Trojan.Starman.6117

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.#4.37.53':139
'61.#4.16.20':139
'61.##.173.19':139
'61.##.181.25':139
'61.#4.73.1':139
'61.##.154.223':139
'61.##.161.46':139
'61.##.205.225':139
'61.##.169.16':139
'61.##.225.168':139
'61.##.138.48':445
'61.#4.76.84':139
'61.##.233.25':445
'61.##.39.137':445
'61.##.178.64':445
'61.##.162.133':139
'61.##.25.162':139
'61.##.133.210':139
'61.#4.59.45':139
'61.##.211.105':139
'61.##.179.161':139
'61.##.169.16':445
'61.##.225.168':445
'61.#4.16.20':445
'61.##.173.19':445
'61.#4.37.53':445
'61.##.179.161':445
'61.##.127.46':445
'61.##.161.46':445
'61.##.205.225':445
'61.##.154.223':445
'61.#4.59.45':445
'61.##.211.105':445
'61.#4.76.84':445
'61.##.127.46':139
'61.#4.99.95':139
'61.##.181.25':445
'61.#4.73.1':445
'61.##.25.162':445
'61.##.133.210':445
'61.##.162.133':445
'61.##.137.35':445
'61.##.138.48':139
'61.#4.2.1':445
'61.##.233.25':139
'61.##.39.137':139
'61.##.178.64':139
'61.#4.80.60':445
'61.#4.14.99':445
'61.##.59.246':445
'61.##.192.71':445
'61.##.55.217':445
'61.##.243.200':139
'61.##.242.80':139
'61.##.13.153':139
'61.#4.6.239':139
'61.##.107.87':139
'61.#4.35.11':139
'61.##.137.35':139
'61.##.230.224':139
'61.##.188.241':139
'61.##.238.29':139
'61.##.113.34':445
'61.##.13.153':445
'61.##.243.200':445
'61.##.107.87':445
'61.#4.118.1':445
'61.#4.6.239':445
'61.##.230.224':445
'61.#4.35.11':445
'61.##.238.29':445
'61.##.242.80':445
'61.##.188.241':445
'61.#4.73.32':445
'61.##.137.205':445
'61.##.249.103':445
'61.#4.21.80':445
'61.##.149.37':445
'61.##.148.221':445
'61.##.196.10':445
'61.#4.13.97':445
'61.##.185.30':445
'61.##.56.158':445
'61.#4.99.95':445
'61.##.24.139':445
'61.##.163.118':445
'61.#4.5.132':445
'61.##.96.231':445
'61.##.116.201':445
'61.##.24.184':445
'61.#4.58.41':445
'61.##.120.155':445
'61.##.201.21':445
'61.##.149.126':445
'61.##.146.225':445
'61.##.197.13':445
'61.##.16.179':445
'61.##.162.56':445
'61.##.183.107':445
'61.#4.98.44':445
'61.##.67.250':445
'61.#4.81.10':445
'61.##.13.197':445
'61.##.151.13':445
'61.##.144.107':445
'61.##.194.98':139
'61.#4.81.66':139
'61.##.109.201':139
'61.#4.41.89':139
'61.##.144.203':139
'61.##.54.114':139
'61.##.83.107':139
'61.##.139.51':139
'61.##.146.246':139
'61.##.116.93':139
'61.##.92.202':139
'61.#4.15.93':139
'61.##.62.167':139
'61.#4.3.102':445
'61.##.172.176':139
'61.##.208.112':139
'61.#4.20.71':139
'61.##.128.126':139
'61.#4.9.15':139
'61.#4.126.8':139
'61.##.79.155':445
'61.##.146.225':139
'61.##.197.13':139
'61.##.16.179':139
'61.##.162.56':139
'61.##.183.107':139
'61.#4.98.44':139
'61.##.67.250':139
'61.#4.81.10':139
'61.##.13.197':139
'61.##.151.13':139
'61.##.191.227':139
'61.##.222.183':139
'61.##.226.196':139
'61.##.197.201':139
'61.#4.44.50':139
'61.#4.72.24':139
'61.##.79.155':139
'61.##.107.136':139
'61.##.195.56':139
'61.##.137.37':139
'61.##.96.231':139
'61.##.226.196':445
'61.##.191.227':445
'61.#4.44.50':445
'61.#4.3.102':139
'61.##.197.201':445
'61.##.107.136':445
'61.#4.72.24':445
'61.##.137.37':445
'61.##.222.183':445
'61.##.195.56':445
'61.##.163.118':139
'61.##.201.21':139
'61.##.24.139':139
'61.##.116.201':139
'61.#4.5.132':139
'61.#4.58.41':139
'61.##.144.107':139
'61.##.24.184':139
'61.##.149.126':139
'61.##.120.155':139
'61.#4.20.92':445
'61.##.166.38':445
'61.##.225.130':445
'61.#4.6.151':445
'61.##.11.188':445
'61.##.215.36':445
'61.#4.23.33':445
'61.##.112.249':445
'61.##.30.210':445
'61.##.249.12':445
'61.##.54.205':139
'61.#4.186.5':139
'61.#4.25.37':139
'61.##.211.149':139
'61.##.151.240':139
'61.##.230.128':139
'61.##.168.196':445
'61.##.64.213':139
'61.##.19.199':139
'61.##.218.213':139
'61.##.212.205':445
'61.#4.5.83':445
'61.#4.26.81':445
'61.##.224.79':445
'61.##.119.213':445
'61.#4.73.46':445
'61.#4.252.7':445
'61.##.252.22':445
'61.##.110.233':445
'61.#4.0.122':445
'61.#4.59.87':445
'61.##.221.168':445
'61.##.138.221':445
'61.##.240.10':445
'61.#4.78.11':445
'61.##.249.199':445
'61.##.154.165':445
'61.##.136.56':445
'61.##.215.52':445
'61.##.108.32':445
'61.#4.55.58':445
'61.#4.5.149':139
'61.##.249.199':139
'61.##.240.10':139
'61.#4.78.11':139
'61.#4.23.33':139
'61.##.212.205':139
'61.#4.55.58':139
'61.##.215.52':139
'61.##.108.32':139
'61.##.221.168':139
'61.##.138.221':139
'61.##.225.130':139
'61.#4.20.92':139
'61.##.11.188':139
'61.##.168.196':139
'61.#4.6.151':139
'61.##.112.249':139
'61.##.215.36':139
'61.##.249.12':139
'61.##.166.38':139
'61.##.30.210':139
'61.##.154.165':139
'61.##.42.187':139
'61.##.35.227':139
'61.##.46.163':139
'61.##.252.22':139
'61.##.212.118':139
'61.##.161.13':139
'61.#4.47.80':139
'61.##.189.27':139
'61.##.101.97':139
'61.#4.4.115':139
'61.##.224.79':139
'61.#4.5.83':139
'61.#4.73.46':139
'61.##.136.56':139
'61.##.119.213':139
'61.##.110.233':139
'61.#4.252.7':139
'61.#4.59.87':139
'61.#4.26.81':139
'61.#4.0.122':139
'61.##.212.118':445
'61.#4.7.210':445
'61.##.33.110':445
'61.##.120.176':445
'61.##.71.242':445
'61.#4.116.4':445
'61.##.17.177':445
'61.##.41.204':445
'61.##.177.32':445
'61.#4.9.188':445
'61.##.68.146':445
'61.##.17.177':139
'61.##.41.204':139
'61.##.177.32':139
'61.#4.9.188':139
'61.##.68.146':139
'61.##.36.182':445
'61.##.144.248':445
'61.##.155.162':139
'61.##.251.204':139
'61.##.186.192':139
'61.##.251.204':445
'61.##.137.205':139
'61.##.185.30':139
'61.#4.73.32':139
'61.##.149.37':139
'61.##.249.103':139
'61.##.196.10':139
'61.#4.118.1':139
'61.##.148.221':139
'61.##.56.158':139
'61.#4.13.97':139
'61.##.192.71':139
'61.##.55.217':139
'61.#4.2.1':139
'61.##.186.192':445
'61.##.155.162':445
'61.##.113.34':139
'61.#4.21.80':139
'61.#4.14.99':139
'61.##.59.246':139
'61.#4.80.60':139
'61.##.33.110':139
'61.#4.186.5':445
'61.##.19.199':445
'61.##.54.205':445
'61.##.151.240':445
'61.#4.25.37':445
'61.##.225.130':9988
'61.##.168.196':9988
'61.##.230.128':445
'61.##.218.213':445
'61.##.64.213':445
'61.##.101.97':445
'61.#4.4.115':445
'61.##.35.227':445
'61.##.46.163':445
'61.##.42.187':445
'61.#4.5.149':445
'61.##.211.149':445
'61.#4.47.80':445
'61.##.189.27':445
'61.##.161.13':445
'61.##.11.188':9988
'61.#4.5.149':9988
'61.##.36.182':139
'61.##.212.118':9988
'61.##.154.165':9988
'61.##.119.213':9988
'61.##.120.176':139
'61.#4.7.210':139
'61.#4.116.4':139
'61.##.144.248':139
'61.##.71.242':139
'61.##.249.12':9988
'61.##.112.249':9988
'61.##.30.210':9988
'61.#4.6.151':9988
'61.#4.20.92':9988
'61.##.138.221':9988
'61.#4.55.58':9988
'61.#4.23.33':9988
'61.##.215.36':9988
'61.##.212.205':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней