Trojan.Starman.6551

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.#.150.217':139
'60.#.84.24':139
'60.#.217.106':139
'60.#.48.142':139
'60.#.176.57':139
'60.#.169.151':139
'60.#.250.163':445
'60.#.152.0':139
'60.#.81.6':139
'60.#.98.29':139
'60.#.18.117':139
'60.#.112.102':139
'60.#.120.229':139
'60.#.103.165':139
'60.#.78.37':139
'60.#.133.1':139
'60.#.75.68':139
'60.#.126.34':139
'60.#.208.3':139
'60.#.167.25':139
'60.#.25.140':445
'60.#.186.24':445
'60.#.140.81':445
'60.#.105.44':445
'60.#.1.167':445
'60.#.149.206':445
'60.#.208.224':445
'60.#.139.219':445
'60.#.64.186':445
'60.#.219.64':445
'60.#.250.75':445
'60.#.93.94':445
'60.#.51.137':445
'60.#.242.73':445
'60.#.153.70':445
'60.#.91.160':445
'60.#.137.1':445
'60.#.197.217':445
'60.#.179.220':445
'60.#.40.15':445
'60.#.52.173':445
'60.#.21.1':445
'60.#.97.152':445
'60.#.50.117':445
'60.#.45.113':445
'60.#.153.70':139
'60.#.51.137':139
'60.#.242.73':139
'60.#.117.220':445
'60.#.250.163':139
'60.#.45.113':139
'60.#.97.152':139
'60.#.50.117':139
'60.#.89.193':139
'60.#.220.147':139
'60.#.89.193':445
'60.#.220.147':445
'60.#.117.220':139
'60.#.52.173':139
'60.#.21.1':139
'60.#.219.64':139
'60.#.139.219':139
'60.#.64.186':139
'60.#.25.140':139
'60.#.186.24':139
'60.#.34.73':139
'60.#.14.75':139
'60.#.86.55':139
'60.#.149.206':139
'60.#.208.224':139
'60.#.40.15':139
'60.#.197.217':139
'60.#.179.220':139
'60.#.250.75':139
'60.#.93.94':139
'60.#.1.167':139
'60.#.140.81':139
'60.#.105.44':139
'60.#.91.160':139
'60.#.137.1':139
'60.#.86.55':445
'60.#.160.180':139
'60.#.143.43':139
'60.#.143.88':139
'60.#.66.133':139
'60.#.172.246':139
'60.#.90.188':139
'60.#.144.36':139
'60.#.93.128':139
'60.#.173.184':139
'60.#.159.40':139
'60.#.45.96':139
'60.#.127.158':139
'60.#.136.171':139
'60.#.193.182':139
'60.#.44.89':139
'60.#.6.58':139
'60.#.63.245':139
'60.#.252.196':139
'60.#.207.36':139
'60.#.177.206':139
'60.#.217.32':139
'60.#.60.137':139
'60.#.33.29':139
'60.#.53.80':139
'60.#.28.254':139
'60.#.155.21':139
'60.#.5.156':139
'60.#.82.229':139
'60.#.175.91':139
'60.#.36.175':139
'60.#.154.18':139
'60.#.234.9':139
'60.#.103.222':139
'60.#.40.66':139
'60.#.31.147':139
'60.#.4.27':139
'60.#.45.208':139
'60.#.9.52':139
'60.#.172.240':139
'60.#.213.15':139
'60.#.176.57':445
'60.#.217.106':445
'60.#.48.142':445
'60.#.133.1':445
'60.#.75.68':445
'60.#.98.29':445
'60.#.152.0':445
'60.#.81.6':445
'60.#.150.217':445
'60.#.84.24':445
'60.#.78.37':445
'60.#.120.229':445
'60.#.103.165':445
'60.#.34.73':445
'60.#.14.75':445
'60.#.167.25':445
'60.#.126.34':445
'60.#.208.3':445
'60.#.18.117':445
'60.#.112.102':445
'60.#.100.224':445
'60.#.208.151':445
'60.#.227.167':445
'60.#.59.9':445
'60.#.108.61':445
'60.#.142.133':139
'60.#.122.107':139
'60.#.132.176':139
'60.#.145.198':445
'60.#.90.180':445
'60.#.108.61':139
'60.#.227.167':139
'60.#.59.9':139
'60.#.169.151':445
'60.#.151.170':139
'60.#.90.180':139
'60.#.151.170':445
'60.#.145.198':139
'60.#.100.224':139
'60.#.208.151':139
'60.#.234.74':445
'60.#.184.233':445
'60.#.149.51':445
'60.#.244.133':445
'60.#.168.47':139
'60.#.71.247':445
'60.#.180.117':445
'60.#.168.180':445
'60.#.117.58':445
'60.#.198.135':445
'60.#.249.157':445
'60.#.110.45':139
'60.#.201.188':139
'60.#.56.11':139
'60.#.158.114':139
'60.#.88.191':139
'60.#.81.216':139
'60.#.13.142':139
'60.#.50.127':139
'60.#.35.253':139
'60.#.46.58':139
'60.#.7.39':445
'60.#.7.233':445
'60.#.4.141':445
'60.#.185.185':445
'60.#.178.231':445
'60.#.209.117':445
'60.#.10.50':445
'60.#.54.113':445
'60.#.110.64':445
'60.#.168.21':445
'60.#.29.94':445
'60.#.230.168':445
'60.#.73.161':445
'60.#.164.202':445
'60.#.54.41':445
'60.#.212.114':445
'60.#.109.28':445
'60.#.147.180':445
'60.#.20.244':445
'60.#.164.211':445
'60.#.230.168':139
'60.#.20.244':139
'60.#.29.94':139
'60.#.54.41':139
'60.#.73.161':139
'60.#.109.28':139
'60.#.185.185':139
'60.#.212.114':139
'60.#.164.211':139
'60.#.147.180':139
'60.#.184.233':139
'60.#.198.135':139
'60.#.149.51':139
'60.#.71.247':139
'60.#.244.133':139
'60.#.168.180':139
'60.#.164.202':139
'60.#.180.117':139
'60.#.249.157':139
'60.#.117.58':139
'60.#.71.167':139
'60.#.115.87':139
'60.#.90.132':139
'60.#.75.252':139
'60.#.147.48':139
'60.#.204.111':139
'60.#.114.204':139
'60.#.31.125':139
'60.#.30.188':139
'60.#.255.75':139
'60.#.7.233':139
'60.#.110.64':139
'60.#.7.39':139
'60.#.178.231':139
'60.#.4.141':139
'60.#.10.50':139
'60.#.190.161':139
'60.#.209.117':139
'60.#.168.21':139
'60.#.54.113':139
'60.#.190.161':445
'60.#.66.20':139
'60.#.167.66':139
'60.#.20.20':139
'60.#.93.81':139
'60.#.125.208':139
'60.#.62.17':445
'60.#.50.56':445
'60.#.234.74':139
'60.#.144.167':139
'60.#.75.72':139
'60.#.138.193':139
'60.#.243.185':139
'60.#.187.214':139
'60.#.117.193':139
'60.#.80.118':139
'60.#.12.224':139
'60.#.10.241':139
'60.#.183.237':139
'60.#.194.116':139
'60.#.25.137':139
'60.#.93.81':445
'60.#.125.208':445
'60.#.10.241':445
'60.#.183.237':445
'60.#.12.224':445
'60.#.144.167':445
'60.#.75.72':445
'60.#.167.66':445
'60.#.20.20':445
'60.#.66.20':445
'60.#.117.193':445
'60.#.80.118':445
'60.#.155.181':445
'60.#.80.19':445
'60.#.207.66':445
'60.#.194.116':445
'60.#.25.137':445
'60.#.243.185':445
'60.#.187.214':445
'60.#.138.193':445
'60.#.110.45':445
'60.#.201.188':445
'60.#.56.11':445
'60.#.158.114':445
'60.#.88.191':445
'60.#.81.216':445
'60.#.13.142':445
'60.#.50.127':445
'60.#.35.253':445
'60.#.46.58':445
'60.#.71.167':445
'60.#.115.87':445
'60.#.90.132':445
'60.#.75.252':445
'60.#.147.48':445
'60.#.204.111':445
'60.#.114.204':445
'60.#.31.125':445
'60.#.30.188':445
'60.#.255.75':445
'60.#.114.204':9988
'60.#.56.11':9988
'60.#.204.111':9988
'60.#.75.252':9988
'60.#.90.132':9988
'60.#.207.66':139
'60.#.155.181':139
'60.#.80.19':139
'60.#.62.17':139
'60.#.50.56':139
'60.#.117.58':9988
'60.#.180.117':9988
'60.#.249.157':9988
'60.#.168.47':445
'60.#.184.233':9988
'60.#.209.117':9988
'60.#.190.161':9988
'60.#.54.113':9988
'60.#.7.233':9988
'60.#.168.21':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней