Trojan.Starman.5698

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##9.185.135':139
'61.##9.112.251':139
'61.##9.23.66':139
'61.##9.247.41':139
'61.##9.13.61':139
'61.##9.242.207':139
'61.##9.93.243':139
'61.##9.208.169':139
'61.##9.151.112':139
'61.##9.148.29':139
'61.##9.25.214':445
'61.##9.227.25':445
'61.##9.213.235':445
'61.#89.4.14':445
'61.##9.235.182':445
'61.##9.233.181':139
'61.##9.31.80':139
'61.##9.117.233':139
'61.##9.187.226':445
'61.##9.233.187':139
'61.##9.51.94':139
'61.##9.208.169':445
'61.##9.242.207':445
'61.##9.148.29':445
'61.##9.112.251':445
'61.##9.151.112':445
'61.##9.42.46':445
'61.##9.163.62':139
'61.##9.149.86':445
'61.##9.93.243':445
'61.##9.51.94':445
'61.##9.117.233':445
'61.##9.233.181':445
'61.##9.233.187':445
'61.##9.149.86':139
'61.##9.42.46':139
'61.##9.23.66':445
'61.##9.185.135':445
'61.##9.13.61':445
'61.##9.31.80':445
'61.##9.247.41':445
'61.##9.67.237':445
'61.##9.187.226':139
'61.##9.78.124':445
'61.##9.227.25':139
'61.##9.213.235':139
'61.##9.25.214':139
'61.##9.174.238':445
'61.##9.11.165':445
'61.##9.238.158':445
'61.##9.102.186':445
'61.##9.62.121':445
'61.##9.172.44':139
'61.##9.108.159':139
'61.##9.73.234':139
'61.##9.115.123':139
'61.##9.137.227':139
'61.#89.4.14':139
'61.##9.235.182':139
'61.##9.67.237':139
'61.##9.31.85':139
'61.##9.40.155':139
'61.##9.194.163':445
'61.##9.115.123':445
'61.##9.137.227':445
'61.##9.109.138':445
'61.##9.195.30':445
'61.##9.123.119':445
'61.##9.31.85':445
'61.##9.40.155':445
'61.##9.108.159':445
'61.##9.73.234':445
'61.##9.172.44':445
'61.##9.134.209':445
'61.##9.29.214':445
'61.##9.143.235':445
'61.##9.137.237':445
'61.##9.30.37':445
'61.##9.47.27':445
'61.##9.69.198':445
'61.##9.92.188':445
'61.##9.89.141':445
'61.##9.149.53':445
'61.##9.50.33':139
'61.##9.41.228':445
'61.##9.182.226':445
'61.##9.100.102':445
'61.##9.6.218':445
'61.##9.102.7':445
'61.##9.49.106':445
'61.##9.168.251':445
'61.##9.68.53':445
'61.##9.143.55':445
'61.##9.17.63':445
'61.##9.83.81':445
'61.##9.197.82':445
'61.##9.49.108':445
'61.##9.3.222':445
'61.##9.241.216':445
'61.##9.225.119':445
'61.##9.100.15':445
'61.##9.148.133':445
'61.##9.181.97':445
'61.##9.4.185':445
'61.##9.175.87':445
'61.##9.187.38':139
'61.#89.7.97':139
'61.##9.255.245':139
'61.##9.37.38':139
'61.##9.163.233':139
'61.##9.232.254':139
'61.##9.217.225':139
'61.##9.131.241':139
'61.##9.188.53':139
'61.##9.239.19':139
'61.##9.47.72':139
'61.##9.217.116':139
'61.##9.148.90':445
'61.##9.235.121':445
'61.##9.71.14':445
'61.##9.55.220':139
'61.##9.71.251':139
'61.##9.122.191':139
'61.##9.44.115':139
'61.##9.71.45':139
'61.##9.138.84':445
'61.##9.181.97':139
'61.##9.4.185':139
'61.##9.197.82':139
'61.##9.49.108':139
'61.##9.83.81':139
'61.##9.6.218':139
'61.##9.102.7':139
'61.##9.100.15':139
'61.##9.148.133':139
'61.##9.225.119':139
'61.##9.182.177':139
'61.##9.109.53':139
'61.##9.114.138':139
'61.##9.123.230':139
'61.##9.173.46':139
'61.##9.3.222':139
'61.##9.241.216':139
'61.##9.138.84':139
'61.##9.97.117':139
'61.##9.189.252':139
'61.##9.100.102':139
'61.##9.123.230':445
'61.##9.173.46':445
'61.##9.50.33':445
'61.##9.148.90':139
'61.##9.163.62':445
'61.##9.97.117':445
'61.##9.189.252':445
'61.##9.109.53':445
'61.##9.114.138':445
'61.##9.182.177':445
'61.##9.17.63':139
'61.##9.68.53':139
'61.##9.143.55':139
'61.##9.41.228':139
'61.##9.182.226':139
'61.##9.235.121':139
'61.##9.71.14':139
'61.##9.175.87':139
'61.##9.49.106':139
'61.##9.168.251':139
'61.##9.67.107':445
'61.##9.40.31':445
'61.##9.123.19':445
'61.##9.136.208':445
'61.##9.66.46':445
'61.##9.199.53':445
'61.##9.254.198':445
'61.##9.187.218':445
'61.##9.245.59':445
'61.##9.53.231':445
'61.##9.80.243':139
'61.##9.56.189':139
'61.##9.79.158':139
'61.##9.118.148':139
'61.##9.140.186':139
'61.##9.65.217':139
'61.##9.168.115':445
'61.##9.172.161':139
'61.##9.39.190':139
'61.##9.88.208':139
'61.##9.79.254':445
'61.##9.64.122':445
'61.##9.125.143':445
'61.##9.141.227':445
'61.##9.183.122':445
'61.#89.0.3':445
'61.##9.138.95':445
'61.##9.55.102':445
'61.##9.95.166':445
'61.##9.42.162':445
'61.##9.102.196':445
'61.##9.212.235':445
'61.##9.72.88':445
'61.##9.235.192':445
'61.##9.45.183':445
'61.#89.67.6':445
'61.##9.137.101':445
'61.##9.190.7':445
'61.##9.101.25':445
'61.##9.160.28':445
'61.##9.61.102':445
'61.##9.201.145':139
'61.#89.67.6':139
'61.##9.235.192':139
'61.##9.45.183':139
'61.##9.254.198':139
'61.##9.79.254':139
'61.##9.61.102':139
'61.##9.101.25':139
'61.##9.160.28':139
'61.##9.212.235':139
'61.##9.72.88':139
'61.##9.40.31':139
'61.##9.66.46':139
'61.##9.168.115':139
'61.##9.187.218':139
'61.##9.123.19':139
'61.##9.53.231':139
'61.##9.199.53':139
'61.##9.245.59':139
'61.##9.136.208':139
'61.##9.67.107':139
'61.##9.137.101':139
'61.##9.205.193':139
'61.#89.57.6':139
'61.##9.114.210':139
'61.##9.55.102':139
'61.##9.113.129':139
'61.##9.22.249':139
'61.##9.12.200':139
'61.##9.220.202':139
'61.##9.183.161':139
'61.##9.109.167':139
'61.##9.141.227':139
'61.##9.64.122':139
'61.#89.0.3':139
'61.##9.190.7':139
'61.##9.183.122':139
'61.##9.95.166':139
'61.##9.138.95':139
'61.##9.102.196':139
'61.##9.125.143':139
'61.##9.42.162':139
'61.##9.113.129':445
'61.##9.252.216':445
'61.##9.89.82':445
'61.##9.73.252':445
'61.#89.7.48':445
'61.#89.0.16':445
'61.##9.189.77':445
'61.##9.58.144':445
'61.##9.141.22':445
'61.##9.132.149':445
'61.##9.113.132':445
'61.##9.113.132':139
'61.##9.141.22':139
'61.##9.132.149':139
'61.##9.252.216':139
'61.##9.89.82':139
'61.##9.199.199':445
'61.##9.0.189':445
'61.##9.51.32':139
'61.##9.189.77':139
'61.##9.58.144':139
'61.##9.51.32':445
'61.##9.149.53':139
'61.##9.92.188':139
'61.##9.89.141':139
'61.##9.134.209':139
'61.##9.29.214':139
'61.##9.123.119':139
'61.##9.109.138':139
'61.##9.195.30':139
'61.##9.47.27':139
'61.##9.69.198':139
'61.##9.238.158':139
'61.##9.174.238':139
'61.##9.62.121':139
'61.##9.78.124':139
'61.##9.102.186':139
'61.##9.30.37':139
'61.##9.143.235':139
'61.##9.137.237':139
'61.##9.11.165':139
'61.##9.194.163':139
'61.##9.73.252':139
'61.##9.56.189':445
'61.##9.39.190':445
'61.##9.80.243':445
'61.##9.140.186':445
'61.##9.79.158':445
'61.##9.66.46':9988
'61.##9.123.19':9988
'61.##9.65.217':445
'61.##9.88.208':445
'61.##9.172.161':445
'61.##9.183.161':445
'61.##9.109.167':445
'61.#89.57.6':445
'61.##9.114.210':445
'61.##9.205.193':445
'61.##9.201.145':445
'61.##9.118.148':445
'61.##9.12.200':445
'61.##9.220.202':445
'61.##9.22.249':445
'61.##9.67.107':9988
'61.##9.55.102':9988
'61.##9.113.129':9988
'61.##9.42.162':9988
'61.#89.0.3':9988
'61.##9.64.122':9988
'61.#89.7.48':139
'61.#89.0.16':139
'61.##9.0.189':139
'61.##9.201.145':9988
'61.##9.199.199':139
'61.##9.45.183':9988
'61.#89.67.6':9988
'61.##9.79.254':9988
'61.##9.199.53':9988
'61.##9.254.198':9988
'61.##9.137.101':9988
'61.##9.183.122':9988
'61.##9.61.102':9988
'61.##9.235.192':9988
'61.##9.212.235':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней