Trojan.Starman.6324

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#2.242.240':445
'20#.#2.229.243':445
'20#.#2.11.253':445
'20#.#2.223.179':139
'20#.#2.208.125':445
'20#.#2.126.90':445
'20#.#2.126.146':445
'20#.#2.210.115':445
'20#.#2.96.214':445
'20#.#2.82.86':445
'20#.#2.72.168':445
'20#.#2.216.91':445
'20#.#2.211.153':139
'20#.#2.117.233':139
'20#.#2.51.33':139
'20#.#2.165.50':139
'20#.#2.102.91':139
'20#.#2.117.168':139
'20#.#2.166.0':139
'20#.#2.147.113':139
'20#.#2.111.220':139
'20#.#2.69.97':139
'20#.#2.48.224':139
'20#.#2.238.72':139
'20#.#2.94.125':139
'20#.#2.0.199':445
'20#.#2.76.149':445
'20#.#2.118.166':445
'20#.#2.151.228':445
'20#.#2.114.181':445
'20#.#2.137.209':445
'20#.#2.154.139':445
'20#.#2.12.49':445
'20#.#2.93.183':445
'20#.#2.239.72':445
'20#.#2.95.158':445
'20#.#2.110.26':445
'20#.#2.168.51':445
'20#.#2.158.78':445
'20#.#2.8.131':445
'20#.#2.181.51':445
'20#.#2.5.161':445
'20#.#2.87.251':445
'20#.#2.78.88':445
'20#.#2.215.60':445
'20#.#2.226.118':445
'20#.#2.146.238':445
'20#.#2.20.47':445
'20#.#2.196.150':445
'20#.#2.47.125':445
'20#.#2.229.243':139
'20#.#2.11.253':139
'20#.#2.82.86':139
'20#.#2.208.125':139
'20#.#2.126.90':139
'20#.#2.242.240':139
'20#.#2.210.115':139
'20#.#2.96.214':139
'20#.#2.5.161':139
'20#.#2.72.168':139
'20#.#2.216.91':139
'20#.#2.126.146':139
'20#.#2.140.71':445
'20#.#2.89.151':445
'20#.#2.39.36':445
'20#.#2.99.253':445
'20#.#2.45.137':445
'20#.#2.25.111':445
'20#.#2.185.107':445
'20#.#2.53.71':445
'20#.#2.191.19':445
'20#.#2.65.75':445
'20#.#2.48.100':445
'20#.#2.9.145':445
'20#.#2.184.226':445
'20#.#2.76.149':139
'20#.#2.118.166':139
'20#.#2.239.72':139
'20#.#2.114.181':139
'20#.#2.137.209':139
'20#.#2.0.199':139
'20#.#2.12.49':139
'20#.#2.93.183':139
'20#.82.12.0':139
'20#.#2.95.158':139
'20#.#2.110.26':139
'20#.#2.154.139':139
'20#.#2.151.228':139
'20#.#2.8.131':139
'20#.#2.181.51':139
'20#.#2.20.47':139
'20#.#2.87.251':139
'20#.#2.78.88':139
'20#.#2.158.78':139
'20#.#2.226.118':139
'20#.#2.146.238':139
'20#.#2.168.51':139
'20#.#2.196.150':139
'20#.#2.47.125':139
'20#.#2.215.60':139
'20#.#2.174.223':445
'20#.#2.16.137':445
'20#.82.75.3':445
'20#.#2.57.22':139
'20#.#2.115.32':139
'20#.#2.22.115':139
'20#.#2.82.226':445
'20#.#2.97.148':445
'20#.#2.197.51':445
'20#.#2.63.104':445
'20#.#2.32.224':445
'20#.#2.239.19':445
'20#.#2.148.179':139
'20#.82.87.3':139
'20#.#2.27.229':139
'20#.#2.71.201':139
'20#.#2.31.125':139
'20#.#2.9.192':139
'20#.#2.106.9':139
'20#.#2.101.62':139
'20#.#2.55.113':139
'20#.#2.154.37':139
'20#.#2.131.78':139
'20#.#2.56.199':139
'20#.#2.239.45':139
'20#.#2.207.243':445
'20#.#2.204.57':445
'20#.#2.185.8':445
'20#.#2.106.181':445
'20#.#2.152.33':445
'20#.#2.244.151':445
'20#.#2.24.158':445
'20#.#2.242.151':445
'20#.#2.125.114':445
'20#.#2.156.184':445
'20#.#2.72.234':445
'20#.#2.158.3':445
'20#.#2.205.35':445
'20#.#2.120.133':445
'20#.#2.42.164':445
'20#.#2.53.76':445
'20#.#2.98.148':445
'20#.#2.115.201':445
'20#.#2.0.218':445
'20#.#2.255.47':445
'20#.#2.100.194':445
'20#.#2.115.7':445
'20#.#2.225.252':445
'20#.#2.104.88':445
'20#.#2.47.230':445
'20#.#2.16.137':139
'20#.82.75.3':139
'20#.#2.63.104':139
'20#.#2.211.153':445
'20#.#2.223.179':445
'20#.#2.174.223':139
'20#.#2.97.148':139
'20#.#2.197.51':139
'20#.#2.98.148':139
'20#.#2.32.224':139
'20#.#2.239.19':139
'20#.#2.82.226':139
'20#.#2.69.97':445
'20#.#2.166.0':445
'20#.#2.117.233':445
'20#.#2.51.33':445
'20#.82.12.0':445
'20#.#2.102.91':445
'20#.#2.117.168':445
'20#.#2.94.125':445
'20#.#2.147.113':445
'20#.#2.111.220':445
'20#.#2.165.50':445
'20#.#2.48.224':445
'20#.#2.238.72':445
'20#.#2.204.57':139
'20#.#2.185.8':139
'20#.#2.156.184':139
'20#.#2.152.33':139
'20#.#2.244.151':139
'20#.#2.207.243':139
'20#.#2.242.151':139
'20#.#2.125.114':139
'20#.#2.0.102':139
'20#.#2.72.234':139
'20#.#2.158.3':139
'20#.#2.24.158':139
'20#.#2.106.181':139
'20#.#2.42.164':139
'20#.#2.53.76':139
'20#.#2.225.252':139
'20#.#2.115.201':139
'20#.#2.0.218':139
'20#.#2.120.133':139
'20#.#2.100.194':139
'20#.#2.115.7':139
'20#.#2.205.35':139
'20#.#2.104.88':139
'20#.#2.47.230':139
'20#.#2.255.47':139
'20#.#2.79.50':445
'20#.82.0.11':445
'20#.#2.64.239':445
'20#.#2.48.51':445
'20#.#2.106.185':445
'20#.#2.193.229':445
'20#.#2.62.136':445
'20#.#2.67.53':445
'20#.#2.130.67':445
'20#.#2.219.84':445
'20#.#2.40.58':445
'20#.#2.155.221':445
'20#.#2.159.4':445
'20#.#2.14.104':445
'20#.#2.78.64':445
'20#.#2.55.63':445
'20#.#2.207.213':445
'20#.#2.248.195':139
'20#.#2.36.139':445
'20#.#2.76.90':445
'20#.#2.245.201':445
'20#.#2.148.130':445
'20#.#2.95.178':445
'20#.#2.75.18':445
'20#.#2.90.55':445
'20#.#2.202.74':445
'20#.#2.176.162':445
'20#.#2.17.12':445
'20#.#2.128.190':445
'20#.#2.180.85':445
'20#.#2.250.60':445
'20#.#2.16.220':445
'20#.#2.38.101':445
'20#.#2.40.126':445
'20#.#2.33.40':445
'20#.#2.57.157':445
'20#.#2.195.253':445
'20#.#2.58.181':445
'20#.#2.221.36':445
'20#.#2.11.107':445
'20#.#2.18.163':445
'20#.#2.158.236':445
'20#.#2.160.211':445
'20#.#2.131.117':445
'20#.#2.66.205':445
'20#.#2.80.28':445
'20#.#2.236.27':445
'20#.#2.116.142':445
'20#.#2.118.83':445
'20#.#2.112.144':445
'20#.#2.23.100':445
'20#.#2.64.239':139
'20#.#2.48.51':139
'20#.#2.40.58':139
'20#.#2.193.229':139
'20#.#2.62.136':139
'20#.82.0.11':139
'20#.#2.130.67':139
'20#.#2.219.84':139
'20#.#2.160.211':139
'20#.#2.155.221':139
'20#.#2.159.4':139
'20#.#2.67.53':139
'20#.#2.106.185':139
'20#.#2.36.139':139
'20#.#2.76.90':139
'20#.#2.78.64':139
'20#.#2.55.63':139
'20#.#2.90.55':139
'20#.#2.207.213':139
'20#.#2.148.130':139
'20#.#2.95.178':139
'20#.#2.14.104':139
'20#.#2.75.18':139
'20#.#2.202.74':139
'20#.#2.245.201':139
'20#.#2.17.12':139
'20#.#2.128.190':139
'20#.#2.57.157':139
'20#.#2.250.60':139
'20#.#2.16.220':139
'20#.#2.176.162':139
'20#.#2.40.126':139
'20#.#2.33.40':139
'20#.#2.64.67':139
'20#.#2.195.253':139
'20#.#2.58.181':139
'20#.#2.38.101':139
'20#.#2.180.85':139
'20#.#2.11.107':139
'20#.#2.158.236':139
'20#.#2.118.83':139
'20#.#2.131.117':139
'20#.#2.66.205':139
'20#.#2.18.163':139
'20#.#2.236.27':139
'20#.#2.116.142':139
'20#.#2.221.36':139
'20#.#2.112.144':139
'20#.#2.23.100':139
'20#.#2.80.28':139
'20#.#2.28.123':445
'20#.#2.39.225':445
'20#.#2.247.78':445
'20#.#2.202.248':445
'20#.#2.4.125':445
'20#.#2.94.186':445
'20#.#2.167.109':445
'20#.#2.10.162':445
'20#.#2.222.202':445
'20#.#2.129.246':445
'20#.#2.224.4':445
'20#.#2.231.121':445
'20#.#2.140.71':139
'20#.#2.89.151':139
'20#.#2.39.36':139
'20#.#2.99.253':139
'20#.#2.45.137':139
'20#.#2.25.111':139
'20#.#2.185.107':139
'20#.#2.53.71':139
'20#.#2.191.19':139
'20#.#2.65.75':139
'20#.#2.48.100':139
'20#.#2.9.145':139
'20#.#2.184.226':139
'20#.#2.85.242':445
'20#.#2.59.227':445
'20#.#2.90.92':445
'20#.#2.97.248':445
'20#.#2.87.159':445
'20#.#2.59.179':445
'20#.#2.66.61':445
'20#.#2.246.178':445
'20#.#2.175.197':445
'20#.#2.225.249':445
'20#.#2.243.212':445
'20#.#2.61.40':445
'20#.#2.214.106':445
'20#.#2.29.227':445
'20#.#2.246.111':445
'20#.#2.51.27':445
'20#.#2.105.80':445
'20#.82.21.0':445
'20#.#2.196.59':445
'20#.#2.25.207':445
'20#.#2.87.25':445
'20#.#2.150.86':445
'20#.#2.35.60':445
'20#.#2.80.26':445
'20#.#2.33.229':445
'20#.#2.39.225':139
'20#.#2.247.78':139
'20#.#2.129.246':139
'20#.#2.4.125':139
'20#.#2.94.186':139
'20#.#2.28.123':139
'20#.#2.10.162':139
'20#.#2.222.202':139
'20#.#2.105.80':139
'20#.#2.224.4':139
'20#.#2.231.121':139
'20#.#2.167.109':139
'20#.#2.202.248':139
'20#.#2.75.18':9988
'20#.#2.202.74':9988
'20#.#2.160.211':9988
'20#.#2.64.67':445
'20#.#2.248.195':445
'20#.#2.90.55':9988
'20#.#2.176.162':9988
'20#.#2.58.181':9988
'20#.#2.40.126':9988
'20#.#2.131.117':9988
'20#.#2.11.107':9988
'20#.#2.16.220':9988
'20#.#2.59.227':139
'20#.#2.90.92':139
'20#.#2.225.249':139
'20#.#2.87.159':139
'20#.#2.59.179':139
'20#.#2.85.242':139
'20#.#2.175.197':139
'20#.#2.246.178':139
'20#.#2.79.50':139
'20#.#2.243.212':139
'20#.#2.61.40':139
'20#.#2.66.61':139
'20#.#2.97.248':139
'20#.#2.246.111':139
'20#.#2.51.27':139
'20#.#2.35.60':139
'20#.82.21.0':139
'20#.#2.196.59':139
'20#.#2.29.227':139
'20#.#2.87.25':139
'20#.#2.150.86':139
'20#.#2.214.106':139
'20#.#2.80.26':139
'20#.#2.33.229':139
'20#.#2.25.207':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней