Trojan.Starman.6346

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'64.##5.168.108':139
'64.##5.142.240':139
'64.##5.38.38':139
'64.##5.9.140':139
'64.##5.162.220':139
'64.##5.162.105':139
'64.##5.137.150':139
'64.##5.245.16':139
'64.#65.1.0':139
'64.##5.28.50':139
'64.##5.78.128':139
'64.##5.140.37':139
'64.##5.96.62':139
'64.##5.34.254':139
'64.##5.62.94':139
'64.##5.87.48':139
'64.##5.56.152':139
'64.##5.153.157':139
'64.##5.156.54':139
'64.##5.36.183':139
'64.##5.0.110':139
'64.##5.74.244':139
'64.##5.80.50':139
'64.##5.58.216':445
'64.##5.205.58':445
'64.##5.216.20':445
'64.##5.23.28':139
'64.##5.0.117':445
'64.##5.156.190':445
'64.##5.127.144':445
'64.##5.136.164':445
'64.##5.64.226':445
'64.#65.2.80':445
'64.##5.13.164':445
'64.##5.242.141':139
'64.##5.32.225':139
'64.##5.100.191':139
'64.##5.249.51':139
'64.##5.91.205':139
'64.##5.41.24':139
'64.##5.59.109':139
'64.##5.171.196':139
'64.##5.177.235':139
'64.##5.196.233':139
'64.##5.197.87':139
'64.##5.139.98':139
'64.##5.114.199':445
'64.##5.73.69':445
'64.##5.106.218':445
'64.##5.242.225':445
'64.##5.123.242':445
'64.##5.64.166':445
'64.##5.125.197':445
'64.##5.100.120':445
'64.##5.16.235':445
'64.##5.171.206':445
'64.##5.129.117':445
'64.##5.226.40':445
'64.##5.15.186':445
'64.##5.59.64':445
'64.##5.81.172':445
'64.##5.164.72':445
'64.#65.1.20':445
'64.##5.221.240':445
'64.##5.19.28':445
'64.##5.8.174':445
'64.##5.177.125':445
'64.##5.126.221':445
'64.##5.17.88':445
'64.##5.64.226':139
'64.##5.127.144':139
'64.##5.13.164':139
'64.##5.156.190':139
'64.#65.2.80':139
'64.##5.136.164':139
'64.#65.6.7':139
'64.##5.47.194':139
'64.##5.127.16':139
'64.##5.101.227':139
'64.##5.46.82':139
'64.##5.205.58':139
'64.##5.170.123':445
'64.##5.89.227':445
'64.##5.246.113':445
'64.##5.64.179':445
'64.##5.154.170':445
'64.##5.26.34':445
'64.##5.216.20':139
'64.##5.58.216':139
'64.##5.0.117':139
'64.##5.51.68':445
'64.##5.135.236':445
'64.##5.112.0':139
'64.##5.148.90':139
'64.##5.167.114':139
'64.##5.27.134':139
'64.##5.103.65':139
'64.##5.44.225':139
'64.##5.59.240':139
'64.##5.125.74':139
'64.##5.240.90':139
'64.##5.42.27':139
'64.##5.157.106':139
'64.##5.49.170':139
'64.##5.157.236':139
'64.##5.133.86':139
'64.##5.187.78':139
'64.##5.159.213':139
'64.##5.145.18':139
'64.##5.101.133':139
'64.##5.215.158':139
'64.##5.85.109':139
'64.##5.232.75':139
'64.##5.145.52':139
'64.##5.114.6':139
'64.##5.50.139':139
'64.##5.102.146':139
'64.##5.85.146':139
'64.##5.211.222':139
'64.##5.182.11':139
'64.##5.73.126':139
'64.##5.249.135':139
'64.##5.104.249':139
'64.##5.15.246':139
'64.##5.196.3':139
'64.##5.81.184':139
'64.##5.75.75':139
'64.##5.226.190':139
'64.##5.83.125':139
'64.##5.190.168':139
'64.##5.121.221':139
'64.##5.35.87':139
'64.##5.229.254':139
'64.##5.223.219':139
'64.##5.218.206':139
'64.##5.161.190':139
'64.##5.87.217':139
'64.##5.133.166':139
'64.##5.36.183':445
'64.##5.140.37':445
'64.##5.156.54':445
'64.##5.80.50':445
'64.##5.0.110':445
'64.##5.9.140':445
'64.##5.142.240':445
'64.##5.162.105':445
'64.##5.168.108':445
'64.##5.162.220':445
'64.##5.38.38':445
'64.##5.74.244':445
'64.#65.6.7':445
'64.##5.47.194':445
'64.##5.127.16':445
'64.##5.101.227':445
'64.##5.46.82':445
'64.##5.87.48':445
'64.##5.34.254':445
'64.##5.153.157':445
'64.##5.96.62':445
'64.##5.56.152':445
'64.##5.62.94':445
'64.##5.177.235':445
'64.##5.242.141':445
'64.##5.171.196':445
'64.##5.139.98':445
'64.##5.196.233':445
'64.##5.23.28':445
'64.##5.208.235':139
'64.##5.122.34':139
'64.##5.134.32':139
'64.##5.23.254':139
'64.##5.79.88':139
'64.##5.197.87':445
'64.##5.137.150':445
'64.##5.245.16':445
'64.#65.1.0':445
'64.##5.28.50':445
'64.##5.78.128':445
'64.##5.91.205':445
'64.##5.100.191':445
'64.##5.59.109':445
'64.##5.32.225':445
'64.##5.41.24':445
'64.##5.249.51':445
'64.##5.32.84':445
'64.##5.156.35':445
'64.##5.175.193':445
'64.##5.60.181':445
'64.##5.196.59':445
'64.##5.80.118':445
'64.##5.54.133':445
'64.##5.208.54':445
'64.##5.120.229':445
'64.##5.163.183':445
'64.##5.90.21':445
'64.##5.109.125':445
'64.##5.117.195':139
'64.##5.19.113':139
'64.##5.206.225':139
'64.##5.201.108':139
'64.##5.146.177':139
'64.##5.240.193':445
'64.##5.193.194':445
'64.##5.106.134':445
'64.##5.22.51':445
'64.##5.96.179':445
'64.##5.176.240':445
'64.##5.73.201':445
'64.##5.106.228':445
'64.##5.77.134':445
'64.##5.8.217':445
'64.#65.5.6':445
'64.##5.183.151':445
'64.##5.117.239':445
'64.##5.14.194':445
'64.##5.70.210':445
'64.##5.108.242':445
'64.##5.48.208':445
'64.##5.151.80':445
'64.##5.77.81':445
'64.##5.241.73':445
'64.##5.22.149':445
'64.##5.187.144':445
'64.##5.194.23':445
'64.##5.55.41':445
'64.##5.9.132':445
'64.##5.88.10':445
'64.##5.163.107':445
'64.##5.173.41':445
'64.##5.27.158':445
'64.##5.120.229':139
'64.##5.54.133':139
'64.##5.90.21':139
'64.##5.80.118':139
'64.##5.163.183':139
'64.##5.208.54':139
'64.##5.77.81':139
'64.##5.241.73':139
'64.##5.22.149':139
'64.##5.187.144':139
'64.##5.194.23':139
'64.##5.156.35':139
'64.##5.176.240':139
'64.##5.96.179':139
'64.##5.22.51':139
'64.##5.240.193':139
'64.##5.193.194':139
'64.##5.106.134':139
'64.##5.175.193':139
'64.##5.32.84':139
'64.##5.196.59':139
'64.##5.109.125':139
'64.##5.60.181':139
'64.##5.70.210':139
'64.##5.117.239':139
'64.##5.48.208':139
'64.##5.183.151':139
'64.##5.108.242':139
'64.##5.14.194':139
'64.##5.155.20':139
'64.##5.78.93':139
'64.##5.20.213':139
'64.#65.97.9':139
'64.##5.212.175':139
'64.##5.106.228':139
'64.##5.163.107':139
'64.##5.9.132':139
'64.##5.27.158':139
'64.##5.55.41':139
'64.##5.173.41':139
'64.##5.88.10':139
'64.##5.77.134':139
'64.##5.73.201':139
'64.#65.5.6':139
'64.##5.151.80':139
'64.##5.8.217':139
'64.##5.16.235':139
'64.##5.125.197':139
'64.##5.129.117':139
'64.##5.64.166':139
'64.##5.171.206':139
'64.##5.100.120':139
'64.##5.170.123':139
'64.##5.89.227':139
'64.##5.246.113':139
'64.##5.64.179':139
'64.##5.154.170':139
'64.##5.73.69':139
'64.##5.177.125':139
'64.##5.19.28':139
'64.##5.17.88':139
'64.##5.221.240':139
'64.##5.126.221':139
'64.##5.8.174':139
'64.##5.106.218':139
'64.##5.114.199':139
'64.##5.123.242':139
'64.##5.226.40':139
'64.##5.242.225':139
'64.##5.161.148':445
'64.##5.211.160':445
'64.##5.250.168':445
'64.##5.33.193':445
'64.##5.45.147':445
'64.##5.194.211':445
'64.##5.45.82':445
'64.##5.14.150':445
'64.##5.17.181':445
'64.##5.58.194':445
'64.##5.31.159':445
'64.##5.150.125':445
'64.##5.128.108':445
'64.##5.60.211':445
'64.##5.135.236':139
'64.##5.26.34':139
'64.##5.51.68':139
'64.##5.119.148':445
'64.##5.109.117':445
'64.##5.142.231':445
'64.##5.61.200':445
'64.##5.22.251':445
'64.##5.12.96':445
'64.##5.48.208':9988
'64.##5.108.242':9988
'64.##5.73.201':9988
'64.#65.5.6':9988
'64.##5.106.228':9988
'64.##5.117.239':9988
'64.##5.128.108':139
'64.##5.60.211':139
'64.##5.117.195':9988
'64.##5.20.213':9988
'64.##5.146.177':9988
'64.##5.156.35':9988
'64.##5.155.20':445
'64.##5.78.93':445
'64.##5.20.213':445
'64.#65.97.9':445
'64.##5.212.175':445
'64.##5.201.108':445
'64.##5.19.113':445
'64.##5.106.134':9988
'64.##5.117.195':445
'64.##5.146.177':445
'64.##5.206.225':445
'64.##5.17.181':139
'64.##5.45.82':139
'64.##5.31.159':139
'64.##5.194.211':139
'64.##5.58.194':139
'64.##5.14.150':139
'64.##5.15.186':139
'64.##5.59.64':139
'64.##5.81.172':139
'64.##5.164.72':139
'64.#65.1.20':139
'64.##5.211.160':139
'64.##5.61.200':139
'64.##5.109.117':139
'64.##5.12.96':139
'64.##5.119.148':139
'64.##5.22.251':139
'64.##5.142.231':139
'64.##5.250.168':139
'64.##5.161.148':139
'64.##5.45.147':139
'64.##5.150.125':139
'64.##5.33.193':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней