Trojan.Starman.6050

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.#20.37.7':139
'63.#20.21.0':139
'63.##0.31.67':139
'63.##0.146.245':139
'63.##0.11.142':139
'63.##0.127.31':139
'63.##0.96.150':139
'63.##0.100.235':139
'63.##0.232.53':139
'63.##0.235.142':139
'63.##0.17.69':139
'63.##0.97.55':139
'63.##0.207.230':139
'63.##0.244.153':139
'63.##0.125.72':139
'63.##0.243.37':139
'63.##0.130.14':139
'63.##0.114.240':139
'63.##0.19.144':139
'63.##0.110.207':139
'63.##0.19.111':139
'63.##0.17.69':445
'63.##0.146.245':445
'63.##0.114.240':445
'63.##0.19.144':445
'63.##0.130.14':445
'63.#20.21.0':445
'63.##0.232.53':445
'63.#20.37.7':445
'63.##0.11.142':445
'63.##0.31.67':445
'63.##0.19.111':445
'63.##0.16.107':139
'63.##0.125.72':445
'63.##0.90.96':139
'63.##0.116.172':139
'63.##0.17.189':139
'63.##0.207.230':445
'63.##0.110.207':445
'63.##0.97.55':445
'63.##0.243.37':445
'63.##0.244.153':445
'63.##0.132.27':139
'63.##0.165.10':139
'63.##0.213.46':139
'63.##0.67.81':139
'63.##0.115.14':139
'63.##0.189.95':445
'63.##0.12.83':445
'63.##0.99.89':445
'63.##0.88.134':445
'63.##0.231.108':445
'63.##0.156.205':139
'63.##0.111.68':139
'63.##0.150.197':139
'63.##0.234.94':139
'63.##0.164.77':139
'63.##0.95.104':139
'63.##0.134.6':139
'63.##0.221.160':139
'63.##0.11.213':139
'63.##0.64.151':139
'63.##0.36.38':139
'63.##0.221.160':445
'63.##0.156.205':445
'63.##0.134.6':445
'63.##0.36.38':445
'63.##0.11.213':445
'63.##0.132.27':445
'63.##0.165.10':445
'63.##0.213.46':445
'63.##0.67.81':445
'63.##0.115.14':445
'63.##0.64.151':445
'63.##0.88.252':445
'63.##0.6.140':445
'63.##0.18.183':445
'63.##0.132.79':445
'63.##0.125.26':445
'63.##0.111.68':445
'63.##0.150.197':445
'63.##0.234.94':445
'63.##0.164.77':445
'63.##0.95.104':445
'63.##0.235.142':445
'63.##0.63.144':445
'63.##0.129.228':445
'63.##0.114.114':445
'63.##0.40.203':445
'63.##0.159.77':445
'63.##0.74.186':139
'63.##0.88.247':139
'63.#20.45.6':139
'63.##0.82.29':445
'63.##0.249.32':139
'63.##0.203.179':445
'63.##0.228.191':445
'63.##0.155.228':445
'63.##0.36.209':445
'63.##0.96.241':445
'63.##0.121.68':445
'63.##0.118.148':445
'63.##0.23.171':445
'63.##0.147.204':445
'63.##0.198.155':445
'63.##0.203.198':445
'63.##0.224.37':139
'63.##0.80.213':139
'63.##0.124.87':139
'63.##0.86.154':139
'63.##0.226.85':139
'63.##0.150.63':139
'63.##0.10.247':139
'63.##0.164.158':139
'63.##0.13.157':139
'63.##0.144.174':139
'63.##0.154.85':139
'63.##0.191.49':139
'63.##0.37.28':139
'63.##0.49.189':139
'63.##0.36.154':139
'63.##0.36.217':139
'63.##0.4.200':139
'63.##0.159.253':139
'63.##0.208.44':139
'63.##0.29.119':139
'63.##0.127.52':139
'63.##0.74.224':139
'63.##0.200.232':139
'63.##0.196.206':139
'63.##0.48.26':139
'63.##0.192.48':139
'63.##0.228.191':139
'63.##0.155.228':139
'63.##0.36.209':139
'63.##0.96.241':139
'63.##0.121.68':139
'63.##0.202.72':139
'63.##0.116.172':445
'63.##0.17.189':445
'63.##0.96.150':445
'63.##0.100.235':445
'63.##0.127.31':445
'63.##0.67.78':139
'63.##0.187.140':139
'63.##0.40.20':139
'63.##0.90.96':445
'63.##0.16.107':445
'63.##0.202.72':445
'63.##0.187.140':445
'63.##0.67.78':445
'63.##0.82.29':139
'63.##0.40.20':445
'63.##0.74.224':445
'63.##0.200.232':445
'63.##0.196.206':445
'63.##0.48.26':445
'63.##0.192.48':445
'63.##0.129.228':139
'63.##0.118.148':139
'63.##0.23.171':139
'63.##0.147.204':139
'63.##0.198.155':139
'63.##0.203.198':139
'63.##0.114.114':139
'63.##0.63.144':139
'63.##0.159.77':139
'63.##0.203.179':139
'63.##0.40.203':139
'63.##0.163.195':445
'63.##0.72.59':445
'63.##0.54.99':445
'63.##0.133.180':445
'63.##0.20.136':445
'63.##0.99.128':445
'63.##0.19.25':445
'63.##0.44.241':445
'63.##0.182.104':445
'63.##0.230.172':445
'63.##0.23.38':445
'63.##0.204.26':139
'63.##0.188.196':139
'63.##0.124.90':139
'63.##0.23.48':139
'63.##0.186.23':139
'63.##0.127.101':139
'63.##0.163.85':445
'63.##0.47.169':139
'63.##0.204.188':139
'63.##0.3.219':139
'63.##0.182.131':445
'63.##0.119.166':445
'63.##0.187.216':445
'63.##0.98.194':445
'63.##0.92.98':445
'63.##0.143.121':445
'63.##0.180.143':445
'63.##0.113.17':445
'63.##0.134.23':445
'63.##0.99.158':445
'63.##0.140.14':445
'63.##0.10.176':445
'63.##0.66.223':445
'63.##0.50.197':445
'63.##0.12.239':445
'63.##0.196.240':445
'63.##0.205.16':445
'63.##0.194.150':445
'63.##0.177.33':445
'63.##0.54.202':445
'63.##0.93.223':445
'63.##0.50.197':139
'63.##0.10.176':139
'63.##0.196.240':139
'63.##0.19.25':139
'63.##0.12.239':139
'63.##0.177.33':139
'63.##0.205.16':139
'63.##0.93.223':139
'63.##0.66.223':139
'63.##0.54.202':139
'63.##0.99.128':139
'63.##0.20.136':139
'63.##0.54.99':139
'63.##0.133.180':139
'63.##0.163.85':139
'63.##0.23.38':139
'63.##0.230.172':139
'63.##0.44.241':139
'63.##0.182.104':139
'63.##0.163.195':139
'63.##0.72.59':139
'63.##0.23.219':139
'63.##0.121.199':139
'63.##0.12.241':139
'63.##0.180.143':139
'63.##0.144.180':139
'63.##0.62.92':139
'63.##0.170.252':139
'63.##0.94.191':139
'63.#20.91.7':139
'63.##0.5.249':139
'63.##0.143.121':139
'63.##0.92.98':139
'63.##0.187.216':139
'63.##0.98.194':139
'63.##0.194.150':139
'63.##0.140.14':139
'63.##0.99.158':139
'63.##0.113.17':139
'63.##0.134.23':139
'63.##0.182.131':139
'63.##0.119.166':139
'63.##0.144.180':445
'63.##0.82.79':445
'63.##0.190.164':445
'63.##0.91.155':445
'63.##0.91.159':445
'63.##0.110.83':445
'63.##0.32.43':445
'63.##0.47.117':445
'63.##0.43.63':445
'63.##0.165.246':445
'63.##0.130.168':445
'63.##0.135.65':139
'63.##0.5.201':139
'63.##0.89.12':139
'63.#20.9.54':139
'63.##0.214.187':139
'63.##0.53.215':139
'63.##0.99.91':139
'63.##0.65.99':139
'63.##0.86.70':139
'63.##0.193.88':139
'63.##0.144.193':139
'63.##0.189.95':139
'63.##0.12.83':139
'63.##0.99.89':139
'63.##0.88.134':139
'63.##0.231.108':139
'63.##0.88.252':139
'63.##0.6.140':139
'63.##0.18.183':139
'63.##0.132.79':139
'63.##0.125.26':139
'63.##0.135.65':445
'63.##0.5.201':445
'63.##0.89.12':445
'63.#20.9.54':445
'63.##0.214.187':445
'63.##0.53.215':445
'63.##0.99.91':445
'63.##0.65.99':445
'63.##0.86.70':445
'63.##0.193.88':445
'63.##0.144.193':445
'63.##0.3.219':445
'63.##0.47.169':445
'63.##0.204.188':445
'63.##0.204.26':445
'63.##0.188.196':445
'63.##0.133.180':9988
'63.##0.20.136':9988
'63.##0.163.85':9988
'63.##0.127.101':445
'63.##0.23.38':9988
'63.##0.124.90':445
'63.#20.91.7':445
'63.##0.5.249':445
'63.##0.121.199':445
'63.##0.12.241':445
'63.##0.23.219':445
'63.##0.23.48':445
'63.##0.186.23':445
'63.##0.170.252':445
'63.##0.94.191':445
'63.##0.62.92':445
'63.##0.82.79':139
'63.##0.190.164':139
'63.##0.91.155':139
'63.##0.91.159':139
'63.##0.110.83':139
'63.##0.32.43':139
'63.##0.47.117':139
'63.##0.43.63':139
'63.##0.165.246':139
'63.##0.130.168':139
'63.##0.180.143':9988
'63.##0.182.104':9988
'63.##0.66.223':9988
'63.##0.72.59':9988
'63.##0.54.99':9988
'63.##0.163.195':9988
'63.##0.182.131':9988
'63.##0.119.166':9988
'63.##0.187.216':9988
'63.##0.140.14':9988
'63.##0.92.98':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней