Trojan.Starman.6499

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#83.132.216':139
'20#.#83.159.134':139
'20#.#83.186.204':139
'20#.#83.47.172':139
'20#.#83.22.130':139
'20#.#83.54.193':139
'20#.#83.57.217':139
'20#.#83.224.224':139
'20#.#83.2.160':139
'20#.#83.133.230':139
'20#.#83.34.36':139
'20#.#83.185.102':445
'20#.#83.21.116':445
'20#.#83.251.21':445
'20#.#83.77.143':445
'20#.#83.27.154':445
'20#.#83.4.190':445
'20#.#83.19.39':139
'20#.#83.255.239':445
'20#.#83.125.229':445
'20#.#83.21.185':445
'20#.#83.33.42':139
'20#.#83.224.224':445
'20#.#83.54.193':445
'20#.#83.133.230':445
'20#.#83.159.134':445
'20#.#83.2.160':445
'20#.#83.73.156':445
'20#.#83.16.20':445
'20#.#83.164.8':445
'20#.#83.57.217':445
'20#.#83.33.42':445
'20#.#83.132.216':445
'20#.#83.86.204':139
'20#.#83.251.126':139
'20#.#83.16.20':139
'20#.#83.164.8':139
'20#.#83.73.156':139
'20#.#83.22.130':445
'20#.#83.186.204':445
'20#.#83.47.172':445
'20#.#83.19.39':445
'20#.#83.34.36':445
'20#.#83.21.116':139
'20#.#83.125.229':139
'20#.#83.185.102':139
'20#.#83.27.154':139
'20#.#83.251.21':139
'20#.#83.219.36':445
'20#.#83.75.56':445
'20#.#83.4.190':139
'20#.#83.21.185':139
'20#.#83.255.239':139
'20#.#83.77.143':139
'20#.#83.49.114':139
'20#.#83.201.36':139
'20#.#83.80.7':139
'20#.#83.28.126':139
'20#.#83.132.147':139
'20#.#83.104.38':139
'20#.#83.37.2':139
'20#.#83.55.30':139
'20#.#83.103.54':139
'20#.#83.239.239':139
'20#.#83.239.218':445
'20#.#83.49.114':445
'20#.#83.201.36':445
'20#.#83.80.7':445
'20#.#83.28.126':445
'20#.#83.132.147':445
'20#.#83.104.38':445
'20#.#83.37.2':445
'20#.#83.55.30':445
'20#.#83.103.54':445
'20#.#83.239.239':445
'20#.#83.194.181':445
'20#.#83.50.52':445
'20#.#83.238.248':445
'20#.#83.62.143':445
'20#.#83.3.38':445
'20#.#83.48.89':445
'20#.#83.27.212':445
'20#.#83.38.66':445
'20#.#83.123.40':445
'20#.#83.180.238':445
'20#.#83.148.241':445
'20#.#83.11.53':445
'20#.#83.254.82':445
'20#.#83.204.106':445
'20#.#83.93.9':445
'20#.#83.51.234':445
'20#.#83.162.120':445
'20#.#83.31.212':445
'20#.#83.182.138':445
'20#.#83.104.108':445
'20#.#83.60.218':445
'20#.#83.135.217':445
'20#.#83.81.37':445
'20#.#83.195.38':445
'20#.#83.113.252':445
'20#.#83.205.114':445
'20#.#83.67.205':445
'20#.#83.148.97':445
'20#.#83.12.181':445
'20#.#83.47.88':445
'20#.#83.77.17':445
'20#.#83.81.135':445
'20#.#83.168.63':445
'20#.#83.5.234':139
'20#.#83.138.179':139
'20#.#83.8.141':139
'20#.#83.168.17':139
'20#.#83.164.27':139
'20#.#83.8.111':139
'20#.#83.98.161':139
'20#.#83.192.57':139
'20#.#83.195.134':139
'20#.#83.166.204':139
'20#.#83.17.52':139
'20#.#83.91.2':139
'20#.#83.40.91':139
'20#.#83.14.101':445
'20#.#83.163.167':445
'20#.#83.26.164':445
'20#.#83.42.29':139
'20#.#83.52.69':139
'20#.#83.0.98':139
'20#.#83.92.122':139
'20#.#83.9.114':139
'20#.#83.195.38':139
'20#.#83.77.17':139
'20#.#83.81.37':139
'20#.#83.67.205':139
'20#.#83.113.252':139
'20#.#83.12.181':139
'20#.#83.135.217':139
'20#.#83.148.97':139
'20#.#83.81.135':139
'20#.#83.47.88':139
'20#.#83.205.114':139
'20#.#83.172.50':139
'20#.#83.76.103':139
'20#.#83.50.47':139
'20#.#83.86.204':445
'20#.#83.251.126':445
'20#.#83.148.33':139
'20#.#83.115.95':139
'20#.#83.153.183':139
'20#.#83.8.235':139
'20#.#83.178.112':139
'20#.#83.93.9':139
'20#.#83.172.50':445
'20#.#83.76.103':445
'20#.#83.50.47':445
'20#.#83.26.164':139
'20#.#83.14.101':139
'20#.#83.148.33':445
'20#.#83.115.95':445
'20#.#83.153.183':445
'20#.#83.8.235':445
'20#.#83.178.112':445
'20#.#83.163.167':139
'20#.#83.254.82':139
'20#.#83.104.108':139
'20#.#83.11.53':139
'20#.#83.51.234':139
'20#.#83.204.106':139
'20#.#83.31.212':139
'20#.#83.168.63':139
'20#.#83.162.120':139
'20#.#83.60.218':139
'20#.#83.182.138':139
'20#.#83.194.181':139
'20#.#83.2.211':445
'20#.#83.27.61':445
'20#.#83.33.163':445
'20#.#83.20.215':445
'20#.#83.120.151':445
'20#.#83.230.179':445
'20#.#83.50.185':445
'20#.#83.163.190':445
'20#.#83.58.224':445
'20#.#83.198.1':445
'20#.#83.166.30':445
'20#.#83.48.143':139
'20#.#83.193.196':139
'20#.#83.0.155':139
'20#.#83.32.29':139
'20#.#83.114.209':139
'20#.#83.255.165':445
'20#.#83.82.48':445
'20#.#83.219.73':139
'20#.#83.23.140':139
'20#.#83.6.161':139
'20#.#83.230.50':445
'20#.#83.40.204':445
'20#.#83.166.215':445
'20#.#83.86.230':445
'20#.#83.57.253':445
'20#.#83.121.47':445
'20#.#83.59.176':445
'20#.#83.165.254':445
'20#.#83.176.150':445
'20#.#83.91.50':445
'20#.#83.150.90':445
'20#.#83.225.32':445
'20#.#83.161.204':445
'20#.#83.51.245':445
'20#.#83.170.241':445
'20#.#83.96.166':445
'20#.#83.11.213':445
'20#.#83.205.232':445
'20#.#83.187.205':445
'20#.#83.232.241':445
'20#.#83.15.9':445
'20#.#83.1.43':445
'20#.#83.96.166':139
'20#.#83.11.213':139
'20#.#83.230.50':139
'20#.#83.230.179':139
'20#.#83.50.185':139
'20#.#83.15.9':139
'20#.#83.1.43':139
'20#.#83.51.245':139
'20#.#83.170.241':139
'20#.#83.161.204':139
'20#.#83.163.190':139
'20#.#83.166.30':139
'20#.#83.82.48':139
'20#.#83.255.165':139
'20#.#83.20.215':139
'20#.#83.120.151':139
'20#.#83.58.224':139
'20#.#83.198.1':139
'20#.#83.27.61':139
'20#.#83.33.163':139
'20#.#83.2.211':139
'20#.#83.232.241':139
'20#.#83.77.96':139
'20#.#83.35.60':139
'20#.#83.22.177':139
'20#.#83.59.176':139
'20#.#83.165.254':139
'20#.#83.16.236':139
'20#.#83.34.115':139
'20#.#83.170.239':139
'20#.#83.13.45':139
'20#.#83.68.166':139
'20#.#83.176.150':139
'20#.#83.57.253':139
'20#.#83.121.47':139
'20#.#83.225.32':139
'20#.#83.205.232':139
'20#.#83.187.205':139
'20#.#83.91.50':139
'20#.#83.150.90':139
'20#.#83.166.215':139
'20#.#83.86.230':139
'20#.#83.40.204':139
'20#.#83.110.14':445
'20#.#83.29.88':445
'20#.#83.106.141':445
'20#.#83.93.82':139
'20#.#83.141.232':445
'20#.#83.184.31':445
'20#.#83.214.22':445
'20#.#83.71.9':445
'20#.#83.12.76':445
'20#.#83.219.21':445
'20#.#83.230.20':139
'20#.#83.37.65':139
'20#.#83.173.159':139
'20#.#83.214.22':139
'20#.#83.71.9':139
'20#.#83.184.31':139
'20#.#83.224.30':139
'20#.#83.163.76':139
'20#.#83.249.36':139
'20#.#83.118.226':139
'20#.#83.172.12':139
'20#.#83.37.65':445
'20#.#83.50.52':139
'20#.#83.238.248':139
'20#.#83.62.143':139
'20#.#83.3.38':139
'20#.#83.48.89':139
'20#.#83.27.212':139
'20#.#83.38.66':139
'20#.#83.123.40':139
'20#.#83.180.238':139
'20#.#83.148.241':139
'20#.#83.239.218':139
'20#.#83.249.36':445
'20#.#83.224.30':445
'20#.#83.172.12':445
'20#.#83.118.226':445
'20#.#83.173.159':445
'20#.#83.75.56':139
'20#.#83.219.36':139
'20#.#83.93.82':445
'20#.#83.163.76':445
'20#.#83.230.20':445
'20#.#83.6.161':445
'20#.#83.219.73':445
'20#.#83.23.140':445
'20#.#83.48.143':445
'20#.#83.193.196':445
'20#.#83.163.190':9988
'20#.#83.161.204':9988
'20#.#83.198.1':9988
'20#.#83.255.165':9988
'20#.#83.27.61':9988
'20#.#83.0.155':445
'20#.#83.13.45':445
'20#.#83.68.166':445
'20#.#83.35.60':445
'20#.#83.22.177':445
'20#.#83.77.96':445
'20#.#83.32.29':445
'20#.#83.114.209':445
'20#.#83.34.115':445
'20#.#83.170.239':445
'20#.#83.16.236':445
'20#.#83.40.204':9988
'20#.#83.72.136':445
'20#.#83.141.232':139
'20#.#83.86.11':445
'20#.#83.72.136':139
'20#.#83.97.219':445
'20#.#83.12.76':139
'20#.#83.219.21':139
'20#.#83.29.88':139
'20#.#83.106.141':139
'20#.#83.110.14':139
'20#.#83.86.11':139
'20#.#83.57.253':9988
'20#.#83.230.179':9988
'20#.#83.121.47':9988
'20#.#83.170.241':9988
'20#.#83.150.90':9988
'20#.#83.15.9':9988
'20#.#83.97.219':139
'20#.#83.50.185':9988
'20#.#83.11.213':9988
'20#.#83.232.241':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней