Trojan.Starman.6073

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.##.11.163':445
'80.##.144.162':445
'80.#5.18.58':445
'80.##.133.253':445
'80.##.224.145':445
'80.##.139.189':445
'80.##.207.17':445
'80.##.15.101':445
'80.##.189.24':445
'80.##.149.18':445
'80.##.192.148':445
'80.##.44.193':445
'80.##.132.116':445
'80.##.40.155':445
'80.##.46.110':445
'80.##.154.191':445
'80.##.154.166':139
'80.##.175.23':445
'80.##.35.178':445
'80.##.31.251':445
'80.#5.4.177':445
'80.##.83.105':445
'80.##.213.98':445
'80.##.106.52':445
'80.##.28.135':445
'80.##.113.17':445
'80.##.157.110':445
'80.##.238.236':445
'80.#5.18.78':445
'80.##.207.225':445
'80.#5.70.53':445
'80.#5.88.56':445
'80.##.206.82':139
'80.#5.58.30':139
'80.##.149.58':139
'80.#5.98.32':445
'80.##.251.103':445
'80.##.154.166':445
'80.##.221.77':445
'80.##.225.97':445
'80.#5.4.170':445
'80.#5.95.39':445
'80.##.212.111':445
'80.##.224.79':445
'80.##.158.244':445
'80.#5.60.1':445
'80.##.34.105':445
'80.##.29.218':445
'80.##.14.133':445
'80.##.198.219':445
'80.#5.1.85':445
'80.##.251.103':139
'80.##.83.105':139
'80.##.132.116':139
'80.##.133.253':139
'80.##.28.135':139
'80.##.31.251':139
'80.#5.4.177':139
'80.##.144.162':139
'80.#5.18.58':139
'80.##.149.18':139
'80.##.224.145':139
'80.##.139.189':139
'80.##.11.163':139
'80.##.106.52':139
'80.##.131.99':445
'80.##.11.114':445
'80.##.30.183':445
'80.##.11.114':139
'80.##.30.183':139
'80.#5.4.180':445
'80.##.46.110':139
'80.##.154.191':139
'80.##.213.98':139
'80.##.175.23':139
'80.##.35.178':139
'80.##.40.155':139
'80.##.192.148':139
'80.##.29.218':139
'80.##.221.77':139
'80.##.207.225':139
'80.#5.1.85':139
'80.#5.60.1':139
'80.##.34.105':139
'80.##.238.236':139
'80.#5.18.78':139
'80.#5.98.32':139
'80.#5.70.53':139
'80.#5.88.56':139
'80.##.157.110':139
'80.##.198.219':139
'80.##.189.24':139
'80.##.113.17':139
'80.##.212.111':139
'80.##.44.193':139
'80.##.207.17':139
'80.##.15.101':139
'80.#5.4.170':139
'80.#5.95.39':139
'80.##.14.133':139
'80.##.224.79':139
'80.##.158.244':139
'80.##.225.97':139
'80.##.250.149':445
'80.#5.23.53':445
'80.##.24.194':445
'80.##.83.119':445
'80.#5.64.54':445
'80.##.189.94':445
'80.##.147.60':445
'80.##.51.121':445
'80.#5.64.18':445
'80.#5.53.96':445
'80.##.96.161':445
'80.##.174.18':445
'80.#5.16.19':445
'80.##.43.207':445
'80.#5.75.14':445
'80.##.155.173':445
'80.##.166.43':445
'80.##.218.212':445
'80.##.125.126':445
'80.##.148.226':445
'80.##.247.199':445
'80.##.21.240':445
'80.##.178.252':445
'80.##.102.23':445
'80.##.28.222':445
'80.##.121.63':445
'80.#5.28.82':445
'80.##.196.37':445
'80.##.243.195':445
'80.##.239.235':445
'80.#5.49.11':445
'80.#5.233.0':445
'80.##.43.235':139
'80.##.128.36':139
'80.##.161.179':139
'80.#5.3.244':445
'80.#5.192.3':445
'80.##.124.192':139
'80.#5.17.32':445
'80.##.84.132':445
'80.##.240.238':445
'80.#5.5.109':445
'80.##.58.121':445
'80.#5.33.87':445
'80.##.179.99':445
'80.##.37.175':445
'80.##.167.80':445
'80.##.252.128':445
'80.##.197.55':445
'80.##.240.154':445
'80.#5.33.2':445
'80.#5.192.3':139
'80.##.21.240':139
'80.#5.16.19':139
'80.##.83.119':139
'80.##.28.222':139
'80.##.148.226':139
'80.##.247.199':139
'80.#5.23.53':139
'80.##.24.194':139
'80.#5.53.96':139
'80.#5.64.54':139
'80.##.189.94':139
'80.##.250.149':139
'80.##.102.23':139
'80.##.149.58':445
'80.##.138.97':445
'80.##.166.43':139
'80.##.138.97':139
'80.##.206.82':445
'80.#5.58.30':445
'80.#5.75.14':139
'80.##.155.173':139
'80.##.178.252':139
'80.##.218.212':139
'80.##.125.126':139
'80.##.43.207':139
'80.##.96.161':139
'80.##.252.128':139
'80.#5.17.32':139
'80.##.239.235':139
'80.#5.33.2':139
'80.##.37.175':139
'80.##.167.80':139
'80.##.196.37':139
'80.##.243.195':139
'80.#5.3.244':139
'80.#5.49.11':139
'80.#5.233.0':139
'80.#5.28.82':139
'80.##.240.154':139
'80.#5.64.18':139
'80.##.121.63':139
'80.##.58.121':139
'80.##.174.18':139
'80.##.147.60':139
'80.##.51.121':139
'80.##.240.238':139
'80.#5.5.109':139
'80.##.197.55':139
'80.#5.33.87':139
'80.##.179.99':139
'80.##.84.132':139
'80.##.104.124':445
'80.##.118.240':445
'80.##.137.197':445
'80.##.88.215':445
'80.##.171.222':445
'80.##.124.53':445
'80.#5.28.46':445
'80.##.10.105':445
'80.##.140.51':445
'80.#5.5.228':445
'80.##.232.123':445
'80.##.210.70':445
'80.##.61.135':445
'80.##.245.16':445
'80.#5.95.82':445
'80.##.62.254':445
'80.##.141.151':445
'80.##.116.89':445
'80.##.223.125':445
'80.#5.30.46':445
'80.##.27.244':445
'80.##.37.220':445
'80.##.184.195':445
'80.##.25.196':445
'80.##.169.202':445
'80.##.191.103':445
'80.#5.71.87':445
'80.#5.93.71':445
'80.##.203.92':445
'80.##.118.68':445
'80.#5.84.97':445
'80.##.93.247':445
'80.##.129.99':445
'80.##.142.195':445
'80.##.223.125':9988
'80.##.202.203':445
'80.##.179.26':445
'80.##.107.138':445
'80.#5.85.56':445
'80.#5.51.18':445
'80.##.35.124':445
'80.##.123.246':445
'80.##.255.250':445
'80.#5.202.9':445
'80.##.233.242':445
'80.#5.63.96':445
'80.##.121.35':445
'80.##.149.173':445
'80.##.240.123':445
'80.##.197.240':445
'80.##.84.145':445
'80.##.38.222':445
'80.##.124.53':139
'80.##.104.124':139
'80.##.118.240':139
'80.##.61.135':139
'80.##.88.215':139
'80.##.171.222':139
'80.##.210.70':139
'80.#5.28.46':139
'80.##.10.105':139
'80.##.137.197':139
'80.#5.5.228':139
'80.##.232.123':139
'80.##.37.220':139
'80.##.38.222':139
'80.##.116.89':139
'80.##.245.16':139
'80.#5.95.82':139
'80.##.141.151':139
'80.##.223.125':139
'80.##.169.202':139
'80.#5.30.46':139
'80.##.27.244':139
'80.##.62.254':139
'80.##.184.195':139
'80.##.25.196':139
'80.##.140.51':139
'80.##.93.247':139
'80.#5.71.87':139
'80.#5.93.71':139
'80.#5.85.56':139
'80.##.118.68':139
'80.#5.84.97':139
'80.##.107.138':139
'80.##.129.99':139
'80.##.142.195':139
'80.##.203.92':139
'80.##.202.203':139
'80.##.179.26':139
'80.##.149.173':139
'80.##.233.242':139
'80.#5.51.18':139
'80.##.35.124':139
'80.##.191.103':139
'80.##.255.250':139
'80.#5.202.9':139
'80.##.84.145':139
'80.#5.63.96':139
'80.##.121.35':139
'80.##.123.246':139
'80.##.240.123':139
'80.##.197.240':139
'80.##.60.182':445
'80.##.72.145':445
'80.#5.9.203':445
'80.##.177.24':445
'80.##.192.241':445
'80.##.123.152':445
'80.##.219.99':445
'80.##.95.185':445
'80.#5.0.152':445
'80.#5.1.180':445
'80.##.249.186':445
'80.#5.60.66':445
'80.##.71.119':445
'80.#5.84.15':445
'80.##.166.192':445
'80.##.124.243':445
'80.#5.82.18':139
'80.#5.65.5':139
'80.#5.78.41':445
'80.##.26.126':445
'80.##.202.26':445
'80.##.112.94':445
'80.##.58.102':445
'80.##.56.235':445
'80.##.205.212':445
'80.##.44.164':445
'80.##.36.196':445
'80.##.187.202':445
'80.##.79.188':445
'80.#5.19.14':445
'80.#5.6.26':445
'80.##.195.82':445
'80.#5.65.5':445
'80.#5.4.180':139
'80.##.131.99':139
'80.#5.67.80':445
'80.#5.48.67':445
'80.#5.82.18':445
'80.#5.36.48':445
'80.##.152.166':445
'80.##.252.27':445
'80.##.122.196':445
'80.##.228.185':445
'80.#5.9.141':445
'80.#5.167.9':445
'80.#5.7.3':445
'80.##.94.168':445
'80.##.171.140':445
'80.##.66.122':445
'80.##.250.65':445
'80.##.33.168':445
'80.#5.48.67':139
'80.##.112.94':139
'80.##.71.119':139
'80.##.177.24':139
'80.##.205.212':139
'80.##.26.126':139
'80.##.202.26':139
'80.##.72.145':139
'80.#5.9.203':139
'80.#5.1.180':139
'80.##.192.241':139
'80.##.123.152':139
'80.##.60.182':139
'80.##.56.235':139
'80.##.88.215':9988
'80.##.124.53':9988
'80.##.202.203':9988
'80.##.141.151':9988
'80.##.62.254':9988
'80.##.245.16':9988
'80.##.166.192':139
'80.##.124.243':139
'80.##.58.102':139
'80.##.129.99':9988
'80.#5.78.41':139
'80.#5.84.15':139
'80.##.249.186':139
'80.##.171.140':139
'80.#5.36.48':139
'80.#5.19.14':139
'80.##.33.168':139
'80.#5.7.3':139
'80.##.94.168':139
'80.##.187.202':139
'80.##.79.188':139
'80.#5.67.80':139
'80.#5.6.26':139
'80.##.195.82':139
'80.##.36.196':139
'80.##.250.65':139
'80.#5.0.152':139
'80.##.44.164':139
'80.##.228.185':139
'80.#5.60.66':139
'80.##.219.99':139
'80.##.95.185':139
'80.##.252.27':139
'80.##.122.196':139
'80.##.66.122':139
'80.#5.9.141':139
'80.#5.167.9':139
'80.##.152.166':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней