Trojan.Starman.5773

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##7.29.136':445
'24.##7.219.186':445
'24.##7.6.118':445
'24.##7.51.239':445
'24.##7.135.128':445
'24.##7.255.78':445
'24.##7.48.101':445
'24.##7.70.248':445
'24.#07.5.9':445
'24.##7.218.206':139
'24.##7.221.1':139
'24.##7.255.78':139
'24.##7.48.101':139
'24.##7.57.209':139
'24.##7.195.159':139
'24.#07.9.61':139
'24.#07.9.58':139
'24.##7.10.77':139
'24.##7.218.206':445
'24.##7.181.2':139
'24.##7.211.125':139
'24.##7.155.170':139
'24.##7.81.116':139
'24.##7.7.190':139
'24.##7.213.20':139
'24.##7.95.26':139
'24.##7.248.33':139
'24.##7.114.248':139
'24.#07.9.58':445
'24.##7.10.77':445
'24.##7.221.1':445
'24.##7.57.209':445
'24.##7.195.159':445
'24.##7.112.226':139
'24.##7.171.42':139
'24.#07.9.61':445
'24.##7.226.142':139
'24.#07.9.2':445
'24.##7.93.240':445
'24.##7.83.67':445
'24.##7.25.197':445
'24.##7.136.218':445
'24.##7.18.248':445
'24.##7.80.102':445
'24.##7.39.43':445
'24.##7.37.114':445
'24.##7.63.51':445
'24.##7.141.134':445
'24.##7.16.133':445
'24.##7.53.70':445
'24.##7.201.140':445
'24.##7.107.80':445
'24.##7.193.227':445
'24.##7.180.3':445
'24.##7.148.50':445
'24.##7.201.43':445
'24.##7.6.118':139
'24.##7.51.239':139
'24.##7.227.114':445
'24.#07.86.3':445
'24.##7.29.136':139
'24.##7.70.248':139
'24.#07.5.9':139
'24.##7.219.186':139
'24.##7.135.128':139
'24.#07.80.1':445
'24.##7.194.54':445
'24.##7.57.222':445
'24.##7.55.104':445
'24.##7.23.174':445
'24.##7.249.166':445
'24.##7.7.249':445
'24.##7.76.193':445
'24.##7.167.76':445
'24.##7.19.209':445
'24.##7.110.99':445
'24.##7.22.22':445
'24.##7.67.135':445
'24.##7.191.213':445
'24.##7.0.202':445
'24.##7.18.102':445
'24.##7.79.209':445
'24.##7.61.71':445
'24.##7.13.206':445
'24.##7.4.244':445
'24.##7.126.140':445
'24.##7.252.7':445
'24.##7.91.144':445
'24.##7.225.239':445
'24.##7.183.60':445
'24.##7.109.198':445
'24.##7.239.109':445
'24.#07.45.7':445
'24.##7.17.118':139
'24.##7.24.102':139
'24.##7.52.80':139
'24.##7.118.118':139
'24.##7.200.246':139
'24.##7.251.242':139
'24.##7.178.227':139
'24.##7.156.92':139
'24.##7.242.223':139
'24.##7.46.108':139
'24.##7.184.116':139
'24.##7.54.45':445
'24.##7.159.61':445
'24.##7.227.135':139
'24.##7.223.5':139
'24.##7.50.223':139
'24.##7.166.59':139
'24.##7.24.85':139
'24.##7.22.22':139
'24.##7.67.135':139
'24.##7.225.239':139
'24.##7.183.60':139
'24.##7.19.209':139
'24.##7.79.209':139
'24.##7.61.71':139
'24.##7.110.99':139
'24.##7.191.213':139
'24.##7.126.140':139
'24.##7.252.7':139
'24.##7.212.226':139
'24.##7.42.68':139
'24.##7.13.206':139
'24.##7.109.198':139
'24.##7.239.109':139
'24.##7.4.244':139
'24.##7.91.144':139
'24.##7.0.202':139
'24.##7.7.190':445
'24.##7.248.33':445
'24.##7.181.2':445
'24.##7.211.125':445
'24.##7.114.248':445
'24.##7.212.226':445
'24.##7.42.68':445
'24.##7.213.20':445
'24.##7.95.26':445
'24.##7.54.45':139
'24.##7.159.61':139
'24.##7.18.102':139
'24.#07.45.7':139
'24.##7.226.142':445
'24.##7.155.170':445
'24.##7.81.116':445
'24.##7.112.226':445
'24.##7.171.42':445
'24.##7.178.251':445
'24.##7.41.164':139
'24.##7.161.237':139
'24.##7.231.205':139
'24.##7.255.240':139
'24.##7.117.21':139
'24.##7.21.200':445
'24.##7.219.187':445
'24.##7.105.225':445
'24.##7.48.149':445
'24.##7.92.99':139
'24.##7.98.29':139
'24.##7.192.182':139
'24.##7.25.192':139
'24.##7.205.11':139
'24.##7.26.82':139
'24.##7.208.19':139
'24.##7.232.204':139
'24.##7.230.23':139
'24.##7.22.75':445
'24.##7.89.12':445
'24.##7.238.221':445
'24.##7.232.89':445
'24.##7.164.57':445
'24.##7.183.253':445
'24.##7.56.67':445
'24.##7.198.55':445
'24.##7.50.159':445
'24.##7.196.192':445
'24.#07.1.92':445
'24.##7.163.115':445
'24.##7.186.224':445
'24.#07.5.92':445
'24.##7.59.165':445
'24.##7.165.142':445
'24.##7.89.165':445
'24.##7.180.14':445
'24.##7.142.117':445
'24.##7.142.117':139
'24.##7.165.142':139
'24.##7.59.165':139
'24.##7.180.14':139
'24.##7.89.165':139
'24.##7.238.221':139
'24.##7.89.12':139
'24.##7.232.89':139
'24.##7.164.57':139
'24.##7.21.200':139
'24.##7.186.224':139
'24.##7.105.225':139
'24.##7.219.187':139
'24.##7.48.149':139
'24.#07.1.92':139
'24.##7.163.115':139
'24.##7.22.75':139
'24.#07.5.92':139
'24.##7.183.253':139
'24.##7.165.156':139
'24.##7.119.79':139
'24.##7.3.143':139
'24.##7.156.49':139
'24.##7.230.195':139
'24.##7.66.10':139
'24.##7.28.198':139
'24.##7.104.51':139
'24.##7.78.182':139
'24.##7.56.67':139
'24.##7.198.55':139
'24.##7.50.159':139
'24.##7.196.192':139
'24.##7.78.107':139
'24.##7.29.35':139
'24.##7.97.246':139
'24.##7.192.24':139
'24.##7.214.38':139
'24.##7.193.227':139
'24.##7.83.67':139
'24.##7.148.50':139
'24.##7.107.80':139
'24.##7.25.197':139
'24.##7.136.218':139
'24.##7.39.43':139
'24.#07.9.2':139
'24.##7.93.240':139
'24.##7.178.251':139
'24.##7.16.133':139
'24.##7.193.202':139
'24.##7.52.202':139
'24.##7.53.70':139
'24.##7.201.140':139
'24.##7.180.3':139
'24.##7.63.51':139
'24.##7.141.134':139
'24.##7.37.114':139
'24.##7.7.249':139
'24.##7.227.114':139
'24.##7.167.76':139
'24.##7.249.166':139
'24.#07.86.3':139
'24.##7.193.202':445
'24.##7.52.202':445
'24.##7.74.98':445
'24.##7.39.39':445
'24.##7.201.43':139
'24.##7.57.222':139
'24.##7.18.248':139
'24.##7.80.102':139
'24.##7.55.104':139
'24.##7.23.174':139
'24.##7.76.193':139
'24.#07.80.1':139
'24.##7.194.54':139
'24.##7.78.182':445
'24.##7.66.10':445
'24.##7.230.195':445
'24.##7.104.51':445
'24.##7.28.198':445
'24.##7.92.99':445
'24.##7.98.29':445
'24.##7.192.182':445
'24.##7.25.192':445
'24.##7.214.38':445
'24.##7.29.35':445
'24.##7.78.107':445
'24.##7.192.24':445
'24.##7.97.246':445
'24.##7.165.156':445
'24.##7.119.79':445
'24.##7.3.143':445
'24.##7.156.49':445
'24.##7.205.11':445
'24.#07.5.92':9988
'24.##7.196.192':9988
'24.#07.1.92':9988
'24.##7.214.38':9988
'24.##7.66.10':9988
'24.##7.74.98':139
'24.##7.39.39':139
'24.##7.231.205':9988
'24.##7.41.164':9988
'24.##7.26.82':445
'24.##7.208.19':445
'24.##7.232.204':445
'24.##7.230.23':445
'24.##7.231.205':445
'24.##7.161.237':445
'24.##7.117.21':445
'24.##7.255.240':445
'24.##7.41.164':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней