Trojan.Starman.6056

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##6.121.157':139
'63.##6.220.121':139
'63.##6.157.37':139
'63.##6.133.113':139
'63.##6.231.17':139
'63.##6.77.172':139
'63.##6.141.84':139
'63.##6.63.65':139
'63.##6.162.220':139
'63.##6.122.162':139
'63.##6.79.140':139
'63.##6.135.239':139
'63.##6.37.252':139
'63.##6.174.113':139
'63.##6.145.243':139
'63.#36.3.94':139
'63.##6.112.165':139
'63.##6.158.79':139
'63.##6.139.220':139
'63.##6.103.254':139
'63.##6.24.134':139
'63.#36.71.7':139
'63.##6.113.128':445
'63.##6.7.221':445
'63.##6.91.92':445
'63.##6.124.38':445
'63.##6.13.107':445
'63.##6.74.216':445
'63.##6.150.234':445
'63.##6.58.46':445
'63.#36.87.7':445
'63.##6.145.125':445
'63.##6.181.245':445
'63.##6.81.169':139
'63.##6.215.156':139
'63.##6.89.56':139
'63.##6.184.186':139
'63.##6.125.189':139
'63.##6.82.124':445
'63.##6.250.244':445
'63.##6.31.200':445
'63.##6.102.16':445
'63.##6.199.160':445
'63.##6.63.62':445
'63.##6.136.97':445
'63.#36.5.63':445
'63.##6.58.103':445
'63.##6.63.58':445
'63.##6.70.234':445
'63.##6.213.128':445
'63.##6.213.128':139
'63.##6.59.241':445
'63.##6.70.234':139
'63.##6.52.88':445
'63.##6.249.118':445
'63.#36.2.78':445
'63.##6.104.35':445
'63.##6.56.136':445
'63.##6.143.32':445
'63.##6.248.142':445
'63.##6.50.13':445
'63.##6.15.252':445
'63.##6.133.127':445
'63.##6.29.187':445
'63.##6.102.16':139
'63.##6.150.234':139
'63.##6.237.26':139
'63.##6.74.216':139
'63.##6.145.125':139
'63.##6.58.46':139
'63.##6.19.138':139
'63.##6.81.19':139
'63.##6.138.116':139
'63.##6.98.42':139
'63.##6.122.165':139
'63.#36.87.7':139
'63.##6.250.244':139
'63.##6.181.245':139
'63.##6.82.124':139
'63.##6.199.160':139
'63.##6.31.200':139
'63.##6.113.128':139
'63.##6.7.221':139
'63.##6.91.92':139
'63.##6.124.38':139
'63.##6.13.107':139
'63.#36.29.9':139
'63.##6.10.180':139
'63.##6.8.234':139
'63.##6.69.189':139
'63.##6.233.69':139
'63.##6.229.154':139
'63.##6.137.28':139
'63.##6.201.189':139
'63.##6.146.190':139
'63.##6.189.146':139
'63.##6.12.78':139
'63.##6.30.130':139
'63.##6.47.252':139
'63.##6.79.70':139
'63.##6.116.112':139
'63.##6.15.169':139
'63.##6.19.17':139
'63.##6.132.100':139
'63.##6.130.168':139
'63.##6.53.226':139
'63.##6.48.40':139
'63.##6.138.183':139
'63.##6.120.122':139
'63.##6.164.220':139
'63.##6.14.60':139
'63.##6.14.88':139
'63.##6.75.221':139
'63.##6.12.44':139
'63.##6.159.193':139
'63.##6.180.12':139
'63.#36.5.28':139
'63.##6.2.189':139
'63.##6.127.41':139
'63.##6.110.196':139
'63.##6.163.118':139
'63.##6.123.134':139
'63.#36.5.39':139
'63.##6.209.4':139
'63.##6.95.88':139
'63.##6.144.157':139
'63.##6.148.196':139
'63.##6.155.204':139
'63.##6.196.31':139
'63.##6.112.165':445
'63.##6.158.79':445
'63.##6.139.220':445
'63.##6.103.254':445
'63.##6.24.134':445
'63.##6.157.37':445
'63.##6.121.157':445
'63.##6.231.17':445
'63.##6.79.140':445
'63.##6.133.113':445
'63.##6.37.252':445
'63.##6.138.116':445
'63.##6.19.138':445
'63.##6.122.165':445
'63.##6.237.26':445
'63.##6.98.42':445
'63.##6.174.113':445
'63.##6.135.239':445
'63.#36.3.94':445
'63.##6.81.19':445
'63.##6.145.243':445
'63.##6.220.121':445
'63.##6.210.176':445
'63.##6.42.61':139
'63.##6.176.215':445
'63.##6.176.215':139
'63.##6.210.176':139
'63.##6.210.45':139
'63.#36.96.9':139
'63.##6.180.13':139
'63.##6.239.252':139
'63.##6.13.240':139
'63.##6.215.156':445
'63.##6.77.172':445
'63.##6.141.84':445
'63.##6.63.65':445
'63.##6.162.220':445
'63.##6.122.162':445
'63.##6.89.56':445
'63.##6.81.169':445
'63.##6.125.189':445
'63.#36.71.7':445
'63.##6.184.186':445
'63.##6.94.222':445
'63.##6.198.118':445
'63.##6.149.102':445
'63.##6.43.203':445
'63.##6.72.74':445
'63.##6.34.138':445
'63.##6.121.228':445
'63.##6.100.156':445
'63.#36.8.20':445
'63.##6.155.172':445
'63.##6.164.178':445
'63.##6.80.102':139
'63.##6.47.231':139
'63.##6.121.16':139
'63.##6.218.28':139
'63.##6.158.37':139
'63.##6.95.120':445
'63.##6.85.202':445
'63.##6.4.118':139
'63.##6.157.185':139
'63.##6.232.49':139
'63.##6.248.63':445
'63.##6.121.202':445
'63.##6.113.81':445
'63.##6.21.149':445
'63.##6.59.184':445
'63.##6.109.17':445
'63.##6.212.65':445
'63.##6.50.212':445
'63.##6.5.216':445
'63.##6.190.90':445
'63.##6.83.46':445
'63.#36.1.53':445
'63.##6.190.123':445
'63.##6.0.187':445
'63.##6.93.38':445
'63.##6.47.83':445
'63.##6.170.28':445
'63.##6.213.181':445
'63.##6.82.213':445
'63.##6.181.173':445
'63.##6.150.155':445
'63.##6.173.50':445
'63.##6.47.83':139
'63.##6.170.28':139
'63.##6.248.63':139
'63.##6.34.138':139
'63.##6.121.228':139
'63.##6.150.155':139
'63.##6.173.50':139
'63.##6.0.187':139
'63.##6.93.38':139
'63.##6.190.123':139
'63.##6.100.156':139
'63.##6.72.74':139
'63.##6.95.120':139
'63.##6.85.202':139
'63.##6.43.203':139
'63.##6.164.178':139
'63.#36.8.20':139
'63.##6.155.172':139
'63.##6.198.118':139
'63.##6.149.102':139
'63.##6.94.222':139
'63.##6.181.173':139
'63.##6.139.93':139
'63.##6.68.131':139
'63.#36.36.2':139
'63.##6.212.65':139
'63.##6.50.212':139
'63.##6.12.69':139
'63.##6.175.99':139
'63.##6.107.132':139
'63.##6.127.55':139
'63.##6.241.31':139
'63.##6.5.216':139
'63.##6.59.184':139
'63.##6.109.17':139
'63.#36.1.53':139
'63.##6.213.181':139
'63.##6.82.213':139
'63.##6.190.90':139
'63.##6.83.46':139
'63.##6.113.81':139
'63.##6.21.149':139
'63.##6.121.202':139
'63.##6.63.58':139
'63.#36.5.63':139
'63.##6.58.103':139
'63.##6.50.13':139
'63.##6.52.88':139
'63.##6.122.4':445
'63.##6.153.213':445
'63.##6.59.241':139
'63.##6.63.62':139
'63.##6.136.97':139
'63.##6.248.142':139
'63.##6.143.32':139
'63.##6.104.35':139
'63.##6.56.136':139
'63.##6.176.88':139
'63.##6.15.30':139
'63.##6.29.187':139
'63.##6.15.252':139
'63.##6.133.127':139
'63.##6.249.118':139
'63.#36.2.78':139
'63.##6.95.22':445
'63.##6.62.216':445
'63.##6.26.63':445
'63.##6.251.22':445
'63.##6.133.58':445
'63.##6.134.12':445
'63.##6.176.88':445
'63.##6.15.30':445
'63.##6.122.237':445
'63.##6.194.25':445
'63.##6.160.31':445
'63.##6.58.231':445
'63.##6.220.205':445
'63.##6.54.81':445
'63.##6.205.244':445
'63.##6.252.94':445
'63.##6.115.5':445
'63.##6.6.229':445
'63.##6.140.232':445
'63.#36.45.9':445
'63.##6.150.49':445
'63.##6.109.30':445
'63.##6.232.49':445
'63.##6.4.118':445
'63.##6.157.185':445
'63.##6.80.102':445
'63.##6.47.231':445
'63.##6.107.132':9988
'63.##6.121.16':9988
'63.##6.241.31':9988
'63.##6.43.203':9988
'63.##6.139.93':9988
'63.##6.121.16':445
'63.##6.241.31':445
'63.##6.127.55':445
'63.##6.68.131':445
'63.#36.36.2':445
'63.##6.139.93':445
'63.##6.218.28':445
'63.##6.158.37':445
'63.##6.175.99':445
'63.##6.107.132':445
'63.##6.12.69':445
'63.##6.122.4':139
'63.##6.134.12':139
'63.##6.251.22':139
'63.##6.133.58':139
'63.##6.140.232':139
'63.##6.58.231':139
'63.##6.160.31':139
'63.##6.122.237':139
'63.##6.194.25':139
'63.##6.62.216':139
'63.##6.26.63':139
'63.##6.6.229':139
'63.##6.115.5':139
'63.##6.205.244':139
'63.##6.252.94':139
'63.##6.153.213':139
'63.##6.95.22':139
'63.##6.109.30':139
'63.#36.45.9':139
'63.##6.150.49':139
'63.##6.220.205':139
'63.##6.54.81':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней