Trojan.Starman.4980

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'67.##1.175.71':445
'67.##1.120.111':445
'67.##1.238.6':139
'67.##1.221.194':445
'67.##1.227.119':445
'67.##1.86.180':445
'67.##1.239.139':445
'67.##1.140.160':445
'67.##1.130.120':445
'67.##1.97.87':139
'67.##1.72.39':139
'67.##1.150.161':139
'67.##1.74.114':139
'67.##1.157.241':139
'67.##1.53.110':139
'67.#41.6.53':139
'67.##1.169.86':139
'67.##1.110.97':139
'67.##1.47.169':445
'67.##1.197.81':445
'67.##1.117.128':445
'67.##1.219.4':445
'67.##1.46.71':445
'67.##1.253.117':445
'67.##1.45.67':445
'67.##1.240.44':445
'67.##1.170.248':445
'67.##1.103.172':445
'67.##1.15.20':445
'67.##1.26.85':445
'67.##1.53.23':445
'67.##1.127.118':445
'67.##1.164.224':445
'67.##1.243.119':445
'67.#41.77.6':445
'67.##1.97.165':445
'67.##1.10.136':445
'67.##1.187.192':139
'67.##1.47.169':139
'67.##1.53.23':139
'67.##1.86.180':139
'67.##1.239.139':139
'67.##1.127.118':139
'67.##1.164.224':139
'67.##1.97.165':139
'67.##1.15.20':139
'67.##1.26.85':139
'67.##1.99.90':445
'67.##1.221.194':139
'67.##1.74.222':445
'67.##1.18.96':445
'67.##1.175.71':139
'67.##1.140.160':139
'67.##1.130.120':139
'67.##1.120.111':139
'67.##1.227.119':139
'67.##1.10.136':139
'67.##1.105.241':139
'67.##1.186.31':139
'67.##1.45.67':139
'67.##1.240.44':139
'67.##1.98.199':139
'67.##1.45.155':139
'67.##1.192.120':139
'67.##1.190.113':139
'67.##1.123.126':139
'67.##1.219.4':139
'67.##1.46.71':139
'67.##1.243.119':139
'67.#41.77.6':139
'67.##1.197.81':139
'67.##1.170.248':139
'67.##1.103.172':139
'67.##1.117.128':139
'67.##1.253.117':139
'67.##1.92.103':139
'67.##1.17.49':139
'67.##1.187.71':139
'67.##1.63.169':139
'67.##1.45.15':139
'67.##1.186.125':139
'67.##1.220.185':139
'67.##1.187.117':139
'67.##1.125.187':139
'67.##1.115.176':139
'67.##1.70.61':139
'67.##1.7.169':139
'67.##1.184.41':139
'67.##1.163.69':139
'67.##1.232.21':139
'67.##1.72.36':139
'67.##1.249.163':139
'67.##1.195.118':139
'67.##1.135.219':139
'67.##1.202.22':139
'67.##1.88.77':139
'67.##1.89.113':139
'67.##1.10.90':139
'67.##1.252.157':139
'67.##1.230.95':139
'67.##1.82.230':139
'67.##1.204.85':139
'67.##1.118.125':139
'67.##1.12.24':139
'67.##1.49.225':139
'67.##1.228.138':139
'67.##1.5.120':139
'67.##1.22.184':139
'67.##1.182.197':139
'67.##1.112.208':139
'67.##1.38.64':139
'67.##1.83.38':139
'67.##1.235.187':139
'67.##1.72.39':445
'67.##1.157.241':445
'67.##1.74.114':445
'67.##1.97.87':445
'67.##1.169.86':445
'67.#41.6.53':445
'67.##1.238.6':445
'67.##1.110.97':445
'67.##1.53.110':445
'67.##1.98.199':445
'67.##1.190.113':445
'67.##1.105.241':445
'67.##1.186.31':445
'67.##1.123.126':445
'67.##1.187.192':445
'67.##1.150.161':445
'67.##1.45.155':445
'67.##1.192.120':445
'67.##1.197.237':139
'67.##1.65.232':139
'67.##1.101.65':139
'67.##1.208.146':445
'67.##1.76.219':445
'67.##1.202.101':139
'67.##1.252.27':139
'67.##1.106.141':139
'67.##1.143.202':139
'67.##1.206.186':139
'67.##1.204.244':139
'67.##1.208.146':139
'67.##1.178.154':139
'67.##1.75.84':139
'67.##1.76.219':139
'67.##1.75.84':445
'67.##1.204.244':445
'67.##1.197.237':445
'67.##1.178.154':445
'67.##1.69.215':139
'67.##1.68.37':139
'67.##1.145.217':139
'67.##1.68.185':139
'67.##1.22.144':445
'67.##1.82.137':445
'67.##1.229.79':445
'67.##1.37.95':445
'67.##1.64.156':445
'67.##1.113.99':139
'67.##1.82.160':139
'67.#41.3.62':139
'67.##1.100.3':139
'67.##1.233.114':139
'67.##1.207.162':139
'67.##1.95.160':139
'67.##1.205.71':139
'67.##1.162.232':139
'67.##1.180.108':445
'67.##1.223.109':445
'67.##1.51.223':445
'67.##1.242.5':445
'67.##1.103.168':445
'67.##1.161.51':445
'67.##1.111.176':445
'67.##1.128.110':445
'67.##1.106.161':445
'67.##1.146.160':445
'67.##1.99.220':445
'67.##1.239.53':445
'67.##1.236.150':445
'67.##1.220.189':445
'67.##1.132.91':445
'67.##1.0.242':445
'67.##1.47.247':445
'67.##1.169.7':445
'67.#41.83.2':445
'67.##1.10.55':139
'67.##1.169.7':139
'67.#41.83.2':139
'67.##1.239.53':139
'67.##1.132.91':139
'67.##1.0.242':139
'67.##1.103.168':139
'67.##1.223.109':139
'67.##1.47.247':139
'67.##1.242.5':139
'67.##1.64.156':139
'67.##1.82.137':139
'67.##1.37.95':139
'67.##1.22.144':139
'67.##1.229.79':139
'67.##1.220.189':139
'67.##1.99.220':139
'67.##1.180.108':139
'67.##1.236.150':139
'67.##1.51.223':139
'67.##1.157.90':139
'67.##1.36.157':139
'67.##1.145.222':139
'67.##1.72.121':139
'67.##1.7.157':139
'67.##1.197.243':139
'67.##1.55.75':139
'67.##1.127.82':139
'67.##1.217.240':139
'67.##1.146.160':139
'67.##1.111.176':139
'67.##1.161.51':139
'67.##1.106.161':139
'67.##1.128.110':139
'67.##1.42.95':139
'67.##1.167.77':139
'67.##1.158.49':139
'67.##1.221.61':139
'67.##1.10.19':139
'67.##1.223.9':139
'67.##1.11.222':139
'67.##1.240.47':139
'67.##1.114.222':139
'67.##1.52.75':139
'67.##1.30.211':445
'67.##1.222.114':139
'67.##1.88.222':139
'67.##1.106.161':9988
'67.##1.0.242':9988
'67.##1.229.79':9988
'67.##1.223.109':9988
'67.##1.47.247':9988
'67.##1.247.6':139
'67.##1.93.177':139
'67.##1.64.156':9988
'67.##1.30.211':139
'67.##1.247.6':445
'67.##1.105.42':139
'67.##1.74.222':139
'67.##1.203.74':139
'67.##1.163.232':139
'67.##1.18.96':139
'67.##1.163.232':445
'67.##1.105.42':445
'67.##1.99.90':139
'67.##1.203.74':445
'67.##1.240.47':445
'67.##1.10.19':445
'67.##1.93.177':445
'67.##1.11.222':445
'67.##1.223.9':445
'67.##1.88.222':445
'67.##1.52.75':445
'67.##1.114.222':445
'67.##1.222.114':445
'67.##1.22.144':9988
'67.##1.197.243':445
'67.##1.55.75':445
'67.##1.127.82':445
'67.##1.217.240':445
'67.##1.10.55':445
'67.##1.113.99':445
'67.##1.82.160':445
'67.#41.3.62':445
'67.##1.100.3':445
'67.##1.42.95':445
'67.##1.167.77':445
'67.##1.158.49':445
'67.##1.221.61':445
'67.##1.145.222':445
'67.##1.36.157':445
'67.##1.7.157':445
'67.##1.72.121':445
'67.##1.157.90':445
'67.##1.233.114':445
'67.##1.42.95':9988
'67.##1.169.7':9988
'67.##1.239.53':9988
'67.##1.7.157':9988
'67.##1.132.91':9988
'67.##1.36.157':9988
'67.##1.180.108':9988
'67.#41.83.2':9988
'67.##1.103.168':9988
'67.##1.207.162':445
'67.##1.95.160':445
'67.##1.205.71':445
'67.##1.162.232':445
'67.##1.145.217':445
'67.##1.68.37':445
'67.##1.99.220':9988
'67.##1.68.185':445
'67.##1.69.215':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней