Trojan.Starman.5081

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#43.58.112':445
'21#.#43.187.9':445
'21#.#43.126.4':445
'21#.#43.194.225':445
'21#.#43.1.99':445
'21#.#43.156.162':445
'21#.#43.123.6':445
'21#.#43.168.100':445
'21#.#43.168.168':445
'21#.#43.69.186':445
'21#.#43.207.167':445
'21#.#43.198.201':445
'21#.#43.118.132':445
'21#.#43.127.246':445
'21#.#43.177.70':445
'21#.#43.229.80':445
'21#.#43.186.244':445
'21#.#43.8.32':445
'21#.#43.63.229':445
'21#.#43.190.205':445
'21#.#43.187.237':445
'21#.#43.96.207':445
'21#.#43.190.120':445
'21#.#43.237.189':445
'21#.#43.235.55':445
'21#.#43.48.237':445
'21#.#43.48.206':445
'21#.#43.210.103':445
'21#.#43.206.243':445
'21#.#43.188.196':445
'21#.#43.93.184':445
'21#.#43.50.71':445
'21#.#43.15.213':445
'21#.#43.113.16':445
'21#.#43.170.49':445
'21#.#43.70.215':445
'21#.#43.238.253':445
'21#.#43.197.169':445
'21#.#43.97.84':445
'21#.#43.113.16':139
'21#.#43.93.184':139
'21#.#43.190.205':139
'21#.#43.15.213':139
'21#.#43.50.71':139
'21#.#43.97.84':139
'21#.#43.70.215':139
'21#.#43.170.49':139
'21#.#43.197.169':139
'21#.#43.123.6':139
'21#.#43.194.225':139
'21#.#43.58.112':139
'21#.#43.69.186':139
'21#.#43.126.4':139
'21#.#43.187.9':139
'21#.#43.168.168':139
'21#.#43.156.162':139
'21#.#43.1.99':139
'21#.#43.168.100':139
'21#.#43.238.253':139
'21#.#43.38.73':139
'21#.#43.161.199':139
'21#.#43.68.243':139
'21#.#43.49.229':139
'21#.#43.52.205':139
'21#.#43.149.236':139
'21#.#43.132.115':445
'21#.#43.15.53':139
'21#.#43.88.15':139
'21#.#43.48.206':139
'21#.#43.237.189':139
'21#.#43.187.237':139
'21#.#43.188.196':139
'21#.#43.190.120':139
'21#.#43.96.207':139
'21#.#43.206.243':139
'21#.#43.48.237':139
'21#.#43.235.55':139
'21#.#43.210.103':139
'21#.#43.162.127':139
'21#.#43.152.33':139
'21#.#43.184.2':139
'21#.#43.137.231':139
'21#.#43.178.152':139
'21#.#43.33.60':139
'21#.#43.227.221':139
'21#.#43.246.178':139
'21#.#43.191.253':139
'21#.#43.70.114':139
'21#.#43.76.107':139
'21#.#43.17.211':139
'21#.#43.94.23':139
'21#.#43.42.36':139
'21#.#43.47.17':139
'21#.#43.63.216':139
'21#.#43.145.80':139
'21#.#43.188.146':139
'21#.#43.20.49':139
'21#.#43.17.79':139
'21#.#43.122.245':445
'21#.#43.73.188':445
'21#.#43.193.180':445
'21#.#43.103.14':445
'21#.#43.74.157':445
'21#.#43.12.103':445
'21#.#43.96.151':445
'21#.#43.126.160':445
'21#.#43.2.128':445
'21#.#43.21.245':445
'21#.#43.93.59':139
'21#.#43.15.235':445
'21#.#43.167.103':139
'21#.#43.234.167':139
'21#.#43.197.156':445
'21#.#43.117.123':445
'21#.#43.4.18':445
'21#.#43.251.70':445
'21#.#43.124.11':445
'21#.#43.55.173':445
'21#.#43.44.22':445
'21#.#43.44.22':139
'21#.#43.8.113':445
'21#.#43.15.235':139
'21#.#43.124.11':139
'21#.#43.117.123':139
'21#.#43.197.156':139
'21#.#43.251.70':139
'21#.#43.55.173':139
'21#.#43.38.73':445
'21#.#43.161.199':445
'21#.#43.68.243':445
'21#.#43.49.229':445
'21#.#43.52.205':445
'21#.#43.149.236':445
'21#.#43.8.113':139
'21#.#43.15.53':445
'21#.#43.88.15':445
'21#.#43.4.18':139
'21#.#43.123.81':139
'21#.#43.191.30':139
'21#.#43.2.24':139
'21#.#43.186.109':139
'21#.#43.45.248':139
'21#.#43.113.22':139
'21#.#43.74.40':139
'21#.#43.81.14':139
'21#.#43.65.113':139
'21#.#43.96.151':139
'21#.#43.103.14':139
'21#.#43.122.245':139
'21#.#43.21.245':139
'21#.#43.193.180':139
'21#.#43.73.188':139
'21#.#43.2.128':139
'21#.#43.12.103':139
'21#.#43.74.157':139
'21#.#43.126.160':139
'21#.#43.186.244':139
'21#.#43.95.102':445
'21#.#43.54.95':445
'21#.#43.204.218':139
'21#.#43.121.204':139
'21#.#43.245.127':445
'21#.#43.71.185':445
'21#.#43.57.72':445
'21#.#43.89.112':445
'21#.#43.203.63':445
'21#.#43.170.152':139
'21#.#43.93.80':139
'21#.#43.151.234':139
'21#.#43.24.55':139
'21#.#43.233.42':139
'21#.#43.31.79':139
'21#.#43.122.120':139
'21#.#43.123.32':139
'21#.#43.54.200':139
'21#.#43.13.76':139
'21#.#43.213.225':445
'21#.#43.129.189':445
'21#.#43.81.164':445
'21#.#43.234.230':445
'21#.#43.73.106':445
'21#.#43.23.45':445
'21#.#43.191.64':445
'21#.#43.174.19':445
'21#.#43.176.103':445
'21#.#43.229.235':445
'21#.#43.124.119':445
'21#.#43.34.142':445
'21#.#43.120.48':445
'21#.#43.85.141':445
'21#.#43.48.31':445
'21#.#43.149.35':445
'21#.#43.240.10':445
'21#.#43.93.225':445
'21#.#43.211.53':445
'21#.#43.11.211':445
'21#.#43.149.35':139
'21#.#43.211.53':139
'21#.#43.34.142':139
'21#.#43.120.48':139
'21#.#43.11.211':139
'21#.#43.124.119':139
'21#.#43.234.230':139
'21#.#43.240.10':139
'21#.#43.93.225':139
'21#.#43.48.31':139
'21#.#43.245.127':139
'21#.#43.89.112':139
'21#.#43.54.95':139
'21#.#43.95.102':139
'21#.#43.203.63':139
'21#.#43.213.225':139
'21#.#43.85.141':139
'21#.#43.71.185':139
'21#.#43.57.72':139
'21#.#43.73.106':139
'21#.#43.92.95':139
'21#.#43.228.173':139
'21#.#43.64.159':139
'21#.#43.131.228':139
'21#.#43.183.7':139
'21#.#43.101.22':139
'21#.#43.121.100':139
'21#.#43.49.203':139
'21#.#43.157.96':139
'21#.#43.219.211':139
'21#.#43.23.45':139
'21#.#43.176.103':139
'21#.#43.129.189':139
'21#.#43.81.164':139
'21#.#43.229.235':139
'21#.#43.164.247':139
'21#.#43.45.149':139
'21#.#43.191.64':139
'21#.#43.174.19':139
'21#.#43.68.234':139
'21#.#43.42.224':139
'21#.#43.91.8':445
'21#.#43.152.25':445
'21#.#43.74.167':139
'21#.#43.19.99':139
'21#.#43.68.234':445
'21#.#43.103.27':139
'21#.#43.99.102':139
'21#.#43.95.122':445
'21#.#43.240.10':9988
'21#.#43.57.72':9988
'21#.#43.85.141':9988
'21#.#43.211.53':9988
'21#.#43.48.31':9988
'21#.#43.91.8':139
'21#.#43.152.25':139
'21#.#43.54.95':9988
'21#.#43.95.122':139
'21#.#43.42.224':445
'21#.#43.127.246':139
'21#.#43.207.167':139
'21#.#43.132.115':139
'21#.#43.118.132':139
'21#.#43.198.201':139
'21#.#43.63.229':139
'21#.#43.229.80':139
'21#.#43.177.70':139
'21#.#43.8.32':139
'21#.#43.115.41':445
'21#.#43.99.102':445
'21#.#43.19.99':445
'21#.#43.74.167':445
'21#.#43.103.27':445
'21#.#43.201.244':139
'21#.#43.201.244':445
'21#.#43.41.168':445
'21#.#43.41.168':139
'21#.#43.115.41':139
'21#.#43.24.55':445
'21#.#43.233.42':445
'21#.#43.101.22':445
'21#.#43.121.100':445
'21#.#43.93.80':445
'21#.#43.54.200':445
'21#.#43.13.76':445
'21#.#43.151.234':445
'21#.#43.31.79':445
'21#.#43.157.96':445
'21#.#43.219.211':445
'21#.#43.64.159':445
'21#.#43.164.247':445
'21#.#43.45.149':445
'21#.#43.131.228':445
'21#.#43.183.7':445
'21#.#43.49.203':445
'21#.#43.92.95':445
'21#.#43.228.173':445
'21#.#43.122.120':445
'21#.#43.64.159':9988
'21#.#43.176.103':9988
'21#.#43.34.142':9988
'21#.#43.92.95':9988
'21#.#43.81.164':9988
'21#.#43.131.228':9988
'21#.#43.95.102':9988
'21#.#43.228.173':9988
'21#.#43.229.235':9988
'21#.#43.213.225':9988
'21#.#43.204.218':445
'21#.#43.121.204':445
'21#.#43.123.32':445
'21#.#43.170.152':445
'21#.#43.129.189':9988
'21#.#43.245.127':9988
'21#.#43.120.48':9988
'21#.#43.23.45':9988
'21#.#43.93.225':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней