Trojan.Starman.6070

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#73.62.65':139
'20#.#73.129.110':139
'20#.#73.29.144':139
'20#.#73.178.188':139
'20#.#73.40.179':139
'20#.#73.45.111':139
'20#.#73.53.129':139
'20#.#73.80.250':139
'20#.#73.68.21':139
'20#.#73.52.128':139
'20#.#73.136.23':139
'20#.#73.6.173':139
'20#.#73.190.6':139
'20#.#73.169.218':139
'20#.#73.142.231':139
'20#.#73.50.192':139
'20#.#73.44.22':139
'20#.#73.39.89':139
'20#.#73.112.61':139
'20#.#73.66.156':139
'20#.#73.188.245':139
'20#.#73.85.10':139
'20#.#73.6.173':445
'20#.#73.190.6':445
'20#.#73.169.218':445
'20#.#73.142.231':445
'20#.#73.50.192':445
'20#.#73.44.22':445
'20#.#73.39.89':445
'20#.#73.112.61':445
'20#.#73.66.156':445
'20#.#73.188.245':445
'20#.#73.132.182':445
'20#.#73.132.16':139
'20#.#73.220.97':139
'20#.#73.154.87':139
'20#.#73.79.191':139
'20#.#73.16.120':139
'20#.#73.18.239':445
'20#.#73.182.204':445
'20#.#73.232.63':445
'20#.#73.255.103':139
'20#.#73.196.249':445
'20#.#73.132.182':139
'20#.#73.145.31':139
'20#.#73.115.43':139
'20#.#73.103.209':139
'20#.#73.9.34':139
'20#.#73.33.196':139
'20#.#73.98.177':139
'20#.#73.26.233':139
'20#.#73.10.65':139
'20#.#73.4.19':139
'20#.#73.30.22':139
'20#.#73.58.173':139
'20#.#73.9.21':139
'20#.#73.158.122':139
'20#.#73.1.182':445
'20#.#73.28.161':445
'20#.#73.33.76':445
'20#.#73.46.37':139
'20#.#73.239.141':139
'20#.#73.36.157':139
'20#.#73.122.77':139
'20#.#73.156.163':139
'20#.#73.9.21':445
'20#.#73.10.65':445
'20#.#73.98.177':445
'20#.#73.30.22':445
'20#.#73.115.43':445
'20#.#73.4.19':445
'20#.#73.18.239':139
'20#.#73.182.204':139
'20#.#73.232.63':139
'20#.#73.26.233':445
'20#.#73.196.249':139
'20#.#73.145.31':445
'20#.#73.36.157':445
'20#.#73.46.37':445
'20#.#73.156.163':445
'20#.#73.158.122':445
'20#.#73.122.77':445
'20#.#73.33.196':445
'20#.#73.103.209':445
'20#.#73.9.34':445
'20#.#73.239.141':445
'20#.#73.58.173':445
'20#.#73.225.12':139
'20#.#73.81.28':139
'20#.#73.56.207':139
'20#.#73.68.230':139
'20#.#73.18.183':139
'20#.#73.69.170':139
'20#.#73.227.232':139
'20#.#73.204.0':139
'20#.#73.84.112':139
'20#.#73.203.126':139
'20#.#73.114.225':139
'20#.#73.132.218':445
'20#.#73.168.229':445
'20#.#73.230.208':445
'20#.#73.47.122':445
'20#.#73.209.135':445
'20#.#73.37.80':445
'20#.#73.187.37':445
'20#.#73.58.208':445
'20#.#73.40.45':445
'20#.#73.147.118':445
'20#.#73.29.68':139
'20#.#73.103.13':139
'20#.#73.151.138':139
'20#.#73.238.205':139
'20#.#73.116.254':139
'20#.#73.5.248':139
'20#.#73.140.172':139
'20#.#73.183.140':139
'20#.#73.37.132':139
'20#.#73.81.74':139
'20#.#73.53.163':139
'20#.#73.42.229':139
'20#.#73.64.70':139
'20#.#73.137.252':139
'20#.#73.12.195':139
'20#.#73.79.35':139
'20#.#73.232.109':139
'20#.#73.51.135':139
'20#.#73.135.199':139
'20#.#73.134.202':139
'20#.#73.169.123':139
'20#.#73.202.32':139
'20#.#73.248.216':445
'20#.#73.154.87':445
'20#.#73.132.16':445
'20#.#73.16.120':445
'20#.#73.85.10':445
'20#.#73.79.191':445
'20#.#73.117.131':139
'20#.#73.49.24':139
'20#.#73.127.103':139
'20#.#73.220.97':445
'20#.#73.255.103':445
'20#.#73.53.129':445
'20#.#73.29.144':445
'20#.#73.62.65':445
'20#.#73.40.179':445
'20#.#73.136.23':445
'20#.#73.178.188':445
'20#.#73.80.250':445
'20#.#73.45.111':445
'20#.#73.52.128':445
'20#.#73.129.110':445
'20#.#73.68.21':445
'20#.#73.123.105':139
'20#.#73.127.103':445
'20#.#73.117.131':445
'20#.#73.187.37':139
'20#.#73.58.208':139
'20#.#73.37.80':139
'20#.#73.23.59':445
'20#.#73.230.142':445
'20#.#73.1.177':445
'20#.#73.49.24':445
'20#.#73.123.105':445
'20#.#73.147.118':139
'20#.#73.248.216':139
'20#.#73.47.122':139
'20#.#73.230.142':139
'20#.#73.1.177':139
'20#.#73.23.59':139
'20#.#73.168.229':139
'20#.#73.40.45':139
'20#.#73.132.218':139
'20#.#73.209.135':139
'20#.#73.230.208':139
'20#.#73.224.162':445
'20#.#73.79.250':445
'20#.#73.163.144':445
'20#.#73.69.204':445
'20#.#73.113.70':445
'20#.#73.77.23':445
'20#.#73.249.33':445
'20#.#73.115.160':445
'20#.#73.148.126':445
'20#.#73.46.72':445
'20#.#73.121.132':445
'20#.#73.209.200':139
'20#.#73.33.86':139
'20#.#73.200.90':139
'20#.#73.115.164':139
'20#.#73.90.115':139
'20#.#73.9.211':445
'20#.#73.252.99':445
'20#.#73.132.20':445
'20#.#73.53.115':139
'20#.#73.233.104':139
'20#.#73.124.249':445
'20#.#73.23.81':445
'20#.#73.114.214':445
'20#.#73.73.16':445
'20#.#73.46.70':445
'20#.#73.172.46':445
'20#.#73.57.161':445
'20#.#73.114.7':445
'20#.#73.72.126':445
'20#.#73.65.57':445
'20#.#73.31.184':445
'20#.#73.41.21':445
'20#.#73.124.205':445
'20#.#73.52.200':445
'20#.#73.81.80':445
'20#.#73.126.45':445
'20#.#73.97.133':445
'20#.#73.77.175':445
'20#.#73.9.116':445
'20#.#73.177.58':445
'20#.#73.103.231':445
'20#.#73.59.121':445
'20#.#73.232.4':139
'20#.#73.124.249':139
'20#.#73.126.45':139
'20#.#73.249.33':139
'20#.#73.115.160':139
'20#.#73.77.23':139
'20#.#73.52.200':139
'20#.#73.103.231':139
'20#.#73.124.205':139
'20#.#73.97.133':139
'20#.#73.81.80':139
'20#.#73.46.72':139
'20#.#73.9.211':139
'20#.#73.132.20':139
'20#.#73.69.204':139
'20#.#73.121.132':139
'20#.#73.252.99':139
'20#.#73.79.250':139
'20#.#73.148.126':139
'20#.#73.224.162':139
'20#.#73.113.70':139
'20#.#73.163.144':139
'20#.#73.59.121':139
'20#.#73.176.208':139
'20#.#73.138.59':139
'20#.#73.114.7':139
'20#.#73.72.126':139
'20#.#73.57.161':139
'20#.#73.143.191':139
'20#.#73.39.221':139
'20#.#73.157.62':139
'20#.#73.26.136':139
'20#.#73.114.63':139
'20#.#73.31.184':139
'20#.#73.41.21':139
'20#.#73.46.70':139
'20#.#73.9.116':139
'20#.#73.177.58':139
'20#.#73.77.175':139
'20#.#73.114.214':139
'20#.#73.65.57':139
'20#.#73.23.81':139
'20#.#73.172.46':139
'20#.#73.73.16':139
'20#.#73.53.64':445
'20#.#73.165.174':445
'20#.#73.54.16':445
'20#.#73.33.76':139
'20#.#73.1.182':139
'20#.#73.145.237':445
'20#.#73.71.46':445
'20#.#73.255.178':445
'20#.#73.118.133':445
'20#.#73.178.203':445
'20#.#73.28.161':139
'20#.#73.57.22':139
'20#.#73.111.131':139
'20#.#73.30.122':139
'20#.#73.228.37':139
'20#.#73.205.107':139
'20#.#73.28.143':139
'20#.#73.87.216':139
'20#.#73.197.121':139
'20#.#73.218.91':139
'20#.#73.197.227':139
'20#.#73.166.19':445
'20#.#73.57.22':445
'20#.#73.111.131':445
'20#.#73.30.122':445
'20#.#73.228.37':445
'20#.#73.205.107':445
'20#.#73.28.143':445
'20#.#73.87.216':445
'20#.#73.197.121':445
'20#.#73.218.91':445
'20#.#73.197.227':445
'20#.#73.22.73':445
'20#.#73.213.44':445
'20#.#73.42.132':445
'20#.#73.140.130':445
'20#.#73.236.165':445
'20#.#73.25.6':445
'20#.#73.58.83':445
'20#.#73.71.163':445
'20#.#73.26.213':445
'20#.#73.117.155':445
'20#.#73.97.125':445
'20#.#73.22.73':139
'20#.#73.233.104':445
'20#.#73.9.211':9988
'20#.#73.53.115':445
'20#.#73.209.200':445
'20#.#73.33.86':445
'20#.#73.124.249':9988
'20#.#73.177.58':9988
'20#.#73.46.72':9988
'20#.#73.148.126':9988
'20#.#73.121.132':9988
'20#.#73.200.90':445
'20#.#73.114.63':445
'20#.#73.157.62':445
'20#.#73.26.136':445
'20#.#73.176.208':445
'20#.#73.138.59':445
'20#.#73.115.164':445
'20#.#73.90.115':445
'20#.#73.232.4':445
'20#.#73.143.191':445
'20#.#73.39.221':445
'20#.#73.77.175':9988
'20#.#73.213.44':139
'20#.#73.42.132':139
'20#.#73.140.130':139
'20#.#73.236.165':139
'20#.#73.25.6':139
'20#.#73.58.83':139
'20#.#73.71.163':139
'20#.#73.26.213':139
'20#.#73.117.155':139
'20#.#73.97.125':139
'20#.#73.166.19':139
'20#.#73.53.64':139
'20#.#73.165.174':139
'20#.#73.54.16':139
'20#.#73.172.46':9988
'20#.#73.23.81':9988
'20#.#73.145.237':139
'20#.#73.71.46':139
'20#.#73.255.178':139
'20#.#73.118.133':139
'20#.#73.178.203':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней