Trojan.Starman.6018

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'81.##0.113.244':139
'81.##0.38.106':139
'81.##0.28.182':139
'81.##0.3.184':139
'81.##0.181.24':139
'81.##0.71.43':139
'81.##0.179.130':139
'81.##0.167.206':139
'81.##0.171.237':139
'81.##0.70.122':139
'81.##0.194.100':139
'81.##0.50.104':139
'81.##0.13.50':139
'81.##0.104.238':139
'81.##0.39.144':139
'81.##0.183.84':139
'81.##0.106.244':139
'81.##0.153.185':139
'81.##0.6.105':139
'81.##0.40.208':139
'81.##0.132.141':139
'81.##0.180.80':139
'81.##0.192.177':445
'81.##0.247.203':445
'81.##0.107.186':445
'81.##0.157.14':445
'81.##0.171.122':445
'81.##0.121.156':445
'81.##0.50.104':445
'81.##0.13.50':445
'81.##0.104.238':445
'81.##0.39.144':445
'81.##0.183.84':445
'81.##0.174.1':139
'81.##0.218.33':139
'81.##0.108.33':139
'81.##0.30.107':139
'81.##0.126.193':139
'81.##0.115.45':139
'81.##0.153.184':445
'81.##0.20.86':445
'81.##0.91.195':139
'81.##0.76.198':139
'81.##0.28.67':139
'81.##0.119.144':139
'81.##0.2.171':139
'81.##0.145.175':139
'81.##0.132.137':445
'81.##0.195.252':139
'81.##0.97.204':139
'81.##0.23.226':139
'81.##0.106.101':139
'81.##0.226.159':139
'81.##0.218.174':139
'81.##0.159.234':139
'81.#00.65.6':445
'81.##0.23.79':445
'81.##0.13.153':445
'81.##0.47.252':445
'81.##0.97.211':445
'81.##0.240.72':445
'81.##0.223.176':445
'81.##0.124.8':445
'81.##0.35.107':445
'81.##0.193.93':445
'81.##0.221.139':445
'81.##0.153.184':139
'81.##0.20.86':139
'81.##0.214.41':445
'81.##0.106.101':445
'81.##0.40.211':445
'81.##0.157.14':139
'81.##0.247.203':139
'81.##0.121.156':139
'81.##0.192.177':139
'81.##0.171.122':139
'81.##0.107.186':139
'81.##0.145.175':445
'81.##0.119.144':445
'81.##0.195.252':445
'81.##0.40.211':139
'81.##0.214.41':139
'81.##0.2.171':445
'81.##0.226.159':445
'81.##0.23.226':445
'81.##0.159.234':445
'81.##0.97.204':445
'81.##0.218.174':445
'81.##0.106.244':445
'81.##0.86.169':139
'81.##0.93.207':139
'81.##0.46.95':139
'81.##0.16.233':139
'81.##0.118.167':139
'81.##0.131.89':139
'81.##0.117.240':139
'81.##0.210.175':139
'81.#00.1.73':139
'81.##0.74.246':139
'81.##0.12.131':139
'81.##0.134.132':445
'81.##0.64.54':445
'81.##0.131.154':445
'81.##0.114.72':445
'81.##0.41.214':445
'81.##0.193.208':139
'81.##0.106.9':139
'81.##0.69.106':139
'81.##0.8.136':139
'81.##0.97.123':139
'81.##0.135.95':139
'81.##0.187.90':139
'81.##0.233.187':139
'81.##0.35.54':139
'81.##0.156.234':139
'81.##0.92.113':139
'81.##0.216.233':139
'81.##0.55.34':139
'81.##0.188.87':139
'81.##0.219.40':139
'81.##0.254.215':139
'81.##0.159.51':139
'81.#00.8.27':139
'81.##0.40.96':139
'81.##0.201.197':139
'81.##0.210.210':139
'81.##0.213.11':139
'81.##0.241.228':139
'81.##0.172.81':139
'81.##0.247.171':139
'81.##0.82.64':139
'81.##0.136.144':139
'81.##0.228.10':139
'81.##0.179.130':445
'81.##0.167.206':445
'81.##0.171.237':445
'81.##0.70.122':445
'81.##0.194.100':445
'81.##0.30.107':445
'81.##0.218.33':445
'81.##0.115.45':445
'81.##0.174.1':445
'81.##0.126.193':445
'81.##0.108.33':445
'81.##0.153.185':445
'81.##0.6.105':445
'81.##0.40.208':445
'81.##0.132.141':445
'81.##0.180.80':445
'81.##0.3.184':445
'81.##0.38.106':445
'81.##0.71.43':445
'81.##0.113.244':445
'81.##0.181.24':445
'81.##0.28.182':445
'81.##0.64.54':139
'81.##0.198.236':445
'81.##0.134.132':139
'81.##0.41.214':139
'81.##0.131.154':139
'81.#00.77.7':445
'81.##0.155.212':445
'81.##0.72.48':445
'81.##0.20.221':445
'81.##0.69.84':445
'81.##0.40.79':445
'81.##0.198.236':139
'81.#00.77.7':139
'81.##0.91.195':445
'81.##0.76.198':445
'81.##0.28.67':445
'81.##0.69.84':139
'81.##0.72.48':139
'81.##0.114.72':139
'81.##0.155.212':139
'81.##0.40.79':139
'81.##0.20.221':139
'81.##0.10.154':445
'81.##0.53.250':445
'81.#00.30.8':445
'81.##0.11.138':445
'81.##0.229.27':445
'81.##0.16.250':445
'81.##0.104.218':445
'81.##0.91.11':445
'81.##0.189.90':445
'81.##0.11.75':445
'81.##0.200.9':445
'81.##0.152.176':445
'81.##0.142.248':139
'81.##0.195.142':139
'81.##0.175.249':139
'81.##0.222.185':139
'81.##0.171.69':139
'81.##0.95.28':139
'81.##0.51.133':445
'81.##0.179.81':445
'81.##0.228.162':445
'81.##0.79.152':139
'81.##0.254.109':445
'81.##0.14.86':445
'81.##0.35.43':445
'81.##0.44.254':445
'81.##0.196.251':445
'81.##0.14.25':445
'81.##0.28.103':445
'81.##0.33.152':445
'81.##0.159.251':445
'81.##0.52.211':445
'81.##0.179.140':445
'81.##0.100.245':445
'81.##0.45.236':445
'81.##0.60.207':445
'81.##0.34.243':445
'81.##0.3.251':445
'81.##0.181.103':445
'81.##0.152.182':445
'81.##0.186.56':445
'81.##0.211.185':445
'81.##0.57.101':445
'81.##0.251.73':445
'81.##0.24.91':445
'81.##0.189.90':139
'81.##0.3.251':139
'81.##0.91.11':139
'81.##0.152.176':139
'81.##0.11.75':139
'81.##0.181.103':139
'81.##0.152.182':139
'81.##0.251.73':139
'81.##0.60.207':139
'81.##0.34.243':139
'81.##0.45.236':139
'81.##0.51.133':139
'81.##0.11.138':139
'81.##0.228.162':139
'81.##0.16.250':139
'81.##0.254.109':139
'81.##0.179.81':139
'81.##0.104.218':139
'81.##0.200.9':139
'81.#00.30.8':139
'81.##0.229.27':139
'81.##0.53.250':139
'81.##0.159.251':139
'81.##0.157.137':139
'81.##0.33.152':139
'81.##0.100.245':139
'81.##0.52.211':139
'81.##0.237.156':139
'81.##0.120.137':139
'81.##0.135.246':139
'81.##0.34.17':139
'81.##0.255.220':139
'81.##0.30.95':139
'81.##0.211.185':139
'81.##0.196.251':139
'81.##0.186.56':139
'81.##0.24.91':139
'81.##0.57.101':139
'81.##0.14.25':139
'81.##0.28.103':139
'81.##0.179.140':139
'81.##0.35.43':139
'81.##0.44.254':139
'81.##0.14.86':139
'81.##0.157.137':445
'81.##0.35.107':139
'81.##0.223.176':139
'81.##0.221.139':139
'81.##0.240.72':139
'81.##0.193.93':139
'81.##0.124.8':139
'81.##0.9.168':445
'81.##0.78.134':445
'81.##0.171.209':445
'81.##0.132.137':139
'81.##0.160.26':445
'81.##0.216.168':139
'81.##0.77.20':139
'81.##0.169.33':139
'81.##0.252.174':139
'81.##0.36.34':139
'81.##0.10.154':139
'81.#00.65.6':139
'81.##0.23.79':139
'81.##0.13.153':139
'81.##0.47.252':139
'81.##0.97.211':139
'81.##0.150.160':445
'81.##0.56.191':445
'81.##0.22.192':445
'81.##0.109.65':445
'81.##0.192.25':445
'81.##0.94.234':445
'81.##0.216.168':445
'81.##0.77.20':445
'81.##0.169.33':445
'81.##0.252.174':445
'81.##0.36.34':445
'81.##0.146.244':445
'81.##0.246.25':445
'81.##0.174.23':445
'81.##0.189.6':445
'81.##0.161.122':445
'81.##0.115.49':445
'81.##0.82.240':445
'81.##0.90.114':445
'81.##0.59.195':445
'81.##0.101.173':445
'81.##0.98.14':445
'81.##0.51.133':9988
'81.##0.53.250':9988
'81.##0.3.251':9988
'81.##0.95.28':445
'81.##0.79.152':445
'81.##0.251.73':9988
'81.##0.120.137':9988
'81.##0.34.17':9988
'81.##0.255.220':9988
'81.##0.28.103':9988
'81.##0.159.251':9988
'81.##0.34.17':445
'81.##0.120.137':445
'81.##0.30.95':445
'81.##0.237.156':445
'81.##0.255.220':445
'81.##0.135.246':445
'81.##0.142.248':445
'81.##0.195.142':445
'81.##0.175.249':445
'81.##0.222.185':445
'81.##0.171.69':445
'81.##0.82.240':139
'81.##0.90.114':139
'81.##0.59.195':139
'81.##0.101.173':139
'81.##0.98.14':139
'81.##0.109.65':139
'81.##0.56.191':139
'81.##0.94.234':139
'81.##0.150.160':139
'81.##0.192.25':139
'81.##0.22.192':139
'81.##0.9.168':139
'81.##0.78.134':139
'81.##0.171.209':139
'81.##0.135.246':9988
'81.##0.160.26':139
'81.##0.189.6':139
'81.##0.246.25':139
'81.##0.115.49':139
'81.##0.146.244':139
'81.##0.161.122':139
'81.##0.174.23':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней