Trojan.Starman.5999

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#6.58.129':139
'21#.#6.111.190':139
'21#.#6.129.168':139
'21#.#6.135.85':139
'21#.#6.46.240':139
'21#.#6.255.1':139
'21#.56.9.61':139
'21#.#6.215.84':139
'21#.#6.179.1':139
'21#.#6.94.115':139
'21#.#6.119.130':139
'21#.#6.103.195':139
'21#.#6.41.104':139
'21#.#6.120.122':139
'21#.#6.206.60':139
'21#.56.3.96':139
'21#.#6.57.203':139
'21#.#6.86.164':139
'21#.#6.8.104':139
'21#.#6.125.41':139
'21#.#6.225.124':139
'21#.#6.234.35':139
'21#.#6.103.195':445
'21#.#6.41.104':445
'21#.#6.120.122':445
'21#.#6.206.60':445
'21#.56.3.96':445
'21#.#6.57.203':445
'21#.#6.86.164':445
'21#.#6.8.104':445
'21#.#6.125.41':445
'21#.#6.225.124':445
'21#.#6.184.6':445
'21#.#6.17.78':139
'21#.#6.92.234':139
'21#.#6.82.43':139
'21#.#6.200.126':139
'21#.#6.206.98':139
'21#.#6.84.220':445
'21#.56.0.57':445
'21#.#6.32.143':445
'21#.#6.77.36':139
'21#.#6.219.30':445
'21#.#6.184.6':139
'21#.#6.119.134':139
'21#.#6.56.235':139
'21#.#6.32.94':139
'21#.#6.145.196':139
'21#.#6.146.197':139
'21#.#6.184.10':139
'21#.#6.129.206':139
'21#.#6.253.158':139
'21#.#6.156.48':139
'21#.#6.158.155':139
'21#.#6.167.54':139
'21#.#6.237.212':139
'21#.#6.81.213':139
'21#.#6.78.113':445
'21#.#6.96.201':445
'21#.#6.113.96':445
'21#.#6.151.253':139
'21#.#6.159.230':139
'21#.#6.253.185':139
'21#.#6.155.247':139
'21#.#6.185.181':139
'21#.#6.237.212':445
'21#.#6.253.158':445
'21#.#6.184.10':445
'21#.#6.158.155':445
'21#.#6.56.235':445
'21#.#6.156.48':445
'21#.#6.84.220':139
'21#.56.0.57':139
'21#.#6.32.143':139
'21#.#6.129.206':445
'21#.#6.219.30':139
'21#.#6.119.134':445
'21#.#6.253.185':445
'21#.#6.151.253':445
'21#.#6.185.181':445
'21#.#6.81.213':445
'21#.#6.155.247':445
'21#.#6.146.197':445
'21#.#6.32.94':445
'21#.#6.145.196':445
'21#.#6.159.230':445
'21#.#6.167.54':445
'21#.#6.37.229':139
'21#.#6.205.244':139
'21#.#6.70.233':139
'21#.#6.254.94':139
'21#.#6.107.79':139
'21#.#6.39.81':139
'21#.#6.111.239':139
'21#.#6.95.82':139
'21#.#6.117.205':139
'21#.#6.50.17':139
'21#.#6.194.253':139
'21#.#6.114.225':445
'21#.#6.73.115':445
'21#.#6.102.182':445
'21#.#6.2.135':445
'21#.#6.130.58':445
'21#.#6.92.25':445
'21#.#6.56.65':445
'21#.#6.25.174':445
'21#.#6.173.73':445
'21#.#6.154.182':445
'21#.#6.7.152':139
'21#.#6.157.132':139
'21#.#6.167.156':139
'21#.#6.104.38':139
'21#.#6.243.190':139
'21#.#6.77.178':139
'21#.#6.52.153':139
'21#.#6.46.111':139
'21#.#6.236.22':139
'21#.#6.124.167':139
'21#.#6.99.140':139
'21#.#6.162.28':139
'21#.56.8.0':139
'21#.#6.9.113':139
'21#.#6.35.60':139
'21#.#6.129.13':139
'21#.#6.96.21':139
'21#.#6.1.164':139
'21#.#6.43.197':139
'21#.#6.221.239':139
'21#.#6.193.254':139
'21#.#6.115.199':139
'21#.#6.36.40':445
'21#.#6.82.43':445
'21#.#6.17.78':445
'21#.#6.206.98':445
'21#.#6.234.35':445
'21#.#6.200.126':445
'21#.56.9.95':139
'21#.#6.6.184':139
'21#.#6.4.231':139
'21#.#6.92.234':445
'21#.#6.77.36':445
'21#.56.9.61':445
'21#.#6.129.168':445
'21#.#6.58.129':445
'21#.#6.46.240':445
'21#.#6.119.130':445
'21#.#6.135.85':445
'21#.#6.215.84':445
'21#.#6.255.1':445
'21#.#6.94.115':445
'21#.#6.111.190':445
'21#.#6.179.1':445
'21#.#6.221.76':139
'21#.#6.4.231':445
'21#.56.9.95':445
'21#.#6.56.65':139
'21#.#6.25.174':139
'21#.#6.92.25':139
'21#.#6.244.219':445
'21#.#6.189.32':445
'21#.56.32.0':445
'21#.#6.6.184':445
'21#.#6.221.76':445
'21#.#6.154.182':139
'21#.#6.36.40':139
'21#.#6.2.135':139
'21#.#6.189.32':139
'21#.56.32.0':139
'21#.#6.244.219':139
'21#.#6.73.115':139
'21#.#6.173.73':139
'21#.#6.114.225':139
'21#.#6.130.58':139
'21#.#6.102.182':139
'21#.56.7.8':445
'21#.#6.81.131':445
'21#.#6.94.223':445
'21#.#6.24.58':445
'21#.#6.19.26':445
'21#.#6.184.148':445
'21#.#6.61.184':445
'21#.#6.116.161':445
'21#.#6.241.48':445
'21#.#6.197.11':445
'21#.#6.171.108':445
'21#.#6.143.220':139
'21#.#6.196.96':139
'21#.#6.107.145':139
'21#.#6.238.61':139
'21#.#6.39.56':139
'21#.#6.49.156':445
'21#.#6.43.14':445
'21#.#6.158.247':445
'21#.#6.174.23':139
'21#.#6.137.111':139
'21#.#6.64.107':445
'21#.#6.235.244':445
'21#.#6.33.209':445
'21#.#6.95.208':445
'21#.#6.144.207':445
'21#.#6.253.84':445
'21#.#6.113.69':445
'21#.#6.238.205':445
'21#.#6.2.215':445
'21#.#6.182.131':445
'21#.#6.100.239':445
'21#.#6.154.64':445
'21#.#6.25.84':445
'21#.#6.81.205':445
'21#.#6.32.95':445
'21#.#6.45.13':445
'21#.#6.166.156':445
'21#.56.37.6':445
'21#.#6.48.113':445
'21#.#6.82.34':445
'21#.#6.89.228':445
'21#.#6.52.32':445
'21#.#6.147.133':139
'21#.#6.64.107':139
'21#.#6.45.13':139
'21#.#6.61.184':139
'21#.#6.116.161':139
'21#.#6.184.148':139
'21#.#6.81.205':139
'21#.#6.89.228':139
'21#.#6.25.84':139
'21#.#6.166.156':139
'21#.#6.32.95':139
'21#.#6.197.11':139
'21#.#6.171.108':139
'21#.#6.24.58':139
'21#.#6.43.14':139
'21#.#6.49.156':139
'21#.#6.158.247':139
'21#.#6.81.131':139
'21#.#6.241.48':139
'21#.56.7.8':139
'21#.#6.19.26':139
'21#.#6.94.223':139
'21#.#6.52.32':139
'21#.#6.69.192':139
'21#.#6.247.210':139
'21#.#6.238.205':139
'21#.#6.2.215':139
'21#.#6.113.69':139
'21#.#6.166.197':139
'21#.#6.232.128':139
'21#.#6.171.190':139
'21#.#6.72.48':139
'21#.#6.114.201':139
'21#.#6.100.239':139
'21#.#6.154.64':139
'21#.#6.144.207':139
'21#.#6.48.113':139
'21#.#6.82.34':139
'21#.56.37.6':139
'21#.#6.33.209':139
'21#.#6.182.131':139
'21#.#6.235.244':139
'21#.#6.253.84':139
'21#.#6.95.208':139
'21#.#6.204.186':445
'21#.#6.13.32':445
'21#.#6.186.107':445
'21#.#6.113.96':139
'21#.#6.78.113':139
'21#.#6.27.23':445
'21#.#6.123.204':445
'21#.#6.141.238':445
'21#.#6.165.204':445
'21#.#6.222.108':445
'21#.#6.96.201':139
'21#.#6.94.60':139
'21#.#6.190.46':139
'21#.#6.234.18':139
'21#.#6.35.54':139
'21#.#6.128.80':139
'21#.#6.210.211':139
'21#.#6.149.110':139
'21#.#6.35.232':139
'21#.#6.241.189':139
'21#.#6.12.241':139
'21#.#6.76.71':445
'21#.#6.94.60':445
'21#.#6.190.46':445
'21#.#6.234.18':445
'21#.#6.35.54':445
'21#.#6.128.80':445
'21#.#6.210.211':445
'21#.#6.149.110':445
'21#.#6.35.232':445
'21#.#6.241.189':445
'21#.#6.12.241':445
'21#.#6.171.3':445
'21#.#6.75.198':445
'21#.#6.65.21':445
'21#.#6.26.187':445
'21#.#6.121.61':445
'21#.#6.194.72':445
'21#.#6.35.69':445
'21#.#6.167.122':445
'21#.#6.152.104':445
'21#.#6.8.232':445
'21#.#6.105.8':445
'21#.#6.171.3':139
'21#.#6.137.111':445
'21#.#6.49.156':9988
'21#.#6.174.23':445
'21#.#6.143.220':445
'21#.#6.196.96':445
'21#.#6.89.228':9988
'21#.#6.82.34':9988
'21#.#6.64.107':9988
'21#.#6.158.247':9988
'21#.#6.43.14':9988
'21#.#6.107.145':445
'21#.#6.114.201':445
'21#.#6.171.190':445
'21#.#6.72.48':445
'21#.#6.69.192':445
'21#.#6.247.210':445
'21#.#6.238.61':445
'21#.#6.39.56':445
'21#.#6.147.133':445
'21#.#6.166.197':445
'21#.#6.232.128':445
'21#.56.37.6':9988
'21#.#6.75.198':139
'21#.#6.65.21':139
'21#.#6.26.187':139
'21#.#6.121.61':139
'21#.#6.194.72':139
'21#.#6.35.69':139
'21#.#6.167.122':139
'21#.#6.152.104':139
'21#.#6.8.232':139
'21#.#6.105.8':139
'21#.#6.76.71':139
'21#.#6.204.186':139
'21#.#6.165.204':139
'21#.#6.186.107':139
'21#.#6.48.113':9988
'21#.#6.144.207':9988
'21#.#6.27.23':139
'21#.#6.123.204':139
'21#.#6.141.238':139
'21#.#6.13.32':139
'21#.#6.222.108':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней