Trojan.Starman.6684

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#96.223.87':445
'21#.#96.162.181':445
'21#.#96.10.58':445
'21#.#96.21.13':445
'21#.#96.86.38':445
'21#.#96.68.32':445
'21#.#96.40.1':445
'21#.#96.25.104':445
'21#.#96.130.91':445
'21#.#96.32.180':445
'21#.#96.7.30':445
'21#.#96.98.58':445
'21#.#96.89.228':445
'21#.#96.51.123':445
'21#.#96.105.156':445
'21#.#96.47.17':445
'21#.#96.27.218':445
'21#.#96.20.135':445
'21#.#96.245.85':445
'21#.#96.38.87':445
'21#.#96.36.143':445
'21#.#96.201.26':445
'21#.#96.40.175':445
'21#.#96.72.161':445
'21#.#96.34.215':445
'21#.#96.96.114':139
'21#.#96.84.48':139
'21#.#96.124.134':139
'21#.#96.207.172':139
'21#.#96.150.249':139
'21#.#96.138.55':139
'21#.#96.118.155':139
'21#.#96.158.118':445
'21#.#96.23.203':445
'21#.#96.53.152':139
'21#.#96.78.3':139
'21#.#96.67.201':139
'21#.#96.48.235':445
'21#.#96.158.118':139
'21#.#96.224.25':139
'21#.#96.94.34':445
'21#.#96.165.244':445
'21#.#96.64.125':445
'21#.#96.172.108':139
'21#.#96.83.153':139
'21#.#96.52.83':139
'21#.#96.23.203':139
'21#.#96.28.134':139
'21#.#96.133.22':139
'21#.#96.70.112':445
'21#.#96.70.112':139
'21#.#96.104.242':139
'21#.#96.47.17':139
'21#.#96.189.166':445
'21#.#96.118.28':139
'21#.#96.27.214':139
'21#.#96.51.123':139
'21#.#96.105.156':139
'21#.#96.201.26':139
'21#.#96.27.218':139
'21#.#96.20.135':139
'21#.#96.89.228':139
'21#.#96.92.151':445
'21#.#96.42.92':445
'21#.#96.203.92':445
'21#.#96.44.95':445
'21#.#96.10.44':445
'21#.#96.116.251':445
'21#.#96.90.29':445
'21#.#96.158.91':445
'21#.#96.108.52':445
'21#.#96.159.147':445
'21#.#96.216.237':445
'21#.#96.158.200':445
'21#.#96.40.175':139
'21#.#96.130.91':139
'21#.#96.34.215':139
'21#.#96.94.34':139
'21#.#96.98.58':139
'21#.#96.40.1':139
'21#.#96.25.104':139
'21#.#96.118.28':445
'21#.#96.27.214':445
'21#.#96.104.242':445
'21#.#96.165.244':139
'21#.#96.64.125':139
'21#.#96.48.235':139
'21#.#96.245.85':139
'21#.#96.21.13':139
'21#.#96.36.143':139
'21#.#96.72.161':139
'21#.#96.38.87':139
'21#.#96.86.38':139
'21#.#96.10.58':139
'21#.#96.32.180':139
'21#.#96.7.30':139
'21#.#96.68.32':139
'21#.#96.223.87':139
'21#.#96.162.181':139
'21#.#96.224.25':445
'21#.#96.36.149':445
'21#.#96.79.70':445
'21#.#96.161.215':445
'21#.#96.25.221':445
'21#.#96.21.173':445
'21#.#96.239.134':445
'21#.#96.158.195':445
'21#.#96.36.158':445
'21#.#96.11.36':445
'21#.#96.11.80':445
'21#.#96.78.219':445
'21#.#96.77.107':445
'21#.#96.132.83':445
'21#.#96.116.62':445
'21#.#96.185.109':445
'21#.#96.191.60':445
'21#.#96.82.67':445
'21#.#96.83.46':445
'21#.#96.15.237':445
'21#.#96.129.149':445
'21#.#96.191.129':445
'21#.#96.250.246':445
'21#.#96.6.87':445
'21#.#96.86.235':445
'21#.#96.78.96':445
'21#.#96.28.252':139
'21#.#96.196.28':139
'21#.#96.141.172':139
'21#.#96.105.170':139
'21#.#96.161.105':139
'21#.#96.24.82':139
'21#.#96.173.42':139
'21#.#96.66.173':139
'21#.#96.139.6':139
'21#.#96.203.29':139
'21#.#96.48.179':139
'21#.#96.42.242':139
'21#.#96.67.23':445
'21#.#96.158.194':445
'21#.#96.206.176':445
'21#.#96.109.8':445
'21#.#96.241.211':445
'21#.#96.22.242':445
'21#.#96.73.154':139
'21#.#96.84.64':139
'21#.#96.45.19':139
'21#.#96.251.15':139
'21#.#96.205.180':139
'21#.#96.97.31':139
'21#.#96.60.216':445
'21#.#96.116.227':139
'21#.#96.60.216':139
'21#.#96.191.60':139
'21#.#96.78.3':445
'21#.#96.67.201':445
'21#.#96.118.155':445
'21#.#96.116.62':139
'21#.#96.185.109':139
'21#.#96.250.246':139
'21#.#96.82.67':139
'21#.#96.83.46':139
'21#.#96.132.83':139
'21#.#96.83.153':445
'21#.#96.52.83':445
'21#.#96.207.172':445
'21#.#96.28.134':445
'21#.#96.133.22':445
'21#.#96.172.108':445
'21#.#96.84.48':445
'21#.#96.124.134':445
'21#.#96.53.152':445
'21#.#96.150.249':445
'21#.#96.96.114':445
'21#.#96.138.55':445
'21#.#96.6.87':139
'21#.#96.11.36':139
'21#.#96.78.96':139
'21#.#96.109.8':139
'21#.#96.77.107':139
'21#.#96.158.195':139
'21#.#96.36.158':139
'21#.#96.158.194':139
'21#.#96.206.176':139
'21#.#96.116.227':445
'21#.#96.241.211':139
'21#.#96.22.242':139
'21#.#96.67.23':139
'21#.#96.191.129':139
'21#.#96.25.221':139
'21#.#96.21.173':139
'21#.#96.86.235':139
'21#.#96.15.237':139
'21#.#96.129.149':139
'21#.#96.161.215':139
'21#.#96.11.80':139
'21#.#96.78.219':139
'21#.#96.239.134':139
'21#.#96.36.149':139
'21#.#96.79.70':139
'21#.#96.5.138':445
'21#.#96.174.78':445
'21#.#96.105.242':445
'21#.#96.163.105':445
'21#.#96.84.160':445
'21#.#96.7.34':445
'21#.#96.249.146':445
'21#.#96.97.3':445
'21#.#96.126.96':445
'21#.#96.61.171':445
'21#.#96.12.213':445
'21#.#96.105.76':445
'21#.#96.94.167':445
'21#.#96.7.78':445
'21#.#96.85.4':445
'21#.#96.0.199':445
'21#.#96.115.209':139
'21#.#96.17.52':445
'21#.#96.110.215':445
'21#.#96.24.243':445
'21#.#96.144.60':445
'21#.#96.133.225':445
'21#.#96.223.111':445
'21#.#96.41.149':445
'21#.#96.166.91':445
'21#.#96.18.217':445
'21#.#96.22.1':445
'21#.#96.240.17':445
'21#.#96.45.51':445
'21#.#96.152.136':445
'21#.#96.17.235':445
'21#.#96.188.52':445
'21#.#96.99.94':445
'21#.#96.57.99':445
'21#.#96.180.161':445
'21#.#96.22.227':445
'21#.#96.83.100':445
'21#.#96.94.125':445
'21#.#96.35.177':445
'21#.#96.195.35':445
'21#.#96.45.214':445
'21#.#96.12.238':445
'21#.#96.36.27':445
'21#.#96.73.17':445
'21#.#96.1.138':445
'21#.#96.176.83':445
'21#.#96.206.24':445
'21#.#96.167.44':445
'21#.#96.86.189':445
'21#.#96.45.137':445
'21#.#96.209.71':139
'21#.#96.105.242':139
'21#.#96.163.105':139
'21#.#96.12.213':139
'21#.#96.7.34':139
'21#.#96.249.146':139
'21#.#96.174.78':139
'21#.#96.126.96':139
'21#.#96.61.171':139
'21#.#96.18.217':139
'21#.#96.105.76':139
'21#.#96.94.167':139
'21#.#96.97.3':139
'21#.#96.7.78':139
'21#.#96.0.199':139
'21#.#96.223.111':139
'21#.#96.110.215':139
'21#.#96.17.52':139
'21#.#96.85.4':139
'21#.#96.144.60':139
'21#.#96.133.225':139
'21#.#96.84.160':139
'21#.#96.41.149':139
'21#.#96.166.91':139
'21#.#96.24.243':139
'21#.#96.12.238':139
'21#.#96.240.17':139
'21#.#96.45.51':139
'21#.#96.22.227':139
'21#.#96.17.235':139
'21#.#96.188.52':139
'21#.#96.22.1':139
'21#.#96.57.99':139
'21#.#96.180.161':139
'21#.#96.72.46':139
'21#.#96.83.100':139
'21#.#96.94.125':139
'21#.#96.99.94':139
'21#.#96.195.35':139
'21#.#96.45.214':139
'21#.#96.167.44':139
'21#.#96.36.27':139
'21#.#96.73.17':139
'21#.#96.35.177':139
'21#.#96.176.83':139
'21#.#96.206.24':139
'21#.#96.152.136':139
'21#.#96.86.189':139
'21#.#96.45.137':139
'21#.#96.1.138':139
'21#.#96.72.46':445
'21#.#96.230.199':445
'21#.#96.79.143':445
'21#.#96.65.202':445
'21#.#96.58.108':445
'21#.#96.86.218':445
'21#.#96.6.76':445
'21#.#96.70.149':445
'21#.#96.33.114':445
'21#.#96.10.238':445
'21#.#96.139.70':445
'21#.#96.67.139':445
'21#.#96.40.204':445
'21#.#96.110.125':445
'21#.#96.87.135':445
'21#.#96.65.157':445
'21#.#96.39.94':445
'21#.#96.221.38':445
'21#.#96.184.220':445
'21#.#96.56.132':445
'21#.#96.167.199':445
'21#.#96.126.7':445
'21#.#96.23.90':445
'21#.#96.89.227':445
'21#.#96.57.154':445
'21#.#96.203.143':445
'21#.#96.158.200':139
'21#.#96.90.29':139
'21#.#96.158.91':139
'21#.#96.203.92':139
'21#.#96.159.147':139
'21#.#96.216.237':139
'21#.#96.11.115':445
'21#.#96.54.178':445
'21#.#96.114.166':445
'21#.#96.108.52':139
'21#.#96.189.166':139
'21#.#96.166.96':445
'21#.#96.11.115':139
'21#.#96.54.178':139
'21#.#96.114.166':139
'21#.#96.155.71':445
'21#.#96.44.248':445
'21#.#96.166.96':139
'21#.#96.116.251':139
'21#.#96.92.151':139
'21#.#96.42.92':139
'21#.#96.5.138':139
'21#.#96.44.95':139
'21#.#96.10.44':139
'21#.#96.94.23':445
'21#.#96.49.27':139
'21#.#96.94.23':139
'21#.#96.39.94':139
'21#.#96.21.184':139
'21#.#96.163.237':139
'21#.#96.9.194':139
'21#.#96.87.135':139
'21#.#96.65.157':139
'21#.#96.89.227':139
'21#.#96.221.38':139
'21#.#96.184.220':139
'21#.#96.110.125':139
'21#.#96.41.149':9988
'21#.#96.105.242':9988
'21#.#96.105.76':9988
'21#.#96.209.71':445
'21#.#96.115.209':445
'21#.#96.110.215':9988
'21#.#96.126.96':9988
'21#.#96.188.52':9988
'21#.#96.69.178':139
'21#.#96.12.213':9988
'21#.#96.94.167':9988
'21#.#96.97.3':9988
'21#.#96.23.90':139
'21#.#96.10.238':139
'21#.#96.203.143':139
'21#.#96.44.248':139
'21#.#96.40.204':139
'21#.#96.70.149':139
'21#.#96.33.114':139
'21#.#96.163.237':445
'21#.#96.9.194':445
'21#.#96.49.27':445
'21#.#96.155.71':139
'21#.#96.69.178':445
'21#.#96.21.184':445
'21#.#96.58.108':139
'21#.#96.126.7':139
'21#.#96.86.218':139
'21#.#96.57.154':139
'21#.#96.56.132':139
'21#.#96.167.199':139
'21#.#96.65.202':139
'21#.#96.139.70':139
'21#.#96.67.139':139
'21#.#96.6.76':139
'21#.#96.230.199':139
'21#.#96.79.143':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней