Trojan.Starman.6057

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#1.147.34':139
'22#.#1.154.147':139
'22#.#1.34.146':139
'22#.#1.62.65':139
'22#.#1.146.135':139
'22#.#1.75.72':139
'22#.#1.29.157':139
'22#.#1.209.30':139
'22#.#1.118.197':139
'22#.#1.41.73':139
'22#.#1.145.231':139
'22#.#1.15.112':139
'22#.#1.74.84':139
'22#.#1.172.19':139
'22#.#1.5.185':139
'22#.#1.77.159':139
'22#.#1.156.164':139
'22#.#1.52.211':139
'22#.#1.67.128':139
'22#.#1.125.236':139
'22#.41.1.86':139
'22#.41.12.6':445
'22#.#1.171.183':445
'22#.#1.67.47':445
'22#.#1.221.154':445
'22#.#1.102.97':445
'22#.#1.172.19':445
'22#.#1.5.185':445
'22#.#1.61.189':445
'22#.#1.211.171':445
'22#.#1.109.205':445
'22#.#1.216.246':445
'22#.#1.230.122':445
'22#.#1.7.106':445
'22#.#1.65.38':139
'22#.#1.16.222':445
'22#.#1.24.247':445
'22#.#1.105.239':445
'22#.#1.106.129':445
'22#.#1.133.206':445
'22#.#1.19.19':445
'22#.#1.61.189':139
'22#.#1.129.185':445
'22#.#1.88.60':445
'22#.#1.189.13':139
'22#.#1.154.215':139
'22#.#1.31.30':139
'22#.#1.5.215':445
'22#.41.3.5':445
'22#.#1.101.119':445
'22#.#1.224.182':445
'22#.#1.158.245':445
'22#.#1.224.182':139
'22#.#1.158.245':139
'22#.#1.88.60':139
'22#.#1.147.68':445
'22#.#1.129.185':139
'22#.41.22.3':139
'22#.#1.237.21':139
'22#.41.3.5':139
'22#.#1.101.119':139
'22#.#1.5.215':139
'22#.41.22.3':445
'22#.#1.221.154':139
'22#.#1.102.97':139
'22#.#1.105.239':139
'22#.#1.106.129':139
'22#.#1.24.247':139
'22#.#1.211.171':139
'22#.#1.109.205':139
'22#.#1.171.183':139
'22#.#1.67.47':139
'22#.41.12.6':139
'22#.#1.189.13':445
'22#.#1.16.222':139
'22#.#1.31.30':445
'22#.#1.237.21':445
'22#.#1.154.215':445
'22#.#1.133.206':139
'22#.#1.19.19':139
'22#.#1.230.122':139
'22#.#1.7.106':139
'22#.#1.216.246':139
'22#.#1.36.14':139
'22#.#1.175.23':139
'22#.#1.26.237':139
'22#.#1.229.163':139
'22#.#1.32.60':139
'22#.#1.203.161':139
'22#.#1.77.47':139
'22#.#1.212.1':139
'22#.#1.149.7':139
'22#.#1.1.133':139
'22#.#1.111.239':139
'22#.#1.99.201':139
'22#.#1.40.155':139
'22#.#1.151.111':445
'22#.#1.173.19':445
'22#.#1.150.239':139
'22#.#1.87.187':139
'22#.#1.205.112':139
'22#.#1.113.2':139
'22#.#1.254.131':139
'22#.#1.175.6':139
'22#.#1.139.155':139
'22#.#1.30.69':139
'22#.#1.155.155':139
'22#.41.79.9':139
'22#.#1.214.46':139
'22#.#1.219.15':139
'22#.#1.100.225':139
'22#.#1.109.38':139
'22#.41.6.5':139
'22#.#1.188.3':139
'22#.#1.188.106':139
'22#.#1.25.188':139
'22#.#1.70.17':139
'22#.#1.57.247':139
'22#.#1.48.25':139
'22#.#1.54.249':139
'22#.#1.147.59':139
'22#.#1.224.107':139
'22#.#1.183.25':139
'22#.#1.205.134':139
'22#.#1.70.53':445
'22#.#1.118.197':445
'22#.#1.41.73':445
'22#.#1.154.147':445
'22#.#1.34.146':445
'22#.#1.147.34':445
'22#.41.1.86':445
'22#.#1.65.38':445
'22#.#1.29.157':445
'22#.#1.209.30':445
'22#.#1.75.72':445
'22#.#1.67.128':445
'22#.#1.125.236':445
'22#.#1.15.112':445
'22#.#1.74.84':445
'22#.#1.145.231':445
'22#.#1.62.65':445
'22#.#1.146.135':445
'22#.#1.156.164':445
'22#.#1.52.211':445
'22#.#1.77.159':445
'22#.#1.20.83':139
'22#.#1.15.182':445
'22#.#1.124.226':445
'22#.#1.46.123':445
'22#.#1.173.19':139
'22#.#1.20.83':445
'22#.#1.54.128':445
'22#.#1.171.83':445
'22#.#1.43.19':445
'22#.#1.35.247':445
'22#.#1.87.251':445
'22#.#1.35.247':139
'22#.#1.87.251':139
'22#.#1.124.226':139
'22#.#1.46.123':139
'22#.#1.15.182':139
'22#.#1.70.53':139
'22#.#1.151.111':139
'22#.#1.171.83':139
'22#.#1.43.19':139
'22#.#1.54.128':139
'22#.#1.170.101':445
'22#.#1.116.216':445
'22#.#1.95.194':445
'22#.#1.21.141':445
'22#.#1.91.118':445
'22#.#1.35.44':445
'22#.#1.97.127':445
'22#.#1.74.203':445
'22#.#1.75.156':445
'22#.#1.180.34':445
'22#.#1.68.123':445
'22#.#1.165.90':139
'22#.#1.119.143':139
'22#.#1.156.120':139
'22#.#1.152.17':139
'22#.#1.102.236':139
'22#.#1.95.30':139
'22#.#1.27.228':445
'22#.#1.151.182':139
'22#.#1.15.57':139
'22#.#1.48.115':139
'22#.#1.250.198':445
'22#.#1.18.59':445
'22#.#1.124.44':445
'22#.#1.73.107':445
'22#.#1.80.72':445
'22#.#1.27.242':445
'22#.#1.207.195':445
'22#.#1.242.242':445
'22#.41.8.93':445
'22#.#1.82.26':445
'22#.#1.93.137':445
'22#.41.0.5':445
'22#.#1.26.95':445
'22#.#1.212.174':445
'22#.#1.28.120':445
'22#.#1.174.193':445
'22#.#1.112.237':445
'22#.#1.253.128':445
'22#.#1.101.250':445
'22#.#1.184.25':445
'22#.#1.123.1':445
'22#.#1.148.113':139
'22#.#1.174.193':139
'22#.#1.212.174':139
'22#.#1.28.120':139
'22#.#1.74.203':139
'22#.#1.250.198':139
'22#.#1.123.1':139
'22#.#1.101.250':139
'22#.#1.184.25':139
'22#.41.0.5':139
'22#.#1.26.95':139
'22#.#1.21.141':139
'22#.#1.116.216':139
'22#.#1.35.44':139
'22#.#1.91.118':139
'22#.#1.27.228':139
'22#.#1.75.156':139
'22#.#1.97.127':139
'22#.#1.68.123':139
'22#.#1.95.194':139
'22#.#1.180.34':139
'22#.#1.112.237':139
'22#.#1.21.252':139
'22#.#1.116.38':139
'22#.#1.86.82':139
'22#.#1.242.242':139
'22#.#1.45.179':139
'22#.#1.30.186':139
'22#.#1.53.210':139
'22#.#1.186.157':139
'22#.#1.192.45':139
'22#.#1.117.25':139
'22#.#1.73.107':139
'22#.#1.18.59':139
'22#.#1.27.242':139
'22#.#1.253.128':139
'22#.#1.80.72':139
'22#.41.8.93':139
'22#.#1.207.195':139
'22#.#1.93.137':139
'22#.#1.124.44':139
'22#.#1.82.26':139
'22#.#1.34.120':139
'22#.#1.170.101':139
'22#.#1.40.17':139
'22#.#1.23.191':139
'22#.#1.178.28':139
'22#.#1.45.77':445
'22#.#1.186.31':445
'22#.41.1.88':445
'22#.#1.147.68':139
'22#.#1.22.95':445
'22#.#1.95.226':139
'22#.#1.149.136':139
'22#.#1.186.222':139
'22#.#1.64.219':139
'22#.#1.44.68':139
'22#.#1.194.191':139
'22#.#1.31.195':139
'22#.#1.164.66':139
'22#.#1.73.248':139
'22#.#1.228.179':139
'22#.#1.229.50':445
'22#.#1.164.66':445
'22#.#1.194.191':445
'22#.#1.228.179':445
'22#.#1.149.136':445
'22#.#1.73.248':445
'22#.#1.40.17':445
'22#.#1.34.120':445
'22#.#1.178.28':445
'22#.#1.31.195':445
'22#.#1.23.191':445
'22#.#1.114.84':445
'22#.#1.35.114':445
'22#.#1.212.108':445
'22#.#1.86.146':445
'22#.#1.91.224':445
'22#.#1.186.222':445
'22#.#1.95.226':445
'22#.#1.44.68':445
'22#.#1.84.199':445
'22#.#1.64.219':445
'22#.#1.84.199':139
'22#.#1.165.90':445
'22#.#1.119.143':445
'22#.#1.156.120':445
'22#.#1.152.17':445
'22#.#1.102.236':445
'22#.#1.95.30':445
'22#.#1.95.194':9988
'22#.#1.151.182':445
'22#.#1.15.57':445
'22#.#1.48.115':445
'22#.#1.116.38':445
'22#.#1.192.45':445
'22#.#1.21.252':445
'22#.#1.45.179':445
'22#.#1.86.82':445
'22#.#1.53.210':445
'22#.#1.148.113':445
'22#.#1.30.186':445
'22#.#1.117.25':445
'22#.#1.186.157':445
'22#.#1.180.34':9988
'22#.#1.186.31':139
'22#.#1.229.50':139
'22#.#1.45.77':139
'22#.#1.22.95':139
'22#.41.1.88':139
'22#.#1.114.84':139
'22#.#1.35.114':139
'22#.#1.212.108':139
'22#.#1.86.146':139
'22#.#1.91.224':139
'22#.#1.28.120':9988
'22#.#1.18.59':9988
'22#.#1.74.203':9988
'22#.#1.75.156':9988
'22#.#1.97.127':9988
'22#.#1.45.179':9988
'22#.#1.148.113':9988
'22#.#1.116.38':9988
'22#.#1.124.44':9988
'22#.#1.82.26':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней