
'21#.#48.137.8':445
'21#.#48.170.91':445
'21#.#48.128.7':445
'21#.#48.11.52':139
'21#.#48.4.33':139
'21#.#48.214.125':139
'21#.#48.60.28':445
'21#.#48.21.220':445
'21#.#48.170.91':139
'21#.#48.137.8':139
'21#.#48.179.98':139
'21#.#48.128.7':139
'21#.#48.233.166':139
'21#.#48.246.29':445
'21#.#48.210.55':445
'21#.#48.136.209':445
'21#.#48.90.50':445
'21#.#48.56.118':445
'21#.#48.150.180':445
'21#.#48.26.247':445
'21#.#48.26.26':445
'21#.#48.104.122':445
'21#.#48.9.88':445
'21#.#48.131.159':139
'21#.#48.210.230':139
'21#.#48.98.225':139
'21#.#48.61.21':139
'21#.#48.136.112':139
'21#.#48.10.239':139
'21#.#48.34.63':139
'21#.#48.89.168':139
'21#.#48.31.209':139
'21#.#48.19.128':139
'21#.#48.199.245':139
'21#.#48.131.222':139
'21#.#48.87.209':139
'21#.#48.95.214':139
'21#.#48.125.203':139
'21#.#48.27.243':139
'21#.#48.225.65':139
'21#.#48.47.206':139
'21#.#48.172.31':139
'21#.#48.65.156':139
'21#.#48.67.214':445
'21#.#48.72.71':445
'21#.#48.201.134':139
'21#.#48.140.99':445
'21#.#48.208.248':445
'21#.#48.103.94':445
'21#.#48.68.154':445
'21#.#48.147.39':445
'21#.#48.93.147':445
'21#.#48.6.150':139
'21#.#48.15.83':139
'21#.#48.65.198':139
'21#.#48.45.56':139
'21#.#48.56.243':139
'21#.#48.237.96':139
'21#.#48.215.59':139
'21#.#48.80.66':139
'21#.#48.29.37':139
'21#.#48.180.34':139
'21#.#48.143.86':445
'21#.#48.93.202':445
'21#.#48.24.11':445
'21#.#48.38.1':445
'21#.#48.249.164':445
'21#.#48.24.176':445
'21#.#48.43.167':445
'21#.#48.181.185':445
'21#.#48.184.118':445
'21#.#48.94.7':445
'21#.#48.208.217':445
'21#.#48.186.114':445
'21#.#48.106.195':445
'21#.#48.88.240':445
'21#.#48.178.147':445
'21#.#48.65.154':445
'21#.#48.242.71':445
'21#.#48.97.242':445
'21#.#48.56.174':445
'21#.#48.86.76':445
'21#.#48.142.213':139
'21#.#48.106.195':139
'21#.#48.65.154':139
'21#.#48.178.147':139
'21#.#48.186.114':139
'21#.#48.56.174':139
'21#.#48.97.242':139
'21#.#48.208.217':139
'21#.#48.86.76':139
'21#.#48.242.71':139
'21#.#48.88.240':139
'21#.#48.67.214':139
'21#.#48.208.248':139
'21#.#48.140.99':139
'21#.#48.72.71':139
'21#.#48.147.39':139
'21#.#48.68.154':139
'21#.#48.143.86':139
'21#.#48.93.147':139
'21#.#48.103.94':139
'21#.#48.38.1':139
'21#.#48.133.223':139
'21#.#48.243.232':139
'21#.#48.169.155':139
'21#.#48.117.73':139
'21#.#48.194.142':139
'21#.#48.150.24':139
'21#.#48.241.149':139
'21#.#48.176.6':139
'21#.#48.24.66':139
'21#.#48.178.157':139
'21#.#48.24.11':139
'21#.#48.24.176':139
'21#.#48.249.164':139
'21#.#48.93.202':139
'21#.#48.184.118':139
'21#.#48.181.185':139
'21#.#48.22.118':139
'21#.#48.94.7':139
'21#.#48.43.167':139
'21#.#48.235.182':139
'21#.#48.216.235':139
'21#.#48.18.72':139
'21#.#48.183.17':139
'21#.#48.108.65':139
'21#.#48.35.106':445
'21#.#48.14.52':445
'21#.#48.233.15':445
'21#.#48.1.57':445
'21#.#48.211.179':139
'21#.#48.233.15':139
'21#.#48.1.57':139
'21#.#48.194.142':9988
'21#.#48.142.213':9988
'21#.#48.35.106':139
'21#.#48.18.1':139
'21#.#48.77.64':139
'21#.#48.14.52':139
'21#.#48.142.17':139
'21#.#48.142.17':445
'21#.#48.68.106':139
'21#.#48.216.67':139
'21#.#48.76.247':139
'21#.#48.63.197':139
'21#.#48.65.216':139
'21#.#48.17.220':139
'21#.#48.193.38':139
'21#.#48.70.202':139
'21#.#48.75.22':139
'21#.#48.247.148':139
'21#.#48.211.179':445
'21#.#48.18.72':445
'21#.#48.18.1':445
'21#.#48.77.64':445
'21#.#48.183.17':445
'21#.#48.108.65':445
'21#.#48.100.135':139
'21#.#48.235.182':445
'21#.#48.216.235':445
'21#.#48.22.118':9988
'21#.#48.45.56':445
'21#.#48.56.243':445
'21#.#48.241.149':445
'21#.#48.142.213':445
'21#.#48.15.83':445
'21#.#48.29.37':445
'21#.#48.180.34':445
'21#.#48.65.198':445
'21#.#48.237.96':445
'21#.#48.150.24':445
'21#.#48.169.155':445
'21#.#48.117.73':445
'21#.#48.22.118':445
'21#.#48.178.157':445
'21#.#48.133.223':445
'21#.#48.176.6':445
'21#.#48.24.66':445
'21#.#48.243.232':445
'21#.#48.194.142':445
'21#.#48.215.59':445
'21#.#48.106.195':9988
'21#.#48.242.71':9988
'21#.#48.178.147':9988
'21#.#48.186.114':9988
'21#.#48.97.242':9988
'21#.#48.24.11':9988
'21#.#48.43.167':9988
'21#.#48.208.217':9988
'21#.#48.93.202':9988
'21#.#48.88.240':9988
'21#.#48.201.134':445
'21#.#48.72.71':9988
'21#.#48.80.66':445
'21#.#48.6.150':445
'21#.#48.147.39':9988
'21#.#48.68.154':9988
'21#.#48.143.86':9988
'21#.#48.93.147':9988
'21#.#48.103.94':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней