Trojan.Starman.5468

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##6.207.173':139
'12.##6.211.230':139
'12.##6.105.10':139
'12.##6.143.53':139
'12.##6.11.123':139
'12.##6.124.211':139
'12.##6.42.175':139
'12.##6.44.135':139
'12.##6.134.112':139
'12.##6.125.140':139
'12.##6.60.212':139
'12.##6.32.153':139
'12.##6.111.217':139
'12.##6.161.149':139
'12.##6.179.154':139
'12.##6.149.187':139
'12.##6.150.111':139
'12.##6.74.247':139
'12.##6.32.166':139
'12.##6.170.179':139
'12.##6.109.158':139
'12.##6.127.228':139
'12.##6.191.48':139
'12.##6.26.188':445
'12.##6.14.26':445
'12.##6.178.169':445
'12.##6.236.232':445
'12.##6.132.79':445
'12.##6.84.14':445
'12.##6.0.173':445
'12.##6.37.203':445
'12.##6.56.15':445
'12.##6.87.235':445
'12.##6.122.150':445
'12.##6.204.182':139
'12.##6.218.152':139
'12.##6.82.43':139
'12.##6.237.221':139
'12.##6.109.12':139
'12.##6.85.53':139
'12.##6.134.151':139
'12.##6.50.210':139
'12.##6.236.152':139
'12.##6.66.112':139
'12.##6.168.29':139
'12.##6.131.223':445
'12.##6.95.249':445
'12.##6.248.183':445
'12.##6.149.28':445
'12.##6.2.174':445
'12.##6.64.122':445
'12.##6.163.159':445
'12.##6.43.53':445
'12.##6.127.26':445
'12.##6.15.102':445
'12.##6.32.250':445
'12.##6.88.47':445
'12.##6.165.135':445
'12.##6.2.189':445
'12.##6.102.166':445
'12.##6.187.128':445
'12.##6.214.153':445
'12.##6.70.235':445
'12.##6.121.147':445
'12.##6.198.174':445
'12.##6.70.31':445
'12.##6.174.35':445
'12.##6.25.189':445
'12.##6.0.173':139
'12.##6.37.203':139
'12.##6.56.15':139
'12.##6.87.235':139
'12.##6.122.150':139
'12.##6.64.38':139
'12.##6.105.12':139
'12.##6.84.146':139
'12.#06.1.41':139
'12.##6.24.64':139
'12.##6.16.87':139
'12.##6.146.137':445
'12.##6.207.175':445
'12.##6.101.218':445
'12.##6.19.25':445
'12.##6.132.42':445
'12.##6.236.232':139
'12.##6.14.26':139
'12.##6.84.14':139
'12.##6.26.188':139
'12.##6.132.79':139
'12.##6.178.169':139
'12.##6.64.38':445
'12.##6.68.227':139
'12.##6.71.24':139
'12.##6.213.75':139
'12.##6.39.95':139
'12.##6.177.71':139
'12.#06.27.7':139
'12.##6.228.39':139
'12.##6.122.2':139
'12.##6.32.253':139
'12.##6.248.243':139
'12.##6.42.249':139
'12.##6.149.60':139
'12.##6.254.27':139
'12.##6.176.161':139
'12.##6.13.54':139
'12.##6.162.10':139
'12.##6.3.234':139
'12.##6.107.64':139
'12.##6.163.116':139
'12.#06.52.5':139
'12.##6.186.228':139
'12.##6.201.129':139
'12.##6.66.121':139
'12.##6.46.127':139
'12.##6.7.232':139
'12.#06.7.29':139
'12.##6.60.63':139
'12.##6.1.136':139
'12.##6.9.106':139
'12.##6.181.162':139
'12.##6.35.41':139
'12.##6.37.125':139
'12.##6.12.176':139
'12.##6.99.103':139
'12.##6.9.125':139
'12.##6.130.49':139
'12.##6.126.2':139
'12.##6.143.66':139
'12.##6.246.143':139
'12.##6.195.35':139
'12.##6.72.50':139
'12.##6.62.150':139
'12.##6.103.223':139
'12.##6.63.145':139
'12.##6.231.31':139
'12.##6.74.247':445
'12.##6.32.166':445
'12.##6.170.179':445
'12.##6.109.158':445
'12.##6.127.228':445
'12.##6.143.53':445
'12.##6.211.230':445
'12.##6.124.211':445
'12.##6.207.173':445
'12.##6.11.123':445
'12.##6.105.10':445
'12.##6.105.12':445
'12.##6.84.146':445
'12.#06.1.41':445
'12.##6.24.64':445
'12.##6.16.87':445
'12.##6.179.154':445
'12.##6.111.217':445
'12.##6.150.111':445
'12.##6.32.153':445
'12.##6.149.187':445
'12.##6.161.149':445
'12.##6.125.140':445
'12.##6.134.151':445
'12.##6.50.210':445
'12.##6.236.152':445
'12.##6.66.112':445
'12.##6.168.29':445
'12.##6.162.180':139
'12.##6.192.239':139
'12.##6.103.67':139
'12.##6.69.178':139
'12.##6.68.166':139
'12.##6.234.69':139
'12.##6.44.135':445
'12.##6.191.48':445
'12.##6.42.175':445
'12.##6.60.212':445
'12.##6.134.112':445
'12.##6.237.221':445
'12.##6.218.152':445
'12.##6.85.53':445
'12.##6.204.182':445
'12.##6.109.12':445
'12.##6.82.43':445
'12.##6.179.67':445
'12.##6.86.163':445
'12.##6.141.174':445
'12.##6.166.125':445
'12.##6.123.201':445
'12.##6.255.143':445
'12.##6.195.112':445
'12.##6.181.23':445
'12.##6.164.240':445
'12.##6.87.194':445
'12.##6.68.26':445
'12.##6.31.90':445
'12.##6.189.53':139
'12.##6.90.242':139
'12.##6.127.190':139
'12.##6.189.13':139
'12.##6.254.143':139
'12.##6.117.64':139
'12.##6.72.241':445
'12.##6.17.122':445
'12.##6.100.34':445
'12.##6.27.106':445
'12.#06.54.7':445
'12.##6.220.160':445
'12.##6.199.116':445
'12.##6.73.249':445
'12.##6.47.110':445
'12.##6.129.28':445
'12.##6.23.148':445
'12.##6.76.94':445
'12.##6.45.68':445
'12.##6.159.83':445
'12.##6.0.102':445
'12.##6.217.242':445
'12.##6.102.50':445
'12.##6.46.165':445
'12.##6.59.57':445
'12.##6.23.99':445
'12.##6.33.131':445
'12.##6.102.220':445
'12.##6.205.176':445
'12.#06.9.91':445
'12.##6.182.41':445
'12.##6.32.70':445
'12.##6.24.92':445
'12.##6.32.147':445
'12.##6.181.23':139
'12.##6.164.240':139
'12.##6.87.194':139
'12.##6.68.26':139
'12.##6.31.90':139
'12.##6.220.160':139
'12.##6.46.165':139
'12.##6.59.57':139
'12.##6.23.99':139
'12.##6.33.131':139
'12.##6.102.220':139
'12.##6.123.201':139
'12.##6.100.34':139
'12.#06.54.7':139
'12.##6.27.106':139
'12.##6.72.241':139
'12.##6.17.122':139
'12.##6.141.174':139
'12.##6.195.112':139
'12.##6.86.163':139
'12.##6.255.143':139
'12.##6.166.125':139
'12.##6.205.176':139
'12.##6.45.68':139
'12.##6.159.83':139
'12.##6.0.102':139
'12.##6.217.242':139
'12.##6.102.50':139
'12.##6.114.207':139
'12.##6.55.162':139
'12.##6.13.186':139
'12.##6.101.9':139
'12.##6.34.35':139
'12.##6.209.150':139
'12.#06.9.91':139
'12.##6.182.41':139
'12.##6.32.70':139
'12.##6.24.92':139
'12.##6.32.147':139
'12.##6.129.28':139
'12.##6.73.249':139
'12.##6.76.94':139
'12.##6.199.116':139
'12.##6.23.148':139
'12.##6.47.110':139
'12.##6.114.207':445
'12.##6.127.26':139
'12.##6.163.159':139
'12.##6.32.250':139
'12.##6.64.122':139
'12.##6.15.102':139
'12.##6.43.53':139
'12.##6.101.218':139
'12.##6.146.137':139
'12.##6.132.42':139
'12.##6.25.189':139
'12.##6.19.25':139
'12.##6.198.174':139
'12.##6.70.235':139
'12.##6.174.35':139
'12.##6.214.153':139
'12.##6.70.31':139
'12.##6.121.147':139
'12.##6.131.223':139
'12.##6.95.249':139
'12.##6.248.183':139
'12.##6.149.28':139
'12.##6.2.174':139
'12.##6.207.175':139
'12.##6.238.132':445
'12.#06.9.71':445
'12.##6.132.200':445
'12.##6.103.236':445
'12.##6.72.112':445
'12.##6.232.109':445
'12.##6.184.236':445
'12.##6.94.184':445
'12.##6.236.194':445
'12.##6.162.232':445
'12.##6.89.225':445
'12.##6.12.23':445
'12.##6.156.123':445
'12.##6.5.233':445
'12.##6.81.117':445
'12.##6.228.88':445
'12.##6.192.79':445
'12.##6.77.51':445
'12.##6.96.183':445
'12.##6.40.216':445
'12.##6.36.136':445
'12.##6.77.109':445
'12.##6.34.35':9988
'12.##6.209.150':9988
'12.##6.73.249':9988
'12.##6.33.131':9988
'12.#06.9.91':9988
'12.##6.90.242':9988
'12.##6.12.23':139
'12.##6.156.123':139
'12.##6.5.233':139
'12.##6.81.117':139
'12.##6.228.88':139
'12.##6.55.162':445
'12.##6.13.186':445
'12.##6.101.9':445
'12.##6.34.35':445
'12.##6.209.150':445
'12.##6.189.13':445
'12.##6.90.242':445
'12.##6.117.64':445
'12.##6.189.53':445
'12.##6.254.143':445
'12.##6.127.190':445
'12.##6.192.79':139
'12.##6.184.236':139
'12.##6.94.184':139
'12.##6.236.194':139
'12.##6.162.232':139
'12.##6.89.225':139
'12.##6.179.67':139
'12.##6.88.47':139
'12.##6.165.135':139
'12.##6.2.189':139
'12.##6.102.166':139
'12.##6.187.128':139
'12.##6.77.51':139
'12.##6.96.183':139
'12.##6.40.216':139
'12.##6.36.136':139
'12.##6.77.109':139
'12.##6.103.236':139
'12.#06.9.71':139
'12.##6.232.109':139
'12.##6.238.132':139
'12.##6.72.112':139
'12.##6.132.200':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней