Trojan.Starman.6601

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#47.18.181':445
'22#.#47.46.106':445
'22#.#47.205.241':445
'22#.#47.241.80':445
'22#.#47.183.240':445
'22#.#47.87.163':445
'22#.#47.8.25':445
'22#.#47.97.85':445
'22#.#47.91.166':445
'22#.#47.37.156':445
'22#.#47.240.89':445
'22#.#47.203.235':445
'22#.#47.179.133':445
'22#.#47.230.30':445
'22#.#47.156.99':445
'22#.#47.236.168':445
'22#.#47.78.246':445
'22#.#47.69.112':445
'22#.#47.213.144':445
'22#.#47.243.56':445
'22#.#47.22.163':445
'22#.#47.31.44':445
'22#.#47.249.210':445
'22#.#47.60.250':445
'22#.#47.66.23':445
'22#.#47.64.249':139
'22#.#47.214.167':139
'22#.#47.144.229':139
'22#.#47.169.208':445
'22#.#47.112.68':445
'22#.#47.32.235':445
'22#.#47.64.249':445
'22#.#47.214.167':445
'22#.#47.144.229':445
'22#.#47.116.39':139
'22#.#47.168.20':139
'22#.#47.50.6':139
'22#.#47.144.29':445
'22#.#47.24.146':445
'22#.#47.200.153':445
'22#.#47.87.201':445
'22#.#47.51.61':445
'22#.#47.175.237':445
'22#.#47.130.129':445
'22#.#47.230.12':445
'22#.#47.137.29':445
'22#.#47.251.203':445
'22#.#47.10.99':445
'22#.#47.128.160':445
'22#.#47.49.252':445
'22#.#47.243.56':139
'22#.#47.22.163':139
'22#.#47.241.80':139
'22#.#47.249.210':139
'22#.#47.60.250':139
'22#.#47.213.144':139
'22#.#47.46.106':139
'22#.#47.205.241':139
'22#.#47.37.156':139
'22#.#47.183.240':139
'22#.#47.87.163':139
'22#.#47.18.181':139
'22#.#47.60.44':139
'22#.#47.236.168':139
'22#.#47.49.252':139
'22#.#47.64.18':139
'22#.#47.29.215':139
'22#.#47.25.149':139
'22#.#47.230.30':139
'22#.#47.156.99':139
'22#.#47.31.44':139
'22#.#47.78.246':139
'22#.#47.69.112':139
'22#.#47.179.133':139
'22#.#47.240.89':139
'22#.#47.230.12':139
'22#.#47.137.29':139
'22#.#47.169.208':139
'22#.#47.10.99':139
'22#.#47.128.160':139
'22#.#47.130.129':139
'22#.#47.29.215':445
'22#.#47.25.149':445
'22#.#47.60.44':445
'22#.#47.112.68':139
'22#.#47.32.235':139
'22#.#47.64.18':445
'22#.#47.91.166':139
'22#.#47.66.23':139
'22#.#47.87.201':139
'22#.#47.203.235':139
'22#.#47.8.25':139
'22#.#47.97.85':139
'22#.#47.24.146':139
'22#.#47.200.153':139
'22#.#47.251.203':139
'22#.#47.51.61':139
'22#.#47.175.237':139
'22#.#47.144.29':139
'22#.#47.88.127':445
'22#.#47.3.30':445
'22#.#47.20.23':445
'22#.#47.100.186':445
'22#.#47.178.239':445
'22#.#47.40.18':445
'22#.#47.65.247':445
'22#.#47.111.66':445
'22#.#47.199.125':445
'22#.#47.75.235':445
'22#.#47.192.75':445
'22#.#47.241.191':445
'22#.#47.101.131':445
'22#.#47.98.101':445
'22#.#47.97.166':445
'22#.247.8.0':445
'22#.#47.76.133':445
'22#.#47.11.238':445
'22#.#47.80.134':445
'22#.#47.74.108':445
'22#.#47.218.36':445
'22#.#47.108.142':445
'22#.#47.75.199':445
'22#.#47.176.6':445
'22#.#47.117.154':445
'22#.#47.98.210':445
'22#.#47.110.190':445
'22#.#47.122.191':445
'22#.#47.91.177':445
'22#.#47.100.163':445
'22#.#47.155.189':445
'22#.#47.177.127':139
'22#.#47.13.120':139
'22#.#47.97.198':139
'22#.#47.67.40':139
'22#.#47.135.247':139
'22#.#47.40.3':139
'22#.#47.250.37':445
'22#.#47.160.73':445
'22#.#47.189.198':445
'22#.#47.129.95':445
'22#.#47.85.209':445
'22#.#47.1.226':445
'22#.#47.215.30':445
'22#.#47.82.125':445
'22#.#47.177.54':445
'22#.#47.82.131':445
'22#.#47.91.82':445
'22#.#47.141.224':445
'22#.#47.179.208':445
'22#.#47.74.108':139
'22#.#47.218.36':139
'22#.#47.100.186':139
'22#.#47.75.199':139
'22#.#47.176.6':139
'22#.#47.80.134':139
'22#.#47.3.30':139
'22#.#47.20.23':139
'22#.#47.75.235':139
'22#.#47.178.239':139
'22#.#47.40.18':139
'22#.#47.88.127':139
'22#.#47.208.49':139
'22#.#47.179.208':139
'22#.247.8.0':139
'22#.#47.116.39':445
'22#.#47.168.20':445
'22#.#47.50.6':445
'22#.#47.98.101':139
'22#.#47.97.166':139
'22#.#47.108.142':139
'22#.#47.76.133':139
'22#.#47.11.238':139
'22#.#47.101.131':139
'22#.#47.192.75':139
'22#.#47.82.125':139
'22#.#47.177.54':139
'22#.#47.91.177':139
'22#.#47.91.82':139
'22#.#47.141.224':139
'22#.#47.215.30':139
'22#.#47.110.190':139
'22#.#47.122.191':139
'22#.#47.208.49':445
'22#.#47.100.163':139
'22#.#47.155.189':139
'22#.#47.98.210':139
'22#.#47.199.125':139
'22#.#47.117.154':139
'22#.#47.129.95':139
'22#.#47.241.191':139
'22#.#47.65.247':139
'22#.#47.111.66':139
'22#.#47.160.73':139
'22#.#47.189.198':139
'22#.#47.82.131':139
'22#.#47.85.209':139
'22#.#47.1.226':139
'22#.#47.250.37':139
'22#.#47.1.97':445
'22#.#47.120.62':445
'22#.#47.62.129':445
'22#.#47.179.55':445
'22#.#47.244.211':445
'22#.#47.236.156':445
'22#.#47.251.49':445
'22#.#47.226.111':445
'22#.#47.22.239':445
'22#.#47.8.66':445
'22#.#47.4.252':445
'22#.#47.118.166':445
'22#.#47.19.228':445
'22#.#47.72.72':445
'22#.#47.211.231':445
'22#.#47.131.129':139
'22#.#47.115.40':445
'22#.#47.211.54':445
'22#.#47.142.143':445
'22#.#47.115.190':445
'22#.#47.144.32':445
'22#.#47.95.168':445
'22#.#47.224.41':445
'22#.#47.127.224':445
'22#.#47.47.76':445
'22#.#47.8.223':445
'22#.#47.15.133':445
'22#.#47.57.90':445
'22#.#47.205.130':445
'22#.#47.95.211':445
'22#.#47.27.58':445
'22#.#47.141.151':445
'22#.#47.239.150':445
'22#.#47.108.239':445
'22#.#47.168.77':445
'22#.#47.15.193':445
'22#.#47.149.186':445
'22#.#47.29.228':445
'22#.#47.126.133':445
'22#.#47.39.203':445
'22#.#47.63.176':445
'22#.#47.99.178':445
'22#.#47.10.94':445
'22#.#47.216.119':445
'22#.#47.173.144':445
'22#.#47.141.140':445
'22#.#47.15.1':445
'22#.#47.97.106':445
'22#.#47.112.142':445
'22#.#47.69.252':139
'22#.#47.8.66':139
'22#.#47.63.176':139
'22#.#47.4.252':139
'22#.#47.179.55':139
'22#.#47.236.156':139
'22#.#47.1.97':139
'22#.#47.120.62':139
'22#.#47.10.94':139
'22#.#47.47.76':139
'22#.#47.22.239':139
'22#.#47.99.178':139
'22#.#47.62.129':139
'22#.#47.115.190':139
'22#.#47.211.231':139
'22#.#47.211.54':139
'22#.#47.95.168':139
'22#.#47.142.143':139
'22#.#47.72.72':139
'22#.#47.224.41':139
'22#.#47.144.32':139
'22#.#47.244.211':139
'22#.#47.115.40':139
'22#.#47.19.228':139
'22#.#47.127.224':139
'22#.#47.97.106':139
'22#.#47.15.133':139
'22#.#47.57.90':139
'22#.#47.168.77':139
'22#.#47.173.144':139
'22#.#47.27.58':139
'22#.#47.8.223':139
'22#.#47.239.150':139
'22#.#47.108.239':139
'22#.#47.6.70':139
'22#.#47.15.193':139
'22#.#47.149.186':139
'22#.#47.141.151':139
'22#.#47.251.49':139
'22#.#47.205.130':139
'22#.#47.95.211':139
'22#.#47.141.140':139
'22#.#47.126.133':139
'22#.#47.29.228':139
'22#.#47.118.166':139
'22#.#47.39.203':139
'22#.#47.216.119':139
'22#.#47.112.142':139
'22#.#47.226.111':139
'22#.#47.15.1':139
'22#.#47.9.81':445
'22#.#47.41.245':445
'22#.247.6.0':445
'22#.#47.44.249':445
'22#.#47.72.249':445
'22#.#47.224.216':445
'22#.#47.17.131':445
'22#.#47.81.240':445
'22#.#47.250.59':445
'22#.#47.68.128':445
'22#.#47.40.40':445
'22#.#47.123.160':445
'22#.#47.183.118':445
'22#.#47.84.246':445
'22#.#47.59.96':445
'22#.#47.13.219':445
'22#.#47.59.13':445
'22#.#47.93.59':445
'22#.#47.64.82':445
'22#.#47.145.64':445
'22#.#47.95.167':445
'22#.#47.121.168':445
'22#.#47.223.224':445
'22#.#47.81.223':445
'22#.#47.229.59':445
'22#.#47.8.240':139
'22#.#47.204.229':139
'22#.#47.148.125':139
'22#.#47.234.42':139
'22#.#47.131.234':139
'22#.#47.53.132':139
'22#.#47.8.240':445
'22#.#47.204.229':445
'22#.#47.148.125':445
'22#.#47.234.42':445
'22#.#47.131.234':445
'22#.#47.53.132':445
'22#.#47.184.85':445
'22#.#47.37.180':445
'22#.#47.209.61':445
'22#.#47.30.225':445
'22#.#47.117.76':445
'22#.#47.17.16':445
'22#.#47.14.225':445
'22#.#47.22.213':445
'22#.#47.43.60':445
'22#.#47.5.155':445
'22#.#47.62.63':445
'22#.#47.97.15':445
'22#.#47.219.3':445
'22#.#47.84.246':139
'22#.#47.59.96':139
'22#.#47.121.168':139
'22#.#47.59.13':139
'22#.#47.93.59':139
'22#.#47.183.118':139
'22#.#47.145.64':139
'22#.#47.95.167':139
'22#.#47.44.249':139
'22#.#47.223.224':139
'22#.#47.81.223':139
'22#.#47.64.82':139
'22#.#47.19.228':9988
'22#.#47.115.40':9988
'22#.#47.95.168':9988
'22#.#47.6.70':445
'22#.#47.69.252':445
'22#.#47.131.129':445
'22#.#47.43.204':139
'22#.#47.219.3':139
'22#.#47.13.219':139
'22#.#47.236.156':9988
'22#.#47.63.176':9988
'22#.#47.141.151':9988
'22#.#47.72.249':139
'22#.#47.37.180':139
'22#.#47.209.61':139
'22#.#47.5.155':139
'22#.#47.117.76':139
'22#.#47.17.16':139
'22#.#47.184.85':139
'22#.#47.22.213':139
'22#.#47.43.60':139
'22#.#47.43.204':445
'22#.#47.62.63':139
'22#.#47.97.15':139
'22#.#47.14.225':139
'22#.247.6.0':139
'22#.#47.68.128':139
'22#.#47.40.40':139
'22#.#47.224.216':139
'22#.#47.9.81':139
'22#.#47.41.245':139
'22#.#47.250.59':139
'22#.#47.229.59':139
'22#.#47.30.225':139
'22#.#47.123.160':139
'22#.#47.17.131':139
'22#.#47.81.240':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней