Trojan.Starman.6430

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#3.14.86':139
'22#.#3.193.14':139
'22#.#3.86.105':139
'22#.#3.111.156':139
'22#.#3.192.48':139
'22#.#3.183.229':139
'22#.#3.32.162':139
'22#.#3.137.131':139
'22#.#3.38.131':139
'22#.#3.131.110':139
'22#.#3.90.101':139
'22#.#3.102.75':139
'22#.#3.160.102':139
'22#.#3.74.151':139
'22#.#3.47.104':139
'22#.#3.89.91':139
'22#.#3.52.39':139
'22#.#3.130.162':139
'22#.#3.186.140':139
'22#.#3.71.89':139
'22#.#3.36.168':139
'22#.#3.90.101':445
'22#.#3.111.156':445
'22#.#3.130.162':445
'22#.#3.186.140':445
'22#.#3.52.39':445
'22#.#3.193.14':445
'22#.#3.38.131':445
'22#.#3.14.86':445
'22#.#3.192.48':445
'22#.#3.86.105':445
'22#.#3.36.168':445
'22#.#3.36.63':139
'22#.#3.47.104':445
'22#.#3.105.132':139
'22#.#3.47.106':139
'22#.#3.173.47':139
'22#.#3.160.102':445
'22#.#3.71.89':445
'22#.#3.102.75':445
'22#.#3.89.91':445
'22#.#3.74.151':445
'22#.#3.215.3':139
'22#.#3.125.214':139
'22#.#3.3.215':139
'22#.#3.166.169':139
'22#.#3.102.88':139
'22#.#3.246.184':445
'22#.#3.31.56':445
'22#.#3.199.182':445
'22#.#3.182.78':445
'22#.#3.165.158':445
'22#.#3.251.138':139
'22#.#3.170.239':139
'22#.#3.228.159':139
'22#.#3.240.93':139
'22#.#3.31.78':139
'22#.#3.213.163':139
'22#.#3.237.183':139
'22#.#3.69.87':139
'22#.#3.11.76':139
'22#.#3.133.134':139
'22#.#3.145.4':139
'22#.#3.69.87':445
'22#.#3.251.138':445
'22#.#3.237.183':445
'22#.#3.145.4':445
'22#.#3.11.76':445
'22#.#3.215.3':445
'22#.#3.125.214':445
'22#.#3.3.215':445
'22#.#3.166.169':445
'22#.#3.102.88':445
'22#.#3.133.134':445
'22#.#3.103.1':445
'22#.#3.78.14':445
'22#.#3.200.143':445
'22#.#3.220.26':445
'22#.#3.44.146':445
'22#.#3.170.239':445
'22#.#3.228.159':445
'22#.#3.240.93':445
'22#.#3.31.78':445
'22#.#3.213.163':445
'22#.#3.131.110':445
'22#.#3.132.164':445
'22#.#3.39.132':445
'22#.#3.164.74':445
'22#.73.9.5':445
'22#.#3.234.0':445
'22#.#3.123.64':139
'22#.#3.43.122':139
'22#.73.64.1':139
'22#.#3.28.223':445
'22#.#3.1.136':139
'22#.#3.22.10':445
'22#.#3.183.157':445
'22#.#3.83.97':445
'22#.#3.107.1':445
'22#.#3.224.237':445
'22#.#3.115.188':445
'22#.#3.115.183':445
'22#.73.54.2':445
'22#.#3.108.9':445
'22#.#3.21.98':445
'22#.#3.77.63':445
'22#.#3.45.127':139
'22#.#3.152.71':139
'22#.#3.127.31':139
'22#.#3.89.63':139
'22#.#3.31.89':139
'22#.#3.130.150':139
'22#.#3.27.28':139
'22#.#3.46.40':139
'22#.#3.217.63':139
'22#.#3.188.75':139
'22#.#3.35.199':139
'22#.#3.160.48':139
'22#.#3.41.44':139
'22#.#3.114.73':139
'22#.#3.14.74':139
'22#.#3.60.136':139
'22#.#3.32.97':139
'22#.#3.92.93':139
'22#.#3.195.29':139
'22#.#3.53.23':139
'22#.#3.12.227':139
'22#.#3.106.69':139
'22#.#3.128.112':139
'22#.#3.111.126':139
'22#.#3.4.252':139
'22#.#3.127.32':139
'22#.#3.183.157':139
'22#.#3.83.97':139
'22#.#3.107.1':139
'22#.#3.224.237':139
'22#.#3.115.188':139
'22#.#3.51.32':139
'22#.#3.47.106':445
'22#.#3.173.47':445
'22#.#3.32.162':445
'22#.#3.137.131':445
'22#.#3.183.229':445
'22#.73.13.3':139
'22#.#3.198.149':139
'22#.#3.120.12':139
'22#.#3.105.132':445
'22#.#3.36.63':445
'22#.#3.198.149':445
'22#.#3.51.32':445
'22#.73.13.3':445
'22#.#3.28.223':139
'22#.#3.120.12':445
'22#.#3.106.69':445
'22#.#3.128.112':445
'22#.#3.111.126':445
'22#.#3.4.252':445
'22#.#3.127.32':445
'22#.#3.39.132':139
'22#.#3.115.183':139
'22#.73.54.2':139
'22#.#3.108.9':139
'22#.#3.21.98':139
'22#.#3.77.63':139
'22#.#3.164.74':139
'22#.#3.132.164':139
'22#.#3.234.0':139
'22#.#3.22.10':139
'22#.73.9.5':139
'22#.#3.145.136':445
'22#.#3.245.118':445
'22#.#3.13.104':445
'22#.#3.1.122':445
'22#.#3.27.111':445
'22#.#3.215.237':445
'22#.#3.244.248':445
'22#.#3.214.3':445
'22#.#3.129.188':445
'22#.#3.97.70':445
'22#.#3.121.174':445
'22#.#3.93.248':139
'22#.#3.108.92':139
'22#.#3.188.186':139
'22#.#3.33.172':139
'22#.#3.186.238':139
'22#.#3.19.27':139
'22#.#3.31.33':445
'22#.#3.26.128':139
'22#.#3.59.166':139
'22#.#3.140.234':139
'22#.#3.116.21':445
'22#.#3.208.129':445
'22#.#3.120.200':445
'22#.#3.0.138':445
'22#.#3.168.113':445
'22#.#3.23.171':445
'22#.#3.59.45':445
'22#.#3.95.218':445
'22#.#3.249.208':445
'22#.#3.21.61':445
'22#.#3.61.51':445
'22#.#3.16.167':445
'22#.#3.120.17':445
'22#.#3.166.245':445
'22#.#3.73.244':445
'22#.#3.245.73':445
'22#.#3.226.154':445
'22#.#3.27.215':445
'22#.#3.2.123':445
'22#.#3.61.120':445
'22#.#3.137.170':445
'22#.#3.166.245':139
'22#.#3.16.167':139
'22#.#3.245.73':139
'22#.#3.244.248':139
'22#.#3.73.244':139
'22#.#3.2.123':139
'22#.#3.226.154':139
'22#.#3.137.170':139
'22#.#3.120.17':139
'22#.#3.61.120':139
'22#.#3.215.237':139
'22#.#3.27.111':139
'22#.#3.13.104':139
'22#.#3.1.122':139
'22#.#3.31.33':139
'22#.#3.121.174':139
'22#.#3.97.70':139
'22#.#3.214.3':139
'22#.#3.129.188':139
'22#.#3.145.136':139
'22#.#3.245.118':139
'22#.#3.191.208':139
'22#.#3.102.191':139
'22#.#3.194.26':139
'22#.#3.59.45':139
'22#.#3.210.182':139
'22#.#3.6.144':139
'22#.#3.5.101':139
'22#.#3.143.175':139
'22#.#3.23.75':139
'22#.#3.114.50':139
'22#.#3.23.171':139
'22#.#3.168.113':139
'22#.#3.120.200':139
'22#.#3.0.138':139
'22#.#3.27.215':139
'22#.#3.61.51':139
'22#.#3.21.61':139
'22#.#3.95.218':139
'22#.#3.249.208':139
'22#.#3.116.21':139
'22#.#3.208.129':139
'22#.#3.210.182':445
'22#.#3.27.49':445
'22#.73.83.3':445
'22#.73.2.98':445
'22#.#3.161.19':445
'22#.#3.214.89':445
'22#.#3.15.215':445
'22#.73.7.86':445
'22#.#3.85.228':445
'22#.#3.251.250':445
'22#.#3.58.128':445
'22#.#3.30.151':139
'22#.#3.108.25':139
'22#.#3.193.198':139
'22#.#3.172.22':139
'22#.#3.66.181':139
'22#.#3.11.242':139
'22#.#3.112.219':139
'22#.#3.170.108':139
'22#.#3.188.112':139
'22#.#3.68.101':139
'22#.#3.102.190':139
'22#.#3.246.184':139
'22#.#3.31.56':139
'22#.#3.199.182':139
'22#.#3.182.78':139
'22#.#3.165.158':139
'22#.#3.103.1':139
'22#.#3.78.14':139
'22#.#3.200.143':139
'22#.#3.220.26':139
'22#.#3.44.146':139
'22#.#3.30.151':445
'22#.#3.108.25':445
'22#.#3.193.198':445
'22#.#3.172.22':445
'22#.#3.66.181':445
'22#.#3.11.242':445
'22#.#3.112.219':445
'22#.#3.170.108':445
'22#.#3.188.112':445
'22#.#3.68.101':445
'22#.#3.102.190':445
'22#.#3.140.234':445
'22#.#3.26.128':445
'22#.#3.59.166':445
'22#.#3.93.248':445
'22#.#3.108.92':445
'22#.#3.129.188':9988
'22#.#3.73.244':9988
'22#.#3.13.104':9988
'22#.#3.19.27':445
'22#.#3.1.122':9988
'22#.#3.188.186':445
'22#.#3.23.75':445
'22#.#3.114.50':445
'22#.#3.102.191':445
'22#.#3.194.26':445
'22#.#3.191.208':445
'22#.#3.33.172':445
'22#.#3.186.238':445
'22#.#3.5.101':445
'22#.#3.143.175':445
'22#.#3.6.144':445
'22#.#3.27.49':139
'22#.73.83.3':139
'22#.73.2.98':139
'22#.#3.161.19':139
'22#.#3.214.89':139
'22#.#3.15.215':139
'22#.73.7.86':139
'22#.#3.85.228':139
'22#.#3.251.250':139
'22#.#3.58.128':139
'22#.#3.191.208':9988
'22#.#3.137.170':9988
'22#.#3.120.17':9988
'22#.#3.16.167':9988
'22#.#3.245.73':9988
'22#.#3.166.245':9988
'22#.#3.0.138':9988
'22#.#3.95.218':9988
'22#.#3.61.51':9988
'22#.#3.226.154':9988
'22#.#3.27.215':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней