Trojan.Starman.6078

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##0.46.108':139
'69.##0.16.164':139
'69.##0.145.54':139
'69.##0.82.115':139
'69.##0.218.82':139
'69.##0.213.122':139
'69.##0.159.11':139
'69.##0.132.236':139
'69.##0.36.190':139
'69.##0.249.212':139
'69.##0.1.250':139
'69.##0.253.244':139
'69.##0.85.83':139
'69.##0.18.25':139
'69.##0.254.234':139
'69.##0.159.254':139
'69.##0.240.227':139
'69.##0.49.163':139
'69.##0.29.82':139
'69.##0.206.62':139
'69.##0.20.244':139
'69.##0.57.234':139
'69.##0.10.121':139
'69.##0.226.250':445
'69.##0.20.227':445
'69.##0.22.247':445
'69.##0.58.177':139
'69.##0.180.118':445
'69.##0.34.29':445
'69.##0.189.238':445
'69.##0.38.86':445
'69.##0.35.88':445
'69.##0.79.164':445
'69.##0.155.79':445
'69.##0.180.56':139
'69.##0.129.43':139
'69.##0.74.145':139
'69.##0.87.14':139
'69.##0.39.83':139
'69.##0.128.115':139
'69.##0.189.136':139
'69.##0.90.134':139
'69.##0.18.211':139
'69.##0.124.178':139
'69.##0.124.224':139
'69.##0.249.197':139
'69.##0.250.250':445
'69.##0.130.139':445
'69.##0.112.54':445
'69.##0.49.142':445
'69.##0.112.15':445
'69.##0.136.246':445
'69.##0.90.241':445
'69.##0.10.91':445
'69.##0.211.218':445
'69.##0.227.136':445
'69.##0.123.43':445
'69.##0.56.91':445
'69.##0.235.65':445
'69.##0.51.136':445
'69.##0.208.143':445
'69.##0.114.201':445
'69.#80.27.5':445
'69.##0.13.65':445
'69.##0.141.178':445
'69.##0.190.17':445
'69.##0.57.47':445
'69.##0.120.225':445
'69.##0.183.10':445
'69.##0.35.88':139
'69.##0.189.238':139
'69.##0.155.79':139
'69.##0.34.29':139
'69.##0.79.164':139
'69.##0.38.86':139
'69.##0.102.111':139
'69.##0.188.127':139
'69.##0.171.10':139
'69.##0.181.227':139
'69.##0.92.149':139
'69.##0.153.97':445
'69.##0.195.55':445
'69.##0.36.42':445
'69.##0.30.183':445
'69.##0.99.26':445
'69.##0.85.196':445
'69.##0.226.250':139
'69.##0.20.227':139
'69.##0.22.247':139
'69.##0.119.21':445
'69.##0.180.118':139
'69.##0.181.227':445
'69.##0.50.63':139
'69.##0.31.72':139
'69.##0.100.123':139
'69.##0.213.208':139
'69.##0.127.214':139
'69.##0.201.30':139
'69.##0.168.218':139
'69.##0.235.107':139
'69.##0.20.18':139
'69.##0.8.201':139
'69.##0.150.8':139
'69.##0.169.216':139
'69.##0.169.55':139
'69.##0.189.12':139
'69.##0.132.246':139
'69.##0.252.132':139
'69.##0.91.212':139
'69.##0.127.72':139
'69.##0.208.127':139
'69.##0.138.223':139
'69.##0.169.91':139
'69.##0.231.145':139
'69.##0.205.207':139
'69.##0.51.254':139
'69.##0.201.11':139
'69.##0.133.180':139
'69.##0.155.252':139
'69.##0.73.221':139
'69.##0.235.143':139
'69.##0.48.49':139
'69.##0.18.112':139
'69.##0.194.48':139
'69.##0.232.249':139
'69.##0.105.69':139
'69.##0.62.79':139
'69.##0.61.18':139
'69.##0.219.215':139
'69.##0.107.76':139
'69.##0.4.130':139
'69.##0.141.134':139
'69.##0.35.191':139
'69.##0.144.124':139
'69.##0.18.216':139
'69.##0.70.148':139
'69.##0.162.83':139
'69.##0.21.86':139
'69.##0.49.163':445
'69.##0.29.82':445
'69.##0.206.62':445
'69.##0.20.244':445
'69.##0.57.234':445
'69.##0.82.115':445
'69.##0.16.164':445
'69.##0.213.122':445
'69.##0.46.108':445
'69.##0.218.82':445
'69.##0.145.54':445
'69.##0.188.127':445
'69.##0.249.197':445
'69.##0.102.111':445
'69.##0.92.149':445
'69.##0.171.10':445
'69.##0.254.234':445
'69.##0.85.83':445
'69.##0.240.227':445
'69.##0.253.244':445
'69.##0.159.254':445
'69.##0.18.25':445
'69.##0.249.212':445
'69.##0.189.136':445
'69.##0.90.134':445
'69.##0.18.211':445
'69.##0.124.178':445
'69.##0.124.224':445
'69.##0.58.177':445
'69.##0.230.98':139
'69.##0.4.154':139
'69.##0.173.35':139
'69.##0.33.114':139
'69.##0.107.189':139
'69.##0.132.236':445
'69.##0.10.121':445
'69.##0.159.11':445
'69.##0.1.250':445
'69.##0.36.190':445
'69.##0.87.14':445
'69.##0.129.43':445
'69.##0.128.115':445
'69.##0.180.56':445
'69.##0.39.83':445
'69.##0.74.145':445
'69.##0.143.248':445
'69.##0.130.63':445
'69.##0.8.174':445
'69.##0.93.27':445
'69.##0.73.105':445
'69.##0.115.82':445
'69.##0.118.183':445
'69.##0.243.87':445
'69.#80.4.52':445
'69.##0.92.182':445
'69.##0.201.20':445
'69.##0.183.107':445
'69.##0.70.245':139
'69.##0.188.228':139
'69.##0.140.146':139
'69.##0.30.163':139
'69.##0.61.36':139
'69.##0.233.2':445
'69.##0.226.122':445
'69.##0.177.95':445
'69.##0.123.85':445
'69.##0.198.170':445
'69.##0.149.18':445
'69.##0.162.77':445
'69.##0.114.12':445
'69.##0.43.206':445
'69.##0.58.87':445
'69.##0.35.234':445
'69.##0.223.114':445
'69.##0.194.103':445
'69.##0.61.137':445
'69.##0.188.102':445
'69.##0.30.253':445
'69.##0.216.31':445
'69.##0.134.170':445
'69.#80.3.40':445
'69.#80.6.53':445
'69.##0.125.198':445
'69.##0.124.62':445
'69.##0.48.221':445
'69.##0.90.183':445
'69.##0.73.227':445
'69.##0.227.128':445
'69.##0.96.60':445
'69.##0.198.6':445
'69.##0.196.18':445
'69.##0.229.174':139
'69.##0.92.182':139
'69.##0.243.87':139
'69.##0.183.107':139
'69.##0.118.183':139
'69.##0.201.20':139
'69.#80.4.52':139
'69.##0.125.198':139
'69.#80.3.40':139
'69.##0.48.221':139
'69.##0.162.77':139
'69.##0.124.62':139
'69.##0.149.18':139
'69.##0.226.122':139
'69.##0.198.170':139
'69.##0.123.85':139
'69.##0.233.2':139
'69.##0.177.95':139
'69.##0.130.63':139
'69.##0.8.174':139
'69.##0.93.27':139
'69.##0.73.105':139
'69.##0.115.82':139
'69.#80.6.53':139
'69.##0.30.253':139
'69.##0.61.137':139
'69.##0.134.170':139
'69.##0.194.103':139
'69.##0.216.31':139
'69.##0.188.102':139
'69.##0.169.32':139
'69.##0.175.168':139
'69.##0.183.248':139
'69.##0.98.160':139
'69.##0.206.82':139
'69.##0.96.60':139
'69.##0.227.128':139
'69.##0.196.18':139
'69.##0.90.183':139
'69.##0.198.6':139
'69.##0.73.227':139
'69.##0.114.12':139
'69.##0.43.206':139
'69.##0.58.87':139
'69.##0.35.234':139
'69.##0.223.114':139
'69.##0.98.160':445
'69.##0.211.218':139
'69.##0.90.241':139
'69.##0.123.43':139
'69.##0.136.246':139
'69.##0.227.136':139
'69.##0.10.91':139
'69.##0.36.42':139
'69.##0.153.97':139
'69.##0.99.26':139
'69.##0.183.10':139
'69.##0.30.183':139
'69.##0.190.17':139
'69.##0.13.65':139
'69.##0.120.225':139
'69.#80.27.5':139
'69.##0.57.47':139
'69.##0.141.178':139
'69.##0.250.250':139
'69.##0.130.139':139
'69.##0.112.54':139
'69.##0.49.142':139
'69.##0.112.15':139
'69.##0.195.55':139
'69.##0.236.250':445
'69.##0.86.242':445
'69.##0.202.177':445
'69.##0.123.71':445
'69.##0.49.129':445
'69.##0.24.233':445
'69.##0.242.146':445
'69.##0.22.75':445
'69.##0.231.157':445
'69.##0.80.183':445
'69.##0.183.247':445
'69.##0.119.7':445
'69.##0.100.119':445
'69.##0.54.198':445
'69.##0.85.196':139
'69.##0.119.21':139
'69.##0.197.100':445
'69.##0.185.178':445
'69.##0.148.222':445
'69.##0.83.65':445
'69.##0.49.160':445
'69.##0.8.195':445
'69.##0.235.65':139
'69.##0.177.95':9988
'69.##0.90.183':9988
'69.##0.118.183':9988
'69.##0.130.63':9988
'69.##0.123.85':9988
'69.##0.61.137':9988
'69.##0.54.198':139
'69.##0.119.7':139
'69.##0.229.174':9988
'69.##0.188.102':9988
'69.##0.169.32':9988
'69.##0.175.168':445
'69.##0.229.174':445
'69.##0.169.32':445
'69.##0.206.82':445
'69.##0.183.248':445
'69.##0.30.163':445
'69.##0.188.228':445
'69.##0.115.82':9988
'69.##0.70.245':445
'69.##0.61.36':445
'69.##0.140.146':445
'69.##0.100.119':139
'69.##0.231.157':139
'69.##0.242.146':139
'69.##0.183.247':139
'69.##0.24.233':139
'69.##0.80.183':139
'69.##0.22.75':139
'69.##0.51.136':139
'69.##0.56.91':139
'69.##0.114.201':139
'69.##0.143.248':139
'69.##0.208.143':139
'69.##0.83.65':139
'69.##0.185.178':139
'69.##0.8.195':139
'69.##0.197.100':139
'69.##0.49.160':139
'69.##0.148.222':139
'69.##0.236.250':139
'69.##0.86.242':139
'69.##0.202.177':139
'69.##0.123.71':139
'69.##0.49.129':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней