Trojan.Starman.5382

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#2.248.10':139
'21#.#2.160.0':139
'21#.#2.238.79':139
'21#.#2.58.226':139
'21#.#2.99.134':139
'21#.#2.81.10':139
'21#.#2.225.209':139
'21#.#2.182.40':139
'21#.#2.111.168':445
'21#.42.75.7':445
'21#.#2.235.159':445
'21#.#2.7.222':445
'21#.#2.25.127':139
'21#.#2.125.41':139
'21#.#2.168.143':139
'21#.#2.23.173':139
'21#.#2.111.168':139
'21#.#2.7.222':139
'21#.42.75.7':139
'21#.#2.248.4':445
'21#.#2.85.73':445
'21#.#2.135.248':445
'21#.#2.150.32':445
'21#.#2.221.115':139
'21#.#2.74.122':139
'21#.#2.163.11':139
'21#.#2.14.62':139
'21#.#2.235.159':139
'21#.#2.84.90':139
'21#.#2.128.253':139
'21#.#2.185.218':139
'21#.#2.128.253':445
'21#.#2.224.80':139
'21#.#2.235.223':139
'21#.#2.154.235':139
'21#.#2.113.56':139
'21#.#2.182.40':445
'21#.#2.25.127':445
'21#.#2.250.223':139
'21#.#2.251.166':139
'21#.#2.88.72':139
'21#.#2.134.220':139
'21#.#2.80.51':139
'21#.#2.12.24':139
'21#.#2.193.103':139
'21#.#2.66.159':139
'21#.#2.23.245':139
'21#.#2.125.41':445
'21#.#2.163.11':445
'21#.#2.23.173':445
'21#.#2.14.62':445
'21#.#2.84.90':445
'21#.#2.74.122':445
'21#.#2.185.218':445
'21#.#2.221.115':445
'21#.#2.58.226':445
'21#.#2.160.0':445
'21#.#2.238.79':445
'21#.#2.168.143':445
'21#.#2.248.10':445
'21#.#2.81.10':445
'21#.#2.225.209':445
'21#.#2.99.134':445
'21#.#2.242.158':139
'21#.#2.226.103':139
'21#.#2.135.159':139
'21#.#2.158.160':139
'21#.#2.6.145':139
'21#.#2.234.97':139
'21#.#2.10.69':139
'21#.#2.32.163':139
'21#.#2.218.232':139
'21#.#2.191.223':139
'21#.#2.229.19':139
'21#.#2.13.141':139
'21#.#2.168.237':139
'21#.#2.30.15':139
'21#.#2.158.12':139
'21#.#2.145.36':139
'21#.#2.128.110':445
'21#.#2.70.201':445
'21#.#2.194.94':445
'21#.#2.195.20':445
'21#.#2.229.207':445
'21#.#2.16.135':445
'21#.#2.168.8':445
'21#.#2.96.100':445
'21#.#2.197.129':139
'21#.#2.15.91':139
'21#.#2.30.138':139
'21#.#2.33.29':139
'21#.#2.55.160':445
'21#.#2.11.211':445
'21#.#2.172.57':445
'21#.#2.46.130':139
'21#.#2.242.158':445
'21#.#2.30.15':445
'21#.#2.13.141':445
'21#.#2.168.237':445
'21#.#2.226.103':445
'21#.#2.135.159':445
'21#.#2.32.163':445
'21#.#2.158.12':445
'21#.#2.1.182':445
'21#.42.6.2':445
'21#.#2.162.30':445
'21#.#2.229.19':445
'21#.#2.218.232':445
'21#.#2.191.223':445
'21#.#2.46.130':445
'21#.#2.158.160':445
'21#.#2.150.32':139
'21#.#2.248.4':139
'21#.#2.135.248':139
'21#.#2.162.30':139
'21#.#2.1.182':139
'21#.42.6.2':139
'21#.#2.85.73':139
'21#.#2.33.29':445
'21#.#2.6.145':445
'21#.#2.234.97':445
'21#.#2.10.69':445
'21#.#2.30.138':445
'21#.#2.197.129':445
'21#.#2.15.91':445
'21#.#2.145.36':445
'21#.#2.31.152':139
'21#.#2.180.71':445
'21#.#2.153.16':445
'21#.#2.117.176':445
'21#.#2.214.144':445
'21#.#2.165.9':445
'21#.#2.131.195':445
'21#.#2.214.41':445
'21#.#2.234.195':445
'21#.#2.11.158':139
'21#.#2.87.126':139
'21#.#2.151.143':139
'21#.#2.116.139':139
'21#.#2.47.117':445
'21#.#2.21.145':139
'21#.#2.30.211':139
'21#.#2.5.221':445
'21#.#2.115.140':445
'21#.#2.30.205':445
'21#.#2.237.183':445
'21#.#2.164.27':445
'21#.#2.153.16':139
'21#.#2.117.176':139
'21#.#2.255.79':445
'21#.#2.211.239':445
'21#.#2.197.13':445
'21#.#2.196.221':445
'21#.#2.110.96':445
'21#.#2.94.117':445
'21#.#2.152.29':445
'21#.#2.243.224':445
'21#.#2.83.166':445
'21#.#2.118.148':139
'21#.#2.35.13':139
'21#.#2.21.145':445
'21#.#2.30.211':445
'21#.#2.113.248':139
'21#.#2.159.243':139
'21#.#2.243.28':139
'21#.#2.26.44':139
'21#.#2.116.139':445
'21#.#2.14.87':445
'21#.#2.104.86':445
'21#.#2.51.224':445
'21#.#2.118.148':445
'21#.#2.11.158':445
'21#.#2.87.126':445
'21#.#2.151.143':445
'21#.#2.28.198':139
'21#.#2.13.96':139
'21#.#2.67.110':139
'21#.#2.35.144':139
'21#.#2.168.227':139
'21#.#2.14.87':139
'21#.#2.104.86':139
'21#.#2.51.224':139
'21#.#2.166.35':139
'21#.#2.116.32':139
'21#.42.3.54':139
'21#.#2.132.76':139
'21#.42.32.9':139
'21#.#2.94.165':139
'21#.#2.198.94':139
'21#.#2.148.192':139
'21#.#2.154.235':445
'21#.#2.66.159':445
'21#.#2.12.24':445
'21#.#2.193.103':445
'21#.#2.113.56':445
'21#.#2.235.223':445
'21#.#2.251.166':445
'21#.#2.23.245':445
'21#.#2.31.152':445
'21#.#2.66.174':445
'21#.#2.56.66':445
'21#.#2.77.195':445
'21#.#2.134.220':445
'21#.#2.80.51':445
'21#.#2.88.72':445
'21#.#2.250.223':445
'21#.#2.146.161':139
'21#.42.1.74':139
'21#.#2.35.100':139
'21#.#2.18.206':139
'21#.#2.77.195':139
'21#.#2.66.174':139
'21#.#2.56.66':139
'21#.#2.91.213':139
'21#.#2.104.8':139
'21#.#2.12.254':139
'21#.#2.224.80':445
'21#.#2.66.143':139
'21#.#2.183.112':139
'21#.#2.222.133':139
'21#.#2.224.194':139
'21#.#2.18.206':445
'21#.#2.94.117':139
'21#.#2.196.221':139
'21#.#2.110.96':139
'21#.#2.197.13':139
'21#.#2.237.183':139
'21#.#2.211.239':139
'21#.#2.83.166':139
'21#.#2.131.195':139
'21#.#2.180.71':139
'21#.#2.47.117':139
'21#.#2.234.195':139
'21#.#2.214.144':139
'21#.#2.5.221':139
'21#.#2.214.41':139
'21#.#2.165.9':139
'21#.#2.152.29':139
'21#.#2.104.8':445
'21#.#2.224.194':445
'21#.#2.66.143':445
'21#.#2.12.254':445
'21#.#2.146.161':445
'21#.42.1.74':445
'21#.#2.35.100':445
'21#.#2.222.133':445
'21#.#2.243.224':139
'21#.#2.30.205':139
'21#.#2.115.140':139
'21#.#2.164.27':139
'21#.#2.91.213':445
'21#.#2.183.112':445
'21#.#2.255.79':139
'21#.#2.247.180':445
'21#.#2.186.247':445
'21#.#2.29.194':445
'21#.#2.180.206':445
'21#.#2.213.156':445
'21#.#2.142.179':445
'21#.#2.31.217':445
'21#.#2.249.209':445
'21#.#2.59.135':445
'21#.#2.172.110':445
'21#.#2.251.129':445
'21#.#2.137.126':445
'21#.#2.21.197':445
'21#.#2.53.76':445
'21#.#2.152.19':445
'21#.#2.190.78':445
'21#.#2.219.212':445
'21#.#2.154.177':445
'21#.#2.58.184':445
'21#.#2.212.86':445
'21#.#2.21.190':445
'21#.#2.231.53':445
'21#.#2.86.230':445
'21#.#2.103.205':445
'21#.#2.238.103':445
'21#.#2.39.187':445
'21#.#2.29.19':445
'21#.#2.26.214':445
'21#.#2.188.98':445
'21#.42.0.42':445
'21#.#2.199.104':445
'21#.#2.18.115':445
'21#.#2.213.156':9988
'21#.#2.219.254':139
'21#.#2.39.220':139
'21#.#2.29.19':9988
'21#.#2.58.184':9988
'21#.#2.188.98':9988
'21#.42.0.42':9988
'21#.#2.165.186':139
'21#.#2.10.186':139
'21#.#2.0.169':139
'21#.42.5.30':139
'21#.#2.7.171':139
'21#.#2.216.222':139
'21#.#2.8.243':139
'21#.#2.195.83':139
'21#.#2.154.177':9988
'21#.#2.146.64':445
'21#.#2.194.39':445
'21#.#2.46.68':445
'21#.#2.94.122':445
'21#.#2.16.65':445
'21#.#2.80.193':445
'21#.#2.146.237':445
'21#.#2.95.63':9988
'21#.#2.231.53':9988
'21#.#2.86.230':9988
'21#.#2.219.212':9988
'21#.#2.44.60':9988
'21#.#2.87.62':9988
'21#.#2.172.54':9988
'21#.42.8.97':9988
'21#.#2.188.98':139
'21#.42.0.42':139
'21#.#2.199.104':139
'21#.#2.103.205':139
'21#.#2.219.212':139
'21#.#2.154.177':139
'21#.#2.58.184':139
'21#.#2.26.214':139
'21#.#2.213.156':139
'21#.#2.142.179':139
'21#.#2.31.217':139
'21#.#2.190.78':139
'21#.#2.238.103':139
'21#.#2.39.187':139
'21#.#2.29.19':139
'21#.#2.212.86':139
'21#.#2.58.108':139
'21#.#2.122.56':139
'21#.42.8.97':139
'21#.#2.217.36':139
'21#.#2.172.54':139
'21#.#2.87.62':139
'21#.#2.95.63':139
'21#.#2.20.109':139
'21#.#2.21.190':139
'21#.#2.231.53':139
'21#.#2.86.230':139
'21#.#2.44.60':139
'21#.#2.48.137':139
'21#.#2.182.241':139
'21#.#2.160.183':139
'21#.#2.180.206':139
'21#.#2.172.54':445
'21#.#2.95.63':445
'21#.#2.217.36':445
'21#.#2.87.62':445
'21#.#2.146.64':139
'21#.#2.194.39':139
'21#.#2.46.68':139
'21#.#2.58.108':445
'21#.#2.182.241':445
'21#.#2.160.183':445
'21#.#2.44.60':445
'21#.#2.48.137':445
'21#.#2.122.56':445
'21#.42.8.97':445
'21#.#2.20.109':445
'21#.#2.94.122':139
'21#.#2.21.197':139
'21#.#2.53.76':139
'21#.#2.152.19':139
'21#.#2.249.209':139
'21#.#2.247.180':139
'21#.#2.186.247':139
'21#.#2.29.194':139
'21#.#2.137.126':139
'21#.#2.16.65':139
'21#.#2.80.193':139
'21#.#2.146.237':139
'21#.#2.18.115':139
'21#.#2.59.135':139
'21#.#2.172.110':139
'21#.#2.251.129':139
'21#.#2.14.40':139
'21#.#2.197.107':445
'21#.#2.172.103':445
'21#.#2.88.15':445
'21#.#2.78.60':445
'21#.#2.15.173':445
'21#.#2.171.74':445
'21#.#2.157.104':445
'21#.#2.130.87':445
'21#.#2.13.219':139
'21#.#2.59.220':139
'21#.#2.130.151':139
'21#.#2.149.99':445
'21#.#2.161.234':445
'21#.#2.1.205':445
'21#.#2.48.180':445
'21#.#2.112.130':445
'21#.#2.183.79':445
'21#.#2.234.26':445
'21#.#2.215.152':445
'21#.#2.185.107':445
'21#.#2.91.60':445
'21#.#2.34.138':445
'21#.#2.120.105':445
'21#.#2.90.219':445
'21#.#2.59.79':445
'21#.#2.129.194':445
'21#.#2.168.112':445
'21#.#2.37.219':445
'21#.#2.81.70':445
'21#.#2.94.177':445
'21#.#2.74.220':445
'21#.42.69.5':139
'21#.#2.13.219':445
'21#.42.69.5':445
'21#.#2.130.151':445
'21#.#2.59.220':445
'21#.#2.55.160':139
'21#.#2.11.211':139
'21#.#2.172.57':139
'21#.#2.75.162':445
'21#.#2.21.16':445
'21#.#2.86.107':445
'21#.#2.144.134':445
'21#.#2.4.102':445
'21#.42.7.26':445
'21#.#2.37.28':445
'21#.#2.49.45':445
'21#.#2.96.100':139
'21#.#2.37.28':139
'21#.#2.21.16':139
'21#.#2.16.135':139
'21#.#2.86.107':139
'21#.#2.75.162':139
'21#.42.7.26':139
'21#.#2.4.102':139
'21#.#2.229.207':139
'21#.#2.128.110':139
'21#.#2.70.201':139
'21#.#2.194.94':139
'21#.#2.144.134':139
'21#.#2.168.8':139
'21#.#2.195.20':139
'21#.#2.49.45':139
'21#.#2.11.113':445
'21#.#2.51.193':445
'21#.#2.14.40':445
'21#.#2.156.203':445
'21#.#2.8.243':445
'21#.#2.172.66':445
'21#.#2.7.171':445
'21#.#2.0.169':445
'21#.#2.157.150':445
'21#.#2.150.228':445
'21#.#2.147.100':445
'21#.#2.40.27':445
'21#.42.5.30':445
'21#.#2.195.83':445
'21#.#2.10.186':445
'21#.#2.216.222':445
'21#.#2.40.27':139
'21#.#2.150.228':139
'21#.#2.157.150':139
'21#.#2.156.203':139
'21#.#2.172.66':139
'21#.#2.51.193':139
'21#.#2.11.113':139
'21#.#2.147.100':139
'21#.#2.39.220':445
'21#.#2.219.254':445
'21#.#2.165.186':445
'21#.#2.71.219':139
'21#.#2.6.242':139
'21#.#2.27.145':139
'21#.#2.219.203':139
'21#.#2.6.242':445
'21#.#2.15.173':139
'21#.#2.171.74':139
'21#.#2.130.87':139
'21#.#2.157.104':139
'21#.#2.129.194':139
'21#.#2.112.130':139
'21#.#2.168.112':139
'21#.#2.1.205':139
'21#.#2.197.107':139
'21#.#2.48.180':139
'21#.#2.149.99':139
'21#.#2.172.103':139
'21#.#2.78.60':139
'21#.#2.88.15':139
'21#.#2.161.234':139
'21#.#2.37.219':139
'21#.#2.120.105':139
'21#.#2.91.60':139
'21#.#2.185.107':139
'21#.#2.34.138':139
'21#.#2.27.145':445
'21#.#2.71.219':445
'21#.#2.219.203':445
'21#.#2.183.79':139
'21#.#2.94.177':139
'21#.#2.74.220':139
'21#.#2.59.79':139
'21#.#2.81.70':139
'21#.#2.234.26':139
'21#.#2.215.152':139
'21#.#2.90.219':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней