Trojan.Starman.6061

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'81.##.137.196':139
'81.##.100.196':139
'81.#0.91.23':139
'81.##.181.252':139
'81.#0.23.92':139
'81.##.23.108':139
'81.#0.31.23':139
'81.##.107.187':139
'81.#0.51.63':139
'81.##.187.46':139
'81.##.65.100':139
'81.#0.54.31':139
'81.##.207.82':139
'81.##.197.228':139
'81.#0.134.3':139
'81.##.192.98':139
'81.##.160.192':139
'81.##.44.201':139
'81.##.192.157':139
'81.##.255.178':139
'81.##.220.30':139
'81.##.160.192':445
'81.##.181.252':445
'81.##.192.98':445
'81.##.255.178':445
'81.##.44.201':445
'81.##.100.196':445
'81.#0.51.63':445
'81.##.137.196':445
'81.#0.23.92':445
'81.#0.91.23':445
'81.##.99.168':445
'81.##.197.228':445
'81.#0.98.8':445
'81.##.241.235':445
'81.##.71.253':445
'81.#0.54.31':445
'81.##.192.157':445
'81.##.65.100':445
'81.#0.134.3':445
'81.##.207.82':445
'81.##.202.122':445
'81.##.162.65':445
'81.##.100.95':445
'81.##.193.219':139
'81.##.80.120':445
'81.#0.9.6':445
'81.##.117.67':445
'81.##.235.107':445
'81.##.53.188':445
'81.##.108.34':445
'81.##.222.113':139
'81.##.136.95':139
'81.##.114.160':139
'81.##.103.30':139
'81.##.71.152':139
'81.##.47.117':139
'81.#0.87.22':139
'81.#0.79.42':139
'81.#0.9.17':139
'81.#0.86.9':139
'81.##.159.117':445
'81.##.47.117':445
'81.#0.87.22':445
'81.#0.79.42':445
'81.#0.9.17':445
'81.#0.86.9':445
'81.#0.98.8':139
'81.##.99.168':139
'81.##.71.253':139
'81.##.193.219':445
'81.##.241.235':139
'81.##.90.202':445
'81.##.202.64':445
'81.##.133.219':445
'81.##.250.158':445
'81.##.229.250':445
'81.##.222.113':445
'81.##.136.95':445
'81.##.114.160':445
'81.##.103.30':445
'81.##.71.152':445
'81.##.38.124':445
'81.##.11.127':445
'81.#0.82.42':445
'81.##.54.142':445
'81.##.173.54':445
'81.#0.170.2':139
'81.##.56.177':139
'81.##.65.131':139
'81.#0.66.51':445
'81.##.119.63':139
'81.##.133.172':445
'81.##.29.214':445
'81.##.203.160':445
'81.##.175.191':445
'81.#0.23.58':445
'81.##.11.158':445
'81.#0.40.6':445
'81.##.61.245':445
'81.##.10.213':445
'81.##.38.214':445
'81.##.81.179':139
'81.#0.118.6':139
'81.##.232.112':139
'81.#0.8.176':139
'81.##.155.130':139
'81.##.207.43':139
'81.##.123.121':139
'81.##.146.100':139
'81.#0.57.44':139
'81.##.186.48':139
'81.##.16.186':139
'81.##.98.203':139
'81.##.95.167':139
'81.##.202.177':139
'81.##.253.196':139
'81.#0.178.6':139
'81.##.250.127':139
'81.##.83.156':139
'81.#0.34.62':139
'81.##.36.187':139
'81.##.152.37':139
'81.##.62.149':139
'81.#0.59.63':139
'81.##.148.190':139
'81.##.178.65':139
'81.#0.83.43':139
'81.##.133.172':139
'81.##.29.214':139
'81.##.203.160':139
'81.##.175.191':139
'81.#0.23.58':139
'81.#0.31.23':445
'81.##.220.30':445
'81.##.23.108':445
'81.##.187.46':445
'81.##.107.187':445
'81.#0.12.32':139
'81.##.255.11':139
'81.#0.61.38':139
'81.##.244.219':139
'81.##.66.240':139
'81.##.10.213':139
'81.#0.12.32':445
'81.##.255.11':445
'81.#0.61.38':445
'81.##.244.219':445
'81.##.66.240':445
'81.##.62.149':445
'81.#0.59.63':445
'81.##.148.190':445
'81.##.178.65':445
'81.#0.83.43':445
'81.#0.40.6':139
'81.##.54.142':139
'81.##.11.158':139
'81.##.38.214':139
'81.##.61.245':139
'81.##.11.127':139
'81.#0.66.51':139
'81.##.38.124':139
'81.##.173.54':139
'81.#0.82.42':139
'81.##.202.64':139
'81.##.134.52':445
'81.##.90.168':445
'81.##.19.152':445
'81.##.175.39':445
'81.#0.40.10':445
'81.##.154.232':445
'81.##.187.242':445
'81.#0.72.26':445
'81.##.182.210':445
'81.#0.96.65':445
'81.##.71.113':139
'81.##.184.220':139
'81.##.245.20':139
'81.##.162.204':139
'81.##.148.90':139
'81.##.182.170':139
'81.#0.52.47':139
'81.#0.9.122':139
'81.##.50.119':139
'81.##.91.153':139
'81.##.138.168':445
'81.#0.42.91':445
'81.##.253.122':445
'81.##.223.170':445
'81.##.197.55':445
'81.##.172.187':445
'81.##.158.106':445
'81.##.219.189':445
'81.##.120.24':445
'81.#0.8.89':445
'81.#0.190.0':445
'81.##.202.249':445
'81.##.32.126':445
'81.##.134.77':445
'81.##.125.138':445
'81.##.77.220':445
'81.#0.81.83':445
'81.##.213.131':445
'81.#0.77.29':445
'81.##.189.185':445
'81.##.12.253':445
'81.##.134.77':139
'81.##.202.249':139
'81.##.77.220':139
'81.##.138.168':139
'81.##.125.138':139
'81.#0.77.29':139
'81.#0.81.83':139
'81.##.12.253':139
'81.##.32.126':139
'81.##.189.185':139
'81.##.134.52':139
'81.##.90.168':139
'81.##.19.152':139
'81.#0.40.10':139
'81.##.175.39':139
'81.##.154.232':139
'81.##.187.242':139
'81.#0.72.26':139
'81.##.182.210':139
'81.#0.96.65':139
'81.##.213.131':139
'81.##.154.195':139
'81.##.18.108':139
'81.##.232.253':139
'81.#0.52.96':139
'81.#0.29.50':139
'81.##.158.71':139
'81.##.204.240':139
'81.##.217.70':139
'81.##.122.134':139
'81.#0.61.7':139
'81.#0.42.91':139
'81.##.253.122':139
'81.##.223.170':139
'81.##.197.55':139
'81.##.172.187':139
'81.##.158.106':139
'81.##.219.189':139
'81.##.120.24':139
'81.#0.8.89':139
'81.#0.190.0':139
'81.##.198.234':445
'81.##.131.59':445
'81.##.111.48':445
'81.#0.20.23':139
'81.#0.49.20':139
'81.#0.28.8':445
'81.##.97.175':445
'81.##.101.146':445
'81.##.178.79':445
'81.##.176.156':445
'81.#0.28.8':139
'81.##.97.175':139
'81.##.101.146':139
'81.##.178.79':139
'81.##.176.156':139
'81.##.90.205':139
'81.#0.23.57':139
'81.#0.66.55':139
'81.##.135.63':139
'81.##.94.157':139
'81.##.135.63':445
'81.#0.9.6':139
'81.##.117.67':139
'81.##.235.107':139
'81.##.53.188':139
'81.##.108.34':139
'81.##.133.219':139
'81.##.90.202':139
'81.##.229.250':139
'81.##.159.117':139
'81.##.250.158':139
'81.#0.23.57':445
'81.#0.20.23':445
'81.##.90.205':445
'81.##.94.157':445
'81.#0.66.55':445
'81.##.202.122':139
'81.##.162.65':139
'81.##.100.95':139
'81.#0.49.20':445
'81.##.80.120':139
'81.##.71.113':445
'81.##.184.220':445
'81.##.245.20':445
'81.##.162.204':445
'81.##.148.90':445
'81.##.182.170':445
'81.#0.52.47':445
'81.#0.9.122':445
'81.##.50.119':445
'81.##.91.153':445
'81.##.154.195':445
'81.##.18.108':445
'81.##.232.253':445
'81.#0.52.96':445
'81.#0.29.50':445
'81.##.158.71':445
'81.##.204.240':445
'81.##.217.70':445
'81.##.122.134':445
'81.#0.61.7':445
'81.##.134.52':9988
'81.##.219.189':9988
'81.##.18.108':9988
'81.#0.8.89':9988
'81.##.189.185':9988
'81.##.172.187':9988
'81.##.198.234':139
'81.##.131.59':139
'81.##.111.48':139
'81.#0.61.7':9988
'81.##.217.70':9988
'81.##.182.210':9988
'81.#0.96.65':9988
'81.##.90.168':9988
'81.#0.40.10':9988
'81.##.19.152':9988
'81.##.138.168':9988
'81.##.32.126':9988
'81.##.154.232':9988
'81.#0.72.26':9988
'81.##.187.242':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней