Trojan.Starman.6692

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#3.172.147':139
'22#.#3.254.163':445
'22#.#3.14.73':139
'22#.#3.200.0':139
'22#.#3.202.253':445
'22#.#3.154.147':445
'22#.#3.151.16':445
'22#.#3.2.203':445
'22#.#3.169.230':445
'22#.#3.27.61':139
'22#.#3.120.202':139
'22#.#3.22.138':139
'22#.#3.75.243':139
'22#.#3.180.134':139
'22#.#3.168.139':139
'22#.#3.184.55':139
'22#.#3.153.69':139
'22#.#3.137.156':139
'22#.#3.55.95':139
'22#.#3.181.119':445
'22#.#3.9.246':445
'22#.#3.130.66':445
'22#.#3.9.220':445
'22#.#3.149.226':445
'22#.#3.148.54':445
'22#.#3.89.138':445
'22#.#3.138.43':445
'22#.#3.251.72':445
'22#.#3.0.183':445
'22#.#3.59.37':445
'22#.#3.57.38':445
'22#.#3.22.159':445
'22#.#3.186.176':445
'22#.#3.48.230':445
'22#.#3.140.254':445
'22#.#3.11.141':445
'22#.#3.161.225':445
'22#.#3.15.34':445
'22#.#3.106.38':139
'22#.#3.161.225':139
'22#.#3.15.34':139
'22#.#3.57.38':139
'22#.#3.48.230':139
'22#.#3.140.254':139
'22#.#3.130.66':139
'22#.#3.9.220':139
'22#.#3.11.141':139
'22#.#3.0.183':139
'22#.#3.59.37':139
'22#.#3.202.253':139
'22#.#3.2.203':139
'22#.#3.22.240':445
'22#.#3.254.163':139
'22#.#3.169.230':139
'22#.#3.22.159':139
'22#.#3.186.176':139
'22#.#3.154.147':139
'22#.#3.151.16':139
'22#.#3.49.167':139
'22#.#3.61.193':139
'22#.#3.160.150':139
'22#.#3.180.4':139
'22#.#3.53.253':139
'22#.#3.32.145':139
'22#.#3.243.158':139
'22#.#3.49.241':139
'22#.#3.240.65':139
'22#.#3.58.89':139
'22#.#3.149.226':139
'22#.#3.138.43':139
'22#.#3.181.119':139
'22#.#3.9.246':139
'22#.#3.251.72':139
'22#.#3.130.214':139
'22#.#3.172.113':139
'22#.#3.148.54':139
'22#.#3.89.138':139
'22#.#3.160.234':139
'22#.#3.71.115':139
'22#.#3.144.146':139
'22#.#3.12.68':139
'22#.#3.110.117':139
'22#.#3.178.253':139
'22#.#3.105.136':139
'22#.#3.150.220':139
'22#.#3.154.223':139
'22#.#3.146.15':139
'22#.#3.136.36':139
'22#.#3.27.126':139
'22#.#3.235.89':139
'22#.#3.74.110':139
'22#.#3.101.21':139
'22#.#3.61.232':139
'22#.#3.10.160':139
'22#.#3.55.201':139
'22#.#3.82.55':139
'22#.#3.205.104':139
'22#.#3.38.254':139
'22#.#3.13.55':139
'22#.#3.56.217':139
'22#.#3.198.166':139
'22#.#3.97.147':139
'22#.#3.139.104':139
'22#.#3.130.98':139
'22#.43.33.6':139
'22#.#3.56.99':139
'22#.#3.248.125':139
'22#.#3.2.101':139
'22#.#3.110.64':139
'22#.#3.90.115':139
'22#.#3.39.213':139
'22#.#3.10.80':139
'22#.#3.225.55':139
'22#.#3.64.47':139
'22#.#3.169.64':139
'22#.#3.81.32':139
'22#.#3.106.38':445
'22#.#3.75.243':445
'22#.#3.32.145':445
'22#.#3.243.158':445
'22#.#3.180.134':445
'22#.#3.168.139':445
'22#.#3.137.156':445
'22#.#3.120.202':445
'22#.#3.22.138':445
'22#.#3.240.65':445
'22#.#3.58.89':445
'22#.#3.160.150':445
'22#.#3.130.214':445
'22#.#3.172.113':445
'22#.#3.180.4':445
'22#.#3.53.253':445
'22#.#3.49.241':445
'22#.#3.49.167':445
'22#.#3.61.193':445
'22#.#3.216.67':139
'22#.#3.120.251':139
'22#.#3.182.133':139
'22#.#3.12.63':139
'22#.#3.178.120':139
'22#.#3.158.221':139
'22#.#3.32.212':139
'22#.#3.58.179':139
'22#.#3.182.58':139
'22#.#3.53.103':139
'22#.#3.153.69':445
'22#.#3.27.61':445
'22#.#3.55.95':445
'22#.#3.184.55':445
'22#.#3.14.73':445
'22#.#3.115.202':139
'22#.#3.193.115':139
'22#.#3.200.0':445
'22#.#3.172.147':445
'22#.#3.60.70':445
'22#.#3.15.136':445
'22#.#3.30.220':445
'22#.#3.41.117':139
'22#.#3.169.149':139
'22#.#3.87.32':445
'22#.#3.233.124':445
'22#.#3.178.29':445
'22#.#3.82.62':445
'22#.#3.30.146':445
'22#.#3.219.11':139
'22#.#3.36.127':139
'22#.#3.29.195':139
'22#.#3.127.126':139
'22#.#3.127.127':139
'22#.#3.46.12':139
'22#.#3.167.124':139
'22#.#3.29.79':139
'22#.#3.70.22':139
'22#.#3.69.30':139
'22#.#3.212.46':445
'22#.#3.190.191':445
'22#.#3.56.136':445
'22#.#3.56.146':445
'22#.#3.107.207':445
'22#.#3.231.198':445
'22#.#3.198.66':445
'22#.43.56.4':445
'22#.#3.217.230':445
'22#.#3.53.131':445
'22#.#3.103.89':445
'22#.#3.108.205':445
'22#.#3.74.130':445
'22#.#3.240.246':445
'22#.#3.131.32':445
'22#.#3.28.167':445
'22#.#3.230.49':445
'22#.#3.19.219':445
'22#.#3.90.43':445
'22#.#3.55.207':139
'22#.#3.19.219':139
'22#.#3.90.43':139
'22#.#3.108.205':139
'22#.#3.131.32':139
'22#.#3.28.167':139
'22#.#3.56.136':139
'22#.#3.56.146':139
'22#.#3.230.49':139
'22#.#3.53.131':139
'22#.#3.103.89':139
'22#.#3.30.220':139
'22#.#3.82.62':139
'22#.#3.15.136':139
'22#.#3.30.146':139
'22#.#3.87.32':139
'22#.#3.74.130':139
'22#.#3.240.246':139
'22#.#3.233.124':139
'22#.#3.178.29':139
'22#.#3.170.174':139
'22#.#3.16.109':139
'22#.#3.4.140':139
'22#.#3.175.3':139
'22#.#3.0.214':139
'22#.43.76.9':139
'22#.#3.67.193':139
'22#.43.55.9':139
'22#.43.15.7':139
'22#.#3.140.102':139
'22#.#3.107.207':139
'22#.43.56.4':139
'22#.#3.212.46':139
'22#.#3.190.191':139
'22#.#3.217.230':139
'22#.#3.243.227':139
'22#.#3.109.3':139
'22#.#3.231.198':139
'22#.#3.198.66':139
'22#.#3.245.209':139
'22#.#3.168.234':139
'22#.#3.216.218':139
'22#.#3.90.47':139
'22#.#3.75.196':139
'22#.#3.81.53':139
'22#.#3.168.142':139
'22#.#3.140.75':139
'22#.#3.174.140':139
'22#.#3.4.176':139
'22#.#3.195.220':139
'22#.#3.251.179':139
'22#.#3.231.198':9988
'22#.43.15.7':9988
'22#.#3.177.22':139
'22#.#3.35.173':139
'22#.#3.32.35':139
'22#.#3.43.92':139
'22#.#3.64.83':139
'22#.#3.245.209':445
'22#.#3.168.234':445
'22#.#3.216.218':445
'22#.#3.90.47':445
'22#.#3.75.196':445
'22#.#3.81.53':445
'22#.#3.168.142':445
'22#.#3.140.75':445
'22#.#3.174.140':445
'22#.#3.4.176':445
'22#.#3.195.220':445
'22#.#3.251.179':445
'22#.#3.60.70':139
'22#.#3.22.240':139
'22#.#3.177.22':445
'22#.#3.35.173':445
'22#.#3.32.35':445
'22#.#3.43.92':445
'22#.#3.64.83':445
'22#.43.56.4':9988
'22#.#3.55.207':445
'22#.#3.127.126':445
'22#.43.76.9':445
'22#.#3.67.193':445
'22#.#3.127.127':445
'22#.#3.46.12':445
'22#.#3.70.22':445
'22#.#3.36.127':445
'22#.#3.29.195':445
'22#.43.15.7':445
'22#.#3.140.102':445
'22#.#3.4.140':445
'22#.#3.243.227':445
'22#.#3.109.3':445
'22#.#3.175.3':445
'22#.#3.0.214':445
'22#.43.55.9':445
'22#.#3.170.174':445
'22#.#3.16.109':445
'22#.#3.90.43':9988
'22#.#3.28.167':9988
'22#.#3.108.205':9988
'22#.#3.131.32':9988
'22#.#3.230.49':9988
'22#.#3.190.191':9988
'22#.#3.107.207':9988
'22#.#3.53.131':9988
'22#.#3.212.46':9988
'22#.#3.103.89':9988
'22#.#3.29.79':445
'22#.#3.219.11':445
'22#.#3.69.30':445
'22#.#3.167.124':445
'22#.#3.41.117':445
'22#.#3.178.29':9988
'22#.#3.240.246':9988
'22#.#3.169.149':445
'22#.#3.87.32':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней