Trojan.Starman.6381

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#4.96.208':139
'22#.#4.235.219':445
'22#.#4.219.50':139
'22#.#4.111.118':139
'22#.#4.187.235':445
'22#.#4.155.38':445
'22#.#4.56.85':445
'22#.#4.97.107':445
'22#.#4.242.215':445
'22#.#4.79.184':139
'22#.#4.81.207':139
'22#.#4.21.81':139
'22#.#4.168.82':139
'22#.#4.207.168':139
'22#.#4.191.20':139
'22#.#4.180.125':139
'22#.#4.130.61':139
'22#.#4.20.191':139
'22#.#4.211.20':139
'22#.#4.11.233':445
'22#.#4.10.196':445
'22#.#4.65.11':445
'22#.#4.35.143':445
'22#.#4.161.58':445
'22#.#4.160.186':445
'22#.#4.172.110':445
'22#.#4.68.237':445
'22#.#4.186.238':445
'22#.#4.14.162':445
'22#.#4.128.7':445
'22#.#4.60.128':445
'22#.#4.136.26':445
'22#.#4.7.136':445
'22#.#4.156.4':445
'22#.#4.29.49':445
'22#.#4.151.243':445
'22#.#4.43.56':445
'22#.#4.101.157':445
'22#.#4.101.157':139
'22#.#4.29.49':139
'22#.#4.156.4':139
'22#.#4.43.56':139
'22#.#4.151.243':139
'22#.#4.35.143':139
'22#.#4.11.233':139
'22#.#4.14.162':139
'22#.#4.65.11':139
'22#.#4.60.128':139
'22#.#4.97.107':139
'22#.#4.242.215':139
'22#.#4.235.219':139
'22#.#4.187.235':139
'22#.#4.155.38':139
'22#.#4.7.136':139
'22#.#4.128.7':139
'22#.#4.56.85':139
'22#.#4.136.26':139
'22#.#4.83.71':139
'22#.#4.122.118':139
'22#.#4.100.64':139
'22#.#4.192.144':139
'22#.#4.16.73':139
'22#.#4.137.165':139
'22#.#4.137.190':139
'22#.#4.155.130':139
'22#.#4.3.183':139
'22#.#4.73.104':139
'22#.#4.68.237':139
'22#.#4.186.238':139
'22#.#4.10.196':139
'22#.#4.161.58':139
'22#.#4.160.186':139
'22#.#4.61.158':139
'22#.#4.208.68':139
'22#.#4.172.110':139
'22#.#4.7.122':139
'22#.#4.7.122':445
'22#.#4.128.128':139
'22#.94.70.2':139
'22#.#4.155.89':139
'22#.#4.242.155':139
'22#.#4.107.229':139
'22#.#4.128.125':139
'22#.#4.111.112':139
'22#.#4.174.82':139
'22#.#4.125.170':139
'22#.#4.22.104':139
'22#.#4.34.156':139
'22#.#4.33.34':139
'22#.#4.8.119':139
'22#.#4.252.215':139
'22#.#4.126.71':139
'22#.94.6.95':139
'22#.#4.40.51':139
'22#.#4.131.151':139
'22#.#4.120.175':139
'22#.#4.105.43':139
'22#.#4.233.176':139
'22#.#4.34.232':139
'22#.#4.232.161':139
'22#.#4.8.234':139
'22#.#4.7.203':139
'22#.#4.143.63':139
'22#.#4.50.176':139
'22#.#4.182.166':139
'22#.#4.240.26':139
'22#.#4.101.136':139
'22#.#4.47.159':139
'22#.#4.247.215':139
'22#.#4.8.197':139
'22#.#4.154.176':139
'22#.#4.107.124':139
'22#.94.51.5':139
'22#.#4.185.115':139
'22#.#4.211.89':139
'22#.#4.168.82':445
'22#.#4.207.168':445
'22#.#4.137.165':445
'22#.#4.137.190':445
'22#.#4.81.207':445
'22#.#4.20.191':445
'22#.#4.211.20':445
'22#.#4.21.81':445
'22#.#4.191.20':445
'22#.#4.3.183':445
'22#.#4.73.104':445
'22#.#4.100.64':445
'22#.#4.61.158':445
'22#.#4.208.68':445
'22#.#4.192.144':445
'22#.#4.16.73':445
'22#.#4.155.130':445
'22#.#4.83.71':445
'22#.#4.122.118':445
'22#.#4.7.172':139
'22#.#4.54.16':139
'22#.#4.70.43':139
'22#.#4.255.175':139
'22#.#4.151.169':139
'22#.#4.233.158':139
'22#.#4.118.252':139
'22#.#4.165.151':139
'22#.#4.11.166':139
'22#.#4.32.235':139
'22#.#4.79.184':445
'22#.#4.219.50':445
'22#.#4.180.125':445
'22#.#4.130.61':445
'22#.#4.111.118':445
'22#.#4.196.117':139
'22#.#4.171.179':139
'22#.#4.96.208':445
'22#.#4.106.84':139
'22#.94.5.72':139
'22#.#4.50.172':445
'22#.#4.132.152':139
'22#.#4.72.132':139
'22#.#4.212.178':445
'22#.#4.110.51':445
'22#.#4.218.42':445
'22#.#4.198.82':445
'22#.#4.100.102':445
'22#.#4.70.96':139
'22#.#4.113.110':139
'22#.#4.159.231':139
'22#.#4.161.44':139
'22#.#4.10.24':139
'22#.#4.45.190':139
'22#.#4.131.171':139
'22#.#4.225.30':139
'22#.#4.182.139':139
'22#.#4.54.154':139
'22#.#4.20.234':445
'22#.#4.128.178':445
'22#.#4.64.200':445
'22#.#4.124.111':445
'22#.#4.250.128':445
'22#.#4.14.180':445
'22#.#4.97.148':445
'22#.#4.153.250':445
'22#.#4.90.120':445
'22#.#4.200.90':445
'22#.#4.14.13':445
'22#.#4.40.83':445
'22#.#4.175.52':445
'22#.#4.12.175':445
'22#.#4.189.247':445
'22#.#4.31.212':445
'22#.#4.225.213':445
'22#.#4.237.204':445
'22#.#4.135.71':445
'22#.#4.135.71':139
'22#.#4.31.212':139
'22#.#4.189.247':139
'22#.#4.237.204':139
'22#.#4.225.213':139
'22#.#4.124.111':139
'22#.#4.20.234':139
'22#.#4.200.90':139
'22#.#4.64.200':139
'22#.#4.40.83':139
'22#.#4.212.178':139
'22#.#4.218.42':139
'22#.#4.50.172':139
'22#.#4.198.82':139
'22#.#4.100.102':139
'22#.#4.12.175':139
'22#.#4.14.13':139
'22#.#4.110.51':139
'22#.#4.175.52':139
'22#.#4.213.214':139
'22#.#4.62.101':139
'22#.#4.74.71':139
'22#.#4.74.176':139
'22#.#4.217.61':139
'22#.#4.170.210':139
'22#.#4.242.170':139
'22#.#4.102.101':139
'22#.#4.210.108':139
'22#.#4.172.148':139
'22#.#4.153.250':139
'22#.#4.90.120':139
'22#.#4.128.178':139
'22#.#4.250.128':139
'22#.#4.14.180':139
'22#.#4.183.27':139
'22#.#4.105.45':139
'22#.#4.97.148':139
'22#.#4.41.23':139
'22#.#4.41.23':445
'22#.#4.47.225':139
'22#.#4.164.48':139
'22#.#4.147.97':139
'22#.#4.224.147':139
'22#.#4.30.176':139
'22#.94.2.63':139
'22#.#4.63.141':139
'22#.94.5.62':139
'22#.#4.50.163':139
'22#.#4.97.40':139
'22#.#4.74.176':9988
'22#.#4.105.45':9988
'22#.#4.200.90':9988
'22#.#4.128.178':9988
'22#.#4.113.5':139
'22#.#4.0.185':139
'22#.94.4.10':139
'22#.#4.225.113':139
'22#.#4.96.225':139
'22#.#4.30.176':445
'22#.94.5.62':445
'22#.#4.47.225':445
'22#.#4.164.48':445
'22#.#4.50.163':445
'22#.#4.154.240':445
'22#.#4.77.101':445
'22#.94.2.63':445
'22#.#4.63.141':445
'22#.#4.224.147':445
'22#.#4.113.5':445
'22#.#4.225.113':445
'22#.#4.154.240':139
'22#.#4.77.101':139
'22#.#4.96.225':445
'22#.#4.97.40':445
'22#.#4.147.97':445
'22#.#4.0.185':445
'22#.94.4.10':445
'22#.#4.161.44':445
'22#.#4.10.24':445
'22#.#4.170.210':445
'22#.#4.242.170':445
'22#.#4.113.110':445
'22#.#4.182.139':445
'22#.#4.54.154':445
'22#.#4.159.231':445
'22#.#4.45.190':445
'22#.#4.210.108':445
'22#.#4.172.148':445
'22#.#4.74.71':445
'22#.#4.183.27':445
'22#.#4.105.45':445
'22#.#4.74.176':445
'22#.#4.217.61':445
'22#.#4.102.101':445
'22#.#4.213.214':445
'22#.#4.62.101':445
'22#.#4.62.101':9988
'22#.#4.131.171':9988
'22#.#4.10.24':9988
'22#.#4.217.61':9988
'22#.#4.41.23':9988
'22#.#4.74.71':9988
'22#.#4.250.128':9988
'22#.#4.97.148':9988
'22#.#4.14.180':9988
'22#.#4.189.247':9988
'22#.#4.70.96':445
'22#.#4.132.152':445
'22#.#4.131.171':445
'22#.#4.225.30':445
'22#.#4.72.132':445
'22#.#4.218.42':9988
'22#.#4.40.83':9988
'22#.94.5.72':445
'22#.#4.198.82':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней