Trojan.Starman.5390

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#76.123.6':445
'21#.#76.100.27':445
'21#.#76.45.150':445
'21#.#76.110.34':445
'21#.#76.176.110':445
'21#.#76.204.114':445
'21#.#76.182.203':445
'21#.#76.100.70':445
'21#.#76.152.131':445
'21#.#76.50.125':139
'21#.#76.124.253':139
'21#.#76.96.111':139
'21#.#76.91.50':139
'21#.#76.221.175':445
'21#.#76.255.153':445
'21#.#76.253.54':139
'21#.#76.55.0':139
'21#.#76.7.44':445
'21#.#76.124.150':445
'21#.#76.244.211':445
'21#.#76.158.109':445
'21#.#76.9.245':445
'21#.#76.255.153':139
'21#.#76.43.226':445
'21#.#76.192.7':445
'21#.#76.194.21':445
'21#.#76.137.233':445
'21#.#76.108.214':445
'21#.#76.70.97':445
'21#.#76.189.106':445
'21#.#76.151.193':445
'21#.#76.64.11':445
'21#.#76.214.13':445
'21#.#76.101.159':445
'21#.#76.50.125':445
'21#.#76.91.50':445
'21#.#76.0.245':445
'21#.#76.96.111':445
'21#.#76.55.0':445
'21#.#76.125.82':139
'21#.#76.253.54':445
'21#.#76.124.253':445
'21#.#76.14.126':445
'21#.#76.8.180':445
'21#.#76.68.192':445
'21#.#76.130.232':445
'21#.#76.218.36':445
'21#.#76.46.133':445
'21#.#76.234.118':445
'21#.#76.27.245':445
'21#.#76.47.199':445
'21#.#76.27.245':139
'21#.#76.47.199':139
'21#.#76.8.180':139
'21#.#76.68.192':139
'21#.#76.0.245':139
'21#.#76.14.126':139
'21#.#76.46.133':139
'21#.#76.234.118':139
'21#.#76.20.24':139
'21#.#76.30.243':139
'21#.#76.209.221':139
'21#.#76.86.106':139
'21#.#76.186.79':139
'21#.#76.218.36':139
'21#.#76.130.232':139
'21#.#76.221.103':139
'21#.#76.103.217':139
'21#.#76.221.175':139
'21#.#76.16.166':445
'21#.#76.108.5':445
'21#.#76.131.46':445
'21#.#76.37.109':445
'21#.#76.251.125':139
'21#.#76.141.67':139
'21#.#76.6.152':445
'21#.#76.168.233':445
'21#.#76.106.63':445
'21#.#76.135.150':445
'21#.#76.48.219':445
'21#.#76.32.157':445
'21#.#76.227.14':445
'21#.#76.44.70':445
'21#.#76.69.190':445
'21#.#76.195.190':445
'21#.#76.98.24':445
'21#.#76.195.190':139
'21#.#76.98.24':139
'21#.#76.227.14':139
'21#.#76.135.150':139
'21#.#76.106.63':139
'21#.#76.131.46':139
'21#.#76.44.70':139
'21#.#76.69.190':139
'21#.#76.48.219':139
'21#.#76.152.228':139
'21#.#76.43.187':139
'21#.#76.46.39':139
'21#.#76.156.184':139
'21#.#76.32.157':139
'21#.#76.155.103':139
'21#.#76.114.157':139
'21#.#76.78.47':139
'21#.#76.108.214':139
'21#.#76.189.106':139
'21#.#76.204.114':139
'21#.#76.137.233':139
'21#.#76.151.193':139
'21#.#76.64.11':139
'21#.#76.214.13':139
'21#.#76.101.159':139
'21#.#76.182.203':139
'21#.#76.110.34':139
'21#.#76.123.6':139
'21#.#76.152.131':139
'21#.#76.45.150':139
'21#.#76.176.110':139
'21#.#76.100.27':139
'21#.#76.100.70':139
'21#.#76.70.97':139
'21#.#76.141.67':445
'21#.#76.152.228':445
'21#.#76.46.39':445
'21#.#76.156.184':445
'21#.#76.78.47':445
'21#.#76.155.103':445
'21#.#76.43.187':445
'21#.#76.114.157':445
'21#.#76.251.125':445
'21#.#76.192.7':139
'21#.#76.7.44':139
'21#.#76.194.21':139
'21#.#76.158.109':139
'21#.#76.244.211':139
'21#.#76.124.150':139
'21#.#76.43.226':139
'21#.#76.9.245':139
'21#.#76.232.16':445
'21#.#76.173.19':445
'21#.#76.160.202':445
'21#.#76.65.29':445
'21#.#76.108.239':445
'21#.#76.8.54':445
'21#.#76.103.20':445
'21#.#76.117.146':445
'21#.#76.202.160':445
'21#.#76.4.23':445
'21#.#76.147.203':445
'21#.#76.238.69':445
'21#.#76.149.139':445
'21#.#76.186.86':445
'21#.#76.211.186':445
'21#.#76.177.160':445
'21#.#76.206.131':445
'21#.#76.4.23':139
'21#.#76.206.131':139
'21#.#76.9.85':139
'21#.#76.177.160':139
'21#.#76.202.160':139
'21#.#76.160.202':139
'21#.#76.186.86':139
'21#.#76.211.186':139
'21#.#76.147.203':139
'21#.#76.128.145':139
'21#.#76.224.168':139
'21#.#76.1.30':139
'21#.#76.87.173':139
'21#.#76.238.69':139
'21#.#76.225.201':139
'21#.#76.149.139':139
'21#.#76.14.91':139
'21#.#76.74.128':139
'21#.#76.31.137':139
'21#.#76.216.127':139
'21#.#76.26.99':139
'21#.#76.190.90':139
'21#.#76.91.36':139
'21#.#76.14.76':139
'21#.#76.45.157':139
'21#.#76.253.215':139
'21#.#76.204.84':139
'21#.#76.23.55':139
'21#.#76.244.159':139
'21#.#76.214.63':139
'21#.#76.17.51':139
'21#.#76.72.20':139
'21#.#76.54.108':139
'21#.#76.221.120':139
'21#.#76.128.145':445
'21#.#76.224.168':445
'21#.#76.9.85':445
'21#.#76.49.215':139
'21#.#76.225.201':445
'21#.#76.14.91':445
'21#.#76.87.173':445
'21#.#76.1.30':445
'21#.#76.161.50':139
'21#.#76.107.144':139
'21#.#76.115.70':139
'21#.#76.209.169':139
'21#.#76.195.134':139
'21#.#76.15.133':139
'21#.#76.133.161':139
'21#.#76.164.44':139
'21#.#76.45.15':139
'21#.#76.65.29':139
'21#.#76.80.29':139
'21#.#76.83.248':139
'21#.#76.187.68':139
'21#.#76.140.79':139
'21#.#76.176.82':139
'21#.#76.200.122':139
'21#.#76.77.241':139
'21#.#76.233.209':139
'21#.#76.27.127':139
'21#.#76.22.12':139
'21#.#76.148.87':139
'21#.#76.108.145':139
'21#.#76.61.178':139
'21#.#76.156.62':139
'21#.#76.72.36':139
'21#.#76.88.110':139
'21#.#76.50.105':139
'21#.#76.186.79':445
'21#.#76.30.243':445
'21#.#76.125.82':445
'21#.#76.86.106':445
'21#.#76.221.103':445
'21#.#76.20.24':445
'21#.#76.103.217':445
'21#.#76.209.221':445
'21#.#76.20.163':139
'21#.#76.145.93':139
'21#.#76.239.19':139
'21#.#76.69.15':139
'21#.#76.77.135':139
'21#.#76.189.20':139
'21#.#76.157.44':139
'21#.#76.9.17':139
'21#.#76.25.22':139
'21#.#76.148.87':445
'21#.#76.187.68':445
'21#.#76.61.178':445
'21#.#76.50.105':445
'21#.#76.156.62':445
'21#.#76.88.110':445
'21#.#76.27.127':445
'21#.#76.72.36':445
'21#.#76.22.12':445
'21#.#76.103.20':139
'21#.#76.117.146':139
'21#.#76.173.19':139
'21#.#76.232.16':139
'21#.#76.69.123':445
'21#.#76.108.145':445
'21#.#76.108.239':139
'21#.#76.8.54':139
'21#.#76.200.122':445
'21#.#76.80.29':445
'21#.#76.83.248':445
'21#.#76.239.19':445
'21#.#76.77.241':445
'21#.#76.69.123':139
'21#.#76.20.163':445
'21#.#76.233.209':445
'21#.#76.77.135':445
'21#.#76.25.22':445
'21#.#76.145.93':445
'21#.#76.140.79':445
'21#.#76.9.17':445
'21#.#76.176.82':445
'21#.#76.189.20':445
'21#.#76.69.15':445
'21#.#76.157.44':445
'21#.#76.6.152':139
'21#.#76.47.175':445
'21#.#76.87.143':445
'21#.#76.206.194':445
'21#.#76.12.224':445
'21#.#76.217.142':445
'21#.#76.141.62':445
'21#.#76.86.33':445
'21#.#76.72.123':445
'21#.#76.232.193':445
'21#.#76.8.239':445
'21#.#76.218.98':445
'21#.#76.7.20':9988
'21#.#76.81.46':445
'21#.#76.122.206':445
'21#.#76.205.213':445
'21#.#76.98.82':445
'21#.#76.60.78':445
'21#.#76.201.249':445
'21#.#76.249.67':445
'21#.#76.7.181':445
'21#.#76.171.239':445
'21#.#76.22.62':445
'21#.#76.113.237':445
'21#.#76.162.15':445
'21#.#76.39.134':445
'21#.#76.164.130':445
'21#.#76.71.165':445
'21#.#76.169.15':445
'21#.#76.215.50':445
'21#.#76.13.28':445
'21#.#76.226.104':445
'21#.#76.104.250':445
'21#.#76.176.39':445
'21#.#76.38.226':445
'21#.#76.26.160':139
'21#.#76.223.184':139
'21#.#76.40.133':139
'21#.#76.138.151':139
'21#.#76.82.200':139
'21#.#76.200.31':139
'21#.#76.202.52':139
'21#.#76.201.82':139
'21#.#76.187.186':139
'21#.#76.135.162':139
'21#.#76.54.66':139
'21#.#76.137.143':139
'21#.#76.112.183':139
'21#.#76.151.203':139
'21#.#76.204.34':139
'21#.#76.18.229':139
'21#.#76.228.151':139
'21#.#76.150.19':9988
'21#.#76.216.231':9988
'21#.#76.174.6':9988
'21#.#76.215.7':9988
'21#.#76.10.46':9988
'21#.#76.46.93':9988
'21#.#76.50.60':9988
'21#.#76.125.247':9988
'21#.#76.133.194':9988
'21#.#76.205.192':139
'21#.#76.228.176':139
'21#.#76.135.133':139
'21#.#76.145.55':139
'21#.#76.71.165':9988
'21#.#76.162.15':9988
'21#.#76.31.27':139
'21#.#76.27.82':139
'21#.#76.133.194':445
'21#.#76.249.67':139
'21#.#76.162.15':139
'21#.#76.171.239':139
'21#.#76.201.249':139
'21#.#76.113.237':139
'21#.#76.133.194':139
'21#.#76.39.134':139
'21#.#76.22.62':139
'21#.#76.7.181':139
'21#.#76.169.15':139
'21#.#76.176.39':139
'21#.#76.13.28':139
'21#.#76.71.165':139
'21#.#76.104.250':139
'21#.#76.164.130':139
'21#.#76.38.226':139
'21#.#76.226.104':139
'21#.#76.10.46':139
'21#.#76.46.93':139
'21#.#76.147.45':139
'21#.#76.125.247':139
'21#.#76.167.84':139
'21#.#76.7.20':139
'21#.#76.162.8':139
'21#.#76.190.37':139
'21#.#76.84.44':139
'21#.#76.215.7':139
'21#.#76.150.19':139
'21#.#76.174.6':139
'21#.#76.164.14':139
'21#.#76.50.60':139
'21#.#76.91.239':139
'21#.#76.216.231':139
'21#.#76.4.131':139
'21#.#76.10.46':445
'21#.#76.46.93':445
'21#.#76.147.45':445
'21#.#76.125.247':445
'21#.#76.167.84':445
'21#.#76.7.20':445
'21#.#76.162.8':445
'21#.#76.190.37':445
'21#.#76.84.44':445
'21#.#76.215.7':445
'21#.#76.150.19':445
'21#.#76.174.6':445
'21#.#76.164.14':445
'21#.#76.50.60':445
'21#.#76.91.239':445
'21#.#76.216.231':445
'21#.#76.4.131':445
'21#.#76.87.143':139
'21#.#76.86.33':139
'21#.#76.12.224':139
'21#.#76.47.175':139
'21#.#76.141.62':139
'21#.#76.215.50':139
'21#.#76.72.123':139
'21#.#76.217.142':139
'21#.#76.206.194':139
'21#.#76.218.98':139
'21#.#76.98.82':139
'21#.#76.81.46':139
'21#.#76.8.239':139
'21#.#76.205.213':139
'21#.#76.232.193':139
'21#.#76.60.78':139
'21#.#76.122.206':139
'21#.#76.220.171':139
'21#.#76.132.64':139
'21#.#76.75.172':139
'21#.#76.1.64':139
'21#.#76.79.220':139
'21#.#76.66.148':139
'21#.#76.60.30':139
'21#.#76.78.230':139
'21#.#76.59.47':139
'21#.#76.39.127':139
'21#.#76.244.191':139
'21#.#76.97.78':139
'21#.#76.24.25':139
'21#.#76.72.214':139
'21#.#76.169.205':139
'21#.#76.8.37':139
'21#.#76.62.179':139
'21#.#76.60.68':445
'21#.#76.66.165':445
'21#.#76.162.228':445
'21#.#76.40.66':445
'21#.#76.1.113':445
'21#.#76.153.19':445
'21#.#76.119.239':445
'21#.#76.83.161':445
'21#.#76.21.5':445
'21#.#76.127.10':139
'21#.#76.241.102':139
'21#.#76.148.113':139
'21#.#76.194.179':139
'21#.#76.110.189':139
'21#.#76.186.191':445
'21#.#76.65.204':139
'21#.#76.70.110':139
'21#.#76.8.37':445
'21#.#76.169.205':445
'21#.#76.39.127':445
'21#.#76.244.191':445
'21#.#76.59.47':445
'21#.#76.75.172':445
'21#.#76.62.179':445
'21#.#76.72.214':445
'21#.#76.24.25':445
'21#.#76.134.211':445
'21#.#76.37.109':139
'21#.#76.108.5':139
'21#.#76.16.166':139
'21#.#76.20.164':445
'21#.#76.97.78':445
'21#.#76.168.233':139
'21#.#76.24.108':445
'21#.#76.65.204':445
'21#.#76.70.110':445
'21#.#76.241.102':445
'21#.#76.127.10':445
'21#.#76.24.108':139
'21#.#76.20.164':139
'21#.#76.110.189':445
'21#.#76.134.211':139
'21#.#76.194.179':445
'21#.#76.132.64':445
'21#.#76.60.30':445
'21#.#76.220.171':445
'21#.#76.1.64':445
'21#.#76.66.148':445
'21#.#76.148.113':445
'21#.#76.78.230':445
'21#.#76.79.220':445
'21#.#76.233.175':445
'21#.#76.18.229':445
'21#.#76.228.151':445
'21#.#76.135.162':445
'21#.#76.54.66':445
'21#.#76.187.186':445
'21#.#76.40.133':445
'21#.#76.151.203':445
'21#.#76.204.34':445
'21#.#76.112.183':445
'21#.#76.174.95':139
'21#.#76.4.229':445
'21#.#76.119.94':139
'21#.#76.94.227':139
'21#.#76.137.143':445
'21#.#76.138.75':445
'21#.#76.142.130':445
'21#.#76.185.34':445
'21#.#76.31.27':445
'21#.#76.27.82':445
'21#.#76.228.176':445
'21#.#76.205.192':445
'21#.#76.138.75':139
'21#.#76.185.34':139
'21#.#76.4.229':139
'21#.#76.142.130':139
'21#.#76.145.55':445
'21#.#76.202.52':445
'21#.#76.223.184':445
'21#.#76.138.151':445
'21#.#76.26.160':445
'21#.#76.200.31':445
'21#.#76.135.133':445
'21#.#76.201.82':445
'21#.#76.82.200':445
'21#.#76.174.95':445
'21#.#76.94.227':445
'21#.#76.37.185':445
'21#.#76.119.94':445
'21#.#76.162.228':139
'21#.#76.21.5':139
'21#.#76.186.191':139
'21#.#76.40.66':139
'21#.#76.37.144':445
'21#.#76.102.85':445
'21#.#76.5.125':445
'21#.#76.67.219':445
'21#.#76.208.195':445
'21#.#76.105.37':445
'21#.#76.75.41':445
'21#.#76.136.214':445
'21#.#76.239.92':445
'21#.#76.37.185':139
'21#.#76.37.144':139
'21#.#76.102.85':139
'21#.#76.105.37':139
'21#.#76.239.92':139
'21#.#76.75.41':139
'21#.#76.5.125':139
'21#.#76.136.214':139
'21#.#76.208.195':139
'21#.#76.119.239':139
'21#.#76.153.19':139
'21#.#76.60.68':139
'21#.#76.66.165':139
'21#.#76.233.175':139
'21#.#76.67.219':139
'21#.#76.83.161':139
'21#.#76.1.113':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней