Trojan.Starman.6650

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#0.96.200':445
'13#.#0.230.96':445
'13#.#0.54.121':445
'13#.#0.201.169':445
'13#.#0.206.6':445
'13#.#0.3.236':445
'13#.#0.48.84':445
'13#.#0.46.209':445
'13#.#0.250.198':445
'13#.#0.179.183':445
'13#.#0.36.41':445
'13#.#0.102.72':445
'13#.#0.209.231':445
'13#.#0.171.51':445
'13#.#0.227.170':445
'13#.#0.79.88':445
'13#.#0.135.79':445
'13#.#0.51.236':445
'13#.#0.236.30':445
'13#.#0.224.154':445
'13#.#0.15.211':445
'13#.#0.129.19':445
'13#.#0.33.222':445
'13#.#0.147.228':445
'13#.#0.176.134':445
'13#.#0.29.146':445
'13#.20.67.4':445
'13#.#0.231.231':139
'13#.#0.196.57':139
'13#.20.1.38':139
'13#.#0.74.141':139
'13#.20.6.36':139
'13#.#0.231.35':139
'13#.#0.38.45':139
'13#.#0.48.32':139
'13#.#0.66.133':139
'13#.#0.241.66':139
'13#.#0.217.96':139
'13#.#0.157.210':139
'13#.#0.60.223':139
'13#.#0.52.138':445
'13#.#0.152.173':445
'13#.#0.107.152':445
'13#.#0.215.52':445
'13#.#0.11.219':445
'13#.#0.46.210':445
'13#.#0.65.166':445
'13#.#0.105.110':445
'13#.#0.59.38':445
'13#.#0.128.172':445
'13#.#0.136.236':445
'13#.#0.242.231':445
'13#.#0.110.142':445
'13#.#0.238.182':445
'13#.#0.201.169':139
'13#.#0.206.6':139
'13#.#0.3.236':139
'13#.#0.15.211':139
'13#.#0.129.19':139
'13#.#0.33.222':139
'13#.#0.96.200':139
'13#.#0.36.41':139
'13#.#0.102.72':139
'13#.#0.209.231':139
'13#.#0.230.96':139
'13#.#0.54.121':139
'13#.#0.48.84':139
'13#.20.31.8':139
'13#.#0.236.30':139
'13#.#0.51.236':139
'13#.#0.187.170':139
'13#.#0.238.182':139
'13#.#0.135.79':139
'13#.#0.171.51':139
'13#.#0.147.228':139
'13#.#0.176.134':139
'13#.#0.29.146':139
'13#.#0.227.170':139
'13#.#0.79.88':139
'13#.#0.224.154':139
'13#.#0.46.209':139
'13#.#0.62.226':445
'13#.#0.114.95':445
'13#.#0.40.184':445
'13#.#0.105.110':139
'13#.#0.59.38':139
'13#.#0.128.172':139
'13#.#0.125.159':445
'13#.#0.1.153':445
'13#.#0.187.170':445
'13#.20.31.8':445
'13#.#0.120.149':445
'13#.#0.89.218':445
'13#.#0.216.23':445
'13#.#0.215.52':139
'13#.#0.11.219':139
'13#.#0.46.210':139
'13#.#0.250.198':139
'13#.#0.179.183':139
'13#.20.67.4':139
'13#.#0.52.138':139
'13#.#0.136.236':139
'13#.#0.242.231':139
'13#.#0.110.142':139
'13#.#0.152.173':139
'13#.#0.107.152':139
'13#.#0.65.166':139
'13#.#0.189.166':139
'13#.#0.171.32':445
'13#.#0.31.218':445
'13#.20.86.8':445
'13#.#0.67.241':445
'13#.#0.227.67':445
'13#.#0.87.177':445
'13#.#0.195.253':445
'13#.#0.106.135':445
'13#.#0.177.221':445
'13#.#0.215.19':445
'13#.#0.53.65':445
'13#.#0.50.33':445
'13#.#0.93.50':445
'13#.#0.175.180':445
'13#.#0.60.136':445
'13#.#0.66.61':445
'13#.#0.49.49':445
'13#.#0.252.207':445
'13#.#0.118.230':445
'13#.#0.19.66':445
'13#.#0.54.14':445
'13#.#0.85.89':445
'13#.#0.55.197':445
'13#.#0.15.19':445
'13#.#0.160.203':445
'13#.#0.167.78':445
'13#.#0.106.49':445
'13#.#0.27.96':139
'13#.20.37.2':139
'13#.#0.77.95':139
'13#.#0.84.181':139
'13#.#0.125.63':139
'13#.#0.226.35':139
'13#.#0.84.47':139
'13#.#0.247.2':139
'13#.#0.44.151':139
'13#.#0.182.37':139
'13#.#0.234.98':139
'13#.#0.228.37':139
'13#.#0.143.165':139
'13#.#0.151.76':445
'13#.#0.210.5':445
'13#.#0.123.53':445
'13#.#0.146.18':445
'13#.#0.11.213':445
'13#.#0.76.184':445
'13#.#0.145.18':445
'13#.#0.70.145':139
'13#.#0.200.49':139
'13#.20.7.40':139
'13#.#0.46.173':139
'13#.#0.86.215':139
'13#.#0.145.218':139
'13#.#0.73.166':445
'13#.#0.67.241':139
'13#.#0.227.67':139
'13#.#0.87.177':139
'13#.#0.54.14':139
'13#.#0.85.89':139
'13#.#0.55.197':139
'13#.#0.171.32':139
'13#.#0.53.65':139
'13#.#0.50.33':139
'13#.#0.93.50':139
'13#.#0.31.218':139
'13#.20.86.8':139
'13#.#0.195.253':139
'13#.#0.49.49':139
'13#.#0.252.207':139
'13#.#0.118.230':139
'13#.#0.238.102':139
'13#.#0.11.38':139
'13#.#0.73.166':139
'13#.#0.175.180':139
'13#.#0.15.19':139
'13#.#0.160.203':139
'13#.#0.167.78':139
'13#.#0.60.136':139
'13#.#0.66.61':139
'13#.#0.19.66':139
'13#.#0.106.135':139
'13#.#0.38.45':445
'13#.#0.217.96':445
'13#.#0.157.210':445
'13#.#0.231.231':445
'13#.#0.196.57':445
'13#.20.1.38':445
'13#.#0.60.223':445
'13#.#0.189.166':445
'13#.#0.238.102':445
'13#.#0.11.38':445
'13#.#0.48.32':445
'13#.#0.66.133':445
'13#.#0.241.66':445
'13#.#0.146.18':139
'13#.#0.11.213':139
'13#.#0.76.184':139
'13#.#0.177.221':139
'13#.#0.215.19':139
'13#.#0.106.49':139
'13#.#0.151.76':139
'13#.#0.74.141':445
'13#.20.6.36':445
'13#.#0.231.35':445
'13#.#0.210.5':139
'13#.#0.123.53':139
'13#.#0.145.18':139
'13#.#0.139.150':445
'13#.#0.189.67':445
'13#.#0.227.60':445
'13#.#0.37.150':445
'13#.#0.155.37':445
'13#.#0.18.245':445
'13#.#0.224.187':445
'13#.#0.156.180':445
'13#.#0.57.114':445
'13#.#0.216.110':445
'13#.#0.82.225':445
'13#.#0.184.193':445
'13#.#0.238.92':445
'13#.#0.169.222':445
'13#.#0.151.99':445
'13#.#0.165.247':445
'13#.#0.46.236':445
'13#.#0.69.93':445
'13#.#0.45.145':445
'13#.#0.102.145':445
'13#.#0.28.119':445
'13#.#0.61.155':445
'13#.#0.149.170':445
'13#.#0.174.86':445
'13#.#0.27.93':445
'13#.#0.118.138':445
'13#.#0.97.253':445
'13#.#0.224.132':445
'13#.#0.169.33':445
'13#.#0.84.196':445
'13#.#0.24.39':445
'13#.#0.204.242':445
'13#.#0.108.160':445
'13#.#0.230.84':445
'13#.#0.224.187':9988
'13#.#0.205.4':139
'13#.#0.235.204':139
'13#.#0.4.231':445
'13#.#0.238.92':9988
'13#.#0.235.9':9988
'13#.#0.168.81':445
'13#.#0.247.135':445
'13#.#0.244.50':445
'13#.#0.172.242':445
'13#.#0.132.25':445
'13#.#0.104.94':445
'13#.#0.120.35':445
'13#.#0.51.186':445
'13#.#0.73.51':445
'13#.#0.7.104':445
'13#.#0.92.125':445
'13#.#0.133.78':445
'13#.#0.122.172':445
'13#.#0.235.9':445
'13#.#0.37.150':139
'13#.#0.155.37':139
'13#.#0.18.245':139
'13#.#0.28.119':139
'13#.#0.61.155':139
'13#.#0.149.170':139
'13#.#0.139.150':139
'13#.#0.82.225':139
'13#.#0.184.193':139
'13#.#0.238.92':139
'13#.#0.189.67':139
'13#.#0.227.60':139
'13#.#0.224.187':139
'13#.#0.99.241':139
'13#.#0.235.9':139
'13#.#0.46.236':139
'13#.#0.230.177':139
'13#.#0.45.145':139
'13#.#0.69.93':139
'13#.#0.169.222':139
'13#.#0.174.86':139
'13#.#0.27.93':139
'13#.#0.118.138':139
'13#.#0.151.99':139
'13#.#0.165.247':139
'13#.#0.102.145':139
'13#.#0.156.180':139
'13#.#0.24.39':139
'13#.#0.204.242':139
'13#.#0.108.160':139
'13#.#0.51.186':139
'13#.#0.73.51':139
'13#.#0.7.104':139
'13#.#0.224.132':139
'13#.#0.4.231':139
'13#.#0.230.177':445
'13#.#0.99.241':445
'13#.#0.169.33':139
'13#.#0.84.196':139
'13#.#0.230.84':139
'13#.#0.172.242':139
'13#.#0.132.25':139
'13#.#0.104.94':139
'13#.#0.57.114':139
'13#.#0.216.110':139
'13#.#0.97.253':139
'13#.#0.168.81':139
'13#.#0.92.125':139
'13#.#0.133.78':139
'13#.#0.122.172':139
'13#.#0.247.135':139
'13#.#0.244.50':139
'13#.#0.120.35':139
'13#.#0.128.23':139
'13#.#0.177.5':445
'13#.#0.197.70':445
'13#.#0.111.17':445
'13#.#0.169.203':445
'13#.#0.227.249':445
'13#.#0.22.188':445
'13#.#0.26.87':445
'13#.#0.151.28':445
'13#.#0.101.98':445
'13#.#0.188.197':445
'13#.#0.133.243':445
'13#.#0.144.10':445
'13#.#0.202.28':445
'13#.#0.35.196':445
'13#.20.32.4':445
'13#.#0.108.32':445
'13#.#0.237.153':445
'13#.#0.101.137':445
'13#.#0.35.234':445
'13#.#0.110.107':445
'13#.#0.35.65':445
'13#.#0.120.22':445
'13#.#0.81.140':445
'13#.#0.202.110':445
'13#.#0.185.202':445
'13#.#0.16.237':445
'13#.#0.167.31':445
'13#.#0.182.36':445
'13#.20.62.7':445
'13#.#0.40.184':139
'13#.#0.152.24':445
'13#.#0.70.81':445
'13#.#0.243.48':445
'13#.#0.125.159':139
'13#.#0.89.218':139
'13#.#0.216.23':139
'13#.#0.1.153':139
'13#.#0.62.226':139
'13#.#0.114.95':139
'13#.#0.120.149':139
'13#.#0.57.202':445
'13#.#0.123.113':445
'13#.#0.99.220':445
'13#.#0.201.24':445
'13#.#0.8.126':445
'13#.#0.55.254':445
'13#.#0.247.120':445
'13#.#0.208.142':445
'13#.#0.151.59':445
'13#.#0.29.71':445
'13#.#0.119.180':445
'13#.20.30.8':445
'13#.#0.44.187':445
'13#.#0.179.197':445
'13#.#0.169.203':139
'13#.#0.227.249':139
'13#.#0.22.188':139
'13#.#0.35.65':139
'13#.#0.120.22':139
'13#.#0.81.140':139
'13#.#0.177.5':139
'13#.#0.133.243':139
'13#.#0.144.10':139
'13#.#0.202.28':139
'13#.#0.197.70':139
'13#.#0.111.17':139
'13#.#0.26.87':139
'13#.#0.237.153':139
'13#.#0.101.137':139
'13#.#0.35.234':139
'13#.#0.71.210':139
'13#.#0.197.57':139
'13#.#0.179.197':139
'13#.#0.35.196':139
'13#.#0.202.110':139
'13#.#0.185.202':139
'13#.#0.16.237':139
'13#.20.32.4':139
'13#.#0.108.32':139
'13#.#0.110.107':139
'13#.#0.151.28':139
'13#.#0.152.24':139
'13#.#0.70.81':139
'13#.#0.243.48':139
'13#.#0.208.142':139
'13#.#0.151.59':139
'13#.#0.29.71':139
'13#.#0.182.36':139
'13#.#0.128.23':445
'13#.#0.71.210':445
'13#.#0.197.57':445
'13#.20.62.7':139
'13#.#0.205.4':445
'13#.#0.235.204':445
'13#.#0.201.24':139
'13#.#0.8.126':139
'13#.#0.55.254':139
'13#.#0.101.98':139
'13#.#0.188.197':139
'13#.#0.167.31':139
'13#.#0.57.202':139
'13#.#0.119.180':139
'13#.20.30.8':139
'13#.#0.44.187':139
'13#.#0.123.113':139
'13#.#0.99.220':139
'13#.#0.247.120':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней