Trojan.Starman.6582

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.#6.24.59':139
'82.##.186.192':139
'82.##.199.67':445
'82.##.150.60':445
'82.#6.33.20':445
'82.##.185.15':139
'82.##.128.73':139
'82.##.129.37':139
'82.##.152.186':139
'82.##.237.98':139
'82.##.125.28':445
'82.##.189.117':445
'82.##.253.188':445
'82.#6.95.11':445
'82.##.125.79':445
'82.##.133.38':445
'82.#6.93.0':445
'82.##.241.237':445
'82.#6.11.8':445
'82.##.12.253':445
'82.##.119.136':445
'82.#6.15.84':445
'82.##.10.210':445
'82.#6.84.99':445
'82.##.128.73':445
'82.#6.245.0':445
'82.#6.28.60':139
'82.##.216.160':139
'82.##.141.245':139
'82.##.21.132':445
'82.##.162.242':139
'82.##.185.15':445
'82.##.10.210':139
'82.##.21.132':139
'82.#6.15.84':139
'82.#6.245.0':139
'82.#6.84.99':139
'82.##.237.98':445
'82.##.129.37':445
'82.##.152.186':445
'82.#6.24.59':445
'82.##.186.192':445
'82.#6.6.25':445
'82.##.125.28':139
'82.##.150.60':139
'82.##.241.237':139
'82.#6.11.8':139
'82.#6.93.0':139
'82.##.241.10':445
'82.##.222.220':445
'82.##.203.55':445
'82.#6.33.20':139
'82.##.199.67':139
'82.##.119.136':139
'82.#6.6.25':139
'82.##.125.79':139
'82.#6.16.32':139
'82.#6.32.39':139
'82.#6.38.38':139
'82.##.253.188':139
'82.##.12.253':139
'82.##.189.117':139
'82.##.133.38':139
'82.#6.95.11':139
'82.##.178.174':445
'82.##.219.177':445
'82.#6.42.60':445
'82.##.149.100':445
'82.##.104.24':445
'82.#6.38.38':445
'82.#6.16.32':445
'82.#6.32.39':445
'82.##.200.218':445
'82.##.39.200':445
'82.##.100.120':445
'82.##.37.194':445
'82.##.46.253':445
'82.#6.16.97':445
'82.##.100.223':445
'82.#6.77.30':445
'82.##.44.168':445
'82.##.201.253':445
'82.##.176.79':445
'82.#6.5.76':445
'82.##.14.144':445
'82.##.181.210':139
'82.##.138.90':445
'82.##.25.165':445
'82.##.249.100':445
'82.##.169.195':445
'82.#6.81.80':445
'82.##.25.154':445
'82.##.105.233':445
'82.##.49.236':445
'82.##.161.235':445
'82.##.236.161':445
'82.##.125.14':445
'82.#6.4.253':445
'82.##.11.230':445
'82.##.51.225':445
'82.#6.37.64':445
'82.#6.67.71':445
'82.##.94.209':445
'82.#6.85.94':445
'82.##.208.197':445
'82.##.231.149':445
'82.##.227.79':445
'82.##.16.119':139
'82.##.74.134':139
'82.##.202.114':139
'82.##.242.94':139
'82.#6.94.60':139
'82.##.111.42':139
'82.##.231.79':139
'82.##.106.19':139
'82.#6.84.75':139
'82.##.237.83':139
'82.##.220.195':139
'82.##.40.222':445
'82.#6.20.84':445
'82.##.68.163':445
'82.##.77.111':445
'82.##.254.90':445
'82.##.238.229':445
'82.#6.31.56':139
'82.##.184.74':445
'82.##.254.163':445
'82.##.219.183':445
'82.##.147.244':445
'82.##.125.14':139
'82.##.169.195':139
'82.#6.85.94':139
'82.##.208.197':139
'82.##.94.209':139
'82.##.25.165':139
'82.##.161.235':139
'82.##.138.90':139
'82.#6.81.80':139
'82.##.249.100':139
'82.##.227.79':139
'82.##.147.244':139
'82.#6.37.64':139
'82.#6.51.63':139
'82.##.227.117':139
'82.##.62.228':139
'82.##.11.230':139
'82.##.231.149':139
'82.#6.4.253':139
'82.#6.67.71':139
'82.##.51.225':139
'82.##.141.245':445
'82.#6.28.60':445
'82.##.162.242':445
'82.##.184.74':139
'82.##.238.229':139
'82.##.62.228':445
'82.#6.51.63':445
'82.##.227.117':445
'82.##.216.160':445
'82.##.181.210':445
'82.##.219.183':139
'82.##.105.233':139
'82.##.77.111':139
'82.##.25.154':139
'82.##.236.161':139
'82.##.49.236':139
'82.#6.20.84':139
'82.##.254.163':139
'82.##.40.222':139
'82.##.254.90':139
'82.##.68.163':139
'82.##.47.228':445
'82.##.134.47':445
'82.##.130.143':445
'82.##.87.215':445
'82.#6.200.0':445
'82.##.30.246':445
'82.##.33.157':445
'82.##.247.172':445
'82.##.211.133':445
'82.#6.9.18':445
'82.##.211.177':445
'82.#6.95.8':139
'82.##.236.99':139
'82.#6.77.43':139
'82.#6.33.93':139
'82.##.218.32':139
'82.##.169.94':445
'82.##.45.200':445
'82.##.123.171':139
'82.#6.81.25':139
'82.##.140.234':139
'82.##.125.10':445
'82.##.63.107':445
'82.#6.9.226':445
'82.##.12.133':445
'82.##.225.221':445
'82.##.213.115':445
'82.##.139.169':445
'82.#6.99.50':445
'82.##.154.63':445
'82.##.50.152':445
'82.#6.1.186':445
'82.##.145.32':445
'82.#6.126.0':445
'82.##.219.139':445
'82.##.144.219':445
'82.##.140.50':445
'82.#6.16.73':445
'82.#6.43.54':445
'82.#6.41.93':445
'82.#6.20.52':445
'82.##.56.146':445
'82.##.228.128':139
'82.##.140.50':139
'82.##.219.139':139
'82.##.144.219':139
'82.##.30.246':139
'82.##.33.157':139
'82.##.56.146':139
'82.#6.41.93':139
'82.#6.20.52':139
'82.##.145.32':139
'82.#6.126.0':139
'82.##.247.172':139
'82.#6.200.0':139
'82.##.211.177':139
'82.##.87.215':139
'82.##.45.200':139
'82.##.169.94':139
'82.##.211.133':139
'82.#6.9.18':139
'82.##.134.47':139
'82.##.130.143':139
'82.##.47.228':139
'82.#6.17.1':139
'82.##.195.112':139
'82.##.49.106':139
'82.##.213.115':139
'82.##.139.169':139
'82.##.19.164':139
'82.##.177.177':139
'82.##.216.28':139
'82.##.242.216':139
'82.##.206.234':139
'82.#6.99.50':139
'82.##.12.133':139
'82.##.225.221':139
'82.#6.1.186':139
'82.#6.16.73':139
'82.#6.43.54':139
'82.##.154.63':139
'82.##.50.152':139
'82.##.63.107':139
'82.#6.9.226':139
'82.##.125.10':139
'82.##.49.106':445
'82.##.58.225':445
'82.##.98.106':445
'82.##.221.116':445
'82.##.187.81':445
'82.##.145.248':445
'82.##.100.151':445
'82.#6.14.86':445
'82.##.18.247':445
'82.#6.43.58':445
'82.#6.57.74':445
'82.##.136.28':445
'82.##.98.106':139
'82.#6.43.58':139
'82.##.58.225':139
'82.##.145.248':139
'82.##.221.116':139
'82.#6.14.86':139
'82.##.72.230':445
'82.##.100.151':139
'82.#6.57.74':139
'82.##.18.247':139
'82.##.149.100':139
'82.##.104.24':139
'82.##.100.120':139
'82.##.44.168':139
'82.##.201.253':139
'82.##.200.218':139
'82.##.39.200':139
'82.##.219.177':139
'82.#6.42.60':139
'82.##.178.174':139
'82.##.176.79':139
'82.##.100.223':139
'82.#6.77.30':139
'82.##.222.220':139
'82.##.203.55':139
'82.##.241.10':139
'82.#6.5.76':139
'82.##.14.144':139
'82.##.46.253':139
'82.#6.16.97':139
'82.##.37.194':139
'82.##.187.81':139
'82.##.140.234':445
'82.##.123.171':445
'82.#6.81.25':445
'82.#6.95.8':445
'82.##.236.99':445
'82.##.130.143':9988
'82.#6.9.18':9988
'82.##.87.215':9988
'82.##.169.94':9988
'82.#6.200.0':9988
'82.#6.77.43':445
'82.##.206.234':445
'82.##.216.28':445
'82.##.242.216':445
'82.#6.17.1':445
'82.##.195.112':445
'82.#6.33.93':445
'82.##.218.32':445
'82.##.228.128':445
'82.##.19.164':445
'82.##.177.177':445
'82.##.132.67':139
'82.##.206.237':139
'82.##.89.176':139
'82.#6.9.226':9988
'82.#6.20.52':9988
'82.##.72.230':139
'82.##.136.28':139
'82.##.206.237':445
'82.##.89.176':445
'82.##.132.67':445
'82.##.225.221':9988
'82.##.144.219':9988
'82.##.140.50':9988
'82.##.33.157':9988
'82.##.247.172':9988
'82.##.30.246':9988
'82.#6.43.54':9988
'82.#6.16.73':9988
'82.##.56.146':9988
'82.##.219.139':9988
'82.##.145.32':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней