Trojan.Starman.6080

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#33.33.12':139
'22#.#33.33.166':139
'22#.#33.95.133':139
'22#.#33.59.171':139
'22#.#33.132.188':139
'22#.#33.21.68':139
'22#.#33.158.205':139
'22#.#33.156.15':139
'22#.#33.58.78':139
'22#.#33.85.15':139
'22#.#33.120.141':139
'22#.#33.147.135':139
'22#.#33.146.151':139
'22#.#33.250.10':139
'22#.#33.30.134':139
'22#.#33.223.223':139
'22#.#33.16.139':139
'22#.#33.195.120':139
'22#.#33.252.114':139
'22#.#33.254.122':139
'22#.#33.214.25':139
'22#.#33.32.35':139
'22#.#33.147.135':445
'22#.#33.146.151':445
'22#.#33.250.10':445
'22#.#33.30.134':445
'22#.#33.223.223':445
'22#.#33.16.139':445
'22#.#33.195.120':445
'22#.#33.252.114':445
'22#.#33.254.122':445
'22#.#33.214.25':445
'22#.#33.11.100':445
'22#.#33.81.191':139
'22#.#33.168.81':139
'22#.#33.138.23':139
'22#.#33.202.170':139
'22#.#33.173.135':139
'22#.#33.67.87':445
'22#.#33.23.41':445
'22#.#33.87.179':445
'22#.#33.17.56':445
'22#.#33.109.159':445
'22#.#33.224.158':139
'22#.#33.154.13':139
'22#.#33.226.17':139
'22#.#33.161.7':139
'22#.#33.18.24':139
'22#.#33.244.182':445
'22#.#33.93.150':445
'22#.#33.56.196':139
'22#.#33.196.99':139
'22#.#33.86.211':139
'22#.#33.121.152':139
'22#.#33.136.182':139
'22#.#33.42.96':139
'22#.#33.93.150':139
'22#.#33.3.27':445
'22#.#33.244.182':139
'22#.#33.30.39':139
'22#.#33.152.201':139
'22#.#33.245.57':139
'22#.#33.171.111':139
'22#.#33.84.172':139
'22#.#33.136.182':445
'22#.#33.56.196':445
'22#.#33.17.56':139
'22#.#33.86.211':445
'22#.#33.154.13':445
'22#.#33.196.99':445
'22#.#33.23.41':139
'22#.#33.11.100':139
'22#.#33.67.87':139
'22#.#33.109.159':139
'22#.#33.87.179':139
'22#.#33.224.158':445
'22#.#33.245.57':445
'22#.#33.30.39':445
'22#.#33.84.172':445
'22#.#33.42.96':445
'22#.#33.171.111':445
'22#.#33.18.24':445
'22#.#33.226.17':445
'22#.#33.161.7':445
'22#.#33.152.201':445
'22#.#33.121.152':445
'22#.#33.183.17':139
'22#.#33.14.183':139
'22#.#33.50.27':139
'22#.#33.187.190':139
'22#.#33.26.188':139
'22#.#33.213.30':139
'22#.#33.177.237':139
'22#.#33.160.162':139
'22#.#33.19.100':139
'22#.#33.151.79':139
'22#.#33.168.41':139
'22#.#33.40.19':445
'22#.#33.185.128':445
'22#.#33.79.166':445
'22#.#33.193.114':445
'22#.#33.137.216':445
'22#.#33.204.145':445
'22#.#33.140.205':445
'22#.#33.84.243':445
'22#.#33.42.142':445
'22#.#33.66.173':445
'22#.#33.189.250':139
'22#.#33.37.114':139
'22#.#33.120.251':139
'22#.#33.212.48':139
'22#.#33.35.233':139
'22#.#33.171.19':139
'22#.#33.78.83':139
'22#.#33.95.65':139
'22#.#33.82.226':139
'22#.#33.44.241':139
'22#.#33.137.44':139
'22#.#33.9.41':139
'22#.#33.213.234':139
'22#.#33.146.203':139
'22#.#33.9.250':139
'22#.#33.129.230':139
'22#.#33.76.208':139
'22#.#33.58.86':139
'22#.#33.210.173':139
'22#.#33.89.220':139
'22#.#33.45.181':139
'22#.#33.244.193':139
'22#.#33.138.23':445
'22#.#33.81.191':445
'22#.#33.173.135':445
'22#.#33.32.35':445
'22#.#33.202.170':445
'22#.#33.142.208':139
'22#.#33.64.22':139
'22#.#33.44.229':139
'22#.#33.168.81':445
'22#.#33.227.216':139
'22#.#33.158.205':445
'22#.#33.95.133':445
'22#.#33.33.12':445
'22#.#33.132.188':445
'22#.#33.120.141':445
'22#.#33.59.171':445
'22#.#33.156.15':445
'22#.#33.21.68':445
'22#.#33.85.15':445
'22#.#33.33.166':445
'22#.#33.58.78':445
'22#.#33.13.247':139
'22#.#33.44.229':445
'22#.#33.142.208':445
'22#.#33.227.216':445
'22#.#33.204.145':139
'22#.#33.140.205':139
'22#.#33.181.41':445
'22#.#33.11.83':445
'22#.#33.42.14':445
'22#.#33.64.22':445
'22#.#33.13.247':445
'22#.#33.84.243':139
'22#.#33.193.114':139
'22#.#33.137.216':139
'22#.#33.11.83':139
'22#.#33.42.14':139
'22#.#33.181.41':139
'22#.#33.42.142':139
'22#.#33.66.173':139
'22#.#33.185.128':139
'22#.#33.79.166':139
'22#.#33.40.19':139
'22#.#33.237.139':445
'22#.#33.178.125':445
'22#.#33.217.175':445
'22#.#33.190.227':445
'22#.#33.162.205':445
'22#.#33.247.167':445
'22#.#33.160.80':445
'22#.#33.90.219':445
'22#.#33.55.89':445
'22#.#33.72.161':445
'22#.#33.22.51':445
'22#.#33.168.23':445
'22#.#33.85.205':139
'22#.#33.174.78':139
'22#.#33.206.62':139
'22#.#33.100.215':139
'22#.#33.62.207':139
'22#.#33.180.56':445
'22#.#33.57.0':445
'22#.#33.156.199':139
'22#.#33.33.164':139
'22#.#33.51.218':139
'22#.#33.194.133':445
'22#.#33.14.115':445
'22#.#33.151.59':445
'22#.#33.179.28':445
'22#.#33.110.92':445
'22#.#33.214.233':445
'22#.#33.60.191':445
'22#.133.6.2':445
'22#.#33.28.101':445
'22#.#33.115.245':445
'22#.#33.109.0':445
'22#.#33.94.181':445
'22#.#33.104.80':445
'22#.#33.112.148':445
'22#.#33.25.60':445
'22#.#33.214.66':445
'22#.#33.28.165':445
'22#.#33.215.132':445
'22#.#33.63.80':445
'22#.#33.54.236':445
'22#.#33.172.215':445
'22#.#33.197.220':445
'22#.#33.214.66':139
'22#.#33.28.165':139
'22#.#33.194.133':139
'22#.#33.160.80':139
'22#.#33.90.219':139
'22#.#33.172.215':139
'22#.#33.197.220':139
'22#.#33.112.148':139
'22#.#33.25.60':139
'22#.#33.104.80':139
'22#.#33.55.89':139
'22#.#33.162.205':139
'22#.#33.247.167':139
'22#.#33.57.0':139
'22#.#33.168.23':139
'22#.#33.180.56':139
'22#.#33.72.161':139
'22#.#33.22.51':139
'22#.#33.217.175':139
'22#.#33.190.227':139
'22#.#33.178.125':139
'22#.#33.54.236':139
'22#.#33.149.21':139
'22#.#33.234.165':139
'22#.#33.103.137':139
'22#.#33.60.191':139
'22#.133.6.2':139
'22#.#33.216.97':139
'22#.#33.45.75':139
'22#.#33.27.44':139
'22#.#33.39.69':139
'22#.#33.118.82':139
'22#.#33.28.101':139
'22#.#33.110.92':139
'22#.#33.214.233':139
'22#.#33.94.181':139
'22#.#33.215.132':139
'22#.#33.63.80':139
'22#.#33.115.245':139
'22#.#33.109.0':139
'22#.#33.151.59':139
'22#.#33.179.28':139
'22#.#33.14.115':139
'22#.#33.235.70':445
'22#.#33.77.149':445
'22#.#33.3.27':139
'22#.#33.34.102':139
'22#.#33.237.139':139
'22#.#33.130.39':445
'22#.#33.87.63':445
'22#.#33.201.95':445
'22#.#33.164.172':445
'22#.#33.87.188':445
'22#.#33.25.175':139
'22#.#33.162.114':139
'22#.#33.156.42':139
'22#.#33.8.95':139
'22#.#33.161.216':139
'22#.#33.192.166':139
'22#.#33.221.134':139
'22#.#33.7.235':139
'22#.#33.29.137':139
'22#.#33.20.13':139
'22#.#33.209.192':139
'22#.#33.180.142':445
'22#.#33.20.13':445
'22#.#33.209.192':445
'22#.#33.156.42':445
'22#.#33.8.95':445
'22#.#33.162.114':445
'22#.#33.25.175':445
'22#.#33.34.102':445
'22#.#33.7.235':445
'22#.#33.29.137':445
'22#.#33.221.134':445
'22#.#33.192.166':445
'22#.#33.250.222':445
'22#.#33.125.30':445
'22#.#33.110.37':445
'22#.#33.141.70':445
'22#.#33.165.109':445
'22#.#33.181.146':445
'22#.#33.161.216':445
'22#.#33.87.50':445
'22#.#33.195.103':445
'22#.#33.42.115':445
'22#.#33.51.218':445
'22#.#33.156.199':445
'22#.#33.33.164':445
'22#.#33.85.205':445
'22#.#33.174.78':445
'22#.#33.214.66':9988
'22#.#33.54.236':9988
'22#.#33.90.219':9988
'22#.#33.168.23':9988
'22#.#33.247.167':9988
'22#.#33.206.62':445
'22#.#33.39.69':445
'22#.#33.118.82':445
'22#.#33.234.165':445
'22#.#33.103.137':445
'22#.#33.149.21':445
'22#.#33.100.215':445
'22#.#33.62.207':445
'22#.#33.45.75':445
'22#.#33.27.44':445
'22#.#33.216.97':445
'22#.#33.214.233':9988
'22#.#33.110.37':139
'22#.#33.250.222':139
'22#.#33.165.109':139
'22#.#33.180.142':139
'22#.#33.141.70':139
'22#.#33.87.50':139
'22#.#33.181.146':139
'22#.#33.42.115':139
'22#.#33.125.30':139
'22#.#33.195.103':139
'22#.#33.87.63':139
'22#.#33.33.164':9988
'22#.#33.235.70':139
'22#.#33.28.101':9988
'22#.#33.179.28':9988
'22#.#33.151.59':9988
'22#.#33.201.95':139
'22#.#33.130.39':139
'22#.#33.87.188':139
'22#.#33.77.149':139
'22#.#33.164.172':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней