Trojan.Starman.6337

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##6.178.79':445
'12.##6.25.57':445
'12.##6.33.34':445
'12.##6.44.95':445
'12.##6.71.45':445
'12.##6.195.207':445
'12.##6.79.33':445
'12.##6.156.102':445
'12.##6.56.185':445
'12.##6.24.81':445
'12.##6.169.141':445
'12.##6.50.11':445
'12.##6.112.79':445
'12.##6.63.167':139
'12.##6.170.30':445
'12.##6.91.206':445
'12.##6.34.180':139
'12.##6.146.140':139
'12.##6.122.190':139
'12.##6.122.251':445
'12.##6.142.84':445
'12.##6.185.225':445
'12.##6.83.115':445
'12.##6.168.125':445
'12.##6.213.75':445
'12.##6.242.167':445
'12.##6.89.35':445
'12.##6.128.162':445
'12.##6.17.212':445
'12.##6.14.55':445
'12.##6.14.53':445
'12.##6.174.234':445
'12.##6.121.174':445
'12.##6.156.31':445
'12.##6.98.23':445
'12.##6.34.180':445
'12.##6.67.121':445
'12.##6.80.220':445
'12.##6.132.95':445
'12.#46.5.91':445
'12.##6.61.145':445
'12.##6.67.152':445
'12.##6.85.76':445
'12.##6.151.183':445
'12.##6.200.37':445
'12.##6.68.10':445
'12.##6.15.204':445
'12.##6.173.91':445
'12.##6.120.165':445
'12.##6.181.71':445
'12.##6.112.33':445
'12.##6.44.115':445
'12.##6.195.207':139
'12.##6.178.79':139
'12.##6.25.57':139
'12.##6.83.115':139
'12.##6.44.95':139
'12.##6.71.45':139
'12.##6.33.34':139
'12.##6.112.79':139
'12.##6.156.102':139
'12.##6.56.185':139
'12.##6.79.33':139
'12.##6.169.141':139
'12.##6.50.11':139
'12.##6.91.30':445
'12.##6.29.91':445
'12.##6.170.30':139
'12.##6.180.116':445
'12.##6.82.204':445
'12.##6.203.55':445
'12.##6.91.206':139
'12.##6.242.167':139
'12.##6.142.84':139
'12.##6.185.225':139
'12.##6.122.251':139
'12.##6.168.125':139
'12.##6.213.75':139
'12.##6.174.234':139
'12.##6.89.35':139
'12.##6.128.162':139
'12.##6.120.165':139
'12.##6.14.55':139
'12.##6.14.53':139
'12.##6.17.212':139
'12.##6.132.95':139
'12.##6.156.31':139
'12.##6.98.23':139
'12.##6.121.174':139
'12.##6.67.121':139
'12.##6.80.220':139
'12.##6.200.37':139
'12.#46.5.91':139
'12.##6.61.145':139
'12.##6.24.81':139
'12.##6.85.76':139
'12.##6.151.183':139
'12.##6.67.152':139
'12.##6.44.115':139
'12.##6.15.204':139
'12.##6.173.91':139
'12.##6.68.10':139
'12.##6.181.71':139
'12.##6.112.33':139
'12.##6.146.140':445
'12.##6.85.205':445
'12.##6.25.107':445
'12.##6.137.43':445
'12.##6.39.236':445
'12.##6.80.134':445
'12.##6.137.37':445
'12.##6.28.137':445
'12.##6.60.249':445
'12.##6.70.109':445
'12.##6.63.252':445
'12.##6.213.41':445
'12.##6.225.8':445
'12.##6.214.224':445
'12.##6.101.119':445
'12.##6.54.47':445
'12.##6.177.3':445
'12.##6.149.114':139
'12.##6.13.96':445
'12.##6.59.119':445
'12.##6.18.130':445
'12.##6.217.202':445
'12.##6.59.156':445
'12.##6.47.60':445
'12.##6.243.129':445
'12.##6.19.167':445
'12.##6.160.101':445
'12.##6.139.95':445
'12.##6.91.64':445
'12.##6.125.248':445
'12.##6.15.189':445
'12.##6.236.89':445
'12.##6.4.133':445
'12.##6.233.43':445
'12.##6.73.217':445
'12.##6.223.45':445
'12.##6.149.114':445
'12.##6.15.203':445
'12.##6.10.184':445
'12.##6.129.10':445
'12.#46.6.44':445
'12.##6.173.12':445
'12.##6.208.172':445
'12.##6.191.78':445
'12.##6.89.67':445
'12.#46.98.0':445
'12.##6.22.194':445
'12.##6.134.113':445
'12.##6.129.210':445
'12.##6.188.182':445
'12.#46.3.88':445
'12.##6.254.190':445
'12.##6.242.254':445
'12.##6.137.37':139
'12.##6.85.205':139
'12.##6.25.107':139
'12.##6.47.60':139
'12.##6.39.236':139
'12.##6.80.134':139
'12.##6.137.43':139
'12.##6.214.224':139
'12.##6.60.249':139
'12.##6.70.109':139
'12.##6.28.137':139
'12.##6.213.41':139
'12.##6.225.8':139
'12.##6.59.119':139
'12.##6.101.119':139
'12.##6.54.47':139
'12.##6.122.190':445
'12.##6.63.167':445
'12.##6.13.96':139
'12.##6.177.3':139
'12.##6.160.101':139
'12.##6.217.202':139
'12.##6.59.156':139
'12.##6.18.130':139
'12.##6.243.129':139
'12.##6.19.167':139
'12.##6.4.133':139
'12.##6.139.95':139
'12.##6.91.64':139
'12.##6.188.182':139
'12.##6.15.189':139
'12.##6.236.89':139
'12.##6.125.248':139
'12.##6.129.10':139
'12.##6.73.217':139
'12.##6.223.45':139
'12.##6.233.43':139
'12.##6.15.203':139
'12.##6.10.184':139
'12.#46.98.0':139
'12.#46.6.44':139
'12.##6.173.12':139
'12.##6.63.252':139
'12.##6.191.78':139
'12.##6.89.67':139
'12.##6.208.172':139
'12.##6.242.254':139
'12.##6.134.113':139
'12.##6.129.210':139
'12.##6.22.194':139
'12.#46.3.88':139
'12.##6.254.190':139
'12.##6.158.175':445
'12.##6.23.120':445
'12.##6.241.120':445
'12.##6.61.50':445
'12.##6.51.12':445
'12.##6.158.171':445
'12.##6.110.241':445
'12.##6.196.137':445
'12.##6.172.218':445
'12.##6.77.97':445
'12.##6.251.84':445
'12.##6.228.226':445
'12.##6.133.82':445
'12.##6.67.250':445
'12.##6.154.32':445
'12.##6.163.95':445
'12.##6.45.103':445
'12.##6.164.24':445
'12.##6.24.201':445
'12.##6.221.253':445
'12.##6.60.221':445
'12.##6.7.167':445
'12.##6.10.11':445
'12.##6.152.68':445
'12.##6.41.99':445
'12.##6.196.202':445
'12.##6.170.205':445
'12.##6.103.126':445
'12.##6.17.103':445
'12.##6.43.44':445
'12.##6.214.233':445
'12.##6.20.33':445
'12.#46.3.27':445
'12.##6.81.173':445
'12.##6.154.32':9988
'12.##6.60.221':9988
'12.##6.26.76':445
'12.##6.9.193':445
'12.##6.167.25':445
'12.##6.145.12':445
'12.##6.143.115':445
'12.##6.218.176':445
'12.##6.18.146':445
'12.##6.28.29':445
'12.##6.132.182':445
'12.##6.240.101':445
'12.##6.85.170':445
'12.##6.29.87':445
'12.##6.197.63':445
'12.##6.38.131':445
'12.##6.130.147':445
'12.##6.170.38':445
'12.##6.158.171':139
'12.##6.158.175':139
'12.##6.23.120':139
'12.##6.10.11':139
'12.##6.61.50':139
'12.##6.51.12':139
'12.##6.241.120':139
'12.##6.133.82':139
'12.##6.196.137':139
'12.##6.172.218':139
'12.##6.110.241':139
'12.##6.251.84':139
'12.##6.228.226':139
'12.##6.217.203':139
'12.##6.164.24':139
'12.##6.67.250':139
'12.##6.154.32':139
'12.##6.24.201':139
'12.##6.45.103':139
'12.##6.163.95':139
'12.##6.196.202':139
'12.##6.60.221':139
'12.##6.7.167':139
'12.##6.221.253':139
'12.##6.152.68':139
'12.##6.41.99':139
'12.##6.20.33':139
'12.##6.170.205':139
'12.##6.103.126':139
'12.##6.197.63':139
'12.##6.43.44':139
'12.##6.214.233':139
'12.##6.17.103':139
'12.##6.9.193':139
'12.##6.81.173':139
'12.##6.217.203':445
'12.#46.3.27':139
'12.##6.26.76':139
'12.##6.167.25':139
'12.##6.132.182':139
'12.##6.145.12':139
'12.##6.143.115':139
'12.##6.77.97':139
'12.##6.18.146':139
'12.##6.28.29':139
'12.##6.240.101':139
'12.##6.170.38':139
'12.##6.85.170':139
'12.##6.29.87':139
'12.##6.218.176':139
'12.##6.130.147':139
'12.##6.38.131':139
'12.##6.164.24':9988
'12.##6.140.35':445
'12.##6.14.202':445
'12.##6.61.235':445
'12.##6.11.187':445
'12.#46.97.1':445
'12.##6.17.54':445
'12.##6.168.149':445
'12.##6.204.133':445
'12.##6.198.29':445
'12.##6.110.87':445
'12.##6.121.136':445
'12.##6.117.41':445
'12.##6.176.107':445
'12.##6.203.55':139
'12.##6.91.30':139
'12.##6.29.91':139
'12.##6.61.228':139
'12.##6.180.116':139
'12.##6.82.204':139
'12.##6.113.43':445
'12.##6.89.141':445
'12.##6.35.98':445
'12.##6.251.152':445
'12.##6.53.113':445
'12.##6.102.60':445
'12.##6.225.221':445
'12.##6.142.65':445
'12.##6.132.148':445
'12.##6.76.31':445
'12.##6.156.76':445
'12.##6.50.32':445
'12.##6.168.5':445
'12.##6.33.76':445
'12.##6.244.43':445
'12.##6.167.33':445
'12.##6.61.228':445
'12.##6.45.214':445
'12.##6.6.204':445
'12.##6.219.199':445
'12.##6.14.210':445
'12.##6.63.45':445
'12.##6.24.199':445
'12.##6.174.133':445
'12.##6.212.76':445
'12.##6.144.191':445
'12.##6.128.203':445
'12.##6.191.134':445
'12.##6.115.132':445
'12.##6.112.193':445
'12.##6.85.86':445
'12.##6.92.213':445
'12.##6.35.186':445
'12.##6.140.35':139
'12.##6.176.107':139
'12.##6.17.54':139
'12.##6.117.41':139
'12.##6.121.136':139
'12.##6.35.98':139
'12.##6.11.187':139
'12.##6.61.235':139
'12.##6.204.133':139
'12.##6.198.29':139
'12.##6.14.202':139
'12.##6.251.152':139
'12.#46.97.1':139
'12.##6.240.101':9988
'12.##6.43.44':9988
'12.##6.214.233':9988
'12.##6.61.50':9988
'12.##6.158.175':9988
'12.##6.143.115':9988
'12.#46.3.27':9988
'12.##6.225.221':139
'12.##6.168.149':139
'12.##6.89.141':139
'12.##6.113.43':139
'12.##6.53.113':139
'12.##6.102.60':139
'12.##6.168.5':139
'12.##6.142.65':139
'12.##6.132.148':139
'12.##6.112.193':139
'12.##6.156.76':139
'12.##6.50.32':139
'12.##6.76.31':139
'12.##6.219.199':139
'12.##6.244.43':139
'12.##6.167.33':139
'12.##6.33.76':139
'12.##6.45.214':139
'12.##6.6.204':139
'12.##6.144.191':139
'12.##6.14.210':139
'12.##6.63.45':139
'12.##6.110.87':139
'12.##6.174.133':139
'12.##6.212.76':139
'12.##6.24.199':139
'12.##6.35.186':139
'12.##6.191.134':139
'12.##6.115.132':139
'12.##6.128.203':139
'12.##6.85.86':139
'12.##6.92.213':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней