Trojan.Starman.6130

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#1.27.152':139
'13#.#1.163.175':139
'13#.#1.202.66':139
'13#.#1.20.155':139
'13#.#1.144.242':139
'13#.#1.179.125':139
'13#.#1.92.212':139
'13#.#1.172.160':139
'13#.#1.125.236':139
'13#.#1.160.200':139
'13#.#1.1.223':139
'13#.#1.63.214':139
'13#.#1.72.100':139
'13#.#1.19.244':139
'13#.#1.166.81':139
'13#.#1.222.188':139
'13#.11.41.1':139
'13#.#1.186.217':139
'13#.#1.122.230':139
'13#.#1.141.67':139
'13#.#1.111.55':139
'13#.11.41.1':445
'13#.#1.186.217':445
'13#.#1.122.230':445
'13#.#1.141.67':445
'13#.#1.111.55':445
'13#.#1.202.66':445
'13#.#1.27.152':445
'13#.#1.144.242':445
'13#.#1.1.223':445
'13#.#1.20.155':445
'13#.#1.72.100':445
'13#.#1.219.23':139
'13#.#1.38.50':445
'13#.#1.69.29':139
'13#.#1.43.45':139
'13#.#1.122.129':139
'13#.#1.19.244':445
'13#.#1.63.214':445
'13#.#1.222.188':445
'13#.#1.149.183':445
'13#.#1.166.81':445
'13#.#1.124.124':139
'13#.#1.155.140':139
'13#.#1.248.215':139
'13#.#1.228.169':139
'13#.#1.44.231':139
'13#.#1.30.53':445
'13#.#1.44.45':445
'13#.#1.182.177':445
'13#.#1.36.186':445
'13#.#1.224.36':445
'13#.#1.133.207':139
'13#.#1.180.186':139
'13#.#1.245.139':139
'13#.#1.28.194':139
'13#.#1.110.100':139
'13#.#1.3.131':139
'13#.#1.121.189':139
'13#.#1.16.88':139
'13#.#1.67.78':139
'13#.#1.172.239':139
'13#.#1.199.18':139
'13#.#1.228.169':445
'13#.#1.44.231':445
'13#.#1.133.207':445
'13#.#1.121.189':445
'13#.#1.16.88':445
'13#.#1.38.50':139
'13#.#1.149.183':139
'13#.#1.155.140':445
'13#.#1.248.215':445
'13#.#1.124.124':445
'13#.#1.67.78':445
'13#.#1.110.100':445
'13#.#1.3.131':445
'13#.#1.100.103':445
'13#.#1.146.34':445
'13#.#1.103.146':445
'13#.#1.172.239':445
'13#.#1.199.18':445
'13#.#1.245.139':445
'13#.#1.28.194':445
'13#.#1.180.186':445
'13#.#1.163.175':445
'13#.#1.247.112':445
'13#.#1.182.142':139
'13#.#1.25.75':445
'13#.#1.35.170':445
'13#.#1.36.18':445
'13#.#1.188.112':139
'13#.#1.58.240':139
'13#.#1.120.166':139
'13#.#1.206.118':139
'13#.#1.188.62':139
'13#.#1.33.22':445
'13#.#1.222.136':445
'13#.#1.130.66':445
'13#.#1.150.120':445
'13#.#1.107.234':445
'13#.#1.13.231':445
'13#.#1.53.129':445
'13#.#1.107.161':445
'13#.#1.182.25':445
'13#.#1.253.129':445
'13#.#1.64.136':445
'13#.#1.222.184':139
'13#.#1.68.90':139
'13#.#1.1.189':139
'13#.#1.71.169':139
'13#.#1.64.148':139
'13#.#1.243.40':139
'13#.#1.66.199':139
'13#.#1.130.246':139
'13#.#1.17.113':139
'13#.#1.88.13':139
'13#.#1.169.72':139
'13#.#1.150.73':139
'13#.#1.153.22':139
'13#.#1.73.156':139
'13#.#1.57.173':139
'13#.#1.102.193':139
'13#.#1.43.143':139
'13#.#1.153.107':139
'13#.#1.223.59':139
'13#.#1.64.70':139
'13#.11.41.4':139
'13#.#1.153.47':139
'13#.#1.166.160':139
'13#.#1.105.167':139
'13#.#1.202.27':139
'13#.#1.148.117':139
'13#.#1.13.231':139
'13#.#1.150.120':139
'13#.#1.107.234':139
'13#.#1.183.28':139
'13#.11.1.37':139
'13#.#1.148.153':139
'13#.#1.179.125':445
'13#.#1.92.212':445
'13#.#1.172.160':445
'13#.#1.125.236':445
'13#.#1.160.200':445
'13#.#1.219.23':445
'13#.11.7.28':139
'13#.#1.69.29':445
'13#.#1.43.45':445
'13#.#1.122.129':445
'13#.#1.202.27':445
'13#.#1.148.117':445
'13#.#1.148.153':445
'13#.#1.247.112':139
'13#.11.7.28':445
'13#.#1.183.28':445
'13#.11.1.37':445
'13#.#1.166.160':445
'13#.#1.105.167':445
'13#.#1.153.47':445
'13#.#1.25.75':139
'13#.#1.64.136':139
'13#.#1.182.25':139
'13#.#1.253.129':139
'13#.#1.222.136':139
'13#.#1.130.66':139
'13#.#1.35.170':139
'13#.#1.36.18':139
'13#.#1.33.22':139
'13#.#1.53.129':139
'13#.#1.107.161':139
'13#.#1.100.103':139
'13#.#1.196.251':445
'13#.#1.4.197':445
'13#.#1.252.9':445
'13#.#1.80.140':445
'13#.#1.113.242':445
'13#.#1.169.152':445
'13#.#1.110.41':445
'13#.#1.100.114':445
'13#.#1.9.252':445
'13#.#1.158.169':445
'13#.#1.202.36':445
'13#.#1.148.53':139
'13#.#1.114.148':139
'13#.11.53.2':139
'13#.11.17.2':139
'13#.#1.1.173':139
'13#.#1.229.36':139
'13#.#1.126.132':445
'13#.#1.187.245':139
'13#.#1.55.114':139
'13#.#1.92.108':139
'13#.#1.33.109':445
'13#.#1.215.6':445
'13#.#1.6.244':445
'13#.#1.150.146':445
'13#.#1.55.238':445
'13#.#1.203.237':445
'13#.#1.24.124':445
'13#.#1.164.0':445
'13#.#1.50.215':445
'13#.#1.246.212':445
'13#.#1.117.60':445
'13#.#1.94.57':445
'13#.#1.136.59':445
'13#.#1.132.104':445
'13#.#1.21.162':445
'13#.#1.146.49':445
'13#.#1.200.222':445
'13#.#1.4.145':445
'13#.#1.223.44':445
'13#.#1.212.183':445
'13#.#1.213.217':445
'13#.#1.132.104':139
'13#.#1.94.57':139
'13#.#1.146.49':139
'13#.#1.110.41':139
'13#.#1.21.162':139
'13#.#1.223.44':139
'13#.#1.200.222':139
'13#.#1.213.217':139
'13#.#1.136.59':139
'13#.#1.212.183':139
'13#.#1.169.152':139
'13#.#1.113.242':139
'13#.#1.252.9':139
'13#.#1.80.140':139
'13#.#1.126.132':139
'13#.#1.202.36':139
'13#.#1.158.169':139
'13#.#1.100.114':139
'13#.#1.9.252':139
'13#.#1.196.251':139
'13#.#1.4.197':139
'13#.#1.68.202':139
'13#.#1.46.73':139
'13#.#1.91.234':139
'13#.#1.24.124':139
'13#.#1.17.208':139
'13#.#1.77.79':139
'13#.#1.48.214':139
'13#.#1.132.98':139
'13#.#1.216.71':139
'13#.#1.112.101':139
'13#.#1.203.237':139
'13#.#1.55.238':139
'13#.#1.6.244':139
'13#.#1.150.146':139
'13#.#1.4.145':139
'13#.#1.117.60':139
'13#.#1.246.212':139
'13#.#1.164.0':139
'13#.#1.50.215':139
'13#.#1.33.109':139
'13#.#1.215.6':139
'13#.#1.17.208':445
'13#.#1.87.244':445
'13#.#1.9.199':445
'13#.#1.53.169':445
'13#.#1.232.40':139
'13#.#1.241.190':445
'13#.#1.201.123':445
'13#.#1.6.202':445
'13#.#1.77.33':445
'13#.#1.125.61':445
'13#.#1.52.60':445
'13#.#1.46.213':139
'13#.#1.85.152':139
'13#.#1.152.253':139
'13#.#1.29.192':139
'13#.#1.238.172':139
'13#.#1.102.119':139
'13#.#1.185.241':139
'13#.#1.133.70':139
'13#.#1.177.118':139
'13#.#1.49.186':139
'13#.#1.189.155':139
'13#.#1.36.186':139
'13#.#1.224.36':139
'13#.#1.232.40':445
'13#.#1.133.70':445
'13#.#1.46.213':445
'13#.#1.146.34':139
'13#.#1.103.146':139
'13#.#1.44.45':139
'13#.#1.182.177':139
'13#.#1.30.53':139
'13#.#1.185.241':445
'13#.#1.102.119':445
'13#.#1.29.192':445
'13#.#1.238.172':445
'13#.#1.128.210':445
'13#.#1.46.246':445
'13#.#1.189.155':445
'13#.#1.177.118':445
'13#.#1.49.186':445
'13#.#1.85.152':445
'13#.#1.152.253':445
'13#.#1.187.245':445
'13#.#1.114.148':445
'13#.#1.55.114':445
'13#.#1.148.53':445
'13#.#1.92.108':445
'13#.#1.158.169':9988
'13#.#1.100.114':9988
'13#.#1.9.252':9988
'13#.#1.229.36':445
'13#.#1.202.36':9988
'13#.11.53.2':445
'13#.#1.112.101':445
'13#.#1.132.98':445
'13#.#1.46.73':445
'13#.#1.91.234':445
'13#.#1.68.202':445
'13#.11.17.2':445
'13#.#1.1.173':445
'13#.#1.48.214':445
'13#.#1.77.79':445
'13#.#1.216.71':445
'13#.#1.125.61':139
'13#.#1.52.60':139
'13#.#1.9.199':139
'13#.#1.53.169':139
'13#.#1.87.244':139
'13#.#1.128.210':139
'13#.#1.46.246':139
'13#.#1.6.202':139
'13#.#1.77.33':139
'13#.#1.201.123':139
'13#.#1.241.190':139
'13#.#1.212.183':9988
'13#.#1.117.60':9988
'13#.#1.136.59':9988
'13#.#1.169.152':9988
'13#.#1.110.41':9988
'13#.#1.46.73':9988
'13#.#1.77.79':9988
'13#.#1.6.244':9988
'13#.#1.150.146':9988
'13#.#1.55.238':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней