Trojan.Starman.6015

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#80.166.105':445
'22#.#80.4.137':445
'22#.#80.239.146':445
'22#.#80.10.8':445
'22#.#80.15.74':445
'22#.#80.251.192':445
'22#.#80.128.252':445
'22#.#80.214.100':445
'22#.#80.207.188':445
'22#.#80.69.32':445
'22#.#80.8.57':445
'22#.#80.49.27':445
'22#.#80.76.246':445
'22#.#80.171.196':445
'22#.#80.59.49':445
'22#.#80.204.27':445
'22#.#80.67.182':445
'22#.#80.45.57':445
'22#.#80.183.36':445
'22#.#80.46.98':445
'22#.#80.47.217':445
'22#.#80.73.129':445
'22#.#80.20.2':139
'22#.#80.187.219':139
'22#.#80.212.38':139
'22#.#80.180.29':139
'22#.#80.156.48':139
'22#.#80.206.131':139
'22#.#80.29.34':139
'22#.#80.28.120':139
'22#.#80.186.26':139
'22#.#80.111.133':139
'22#.#80.186.166':445
'22#.#80.8.97':139
'22#.#80.80.224':139
'22#.#80.152.88':445
'22#.#80.134.73':445
'22#.#80.165.35':445
'22#.#80.80.224':445
'22#.#80.187.118':445
'22#.#80.8.97':445
'22#.#80.187.118':139
'22#.#80.186.166':139
'22#.#80.49.64':445
'22#.#80.69.32':139
'22#.#80.214.100':139
'22#.#80.207.188':139
'22#.#80.166.105':139
'22#.#80.4.137':139
'22#.#80.134.73':139
'22#.#80.165.35':139
'22#.#80.73.129':139
'22#.#80.251.192':139
'22#.#80.128.252':139
'22#.#80.239.146':139
'22#.#80.47.217':139
'22#.#80.183.36':139
'22#.#80.46.98':139
'22#.#80.49.27':139
'22#.#80.76.246':139
'22#.#80.10.8':139
'22#.#80.15.74':139
'22#.#80.8.57':139
'22#.#80.67.182':139
'22#.#80.45.57':139
'22#.#80.152.88':139
'22#.#80.10.49':445
'22#.#80.120.4':445
'22#.#80.49.3':445
'22#.#80.169.247':445
'22#.#80.29.178':445
'22#.#80.112.133':445
'22#.#80.6.182':445
'22#.#80.57.37':445
'22#.#80.187.192':445
'22#.#80.148.133':445
'22#.#80.76.3':445
'22#.#80.76.41':445
'22#.#80.89.150':445
'22#.#80.67.114':445
'22#.#80.17.106':445
'22#.#80.237.70':445
'22#.#80.154.154':445
'22#.#80.58.149':445
'22#.#80.220.77':445
'22#.#80.165.31':445
'22#.#80.29.57':445
'22#.#80.188.242':139
'22#.#80.109.64':445
'22#.#80.121.174':445
'22#.#80.182.36':445
'22#.#80.62.13':445
'22#.#80.139.170':445
'22#.#80.31.54':445
'22#.#80.141.33':445
'22#.#80.217.243':445
'22#.#80.24.73':445
'22#.#80.49.99':445
'22#.#80.93.213':445
'22#.#80.161.36':445
'22#.#80.55.183':445
'22#.#80.188.242':445
'22#.#80.206.131':445
'22#.#80.29.34':445
'22#.#80.91.224':445
'22#.#80.104.80':445
'22#.#80.174.127':445
'22#.#80.144.164':445
'22#.#80.127.206':445
'22#.#80.5.177':445
'22#.#80.46.182':445
'22#.#80.76.151':445
'22#.#80.108.231':445
'22#.#80.248.147':445
'22#.#80.87.224':445
'22#.#80.211.168':139
'22#.#80.139.179':139
'22#.#80.231.193':139
'22#.#80.58.20':445
'22#.#80.21.120':139
'22#.#80.147.146':445
'22#.#80.19.82':445
'22#.#80.246.118':445
'22#.#80.8.188':445
'22#.#80.198.241':445
'22#.#80.79.19':445
'22#.#80.202.168':445
'22#.#80.146.117':445
'22#.#80.186.152':445
'22#.#80.205.251':445
'22#.#80.38.42':445
'22#.#80.28.120':445
'22#.#80.49.99':139
'22#.#80.217.243':139
'22#.#80.24.73':139
'22#.#80.109.64':139
'22#.#80.121.174':139
'22#.#80.198.241':139
'22#.#80.79.19':139
'22#.#80.5.177':139
'22#.#80.31.54':139
'22#.#80.141.33':139
'22#.#80.182.36':139
'22#.#80.127.206':139
'22#.#80.174.127':139
'22#.#80.144.164':139
'22#.#80.161.36':139
'22#.#80.55.183':139
'22#.#80.62.13':139
'22#.#80.139.170':139
'22#.#80.93.213':139
'22#.#80.91.224':139
'22#.#80.104.80':139
'22#.#80.8.188':139
'22#.#80.180.29':445
'22#.#80.156.48':445
'22#.#80.58.20':139
'22#.#80.46.182':139
'22#.#80.76.151':139
'22#.#80.186.26':445
'22#.#80.111.133':445
'22#.#80.187.219':445
'22#.#80.212.38':445
'22#.#80.20.2':445
'22#.#80.108.231':139
'22#.#80.38.42':139
'22#.#80.186.152':139
'22#.#80.205.251':139
'22#.#80.19.82':139
'22#.#80.246.118':139
'22#.#80.248.147':139
'22#.#80.87.224':139
'22#.#80.147.146':139
'22#.#80.202.168':139
'22#.#80.146.117':139
'22#.#80.4.117':445
'22#.#80.9.130':445
'22#.#80.83.124':445
'22#.#80.120.210':445
'22#.#80.183.96':445
'22#.#80.101.147':445
'22#.#80.105.130':445
'22#.#80.72.27':445
'22#.#80.137.17':445
'22#.#80.27.22':445
'22#.#80.27.232':445
'22#.#80.111.224':139
'22#.#80.50.115':139
'22#.#80.156.22':139
'22#.#80.146.245':139
'22#.#80.9.198':139
'22#.#80.124.104':445
'22#.#80.38.9':445
'22#.#80.42.173':445
'22#.#80.174.159':139
'22#.#80.108.142':139
'22#.#80.179.170':445
'22#.#80.222.226':445
'22#.#80.222.157':445
'22#.#80.57.200':445
'22#.#80.170.97':445
'22#.#80.121.84':445
'22#.#80.125.126':445
'22#.#80.45.216':445
'22#.#80.10.196':445
'22#.#80.111.129':445
'22#.#80.115.106':445
'22#.#80.194.16':445
'22#.#80.119.208':445
'22#.#80.9.239':445
'22#.#80.10.14':445
'22#.#80.25.222':445
'22#.#80.188.89':445
'22#.#80.193.40':445
'22#.#80.191.77':445
'22#.#80.34.13':445
'22#.#80.107.50':445
'22#.#80.150.45':445
'22#.#80.245.66':139
'22#.#80.179.170':139
'22#.#80.25.222':139
'22#.#80.105.130':139
'22#.#80.72.27':139
'22#.#80.101.147':139
'22#.#80.9.239':139
'22#.#80.107.50':139
'22#.#80.119.208':139
'22#.#80.188.89':139
'22#.#80.10.14':139
'22#.#80.27.22':139
'22#.#80.27.232':139
'22#.#80.38.9':139
'22#.#80.124.104':139
'22#.#80.183.96':139
'22#.#80.83.124':139
'22#.#80.9.130':139
'22#.#80.137.17':139
'22#.#80.4.117':139
'22#.#80.42.173':139
'22#.#80.120.210':139
'22#.#80.150.45':139
'22#.#80.20.233':139
'22#.#80.167.63':139
'22#.#80.45.216':139
'22#.#80.10.196':139
'22#.#80.125.126':139
'22#.#80.57.38':139
'22#.#80.67.217':139
'22#.#80.178.21':139
'22#.#80.99.221':139
'22#.#80.214.46':139
'22#.#80.115.106':139
'22#.#80.194.16':139
'22#.#80.170.97':139
'22#.#80.191.77':139
'22#.#80.34.13':139
'22#.#80.193.40':139
'22#.#80.222.157':139
'22#.#80.111.129':139
'22#.#80.222.226':139
'22#.#80.121.84':139
'22#.#80.57.200':139
'22#.#80.20.233':445
'22#.#80.189.132':445
'22#.#80.122.153':445
'22#.#80.71.157':139
'22#.#80.122.153':139
'22#.#80.223.91':139
'22#.#80.237.70':139
'22#.#80.67.114':139
'22#.#80.17.106':139
'22#.#80.223.91':445
'22#.#80.71.157':445
'22#.#80.189.132':139
'22#.#80.146.195':445
'22#.#80.27.147':445
'22#.#80.195.211':445
'22#.#80.112.253':445
'22#.#80.211.200':445
'22#.#80.161.112':445
'22#.#80.45.14':445
'22#.#80.96.245':445
'22#.#80.127.191':445
'22#.#80.163.83':445
'22#.#80.76.41':139
'22#.#80.57.37':139
'22#.#80.112.133':139
'22#.#80.148.133':139
'22#.#80.120.4':139
'22#.#80.187.192':139
'22#.#80.204.27':139
'22#.#80.171.196':139
'22#.#80.59.49':139
'22#.#80.6.182':139
'22#.#80.49.64':139
'22#.#80.10.49':139
'22#.#80.220.77':139
'22#.#80.154.154':139
'22#.#80.29.57':139
'22#.#80.89.150':139
'22#.#80.165.31':139
'22#.#80.29.178':139
'22#.#80.49.3':139
'22#.#80.169.247':139
'22#.#80.58.149':139
'22#.#80.76.3':139
'22#.#80.114.99':445
'22#.#80.38.9':9988
'22#.#80.34.13':9988
'22#.#80.108.142':445
'22#.#80.50.115':445
'22#.#80.174.159':445
'22#.#80.83.124':9988
'22#.#80.107.50':9988
'22#.#80.137.17':9988
'22#.#80.222.226':9988
'22#.#80.194.16':9988
'22#.#80.111.224':445
'22#.#80.178.21':445
'22#.#80.57.38':445
'22#.#80.214.46':445
'22#.#80.167.63':445
'22#.#80.99.221':445
'22#.#80.9.198':445
'22#.#80.156.22':445
'22#.#80.146.245':445
'22#.#80.67.217':445
'22#.#80.245.66':445
'22#.#80.4.117':9988
'22#.#80.146.195':139
'22#.#80.27.147':139
'22#.#80.195.211':139
'22#.#80.112.253':139
'22#.#80.211.200':139
'22#.#80.161.112':139
'22#.#80.45.14':139
'22#.#80.96.245':139
'22#.#80.127.191':139
'22#.#80.163.83':139
'22#.#80.114.99':139
'22#.#80.27.22':9988
'22#.#80.150.45':9988
'22#.#80.72.27':9988
'22#.#80.119.208':9988
'22#.#80.9.239':9988
'22#.#80.188.89':9988
'22#.#80.179.170':9988
'22#.#80.105.130':9988
'22#.#80.120.210':9988
'22#.#80.42.173':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней