Trojan.Starman.6067

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##7.20.51':139
'65.##7.39.207':139
'65.##7.183.92':139
'65.##7.0.104':139
'65.##7.20.43':139
'65.##7.240.126':139
'65.##7.91.83':139
'65.##7.116.12':139
'65.##7.15.31':139
'65.##7.49.241':139
'65.##7.82.50':139
'65.##7.190.94':139
'65.##7.39.85':139
'65.##7.227.160':139
'65.##7.189.37':139
'65.##7.6.177':139
'65.##7.30.212':139
'65.##7.134.227':139
'65.##7.117.246':139
'65.##7.220.41':139
'65.##7.145.54':139
'65.##7.56.12':139
'65.##7.53.177':139
'65.##7.181.25':445
'65.##7.24.32':445
'65.##7.182.110':445
'65.##7.234.202':139
'65.##7.65.83':445
'65.##7.121.24':445
'65.##7.14.131':445
'65.##7.45.15':445
'65.##7.255.230':445
'65.##7.54.146':445
'65.##7.231.189':445
'65.##7.143.147':139
'65.##7.249.200':139
'65.##7.164.142':139
'65.##7.35.107':139
'65.#87.8.38':139
'65.##7.37.23':139
'65.##7.235.133':139
'65.##7.86.18':139
'65.##7.129.242':139
'65.##7.221.202':139
'65.##7.42.235':139
'65.##7.96.252':139
'65.##7.6.116':445
'65.#87.29.7':445
'65.##7.126.103':445
'65.##7.39.129':445
'65.##7.39.213':445
'65.##7.94.29':445
'65.##7.76.208':445
'65.##7.152.91':445
'65.##7.159.219':445
'65.##7.42.19':445
'65.##7.59.80':445
'65.##7.170.65':445
'65.##7.108.47':445
'65.##7.202.23':445
'65.##7.47.223':445
'65.##7.157.156':445
'65.##7.231.223':445
'65.##7.70.100':445
'65.##7.202.153':445
'65.##7.15.82':445
'65.##7.202.170':445
'65.##7.36.104':445
'65.##7.81.51':445
'65.##7.255.230':139
'65.##7.14.131':139
'65.##7.231.189':139
'65.##7.121.24':139
'65.##7.54.146':139
'65.##7.45.15':139
'65.##7.229.207':139
'65.##7.211.181':139
'65.##7.73.215':139
'65.##7.180.236':139
'65.##7.94.39':139
'65.##7.24.32':139
'65.##7.11.250':445
'65.##7.135.169':445
'65.##7.210.174':445
'65.##7.138.152':445
'65.##7.49.148':445
'65.##7.88.54':445
'65.##7.182.110':139
'65.##7.181.25':139
'65.##7.65.83':139
'65.##7.109.126':445
'65.##7.55.204':445
'65.##7.196.198':139
'65.##7.234.171':139
'65.##7.253.240':139
'65.##7.19.92':139
'65.##7.224.135':139
'65.#87.9.50':139
'65.##7.130.103':139
'65.#87.6.4':139
'65.##7.78.199':139
'65.##7.169.154':139
'65.##7.96.169':139
'65.##7.28.204':139
'65.##7.185.124':139
'65.##7.154.185':139
'65.##7.175.1':139
'65.##7.114.137':139
'65.##7.126.85':139
'65.##7.35.131':139
'65.##7.123.114':139
'65.##7.146.54':139
'65.##7.159.50':139
'65.##7.27.82':139
'65.##7.10.100':139
'65.##7.69.181':139
'65.##7.249.69':139
'65.##7.65.20':139
'65.##7.166.69':139
'65.##7.162.14':139
'65.##7.228.248':139
'65.##7.186.113':139
'65.##7.84.127':139
'65.##7.163.120':139
'65.##7.249.228':139
'65.##7.164.87':139
'65.##7.61.145':139
'65.##7.148.125':139
'65.##7.148.234':139
'65.##7.82.128':139
'65.#87.54.6':139
'65.##7.141.223':139
'65.##7.170.149':139
'65.##7.99.89':139
'65.##7.20.133':139
'65.#87.90.7':139
'65.##7.228.47':139
'65.##7.27.200':139
'65.##7.220.41':445
'65.##7.190.94':445
'65.##7.117.246':445
'65.##7.53.177':445
'65.##7.145.54':445
'65.##7.0.104':445
'65.##7.39.207':445
'65.##7.240.126':445
'65.##7.20.51':445
'65.##7.20.43':445
'65.##7.183.92':445
'65.##7.56.12':445
'65.##7.229.207':445
'65.##7.211.181':445
'65.##7.73.215':445
'65.##7.180.236':445
'65.##7.94.39':445
'65.##7.6.177':445
'65.##7.227.160':445
'65.##7.134.227':445
'65.##7.39.85':445
'65.##7.30.212':445
'65.##7.189.37':445
'65.##7.129.242':445
'65.##7.143.147':445
'65.##7.86.18':445
'65.##7.96.252':445
'65.##7.221.202':445
'65.##7.234.202':445
'65.#87.7.45':139
'65.##7.72.214':139
'65.##7.94.224':139
'65.##7.160.131':139
'65.##7.227.170':139
'65.##7.42.235':445
'65.##7.91.83':445
'65.##7.116.12':445
'65.##7.15.31':445
'65.##7.49.241':445
'65.##7.82.50':445
'65.#87.8.38':445
'65.##7.164.142':445
'65.##7.235.133':445
'65.##7.249.200':445
'65.##7.37.23':445
'65.##7.35.107':445
'65.##7.110.193':445
'65.##7.159.244':445
'65.##7.235.78':445
'65.##7.102.39':445
'65.##7.70.195':445
'65.##7.39.71':445
'65.##7.29.137':445
'65.##7.214.18':445
'65.##7.114.63':445
'65.##7.55.132':445
'65.##7.220.152':445
'65.##7.125.220':445
'65.##7.124.160':445
'65.##7.193.93':139
'65.##7.5.243':139
'65.##7.93.101':139
'65.##7.180.183':139
'65.##7.101.180':139
'65.#87.6.74':445
'65.##7.151.251':445
'65.##7.84.178':445
'65.##7.170.234':445
'65.##7.61.171':445
'65.##7.234.61':445
'65.##7.61.174':445
'65.##7.34.183':445
'65.##7.39.143':445
'65.##7.60.15':445
'65.##7.17.227':445
'65.##7.197.187':445
'65.##7.1.129':445
'65.##7.105.30':445
'65.##7.161.142':445
'65.##7.219.196':445
'65.##7.141.230':445
'65.##7.79.81':445
'65.#87.95.5':445
'65.##7.75.16':445
'65.##7.38.160':445
'65.##7.118.114':445
'65.##7.131.33':445
'65.##7.69.59':445
'65.##7.18.27':445
'65.##7.131.111':445
'65.##7.147.74':445
'65.##7.115.39':445
'65.##7.216.106':445
'65.##7.55.132':139
'65.##7.214.18':139
'65.##7.125.220':139
'65.##7.29.137':139
'65.##7.220.152':139
'65.##7.114.63':139
'65.#87.95.5':139
'65.##7.75.16':139
'65.##7.38.160':139
'65.##7.118.114':139
'65.##7.131.33':139
'65.##7.235.78':139
'65.##7.151.251':139
'65.##7.61.171':139
'65.##7.234.61':139
'65.##7.170.234':139
'65.#87.6.74':139
'65.##7.84.178':139
'65.##7.102.39':139
'65.##7.159.244':139
'65.##7.39.71':139
'65.##7.124.160':139
'65.##7.70.195':139
'65.##7.161.142':139
'65.##7.1.129':139
'65.##7.141.230':139
'65.##7.197.187':139
'65.##7.219.196':139
'65.##7.105.30':139
'65.##7.144.164':139
'65.##7.126.12':139
'65.##7.237.210':139
'65.##7.19.58':139
'65.##7.211.18':139
'65.##7.34.183':139
'65.##7.147.74':139
'65.##7.18.27':139
'65.##7.216.106':139
'65.##7.69.59':139
'65.##7.115.39':139
'65.##7.131.111':139
'65.##7.39.143':139
'65.##7.61.174':139
'65.##7.17.227':139
'65.##7.79.81':139
'65.##7.60.15':139
'65.##7.59.80':139
'65.##7.159.219':139
'65.##7.42.19':139
'65.#87.29.7':139
'65.##7.94.29':139
'65.##7.76.208':139
'65.##7.210.174':139
'65.##7.11.250':139
'65.##7.49.148':139
'65.##7.152.91':139
'65.##7.138.152':139
'65.##7.6.116':139
'65.##7.81.51':139
'65.##7.202.170':139
'65.##7.36.104':139
'65.##7.202.23':139
'65.##7.70.100':139
'65.##7.202.153':139
'65.##7.39.213':139
'65.##7.126.103':139
'65.##7.39.129':139
'65.##7.15.82':139
'65.##7.170.65':139
'65.##7.72.78':445
'65.##7.42.245':445
'65.##7.107.246':445
'65.##7.72.247':445
'65.##7.13.232':445
'65.##7.123.175':445
'65.##7.61.193':445
'65.##7.124.97':445
'65.##7.3.229':445
'65.##7.25.128':445
'65.##7.177.106':445
'65.##7.165.96':445
'65.##7.55.204':139
'65.##7.92.70':445
'65.##7.109.126':139
'65.##7.135.169':139
'65.##7.88.54':139
'65.##7.53.200':445
'65.##7.206.133':445
'65.##7.147.206':445
'65.##7.216.240':445
'65.##7.101.0':445
'65.##7.25.41':445
'65.##7.197.187':9988
'65.##7.141.230':9988
'65.##7.79.81':9988
'65.#87.6.74':9988
'65.##7.69.59':9988
'65.##7.1.129':9988
'65.##7.5.243':9988
'65.##7.92.70':139
'65.##7.93.101':9988
'65.##7.19.58':9988
'65.##7.180.183':9988
'65.##7.70.195':9988
'65.##7.144.164':445
'65.##7.126.12':445
'65.##7.237.210':445
'65.##7.19.58':445
'65.##7.211.18':445
'65.##7.180.183':445
'65.##7.5.243':445
'65.##7.151.251':9988
'65.##7.193.93':445
'65.##7.101.180':445
'65.##7.93.101':445
'65.##7.3.229':139
'65.##7.61.193':139
'65.##7.177.106':139
'65.##7.123.175':139
'65.##7.25.128':139
'65.##7.124.97':139
'65.##7.47.223':139
'65.##7.108.47':139
'65.##7.231.223':139
'65.##7.110.193':139
'65.##7.157.156':139
'65.##7.42.245':139
'65.##7.216.240':139
'65.##7.206.133':139
'65.##7.25.41':139
'65.##7.53.200':139
'65.##7.101.0':139
'65.##7.147.206':139
'65.##7.107.246':139
'65.##7.72.78':139
'65.##7.13.232':139
'65.##7.165.96':139
'65.##7.72.247':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней