Trojan.Starman.6418

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#6.231.48':445
'21#.#6.67.171':445
'21#.#6.241.35':445
'21#.#6.217.47':445
'21#.#6.249.149':445
'21#.#6.84.148':445
'21#.#6.41.98':445
'21#.#6.112.207':445
'21#.#6.162.65':445
'21#.#6.206.162':445
'21#.#6.223.67':445
'21#.#6.39.79':445
'21#.#6.115.109':445
'21#.#6.90.46':445
'21#.#6.194.183':445
'21#.#6.123.136':445
'21#.#6.90.215':445
'21#.#6.67.90':445
'21#.#6.113.59':445
'21#.#6.0.228':445
'21#.#6.1.173':445
'21#.#6.180.176':139
'21#.#6.25.144':139
'21#.#6.131.35':139
'21#.#6.251.86':139
'21#.#6.252.250':139
'21#.#6.172.70':139
'21#.#6.38.172':139
'21#.#6.70.93':139
'21#.#6.250.25':139
'21#.#6.92.249':139
'21#.86.87.2':139
'21#.#6.150.38':139
'21#.#6.0.150':139
'21#.#6.151.124':445
'21#.#6.220.40':445
'21#.#6.247.219':445
'21#.#6.172.158':139
'21#.#6.1.171':139
'21#.#6.234.0':139
'21#.#6.150.38':445
'21#.#6.0.150':445
'21#.#6.159.114':445
'21#.#6.41.98':139
'21#.#6.220.40':139
'21#.#6.84.148':139
'21#.#6.206.162':139
'21#.#6.112.207':139
'21#.#6.159.30':445
'21#.#6.27.232':445
'21#.#6.142.75':445
'21#.#6.247.219':139
'21#.#6.151.124':139
'21#.#6.162.65':139
'21#.#6.67.90':139
'21#.#6.223.67':139
'21#.#6.90.215':139
'21#.#6.1.173':139
'21#.#6.113.59':139
'21#.#6.231.48':139
'21#.#6.67.171':139
'21#.#6.241.35':139
'21#.#6.217.47':139
'21#.#6.249.149':139
'21#.#6.246.140':445
'21#.#6.38.244':445
'21#.#6.42.28':445
'21#.#6.81.215':445
'21#.86.77.8':445
'21#.#6.182.113':445
'21#.#6.203.104':445
'21#.#6.113.228':445
'21#.#6.212.82':445
'21#.#6.228.211':445
'21#.#6.129.198':445
'21#.#6.69.105':445
'21#.#6.51.42':445
'21#.#6.250.43':445
'21#.#6.13.53':445
'21#.#6.49.71':445
'21#.#6.84.132':445
'21#.#6.82.234':445
'21#.#6.96.189':445
'21#.#6.238.18':445
'21#.#6.65.235':445
'21#.#6.122.192':139
'21#.86.5.55':445
'21#.#6.169.132':445
'21#.#6.180.241':445
'21#.#6.121.166':445
'21#.#6.15.16':445
'21#.#6.50.142':445
'21#.#6.150.31':445
'21#.#6.13.121':445
'21#.#6.11.118':445
'21#.#6.103.125':445
'21#.#6.148.195':445
'21#.#6.172.70':445
'21#.#6.38.172':445
'21#.#6.70.93':445
'21#.#6.250.25':445
'21#.#6.92.249':445
'21#.#6.187.134':445
'21#.#6.194.216':445
'21#.#6.178.37':445
'21#.#6.122.192':445
'21#.#6.37.141':445
'21#.#6.106.79':445
'21#.#6.132.191':445
'21#.#6.70.243':445
'21#.#6.251.245':445
'21#.#6.170.42':445
'21#.#6.17.202':139
'21#.#6.32.18':139
'21#.#6.172.73':445
'21#.#6.53.117':445
'21#.#6.254.2':445
'21#.#6.251.234':445
'21#.#6.113.101':445
'21#.#6.41.246':445
'21#.#6.178.198':445
'21#.#6.67.190':445
'21#.#6.117.56':445
'21#.#6.65.40':445
'21#.#6.61.155':445
'21#.#6.11.39':445
'21#.#6.95.42':445
'21#.#6.144.221':445
'21#.#6.25.144':445
'21#.#6.150.31':139
'21#.#6.67.190':139
'21#.#6.50.142':139
'21#.#6.103.125':139
'21#.#6.13.121':139
'21#.#6.41.246':139
'21#.#6.95.42':139
'21#.#6.113.101':139
'21#.#6.117.56':139
'21#.#6.178.198':139
'21#.#6.11.118':139
'21#.#6.194.216':139
'21#.#6.148.195':139
'21#.#6.187.134':139
'21#.#6.37.141':139
'21#.#6.178.37':139
'21#.86.5.55':139
'21#.#6.169.132':139
'21#.#6.180.241':139
'21#.#6.121.166':139
'21#.#6.15.16':139
'21#.#6.172.158':445
'21#.#6.1.171':445
'21#.#6.234.0':445
'21#.#6.254.2':139
'21#.#6.172.73':139
'21#.#6.131.35':445
'21#.#6.180.176':445
'21#.#6.252.250':445
'21#.86.87.2':445
'21#.#6.251.86':445
'21#.#6.53.117':139
'21#.#6.61.155':139
'21#.#6.251.234':139
'21#.#6.65.40':139
'21#.#6.144.221':139
'21#.#6.11.39':139
'21#.#6.106.79':139
'21#.#6.132.191':139
'21#.#6.70.243':139
'21#.#6.251.245':139
'21#.#6.170.42':139
'21#.#6.0.228':139
'21#.#6.122.50':445
'21#.#6.86.90':445
'21#.#6.219.28':445
'21#.#6.78.100':445
'21#.#6.22.45':445
'21#.#6.240.186':445
'21#.#6.103.18':445
'21#.#6.220.137':445
'21#.#6.167.142':445
'21#.#6.172.182':445
'21#.#6.214.33':445
'21#.#6.67.180':139
'21#.#6.33.122':139
'21#.#6.220.182':139
'21#.#6.229.177':139
'21#.#6.234.34':139
'21#.#6.237.131':445
'21#.#6.158.17':445
'21#.#6.154.3':139
'21#.#6.185.13':139
'21#.#6.190.239':139
'21#.#6.58.153':445
'21#.#6.149.35':445
'21#.#6.118.109':445
'21#.#6.32.139':445
'21#.#6.221.199':445
'21#.#6.51.222':445
'21#.#6.51.202':445
'21#.86.3.20':445
'21#.#6.36.138':445
'21#.#6.94.154':445
'21#.#6.254.240':445
'21#.#6.104.44':445
'21#.#6.30.172':445
'21#.#6.39.23':445
'21#.#6.220.73':445
'21#.#6.22.39':445
'21#.#6.34.19':445
'21#.#6.138.234':445
'21#.86.7.86':445
'21#.#6.96.107':445
'21#.#6.94.199':445
'21#.#6.81.220':139
'21#.#6.22.39':139
'21#.#6.39.23':139
'21#.#6.220.73':139
'21#.#6.240.186':139
'21#.#6.103.18':139
'21#.#6.94.199':139
'21#.86.7.86':139
'21#.#6.96.107':139
'21#.#6.104.44':139
'21#.#6.30.172':139
'21#.#6.220.137':139
'21#.#6.237.131':139
'21#.#6.214.33':139
'21#.#6.78.100':139
'21#.#6.22.45':139
'21#.#6.219.28':139
'21#.#6.167.142':139
'21#.#6.172.182':139
'21#.#6.86.90':139
'21#.#6.158.17':139
'21#.#6.122.50':139
'21#.#6.29.231':139
'21#.#6.233.3':139
'21#.#6.231.214':139
'21#.#6.51.222':139
'21#.#6.51.202':139
'21#.#6.9.240':139
'21#.#6.78.118':139
'21#.#6.129.223':139
'21#.#6.105.16':139
'21#.#6.69.206':139
'21#.86.3.20':139
'21#.#6.32.139':139
'21#.#6.221.199':139
'21#.#6.254.240':139
'21#.#6.34.19':139
'21#.#6.138.234':139
'21#.#6.36.138':139
'21#.#6.94.154':139
'21#.#6.149.35':139
'21#.#6.118.109':139
'21#.#6.58.153':139
'21#.#6.231.214':445
'21#.#6.27.232':139
'21#.#6.13.53':139
'21#.#6.159.30':139
'21#.#6.75.33':445
'21#.#6.142.75':139
'21#.#6.51.42':139
'21#.#6.238.18':139
'21#.#6.69.105':139
'21#.#6.49.71':139
'21#.#6.250.43':139
'21#.#6.33.47':445
'21#.#6.233.121':445
'21#.#6.212.123':445
'21#.#6.252.144':445
'21#.#6.46.139':139
'21#.#6.112.152':445
'21#.#6.33.47':139
'21#.#6.75.33':139
'21#.#6.46.139':445
'21#.#6.147.212':445
'21#.#6.145.83':445
'21#.#6.203.104':139
'21#.#6.159.114':139
'21#.#6.182.113':139
'21#.#6.228.211':139
'21#.#6.113.228':139
'21#.#6.39.79':139
'21#.#6.115.109':139
'21#.#6.90.46':139
'21#.#6.194.183':139
'21#.#6.123.136':139
'21#.#6.212.82':139
'21#.#6.82.234':139
'21#.#6.129.198':139
'21#.#6.84.132':139
'21#.#6.65.235':139
'21#.#6.96.189':139
'21#.#6.246.140':139
'21#.#6.38.244':139
'21#.#6.42.28':139
'21#.#6.81.215':139
'21#.86.77.8':139
'21#.#6.145.83':139
'21#.#6.190.239':445
'21#.#6.154.3':445
'21#.#6.185.13':445
'21#.#6.67.180':445
'21#.#6.33.122':445
'21#.#6.240.186':9988
'21#.#6.39.23':9988
'21#.#6.30.172':9988
'21#.#6.96.107':9988
'21#.#6.158.17':9988
'21#.#6.220.182':445
'21#.#6.69.206':445
'21#.#6.129.223':445
'21#.#6.105.16':445
'21#.#6.29.231':445
'21#.#6.233.3':445
'21#.#6.229.177':445
'21#.#6.234.34':445
'21#.#6.81.220':445
'21#.#6.9.240':445
'21#.#6.78.118':445
'21#.#6.104.44':9988
'21#.#6.172.182':9988
'21#.#6.220.73':9988
'21#.#6.118.109':9988
'21#.#6.254.240':9988
'21#.#6.212.123':139
'21#.#6.147.212':139
'21#.#6.233.121':139
'21#.#6.112.152':139
'21#.#6.252.144':139
'21#.#6.237.131':9988
'21#.#6.34.19':9988
'21#.#6.94.199':9988
'21#.#6.103.18':9988
'21#.86.7.86':9988
'21#.#6.78.100':9988
'21#.#6.219.28':9988
'21#.#6.58.153':9988
'21#.#6.220.137':9988
'21#.#6.22.39':9988
'21#.#6.86.90':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней