Trojan.Starman.6333

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#0.79.169':139
'21#.#0.253.78':139
'21#.#0.139.189':139
'21#.#0.171.114':139
'21#.#0.72.108':139
'21#.#0.182.241':139
'21#.#0.27.226':139
'21#.#0.190.214':139
'21#.#0.224.252':139
'21#.#0.240.123':139
'21#.#0.83.28':139
'21#.#0.118.10':139
'21#.#0.26.172':139
'21#.#0.83.180':139
'21#.#0.117.155':139
'21#.#0.18.118':139
'21#.#0.91.208':139
'21#.#0.45.38':139
'21#.#0.49.150':139
'21#.#0.75.250':139
'21#.#0.23.200':139
'21#.#0.111.99':139
'21#.#0.75.250':445
'21#.#0.23.200':445
'21#.#0.26.172':445
'21#.#0.83.180':445
'21#.#0.118.10':445
'21#.#0.83.28':445
'21#.#0.171.114':445
'21#.#0.45.38':445
'21#.#0.49.150':445
'21#.#0.91.208':445
'21#.#0.18.118':445
'21#.#0.231.79':139
'21#.#0.255.230':139
'21#.#0.32.161':139
'21#.#0.158.235':139
'21#.60.43.3':139
'21#.#0.155.109':445
'21#.#0.117.155':445
'21#.#0.31.149':445
'21#.#0.80.227':139
'21#.#0.122.106':445
'21#.#0.18.149':139
'21#.#0.56.31':139
'21#.#0.171.67':139
'21#.#0.14.241':139
'21#.#0.108.156':139
'21#.#0.108.135':139
'21#.#0.12.164':445
'21#.#0.11.24':139
'21#.#0.109.213':139
'21#.#0.79.123':139
'21#.#0.156.92':139
'21#.#0.173.73':139
'21#.#0.170.173':139
'21#.#0.73.136':139
'21#.#0.12.164':139
'21#.#0.153.249':139
'21#.#0.87.150':139
'21#.#0.28.77':139
'21#.#0.130.231':139
'21#.#0.129.138':139
'21#.#0.231.242':139
'21#.#0.153.249':445
'21#.#0.109.213':445
'21#.#0.79.123':445
'21#.#0.56.31':445
'21#.#0.171.67':445
'21#.#0.18.149':445
'21#.#0.31.149':139
'21#.#0.155.109':139
'21#.#0.122.106':139
'21#.#0.11.24':445
'21#.#0.108.135':445
'21#.#0.108.156':445
'21#.#0.129.138':445
'21#.#0.231.242':445
'21#.#0.170.173':445
'21#.#0.73.136':445
'21#.#0.173.73':445
'21#.#0.156.92':445
'21#.#0.14.241':445
'21#.#0.28.77':445
'21#.#0.130.231':445
'21#.#0.87.150':445
'21#.#0.72.108':445
'21#.#0.32.178':139
'21#.#0.164.190':139
'21#.#0.45.192':139
'21#.#0.17.235':445
'21#.#0.82.158':139
'21#.#0.60.224':139
'21#.#0.224.145':139
'21#.#0.192.207':139
'21#.#0.61.246':139
'21#.#0.217.180':139
'21#.#0.242.194':445
'21#.#0.31.177':445
'21#.#0.39.164':445
'21#.60.0.6':445
'21#.#0.207.120':445
'21#.#0.52.84':445
'21#.#0.221.225':445
'21#.#0.152.86':445
'21#.#0.80.103':445
'21#.#0.19.124':445
'21#.#0.248.108':445
'21#.#0.188.90':139
'21#.#0.37.178':139
'21#.#0.45.66':139
'21#.#0.178.124':139
'21#.#0.234.8':139
'21#.#0.47.17':139
'21#.#0.101.147':139
'21#.#0.80.218':139
'21#.#0.13.169':139
'21#.#0.151.13':139
'21#.#0.159.213':139
'21#.#0.8.237':139
'21#.#0.43.249':139
'21#.#0.33.14':139
'21#.#0.51.243':139
'21#.#0.250.187':139
'21#.#0.8.140':139
'21#.#0.33.161':139
'21#.#0.236.176':139
'21#.#0.73.243':139
'21#.#0.29.233':139
'21#.#0.251.29':139
'21#.#0.80.227':445
'21#.#0.66.78':139
'21#.#0.255.230':445
'21#.#0.32.161':445
'21#.#0.231.79':445
'21#.#0.202.60':139
'21#.#0.192.201':139
'21#.#0.202.207':139
'21#.#0.64.52':139
'21#.#0.138.169':139
'21#.60.43.3':445
'21#.#0.224.252':445
'21#.#0.240.123':445
'21#.#0.253.78':445
'21#.#0.139.189':445
'21#.#0.79.169':445
'21#.#0.111.99':445
'21#.#0.158.235':445
'21#.#0.27.226':445
'21#.#0.190.214':445
'21#.#0.182.241':445
'21#.#0.41.156':139
'21#.#0.64.52':445
'21#.#0.138.169':445
'21#.#0.66.78':445
'21#.#0.242.194':139
'21#.#0.17.235':139
'21#.#0.41.156':445
'21#.#0.34.240':445
'21#.#0.192.201':445
'21#.#0.202.207':445
'21#.#0.202.60':445
'21#.#0.152.86':139
'21#.60.0.6':139
'21#.#0.31.177':139
'21#.#0.52.84':139
'21#.#0.34.240':139
'21#.#0.207.120':139
'21#.#0.80.103':139
'21#.#0.221.225':139
'21#.#0.248.108':139
'21#.#0.39.164':139
'21#.#0.19.124':139
'21#.#0.69.138':445
'21#.#0.120.148':445
'21#.#0.215.120':445
'21#.#0.148.244':445
'21#.#0.12.124':445
'21#.#0.68.167':445
'21#.#0.110.64':445
'21#.#0.180.49':445
'21#.#0.255.182':445
'21#.#0.20.128':445
'21#.#0.236.23':445
'21#.#0.157.147':445
'21#.#0.70.49':139
'21#.#0.0.146':139
'21#.#0.72.236':139
'21#.#0.86.176':139
'21#.#0.150.21':139
'21#.#0.48.115':445
'21#.#0.5.188':445
'21#.#0.132.105':139
'21#.#0.27.55':139
'21#.#0.105.90':139
'21#.#0.163.92':445
'21#.#0.35.60':445
'21#.#0.53.209':445
'21#.#0.215.118':445
'21#.#0.94.36':445
'21#.60.1.0':445
'21#.#0.134.233':445
'21#.#0.103.133':445
'21#.#0.86.46':445
'21#.#0.84.149':445
'21#.#0.226.101':445
'21#.#0.139.201':445
'21#.#0.191.49':445
'21#.60.4.32':445
'21#.#0.44.162':445
'21#.#0.154.166':445
'21#.#0.107.94':445
'21#.#0.234.155':445
'21#.#0.7.238':445
'21#.#0.100.107':445
'21#.#0.11.206':445
'21#.#0.146.12':445
'21#.#0.163.92':139
'21#.#0.44.162':139
'21#.#0.154.166':139
'21#.#0.255.182':139
'21#.#0.180.49':139
'21#.#0.11.206':139
'21#.#0.146.12':139
'21#.60.4.32':139
'21#.#0.107.94':139
'21#.#0.191.49':139
'21#.#0.110.64':139
'21#.#0.12.124':139
'21#.#0.157.147':139
'21#.#0.68.167':139
'21#.#0.48.115':139
'21#.#0.5.188':139
'21#.#0.20.128':139
'21#.#0.236.23':139
'21#.#0.215.120':139
'21#.#0.148.244':139
'21#.#0.120.148':139
'21#.#0.100.107':139
'21#.#0.6.250':139
'21#.#0.132.41':139
'21#.#0.78.101':139
'21#.#0.134.233':139
'21#.#0.103.133':139
'21#.#0.102.32':139
'21#.#0.39.32':139
'21#.60.4.79':139
'21#.#0.199.232':139
'21#.#0.12.185':139
'21#.#0.86.46':139
'21#.#0.94.36':139
'21#.60.1.0':139
'21#.#0.139.201':139
'21#.#0.234.155':139
'21#.#0.7.238':139
'21#.#0.84.149':139
'21#.#0.226.101':139
'21#.#0.53.209':139
'21#.#0.215.118':139
'21#.#0.35.60':139
'21#.#0.78.101':445
'21#.#0.36.19':445
'21#.#0.138.48':445
'21#.#0.183.199':445
'21#.#0.127.143':139
'21#.#0.69.138':139
'21#.#0.89.31':445
'21#.#0.114.68':445
'21#.60.6.0':445
'21#.#0.146.137':445
'21#.#0.199.145':445
'21#.#0.134.79':139
'21#.#0.126.74':139
'21#.#0.138.126':139
'21#.#0.74.104':139
'21#.#0.0.201':139
'21#.#0.84.205':139
'21#.#0.127.158':139
'21#.#0.78.237':139
'21#.#0.83.173':139
'21#.#0.18.83':139
'21#.#0.49.161':139
'21#.60.8.45':445
'21#.#0.18.83':445
'21#.#0.49.161':445
'21#.#0.138.126':445
'21#.#0.74.104':445
'21#.#0.126.74':445
'21#.#0.134.79':445
'21#.#0.127.143':445
'21#.#0.78.237':445
'21#.#0.83.173':445
'21#.#0.127.158':445
'21#.#0.84.205':445
'21#.#0.45.197':445
'21#.#0.20.104':445
'21#.#0.50.66':445
'21#.#0.35.11':445
'21#.#0.162.199':445
'21#.#0.196.229':445
'21#.#0.0.201':445
'21#.#0.26.168':445
'21#.#0.196.218':445
'21#.#0.24.181':445
'21#.#0.132.105':445
'21#.#0.48.115':9988
'21#.#0.105.90':445
'21#.#0.0.146':445
'21#.#0.27.55':445
'21#.#0.236.23':9988
'21#.#0.110.64':9988
'21#.#0.215.120':9988
'21#.#0.5.188':9988
'21#.#0.120.148':9988
'21#.#0.70.49':445
'21#.#0.12.185':445
'21#.60.4.79':445
'21#.#0.199.232':445
'21#.#0.6.250':445
'21#.#0.132.41':445
'21#.#0.150.21':445
'21#.#0.72.236':445
'21#.#0.86.176':445
'21#.#0.102.32':445
'21#.#0.39.32':445
'21#.#0.180.49':9988
'21#.#0.50.66':139
'21#.#0.45.197':139
'21#.#0.162.199':139
'21#.60.8.45':139
'21#.#0.35.11':139
'21#.#0.26.168':139
'21#.#0.196.229':139
'21#.#0.24.181':139
'21#.#0.20.104':139
'21#.#0.196.218':139
'21#.#0.114.68':139
'21#.#0.183.199':139
'21#.#0.36.19':139
'21#.60.1.0':9988
'21#.#0.154.166':9988
'21#.#0.44.162':9988
'21#.60.6.0':139
'21#.#0.89.31':139
'21#.#0.199.145':139
'21#.#0.138.48':139
'21#.#0.146.137':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней