Trojan.Starman.6575

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##.175.206':139
'83.#6.88.98':139
'83.##.41.146':139
'83.##.215.196':139
'83.##.125.123':139
'83.#6.33.39':139
'83.##.214.46':139
'83.##.103.119':139
'83.##.36.152':139
'83.##.222.167':139
'83.#6.18.84':139
'83.#6.37.74':139
'83.#6.83.85':139
'83.#6.46.7':139
'83.#6.11.68':139
'83.#6.26.96':139
'83.#6.39.74':139
'83.##.239.193':139
'83.#6.7.177':139
'83.##.194.110':139
'83.##.15.247':139
'83.#6.7.177':445
'83.##.194.110':445
'83.#6.37.74':445
'83.#6.83.85':445
'83.#6.18.84':445
'83.##.215.196':445
'83.##.125.123':445
'83.#6.39.74':445
'83.##.239.193':445
'83.#6.26.96':445
'83.#6.16.58':445
'83.#6.92.40':445
'83.##.45.199':445
'83.#6.54.46':139
'83.#6.35.67':139
'83.#6.46.7':445
'83.#6.11.68':445
'83.##.113.150':445
'83.##.150.172':445
'83.#6.23.67':445
'83.##.113.150':139
'83.##.228.195':139
'83.#6.62.38':445
'83.#6.98.9':139
'83.##.194.145':139
'83.##.243.194':139
'83.##.200.89':445
'83.##.119.240':445
'83.#6.90.22':445
'83.#6.71.62':445
'83.##.168.102':445
'83.#6.47.1':139
'83.#6.54.65':139
'83.##.29.101':139
'83.##.237.15':139
'83.##.38.181':139
'83.##.16.220':139
'83.##.29.211':139
'83.##.216.175':139
'83.##.125.206':139
'83.#6.1.126':139
'83.##.87.241':445
'83.#6.98.9':445
'83.##.228.195':445
'83.##.243.194':445
'83.##.29.211':445
'83.##.194.145':445
'83.##.150.172':139
'83.#6.23.67':139
'83.#6.92.40':139
'83.##.45.199':139
'83.#6.16.58':139
'83.##.29.101':445
'83.#6.47.1':445
'83.##.38.181':445
'83.#6.46.44':445
'83.##.237.15':445
'83.##.216.175':445
'83.##.16.220':445
'83.#6.1.126':445
'83.#6.54.65':445
'83.##.125.206':445
'83.##.41.146':445
'83.#6.2.68':139
'83.##.112.139':139
'83.#6.83.0':139
'83.##.52.115':445
'83.#6.11.45':445
'83.##.111.190':139
'83.##.62.112':139
'83.##.189.233':139
'83.##.249.206':139
'83.#6.24.71':139
'83.##.225.175':445
'83.##.58.216':445
'83.##.196.42':445
'83.##.45.202':445
'83.##.149.45':445
'83.##.144.143':445
'83.##.143.183':445
'83.##.143.69':445
'83.##.90.238':445
'83.##.147.253':445
'83.##.35.105':139
'83.##.247.89':139
'83.##.88.225':139
'83.##.34.152':139
'83.##.228.156':139
'83.##.165.43':139
'83.##.241.83':139
'83.##.116.241':139
'83.##.198.10':139
'83.##.118.214':139
'83.##.105.32':139
'83.#6.85.73':139
'83.##.156.74':139
'83.##.160.110':139
'83.##.118.150':139
'83.##.123.118':139
'83.#6.7.164':139
'83.##.169.104':139
'83.#6.2.79':139
'83.##.245.109':139
'83.##.199.42':139
'83.##.201.147':445
'83.##.39.150':139
'83.##.124.43':139
'83.##.124.68':139
'83.##.27.117':139
'83.##.234.78':139
'83.##.101.29':139
'83.##.201.147':139
'83.#6.5.217':139
'83.#6.91.25':139
'83.##.158.180':139
'83.##.222.167':445
'83.##.103.119':445
'83.##.36.152':445
'83.##.175.206':445
'83.#6.88.98':445
'83.#6.54.46':445
'83.#6.35.67':445
'83.##.15.247':445
'83.#6.33.39':445
'83.##.214.46':445
'83.##.45.202':139
'83.##.124.68':445
'83.##.39.150':445
'83.##.234.78':445
'83.#6.11.45':139
'83.##.27.117':445
'83.#6.5.217':445
'83.##.101.29':445
'83.##.158.180':445
'83.##.124.43':445
'83.#6.91.25':445
'83.##.58.216':139
'83.##.90.238':139
'83.##.225.175':139
'83.##.149.45':139
'83.##.196.42':139
'83.##.143.183':139
'83.##.52.115':139
'83.##.144.143':139
'83.##.147.253':139
'83.##.143.69':139
'83.##.153.207':445
'83.##.49.166':445
'83.#6.60.16':445
'83.##.242.51':445
'83.#6.52.34':445
'83.##.136.113':445
'83.##.165.157':445
'83.##.47.171':445
'83.##.25.146':445
'83.##.132.68':445
'83.##.26.244':139
'83.##.248.149':139
'83.##.182.248':139
'83.#6.4.139':139
'83.#6.107.5':139
'83.#6.172.9':139
'83.##.59.141':445
'83.##.11.101':139
'83.#6.63.17':139
'83.##.101.90':139
'83.#6.121.5':445
'83.##.109.240':445
'83.##.241.57':445
'83.##.165.64':445
'83.##.202.18':445
'83.#6.71.13':445
'83.#6.8.35':445
'83.#6.217.8':445
'83.#6.88.59':445
'83.##.120.23':445
'83.##.171.18':445
'83.##.177.107':445
'83.#6.77.31':445
'83.##.15.137':445
'83.##.227.74':445
'83.##.120.227':445
'83.##.165.32':445
'83.##.133.79':445
'83.#6.33.36':445
'83.##.96.241':445
'83.##.70.163':445
'83.##.42.235':139
'83.##.120.227':139
'83.##.15.137':139
'83.##.227.74':139
'83.##.165.157':139
'83.#6.121.5':139
'83.##.70.163':139
'83.#6.33.36':139
'83.##.96.241':139
'83.##.177.107':139
'83.#6.77.31':139
'83.#6.60.16':139
'83.##.153.207':139
'83.##.59.141':139
'83.##.242.51':139
'83.#6.52.34':139
'83.##.47.171':139
'83.##.136.113':139
'83.##.132.68':139
'83.##.49.166':139
'83.##.25.146':139
'83.##.165.32':139
'83.#6.47.9':139
'83.#6.10.88':139
'83.##.218.253':139
'83.#6.217.8':139
'83.##.253.150':139
'83.##.102.90':139
'83.##.149.38':139
'83.##.87.194':139
'83.##.98.173':139
'83.#6.8.18':139
'83.##.165.64':139
'83.##.109.240':139
'83.#6.71.13':139
'83.##.133.79':139
'83.##.202.18':139
'83.#6.88.59':139
'83.#6.8.35':139
'83.##.171.18':139
'83.##.241.57':139
'83.##.120.23':139
'83.##.253.150':445
'83.##.162.148':445
'83.##.157.82':445
'83.#6.45.72':445
'83.##.205.51':139
'83.#6.6.216':139
'83.##.37.147':445
'83.##.185.139':445
'83.##.236.250':445
'83.##.203.163':445
'83.##.251.14':445
'83.##.61.112':139
'83.##.14.245':139
'83.##.11.236':139
'83.##.121.145':139
'83.#6.35.80':139
'83.##.110.82':139
'83.#6.44.12':139
'83.##.102.98':139
'83.##.238.68':139
'83.##.82.238':139
'83.##.15.145':445
'83.#6.71.62':139
'83.##.168.102':139
'83.#6.62.38':139
'83.##.205.51':445
'83.#6.6.216':445
'83.##.87.241':139
'83.#6.46.44':139
'83.##.119.240':139
'83.#6.90.22':139
'83.##.200.89':139
'83.##.61.112':445
'83.##.14.245':445
'83.##.11.236':445
'83.##.121.145':445
'83.#6.35.80':445
'83.##.110.82':445
'83.#6.44.12':445
'83.##.102.98':445
'83.##.238.68':445
'83.##.82.238':445
'83.##.15.145':139
'83.##.248.149':445
'83.#6.63.17':445
'83.##.26.244':445
'83.#6.107.5':445
'83.##.182.248':445
'83.##.153.207':9988
'83.#6.60.16':9988
'83.#6.172.9':445
'83.##.101.90':445
'83.##.11.101':445
'83.##.98.173':445
'83.#6.8.18':445
'83.#6.10.88':445
'83.##.218.253':445
'83.#6.47.9':445
'83.##.42.235':445
'83.#6.4.139':445
'83.##.149.38':445
'83.##.87.194':445
'83.##.102.90':445
'83.##.49.166':9988
'83.##.162.148':139
'83.##.157.82':139
'83.#6.45.72':139
'83.##.87.194':9988
'83.#6.4.139':9988
'83.##.37.147':139
'83.##.185.139':139
'83.##.236.250':139
'83.##.203.163':139
'83.##.251.14':139
'83.#6.77.31':9988
'83.##.96.241':9988
'83.##.227.74':9988
'83.##.25.146':9988
'83.##.136.113':9988
'83.#6.8.35':9988
'83.#6.217.8':9988
'83.##.202.18':9988
'83.##.70.163':9988
'83.##.133.79':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней