Trojan.Starman.5832

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#22.203.7':139
'21#.#22.178.11':139
'21#.#22.180.172':139
'21#.#22.207.188':139
'21#.#22.128.38':139
'21#.#22.211.44':445
'21#.#22.227.86':445
'21#.#22.45.20':139
'21#.#22.211.189':139
'21#.#22.64.247':139
'21#.#22.155.226':139
'21#.#22.61.250':139
'21#.#22.25.22':139
'21#.#22.28.72':139
'21#.#22.116.218':139
'21#.#22.22.33':139
'21#.#22.213.129':139
'21#.#22.148.42':139
'21#.#22.102.184':139
'21#.#22.79.15':139
'21#.#22.4.68':445
'21#.#22.252.60':445
'21#.#22.140.150':445
'21#.#22.8.115':445
'21#.#22.63.69':445
'21#.#22.117.221':445
'21#.#22.24.114':445
'21#.#22.23.212':445
'21#.#22.211.251':445
'21#.#22.221.23':445
'21#.#22.239.149':445
'21#.#22.205.169':445
'21#.#22.78.79':445
'21#.#22.144.59':445
'21#.#22.110.115':445
'21#.#22.91.31':445
'21#.#22.195.224':445
'21#.#22.70.57':445
'21#.#22.105.201':445
'21#.#22.238.148':445
'21#.#22.41.174':445
'21#.#22.172.41':445
'21#.#22.174.83':445
'21#.#22.116.234':445
'21#.#22.83.199':445
'21#.#22.110.115':139
'21#.#22.78.79':139
'21#.#22.144.59':139
'21#.#22.211.44':139
'21#.#22.227.86':139
'21#.#22.83.199':139
'21#.#22.174.83':139
'21#.#22.116.234':139
'21#.#22.54.164':139
'21#.#22.87.216':139
'21#.#22.54.164':445
'21#.#22.87.216':445
'21#.#22.122.210':445
'21#.#22.41.174':139
'21#.#22.172.41':139
'21#.#22.23.212':139
'21#.#22.221.23':139
'21#.#22.211.251':139
'21#.#22.4.68':139
'21#.#22.252.60':139
'21#.#22.25.162':139
'21#.#22.156.6':139
'21#.#22.162.193':139
'21#.#22.117.221':139
'21#.#22.24.114':139
'21#.#22.238.148':139
'21#.#22.70.57':139
'21#.#22.105.201':139
'21#.#22.239.149':139
'21#.#22.205.169':139
'21#.#22.63.69':139
'21#.#22.140.150':139
'21#.#22.8.115':139
'21#.#22.91.31':139
'21#.#22.195.224':139
'21#.#22.15.107':139
'21#.#22.129.79':139
'21#.#22.209.55':139
'21#.#22.24.98':139
'21#.#22.25.138':139
'21#.#22.213.98':139
'21#.#22.139.79':139
'21#.#22.56.51':139
'21#.#22.77.230':139
'21#.#22.97.174':139
'21#.#22.112.78':139
'21#.#22.10.173':139
'21#.#22.198.152':139
'21#.#22.193.158':139
'21#.#22.100.193':139
'21#.#22.196.64':139
'21#.#22.177.196':139
'21#.#22.21.15':139
'21#.#22.5.201':139
'21#.#22.151.65':139
'21#.#22.198.48':139
'21#.#22.139.233':139
'21#.#22.137.246':139
'21#.#22.22.54':139
'21#.#22.174.179':139
'21#.#22.168.215':139
'21#.#22.109.169':139
'21#.#22.250.186':139
'21#.222.7.4':139
'21#.#22.115.18':139
'21#.#22.202.162':139
'21#.#22.34.208':139
'21#.#22.116.110':139
'21#.#22.168.122':139
'21#.#22.162.225':139
'21#.#22.124.102':139
'21#.#22.29.188':139
'21#.#22.23.146':139
'21#.#22.126.102':139
'21#.#22.146.121':139
'21#.#22.207.188':445
'21#.#22.128.38':445
'21#.#22.213.129':445
'21#.#22.148.42':445
'21#.#22.22.33':445
'21#.#22.178.11':445
'21#.#22.64.247':445
'21#.#22.211.189':445
'21#.#22.180.172':445
'21#.#22.203.7':445
'21#.#22.28.72':445
'21#.#22.116.218':445
'21#.#22.156.6':445
'21#.#22.162.193':445
'21#.#22.25.162':445
'21#.#22.102.184':445
'21#.#22.79.15':445
'21#.#22.61.250':445
'21#.#22.25.22':445
'21#.#22.155.226':445
'21#.#22.37.112':445
'21#.#22.19.61':445
'21#.#22.104.233':445
'21#.#22.204.155':445
'21#.#22.175.16':445
'21#.#22.130.132':139
'21#.#22.48.126':139
'21#.#22.85.116':139
'21#.#22.49.224':445
'21#.#22.37.92':445
'21#.#22.175.16':139
'21#.#22.104.233':139
'21#.#22.204.155':139
'21#.#22.45.20':445
'21#.#22.115.17':139
'21#.#22.37.92':139
'21#.#22.115.17':445
'21#.#22.49.224':139
'21#.#22.37.112':139
'21#.#22.19.61':139
'21#.#22.50.114':445
'21#.#22.5.54':445
'21#.#22.137.50':445
'21#.#22.42.150':139
'21#.#22.114.43':445
'21#.#22.58.49':445
'21#.#22.157.72':445
'21#.#22.12.139':445
'21#.#22.69.215':445
'21#.#22.149.248':445
'21#.#22.13.181':139
'21#.#22.68.63':139
'21#.#22.212.43':139
'21#.#22.129.3':139
'21#.#22.43.129':139
'21#.#22.209.19':139
'21#.#22.188.156':139
'21#.#22.137.184':139
'21#.#22.101.250':139
'21#.#22.129.176':139
'21#.#22.49.74':445
'21#.#22.216.134':445
'21#.#22.208.178':445
'21#.#22.110.108':445
'21#.#22.81.136':445
'21#.#22.190.0':445
'21#.#22.35.170':445
'21#.#22.58.138':445
'21#.#22.94.47':445
'21#.#22.171.158':445
'21#.#22.32.146':445
'21#.#22.194.22':445
'21#.#22.69.2':445
'21#.#22.152.157':445
'21#.#22.167.151':445
'21#.#22.148.71':445
'21#.#22.64.207':445
'21#.#22.28.212':445
'21#.#22.37.194':445
'21#.#22.13.160':445
'21#.#22.194.22':139
'21#.#22.37.194':139
'21#.#22.32.146':139
'21#.#22.167.151':139
'21#.#22.69.2':139
'21#.#22.64.207':139
'21#.#22.110.108':139
'21#.#22.148.71':139
'21#.#22.13.160':139
'21#.#22.28.212':139
'21#.#22.5.54':139
'21#.#22.69.215':139
'21#.#22.137.50':139
'21#.#22.114.43':139
'21#.#22.50.114':139
'21#.#22.157.72':139
'21#.#22.152.157':139
'21#.#22.58.49':139
'21#.#22.149.248':139
'21#.#22.12.139':139
'21#.#22.183.72':139
'21#.#22.120.51':139
'21#.#22.79.117':139
'21#.#22.241.205':139
'21#.#22.184.202':139
'21#.#22.38.95':139
'21#.#22.112.82':139
'21#.#22.72.130':139
'21#.#22.99.23':139
'21#.#22.225.187':139
'21#.#22.216.134':139
'21#.#22.94.47':139
'21#.#22.49.74':139
'21#.#22.81.136':139
'21#.#22.208.178':139
'21#.#22.35.170':139
'21#.#22.83.35':139
'21#.#22.190.0':139
'21#.#22.171.158':139
'21#.#22.58.138':139
'21#.#22.59.139':139
'21#.#22.152.96':139
'21#.#22.19.9':139
'21#.#22.232.3':139
'21#.#22.135.201':139
'21#.#22.199.95':445
'21#.#22.25.229':445
'21#.#22.61.43':139
'21#.#22.73.131':139
'21#.#22.197.209':139
'21#.#22.49.248':139
'21#.#22.95.235':139
'21#.#22.160.60':139
'21#.#22.176.249':139
'21#.#22.39.234':139
'21#.#22.211.13':139
'21#.#22.11.163':139
'21#.#22.47.69':139
'21#.#22.7.109':139
'21#.#22.214.108':139
'21#.#22.19.9':445
'21#.#22.59.139':445
'21#.#22.135.201':445
'21#.#22.11.163':445
'21#.#22.232.3':445
'21#.#22.61.43':445
'21#.#22.122.210':139
'21#.#22.197.209':445
'21#.#22.152.96':445
'21#.#22.73.131':445
'21#.#22.160.60':445
'21#.#22.49.248':445
'21#.#22.39.234':445
'21#.#22.14.217':445
'21#.#22.176.249':445
'21#.#22.47.69':445
'21#.#22.211.13':445
'21#.#22.214.108':445
'21#.#22.95.235':445
'21#.#22.7.109':445
'21#.#22.212.43':445
'21#.#22.13.181':445
'21#.#22.43.129':445
'21#.#22.112.82':445
'21#.#22.129.3':445
'21#.#22.137.184':445
'21#.#22.209.19':445
'21#.#22.129.176':445
'21#.#22.68.63':445
'21#.#22.101.250':445
'21#.#22.79.117':445
'21#.#22.183.72':445
'21#.#22.184.202':445
'21#.#22.83.35':445
'21#.#22.241.205':445
'21#.#22.72.130':445
'21#.#22.38.95':445
'21#.#22.225.187':445
'21#.#22.120.51':445
'21#.#22.99.23':445
'21#.#22.79.117':9988
'21#.#22.183.72':9988
'21#.#22.184.202':9988
'21#.#22.171.158':9988
'21#.#22.35.170':9988
'21#.#22.25.229':139
'21#.#22.14.217':139
'21#.#22.199.95':139
'21#.#22.99.23':9988
'21#.#22.72.130':9988
'21#.#22.149.248':9988
'21#.#22.12.139':9988
'21#.#22.50.114':9988
'21#.#22.188.156':445
'21#.#22.42.150':445
'21#.#22.81.136':9988
'21#.#22.94.47':9988
'21#.#22.110.108':9988
'21#.#22.167.151':9988
'21#.#22.64.207':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней