Trojan.Starman.6696

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#43.24.94':139
'21#.#43.195.85':139
'21#.#43.74.30':139
'21#.#43.94.56':139
'21#.#43.76.72':139
'21#.#43.96.127':445
'21#.#43.192.95':445
'21#.#43.16.219':445
'21#.#43.245.153':445
'21#.#43.81.38':139
'21#.#43.41.55':139
'21#.#43.50.18':139
'21#.#43.80.68':139
'21#.#43.166.36':139
'21#.#43.148.61':139
'21#.#43.31.244':139
'21#.#43.1.134':139
'21#.#43.166.33':139
'21#.#43.173.229':139
'21#.#43.62.228':445
'21#.#43.88.248':445
'21#.#43.85.89':445
'21#.#43.138.254':445
'21#.#43.7.61':445
'21#.#43.172.150':445
'21#.#43.179.223':445
'21#.#43.169.81':445
'21#.#43.118.140':445
'21#.#43.181.208':445
'21#.#43.254.66':445
'21#.#43.233.12':445
'21#.#43.93.227':445
'21#.#43.247.95':445
'21#.#43.12.247':445
'21#.#43.54.40':445
'21#.#43.1.170':445
'21#.#43.107.56':445
'21#.#43.34.68':445
'21#.#43.125.75':445
'21#.#43.54.40':139
'21#.#43.34.68':139
'21#.#43.233.12':139
'21#.#43.93.227':139
'21#.#43.125.75':139
'21#.#43.254.66':139
'21#.#43.138.254':139
'21#.#43.1.170':139
'21#.#43.107.56':139
'21#.#43.12.247':139
'21#.#43.104.178':445
'21#.#43.16.219':139
'21#.#43.18.48':445
'21#.#43.177.228':445
'21#.#43.245.153':139
'21#.#43.62.228':139
'21#.#43.247.95':139
'21#.#43.96.127':139
'21#.#43.192.95':139
'21#.#43.7.61':139
'21#.#43.173.44':139
'21#.#43.21.154':139
'21#.#43.3.99':139
'21#.#43.45.4':139
'21#.#43.30.69':139
'21#.243.1.5':139
'21#.#43.68.100':139
'21#.#43.231.29':139
'21#.#43.208.230':139
'21#.#43.80.170':139
'21#.#43.172.150':139
'21#.#43.118.140':139
'21#.#43.88.248':139
'21#.#43.85.89':139
'21#.#43.181.208':139
'21#.#43.13.167':139
'21#.#43.219.56':139
'21#.#43.179.223':139
'21#.#43.169.81':139
'21#.#43.29.239':139
'21#.#43.118.33':139
'21#.#43.59.253':139
'21#.#43.219.45':139
'21#.#43.80.172':139
'21#.#43.67.104':139
'21#.#43.15.206':139
'21#.#43.53.145':139
'21#.#43.85.42':139
'21#.#43.240.176':139
'21#.#43.105.122':139
'21#.#43.126.38':139
'21#.#43.231.22':139
'21#.#43.121.244':139
'21#.#43.40.186':139
'21#.#43.102.177':139
'21#.#43.67.64':139
'21#.#43.83.171':139
'21#.#43.226.219':139
'21#.#43.85.139':139
'21#.#43.29.107':139
'21#.#43.185.199':139
'21#.#43.111.86':139
'21#.#43.225.162':139
'21#.#43.197.177':139
'21#.#43.217.100':139
'21#.#43.55.213':139
'21#.#43.19.140':139
'21#.#43.77.89':139
'21#.#43.120.42':139
'21#.#43.16.202':139
'21#.#43.116.196':139
'21#.#43.31.130':139
'21#.#43.91.45':139
'21#.#43.109.91':139
'21#.#43.136.77':139
'21#.#43.122.6':139
'21#.#43.41.239':139
'21#.#43.225.23':139
'21#.#43.80.68':445
'21#.#43.166.36':445
'21#.243.1.5':445
'21#.#43.68.100':445
'21#.#43.41.55':445
'21#.#43.166.33':445
'21#.#43.173.229':445
'21#.#43.50.18':445
'21#.#43.148.61':445
'21#.#43.208.230':445
'21#.#43.80.170':445
'21#.#43.3.99':445
'21#.#43.13.167':445
'21#.#43.219.56':445
'21#.#43.45.4':445
'21#.#43.30.69':445
'21#.#43.231.29':445
'21#.#43.173.44':445
'21#.#43.21.154':445
'21#.#43.31.244':445
'21#.#43.152.127':139
'21#.#43.108.230':139
'21#.#43.47.98':139
'21#.#43.127.201':139
'21#.#43.89.77':139
'21#.#43.78.242':139
'21#.#43.6.157':139
'21#.#43.153.98':139
'21#.#43.18.244':139
'21#.#43.73.236':139
'21#.#43.74.30':445
'21#.#43.94.56':445
'21#.#43.1.134':445
'21#.#43.81.38':445
'21#.#43.24.94':445
'21#.#43.246.128':139
'21#.#43.210.246':139
'21#.#43.195.85':445
'21#.#43.76.72':445
'21#.#43.26.121':445
'21#.#43.70.181':445
'21#.#43.172.173':139
'21#.#43.140.7':139
'21#.#43.140.134':445
'21#.#43.125.164':445
'21#.#43.122.247':445
'21#.#43.8.157':445
'21#.#43.87.41':445
'21#.#43.14.243':139
'21#.#43.109.150':139
'21#.#43.227.80':139
'21#.#43.150.120':139
'21#.#43.38.15':139
'21#.#43.31.194':139
'21#.#43.47.189':139
'21#.#43.105.47':139
'21#.#43.222.247':139
'21#.#43.85.123':139
'21#.#43.191.122':445
'21#.#43.247.43':445
'21#.#43.116.180':445
'21#.#43.230.86':445
'21#.#43.105.57':445
'21#.#43.151.154':445
'21#.#43.225.0':445
'21#.#43.28.149':445
'21#.#43.29.34':445
'21#.#43.80.189':445
'21#.#43.87.8':445
'21#.#43.113.39':445
'21#.#43.37.12':445
'21#.#43.1.192':445
'21#.#43.66.194':445
'21#.#43.34.223':445
'21#.#43.65.218':445
'21#.#43.93.45':445
'21#.#43.37.222':445
'21#.#43.134.98':445
'21#.#43.34.223':139
'21#.#43.37.222':139
'21#.#43.113.39':139
'21#.#43.37.12':139
'21#.#43.134.98':139
'21#.#43.87.8':139
'21#.#43.230.86':139
'21#.#43.65.218':139
'21#.#43.93.45':139
'21#.#43.66.194':139
'21#.#43.26.121':139
'21#.#43.70.181':139
'21#.#43.87.41':139
'21#.#43.8.157':139
'21#.#43.140.134':139
'21#.#43.191.122':139
'21#.#43.1.192':139
'21#.#43.125.164':139
'21#.#43.122.247':139
'21#.#43.105.57':139
'21#.#43.83.179':139
'21#.#43.14.11':139
'21#.#43.64.151':139
'21#.#43.53.224':139
'21#.#43.193.161':139
'21#.#43.228.146':139
'21#.#43.71.78':139
'21#.#43.248.222':139
'21#.#43.146.248':139
'21#.#43.5.154':139
'21#.#43.151.154':139
'21#.#43.29.34':139
'21#.#43.247.43':139
'21#.#43.116.180':139
'21#.#43.80.189':139
'21#.#43.131.93':139
'21#.#43.90.198':139
'21#.#43.225.0':139
'21#.#43.28.149':139
'21#.#43.51.1':139
'21#.#43.172.133':139
'21#.#43.102.165':139
'21#.#43.164.150':139
'21#.#43.249.167':139
'21#.#43.41.87':139
'21#.#43.18.48':139
'21#.#43.135.140':139
'21#.#43.87.87':139
'21#.#43.3.226':139
'21#.#43.5.97':139
'21#.#43.40.2':139
'21#.#43.110.9':139
'21#.#43.43.211':139
'21#.#43.112.5':139
'21#.#43.245.199':139
'21#.#43.126.27':139
'21#.#43.11.197':139
'21#.#43.6.235':139
'21#.#43.177.228':139
'21#.#43.164.150':445
'21#.#43.51.1':445
'21#.#43.3.226':445
'21#.#43.102.165':445
'21#.#43.172.133':445
'21#.#43.87.87':445
'21#.#43.41.87':445
'21#.#43.249.167':445
'21#.#43.135.140':445
'21#.#43.126.27':445
'21#.#43.43.211':445
'21#.#43.5.97':445
'21#.#43.104.178':139
'21#.#43.110.9':445
'21#.#43.40.2':445
'21#.#43.6.235':445
'21#.#43.245.199':445
'21#.#43.112.5':445
'21#.#43.11.197':445
'21#.#43.150.120':445
'21#.#43.38.15':445
'21#.#43.228.146':445
'21#.#43.71.78':445
'21#.#43.109.150':445
'21#.#43.222.247':445
'21#.#43.85.123':445
'21#.#43.227.80':445
'21#.#43.31.194':445
'21#.#43.146.248':445
'21#.#43.5.154':445
'21#.#43.64.151':445
'21#.#43.131.93':445
'21#.#43.90.198':445
'21#.#43.53.224':445
'21#.#43.193.161':445
'21#.#43.248.222':445
'21#.#43.83.179':445
'21#.#43.14.11':445
'21#.#43.47.189':445
'21#.#43.90.198':9988
'21#.#43.5.154':9988
'21#.#43.29.34':9988
'21#.#43.131.93':9988
'21#.#43.64.151':9988
'21#.#43.31.194':9988
'21#.#43.85.123':9988
'21#.#43.227.80':9988
'21#.#43.222.247':9988
'21#.#43.151.154':9988
'21#.#43.172.173':445
'21#.#43.140.7':445
'21#.#43.105.47':445
'21#.#43.14.243':445
'21#.#43.125.164':9988
'21#.#43.87.41':9988
'21#.#43.26.121':9988
'21#.#43.191.122':9988
'21#.#43.8.157':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней