Trojan.Starman.4960

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'87.##7.18.145':445
'87.##7.54.87':445
'87.##7.88.172':445
'87.##7.144.88':445
'87.##7.15.77':445
'87.##7.61.100':445
'87.##7.209.181':445
'87.##7.61.100':139
'87.##7.209.181':139
'87.##7.136.147':445
'87.#67.98.2':445
'87.##7.150.208':445
'87.##7.78.179':445
'87.##7.250.232':445
'87.##7.81.151':445
'87.##7.112.14':445
'87.##7.117.195':445
'87.##7.188.81':445
'87.##7.118.39':445
'87.##7.9.229':139
'87.##7.30.14':139
'87.##7.65.30':139
'87.##7.212.216':139
'87.##7.66.183':139
'87.##7.144.93':139
'87.##7.236.116':139
'87.##7.251.248':139
'87.##7.145.80':139
'87.##7.187.133':139
'87.##7.217.42':139
'87.##7.219.207':139
'87.##7.180.20':139
'87.##7.218.5':139
'87.##7.67.218':139
'87.##7.38.70':139
'87.##7.154.49':139
'87.##7.42.154':139
'87.##7.243.118':139
'87.##7.49.244':139
'87.#67.2.64':445
'87.##7.163.208':445
'87.##7.28.225':445
'87.##7.112.135':445
'87.##7.143.29':445
'87.##7.68.237':445
'87.##7.4.190':445
'87.##7.36.224':445
'87.##7.214.125':445
'87.##7.102.147':445
'87.##7.240.237':445
'87.##7.144.88':139
'87.##7.18.145':139
'87.##7.136.147':139
'87.##7.88.172':139
'87.##7.54.87':139
'87.##7.72.35':445
'87.#67.7.36':445
'87.##7.15.77':139
'87.##7.205.66':445
'87.##7.43.99':445
'87.##7.89.39':445
'87.##7.89.201':445
'87.##7.62.254':445
'87.##7.28.184':445
'87.##7.232.89':445
'87.##7.232.51':445
'87.##7.221.109':445
'87.##7.11.137':445
'87.##7.167.95':445
'87.##7.71.66':445
'87.##7.97.194':445
'87.##7.235.180':445
'87.#67.64.6':445
'87.##7.235.135':445
'87.##7.68.53':445
'87.##7.75.110':445
'87.##7.186.80':445
'87.##7.158.67':445
'87.##7.227.213':445
'87.##7.209.115':139
'87.##7.25.155':445
'87.##7.123.125':445
'87.##7.57.107':445
'87.##7.91.220':445
'87.##7.5.219':445
'87.##7.11.242':445
'87.##7.156.226':445
'87.##7.235.124':445
'87.##7.147.21':445
'87.##7.107.209':445
'87.##7.65.30':445
'87.##7.144.93':445
'87.##7.66.183':445
'87.##7.30.14':445
'87.##7.145.80':445
'87.##7.251.248':445
'87.##7.209.115':445
'87.##7.187.133':445
'87.##7.236.116':445
'87.##7.43.69':445
'87.##7.79.102':445
'87.##7.120.20':445
'87.##7.252.247':445
'87.##7.180.22':445
'87.##7.17.214':445
'87.##7.64.178':139
'87.##7.38.197':139
'87.##7.25.213':445
'87.##7.144.230':445
'87.##7.245.13':445
'87.##7.115.183':445
'87.##7.147.18':445
'87.##7.146.57':445
'87.##7.195.135':445
'87.##7.117.118':445
'87.##7.124.245':445
'87.##7.38.176':445
'87.##7.24.224':445
'87.#67.4.4':445
'87.##7.212.216':445
'87.##7.195.135':139
'87.##7.115.183':139
'87.##7.43.69':139
'87.##7.146.57':139
'87.##7.147.18':139
'87.#67.4.4':139
'87.##7.124.245':139
'87.##7.117.118':139
'87.##7.24.224':139
'87.##7.156.226':139
'87.##7.91.220':139
'87.##7.25.155':139
'87.##7.107.209':139
'87.##7.57.107':139
'87.##7.123.125':139
'87.##7.147.21':139
'87.##7.11.242':139
'87.##7.5.219':139
'87.##7.235.124':139
'87.##7.38.176':139
'87.##7.180.20':445
'87.##7.38.70':445
'87.##7.67.218':445
'87.##7.219.207':445
'87.##7.243.118':445
'87.##7.42.154':445
'87.##7.217.42':445
'87.##7.49.244':445
'87.##7.154.49':445
'87.##7.218.5':445
'87.##7.180.22':139
'87.##7.79.102':139
'87.##7.245.13':139
'87.##7.252.247':139
'87.##7.120.20':139
'87.##7.144.230':139
'87.##7.9.229':445
'87.##7.17.214':139
'87.##7.25.213':139
'87.##7.117.195':139
'87.##7.33.136':445
'87.##7.111.244':445
'87.##7.243.168':139
'87.##7.157.158':445
'87.##7.74.158':445
'87.##7.21.44':445
'87.##7.96.189':445
'87.##7.61.221':445
'87.##7.44.139':445
'87.##7.13.65':139
'87.##7.42.254':139
'87.##7.127.168':139
'87.##7.69.70':139
'87.##7.164.220':139
'87.##7.154.172':139
'87.#67.8.81':139
'87.##7.128.7':139
'87.##7.15.101':139
'87.##7.81.167':139
'87.##7.154.31':445
'87.##7.105.168':445
'87.##7.125.175':445
'87.##7.126.178':445
'87.##7.77.10':445
'87.##7.89.168':445
'87.##7.5.158':445
'87.##7.30.152':445
'87.##7.135.135':445
'87.##7.157.240':445
'87.##7.13.102':445
'87.##7.76.227':445
'87.##7.11.76':445
'87.##7.96.200':445
'87.##7.48.85':445
'87.##7.52.11':445
'87.##7.170.84':445
'87.##7.65.250':445
'87.##7.117.162':445
'87.##7.68.232':445
'87.##7.70.165':139
'87.##7.11.76':139
'87.##7.52.11':139
'87.##7.48.85':139
'87.##7.76.227':139
'87.##7.117.162':139
'87.##7.65.250':139
'87.##7.13.102':139
'87.##7.68.232':139
'87.##7.170.84':139
'87.##7.96.200':139
'87.##7.157.158':139
'87.##7.74.158':139
'87.##7.33.136':139
'87.##7.111.244':139
'87.##7.61.221':139
'87.##7.96.189':139
'87.##7.154.31':139
'87.##7.44.139':139
'87.##7.21.44':139
'87.##7.126.178':139
'87.##7.118.142':139
'87.##7.76.118':139
'87.##7.14.212':139
'87.##7.75.34':139
'87.##7.13.227':139
'87.##7.192.46':139
'87.##7.165.106':139
'87.##7.190.36':139
'87.##7.19.204':139
'87.##7.103.104':139
'87.##7.125.175':139
'87.##7.89.168':139
'87.##7.77.10':139
'87.##7.105.168':139
'87.##7.135.135':139
'87.##7.30.152':139
'87.##7.126.24':139
'87.##7.157.240':139
'87.##7.5.158':139
'87.##7.126.24':445
'87.##7.235.135':139
'87.##7.97.194':139
'87.##7.43.99':139
'87.#67.64.6':139
'87.##7.235.180':139
'87.##7.227.213':139
'87.##7.75.110':139
'87.##7.68.53':139
'87.##7.158.67':139
'87.##7.36.224':139
'87.##7.143.29':139
'87.##7.163.208':139
'87.##7.240.237':139
'87.##7.112.135':139
'87.##7.28.225':139
'87.##7.102.147':139
'87.##7.4.190':139
'87.##7.68.237':139
'87.##7.214.125':139
'87.##7.186.80':139
'87.##7.250.232':139
'87.#67.98.2':139
'87.#67.2.64':139
'87.##7.78.179':139
'87.##7.150.208':139
'87.##7.118.39':139
'87.##7.112.14':139
'87.##7.81.151':139
'87.##7.188.81':139
'87.##7.221.109':139
'87.##7.28.184':139
'87.##7.89.39':139
'87.##7.71.66':139
'87.##7.62.254':139
'87.##7.89.201':139
'87.##7.167.95':139
'87.##7.232.51':139
'87.##7.232.89':139
'87.##7.11.137':139
'87.#67.7.36':139
'87.##7.164.220':445
'87.##7.42.254':445
'87.##7.70.165':445
'87.##7.69.70':445
'87.##7.127.168':445
'87.##7.81.167':445
'87.#67.8.81':445
'87.##7.154.172':445
'87.##7.15.101':445
'87.##7.165.106':445
'87.##7.75.34':445
'87.##7.118.142':445
'87.##7.103.104':445
'87.##7.14.212':445
'87.##7.76.118':445
'87.##7.19.204':445
'87.##7.192.46':445
'87.##7.13.227':445
'87.##7.190.36':445
'87.##7.128.7':445
'87.##7.65.250':9988
'87.##7.105.168':9988
'87.##7.170.84':9988
'87.##7.13.102':9988
'87.##7.157.240':9988
'87.##7.205.66':139
'87.##7.72.35':139
'87.##7.30.152':9988
'87.##7.75.34':9988
'87.##7.11.76':9988
'87.##7.74.158':9988
'87.##7.21.44':9988
'87.##7.13.65':445
'87.##7.243.168':445
'87.##7.111.244':9988
'87.##7.154.31':9988
'87.##7.96.200':9988
'87.##7.33.136':9988
'87.##7.157.158':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней