Trojan.Starman.6553

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#54.43.145':139
'22#.#54.3.197':139
'22#.#54.238.212':139
'22#.#54.198.71':139
'22#.#54.157.197':139
'22#.#54.188.240':139
'22#.#54.77.233':139
'22#.#54.138.101':139
'22#.#54.54.76':139
'22#.#54.122.54':139
'22#.#54.71.116':139
'22#.#54.79.111':139
'22#.#54.5.182':139
'22#.#54.193.151':445
'22#.#54.81.250':445
'22#.#54.135.182':445
'22#.#54.123.206':139
'22#.#54.52.119':139
'22#.#54.92.221':139
'22#.#54.29.170':139
'22#.#54.152.249':139
'22#.#54.43.145':445
'22#.#54.3.197':445
'22#.#54.238.212':445
'22#.#54.198.71':445
'22#.#54.157.197':445
'22#.#54.188.240':445
'22#.#54.77.233':445
'22#.#54.138.101':445
'22#.#54.54.76':445
'22#.#54.122.54':445
'22#.#54.71.116':445
'22#.#54.79.111':445
'22#.#54.5.182':445
'22#.#54.25.21':139
'22#.#54.107.58':139
'22#.#54.21.126':139
'22#.#54.123.206':445
'22#.#54.52.119':445
'22#.#54.92.221':445
'22#.#54.29.170':445
'22#.#54.152.249':445
'22#.#54.193.151':139
'22#.#54.162.238':445
'22#.#54.135.182':139
'22#.#54.201.70':139
'22#.#54.81.250':139
'22#.#54.34.26':445
'22#.#54.4.242':445
'22#.#54.135.244':445
'22#.#54.87.163':445
'22#.#54.75.87':445
'22#.#54.133.126':139
'22#.#54.9.49':139
'22#.#54.65.164':139
'22#.#54.76.167':139
'22#.#54.27.192':139
'22#.#54.167.181':139
'22#.#54.107.43':139
'22#.#54.26.46':139
'22#.#54.30.87':139
'22#.#54.41.64':139
'22#.#54.199.53':139
'22#.#54.41.64':445
'22#.#54.199.53':445
'22#.#54.65.164':445
'22#.#54.76.167':445
'22#.#54.9.49':445
'22#.#54.133.126':445
'22#.#54.201.70':445
'22#.#54.26.46':445
'22#.#54.30.87':445
'22#.#54.107.43':445
'22#.#54.167.181':445
'22#.#54.40.252':445
'22#.#54.132.40':445
'22#.#54.251.188':445
'22#.#54.176.48':445
'22#.#54.188.175':445
'22#.#54.84.70':445
'22#.#54.27.192':445
'22#.#54.177.158':445
'22#.#54.163.132':445
'22#.#54.158.163':445
'22#.#54.236.23':445
'22#.#54.44.132':445
'22#.#54.136.173':445
'22#.#54.136.131':445
'22#.#54.177.57':445
'22#.#54.75.206':445
'22#.#54.76.42':445
'22#.#54.184.110':445
'22#.#54.106.81':445
'22#.#54.96.228':445
'22#.#54.115.92':445
'22#.#54.13.39':445
'22#.#54.198.8':445
'22#.#54.142.126':445
'22#.#54.195.115':445
'22#.#54.42.227':445
'22#.#54.110.189':445
'22#.#54.72.158':445
'22#.#54.28.192':445
'22#.#54.93.23':445
'22#.#54.168.62':445
'22#.#54.177.168':139
'22#.#54.0.36':139
'22#.#54.198.117':139
'22#.#54.185.209':139
'22#.#54.51.222':139
'22#.#54.226.126':139
'22#.#54.94.126':139
'22#.#54.104.18':139
'22#.#54.245.192':139
'22#.#54.106.40':139
'22#.#54.113.17':139
'22#.#54.234.12':139
'22#.#54.139.144':139
'22#.#54.191.4':139
'22#.#54.55.220':139
'22#.#54.132.204':139
'22#.#54.167.197':139
'22#.#54.211.191':139
'22#.#54.19.244':139
'22#.#54.38.34':139
'22#.#54.125.48':139
'22#.#54.142.126':139
'22#.#54.13.39':139
'22#.#54.42.227':139
'22#.#54.115.146':139
'22#.#54.195.115':139
'22#.#54.28.192':139
'22#.#54.72.158':139
'22#.#54.168.62':139
'22#.#54.198.8':139
'22#.#54.93.23':139
'22#.#54.46.22':139
'22#.#54.171.105':139
'22#.#54.182.95':139
'22#.#54.25.21':445
'22#.#54.107.58':445
'22#.#54.21.126':445
'22#.#54.68.181':139
'22#.#54.134.68':139
'22#.#54.214.194':139
'22#.#54.177.25':139
'22#.#54.130.238':139
'22#.#54.177.25':445
'22#.#54.130.238':445
'22#.#54.182.95':445
'22#.#54.76.42':139
'22#.#54.171.105':445
'22#.#54.46.22':445
'22#.#54.115.146':445
'22#.#54.134.68':445
'22#.#54.214.194':445
'22#.#54.68.181':445
'22#.#54.75.206':139
'22#.#54.177.57':139
'22#.#54.136.173':139
'22#.#54.136.131':139
'22#.#54.110.189':139
'22#.#54.115.92':139
'22#.#54.96.228':139
'22#.#54.184.110':139
'22#.#54.106.81':139
'22#.#54.236.23':139
'22#.#54.44.132':139
'22#.#54.164.252':445
'22#.#54.218.88':445
'22#.#54.104.169':445
'22#.#54.115.196':445
'22#.#54.166.61':445
'22#.#54.120.229':445
'22#.#54.3.38':445
'22#.#54.122.220':445
'22#.#54.228.81':445
'22#.#54.220.170':445
'22#.#54.106.140':445
'22#.#54.9.190':139
'22#.#54.97.41':139
'22#.#54.70.126':139
'22#.#54.158.214':139
'22#.#54.213.158':139
'22#.#54.213.253':139
'22#.#54.140.31':445
'22#.#54.37.125':139
'22#.#54.87.29':139
'22#.#54.1.87':139
'22#.#54.243.119':445
'22#.#54.110.52':445
'22#.#54.193.0':445
'22#.#54.158.5':445
'22#.#54.91.158':445
'22#.#54.29.115':445
'22#.#54.151.29':445
'22#.#54.11.99':445
'22#.#54.14.189':445
'22#.#54.252.49':445
'22#.#54.50.15':445
'22#.#54.114.80':445
'22#.#54.35.65':445
'22#.#54.105.27':445
'22#.#54.48.149':445
'22#.#54.137.58':445
'22#.#54.55.168':445
'22#.#54.47.84':445
'22#.#54.86.137':445
'22#.#54.6.98':445
'22#.#54.2.112':445
'22#.#54.105.27':139
'22#.#54.114.80':139
'22#.#54.137.58':139
'22#.#54.3.38':139
'22#.#54.48.149':139
'22#.#54.86.137':139
'22#.#54.55.168':139
'22#.#54.2.112':139
'22#.#54.35.65':139
'22#.#54.6.98':139
'22#.#54.120.229':139
'22#.#54.166.61':139
'22#.#54.104.169':139
'22#.#54.115.196':139
'22#.#54.106.140':139
'22#.#54.140.31':139
'22#.#54.220.170':139
'22#.#54.122.220':139
'22#.#54.228.81':139
'22#.#54.164.252':139
'22#.#54.218.88':139
'22#.#54.35.208':139
'22#.#54.226.177':139
'22#.#54.124.133':139
'22#.#54.151.29':139
'22#.#54.148.150':139
'22#.154.5.6':139
'22#.#54.214.30':139
'22#.#54.228.63':139
'22#.#54.47.82':139
'22#.#54.191.94':139
'22#.#54.29.115':139
'22#.#54.91.158':139
'22#.#54.193.0':139
'22#.#54.158.5':139
'22#.#54.47.84':139
'22#.#54.50.15':139
'22#.#54.252.49':139
'22#.#54.11.99':139
'22#.#54.14.189':139
'22#.#54.243.119':139
'22#.#54.110.52':139
'22#.#54.89.191':445
'22#.#54.24.51':445
'22#.#54.81.121':445
'22#.#54.70.229':445
'22#.#54.165.77':445
'22#.#54.247.84':445
'22#.#54.221.115':445
'22#.#54.159.92':445
'22#.#54.85.226':445
'22#.#54.141.175':445
'22#.#54.6.35':445
'22#.#54.221.115':139
'22#.#54.24.203':139
'22#.#54.247.84':139
'22#.#54.141.175':139
'22#.#54.159.92':139
'22#.#54.230.166':139
'22#.#54.238.230':139
'22#.#54.159.163':139
'22#.#54.88.226':139
'22#.#54.213.98':139
'22#.#54.251.188':139
'22#.#54.40.252':139
'22#.#54.188.175':139
'22#.#54.4.242':139
'22#.#54.176.48':139
'22#.#54.177.158':139
'22#.#54.84.70':139
'22#.#54.158.163':139
'22#.#54.132.40':139
'22#.#54.163.132':139
'22#.#54.34.26':139
'22#.#54.159.163':445
'22#.#54.230.166':445
'22#.#54.213.98':445
'22#.#54.24.203':445
'22#.#54.88.226':445
'22#.#54.75.87':139
'22#.#54.135.244':139
'22#.#54.87.163':139
'22#.#54.238.230':445
'22#.#54.162.238':139
'22#.#54.87.29':445
'22#.#54.1.87':445
'22#.#54.97.41':445
'22#.#54.70.126':445
'22#.#54.9.190':445
'22#.#54.106.140':9988
'22#.#54.140.31':9988
'22#.#54.115.196':9988
'22#.#54.37.125':445
'22#.#54.213.253':445
'22#.#54.213.158':445
'22#.#54.226.177':445
'22#.#54.47.82':445
'22#.#54.35.208':445
'22#.#54.148.150':445
'22#.#54.124.133':445
'22#.#54.214.30':445
'22#.#54.158.214':445
'22#.154.5.6':445
'22#.#54.191.94':445
'22#.#54.228.63':445
'22#.#54.6.35':139
'22#.#54.70.229':139
'22#.#54.151.29':9988
'22#.#54.110.52':9988
'22#.#54.29.115':9988
'22#.#54.24.51':139
'22#.#54.85.226':139
'22#.#54.89.191':139
'22#.#54.165.77':139
'22#.#54.81.121':139
'22#.#54.243.119':9988
'22#.#54.3.38':9988
'22#.#54.48.149':9988
'22#.#54.220.170':9988
'22#.#54.218.88':9988
'22#.#54.228.81':9988
'22#.#54.158.5':9988
'22#.#54.50.15':9988
'22#.#54.2.112':9988
'22#.#54.35.65':9988
'22#.#54.6.98':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней