Trojan.Starman.6105

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#3.12.32':139
'22#.#3.150.43':139
'22#.#3.77.155':139
'22#.#3.195.242':139
'22#.#3.160.45':139
'22#.#3.35.190':139
'22#.#3.61.247':139
'22#.#3.252.210':139
'22#.#3.30.140':139
'22#.#3.213.99':139
'22#.#3.75.242':445
'22#.#3.228.16':445
'22#.#3.176.147':445
'22#.#3.96.18':445
'22#.#3.226.145':445
'22#.#3.161.1':139
'22#.#3.89.160':139
'22#.#3.212.203':445
'22#.#3.189.146':445
'22#.#3.104.100':445
'22#.#3.184.112':139
'22#.#3.174.192':139
'22#.#3.6.209':139
'22#.#3.35.245':139
'22#.#3.43.221':139
'22#.#3.175.73':139
'22#.#3.7.239':139
'22#.#3.84.113':139
'22#.#3.178.48':139
'22#.#3.94.178':139
'22#.73.5.33':139
'22#.#3.108.103':139
'22#.#3.1.219':139
'22#.#3.145.47':139
'22#.#3.40.91':139
'22#.#3.88.147':139
'22#.#3.58.136':139
'22#.#3.150.10':139
'22#.#3.24.108':139
'22#.#3.96.238':139
'22#.73.75.7':445
'22#.#3.36.34':445
'22#.#3.91.11':445
'22#.#3.217.9':445
'22#.#3.21.55':445
'22#.#3.159.101':445
'22#.#3.124.180':445
'22#.#3.118.145':445
'22#.#3.97.177':445
'22#.#3.93.137':445
'22#.#3.9.218':445
'22#.#3.186.211':445
'22#.#3.180.147':445
'22#.#3.4.208':445
'22#.#3.147.200':445
'22#.#3.69.201':445
'22#.73.19.3':445
'22#.#3.187.236':445
'22#.#3.253.30':445
'22#.#3.142.87':445
'22#.#3.25.58':445
'22#.#3.30.188':445
'22#.#3.156.83':445
'22#.#3.12.73':445
'22#.#3.33.158':445
'22#.#3.251.101':445
'22#.#3.175.64':445
'22#.#3.203.117':445
'22#.#3.113.248':445
'22#.#3.78.195':445
'22#.#3.204.67':445
'22#.#3.30.204':445
'22#.#3.44.10':445
'22#.#3.243.80':445
'22#.#3.37.79':445
'22#.#3.132.213':445
'22#.#3.196.48':445
'22#.#3.28.71':445
'22#.#3.179.30':445
'22#.#3.173.22':445
'22#.#3.188.18':445
'22#.#3.10.105':445
'22#.#3.67.14':445
'22#.#3.7.239':445
'22#.#3.14.166':445
'22#.#3.102.246':445
'22#.#3.195.16':445
'22#.#3.181.144':445
'22#.#3.217.208':445
'22#.#3.71.139':445
'22#.#3.6.209':445
'22#.#3.184.112':445
'22#.#3.43.221':445
'22#.#3.58.136':445
'22#.#3.35.245':445
'22#.#3.84.113':445
'22#.#3.175.73':445
'22#.#3.94.178':445
'22#.#3.174.192':445
'22#.#3.178.48':445
'22#.73.40.1':139
'22#.#3.64.139':139
'22#.#3.158.176':139
'22#.#3.16.80':139
'22#.#3.158.130':139
'22#.#3.32.35':139
'22#.#3.51.215':139
'22#.#3.39.160':139
'22#.#3.187.56':139
'22#.#3.5.187':139
'22#.#3.119.223':445
'22#.#3.99.77':445
'22#.#3.114.44':445
'22#.#3.72.194':445
'22#.#3.6.201':445
'22#.#3.8.245':445
'22#.#3.80.20':445
'22#.#3.211.3':445
'22#.#3.103.99':445
'22#.#3.176.243':445
'22#.#3.99.77':139
'22#.#3.103.99':139
'22#.#3.119.223':139
'22#.#3.6.201':139
'22#.#3.114.44':139
'22#.#3.80.20':139
'22#.#3.161.1':445
'22#.#3.8.245':139
'22#.#3.176.243':139
'22#.#3.211.3':139
'22#.#3.10.105':139
'22#.#3.71.139':139
'22#.#3.188.18':139
'22#.#3.14.166':139
'22#.#3.67.14':139
'22#.#3.195.16':139
'22#.#3.72.194':139
'22#.#3.102.246':139
'22#.#3.217.208':139
'22#.#3.181.144':139
'22#.#3.1.219':445
'22#.73.5.33':445
'22#.#3.40.91':445
'22#.#3.61.247':445
'22#.#3.145.47':445
'22#.#3.150.10':445
'22#.#3.88.147':445
'22#.#3.96.238':445
'22#.#3.108.103':445
'22#.#3.24.108':445
'22#.#3.77.155':445
'22#.#3.12.32':445
'22#.#3.160.45':445
'22#.#3.89.160':445
'22#.#3.195.242':445
'22#.#3.252.210':445
'22#.#3.35.190':445
'22#.#3.213.99':445
'22#.#3.150.43':445
'22#.#3.30.140':445
'22#.#3.91.100':445
'22#.#3.34.250':445
'22#.#3.203.181':445
'22#.#3.108.141':445
'22#.#3.237.116':139
'22#.#3.127.76':445
'22#.#3.198.75':445
'22#.#3.71.162':445
'22#.#3.98.198':445
'22#.#3.95.140':445
'22#.#3.100.1':445
'22#.#3.85.221':139
'22#.#3.24.201':139
'22#.#3.221.156':139
'22#.#3.131.208':139
'22#.#3.157.54':139
'22#.#3.22.215':139
'22#.#3.148.79':139
'22#.#3.103.235':139
'22#.#3.166.185':139
'22#.#3.183.187':139
'22#.#3.47.84':445
'22#.#3.19.108':445
'22#.#3.242.75':445
'22#.#3.190.120':445
'22#.#3.100.126':445
'22#.#3.198.85':445
'22#.#3.100.191':445
'22#.#3.28.253':445
'22#.#3.80.215':445
'22#.#3.234.4':445
'22#.#3.90.223':445
'22#.#3.97.183':445
'22#.#3.43.90':445
'22#.#3.228.64':445
'22#.#3.222.199':445
'22#.#3.248.158':445
'22#.#3.119.248':445
'22#.#3.158.249':445
'22#.#3.53.158':445
'22#.#3.178.221':445
'22#.#3.97.183':139
'22#.#3.53.158':139
'22#.#3.90.223':139
'22#.#3.222.199':139
'22#.#3.43.90':139
'22#.#3.119.248':139
'22#.#3.190.120':139
'22#.#3.248.158':139
'22#.#3.178.221':139
'22#.#3.158.249':139
'22#.#3.71.162':139
'22#.#3.127.76':139
'22#.#3.98.198':139
'22#.#3.108.141':139
'22#.#3.34.250':139
'22#.#3.198.75':139
'22#.#3.228.64':139
'22#.#3.100.1':139
'22#.#3.203.181':139
'22#.#3.95.140':139
'22#.#3.53.97':139
'22#.#3.25.98':139
'22#.#3.116.177':139
'22#.#3.132.39':139
'22#.#3.52.132':139
'22#.#3.37.216':139
'22#.#3.156.201':139
'22#.#3.216.13':139
'22#.#3.44.247':139
'22#.#3.14.45':139
'22#.#3.19.108':139
'22#.#3.80.215':139
'22#.#3.47.84':139
'22#.#3.100.126':139
'22#.#3.242.75':139
'22#.#3.100.191':139
'22#.#3.39.101':139
'22#.#3.198.85':139
'22#.#3.234.4':139
'22#.#3.28.253':139
'22#.#3.204.67':139
'22#.#3.30.204':139
'22#.#3.44.10':139
'22#.#3.243.80':139
'22#.#3.37.79':139
'22#.#3.132.213':139
'22#.#3.196.48':139
'22#.#3.28.71':139
'22#.#3.179.30':139
'22#.#3.173.22':139
'22#.73.75.7':139
'22#.#3.36.34':139
'22#.#3.91.11':139
'22#.#3.217.9':139
'22#.#3.21.55':139
'22#.#3.159.101':139
'22#.#3.124.180':139
'22#.#3.118.145':139
'22#.#3.97.177':139
'22#.#3.93.137':139
'22#.#3.75.242':139
'22#.#3.228.16':139
'22#.#3.176.147':139
'22#.#3.96.18':139
'22#.#3.226.145':139
'22#.#3.228.178':445
'22#.#3.140.237':445
'22#.#3.212.203':139
'22#.#3.189.146':139
'22#.#3.104.100':139
'22#.#3.25.58':139
'22#.#3.30.188':139
'22#.#3.156.83':139
'22#.#3.12.73':139
'22#.#3.33.158':139
'22#.#3.251.101':139
'22#.#3.175.64':139
'22#.#3.203.117':139
'22#.#3.113.248':139
'22#.#3.78.195':139
'22#.#3.221.156':445
'22#.#3.85.221':445
'22#.#3.157.54':445
'22#.#3.156.201':445
'22#.#3.131.208':445
'22#.#3.103.235':445
'22#.#3.22.215':445
'22#.#3.183.187':445
'22#.#3.24.201':445
'22#.#3.166.185':445
'22#.#3.116.177':445
'22#.#3.53.97':445
'22#.#3.52.132':445
'22#.#3.39.101':445
'22#.#3.132.39':445
'22#.#3.216.13':445
'22#.#3.37.216':445
'22#.#3.14.45':445
'22#.#3.25.98':445
'22#.#3.44.247':445
'22#.#3.9.218':139
'22#.#3.186.211':139
'22#.#3.180.147':139
'22#.#3.4.208':139
'22#.#3.147.200':139
'22#.#3.69.201':139
'22#.73.19.3':139
'22#.#3.187.236':139
'22#.#3.253.30':139
'22#.#3.142.87':139
'22#.#3.53.97':9988
'22#.#3.52.132':9988
'22#.#3.28.253':9988
'22#.#3.148.79':445
'22#.#3.237.116':445
'22#.#3.140.237':139
'22#.#3.91.100':139
'22#.#3.228.178':139
'22#.#3.24.201':9988
'22#.#3.100.191':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней