Trojan.Starman.6591

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#20.34.60':445
'20#.#20.139.34':445
'20#.#20.243.200':445
'20#.#20.71.143':445
'20#.#20.109.66':445
'20#.#20.106.243':445
'20#.#20.250.13':445
'20#.#20.136.155':445
'20#.#20.187.169':445
'20#.#20.31.242':445
'20#.#20.90.138':445
'20#.#20.3.88':445
'20#.#20.3.195':445
'20#.#20.18.41':445
'20#.#20.186.206':445
'20#.#20.3.145':445
'20#.#20.57.175':445
'20#.#20.138.73':445
'20#.#20.69.99':445
'20#.#20.108.60':445
'20#.#20.173.169':445
'20#.#20.197.39':445
'20#.#20.45.207':445
'20#.#20.15.174':139
'20#.#20.134.170':139
'20#.#20.99.60':139
'20#.#20.30.16':139
'20#.#20.253.130':139
'20#.#20.242.186':445
'20#.#20.79.146':445
'20#.#20.154.68':445
'20#.#20.118.154':445
'20#.#20.48.80':445
'20#.#20.111.86':445
'20#.#20.110.111':445
'20#.#20.42.48':445
'20#.#20.86.42':445
'20#.#20.158.235':445
'20#.#20.109.66':139
'20#.#20.136.155':139
'20#.#20.34.60':139
'20#.#20.139.34':139
'20#.#20.187.169':139
'20#.#20.69.99':139
'20#.#20.154.68':139
'20#.#20.106.243':139
'20#.#20.250.13':139
'20#.#20.18.41':139
'20#.#20.57.175':139
'20#.#20.31.242':139
'20#.#20.90.138':139
'20#.#20.138.73':139
'20#.#20.243.200':139
'20#.#20.71.143':139
'20#.#20.186.206':139
'20#.#20.3.145':139
'20#.#20.118.154':139
'20#.#20.155.20':445
'20#.#20.195.78':445
'20#.#20.108.60':139
'20#.#20.173.169':139
'20#.#20.43.37':445
'20#.#20.7.250':445
'20#.#20.235.244':445
'20#.#20.45.144':445
'20#.#20.0.150':445
'20#.#20.48.80':139
'20#.#20.42.48':139
'20#.#20.242.186':139
'20#.#20.79.146':139
'20#.#20.86.42':139
'20#.#20.197.39':139
'20#.#20.45.207':139
'20#.#20.111.86':139
'20#.#20.110.111':139
'20#.#20.152.43':139
'20#.#20.138.11':139
'20#.#20.104.95':139
'20#.#20.59.240':139
'20#.#20.109.61':139
'20#.#20.207.50':139
'20#.#20.173.55':139
'20#.#20.37.89':139
'20#.#20.77.137':139
'20#.#20.247.193':139
'20#.#20.187.93':139
'20#.#20.35.45':139
'20#.#20.75.194':139
'20#.#20.93.75':139
'20#.#20.250.230':139
'20#.#20.145.227':139
'20#.#20.240.145':139
'20#.#20.115.251':139
'20#.#20.227.115':139
'20#.#20.142.85':445
'20#.#20.226.126':445
'20#.#20.147.190':445
'20#.#20.170.213':445
'20#.#20.80.151':445
'20#.#20.190.98':445
'20#.#20.11.151':445
'20#.#20.143.100':445
'20#.#20.1.37':445
'20#.#20.134.215':445
'20#.#20.184.123':445
'20#.#20.239.184':445
'20#.#20.240.148':445
'20#.#20.123.58':445
'20#.#20.83.240':445
'20#.#20.28.14':445
'20#.#20.213.7':445
'20#.#20.239.239':445
'20#.#20.156.219':445
'20#.#20.193.200':139
'20#.#20.70.200':445
'20#.#20.180.216':445
'20#.#20.99.60':445
'20#.#20.152.43':445
'20#.#20.103.66':445
'20#.#20.142.85':139
'20#.#20.240.148':139
'20#.#20.213.157':445
'20#.#20.85.213':445
'20#.#20.103.66':139
'20#.#20.213.157':139
'20#.#20.70.200':139
'20#.#20.180.216':139
'20#.#20.85.213':139
'20#.#20.253.130':445
'20#.#20.134.170':445
'20#.#20.15.174':445
'20#.#20.30.16':445
'20#.#20.123.58':139
'20#.#20.190.98':139
'20#.#20.1.37':139
'20#.#20.226.126':139
'20#.#20.147.190':139
'20#.#20.134.215':139
'20#.#20.188.185':139
'20#.#20.200.8':139
'20#.#20.11.151':139
'20#.#20.143.100':139
'20#.#20.83.240':139
'20#.#20.239.239':139
'20#.#20.184.123':139
'20#.#20.239.184':139
'20#.#20.156.219':139
'20#.#20.170.213':139
'20#.#20.80.151':139
'20#.#20.28.14':139
'20#.#20.213.7':139
'20#.#20.86.105':139
'20#.#20.23.154':139
'20#.#20.25.160':139
'20#.#20.86.94':139
'20#.#20.10.192':445
'20#.#20.54.217':445
'20#.#20.34.251':445
'20#.#20.10.191':445
'20#.#20.130.226':445
'20#.#20.219.86':139
'20#.#20.98.13':139
'20#.#20.75.60':139
'20#.#20.0.202':139
'20#.#20.22.30':139
'20#.#20.135.227':139
'20#.#20.159.135':139
'20#.#20.239.252':139
'20#.#20.227.239':139
'20#.#20.104.67':445
'20#.#20.31.209':445
'20#.#20.214.65':445
'20#.#20.21.35':445
'20#.#20.9.143':445
'20#.#20.140.120':445
'20#.#20.171.123':445
'20#.#20.24.93':445
'20#.#20.87.253':445
'20#.#20.140.1':445
'20#.#20.79.248':445
'20#.#20.162.75':445
'20#.#20.73.223':445
'20#.#20.214.165':445
'20#.#20.190.33':445
'20#.#20.179.136':445
'20#.#20.34.145':445
'20#.#20.48.13':445
'20#.#20.40.52':445
'20#.#20.13.104':139
'20#.#20.48.13':139
'20#.#20.40.52':139
'20#.#20.162.75':139
'20#.#20.190.33':139
'20#.#20.179.136':139
'20#.#20.9.143':139
'20#.#20.31.209':139
'20#.#20.34.145':139
'20#.#20.21.35':139
'20#.#20.10.191':139
'20#.#20.54.217':139
'20#.#20.10.192':139
'20#.#20.130.226':139
'20#.#20.104.67':139
'20#.#20.214.165':139
'20#.#20.79.248':139
'20#.#20.34.251':139
'20#.#20.73.223':139
'20#.#20.214.65':139
'20#.#20.171.188':139
'20#.#20.91.218':139
'20#.#20.149.143':139
'20#.#20.188.20':139
'20#.#20.38.220':139
'20#.#20.38.0':139
'20#.#20.93.83':139
'20#.#20.243.4':139
'20#.#20.45.51':139
'20#.#20.140.1':139
'20#.#20.171.123':139
'20#.#20.140.120':139
'20#.#20.87.253':139
'20#.#20.24.93':139
'20#.#20.77.142':139
'20#.#20.61.7':139
'20#.#20.93.90':139
'20#.#20.150.52':139
'20#.#20.93.90':445
'20#.#20.119.223':139
'20#.#20.128.248':139
'20#.#20.142.45':139
'20#.#20.152.134':139
'20#.#20.226.142':139
'20#.#20.180.68':445
'20#.#20.141.212':445
'20#.#20.59.86':139
'20#.#20.174.158':139
'20#.#20.45.51':9988
'20#.#20.38.0':9988
'20#.#20.38.220':9988
'20#.#20.243.4':9988
'20#.#20.93.83':9988
'20#.#20.201.113':139
'20#.#20.165.201':139
'20#.#20.180.68':139
'20#.#20.141.212':139
'20#.#20.201.113':445
'20#.#20.45.144':139
'20#.#20.0.150':139
'20#.#20.195.78':139
'20#.#20.43.37':139
'20#.#20.7.250':139
'20#.#20.3.88':139
'20#.#20.3.195':139
'20#.#20.235.244':139
'20#.#20.158.235':139
'20#.#20.152.134':445
'20#.#20.119.223':445
'20#.#20.165.201':445
'20#.#20.142.45':445
'20#.#20.128.248':445
'20#.#20.174.158':445
'20#.#20.155.20':139
'20#.#20.226.142':445
'20#.#20.59.86':445
'20#.#20.91.218':9988
'20#.#20.93.83':445
'20#.#20.13.104':445
'20#.#20.45.51':445
'20#.#20.38.0':445
'20#.#20.75.60':445
'20#.#20.98.13':445
'20#.#20.22.30':445
'20#.#20.0.202':445
'20#.#20.219.86':445
'20#.#20.61.7':445
'20#.#20.149.143':445
'20#.#20.150.52':445
'20#.#20.77.142':445
'20#.#20.188.20':445
'20#.#20.38.220':445
'20#.#20.243.4':445
'20#.#20.171.188':445
'20#.#20.91.218':445
'20#.#20.239.252':445
'20#.#20.34.145':9988
'20#.#20.21.35':9988
'20#.#20.40.52':9988
'20#.#20.179.136':9988
'20#.#20.150.52':9988
'20#.#20.188.20':9988
'20#.#20.171.188':9988
'20#.#20.77.142':9988
'20#.#20.149.143':9988
'20#.#20.159.135':445
'20#.#20.25.160':445
'20#.#20.227.239':445
'20#.#20.135.227':445
'20#.#20.86.94':445
'20#.#20.48.13':9988
'20#.#20.162.75':9988
'20#.#20.86.105':445
'20#.#20.23.154':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней