Trojan.Starman.6571

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#34.212.29':139
'21#.#34.176.129':139
'21#.#34.196.230':139
'21#.#34.95.146':139
'21#.#34.123.215':139
'21#.#34.42.19':139
'21#.#34.11.42':139
'21#.#34.212.236':139
'21#.#34.74.238':139
'21#.#34.49.53':139
'21#.#34.112.103':139
'21#.#34.237.148':139
'21#.#34.67.76':139
'21#.#34.148.114':139
'21#.#34.142.85':139
'21#.#34.114.142':139
'21#.#34.202.79':139
'21#.#34.12.61':139
'21#.#34.37.253':139
'21#.234.3.4':139
'21#.#34.91.46':139
'21#.#34.176.11':139
'21#.#34.37.253':445
'21#.#34.202.79':445
'21#.#34.91.46':445
'21#.#34.67.76':445
'21#.234.3.4':445
'21#.#34.123.215':445
'21#.#34.196.230':445
'21#.#34.95.146':445
'21#.#34.12.61':445
'21#.#34.112.103':445
'21#.#34.237.148':445
'21#.#34.18.27':139
'21#.#34.8.251':139
'21#.#34.65.73':139
'21#.#34.209.31':139
'21#.#34.186.253':139
'21#.#34.114.142':445
'21#.#34.148.114':445
'21#.#34.142.85':445
'21#.#34.51.245':139
'21#.#34.25.232':445
'21#.#34.81.77':139
'21#.#34.78.81':139
'21#.#34.4.18':139
'21#.#34.231.214':139
'21#.#34.78.225':139
'21#.#34.42.43':139
'21#.#34.231.139':445
'21#.#34.159.53':139
'21#.#34.6.78':139
'21#.#34.53.7':139
'21#.#34.41.249':139
'21#.#34.148.217':139
'21#.#34.23.24':139
'21#.#34.161.35':139
'21#.#34.43.151':139
'21#.#34.98.44':139
'21#.#34.44.33':139
'21#.#34.148.236':139
'21#.#34.74.105':139
'21#.#34.225.68':139
'21#.#34.204.201':139
'21#.#34.49.34':445
'21#.#34.81.77':445
'21#.#34.78.81':445
'21#.#34.4.18':445
'21#.#34.231.214':445
'21#.#34.78.225':445
'21#.#34.42.43':445
'21#.#34.25.232':139
'21#.#34.159.53':445
'21#.#34.6.78':445
'21#.#34.53.7':445
'21#.#34.41.249':445
'21#.#34.148.217':445
'21#.#34.23.24':445
'21#.#34.161.35':445
'21#.#34.43.151':445
'21#.#34.98.44':445
'21#.#34.44.33':445
'21#.#34.148.236':445
'21#.#34.74.105':445
'21#.#34.225.68':445
'21#.#34.204.201':445
'21#.#34.212.29':445
'21#.#34.158.223':139
'21#.#34.246.158':139
'21#.#34.224.51':445
'21#.#34.76.0':445
'21#.#34.108.11':445
'21#.#34.77.115':139
'21#.#34.172.101':139
'21#.#34.115.53':139
'21#.#34.110.246':139
'21#.#34.92.28':139
'21#.#34.31.101':445
'21#.#34.110.55':445
'21#.#34.22.193':445
'21#.#34.201.186':445
'21#.#34.27.121':445
'21#.#34.51.79':445
'21#.#34.169.183':445
'21#.#34.100.170':445
'21#.#34.92.199':445
'21#.#34.125.22':445
'21#.#34.9.125':445
'21#.#34.111.4':139
'21#.234.8.5':139
'21#.#34.116.82':139
'21#.#34.98.142':139
'21#.#34.102.125':139
'21#.#34.225.172':139
'21#.#34.138.184':139
'21#.#34.148.86':139
'21#.#34.94.183':139
'21#.#34.156.49':139
'21#.#34.230.95':139
'21#.#34.254.222':139
'21#.#34.144.175':139
'21#.#34.103.206':139
'21#.#34.174.188':139
'21#.#34.183.52':139
'21#.#34.189.30':139
'21#.#34.12.5':139
'21#.#34.110.58':139
'21#.#34.97.64':139
'21#.#34.56.224':139
'21#.#34.255.188':139
'21#.#34.147.129':139
'21#.#34.175.137':139
'21#.#34.162.54':139
'21#.#34.8.251':445
'21#.#34.51.245':445
'21#.#34.241.28':139
'21#.#34.168.46':139
'21#.#34.29.159':139
'21#.#34.124.17':139
'21#.#34.184.36':139
'21#.#34.18.27':445
'21#.#34.212.236':445
'21#.#34.42.19':445
'21#.#34.49.53':445
'21#.#34.176.129':445
'21#.#34.74.238':445
'21#.#34.186.253':445
'21#.#34.65.73':445
'21#.#34.209.31':445
'21#.#34.11.42':445
'21#.#34.176.11':445
'21#.#34.27.121':139
'21#.#34.147.129':445
'21#.#34.175.137':445
'21#.#34.162.54':445
'21#.#34.108.11':139
'21#.#34.224.51':139
'21#.#34.241.28':445
'21#.#34.168.46':445
'21#.#34.29.159':445
'21#.#34.124.17':445
'21#.#34.184.36':445
'21#.#34.76.0':139
'21#.#34.22.193':139
'21#.#34.125.22':139
'21#.#34.110.55':139
'21#.#34.51.79':139
'21#.#34.201.186':139
'21#.#34.100.170':139
'21#.#34.31.101':139
'21#.#34.169.183':139
'21#.#34.9.125':139
'21#.#34.92.199':139
'21#.#34.105.18':445
'21#.#34.142.46':445
'21#.#34.247.13':445
'21#.#34.134.127':445
'21#.#34.104.86':445
'21#.#34.186.134':445
'21#.#34.20.150':445
'21#.#34.117.108':445
'21#.#34.32.140':445
'21#.#34.129.35':445
'21#.#34.57.196':445
'21#.#34.10.227':139
'21#.#34.29.225':139
'21#.#34.122.78':139
'21#.#34.27.221':139
'21#.#34.120.86':139
'21#.#34.117.5':445
'21#.#34.91.175':445
'21#.#34.141.192':139
'21#.#34.134.214':139
'21#.#34.30.25':139
'21#.#34.109.43':445
'21#.#34.131.238':445
'21#.#34.72.221':445
'21#.#34.213.230':445
'21#.#34.173.163':445
'21#.#34.2.37':445
'21#.#34.34.129':445
'21#.#34.165.151':445
'21#.#34.164.240':445
'21#.#34.64.21':445
'21#.#34.123.124':445
'21#.#34.71.250':445
'21#.#34.16.245':445
'21#.#34.172.231':445
'21#.#34.31.230':445
'21#.#34.66.145':445
'21#.#34.77.157':445
'21#.#34.137.88':445
'21#.#34.217.105':445
'21#.#34.7.147':445
'21#.#34.102.173':445
'21#.#34.115.102':445
'21#.#34.66.145':139
'21#.#34.77.157':139
'21#.#34.109.43':139
'21#.#34.186.134':139
'21#.#34.20.150':139
'21#.#34.102.173':139
'21#.#34.115.102':139
'21#.#34.172.231':139
'21#.#34.31.230':139
'21#.#34.16.245':139
'21#.#34.117.108':139
'21#.#34.134.127':139
'21#.#34.104.86':139
'21#.#34.57.196':139
'21#.#34.117.5':139
'21#.#34.91.175':139
'21#.#34.32.140':139
'21#.#34.129.35':139
'21#.#34.142.46':139
'21#.#34.247.13':139
'21#.#34.105.18':139
'21#.#34.7.147':139
'21#.#34.66.169':139
'21#.#34.4.203':139
'21#.#34.22.196':139
'21#.#34.34.129':139
'21#.#34.165.151':139
'21#.#34.252.73':139
'21#.#34.37.150':139
'21#.#34.124.148':139
'21#.#34.174.5':139
'21#.#34.154.233':139
'21#.#34.164.240':139
'21#.#34.173.163':139
'21#.#34.2.37':139
'21#.#34.71.250':139
'21#.#34.137.88':139
'21#.#34.217.105':139
'21#.#34.64.21':139
'21#.#34.123.124':139
'21#.#34.72.221':139
'21#.#34.213.230':139
'21#.#34.131.238':139
'21#.#34.22.196':445
'21#.#34.54.249':445
'21#.#34.234.56':445
'21#.#34.205.147':445
'21#.#34.165.6':139
'21#.#34.74.149':445
'21#.#34.63.138':445
'21#.#34.69.147':445
'21#.#34.249.55':445
'21#.#34.135.14':445
'21#.#34.128.81':445
'21#.#34.244.80':139
'21#.#34.48.35':139
'21#.#34.37.138':139
'21#.#34.41.188':139
'21#.#34.132.82':139
'21#.#34.167.132':139
'21#.#34.45.241':139
'21#.#34.35.123':139
'21#.#34.87.237':139
'21#.#34.112.178':139
'21#.#34.151.113':139
'21#.#34.244.120':445
'21#.#34.87.237':445
'21#.#34.45.241':445
'21#.#34.151.113':445
'21#.#34.37.138':445
'21#.#34.112.178':445
'21#.#34.231.139':139
'21#.#34.49.34':139
'21#.#34.165.6':445
'21#.#34.35.123':445
'21#.#34.244.80':445
'21#.#34.48.35':445
'21#.#34.16.208':445
'21#.#34.168.16':445
'21#.#34.115.186':445
'21#.#34.123.244':445
'21#.#34.19.124':445
'21#.#34.167.132':445
'21#.#34.41.188':445
'21#.#34.132.82':445
'21#.#34.97.205':445
'21#.#34.82.92':445
'21#.#34.141.192':445
'21#.#34.57.196':9988
'21#.#34.30.25':445
'21#.#34.29.225':445
'21#.#34.134.214':445
'21#.#34.142.46':9988
'21#.#34.32.140':9988
'21#.#34.105.18':9988
'21#.#34.91.175':9988
'21#.#34.247.13':9988
'21#.#34.10.227':445
'21#.#34.154.233':445
'21#.#34.124.148':445
'21#.#34.174.5':445
'21#.#34.66.169':445
'21#.#34.4.203':445
'21#.#34.120.86':445
'21#.#34.122.78':445
'21#.#34.27.221':445
'21#.#34.252.73':445
'21#.#34.37.150':445
'21#.#34.109.43':9988
'21#.#34.123.244':139
'21#.#34.19.124':139
'21#.#34.244.120':139
'21#.#34.63.138':139
'21#.#34.69.147':139
'21#.#34.97.205':139
'21#.#34.82.92':139
'21#.#34.168.16':139
'21#.#34.115.186':139
'21#.#34.16.208':139
'21#.#34.249.55':139
'21#.#34.2.37':9988
'21#.#34.74.149':139
'21#.#34.115.102':9988
'21#.#34.66.145':9988
'21#.#34.172.231':9988
'21#.#34.135.14':139
'21#.#34.128.81':139
'21#.#34.234.56':139
'21#.#34.205.147':139
'21#.#34.54.249':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней