Trojan.Starman.6516

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'81.##1.212.141':139
'81.##1.130.45':139
'81.##1.98.72':139
'81.##1.53.73':139
'81.##1.165.212':139
'81.##1.18.252':139
'81.##1.82.37':139
'81.##1.134.220':139
'81.#01.46.1':139
'81.##1.121.106':139
'81.##1.73.241':139
'81.##1.147.73':139
'81.##1.177.220':139
'81.##1.251.179':139
'81.##1.244.189':139
'81.##1.179.244':139
'81.##1.145.139':139
'81.##1.160.145':139
'81.##1.139.66':139
'81.##1.208.58':139
'81.##1.66.208':139
'81.##1.242.245':139
'81.##1.147.73':445
'81.##1.177.220':445
'81.##1.251.179':445
'81.##1.244.189':445
'81.##1.179.244':445
'81.##1.145.139':445
'81.##1.160.145':445
'81.##1.139.66':445
'81.##1.208.58':445
'81.##1.66.208':445
'81.##1.189.208':445
'81.##1.214.163':139
'81.##1.242.45':139
'81.##1.241.66':139
'81.##1.119.94':139
'81.##1.148.119':139
'81.##1.22.66':445
'81.##1.48.228':445
'81.##1.164.88':445
'81.##1.69.179':445
'81.##1.11.86':445
'81.##1.234.22':139
'81.##1.206.228':139
'81.##1.121.175':139
'81.##1.19.225':139
'81.##1.195.25':139
'81.#01.70.7':445
'81.##1.159.229':445
'81.##1.102.168':139
'81.##1.129.7':139
'81.##1.71.17':139
'81.##1.62.253':139
'81.##1.250.134':139
'81.##1.77.56':139
'81.##1.159.229':139
'81.#01.50.4':445
'81.#01.70.7':139
'81.##1.137.164':139
'81.##1.124.137':139
'81.##1.164.151':139
'81.##1.133.234':139
'81.##1.151.134':139
'81.##1.250.134':445
'81.##1.102.168':445
'81.##1.69.179':139
'81.##1.71.17':445
'81.##1.206.228':445
'81.##1.129.7':445
'81.##1.48.228':139
'81.##1.189.208':139
'81.##1.22.66':139
'81.##1.11.86':139
'81.##1.164.88':139
'81.##1.234.22':445
'81.##1.164.151':445
'81.##1.137.164':445
'81.##1.151.134':445
'81.##1.77.56':445
'81.##1.133.234':445
'81.##1.195.25':445
'81.##1.121.175':445
'81.##1.19.225':445
'81.##1.124.137':445
'81.##1.62.253':445
'81.##1.241.162':139
'81.#01.16.1':139
'81.##1.223.36':139
'81.##1.49.248':139
'81.##1.37.126':139
'81.##1.5.174':139
'81.##1.47.17':139
'81.##1.234.214':139
'81.##1.70.15':139
'81.##1.214.70':139
'81.##1.45.57':139
'81.##1.204.244':445
'81.##1.10.80':445
'81.##1.14.148':445
'81.##1.152.44':445
'81.##1.77.93':445
'81.##1.29.18':445
'81.##1.75.123':445
'81.##1.154.158':445
'81.##1.57.41':445
'81.##1.225.199':445
'81.##1.224.39':139
'81.##1.122.148':139
'81.##1.58.65':139
'81.##1.50.183':139
'81.##1.163.218':139
'81.#01.83.7':139
'81.##1.11.61':139
'81.##1.68.155':139
'81.##1.61.67':139
'81.##1.97.186':139
'81.##1.89.125':139
'81.##1.151.33':139
'81.##1.160.31':139
'81.##1.160.49':139
'81.##1.241.244':139
'81.##1.96.37':139
'81.##1.148.3':139
'81.##1.7.209':139
'81.##1.5.241':139
'81.##1.196.120':139
'81.##1.10.74':139
'81.##1.49.119':139
'81.##1.241.66':445
'81.##1.214.163':445
'81.##1.148.119':445
'81.##1.242.245':445
'81.##1.119.94':445
'81.##1.112.0':139
'81.##1.35.155':139
'81.##1.22.185':139
'81.##1.242.45':445
'81.##1.18.251':139
'81.##1.82.37':445
'81.##1.98.72':445
'81.##1.212.141':445
'81.##1.165.212':445
'81.##1.73.241':445
'81.##1.53.73':445
'81.##1.134.220':445
'81.##1.18.252':445
'81.##1.121.106':445
'81.##1.130.45':445
'81.#01.46.1':445
'81.##1.214.91':139
'81.##1.22.185':445
'81.##1.112.0':445
'81.##1.18.251':445
'81.##1.29.18':139
'81.##1.75.123':139
'81.##1.133.187':445
'81.##1.45.164':445
'81.##1.195.143':445
'81.##1.35.155':445
'81.##1.214.91':445
'81.##1.154.158':139
'81.##1.152.44':139
'81.##1.77.93':139
'81.##1.45.164':139
'81.##1.195.143':139
'81.##1.133.187':139
'81.##1.57.41':139
'81.##1.225.199':139
'81.##1.10.80':139
'81.##1.14.148':139
'81.##1.204.244':139
'81.##1.115.116':445
'81.##1.102.96':445
'81.##1.237.151':445
'81.##1.186.163':445
'81.##1.69.66':445
'81.##1.105.167':445
'81.##1.148.7':445
'81.##1.120.206':445
'81.##1.44.23':445
'81.##1.115.33':445
'81.##1.152.114':445
'81.##1.74.83':445
'81.##1.68.215':139
'81.##1.176.86':139
'81.##1.196.249':139
'81.##1.141.231':139
'81.##1.117.119':139
'81.##1.57.131':445
'81.##1.32.139':445
'81.##1.194.198':139
'81.##1.88.168':139
'81.##1.47.155':139
'81.##1.230.120':445
'81.##1.106.201':445
'81.##1.29.142':445
'81.##1.209.120':445
'81.##1.17.205':445
'81.##1.59.33':445
'81.##1.24.208':445
'81.#01.5.28':445
'81.##1.0.204':445
'81.##1.16.16':445
'81.##1.106.59':445
'81.##1.121.215':445
'81.##1.170.41':445
'81.##1.252.103':445
'81.##1.234.17':445
'81.##1.36.121':445
'81.##1.11.133':445
'81.##1.68.131':445
'81.##1.246.191':445
'81.##1.169.180':445
'81.##1.0.135':445
'81.##1.221.62':445
'81.##1.36.121':139
'81.##1.11.133':139
'81.##1.230.120':139
'81.##1.148.7':139
'81.##1.120.206':139
'81.##1.0.135':139
'81.##1.221.62':139
'81.##1.252.103':139
'81.##1.234.17':139
'81.##1.170.41':139
'81.##1.44.23':139
'81.##1.102.96':139
'81.##1.186.163':139
'81.##1.105.167':139
'81.##1.57.131':139
'81.##1.74.83':139
'81.##1.115.33':139
'81.##1.152.114':139
'81.##1.69.66':139
'81.##1.32.139':139
'81.##1.237.151':139
'81.##1.169.180':139
'81.##1.110.147':139
'81.##1.123.243':139
'81.##1.69.250':139
'81.##1.24.208':139
'81.#01.5.28':139
'81.##1.130.127':139
'81.#01.40.9':139
'81.##1.31.43':139
'81.##1.154.252':139
'81.##1.45.74':139
'81.##1.0.204':139
'81.##1.17.205':139
'81.##1.59.33':139
'81.##1.121.215':139
'81.##1.68.131':139
'81.##1.246.191':139
'81.##1.106.59':139
'81.##1.16.16':139
'81.##1.29.142':139
'81.##1.209.120':139
'81.##1.106.201':139
'81.##1.80.174':445
'81.##1.99.235':445
'81.#01.50.4':139
'81.#01.1.79':139
'81.##1.115.116':139
'81.##1.58.129':445
'81.##1.147.26':445
'81.##1.85.240':445
'81.##1.178.202':445
'81.##1.88.189':445
'81.##1.159.237':139
'81.##1.227.27':139
'81.##1.50.203':139
'81.##1.252.27':139
'81.##1.205.43':139
'81.##1.152.177':139
'81.##1.163.143':139
'81.##1.75.221':139
'81.##1.50.212':139
'81.##1.151.59':139
'81.##1.158.165':139
'81.##1.94.147':445
'81.##1.151.59':445
'81.##1.158.165':445
'81.##1.50.203':445
'81.##1.252.27':445
'81.##1.227.27':445
'81.##1.159.237':445
'81.#01.1.79':445
'81.##1.75.221':445
'81.##1.50.212':445
'81.##1.163.143':445
'81.##1.152.177':445
'81.##1.232.22':445
'81.##1.170.126':445
'81.##1.111.70':445
'81.##1.143.94':445
'81.##1.59.131':445
'81.##1.50.37':445
'81.##1.205.43':445
'81.##1.21.150':445
'81.##1.19.147':445
'81.##1.74.250':445
'81.##1.47.155':445
'81.##1.194.198':445
'81.##1.88.168':445
'81.##1.196.249':445
'81.##1.176.86':445
'81.##1.11.133':9988
'81.##1.234.17':9988
'81.##1.230.120':9988
'81.##1.74.83':9988
'81.##1.32.139':9988
'81.##1.68.215':445
'81.##1.154.252':445
'81.##1.45.74':445
'81.##1.123.243':445
'81.##1.69.250':445
'81.##1.110.147':445
'81.##1.141.231':445
'81.##1.117.119':445
'81.#01.40.9':445
'81.##1.31.43':445
'81.##1.130.127':445
'81.##1.0.135':9988
'81.##1.111.70':139
'81.##1.232.22':139
'81.##1.59.131':139
'81.##1.94.147':139
'81.##1.143.94':139
'81.##1.21.150':139
'81.##1.50.37':139
'81.##1.74.250':139
'81.##1.170.126':139
'81.##1.19.147':139
'81.##1.147.26':139
'81.##1.45.74':9988
'81.##1.80.174':139
'81.##1.59.33':9988
'81.##1.17.205':9988
'81.##1.209.120':9988
'81.##1.85.240':139
'81.##1.58.129':139
'81.##1.88.189':139
'81.##1.99.235':139
'81.##1.178.202':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней