Trojan.Starman.6590

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'89.##.23.129':139
'89.##.224.23':139
'89.##.106.249':139
'89.##.205.207':139
'89.##.91.252':139
'89.#6.3.91':139
'89.#6.109.3':139
'89.##.90.243':139
'89.##.131.224':139
'89.##.243.130':139
'89.##.255.125':139
'89.##.244.153':139
'89.##.37.221':139
'89.##.42.151':445
'89.##.190.172':445
'89.##.184.87':445
'89.#6.25.54':139
'89.##.70.152':139
'89.##.136.135':139
'89.#6.4.108':139
'89.#6.37.4':139
'89.##.91.252':445
'89.##.106.249':445
'89.##.205.207':445
'89.##.70.152':445
'89.##.255.125':445
'89.##.243.130':445
'89.##.90.243':445
'89.##.131.224':445
'89.##.23.129':445
'89.##.224.23':445
'89.#6.25.54':445
'89.##.61.156':139
'89.##.135.88':139
'89.#6.21.2':139
'89.##.103.109':139
'89.#6.53.31':139
'89.#6.37.4':445
'89.##.136.135':445
'89.#6.4.108':445
'89.##.244.153':445
'89.##.37.221':445
'89.##.139.92':445
'89.##.139.92':139
'89.##.190.172':139
'89.##.93.186':139
'89.##.127.62':139
'89.#6.5.234':139
'89.##.129.103':445
'89.#6.27.77':445
'89.##.239.196':445
'89.##.184.87':139
'89.##.42.151':139
'89.##.62.100':139
'89.##.233.154':139
'89.##.130.151':139
'89.#6.86.62':139
'89.#6.83.46':139
'89.#6.48.3':139
'89.##.18.249':139
'89.#6.34.88':139
'89.#6.90.36':139
'89.##.152.130':139
'89.#6.59.86':139
'89.#6.90.36':445
'89.##.18.249':445
'89.#6.59.86':445
'89.##.130.151':445
'89.##.152.130':445
'89.#6.5.234':445
'89.##.93.186':445
'89.##.127.62':445
'89.#6.34.88':445
'89.##.62.100':445
'89.##.233.154':445
'89.##.18.212':445
'89.##.105.38':445
'89.##.252.51':445
'89.##.62.126':445
'89.##.209.18':445
'89.#6.48.3':445
'89.#6.86.62':445
'89.#6.83.46':445
'89.##.97.178':445
'89.##.12.223':445
'89.#6.3.91':445
'89.##.180.142':445
'89.#6.5.218':445
'89.##.143.162':445
'89.##.207.74':445
'89.##.98.160':445
'89.##.219.249':139
'89.##.146.151':139
'89.##.102.44':445
'89.##.202.139':445
'89.##.237.64':445
'89.##.95.162':445
'89.##.117.100':445
'89.##.214.225':445
'89.##.85.167':445
'89.#6.59.63':445
'89.##.203.140':445
'89.##.155.46':445
'89.#6.81.69':445
'89.#6.5.46':445
'89.##.136.111':445
'89.##.112.20':445
'89.##.216.42':139
'89.##.181.215':139
'89.##.253.63':139
'89.##.118.86':139
'89.##.241.113':139
'89.##.245.34':139
'89.##.78.128':139
'89.##.34.110':139
'89.##.146.215':139
'89.#6.66.36':139
'89.##.210.150':139
'89.##.46.109':139
'89.##.202.69':139
'89.##.97.174':139
'89.##.189.136':139
'89.##.179.76':139
'89.##.28.145':139
'89.#6.20.15':139
'89.#6.7.24':139
'89.##.75.215':139
'89.##.111.140':139
'89.##.100.102':445
'89.##.100.102':139
'89.#6.59.63':139
'89.#6.4.173':139
'89.##.234.94':139
'89.##.136.79':139
'89.##.214.225':139
'89.##.136.111':139
'89.##.117.100':139
'89.##.203.140':139
'89.##.85.167':139
'89.##.108.161':139
'89.#6.21.2':445
'89.##.61.156':445
'89.#6.53.31':445
'89.#6.109.3':445
'89.##.103.109':445
'89.##.156.254':139
'89.##.110.253':139
'89.#6.6.178':139
'89.##.135.88':445
'89.##.111.135':139
'89.#6.6.178':445
'89.##.156.254':445
'89.##.111.135':445
'89.##.237.64':139
'89.##.102.44':139
'89.##.136.79':445
'89.#6.4.173':445
'89.##.234.94':445
'89.##.110.253':445
'89.##.108.161':445
'89.##.202.139':139
'89.#6.81.69':139
'89.##.95.162':139
'89.##.155.46':139
'89.##.112.20':139
'89.#6.5.46':139
'89.##.180.142':139
'89.#6.5.218':139
'89.##.143.162':139
'89.##.207.74':139
'89.##.98.160':139
'89.##.12.223':139
'89.##.192.124':445
'89.##.27.226':445
'89.##.124.75':445
'89.##.146.60':445
'89.#6.8.93':445
'89.#6.57.62':445
'89.##.55.122':445
'89.##.35.128':445
'89.##.100.213':445
'89.##.100.173':445
'89.##.249.69':445
'89.##.23.108':139
'89.##.251.52':139
'89.##.251.36':139
'89.##.113.38':139
'89.##.176.197':139
'89.##.150.229':445
'89.##.140.190':445
'89.##.75.155':139
'89.##.70.145':139
'89.##.201.108':139
'89.##.231.149':445
'89.##.36.225':445
'89.#6.150.9':445
'89.##.154.63':445
'89.##.209.59':445
'89.##.139.72':445
'89.##.107.40':445
'89.##.55.226':445
'89.##.48.251':445
'89.##.170.40':445
'89.##.230.25':445
'89.##.163.32':445
'89.#6.58.28':445
'89.##.106.245':445
'89.#6.2.213':445
'89.##.227.59':445
'89.##.129.175':445
'89.##.249.253':445
'89.#6.34.1':445
'89.#6.62.61':445
'89.#6.0.130':445
'89.##.242.158':139
'89.##.227.59':139
'89.##.106.245':139
'89.#6.2.213':139
'89.#6.57.62':139
'89.##.55.122':139
'89.#6.0.130':139
'89.#6.34.1':139
'89.#6.62.61':139
'89.##.163.32':139
'89.#6.58.28':139
'89.##.35.128':139
'89.##.140.190':139
'89.#6.8.93':139
'89.##.146.60':139
'89.##.249.69':139
'89.##.150.229':139
'89.##.100.213':139
'89.##.100.173':139
'89.##.27.226':139
'89.##.124.75':139
'89.##.192.124':139
'89.##.135.90':139
'89.#6.30.3':139
'89.#6.42.16':139
'89.##.139.72':139
'89.##.107.40':139
'89.##.149.244':139
'89.##.158.190':139
'89.##.71.142':139
'89.##.37.127':139
'89.##.213.119':139
'89.##.55.226':139
'89.##.154.63':139
'89.##.209.59':139
'89.##.230.25':139
'89.##.129.175':139
'89.##.249.253':139
'89.##.48.251':139
'89.##.170.40':139
'89.##.36.225':139
'89.#6.150.9':139
'89.##.231.149':139
'89.#6.42.16':445
'89.##.74.240':445
'89.##.88.129':445
'89.#6.14.29':445
'89.#6.19.41':445
'89.#6.34.20':445
'89.#6.51.26':445
'89.##.13.101':445
'89.##.188.90':445
'89.##.228.42':445
'89.##.134.216':445
'89.##.233.46':445
'89.#6.160.8':139
'89.##.28.159':139
'89.#6.8.40':139
'89.##.120.15':139
'89.##.39.227':139
'89.##.192.13':139
'89.##.197.191':139
'89.##.89.129':139
'89.##.202.136':139
'89.#6.5.203':139
'89.#6.27.77':139
'89.##.62.126':139
'89.##.129.103':139
'89.##.197.191':445
'89.##.239.196':139
'89.##.105.38':139
'89.##.97.178':139
'89.##.18.212':139
'89.##.209.18':139
'89.##.252.51':139
'89.##.192.13':445
'89.##.39.227':445
'89.#6.8.40':445
'89.##.120.15':445
'89.##.217.12':445
'89.#6.75.25':445
'89.#6.5.203':445
'89.##.89.129':445
'89.##.202.136':445
'89.#6.160.8':445
'89.##.28.159':445
'89.#6.75.25':139
'89.##.201.108':445
'89.##.75.155':445
'89.##.70.145':445
'89.##.23.108':445
'89.##.251.52':445
'89.#6.2.213':9988
'89.##.106.245':9988
'89.##.100.173':9988
'89.##.146.60':9988
'89.##.100.213':9988
'89.##.251.36':445
'89.##.213.119':445
'89.##.71.142':445
'89.##.37.127':445
'89.##.135.90':445
'89.#6.30.3':445
'89.##.113.38':445
'89.##.176.197':445
'89.##.242.158':445
'89.##.149.244':445
'89.##.158.190':445
'89.##.88.129':139
'89.##.228.42':139
'89.##.74.240':139
'89.#6.34.20':139
'89.#6.14.29':139
'89.##.13.101':139
'89.##.217.12':139
'89.#6.51.26':139
'89.##.134.216':139
'89.##.188.90':139
'89.#6.19.41':139
'89.##.249.253':9988
'89.#6.0.130':9988
'89.#6.58.28':9988
'89.##.227.59':9988
'89.##.163.32':9988
'89.#6.34.1':9988
'89.##.233.46':139
'89.#6.62.61':9988
'89.##.230.25':9988
'89.##.129.175':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней