Trojan.Starman.6301

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#3.229.192':445
'21#.#3.196.80':445
'21#.#3.94.113':445
'21#.#3.63.196':445
'21#.#3.53.172':445
'21#.#3.170.15':445
'21#.#3.49.176':445
'21#.#3.232.173':445
'21#.#3.250.109':445
'21#.#3.113.232':445
'21#.#3.9.162':139
'21#.#3.202.184':139
'21#.#3.57.19':139
'21#.#3.50.226':139
'21#.#3.91.203':139
'21#.#3.45.197':139
'21#.#3.232.183':445
'21#.#3.90.91':139
'21#.#3.66.105':139
'21#.#3.85.58':445
'21#.#3.156.38':445
'21#.23.19.8':445
'21#.#3.171.216':445
'21#.#3.172.76':445
'21#.#3.167.19':445
'21#.#3.211.240':445
'21#.#3.124.160':445
'21#.#3.200.245':445
'21#.#3.44.126':445
'21#.#3.81.37':445
'21#.#3.3.161':445
'21#.23.91.3':445
'21#.#3.157.4':445
'21#.#3.160.156':445
'21#.#3.6.131':445
'21#.23.3.80':445
'21#.#3.158.108':445
'21#.#3.0.253':445
'21#.#3.129.108':445
'21#.#3.6.131':139
'21#.#3.0.253':139
'21#.#3.3.161':139
'21#.23.91.3':139
'21#.#3.129.108':139
'21#.#3.81.37':139
'21#.#3.171.216':139
'21#.23.3.80':139
'21#.#3.158.108':139
'21#.#3.160.156':139
'21#.#3.53.172':139
'21#.#3.232.173':139
'21#.#3.229.192':139
'21#.#3.196.80':139
'21#.#3.250.109':139
'21#.#3.85.58':139
'21#.#3.157.4':139
'21#.#3.170.15':139
'21#.#3.49.176':139
'21#.#3.172.76':139
'21#.#3.73.220':139
'21#.23.5.10':139
'21#.#3.100.93':139
'21#.#3.199.106':139
'21#.#3.211.4':139
'21#.#3.159.39':139
'21#.#3.152.107':139
'21#.#3.210.168':139
'21#.#3.34.200':139
'21#.#3.206.99':139
'21#.#3.167.19':139
'21#.#3.200.245':139
'21#.#3.156.38':139
'21#.23.19.8':139
'21#.#3.44.126':139
'21#.#3.70.61':139
'21#.#3.20.198':139
'21#.#3.211.240':139
'21#.#3.124.160':139
'21#.#3.181.235':139
'21#.#3.251.155':139
'21#.#3.35.26':139
'21#.#3.20.49':139
'21#.#3.132.142':139
'21#.#3.20.56':139
'21#.23.6.20':139
'21#.#3.16.86':139
'21#.#3.55.123':139
'21#.#3.19.178':139
'21#.#3.237.241':139
'21#.#3.223.63':139
'21#.#3.234.88':139
'21#.#3.45.16':139
'21#.#3.208.146':139
'21#.#3.114.57':139
'21#.#3.18.107':139
'21#.#3.127.172':139
'21#.#3.58.12':139
'21#.23.30.6':139
'21#.#3.229.176':445
'21#.#3.204.221':445
'21#.#3.76.19':139
'21#.#3.97.177':139
'21#.#3.49.104':445
'21#.#3.16.193':445
'21#.#3.62.148':445
'21#.#3.8.115':445
'21#.#3.169.46':445
'21#.#3.93.134':139
'21#.#3.204.37':139
'21#.#3.102.0':139
'21#.#3.63.164':139
'21#.#3.88.209':139
'21#.#3.17.102':139
'21#.#3.252.79':139
'21#.#3.15.172':139
'21#.#3.25.122':139
'21#.#3.56.66':139
'21#.#3.57.19':445
'21#.#3.50.226':445
'21#.#3.159.39':445
'21#.#3.152.107':445
'21#.#3.9.162':445
'21#.#3.90.91':445
'21#.#3.66.105':445
'21#.#3.202.184':445
'21#.#3.91.203':445
'21#.#3.34.200':445
'21#.#3.206.99':445
'21#.#3.100.93':445
'21#.#3.70.61':445
'21#.#3.20.198':445
'21#.#3.199.106':445
'21#.#3.211.4':445
'21#.#3.210.168':445
'21#.#3.73.220':445
'21#.23.5.10':445
'21#.#3.45.197':445
'21#.23.52.1':139
'21#.#3.3.142':139
'21#.#3.88.229':139
'21#.#3.1.173':139
'21#.#3.111.60':139
'21#.#3.136.79':139
'21#.#3.48.123':139
'21#.#3.178.23':139
'21#.#3.34.59':139
'21#.23.69.4':139
'21#.#3.49.104':139
'21#.#3.8.115':139
'21#.#3.229.176':139
'21#.#3.204.221':139
'21#.#3.169.46':139
'21#.#3.144.168':139
'21#.#3.165.144':139
'21#.#3.16.193':139
'21#.#3.62.148':139
'21#.#3.63.196':139
'21#.#3.8.155':445
'21#.#3.83.55':445
'21#.#3.106.164':139
'21#.#3.162.187':139
'21#.#3.147.0':445
'21#.#3.63.27':445
'21#.#3.16.63':445
'21#.#3.148.159':445
'21#.#3.63.143':445
'21#.#3.95.94':139
'21#.#3.245.209':139
'21#.#3.165.245':139
'21#.#3.77.60':139
'21#.#3.210.204':139
'21#.#3.77.94':139
'21#.#3.53.235':139
'21#.#3.126.171':139
'21#.23.35.5':139
'21#.#3.120.168':139
'21#.#3.220.16':445
'21#.#3.41.83':445
'21#.#3.48.36':445
'21#.#3.229.40':445
'21#.#3.130.63':445
'21#.#3.49.14':445
'21#.#3.156.115':445
'21#.#3.183.145':445
'21#.#3.96.18':445
'21#.#3.14.157':445
'21#.#3.4.207':445
'21#.#3.254.90':445
'21#.23.13.5':445
'21#.#3.38.15':445
'21#.#3.87.224':445
'21#.#3.39.251':445
'21#.#3.163.81':445
'21#.#3.119.199':445
'21#.#3.16.136':445
'21#.#3.206.36':445
'21#.#3.39.251':139
'21#.#3.16.136':139
'21#.#3.254.90':139
'21#.23.13.5':139
'21#.#3.206.36':139
'21#.#3.4.207':139
'21#.#3.229.40':139
'21#.#3.163.81':139
'21#.#3.119.199':139
'21#.#3.87.224':139
'21#.#3.147.0':139
'21#.#3.148.159':139
'21#.#3.83.55':139
'21#.#3.8.155':139
'21#.#3.63.143':139
'21#.#3.220.16':139
'21#.#3.38.15':139
'21#.#3.63.27':139
'21#.#3.16.63':139
'21#.#3.130.63':139
'21#.#3.104.184':139
'21#.#3.162.4':139
'21#.#3.177.218':139
'21#.#3.216.66':139
'21#.#3.8.168':139
'21#.#3.226.121':139
'21#.#3.153.149':139
'21#.#3.25.245':139
'21#.#3.82.134':139
'21#.#3.53.176':139
'21#.#3.49.14':139
'21#.#3.96.18':139
'21#.#3.41.83':139
'21#.#3.48.36':139
'21#.#3.14.157':139
'21#.#3.210.182':139
'21#.#3.54.210':139
'21#.#3.156.115':139
'21#.#3.183.145':139
'21#.#3.105.4':139
'21#.#3.234.104':139
'21#.#3.122.57':139
'21#.23.4.34':139
'21#.#3.117.234':139
'21#.#3.187.109':139
'21#.#3.14.79':139
'21#.#3.137.20':139
'21#.#3.233.30':139
'21#.23.83.3':139
'21#.#3.110.121':139
'21#.#3.123.113':139
'21#.#3.53.176':9988
'21#.#3.104.184':9988
'21#.#3.219.123':139
'21#.#3.73.199':139
'21#.#3.62.112':139
'21#.#3.7.221':139
'21#.#3.199.8':139
'21#.#3.110.121':445
'21#.#3.137.20':445
'21#.#3.233.30':445
'21#.#3.234.104':445
'21#.#3.117.234':445
'21#.#3.187.109':445
'21#.#3.113.232':139
'21#.#3.94.113':139
'21#.#3.14.79':445
'21#.#3.232.183':139
'21#.#3.105.4':445
'21#.#3.7.221':445
'21#.#3.199.8':445
'21#.#3.123.113':445
'21#.#3.219.123':445
'21#.#3.73.199':445
'21#.#3.122.57':445
'21#.23.4.34':445
'21#.#3.62.112':445
'21#.23.83.3':445
'21#.#3.77.60':445
'21#.#3.210.204':445
'21#.#3.226.121':445
'21#.#3.153.149':445
'21#.#3.245.209':445
'21#.23.35.5':445
'21#.#3.120.168':445
'21#.#3.165.245':445
'21#.#3.77.94':445
'21#.#3.82.134':445
'21#.#3.53.176':445
'21#.#3.177.218':445
'21#.#3.210.182':445
'21#.#3.54.210':445
'21#.#3.216.66':445
'21#.#3.8.168':445
'21#.#3.25.245':445
'21#.#3.104.184':445
'21#.#3.162.4':445
'21#.#3.53.235':445
'21#.#3.16.136':9988
'21#.#3.206.36':9988
'21#.23.13.5':9988
'21#.#3.39.251':9988
'21#.#3.130.63':9988
'21#.#3.96.18':9988
'21#.#3.183.145':9988
'21#.#3.48.36':9988
'21#.#3.49.14':9988
'21#.#3.38.15':9988
'21#.#3.106.164':445
'21#.#3.162.187':445
'21#.#3.126.171':445
'21#.#3.95.94':445
'21#.#3.8.155':9988
'21#.#3.83.55':9988
'21#.#3.63.27':9988
'21#.#3.148.159':9988
'21#.#3.63.143':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней