Trojan.Starman.6448

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14#.#51.85.118':139
'14#.#51.27.232':139
'14#.#51.250.78':139
'14#.#51.237.116':139
'14#.#51.114.173':139
'14#.#51.243.125':139
'14#.#51.53.130':139
'14#.#51.150.192':139
'14#.#51.137.195':139
'14#.#51.32.126':139
'14#.#51.116.91':139
'14#.#51.94.140':139
'14#.#51.248.59':139
'14#.#51.104.241':139
'14#.#51.63.45':139
'14#.#51.241.114':139
'14#.#51.242.242':139
'14#.#51.92.22':139
'14#.#51.187.54':139
'14#.#51.145.77':139
'14#.#51.28.167':139
'14#.#51.63.45':445
'14#.#51.241.114':445
'14#.#51.62.32':445
'14#.#51.208.222':445
'14#.#51.174.209':445
'14#.#51.145.77':445
'14#.#51.28.167':445
'14#.#51.248.59':445
'14#.#51.104.241':445
'14#.#51.94.140':445
'14#.#51.223.84':445
'14#.#51.78.122':445
'14#.#51.57.184':445
'14#.#51.77.74':139
'14#.#51.148.251':139
'14#.#51.155.18':139
'14#.#51.39.27':445
'14#.#51.121.121':445
'14#.#51.187.231':445
'14#.#51.67.96':445
'14#.#51.178.125':445
'14#.#51.124.76':139
'14#.#51.33.24':445
'14#.#51.219.66':139
'14#.#51.85.72':139
'14#.#51.67.85':139
'14#.#51.91.38':445
'14#.#51.113.90':445
'14#.#51.38.96':445
'14#.#51.133.118':445
'14#.#51.180.47':445
'14#.#51.104.79':139
'14#.#51.91.38':139
'14#.#51.113.90':139
'14#.#51.38.96':139
'14#.#51.133.118':139
'14#.#51.180.47':139
'14#.#51.228.212':139
'14#.#51.46.244':139
'14#.#51.111.33':139
'14#.#51.23.66':139
'14#.#51.190.136':139
'14#.#51.187.231':139
'14#.#51.39.27':139
'14#.#51.178.125':139
'14#.#51.57.184':139
'14#.#51.67.96':139
'14#.#51.174.209':139
'14#.#51.62.32':139
'14#.#51.208.222':139
'14#.#51.121.121':139
'14#.#51.223.84':139
'14#.#51.78.122':139
'14#.#51.228.212':445
'14#.#51.46.244':445
'14#.#51.111.33':445
'14#.#51.23.66':445
'14#.#51.190.136':445
'14#.#51.219.66':445
'14#.#51.124.76':445
'14#.#51.67.85':445
'14#.#51.104.79':445
'14#.#51.85.72':445
'14#.#51.187.54':445
'14#.#51.94.177':139
'14#.#51.77.76':139
'14#.#51.94.118':139
'14#.#51.237.132':139
'14#.#51.118.69':139
'14#.#51.32.4':139
'14#.#51.236.31':139
'14#.#51.21.55':139
'14#.#51.11.41':139
'14#.#51.176.177':139
'14#.#51.56.27':139
'14#.#51.8.67':445
'14#.#51.46.75':445
'14#.#51.156.165':445
'14#.#51.158.251':445
'14#.#51.136.159':445
'14#.#51.227.33':139
'14#.#51.151.227':139
'14#.#51.33.83':445
'14#.#51.165.147':445
'14#.#51.112.112':445
'14#.#51.52.251':139
'14#.#51.36.53':139
'14#.#51.251.65':139
'14#.#51.130.77':139
'14#.#51.172.229':139
'14#.#51.30.65':139
'14#.#51.4.192':139
'14#.#51.64.234':139
'14#.#51.137.41':139
'14#.#51.115.241':139
'14#.#51.72.207':139
'14#.#51.151.184':139
'14#.#51.38.208':139
'14#.#51.212.130':139
'14#.#51.207.236':139
'14#.#51.31.56':139
'14#.#51.230.93':139
'14#.#51.10.112':139
'14#.#51.93.3':139
'14#.#51.78.230':139
'14#.#51.3.78':139
'14#.#51.155.18':445
'14#.#51.77.74':445
'14#.#51.148.251':445
'14#.#51.243.125':445
'14#.#51.150.192':445
'14#.#51.182.63':139
'14#.#51.60.58':139
'14#.#51.63.219':139
'14#.#51.237.77':139
'14#.#51.218.237':139
'14#.#51.53.130':445
'14#.#51.237.116':445
'14#.#51.114.173':445
'14#.#51.116.91':445
'14#.#51.242.242':445
'14#.#51.92.22':445
'14#.#51.137.195':445
'14#.#51.32.126':445
'14#.#51.27.232':445
'14#.#51.250.78':445
'14#.#51.85.118':445
'14#.#51.63.219':445
'14#.#51.182.63':445
'14#.#51.218.237':445
'14#.#51.33.83':139
'14#.#51.237.77':445
'14#.#51.26.35':445
'14#.#51.251.188':445
'14#.#51.14.209':445
'14#.#51.60.58':445
'14#.#51.234.197':445
'14#.#51.112.112':139
'14#.#51.251.188':139
'14#.#51.158.251':139
'14#.#51.26.35':139
'14#.#51.234.197':139
'14#.#51.14.209':139
'14#.#51.46.75':139
'14#.#51.165.147':139
'14#.#51.8.67':139
'14#.#51.136.159':139
'14#.#51.156.165':139
'14#.#51.40.224':445
'14#.#51.118.183':445
'14#.#51.224.76':445
'14#.#51.94.136':445
'14#.#51.76.185':445
'14#.#51.114.62':445
'14#.#51.239.113':445
'14#.#51.12.227':445
'14#.#51.2.131':445
'14#.#51.29.164':445
'14#.#51.17.177':445
'14#.#51.157.175':139
'14#.#51.23.149':139
'14#.#51.27.4':139
'14#.#51.49.130':139
'14#.#51.16.125':139
'14#.#51.166.133':139
'14#.#51.70.243':445
'14#.#51.205.58':139
'14#.#51.80.81':139
'14#.#51.48.137':139
'14#.#51.82.142':445
'14#.#51.44.160':445
'14#.#51.143.28':445
'14#.#51.134.159':445
'14#.#51.28.225':445
'14#.#51.66.245':445
'14#.#51.184.67':445
'14#.#51.45.89':445
'14#.#51.31.200':445
'14#.#51.25.146':445
'14#.#51.234.133':445
'14#.#51.7.94':445
'14#.#51.144.63':445
'14#.#51.93.209':445
'14#.#51.50.144':445
'14#.#51.208.245':445
'14#.#51.77.130':445
'14#.#51.134.9':445
'14#.#51.113.157':445
'14#.#51.51.195':445
'14#.#51.38.168':445
'14#.#51.93.209':139
'14#.#51.7.94':139
'14#.#51.208.245':139
'14#.#51.239.113':139
'14#.#51.50.144':139
'14#.#51.113.157':139
'14#.#51.77.130':139
'14#.#51.38.168':139
'14#.#51.144.63':139
'14#.#51.51.195':139
'14#.#51.114.62':139
'14#.#51.76.185':139
'14#.#51.224.76':139
'14#.#51.17.177':139
'14#.#51.94.136':139
'14#.#51.70.243':139
'14#.#51.29.164':139
'14#.#51.12.227':139
'14#.#51.2.131':139
'14#.#51.40.224':139
'14#.#51.118.183':139
'14#.#51.178.198':139
'14#.#51.100.142':139
'14#.#51.198.53':139
'14#.#51.184.67':139
'14#.#51.239.70':139
'14#.#51.48.108':139
'14#.#51.85.199':139
'14#.#51.171.61':139
'14#.#51.28.5':139
'14#.#51.124.102':139
'14#.#51.66.245':139
'14#.#51.28.225':139
'14#.#51.143.28':139
'14#.#51.134.159':139
'14#.#51.134.9':139
'14#.#51.234.133':139
'14#.#51.25.146':139
'14#.#51.45.89':139
'14#.#51.31.200':139
'14#.#51.82.142':139
'14#.#51.44.160':139
'14#.#51.239.70':445
'14#.#51.14.232':445
'14#.#51.11.7':445
'14#.#51.66.27':139
'14#.#51.32.153':139
'14#.#51.39.62':139
'14#.#51.165.244':445
'14#.#51.211.249':445
'14#.#51.41.248':445
'14#.#51.82.165':445
'14#.#51.4.209':445
'14#.#51.235.106':139
'14#.#51.140.88':139
'14#.#51.190.46':139
'14#.#51.155.20':139
'14#.#51.246.106':139
'14#.#51.39.114':139
'14#.#51.85.172':139
'14#.#51.215.119':139
'14#.#51.172.115':139
'14#.#51.110.151':139
'14#.#51.166.140':139
'14#.#51.85.172':445
'14#.#51.215.119':445
'14#.#51.172.115':445
'14#.#51.166.140':445
'14#.#51.110.151':445
'14#.#51.66.27':445
'14#.#51.33.24':139
'14#.#51.39.62':445
'14#.#51.235.106':445
'14#.#51.32.153':445
'14#.#51.190.46':445
'14#.#51.154.76':445
'14#.#51.77.171':445
'14#.#51.129.73':445
'14#.#51.25.152':445
'14#.#51.6.39':445
'14#.#51.155.20':445
'14#.#51.140.88':445
'14#.#51.39.114':445
'14#.#51.38.44':445
'14#.#51.246.106':445
'14#.#51.48.137':445
'14#.#51.205.58':445
'14#.#51.80.81':445
'14#.#51.157.175':445
'14#.#51.23.149':445
'14#.#51.40.224':9988
'14#.#51.2.131':9988
'14#.#51.94.136':9988
'14#.#51.166.133':445
'14#.#51.224.76':9988
'14#.#51.27.4':445
'14#.#51.28.5':445
'14#.#51.124.102':445
'14#.#51.100.142':445
'14#.#51.198.53':445
'14#.#51.178.198':445
'14#.#51.49.130':445
'14#.#51.16.125':445
'14#.#51.85.199':445
'14#.#51.171.61':445
'14#.#51.48.108':445
'14#.#51.211.249':139
'14#.#51.25.152':139
'14#.#51.165.244':139
'14#.#51.4.209':139
'14#.#51.41.248':139
'14#.#51.77.171':139
'14#.#51.38.44':139
'14#.#51.154.76':139
'14#.#51.6.39':139
'14#.#51.129.73':139
'14#.#51.82.165':139
'14#.#51.44.160':9988
'14#.#51.239.70':9988
'14#.#51.51.195':9988
'14#.#51.114.62':9988
'14#.#51.50.144':9988
'14#.#51.14.232':139
'14#.#51.11.7':139
'14#.#51.27.4':9988
'14#.#51.100.142':9988
'14#.#51.85.199':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней