Trojan.Starman.6302

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#06.57.35':445
'20#.#06.78.189':445
'20#.#06.17.27':445
'20#.#06.254.34':139
'20#.#06.252.239':139
'20#.#06.58.125':139
'20#.#06.152.16':445
'20#.#06.201.20':445
'20#.#06.161.200':445
'20#.#06.32.247':445
'20#.#06.77.134':445
'20#.#06.60.157':445
'20#.206.2.8':445
'20#.#06.201.20':139
'20#.#06.161.200':139
'20#.#06.32.247':139
'20#.#06.77.134':139
'20#.#06.60.157':139
'20#.206.2.8':139
'20#.#06.152.142':139
'20#.#06.83.136':139
'20#.#06.112.56':139
'20#.#06.143.69':139
'20#.#06.42.172':139
'20#.#06.0.240':139
'20#.#06.42.144':139
'20#.#06.42.172':445
'20#.#06.122.245':139
'20#.#06.225.200':139
'20#.#06.225.149':139
'20#.#06.103.202':139
'20#.#06.10.44':139
'20#.#06.82.139':139
'20#.#06.57.210':139
'20#.#06.185.37':139
'20#.#06.74.2':139
'20#.#06.181.189':139
'20#.#06.56.160':139
'20#.#06.44.57':139
'20#.#06.191.44':139
'20#.#06.83.136':445
'20#.#06.112.56':445
'20#.#06.143.69':445
'20#.#06.152.142':445
'20#.#06.0.240':445
'20#.#06.42.144':445
'20#.#06.254.34':445
'20#.#06.241.216':139
'20#.#06.75.77':139
'20#.#06.174.34':139
'20#.#06.252.239':445
'20#.#06.58.125':445
'20#.#06.178.147':139
'20#.#06.152.16':139
'20#.#06.213.167':139
'20#.#06.22.145':139
'20#.#06.129.207':139
'20#.#06.9.19':139
'20#.#06.86.161':139
'20#.#06.128.233':139
'20#.#06.237.68':445
'20#.#06.221.165':445
'20#.#06.42.83':445
'20#.#06.123.111':445
'20#.#06.148.239':445
'20#.#06.121.48':445
'20#.#06.74.121':445
'20#.#06.74.139':139
'20#.#06.81.77':139
'20#.#06.86.118':139
'20#.#06.110.216':139
'20#.#06.30.177':139
'20#.#06.58.228':139
'20#.#06.229.79':139
'20#.#06.24.227':139
'20#.#06.151.197':139
'20#.#06.5.48':139
'20#.#06.184.228':139
'20#.#06.201.184':139
'20#.#06.98.179':139
'20#.#06.84.195':445
'20#.#06.5.48':445
'20#.#06.9.19':445
'20#.#06.86.161':445
'20#.#06.98.179':445
'20#.#06.24.227':445
'20#.#06.151.197':445
'20#.#06.128.233':445
'20#.#06.57.35':139
'20#.#06.78.189':139
'20#.#06.17.27':139
'20#.#06.213.167':445
'20#.#06.22.145':445
'20#.#06.129.207':445
'20#.#06.216.118':445
'20#.#06.110.216':445
'20#.#06.30.177':445
'20#.#06.87.180':445
'20#.#06.22.251':445
'20#.#06.119.52':445
'20#.#06.58.228':445
'20#.#06.229.79':445
'20#.#06.184.228':445
'20#.#06.201.184':445
'20#.#06.74.139':445
'20#.#06.81.77':445
'20#.#06.86.118':445
'20#.#06.3.181':139
'20#.#06.228.63':445
'20#.#06.33.228':445
'20#.#06.16.34':445
'20#.#06.33.131':445
'20#.#06.36.121':445
'20#.#06.63.192':445
'20#.#06.77.159':445
'20#.#06.22.230':445
'20#.#06.65.145':445
'20#.#06.242.20':445
'20#.#06.19.240':445
'20#.#06.238.20':445
'20#.#06.161.9':445
'20#.#06.22.230':139
'20#.#06.65.145':139
'20#.#06.242.20':139
'20#.#06.19.240':139
'20#.#06.238.20':139
'20#.#06.161.9':139
'20#.#06.166.235':139
'20#.#06.172.14':445
'20#.#06.209.0':445
'20#.#06.56.77':445
'20#.#06.116.167':139
'20#.#06.88.235':139
'20#.#06.156.68':139
'20#.#06.166.235':445
'20#.#06.17.32':139
'20#.#06.99.132':139
'20#.#06.198.98':139
'20#.#06.18.95':139
'20#.#06.204.159':139
'20#.#06.137.68':139
'20#.#06.109.64':139
'20#.#06.27.159':139
'20#.#06.71.13':139
'20#.#06.92.73':139
'20#.#06.62.8':139
'20#.#06.94.206':139
'20#.#06.4.112':139
'20#.#06.125.61':139
'20#.#06.69.54':139
'20#.#06.108.101':139
'20#.#06.116.167':445
'20#.#06.88.235':445
'20#.#06.156.68':445
'20#.#06.47.58':139
'20#.#06.42.183':139
'20#.#06.123.67':139
'20#.#06.95.123':139
'20#.#06.6.80':139
'20#.#06.137.103':139
'20#.#06.122.230':139
'20#.#06.77.159':139
'20#.#06.174.34':445
'20#.#06.103.202':445
'20#.#06.10.44':445
'20#.#06.178.147':445
'20#.#06.241.216':445
'20#.#06.75.77':445
'20#.#06.82.139':445
'20#.#06.57.210':445
'20#.#06.56.160':445
'20#.#06.44.57':445
'20#.#06.122.245':445
'20#.#06.225.200':445
'20#.#06.225.149':445
'20#.#06.44.250':139
'20#.#06.7.102':139
'20#.#06.15.47':139
'20#.#06.238.3':139
'20#.#06.104.237':139
'20#.#06.33.105':139
'20#.#06.126.40':139
'20#.#06.69.37':139
'20#.#06.48.113':139
'20#.#06.227.47':139
'20#.#06.208.125':139
'20#.#06.27.12':139
'20#.#06.16.18':139
'20#.#06.191.44':445
'20#.#06.227.47':445
'20#.#06.172.14':139
'20#.#06.209.0':139
'20#.#06.16.18':445
'20#.#06.69.37':445
'20#.#06.48.113':445
'20#.#06.56.77':139
'20#.#06.228.63':139
'20#.#06.33.228':139
'20#.#06.16.34':139
'20#.#06.33.131':139
'20#.#06.36.121':139
'20#.#06.63.192':139
'20#.#06.3.181':445
'20#.#06.238.3':445
'20#.#06.104.237':445
'20#.#06.185.37':445
'20#.#06.74.2':445
'20#.#06.181.189':445
'20#.#06.33.105':445
'20#.#06.126.40':445
'20#.#06.208.125':445
'20#.#06.27.12':445
'20#.#06.44.250':445
'20#.#06.7.102':445
'20#.#06.15.47':445
'20#.#06.137.249':445
'20#.#06.253.88':445
'20#.#06.32.189':445
'20#.#06.83.172':445
'20#.#06.57.182':445
'20#.#06.129.106':445
'20#.#06.84.254':445
'20#.#06.20.109':445
'20#.#06.236.53':445
'20#.#06.122.236':445
'20#.#06.48.222':445
'20#.#06.125.158':445
'20#.#06.237.52':445
'20#.#06.101.143':445
'20#.#06.40.8':445
'20#.#06.60.223':445
'20#.#06.168.39':445
'20#.#06.232.56':445
'20#.#06.34.213':445
'20#.#06.44.159':445
'20#.#06.246.210':445
'20#.#06.220.117':445
'20#.#06.57.90':445
'20#.#06.176.198':445
'20#.#06.77.17':445
'20#.#06.232.226':445
'20#.#06.81.129':445
'20#.#06.174.218':445
'20#.#06.163.78':445
'20#.#06.29.55':445
'20#.#06.102.219':445
'20#.#06.130.138':445
'20#.#06.60.62':445
'20#.#06.246.242':445
'20#.#06.57.205':9988
'20#.#06.0.227':139
'20#.#06.112.1':139
'20#.#06.59.90':445
'20#.#06.168.39':9988
'20#.#06.172.78':9988
'20#.#06.143.57':445
'20#.#06.46.224':445
'20#.#06.166.249':445
'20#.#06.186.68':445
'20#.#06.172.78':445
'20#.#06.102.7':445
'20#.#06.202.225':445
'20#.#06.57.205':445
'20#.#06.111.137':445
'20#.#06.233.193':445
'20#.#06.61.171':445
'20#.#06.155.90':445
'20#.#06.17.231':445
'20#.#06.156.59':445
'20#.#06.83.172':139
'20#.#06.57.182':139
'20#.#06.129.106':139
'20#.#06.246.210':139
'20#.#06.220.117':139
'20#.#06.57.90':139
'20#.#06.137.249':139
'20#.#06.48.222':139
'20#.#06.125.158':139
'20#.#06.237.52':139
'20#.#06.253.88':139
'20#.#06.32.189':139
'20#.#06.84.254':139
'20#.#06.129.248':139
'20#.#06.40.8':139
'20#.#06.111.125':139
'20#.#06.60.223':139
'20#.#06.156.59':139
'20#.#06.34.213':139
'20#.#06.168.39':139
'20#.#06.176.198':139
'20#.#06.77.17':139
'20#.#06.232.226':139
'20#.#06.232.56':139
'20#.#06.101.143':139
'20#.#06.44.159':139
'20#.#06.20.109':139
'20#.#06.102.219':139
'20#.#06.130.138':139
'20#.#06.60.62':139
'20#.#06.57.205':139
'20#.#06.111.137':139
'20#.#06.233.193':139
'20#.#06.174.218':139
'20#.#06.59.90':139
'20#.#06.129.248':445
'20#.#06.111.125':445
'20#.#06.163.78':139
'20#.#06.29.55':139
'20#.#06.246.242':139
'20#.#06.186.68':139
'20#.#06.172.78':139
'20#.#06.102.7':139
'20#.#06.236.53':139
'20#.#06.122.236':139
'20#.#06.81.129':139
'20#.#06.143.57':139
'20#.#06.202.225':139
'20#.#06.155.90':139
'20#.#06.17.231':139
'20#.#06.46.224':139
'20#.#06.166.249':139
'20#.#06.61.171':139
'20#.#06.50.12':139
'20#.#06.39.140':139
'20#.#06.250.38':139
'20#.#06.161.249':139
'20#.#06.203.238':139
'20#.#06.4.175':139
'20#.#06.23.226':139
'20#.#06.165.239':139
'20#.#06.163.203':445
'20#.#06.246.23':445
'20#.#06.26.39':445
'20#.#06.19.226':139
'20#.#06.205.154':445
'20#.#06.77.152':445
'20#.#06.163.203':139
'20#.#06.246.23':139
'20#.#06.26.39':139
'20#.#06.51.98':445
'20#.#06.205.154':139
'20#.#06.77.152':139
'20#.#06.226.26':139
'20#.#06.115.164':139
'20#.#06.159.250':139
'20#.#06.238.159':139
'20#.#06.91.236':139
'20#.#06.139.123':139
'20#.#06.48.92':139
'20#.#06.226.26':445
'20#.#06.121.48':139
'20#.#06.74.121':139
'20#.#06.221.165':139
'20#.#06.19.226':445
'20#.#06.237.68':139
'20#.#06.148.239':139
'20#.#06.42.83':139
'20#.#06.22.251':139
'20#.#06.119.52':139
'20#.#06.216.118':139
'20#.#06.123.111':139
'20#.#06.84.195':139
'20#.#06.87.180':139
'20#.#06.115.164':445
'20#.#06.159.250':445
'20#.#06.238.159':445
'20#.#06.91.236':445
'20#.#06.139.123':445
'20#.#06.48.92':445
'20#.#06.203.238':445
'20#.#06.250.38':445
'20#.#06.161.249':445
'20#.#06.165.239':445
'20#.#06.4.175':445
'20#.#06.23.226':445
'20#.#06.39.140':445
'20#.#06.59.66':445
'20#.#06.116.33':139
'20#.#06.236.153':139
'20#.#06.226.133':139
'20#.#06.209.40':139
'20#.#06.200.208':139
'20#.#06.230.200':139
'20#.#06.157.226':139
'20#.#06.8.229':139
'20#.#06.59.66':139
'20#.#06.51.98':139
'20#.#06.56.158':139
'20#.#06.5.115':139
'20#.#06.108.206':139
'20#.#06.58.127':139
'20#.#06.21.111':139
'20#.#06.0.26':139
'20#.#06.21.182':139
'20#.#06.21.212':139
'20#.#06.139.211':139
'20#.#06.7.141':139
'20#.#06.169.87':139
'20#.#06.87.169':139
'20#.#06.48.224':139
'20#.#06.22.38':139
'20#.#06.75.153':139
'20#.#06.17.206':139
'20#.#06.0.227':445
'20#.#06.200.208':445
'20#.#06.230.200':445
'20#.#06.116.33':445
'20#.#06.87.169':445
'20#.#06.48.224':445
'20#.#06.209.40':445
'20#.#06.236.153':445
'20#.#06.5.115':445
'20#.#06.108.206':445
'20#.#06.8.229':445
'20#.#06.226.133':445
'20#.#06.157.226':445
'20#.#06.56.158':445
'20#.#06.21.212':445
'20#.#06.139.211':445
'20#.#06.58.127':445
'20#.#06.112.1':445
'20#.#06.50.12':445
'20#.#06.21.182':445
'20#.#06.21.111':445
'20#.#06.75.153':445
'20#.#06.17.206':445
'20#.#06.169.87':445
'20#.#06.0.26':445
'20#.#06.7.141':445
'20#.#06.22.38':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней