Trojan.Starman.6398

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#11.193.20':139
'21#.#11.82.32':139
'21#.#11.166.128':139
'21#.#11.49.50':139
'21#.#11.47.100':139
'21#.#11.75.200':139
'21#.#11.213.79':139
'21#.#11.171.205':139
'21#.#11.126.248':139
'21#.#11.184.49':139
'21#.#11.253.37':139
'21#.#11.251.65':139
'21#.#11.165.73':139
'21#.#11.8.121':139
'21#.#11.38.119':139
'21#.#11.14.0':139
'21#.#11.254.101':139
'21#.#11.179.77':139
'21#.#11.101.78':139
'21#.#11.160.165':139
'21#.#11.194.121':139
'21#.#11.68.18':139
'21#.#11.179.77':445
'21#.#11.253.37':445
'21#.#11.254.101':445
'21#.#11.194.121':445
'21#.#11.101.78':445
'21#.#11.193.20':445
'21#.#11.82.32':445
'21#.#11.166.128':445
'21#.#11.49.50':445
'21#.#11.47.100':445
'21#.#11.160.165':445
'21#.#11.0.149':139
'21#.#11.185.154':139
'21#.#11.241.115':139
'21#.#11.62.253':139
'21#.#11.93.191':139
'21#.#11.251.65':445
'21#.#11.165.73':445
'21#.#11.8.121':445
'21#.#11.38.119':445
'21#.#11.14.0':445
'21#.#11.85.75':139
'21#.#11.80.148':139
'21#.#11.37.47':139
'21#.#11.73.7':139
'21#.#11.41.130':139
'21#.#11.124.187':445
'21#.#11.66.121':445
'21#.#11.136.103':139
'21#.#11.162.182':139
'21#.#11.12.243':139
'21#.#11.37.10':139
'21#.#11.42.91':139
'21#.#11.174.143':139
'21#.#11.99.132':139
'21#.#11.142.200':139
'21#.#11.101.97':139
'21#.#11.192.213':139
'21#.#11.9.252':139
'21#.#11.35.12':139
'21#.#11.13.218':139
'21#.#11.12.162':139
'21#.#11.9.218':445
'21#.#11.41.130':445
'21#.#11.37.47':445
'21#.#11.73.7':445
'21#.#11.9.252':445
'21#.#11.37.10':445
'21#.#11.12.243':445
'21#.#11.136.103':445
'21#.#11.162.182':445
'21#.#11.85.75':445
'21#.#11.80.148':445
'21#.#11.192.213':445
'21#.#11.101.97':445
'21#.#11.99.132':445
'21#.#11.142.200':445
'21#.#11.161.115':445
'21#.#11.148.3':445
'21#.#11.12.162':445
'21#.#11.35.12':445
'21#.#11.13.218':445
'21#.#11.42.91':445
'21#.#11.174.143':445
'21#.#11.10.107':445
'21#.#11.31.10':445
'21#.#11.107.141':445
'21#.#11.18.120':445
'21#.#11.141.224':445
'21#.#11.251.61':139
'21#.#11.142.188':139
'21#.#11.60.14':139
'21#.#11.146.203':139
'21#.#11.54.97':139
'21#.#11.75.0':445
'21#.#11.3.127':445
'21#.#11.44.30':445
'21#.#11.37.202':445
'21#.#11.162.54':445
'21#.#11.251.169':445
'21#.#11.75.16':445
'21#.#11.136.11':445
'21#.#11.241.174':445
'21#.#11.27.47':445
'21#.#11.221.39':445
'21#.#11.81.142':139
'21#.#11.8.177':139
'21#.#11.252.101':139
'21#.#11.57.51':139
'21#.#11.52.20':139
'21#.#11.19.199':139
'21#.#11.80.3':139
'21#.#11.0.148':139
'21#.#11.239.43':139
'21#.#11.172.104':139
'21#.#11.119.225':139
'21#.#11.164.235':139
'21#.#11.35.23':139
'21#.#11.199.34':139
'21#.#11.23.50':139
'21#.#11.153.147':139
'21#.#11.50.103':139
'21#.#11.19.203':139
'21#.#11.46.39':139
'21#.#11.1.87':139
'21#.#11.31.201':139
'21#.#11.86.133':139
'21#.#11.17.105':139
'21#.#11.85.25':139
'21#.#11.55.195':139
'21#.#11.196.185':139
'21#.#11.62.139':139
'21#.#11.251.169':139
'21#.#11.162.54':139
'21#.#11.190.252':139
'21#.#11.251.106':139
'21#.#11.166.87':139
'21#.#11.185.154':445
'21#.#11.75.200':445
'21#.#11.213.79':445
'21#.#11.171.205':445
'21#.#11.126.248':445
'21#.#11.184.49':445
'21#.#11.241.115':445
'21#.#11.0.149':445
'21#.#11.93.191':445
'21#.#11.68.18':445
'21#.#11.62.253':445
'21#.#11.37.202':139
'21#.#11.62.139':445
'21#.#11.55.195':445
'21#.#11.196.185':445
'21#.#11.10.107':139
'21#.#11.31.10':139
'21#.#11.166.87':445
'21#.#11.190.252':445
'21#.#11.251.106':445
'21#.#11.17.105':445
'21#.#11.85.25':445
'21#.#11.107.141':139
'21#.#11.221.39':139
'21#.#11.241.174':139
'21#.#11.27.47':139
'21#.#11.3.127':139
'21#.#11.44.30':139
'21#.#11.18.120':139
'21#.#11.141.224':139
'21#.#11.75.0':139
'21#.#11.75.16':139
'21#.#11.136.11':139
'21#.#11.148.3':139
'21#.#11.102.2':445
'21#.#11.50.66':445
'21#.#11.80.143':445
'21#.#11.195.74':445
'21#.#11.129.217':445
'21#.#11.98.196':445
'21#.#11.196.130':445
'21#.#11.47.21':445
'21#.#11.97.94':445
'21#.#11.171.184':445
'21#.#11.20.199':445
'21#.#11.245.100':139
'21#.#11.41.31':139
'21#.#11.161.230':139
'21#.#11.92.184':139
'21#.#11.244.151':139
'21#.#11.60.212':445
'21#.#11.121.246':445
'21#.#11.94.129':139
'21#.#11.90.176':139
'21#.#11.251.167':139
'21#.#11.73.98':445
'21#.#11.3.67':445
'21#.#11.78.59':445
'21#.#11.4.174':445
'21#.#11.45.216':445
'21#.#11.211.130':445
'21#.#11.157.185':445
'21#.#11.170.157':445
'21#.#11.185.201':445
'21#.#11.217.236':445
'21#.#11.236.117':445
'21#.#11.152.96':445
'21#.#11.125.253':445
'21#.#11.172.198':445
'21#.#11.63.63':445
'21#.#11.150.82':445
'21#.#11.110.229':445
'21#.#11.30.51':445
'21#.#11.140.208':445
'21#.#11.249.2':445
'21#.#11.55.162':445
'21#.#11.225.54':445
'21#.#11.150.82':139
'21#.#11.110.229':139
'21#.#11.73.98':139
'21#.#11.196.130':139
'21#.#11.98.196':139
'21#.#11.55.162':139
'21#.#11.225.54':139
'21#.#11.172.198':139
'21#.#11.63.63':139
'21#.#11.125.253':139
'21#.#11.47.21':139
'21#.#11.102.2':139
'21#.#11.195.74':139
'21#.#11.20.199':139
'21#.#11.50.66':139
'21#.#11.129.217':139
'21#.#11.97.94':139
'21#.#11.171.184':139
'21#.#11.80.143':139
'21#.#11.60.212':139
'21#.#11.121.246':139
'21#.#11.249.2':139
'21#.#11.46.116':139
'21#.#11.108.44':139
'21#.#11.41.171':139
'21#.#11.157.185':139
'21#.#11.170.157':139
'21#.#11.24.140':139
'21#.#11.36.143':139
'21#.#11.148.245':139
'21#.#11.141.56':139
'21#.#11.170.22':139
'21#.#11.185.201':139
'21#.#11.45.216':139
'21#.#11.211.130':139
'21#.#11.152.96':139
'21#.#11.30.51':139
'21#.#11.140.208':139
'21#.#11.217.236':139
'21#.#11.236.117':139
'21#.#11.78.59':139
'21#.#11.4.174':139
'21#.#11.3.67':139
'21#.#11.219.203':445
'21#.#11.0.13':445
'21#.#11.57.61':445
'21#.#11.128.177':139
'21#.#11.74.104':445
'21#.#11.48.236':445
'21#.#11.177.153':445
'21#.#11.62.116':445
'21#.#11.21.208':445
'21#.#11.10.26':445
'21#.#11.3.60':139
'21#.#11.99.185':139
'21#.#11.224.99':139
'21#.#11.148.81':139
'21#.#11.166.163':139
'21#.#11.152.187':139
'21#.#11.179.19':139
'21#.#11.91.99':139
'21#.#11.38.40':139
'21#.#11.163.223':139
'21#.#11.37.64':139
'21#.#11.153.11':445
'21#.#11.91.99':445
'21#.#11.3.60':445
'21#.#11.179.19':445
'21#.#11.37.64':445
'21#.#11.38.40':445
'21#.#11.9.218':139
'21#.#11.161.115':139
'21#.#11.66.121':139
'21#.#11.128.177':445
'21#.#11.124.187':139
'21#.#11.163.223':445
'21#.#11.126.62':445
'21#.#11.137.205':445
'21#.#11.56.90':445
'21#.#11.204.113':445
'21#.#11.44.3':445
'21#.#11.99.185':445
'21#.#11.224.99':445
'21#.#11.148.81':445
'21#.#11.166.163':445
'21#.#11.152.187':445
'21#.#11.251.167':445
'21#.#11.94.129':445
'21#.#11.90.176':445
'21#.#11.245.100':445
'21#.#11.41.31':445
'21#.#11.47.21':9988
'21#.#11.196.130':9988
'21#.#11.97.94':9988
'21#.#11.129.217':9988
'21#.#11.121.246':9988
'21#.#11.161.230':445
'21#.#11.141.56':445
'21#.#11.170.22':445
'21#.#11.108.44':445
'21#.#11.41.171':445
'21#.#11.46.116':445
'21#.#11.92.184':445
'21#.#11.244.151':445
'21#.#11.36.143':445
'21#.#11.148.245':445
'21#.#11.24.140':445
'21#.#11.150.82':9988
'21#.#11.177.153':139
'21#.#11.153.11':139
'21#.#11.48.236':139
'21#.#11.10.26':139
'21#.#11.62.116':139
'21#.#11.126.62':139
'21#.#11.137.205':139
'21#.#11.56.90':139
'21#.#11.204.113':139
'21#.#11.44.3':139
'21#.#11.21.208':139
'21#.#11.152.96':9988
'21#.#11.211.130':9988
'21#.#11.249.2':9988
'21#.#11.172.198':9988
'21#.#11.55.162':9988
'21#.#11.219.203':139
'21#.#11.0.13':139
'21#.#11.57.61':139
'21#.#11.236.117':9988
'21#.#11.74.104':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней