Trojan.Starman.5369

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#70.161.48':139
'21#.#70.157.62':139
'21#.#70.32.248':139
'21#.#70.17.108':139
'21#.#70.15.223':139
'21#.#70.4.210':139
'21#.#70.94.43':139
'21#.#70.56.155':139
'21#.#70.18.145':139
'21#.#70.95.17':139
'21#.#70.60.232':139
'21#.#70.45.119':139
'21#.#70.168.64':139
'21#.#70.94.99':139
'21#.#70.59.47':139
'21#.#70.206.36':139
'21#.#70.141.198':139
'21#.#70.250.26':139
'21#.#70.185.69':139
'21#.#70.26.51':139
'21#.#70.65.208':139
'21#.#70.124.23':139
'21#.#70.185.69':445
'21#.#70.141.198':445
'21#.#70.65.208':445
'21#.#70.168.64':445
'21#.#70.26.51':445
'21#.#70.15.223':445
'21#.#70.32.248':445
'21#.#70.17.108':445
'21#.#70.250.26':445
'21#.#70.60.232':445
'21#.#70.45.119':445
'21#.#70.2.198':139
'21#.#70.190.2':139
'21#.#70.198.47':139
'21#.#70.28.115':139
'21#.#70.47.93':139
'21#.#70.206.36':445
'21#.#70.94.99':445
'21#.#70.59.47':445
'21#.#70.92.190':139
'21#.#70.186.168':445
'21#.#70.3.159':139
'21#.#70.71.68':139
'21#.#70.223.7':139
'21#.#70.142.185':139
'21#.#70.162.6':139
'21#.#70.205.207':139
'21#.#70.196.227':445
'21#.#70.208.22':139
'21#.#70.145.129':139
'21#.#70.22.221':139
'21#.#70.26.165':139
'21#.#70.172.121':139
'21#.#70.111.156':139
'21#.#70.116.103':139
'21#.#70.32.241':139
'21#.#70.210.10':139
'21#.#70.16.205':139
'21#.#70.91.94':139
'21#.#70.23.196':139
'21#.#70.200.111':139
'21#.#70.195.199':139
'21#.#70.202.196':445
'21#.#70.3.159':445
'21#.#70.71.68':445
'21#.#70.223.7':445
'21#.#70.142.185':445
'21#.#70.162.6':445
'21#.#70.205.207':445
'21#.#70.186.168':139
'21#.#70.208.22':445
'21#.#70.145.129':445
'21#.#70.22.221':445
'21#.#70.26.165':445
'21#.#70.172.121':445
'21#.#70.111.156':445
'21#.#70.116.103':445
'21#.#70.32.241':445
'21#.#70.210.10':445
'21#.#70.16.205':445
'21#.#70.91.94':445
'21#.#70.23.196':445
'21#.#70.200.111':445
'21#.#70.195.199':445
'21#.#70.161.48':445
'21#.#70.27.48':139
'21#.#70.60.6':139
'21#.#70.47.188':445
'21#.#70.8.100':445
'21#.#70.189.7':445
'21#.#70.210.244':139
'21#.#70.177.189':139
'21#.#70.80.22':139
'21#.#70.21.196':139
'21#.#70.100.216':139
'21#.#70.17.216':445
'21#.#70.81.91':445
'21#.#70.121.90':445
'21#.#70.147.56':445
'21#.#70.80.166':445
'21#.#70.207.82':445
'21#.#70.226.104':445
'21#.#70.213.41':445
'21#.#70.145.166':445
'21#.#70.25.205':445
'21#.#70.248.80':445
'21#.#70.25.107':139
'21#.#70.103.21':139
'21#.#70.202.73':139
'21#.#70.20.251':139
'21#.#70.62.94':139
'21#.#70.51.65':139
'21#.#70.74.15':139
'21#.#70.66.51':139
'21#.#70.122.21':139
'21#.#70.205.202':139
'21#.#70.74.168':139
'21#.#70.108.91':139
'21#.#70.84.106':139
'21#.#70.147.187':139
'21#.#70.14.103':139
'21#.#70.39.225':139
'21#.#70.7.157':139
'21#.#70.48.227':139
'21#.#70.91.130':139
'21#.#70.71.3':139
'21#.#70.100.230':139
'21#.#70.59.128':139
'21#.#70.43.150':139
'21#.#70.108.63':139
'21#.#70.23.45':139
'21#.#70.190.2':445
'21#.#70.92.190':445
'21#.#70.73.225':139
'21#.#70.211.52':139
'21#.#70.179.249':139
'21#.#70.32.137':139
'21#.#70.131.15':139
'21#.#70.2.198':445
'21#.#70.56.155':445
'21#.#70.4.210':445
'21#.#70.95.17':445
'21#.#70.157.62':445
'21#.#70.18.145':445
'21#.#70.47.93':445
'21#.#70.198.47':445
'21#.#70.28.115':445
'21#.#70.94.43':445
'21#.#70.124.23':445
'21#.#70.80.166':139
'21#.#70.43.150':445
'21#.#70.108.63':445
'21#.#70.23.45':445
'21#.#70.189.7':139
'21#.#70.47.188':139
'21#.#70.73.225':445
'21#.#70.211.52':445
'21#.#70.179.249':445
'21#.#70.32.137':445
'21#.#70.131.15':445
'21#.#70.8.100':139
'21#.#70.121.90':139
'21#.#70.25.205':139
'21#.#70.81.91':139
'21#.#70.207.82':139
'21#.#70.147.56':139
'21#.#70.213.41':139
'21#.#70.17.216':139
'21#.#70.226.104':139
'21#.#70.248.80':139
'21#.#70.145.166':139
'21#.#70.253.29':445
'21#.#70.7.215':445
'21#.#70.36.113':445
'21#.#70.195.138':445
'21#.#70.43.239':445
'21#.#70.161.90':445
'21#.#70.53.236':445
'21#.#70.36.23':445
'21#.#70.10.25':445
'21#.#70.223.171':445
'21#.#70.191.237':445
'21#.#70.156.63':139
'21#.#70.148.213':139
'21#.#70.88.218':139
'21#.#70.87.147':139
'21#.#70.201.86':139
'21#.#70.150.73':445
'21#.#70.122.43':445
'21#.#70.50.122':139
'21#.#70.75.50':139
'21#.#70.38.231':139
'21#.#70.155.141':445
'21#.#70.47.177':445
'21#.#70.114.201':445
'21#.#70.247.149':445
'21#.#70.6.35':445
'21#.#70.87.6':445
'21#.#70.109.228':445
'21#.#70.89.66':445
'21#.#70.202.236':445
'21#.#70.89.114':445
'21#.#70.134.166':445
'21#.#70.34.208':445
'21#.#70.64.250':445
'21#.#70.62.25':445
'21#.#70.52.32':445
'21#.#70.174.208':445
'21#.#70.9.107':445
'21#.#70.81.234':445
'21#.#70.67.19':445
'21#.#70.233.208':445
'21#.#70.99.226':445
'21#.#70.208.99':445
'21#.#70.174.208':139
'21#.#70.9.107':139
'21#.#70.155.141':139
'21#.#70.161.90':139
'21#.#70.53.236':139
'21#.#70.99.226':139
'21#.#70.208.99':139
'21#.#70.62.25':139
'21#.#70.52.32':139
'21#.#70.64.250':139
'21#.#70.36.23':139
'21#.#70.195.138':139
'21#.#70.36.113':139
'21#.#70.150.73':139
'21#.#70.122.43':139
'21#.#70.253.29':139
'21#.#70.10.25':139
'21#.#70.223.171':139
'21#.#70.7.215':139
'21#.#70.43.239':139
'21#.#70.191.237':139
'21#.#70.233.208':139
'21#.#70.193.232':139
'21#.#70.16.167':139
'21#.#70.92.32':139
'21#.#70.109.228':139
'21#.#70.89.66':139
'21#.#70.38.55':139
'21#.#70.106.233':139
'21#.#70.119.106':139
'21#.#70.92.21':139
'21#.#70.93.203':139
'21#.#70.202.236':139
'21#.#70.6.35':139
'21#.#70.87.6':139
'21#.#70.34.208':139
'21#.#70.81.234':139
'21#.#70.67.19':139
'21#.#70.89.114':139
'21#.#70.134.166':139
'21#.#70.114.201':139
'21#.#70.247.149':139
'21#.#70.47.177':139
'21#.#70.92.32':445
'21#.#70.57.211':445
'21#.#70.169.16':445
'21#.#70.211.64':445
'21#.#70.84.55':139
'21#.#70.64.221':445
'21#.#70.176.154':445
'21#.#70.118.69':445
'21#.#70.237.23':445
'21#.#70.183.51':445
'21#.#70.142.19':445
'21#.#70.77.133':139
'21#.#70.238.25':139
'21#.#70.152.189':139
'21#.#70.255.198':139
'21#.#70.48.174':139
'21#.#70.102.239':139
'21#.#70.104.246':139
'21#.#70.250.18':139
'21#.#70.90.166':139
'21#.#70.164.120':139
'21#.#70.166.172':139
'21#.#70.183.95':445
'21#.#70.90.166':445
'21#.#70.104.246':445
'21#.#70.166.172':445
'21#.#70.152.189':445
'21#.#70.164.120':445
'21#.#70.196.227':139
'21#.#70.202.196':139
'21#.#70.84.55':445
'21#.#70.250.18':445
'21#.#70.77.133':445
'21#.#70.238.25':445
'21#.#70.173.121':445
'21#.#70.227.47':445
'21#.#70.122.64':445
'21#.#70.8.162':445
'21#.#70.103.128':445
'21#.#70.102.239':445
'21#.#70.255.198':445
'21#.#70.48.174':445
'21#.#70.227.177':445
'21#.#70.115.77':445
'21#.#70.50.122':445
'21#.#70.253.29':9988
'21#.#70.38.231':445
'21#.#70.148.213':445
'21#.#70.75.50':445
'21#.#70.53.236':9988
'21#.#70.99.226':9988
'21#.#70.223.171':9988
'21#.#70.191.237':9988
'21#.#70.10.25':9988
'21#.#70.156.63':445
'21#.#70.93.203':445
'21#.#70.119.106':445
'21#.#70.92.21':445
'21#.#70.193.232':445
'21#.#70.16.167':445
'21#.#70.201.86':445
'21#.#70.88.218':445
'21#.#70.87.147':445
'21#.#70.38.55':445
'21#.#70.106.233':445
'21#.#70.81.234':9988
'21#.#70.8.162':139
'21#.#70.103.128':139
'21#.#70.183.95':139
'21#.#70.176.154':139
'21#.#70.118.69':139
'21#.#70.227.177':139
'21#.#70.115.77':139
'21#.#70.227.47':139
'21#.#70.122.64':139
'21#.#70.173.121':139
'21#.#70.237.23':139
'21#.#70.87.6':9988
'21#.#70.64.221':139
'21#.#70.233.208':9988
'21#.#70.247.149':9988
'21#.#70.208.99':9988
'21#.#70.183.51':139
'21#.#70.142.19':139
'21#.#70.169.16':139
'21#.#70.211.64':139
'21#.#70.57.211':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней