Trojan.Starman.6089

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##4.138.254':139
'12.##4.223.0':139
'12.##4.161.53':139
'12.##4.83.254':139
'12.##4.53.142':139
'12.##4.71.110':139
'12.##4.73.120':139
'12.##4.110.234':139
'12.##4.193.119':139
'12.##4.203.90':139
'12.##4.254.2':139
'12.##4.239.171':139
'12.##4.231.213':139
'12.##4.48.56':139
'12.##4.135.201':139
'12.##4.78.56':139
'12.##4.165.65':139
'12.##4.54.45':139
'12.#04.86.2':139
'12.##4.74.214':139
'12.##4.89.223':139
'12.##4.1.153':139
'12.#04.86.2':445
'12.##4.165.65':445
'12.##4.89.223':445
'12.##4.231.213':445
'12.##4.74.214':445
'12.##4.53.142':445
'12.##4.161.53':445
'12.##4.83.254':445
'12.##4.54.45':445
'12.##4.254.2':445
'12.##4.239.171':445
'12.##4.10.254':139
'12.##4.169.128':139
'12.##4.210.104':139
'12.##4.133.209':139
'12.##4.7.130':139
'12.##4.78.56':445
'12.##4.48.56':445
'12.##4.135.201':445
'12.#04.32.7':139
'12.##4.18.55':445
'12.##4.132.150':139
'12.##4.255.79':139
'12.##4.116.152':139
'12.##4.20.173':139
'12.##4.128.173':139
'12.##4.18.186':139
'12.##4.246.197':445
'12.##4.204.85':139
'12.##4.26.172':139
'12.##4.50.17':139
'12.##4.174.252':139
'12.##4.43.242':139
'12.##4.78.79':139
'12.##4.165.125':139
'12.##4.139.88':139
'12.##4.156.139':139
'12.##4.226.182':139
'12.##4.130.90':139
'12.##4.183.6':139
'12.##4.242.141':139
'12.#04.7.75':139
'12.##4.88.246':445
'12.##4.132.150':445
'12.##4.255.79':445
'12.##4.116.152':445
'12.##4.20.173':445
'12.##4.128.173':445
'12.##4.18.186':445
'12.##4.18.55':139
'12.##4.204.85':445
'12.##4.26.172':445
'12.##4.50.17':445
'12.##4.174.252':445
'12.##4.43.242':445
'12.##4.78.79':445
'12.##4.165.125':445
'12.##4.139.88':445
'12.##4.156.139':445
'12.##4.226.182':445
'12.##4.130.90':445
'12.##4.183.6':445
'12.##4.242.141':445
'12.#04.7.75':445
'12.##4.138.254':445
'12.##4.58.18':139
'12.##4.41.209':139
'12.##4.82.151':445
'12.##4.20.169':445
'12.##4.135.211':445
'12.##4.206.120':139
'12.##4.2.207':139
'12.##4.120.220':139
'12.##4.19.239':139
'12.##4.101.39':139
'12.##4.237.93':445
'12.##4.60.83':445
'12.##4.25.250':445
'12.##4.13.136':445
'12.##4.114.11':445
'12.##4.136.114':445
'12.##4.81.218':445
'12.##4.148.4':445
'12.##4.218.189':445
'12.##4.8.226':445
'12.##4.110.44':445
'12.##4.154.3':139
'12.##4.38.188':139
'12.##4.234.107':139
'12.##4.123.254':139
'12.##4.106.96':139
'12.##4.55.73':139
'12.##4.167.14':139
'12.##4.126.164':139
'12.##4.13.223':139
'12.##4.46.181':139
'12.##4.15.151':139
'12.##4.97.21':139
'12.##4.78.146':139
'12.##4.76.173':139
'12.##4.10.67':139
'12.##4.170.154':139
'12.##4.16.10':139
'12.##4.62.238':139
'12.##4.21.63':139
'12.##4.190.81':139
'12.##4.94.76':139
'12.##4.50.128':139
'12.##4.133.103':139
'12.##4.73.80':139
'12.##4.238.246':139
'12.##4.169.128':445
'12.#04.32.7':445
'12.##4.153.241':139
'12.##4.11.154':139
'12.##4.90.90':139
'12.##4.33.147':139
'12.##4.129.231':139
'12.##4.10.254':445
'12.##4.110.234':445
'12.##4.71.110':445
'12.##4.203.90':445
'12.##4.223.0':445
'12.##4.193.119':445
'12.##4.7.130':445
'12.##4.210.104':445
'12.##4.133.209':445
'12.##4.73.120':445
'12.##4.1.153':445
'12.##4.114.11':139
'12.##4.133.103':445
'12.##4.73.80':445
'12.##4.238.246':445
'12.##4.135.211':139
'12.##4.82.151':139
'12.##4.153.241':445
'12.##4.11.154':445
'12.##4.90.90':445
'12.##4.33.147':445
'12.##4.129.231':445
'12.##4.20.169':139
'12.##4.25.250':139
'12.##4.8.226':139
'12.##4.60.83':139
'12.##4.136.114':139
'12.##4.13.136':139
'12.##4.148.4':139
'12.##4.237.93':139
'12.##4.81.218':139
'12.##4.110.44':139
'12.##4.218.189':139
'12.##4.118.116':445
'12.##4.181.165':445
'12.##4.23.239':445
'12.##4.131.184':445
'12.##4.103.93':445
'12.##4.248.154':445
'12.##4.56.207':445
'12.#04.4.55':445
'12.##4.153.233':445
'12.##4.165.121':445
'12.##4.178.202':445
'12.##4.153.103':139
'12.##4.154.153':139
'12.##4.234.72':139
'12.##4.166.91':139
'12.##4.31.204':139
'12.##4.141.160':445
'12.##4.243.18':445
'12.##4.96.36':139
'12.##4.80.154':139
'12.##4.134.165':139
'12.##4.31.164':445
'12.##4.110.158':445
'12.##4.209.166':445
'12.##4.146.247':445
'12.##4.200.61':445
'12.##4.102.227':445
'12.##4.143.47':445
'12.##4.193.232':445
'12.##4.82.33':445
'12.##4.70.91':445
'12.##4.222.77':445
'12.##4.162.52':445
'12.##4.81.163':445
'12.##4.51.251':445
'12.##4.123.90':445
'12.##4.241.31':445
'12.##4.41.19':445
'12.##4.108.235':445
'12.##4.251.63':445
'12.##4.188.178':445
'12.##4.190.211':445
'12.##4.223.190':445
'12.##4.241.31':139
'12.##4.41.19':139
'12.##4.31.164':139
'12.##4.248.154':139
'12.##4.56.207':139
'12.##4.190.211':139
'12.##4.223.190':139
'12.##4.51.251':139
'12.##4.123.90':139
'12.##4.81.163':139
'12.#04.4.55':139
'12.##4.131.184':139
'12.##4.103.93':139
'12.##4.178.202':139
'12.##4.243.18':139
'12.##4.118.116':139
'12.##4.165.121':139
'12.##4.181.165':139
'12.##4.153.233':139
'12.##4.141.160':139
'12.##4.23.239':139
'12.##4.188.178':139
'12.#04.33.8':139
'12.##4.157.117':139
'12.##4.94.83':139
'12.##4.143.47':139
'12.##4.193.232':139
'12.##4.251.12':139
'12.##4.67.86':139
'12.##4.98.244':139
'12.##4.247.157':139
'12.##4.232.247':139
'12.##4.82.33':139
'12.##4.200.61':139
'12.##4.102.227':139
'12.##4.162.52':139
'12.##4.108.235':139
'12.##4.251.63':139
'12.##4.70.91':139
'12.##4.222.77':139
'12.##4.209.166':139
'12.##4.146.247':139
'12.##4.110.158':139
'12.##4.94.83':445
'12.##4.250.228':445
'12.#04.7.17':445
'12.##4.128.172':445
'12.##4.254.71':139
'12.##4.146.42':445
'12.##4.190.123':445
'12.##4.83.62':445
'12.##4.36.81':445
'12.##4.62.198':445
'12.##4.83.109':445
'12.#04.84.6':139
'12.##4.34.199':139
'12.##4.181.9':139
'12.##4.223.25':139
'12.##4.48.14':139
'12.##4.141.63':139
'12.##4.77.165':139
'12.##4.247.253':139
'12.##4.215.194':139
'12.##4.114.180':139
'12.##4.217.221':139
'12.##4.160.86':445
'12.##4.215.194':445
'12.##4.77.165':445
'12.##4.217.221':445
'12.##4.181.9':445
'12.##4.114.180':445
'12.##4.246.197':139
'12.##4.88.246':139
'12.##4.254.71':445
'12.##4.247.253':445
'12.#04.84.6':445
'12.##4.34.199':445
'12.##4.115.113':445
'12.##4.36.189':445
'12.##4.50.106':445
'12.##4.19.219':445
'12.##4.50.197':445
'12.##4.141.63':445
'12.##4.223.25':445
'12.##4.48.14':445
'12.##4.54.63':445
'12.##4.21.54':445
'12.##4.96.36':445
'12.##4.141.160':9988
'12.##4.134.165':445
'12.##4.154.153':445
'12.##4.80.154':445
'12.##4.248.154':9988
'12.##4.31.164':9988
'12.#04.4.55':9988
'12.##4.178.202':9988
'12.##4.181.165':9988
'12.##4.153.103':445
'12.##4.232.247':445
'12.##4.98.244':445
'12.##4.247.157':445
'12.#04.33.8':445
'12.##4.157.117':445
'12.##4.31.204':445
'12.##4.234.72':445
'12.##4.166.91':445
'12.##4.251.12':445
'12.##4.67.86':445
'12.##4.223.190':9988
'12.##4.19.219':139
'12.##4.50.197':139
'12.##4.160.86':139
'12.##4.190.123':139
'12.##4.83.62':139
'12.##4.54.63':139
'12.##4.21.54':139
'12.##4.36.189':139
'12.##4.50.106':139
'12.##4.115.113':139
'12.##4.36.81':139
'12.##4.70.91':9988
'12.##4.146.42':139
'12.##4.102.227':9988
'12.##4.188.178':9988
'12.##4.108.235':9988
'12.##4.83.109':139
'12.##4.62.198':139
'12.#04.7.17':139
'12.##4.128.172':139
'12.##4.250.228':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней