Trojan.Starman.6672

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#53.114.58':139
'20#.#53.52.156':139
'20#.#53.58.22':139
'20#.#53.195.165':139
'20#.#53.135.79':139
'20#.#53.65.194':139
'20#.#53.223.90':139
'20#.#53.26.239':139
'20#.#53.34.12':139
'20#.#53.85.161':139
'20#.#53.32.52':139
'20#.#53.82.69':139
'20#.#53.23.237':139
'20#.#53.172.170':139
'20#.#53.58.172':139
'20#.#53.18.147':139
'20#.#53.29.167':139
'20#.#53.250.154':139
'20#.#53.60.109':139
'20#.#53.11.161':139
'20#.#53.52.76':139
'20#.#53.133.75':445
'20#.#53.93.27':445
'20#.#53.154.239':445
'20#.#53.151.147':445
'20#.#53.236.185':445
'20#.#53.104.224':445
'20#.#53.37.167':445
'20#.#53.51.11':445
'20#.#53.250.92':445
'20#.#53.215.117':445
'20#.#53.233.127':445
'20#.#53.242.42':445
'20#.#53.45.79':445
'20#.#53.13.132':139
'20#.#53.200.91':445
'20#.#53.175.108':445
'20#.#53.92.251':445
'20#.#53.65.43':445
'20#.#53.228.241':445
'20#.#53.192.199':445
'20#.#53.247.59':139
'20#.#53.112.154':445
'20#.#53.248.64':445
'20#.#53.246.10':139
'20#.#53.160.228':139
'20#.#53.104.158':139
'20#.#53.160.228':445
'20#.#53.104.158':445
'20#.#53.223.81':445
'20#.#53.176.246':445
'20#.#53.149.150':445
'20#.#53.154.171':445
'20#.#53.26.46':445
'20#.#53.171.205':445
'20#.#53.28.167':445
'20#.#53.206.28':445
'20#.#53.149.150':139
'20#.#53.223.81':139
'20#.#53.176.246':139
'20#.#53.112.154':139
'20#.#53.248.64':139
'20#.#53.246.10':445
'20#.#53.93.27':139
'20#.#53.250.92':139
'20#.#53.133.75':139
'20#.#53.236.185':139
'20#.#53.154.239':139
'20#.#53.37.167':139
'20#.#53.151.242':139
'20#.#53.104.224':139
'20#.#53.215.117':139
'20#.#53.51.11':139
'20#.#53.242.42':139
'20#.#53.228.241':139
'20#.#53.233.127':139
'20#.#53.200.91':139
'20#.#53.45.79':139
'20#.#53.92.251':139
'20#.#53.151.147':139
'20#.#53.175.108':139
'20#.#53.192.199':139
'20#.#53.65.43':139
'20#.#53.140.49':139
'20#.#53.79.140':139
'20#.#53.82.124':139
'20#.#53.66.198':139
'20#.#53.11.105':139
'20#.#53.1.154':139
'20#.#53.183.114':139
'20#.#53.222.165':139
'20#.#53.107.24':139
'20#.#53.219.8':139
'20#.#53.109.188':139
'20#.#53.29.190':139
'20#.#53.188.198':139
'20#.#53.75.152':139
'20#.#53.199.75':139
'20#.#53.82.17':139
'20#.#53.197.198':139
'20#.#53.25.250':139
'20#.#53.8.121':139
'20#.#53.31.48':139
'20#.#53.157.231':139
'20#.#53.179.151':139
'20#.#53.10.27':139
'20#.#53.97.236':139
'20#.#53.176.160':139
'20#.#53.236.176':139
'20#.#53.130.32':139
'20#.#53.99.201':139
'20#.#53.97.133':139
'20#.#53.101.81':139
'20#.#53.122.96':139
'20#.#53.51.18':139
'20#.#53.145.51':139
'20#.#53.17.205':139
'20#.#53.133.233':139
'20#.#53.62.216':139
'20#.#53.162.89':139
'20#.#53.146.146':139
'20#.#53.114.168':139
'20#.#53.13.81':139
'20#.#53.168.138':139
'20#.#53.24.189':139
'20#.#53.135.79':445
'20#.#53.58.22':445
'20#.#53.195.165':445
'20#.#53.18.147':445
'20#.#53.29.167':445
'20#.#53.85.161':445
'20#.#53.26.239':445
'20#.#53.34.12':445
'20#.#53.114.58':445
'20#.#53.52.156':445
'20#.#53.58.172':445
'20#.#53.23.237':445
'20#.#53.172.170':445
'20#.#53.151.242':445
'20#.#53.247.59':445
'20#.#53.11.161':445
'20#.#53.250.154':445
'20#.#53.60.109':445
'20#.#53.32.52':445
'20#.#53.82.69':445
'20#.#53.65.194':445
'20#.#53.13.83':445
'20#.#53.105.68':445
'20#.#53.28.164':445
'20#.#53.43.110':139
'20#.#53.157.105':445
'20#.#53.43.110':445
'20#.#53.117.75':139
'20#.#53.110.38':445
'20#.#53.20.130':445
'20#.#53.38.174':445
'20#.#53.157.105':139
'20#.#53.28.164':139
'20#.#53.13.132':445
'20#.#53.223.90':445
'20#.#53.52.76':445
'20#.#53.38.174':139
'20#.#53.110.38':139
'20#.#53.20.130':139
'20#.#53.13.83':139
'20#.#53.105.68':139
'20#.#53.181.7':445
'20#.#53.30.171':445
'20#.#53.250.149':445
'20#.#53.124.231':445
'20#.#53.84.177':445
'20#.#53.228.107':445
'20#.#53.121.107':445
'20#.#53.180.24':445
'20#.#53.66.183':445
'20#.#53.164.99':445
'20#.#53.199.184':139
'20#.#53.112.197':139
'20#.#53.188.112':139
'20#.#53.91.138':139
'20#.#53.51.91':139
'20#.#53.44.100':139
'20#.#53.178.237':445
'20#.#53.246.230':139
'20#.#53.212.121':139
'20#.#53.231.78':139
'20#.#53.86.111':445
'20#.#53.53.224':445
'20#.#53.10.227':445
'20#.#53.80.32':445
'20#.#53.168.214':445
'20#.#53.31.169':445
'20#.#53.129.146':445
'20#.#53.40.61':445
'20#.#53.161.66':445
'20#.#53.28.69':445
'20#.#53.69.153':445
'20#.#53.67.154':445
'20#.#53.91.216':445
'20#.#53.108.118':445
'20#.#53.133.164':445
'20#.#53.186.93':445
'20#.#53.167.207':445
'20#.#53.214.160':445
'20#.#53.14.166':445
'20#.#53.42.155':445
'20#.#53.3.151':445
'20#.#53.229.236':139
'20#.#53.186.93':139
'20#.#53.108.118':139
'20#.#53.133.164':139
'20#.#53.121.107':139
'20#.#53.86.111':139
'20#.#53.3.151':139
'20#.#53.14.166':139
'20#.#53.42.155':139
'20#.#53.67.154':139
'20#.#53.91.216':139
'20#.#53.84.177':139
'20#.#53.66.183':139
'20#.#53.181.7':139
'20#.#53.124.231':139
'20#.#53.178.237':139
'20#.#53.180.24':139
'20#.#53.228.107':139
'20#.#53.164.99':139
'20#.#53.250.149':139
'20#.#53.30.171':139
'20#.#53.167.207':139
'20#.#53.127.216':139
'20#.#53.68.197':139
'20#.#53.102.173':139
'20#.#53.40.61':139
'20#.#53.96.118':139
'20#.#53.223.21':139
'20#.#53.18.36':139
'20#.#53.181.181':139
'20#.#53.15.15':139
'20#.#53.177.167':139
'20#.#53.80.32':139
'20#.#53.53.224':139
'20#.#53.31.169':139
'20#.#53.214.160':139
'20#.#53.168.214':139
'20#.#53.161.66':139
'20#.#53.129.146':139
'20#.#53.69.153':139
'20#.#53.10.227':139
'20#.#53.28.69':139
'20#.#53.206.28':139
'20#.#53.171.205':139
'20#.#53.28.167':139
'20#.#53.78.98':139
'20#.#53.68.123':139
'20#.#53.84.233':445
'20#.#53.63.60':445
'20#.#53.29.223':445
'20#.#53.154.171':139
'20#.#53.26.46':139
'20#.#53.123.243':139
'20#.#53.194.123':139
'20#.#53.147.153':139
'20#.#53.5.152':139
'20#.#53.192.66':139
'20#.#53.249.42':139
'20#.#53.197.11':139
'20#.#53.241.164':139
'20#.#53.124.98':139
'20#.#53.224.70':139
'20#.#53.22.104':445
'20#.#53.124.98':445
'20#.#53.224.70':445
'20#.#53.194.123':445
'20#.#53.147.153':445
'20#.#53.123.243':445
'20#.#53.78.98':445
'20#.#53.68.123':445
'20#.#53.197.11':445
'20#.#53.241.164':445
'20#.#53.249.42':445
'20#.#53.216.117':445
'20#.#53.75.172':445
'20#.#53.117.155':445
'20#.153.1.2':445
'20#.#53.156.0':445
'20#.#53.5.152':445
'20#.#53.192.66':445
'20#.#53.56.44':445
'20#.#53.96.174':445
'20#.#53.86.96':445
'20#.#53.56.44':139
'20#.#53.199.184':445
'20#.#53.112.197':445
'20#.#53.188.112':445
'20#.#53.91.138':445
'20#.#53.51.91':445
'20#.#53.44.100':445
'20#.#53.178.237':9988
'20#.#53.246.230':445
'20#.#53.212.121':445
'20#.#53.231.78':445
'20#.#53.68.197':445
'20#.#53.15.15':445
'20#.#53.127.216':445
'20#.#53.96.118':445
'20#.#53.102.173':445
'20#.#53.18.36':445
'20#.#53.229.236':445
'20#.#53.223.21':445
'20#.#53.177.167':445
'20#.#53.181.181':445
'20#.#53.124.231':9988
'20#.153.1.2':139
'20#.#53.156.0':139
'20#.#53.22.104':139
'20#.#53.84.233':139
'20#.#53.63.60':139
'20#.#53.96.174':139
'20#.#53.86.96':139
'20#.#53.75.172':139
'20#.#53.117.155':139
'20#.#53.216.117':139
'20#.#53.102.173':9988
'20#.#53.127.216':9988
'20#.#53.40.61':9988
'20#.#53.180.24':9988
'20#.#53.181.7':9988
'20#.#53.51.91':9988
'20#.#53.29.223':139
'20#.#53.18.36':9988
'20#.#53.68.197':9988
'20#.#53.177.167':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней