Trojan.Starman.6441

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#8.230.145':139
'12#.#8.31.233':139
'12#.#8.178.123':139
'12#.#8.76.219':139
'12#.#8.123.130':139
'12#.#8.32.183':139
'12#.48.74.0':139
'12#.#8.149.135':139
'12#.#8.105.146':139
'12#.#8.100.36':139
'12#.#8.103.60':139
'12#.#8.171.42':139
'12#.#8.143.245':139
'12#.#8.69.101':139
'12#.#8.90.149':139
'12#.#8.167.142':139
'12#.#8.44.192':139
'12#.#8.4.253':139
'12#.#8.96.57':139
'12#.#8.19.144':139
'12#.#8.35.250':139
'12#.#8.143.245':445
'12#.#8.19.144':445
'12#.#8.171.42':445
'12#.#8.167.142':445
'12#.#8.69.101':445
'12#.#8.4.253':445
'12#.#8.103.60':445
'12#.#8.44.192':445
'12#.#8.35.250':445
'12#.#8.96.57':445
'12#.#8.90.149':445
'12#.#8.174.146':139
'12#.#8.161.230':445
'12#.#8.97.237':139
'12#.#8.37.113':139
'12#.#8.51.172':139
'12#.#8.173.205':445
'12#.#8.69.229':445
'12#.#8.207.110':445
'12#.#8.50.209':445
'12#.#8.167.40':445
'12#.#8.69.229':139
'12#.#8.65.43':139
'12#.#8.8.199':139
'12#.#8.135.129':139
'12#.#8.42.95':139
'12#.#8.148.107':139
'12#.#8.173.22':445
'12#.#8.214.53':445
'12#.#8.188.78':445
'12#.#8.231.63':139
'12#.#8.69.73':445
'12#.48.1.12':139
'12#.#8.120.249':139
'12#.#8.124.116':139
'12#.#8.169.195':139
'12#.#8.214.53':139
'12#.#8.252.126':139
'12#.#8.239.17':139
'12#.#8.36.239':139
'12#.48.7.67':139
'12#.#8.70.158':139
'12#.#8.214.245':139
'12#.#8.8.199':445
'12#.#8.231.63':445
'12#.#8.65.43':445
'12#.#8.148.107':445
'12#.#8.135.129':445
'12#.#8.207.110':139
'12#.#8.173.205':139
'12#.#8.167.40':139
'12#.#8.161.230':139
'12#.#8.50.209':139
'12#.#8.42.95':445
'12#.#8.124.116':445
'12#.#8.70.158':445
'12#.#8.120.249':445
'12#.#8.252.126':445
'12#.#8.169.195':445
'12#.#8.36.239':445
'12#.48.1.12':445
'12#.#8.239.17':445
'12#.#8.214.245':445
'12#.48.7.67':445
'12#.#8.103.254':139
'12#.#8.228.200':139
'12#.#8.165.147':139
'12#.#8.148.231':139
'12#.#8.186.239':139
'12#.#8.129.99':139
'12#.#8.135.111':139
'12#.#8.159.99':139
'12#.#8.138.15':139
'12#.#8.26.166':139
'12#.#8.230.248':445
'12#.#8.86.147':445
'12#.#8.191.158':445
'12#.#8.146.225':445
'12#.#8.64.42':445
'12#.#8.225.162':445
'12#.#8.67.141':445
'12#.#8.249.67':445
'12#.#8.97.242':445
'12#.#8.216.85':445
'12#.#8.151.34':445
'12#.48.43.5':139
'12#.#8.86.17':139
'12#.#8.175.249':139
'12#.#8.10.82':139
'12#.#8.88.182':139
'12#.48.23.7':139
'12#.#8.56.41':139
'12#.#8.221.72':139
'12#.#8.40.75':139
'12#.#8.220.88':139
'12#.#8.140.251':139
'12#.#8.233.134':139
'12#.#8.231.233':139
'12#.#8.134.148':139
'12#.#8.233.232':139
'12#.#8.148.233':139
'12#.#8.135.105':139
'12#.#8.28.43':139
'12#.#8.78.182':139
'12#.#8.221.33':139
'12#.#8.73.126':139
'12#.#8.136.72':445
'12#.#8.237.125':139
'12#.#8.144.242':139
'12#.#8.174.146':445
'12#.#8.51.172':445
'12#.#8.97.237':445
'12#.#8.22.126':139
'12#.#8.130.81':139
'12#.#8.55.209':139
'12#.#8.195.71':139
'12#.#8.243.80':139
'12#.#8.37.113':445
'12#.#8.230.145':445
'12#.#8.31.233':445
'12#.#8.178.123':445
'12#.#8.76.219':445
'12#.#8.123.130':445
'12#.#8.32.183':445
'12#.48.74.0':445
'12#.#8.149.135':445
'12#.#8.105.146':445
'12#.#8.100.36':445
'12#.#8.144.242':445
'12#.#8.195.71':445
'12#.#8.237.125':445
'12#.#8.249.67':139
'12#.#8.230.248':139
'12#.#8.130.81':445
'12#.#8.17.184':445
'12#.#8.22.126':445
'12#.#8.243.80':445
'12#.#8.55.209':445
'12#.#8.67.141':139
'12#.#8.225.162':139
'12#.#8.146.225':139
'12#.#8.64.42':139
'12#.#8.17.184':139
'12#.#8.136.72':139
'12#.#8.151.34':139
'12#.#8.97.242':139
'12#.#8.216.85':139
'12#.#8.86.147':139
'12#.#8.191.158':139
'12#.#8.173.22':139
'12#.#8.38.145':445
'12#.#8.56.131':445
'12#.#8.167.97':445
'12#.#8.77.163':445
'12#.#8.68.79':445
'12#.#8.211.92':445
'12#.#8.159.217':445
'12#.#8.93.22':445
'12#.#8.140.153':445
'12#.#8.15.219':445
'12#.#8.4.157':445
'12#.#8.105.28':139
'12#.#8.165.138':139
'12#.#8.111.218':139
'12#.#8.117.116':139
'12#.#8.218.33':139
'12#.#8.100.139':445
'12#.#8.157.100':445
'12#.#8.38.166':139
'12#.#8.69.109':139
'12#.#8.165.236':139
'12#.#8.82.50':445
'12#.#8.35.20':445
'12#.#8.66.227':445
'12#.#8.214.137':445
'12#.#8.67.52':445
'12#.#8.31.53':445
'12#.#8.60.31':445
'12#.48.53.5':445
'12#.#8.145.141':445
'12#.#8.20.127':445
'12#.#8.137.119':445
'12#.#8.152.117':445
'12#.#8.49.204':445
'12#.#8.118.19':445
'12#.#8.78.123':445
'12#.#8.124.62':445
'12#.#8.224.189':445
'12#.#8.10.98':445
'12#.#8.208.35':445
'12#.#8.145.202':445
'12#.#8.249.119':445
'12#.#8.78.69':139
'12#.#8.124.62':139
'12#.#8.118.19':139
'12#.#8.78.123':139
'12#.#8.211.92':139
'12#.#8.159.217':139
'12#.#8.249.119':139
'12#.#8.208.35':139
'12#.#8.145.202':139
'12#.#8.152.117':139
'12#.#8.49.204':139
'12#.#8.93.22':139
'12#.#8.77.163':139
'12#.#8.68.79':139
'12#.#8.4.157':139
'12#.#8.100.139':139
'12#.#8.157.100':139
'12#.#8.140.153':139
'12#.#8.15.219':139
'12#.#8.56.131':139
'12#.#8.167.97':139
'12#.#8.38.145':139
'12#.#8.15.12':139
'12#.#8.107.37':139
'12#.#8.201.150':139
'12#.#8.31.53':139
'12#.#8.60.31':139
'12#.#8.251.6':139
'12#.#8.86.250':139
'12#.#8.6.228':139
'12#.#8.71.19':139
'12#.48.7.69':139
'12#.48.53.5':139
'12#.#8.214.137':139
'12#.#8.67.52':139
'12#.#8.137.119':139
'12#.#8.224.189':139
'12#.#8.10.98':139
'12#.#8.145.141':139
'12#.#8.20.127':139
'12#.#8.35.20':139
'12#.#8.66.227':139
'12#.#8.82.50':139
'12#.#8.153.14':445
'12#.#8.85.178':445
'12#.#8.170.74':445
'12#.#8.162.155':139
'12#.#8.115.109':139
'12#.#8.138.237':445
'12#.#8.248.43':445
'12#.#8.69.241':445
'12#.#8.96.217':445
'12#.#8.63.87':445
'12#.#8.177.193':139
'12#.#8.217.233':139
'12#.#8.138.84':139
'12#.#8.168.52':139
'12#.#8.254.111':139
'12#.#8.234.20':139
'12#.#8.68.25':139
'12#.#8.243.67':139
'12#.#8.25.127':139
'12#.#8.27.236':139
'12#.#8.127.27':139
'12#.#8.68.25':445
'12#.#8.243.67':445
'12#.#8.25.127':445
'12#.#8.27.236':445
'12#.#8.127.27':445
'12#.#8.69.73':139
'12#.#8.188.78':139
'12#.#8.115.109':445
'12#.#8.177.193':445
'12#.#8.162.155':445
'12#.#8.138.84':445
'12#.#8.213.145':445
'12#.#8.72.56':445
'12#.48.27.2':445
'12#.#8.32.248':445
'12#.#8.56.113':445
'12#.#8.168.52':445
'12#.#8.217.233':445
'12#.#8.234.20':445
'12#.#8.88.178':445
'12#.#8.254.111':445
'12#.#8.88.178':139
'12#.#8.69.109':445
'12#.#8.165.236':445
'12#.#8.165.138':445
'12#.#8.111.218':445
'12#.#8.105.28':445
'12#.#8.167.97':9988
'12#.#8.93.22':9988
'12#.#8.68.79':9988
'12#.#8.38.166':445
'12#.#8.157.100':9988
'12#.#8.218.33':445
'12#.#8.71.19':445
'12#.48.7.69':445
'12#.#8.107.37':445
'12#.#8.201.150':445
'12#.#8.15.12':445
'12#.#8.78.69':445
'12#.#8.117.116':445
'12#.#8.86.250':445
'12#.#8.6.228':445
'12#.#8.251.6':445
'12#.#8.138.237':139
'12#.#8.248.43':139
'12#.#8.69.241':139
'12#.#8.96.217':139
'12#.#8.63.87':139
'12#.#8.213.145':139
'12#.#8.72.56':139
'12#.48.27.2':139
'12#.#8.32.248':139
'12#.#8.56.113':139
'12#.#8.85.178':139
'12#.#8.145.202':9988
'12#.#8.249.119':9988
'12#.#8.118.19':9988
'12#.#8.78.123':9988
'12#.#8.124.62':9988
'12#.#8.170.74':139
'12#.#8.153.14':139
'12#.#8.69.109':9988
'12#.#8.208.35':9988
'12#.#8.165.138':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней