Trojan.Starman.6597

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#7.137.206':445
'12#.#7.117.250':445
'12#.#7.55.44':445
'12#.#7.239.207':445
'12#.#7.73.16':445
'12#.#7.183.17':445
'12#.#7.152.2':445
'12#.#7.138.124':445
'12#.67.30.7':445
'12#.#7.79.99':445
'12#.#7.73.52':445
'12#.#7.110.244':445
'12#.#7.26.233':445
'12#.#7.150.117':445
'12#.#7.161.105':445
'12#.#7.3.179':445
'12#.#7.247.179':445
'12#.#7.49.20':445
'12#.#7.121.198':445
'12#.#7.187.61':445
'12#.#7.92.216':445
'12#.#7.124.42':445
'12#.#7.243.242':445
'12#.#7.102.59':445
'12#.#7.158.243':139
'12#.#7.11.187':139
'12#.#7.160.217':139
'12#.#7.196.96':139
'12#.#7.248.169':139
'12#.#7.8.145':139
'12#.#7.77.36':445
'12#.#7.36.84':445
'12#.#7.242.44':445
'12#.#7.153.129':445
'12#.#7.19.37':445
'12#.#7.103.181':445
'12#.#7.36.84':139
'12#.#7.77.36':139
'12#.#7.242.44':139
'12#.#7.153.129':139
'12#.#7.103.181':139
'12#.#7.19.37':139
'12#.#7.166.168':139
'12#.#7.221.139':139
'12#.#7.89.197':139
'12#.#7.73.179':139
'12#.#7.172.195':139
'12#.#7.92.173':139
'12#.#7.3.179':139
'12#.#7.247.179':139
'12#.#7.49.20':139
'12#.#7.170.122':139
'12#.#7.91.170':139
'12#.#7.194.121':139
'12#.#7.102.59':139
'12#.#7.26.233':139
'12#.#7.124.42':139
'12#.#7.243.242':139
'12#.#7.161.105':139
'12#.#7.150.117':139
'12#.#7.151.212':445
'12#.#7.36.35':445
'12#.#7.57.63':445
'12#.#7.13.34':445
'12#.#7.87.40':445
'12#.#7.212.252':445
'12#.#7.116.82':139
'12#.#7.88.34':139
'12#.#7.28.212':139
'12#.#7.3.135':139
'12#.#7.57.135':139
'12#.#7.157.55':139
'12#.#7.3.135':445
'12#.#7.57.135':445
'12#.#7.157.55':445
'12#.67.30.7':139
'12#.#7.138.124':139
'12#.#7.152.2':139
'12#.#7.170.122':445
'12#.#7.91.170':445
'12#.#7.194.121':445
'12#.#7.88.34':445
'12#.#7.28.212':445
'12#.#7.116.82':445
'12#.#7.73.16':139
'12#.#7.239.207':139
'12#.#7.183.17':139
'12#.#7.187.61':139
'12#.#7.121.198':139
'12#.#7.92.216':139
'12#.#7.79.99':139
'12#.#7.110.244':139
'12#.#7.73.52':139
'12#.#7.137.206':139
'12#.#7.55.44':139
'12#.#7.117.250':139
'12#.#7.237.53':445
'12#.#7.26.85':445
'12#.#7.246.131':445
'12#.#7.205.131':445
'12#.#7.97.64':445
'12#.#7.104.141':445
'12#.#7.192.80':445
'12#.#7.224.12':445
'12#.#7.92.70':445
'12#.#7.80.246':445
'12#.#7.13.254':445
'12#.#7.241.223':445
'12#.67.29.8':445
'12#.#7.83.215':445
'12#.#7.16.118':445
'12#.#7.238.123':445
'12#.#7.101.76':445
'12#.#7.89.38':445
'12#.#7.122.170':445
'12#.#7.43.122':445
'12#.#7.249.184':445
'12#.#7.40.60':445
'12#.#7.90.179':445
'12#.#7.58.31':445
'12#.#7.205.47':139
'12#.#7.79.61':139
'12#.#7.59.216':139
'12#.#7.46.173':139
'12#.#7.191.237':139
'12#.#7.126.86':139
'12#.#7.44.187':139
'12#.#7.33.101':139
'12#.#7.228.5':139
'12#.#7.48.143':139
'12#.#7.15.76':139
'12#.#7.126.47':139
'12#.#7.39.97':445
'12#.#7.127.134':445
'12#.#7.249.127':445
'12#.#7.80.216':445
'12#.67.13.0':445
'12#.#7.120.104':445
'12#.#7.98.138':139
'12#.#7.9.117':139
'12#.#7.76.33':139
'12#.67.5.61':139
'12#.#7.40.77':139
'12#.#7.225.155':139
'12#.#7.238.123':139
'12#.#7.101.76':139
'12#.#7.16.118':139
'12#.#7.49.150':139
'12#.#7.126.143':139
'12#.#7.40.67':139
'12#.#7.40.60':139
'12#.#7.90.179':139
'12#.#7.58.31':139
'12#.67.29.8':139
'12#.#7.89.38':139
'12#.#7.83.215':139
'12#.#7.166.168':445
'12#.#7.221.139':445
'12#.#7.89.197':445
'12#.#7.73.179':445
'12#.#7.172.195':445
'12#.#7.92.173':445
'12#.#7.158.243':445
'12#.#7.11.187':445
'12#.#7.160.217':445
'12#.#7.196.96':445
'12#.#7.248.169':445
'12#.#7.8.145':445
'12#.#7.92.70':139
'12#.#7.39.97':139
'12#.#7.80.216':139
'12#.#7.127.134':139
'12#.#7.249.127':139
'12#.67.13.0':139
'12#.#7.49.150':445
'12#.#7.40.67':445
'12#.#7.126.143':445
'12#.#7.192.80':139
'12#.#7.120.104':139
'12#.#7.224.12':139
'12#.#7.205.131':139
'12#.#7.97.64':139
'12#.#7.26.85':139
'12#.#7.122.170':139
'12#.#7.43.122':139
'12#.#7.249.184':139
'12#.#7.246.131':139
'12#.#7.80.246':139
'12#.#7.241.223':139
'12#.#7.104.141':139
'12#.#7.13.254':139
'12#.#7.237.53':139
'12#.#7.11.176':445
'12#.#7.180.11':445
'12#.#7.187.179':445
'12#.#7.52.153':445
'12#.#7.165.165':445
'12#.#7.56.11':445
'12#.#7.110.14':445
'12#.#7.12.82':445
'12#.#7.100.182':445
'12#.#7.24.73':445
'12#.#7.129.216':445
'12#.#7.33.40':445
'12#.#7.102.62':445
'12#.#7.33.51':445
'12#.#7.144.69':445
'12#.#7.178.188':139
'12#.#7.64.43':139
'12#.67.1.85':139
'12#.#7.57.227':445
'12#.#7.150.221':445
'12#.67.8.85':445
'12#.#7.180.226':445
'12#.#7.213.180':445
'12#.#7.82.202':445
'12#.#7.108.125':445
'12#.#7.74.162':445
'12#.#7.26.22':445
'12#.#7.131.233':445
'12#.#7.35.34':445
'12#.#7.60.235':445
'12#.#7.186.118':445
'12#.#7.70.253':445
'12#.#7.105.90':445
'12#.#7.5.119':445
'12#.#7.46.169':445
'12#.#7.253.46':445
'12#.#7.231.167':445
'12#.#7.73.144':445
'12#.#7.187.127':445
'12#.#7.58.77':445
'12#.#7.165.60':445
'12#.#7.167.101':445
'12#.#7.12.202':445
'12#.#7.79.13':445
'12#.#7.60.79':445
'12#.#7.122.39':445
'12#.#7.19.109':445
'12#.#7.229.169':445
'12#.#7.24.73':139
'12#.#7.129.216':139
'12#.#7.33.40':139
'12#.#7.11.176':139
'12#.#7.180.11':139
'12#.#7.187.179':139
'12#.#7.58.77':139
'12#.#7.165.60':139
'12#.#7.167.101':139
'12#.#7.110.14':139
'12#.#7.12.82':139
'12#.#7.100.182':139
'12#.#7.180.226':139
'12#.#7.213.180':139
'12#.#7.82.202':139
'12#.#7.102.62':139
'12#.#7.33.51':139
'12#.#7.144.69':139
'12#.#7.52.153':139
'12#.#7.165.165':139
'12#.#7.56.11':139
'12#.#7.57.227':139
'12#.#7.150.221':139
'12#.67.8.85':139
'12#.#7.5.119':139
'12#.#7.46.169':139
'12#.#7.253.46':139
'12#.#7.108.125':139
'12#.#7.74.162':139
'12#.#7.26.22':139
'12#.#7.140.222':139
'12#.#7.245.239':139
'12#.#7.49.234':139
'12#.#7.186.118':139
'12#.#7.70.253':139
'12#.#7.105.90':139
'12#.#7.122.39':139
'12#.#7.19.109':139
'12#.#7.229.169':139
'12#.#7.231.167':139
'12#.#7.73.144':139
'12#.#7.187.127':139
'12#.#7.131.233':139
'12#.#7.35.34':139
'12#.#7.60.235':139
'12#.#7.12.202':139
'12#.#7.79.13':139
'12#.#7.60.79':139
'12#.#7.200.79':445
'12#.#7.71.85':445
'12#.#7.99.127':445
'12#.#7.44.67':445
'12#.#7.138.53':445
'12#.#7.29.94':445
'12#.#7.118.122':139
'12#.#7.221.176':139
'12#.#7.140.138':139
'12#.#7.174.139':139
'12#.#7.197.9':139
'12#.#7.34.236':139
'12#.#7.177.242':445
'12#.#7.60.118':445
'12#.#7.156.205':445
'12#.#7.21.142':445
'12#.#7.14.22':445
'12#.#7.173.43':445
'12#.#7.5.116':445
'12#.#7.229.137':445
'12#.#7.214.80':445
'12#.#7.253.156':445
'12#.#7.138.253':445
'12#.#7.16.54':445
'12#.#7.34.236':445
'12#.#7.197.9':445
'12#.#7.118.122':445
'12#.#7.215.34':445
'12#.#7.34.140':445
'12#.#7.174.139':445
'12#.#7.216.214':445
'12#.#7.54.54':445
'12#.#7.34.69':445
'12#.#7.221.176':445
'12#.#7.140.138':445
'12#.#7.53.138':445
'12#.#7.53.138':139
'12#.#7.54.54':139
'12#.#7.34.69':139
'12#.#7.34.140':139
'12#.#7.215.34':139
'12#.#7.216.214':139
'12#.#7.151.212':139
'12#.#7.36.35':139
'12#.#7.57.63':139
'12#.#7.13.34':139
'12#.#7.87.40':139
'12#.#7.212.252':139
'12#.#7.131.233':9988
'12#.#7.60.235':9988
'12#.#7.108.125':9988
'12#.#7.110.14':9988
'12#.#7.100.182':9988
'12#.#7.58.77':9988
'12#.#7.29.129':139
'12#.#7.203.182':139
'12#.#7.228.37':139
'12#.#7.74.162':9988
'12#.#7.70.253':9988
'12#.#7.109.1':139
'12#.#7.178.188':445
'12#.#7.64.43':445
'12#.67.1.85':445
'12#.#7.140.222':445
'12#.#7.245.239':445
'12#.#7.49.234':445
'12#.#7.52.153':9988
'12#.#7.165.165':9988
'12#.#7.187.179':9988
'12#.#7.102.62':9988
'12#.#7.57.227':9988
'12#.67.8.85':9988
'12#.#7.29.94':139
'12#.#7.200.79':139
'12#.#7.71.85':139
'12#.#7.214.80':139
'12#.#7.44.67':139
'12#.#7.138.53':139
'12#.#7.203.182':445
'12#.#7.228.37':445
'12#.67.58.6':445
'12#.#7.99.127':139
'12#.#7.109.1':445
'12#.#7.29.129':445
'12#.#7.173.43':139
'12#.#7.177.242':139
'12#.#7.60.118':139
'12#.67.58.6':139
'12#.#7.21.142':139
'12#.#7.14.22':139
'12#.#7.16.54':139
'12#.#7.5.116':139
'12#.#7.229.137':139
'12#.#7.156.205':139
'12#.#7.253.156':139
'12#.#7.138.253':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней