Trojan.Starman.6570

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#6.6.217':139
'20#.#6.17.214':139
'20#.#6.54.246':139
'20#.#6.198.192':139
'20#.#6.246.49':139
'20#.#6.204.120':139
'20#.56.9.58':139
'20#.#6.9.104':139
'20#.#6.172.219':139
'20#.#6.18.176':139
'20#.#6.135.80':139
'20#.#6.19.33':139
'20#.#6.46.120':139
'20#.56.0.28':445
'20#.#6.212.9':445
'20#.#6.128.212':445
'20#.#6.91.152':139
'20#.#6.228.160':139
'20#.#6.112.22':139
'20#.56.2.4':139
'20#.#6.162.2':139
'20#.#6.246.49':445
'20#.#6.54.246':445
'20#.#6.198.192':445
'20#.#6.228.160':445
'20#.#6.135.80':445
'20#.#6.18.176':445
'20#.#6.9.104':445
'20#.#6.172.219':445
'20#.#6.6.217':445
'20#.#6.17.214':445
'20#.#6.91.152':445
'20#.#6.227.145':139
'20#.#6.61.248':139
'20#.56.6.95':139
'20#.#6.51.41':139
'20#.#6.229.188':139
'20#.#6.162.2':445
'20#.#6.112.22':445
'20#.56.2.4':445
'20#.#6.19.33':445
'20#.#6.46.120':445
'20#.#6.9.161':445
'20#.#6.9.161':139
'20#.#6.212.9':139
'20#.#6.203.121':139
'20#.#6.150.85':139
'20#.#6.78.44':139
'20#.#6.81.17':445
'20#.#6.121.243':445
'20#.#6.208.109':445
'20#.#6.128.212':139
'20#.56.0.28':139
'20#.#6.32.21':139
'20#.#6.196.150':139
'20#.#6.68.76':139
'20#.#6.187.26':139
'20#.#6.237.37':139
'20#.#6.232.43':139
'20#.#6.197.150':139
'20#.#6.24.197':139
'20#.#6.7.101':139
'20#.#6.242.62':139
'20#.#6.142.166':139
'20#.#6.7.101':445
'20#.#6.197.150':445
'20#.#6.142.166':445
'20#.#6.68.76':445
'20#.#6.242.62':445
'20#.#6.78.44':445
'20#.#6.203.121':445
'20#.#6.150.85':445
'20#.#6.24.197':445
'20#.#6.32.21':445
'20#.#6.196.150':445
'20#.#6.103.132':445
'20#.#6.14.104':445
'20#.#6.60.142':445
'20#.#6.9.234':445
'20#.#6.12.248':445
'20#.#6.232.43':445
'20#.#6.187.26':445
'20#.#6.237.37':445
'20#.#6.10.200':445
'20#.#6.37.254':445
'20#.#6.204.120':445
'20#.#6.54.218':445
'20#.#6.181.188':445
'20#.#6.231.93':445
'20#.#6.199.21':445
'20#.#6.79.243':445
'20#.#6.195.99':139
'20#.#6.70.216':139
'20#.#6.156.40':445
'20#.#6.249.109':445
'20#.#6.218.115':445
'20#.#6.170.45':445
'20#.#6.187.208':445
'20#.56.64.1':445
'20#.#6.23.124':445
'20#.#6.148.211':445
'20#.#6.13.219':445
'20#.#6.2.217':445
'20#.#6.46.68':445
'20#.#6.243.48':445
'20#.#6.80.49':445
'20#.#6.49.162':445
'20#.#6.154.90':139
'20#.#6.215.100':139
'20#.#6.80.150':139
'20#.#6.250.132':139
'20#.#6.36.10':139
'20#.#6.249.230':139
'20#.#6.151.249':139
'20#.#6.230.252':139
'20#.#6.122.247':139
'20#.#6.18.45':139
'20#.#6.189.217':139
'20#.#6.120.145':139
'20#.#6.30.127':139
'20#.#6.1.129':139
'20#.#6.55.190':139
'20#.#6.38.70':139
'20#.#6.113.34':139
'20#.#6.217.178':139
'20#.#6.37.171':139
'20#.#6.8.172':139
'20#.#6.35.64':139
'20#.#6.16.216':445
'20#.#6.16.216':139
'20#.#6.148.211':139
'20#.#6.203.182':139
'20#.#6.158.87':139
'20#.#6.0.214':139
'20#.56.64.1':139
'20#.#6.80.49':139
'20#.#6.187.208':139
'20#.#6.13.219':139
'20#.#6.23.124':139
'20#.#6.1.192':139
'20#.56.6.95':445
'20#.#6.227.145':445
'20#.#6.229.188':445
'20#.56.9.58':445
'20#.#6.51.41':445
'20#.#6.235.182':139
'20#.#6.52.235':139
'20#.56.47.0':139
'20#.#6.61.248':445
'20#.#6.86.65':139
'20#.56.47.0':445
'20#.#6.235.182':445
'20#.#6.86.65':445
'20#.#6.218.115':139
'20#.#6.156.40':139
'20#.#6.0.214':445
'20#.#6.203.182':445
'20#.#6.158.87':445
'20#.#6.52.235':445
'20#.#6.1.192':445
'20#.#6.249.109':139
'20#.#6.46.68':139
'20#.#6.170.45':139
'20#.#6.2.217':139
'20#.#6.49.162':139
'20#.#6.243.48':139
'20#.#6.54.218':139
'20#.#6.181.188':139
'20#.#6.231.93':139
'20#.#6.199.21':139
'20#.#6.79.243':139
'20#.#6.37.254':139
'20#.#6.78.153':445
'20#.#6.209.72':445
'20#.#6.179.233':445
'20#.#6.92.60':445
'20#.#6.210.130':445
'20#.#6.164.0':445
'20#.#6.171.226':445
'20#.#6.138.87':445
'20#.#6.99.69':445
'20#.#6.190.38':445
'20#.#6.26.96':445
'20#.#6.65.67':139
'20#.#6.119.183':139
'20#.#6.73.91':139
'20#.#6.3.171':139
'20#.56.99.3':139
'20#.#6.60.31':445
'20#.#6.99.148':445
'20#.#6.13.80':139
'20#.#6.35.33':139
'20#.#6.8.111':139
'20#.#6.174.110':445
'20#.#6.64.226':445
'20#.#6.110.143':445
'20#.#6.65.53':445
'20#.#6.3.247':445
'20#.#6.236.191':445
'20#.#6.119.144':445
'20#.#6.183.184':445
'20#.#6.11.36':445
'20#.#6.126.11':445
'20#.#6.52.232':445
'20#.#6.114.123':445
'20#.#6.85.33':445
'20#.#6.96.160':445
'20#.#6.30.15':445
'20#.#6.220.62':445
'20#.#6.117.227':445
'20#.#6.55.236':445
'20#.#6.158.213':445
'20#.#6.104.86':445
'20#.#6.115.2':445
'20#.#6.116.136':139
'20#.#6.220.62':139
'20#.#6.96.160':139
'20#.#6.30.15':139
'20#.#6.164.0':139
'20#.#6.171.226':139
'20#.#6.115.2':139
'20#.#6.158.213':139
'20#.#6.104.86':139
'20#.#6.114.123':139
'20#.#6.85.33':139
'20#.#6.138.87':139
'20#.#6.92.60':139
'20#.#6.210.130':139
'20#.#6.26.96':139
'20#.#6.60.31':139
'20#.#6.99.148':139
'20#.#6.99.69':139
'20#.#6.190.38':139
'20#.#6.209.72':139
'20#.#6.179.233':139
'20#.#6.78.153':139
'20#.#6.166.181':139
'20#.#6.205.150':139
'20#.#6.125.123':139
'20#.#6.236.191':139
'20#.#6.119.144':139
'20#.#6.43.58':139
'20#.#6.231.117':139
'20#.#6.211.66':139
'20#.#6.129.160':139
'20#.#6.180.5':139
'20#.#6.183.184':139
'20#.#6.65.53':139
'20#.#6.3.247':139
'20#.#6.52.232':139
'20#.#6.117.227':139
'20#.#6.55.236':139
'20#.#6.11.36':139
'20#.#6.126.11':139
'20#.#6.64.226':139
'20#.#6.110.143':139
'20#.#6.174.110':139
'20#.#6.125.123':445
'20#.#6.173.218':445
'20#.#6.104.20':445
'20#.#6.69.176':445
'20#.#6.7.142':445
'20#.#6.23.169':445
'20#.#6.21.55':445
'20#.#6.215.110':445
'20#.#6.162.163':445
'20#.#6.84.198':445
'20#.#6.163.159':445
'20#.#6.16.51':445
'20#.#6.98.173':139
'20#.#6.16.42':139
'20#.#6.158.180':139
'20#.#6.53.192':139
'20#.#6.242.53':139
'20#.#6.61.180':139
'20#.#6.245.183':139
'20#.#6.180.42':139
'20#.#6.146.26':139
'20#.#6.42.118':139
'20#.#6.121.243':139
'20#.#6.9.234':139
'20#.#6.81.17':139
'20#.#6.245.183':445
'20#.#6.208.109':139
'20#.#6.14.104':139
'20#.#6.10.200':139
'20#.#6.103.132':139
'20#.#6.12.248':139
'20#.#6.60.142':139
'20#.#6.61.180':445
'20#.#6.242.53':445
'20#.#6.158.180':445
'20#.#6.53.192':445
'20#.#6.232.240':445
'20#.#6.192.182':445
'20#.#6.42.118':445
'20#.#6.180.42':445
'20#.#6.146.26':445
'20#.#6.98.173':445
'20#.#6.16.42':445
'20#.#6.192.182':139
'20#.#6.8.111':445
'20#.#6.13.80':445
'20#.#6.35.33':445
'20#.#6.65.67':445
'20#.#6.119.183':445
'20#.#6.99.69':9988
'20#.#6.190.38':9988
'20#.#6.26.96':9988
'20#.#6.60.31':9988
'20#.#6.99.148':9988
'20#.#6.73.91':445
'20#.#6.180.5':445
'20#.#6.211.66':445
'20#.#6.129.160':445
'20#.#6.166.181':445
'20#.#6.205.150':445
'20#.#6.3.171':445
'20#.56.99.3':445
'20#.#6.116.136':445
'20#.#6.43.58':445
'20#.#6.231.117':445
'20#.#6.104.20':139
'20#.#6.84.198':139
'20#.#6.173.218':139
'20#.#6.23.169':139
'20#.#6.69.176':139
'20#.#6.215.110':139
'20#.#6.232.240':139
'20#.#6.21.55':139
'20#.#6.163.159':139
'20#.#6.162.163':139
'20#.#6.7.142':139
'20#.#6.117.227':9988
'20#.#6.115.2':9988
'20#.#6.64.226':9988
'20#.#6.85.33':9988
'20#.#6.3.247':9988
'20#.#6.158.213':9988
'20#.#6.16.51':139
'20#.#6.55.236':9988
'20#.#6.65.53':9988
'20#.#6.119.144':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней