Trojan.Starman.6005

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##3.246.209':139
'24.##3.134.246':139
'24.##3.209.173':139
'24.##3.196.168':139
'24.##3.10.212':139
'24.##3.217.119':139
'24.##3.183.17':139
'24.##3.140.72':139
'24.##3.79.21':139
'24.##3.217.106':139
'24.##3.122.146':139
'24.##3.201.118':139
'24.##3.138.24':445
'24.##3.42.222':139
'24.##3.32.28':445
'24.##3.171.170':445
'24.#13.75.7':445
'24.##3.45.30':139
'24.##3.28.227':139
'24.##3.20.61':139
'24.#13.29.5':139
'24.##3.82.47':139
'24.##3.11.27':139
'24.##3.95.140':139
'24.##3.106.175':139
'24.##3.42.222':445
'24.##3.4.139':139
'24.##3.182.23':139
'24.#13.3.60':139
'24.##3.45.30':445
'24.##3.28.227':445
'24.##3.20.61':445
'24.#13.29.5':445
'24.##3.82.47':445
'24.##3.11.27':445
'24.##3.183.78':139
'24.##3.39.138':139
'24.##3.240.46':139
'24.##3.43.89':139
'24.##3.25.18':139
'24.##3.125.52':139
'24.##3.19.233':139
'24.##3.0.189':139
'24.##3.109.254':139
'24.##3.202.206':139
'24.##3.59.240':139
'24.##3.17.23':139
'24.##3.240.31':445
'24.##3.252.137':445
'24.##3.247.87':445
'24.##3.67.159':445
'24.##3.60.136':445
'24.##3.50.80':445
'24.##3.11.167':139
'24.##3.188.70':139
'24.##3.12.127':445
'24.##3.194.252':445
'24.##3.231.97':445
'24.##3.74.64':445
'24.##3.59.195':445
'24.#13.0.30':445
'24.##3.20.14':445
'24.##3.27.214':445
'24.##3.131.199':445
'24.##3.120.48':445
'24.##3.229.24':445
'24.##3.224.204':445
'24.##3.113.209':445
'24.##3.181.103':445
'24.##3.172.141':445
'24.##3.128.178':139
'24.##3.49.129':445
'24.##3.82.190':445
'24.##3.128.178':445
'24.##3.11.167':445
'24.##3.188.70':445
'24.##3.149.204':445
'24.##3.69.67':445
'24.##3.17.115':445
'24.##3.236.132':445
'24.##3.109.217':445
'24.##3.70.31':445
'24.##3.138.24':139
'24.##3.109.217':139
'24.##3.70.31':139
'24.##3.149.204':139
'24.##3.49.129':139
'24.##3.82.190':139
'24.##3.236.132':139
'24.##3.32.28':139
'24.#13.75.7':139
'24.##3.171.170':139
'24.##3.69.67':139
'24.##3.17.115':139
'24.##3.201.118':445
'24.##3.107.107':139
'24.##3.50.37':139
'24.##3.53.72':139
'24.##3.212.58':139
'24.##3.147.6':139
'24.##3.145.128':139
'24.##3.54.105':139
'24.##3.89.94':139
'24.##3.155.18':139
'24.##3.235.17':139
'24.##3.34.235':139
'24.##3.14.57':139
'24.##3.43.113':445
'24.##3.186.21':445
'24.##3.101.3':445
'24.##3.33.121':445
'24.##3.20.65':445
'24.##3.123.151':445
'24.##3.176.72':445
'24.##3.24.53':445
'24.##3.183.40':445
'24.##3.96.99':445
'24.##3.119.107':445
'24.##3.206.171':139
'24.##3.148.105':139
'24.##3.82.72':139
'24.##3.144.87':139
'24.##3.75.69':139
'24.#13.8.96':139
'24.##3.175.141':139
'24.##3.42.155':139
'24.##3.25.228':139
'24.##3.73.183':139
'24.##3.72.169':139
'24.##3.221.91':139
'24.##3.69.130':139
'24.##3.154.222':139
'24.##3.225.36':139
'24.##3.221.226':139
'24.##3.193.230':139
'24.##3.226.162':139
'24.##3.104.148':139
'24.##3.111.57':139
'24.##3.136.203':139
'24.##3.37.101':139
'24.##3.94.248':139
'24.##3.84.119':139
'24.##3.39.138':445
'24.##3.240.46':445
'24.##3.43.89':445
'24.##3.25.18':445
'24.##3.125.52':445
'24.##3.19.233':445
'24.##3.0.189':445
'24.##3.109.254':445
'24.##3.202.206':445
'24.##3.59.240':445
'24.##3.17.23':445
'24.##3.95.140':445
'24.##3.246.209':445
'24.##3.134.246':445
'24.##3.209.173':445
'24.##3.196.168':445
'24.##3.10.212':445
'24.##3.217.119':445
'24.##3.183.17':445
'24.##3.140.72':445
'24.##3.79.21':445
'24.##3.217.106':445
'24.##3.122.146':445
'24.##3.183.78':445
'24.##3.119.107':139
'24.##3.183.40':139
'24.##3.96.99':139
'24.##3.186.21':139
'24.##3.123.151':139
'24.##3.176.72':139
'24.##3.61.154':445
'24.##3.18.83':445
'24.##3.27.31':445
'24.##3.24.53':139
'24.##3.151.59':445
'24.##3.43.113':139
'24.##3.106.175':445
'24.##3.151.59':139
'24.##3.4.139':445
'24.##3.182.23':445
'24.#13.3.60':445
'24.##3.27.31':139
'24.##3.20.65':139
'24.##3.101.3':139
'24.##3.33.121':139
'24.##3.61.154':139
'24.##3.18.83':139
'24.##3.18.185':445
'24.#13.5.74':445
'24.##3.172.147':445
'24.##3.61.109':445
'24.##3.77.199':445
'24.##3.222.54':445
'24.##3.108.34':445
'24.##3.110.248':445
'24.##3.80.44':445
'24.##3.162.87':445
'24.##3.80.76':445
'24.##3.137.193':445
'24.##3.224.153':139
'24.##3.192.8':445
'24.##3.108.239':139
'24.##3.99.195':139
'24.##3.146.99':139
'24.##3.36.202':445
'24.##3.5.131':445
'24.##3.18.136':445
'24.##3.18.80':445
'24.##3.131.43':445
'24.##3.43.196':445
'24.##3.49.123':445
'24.##3.108.27':445
'24.##3.158.108':445
'24.##3.27.141':445
'24.##3.191.38':445
'24.##3.110.165':445
'24.##3.24.158':445
'24.##3.162.207':445
'24.##3.96.168':445
'24.##3.21.92':445
'24.##3.17.74':445
'24.##3.92.45':445
'24.##3.39.73':445
'24.##3.232.41':445
'24.##3.219.75':445
'24.#13.4.62':445
'24.##3.13.50':445
'24.##3.237.12':445
'24.##3.248.54':445
'24.##3.154.62':445
'24.##3.16.240':445
'24.##3.183.51':445
'24.##3.141.200':445
'24.##3.229.155':445
'24.##3.80.76':139
'24.##3.80.44':139
'24.##3.162.87':139
'24.#13.5.74':139
'24.##3.222.54':139
'24.##3.108.34':139
'24.##3.237.12':139
'24.#13.4.62':139
'24.##3.13.50':139
'24.##3.110.248':139
'24.##3.49.123':139
'24.##3.18.185':139
'24.##3.18.80':139
'24.##3.131.43':139
'24.##3.43.196':139
'24.##3.192.8':139
'24.##3.5.131':139
'24.##3.36.202':139
'24.##3.77.199':139
'24.##3.172.147':139
'24.##3.61.109':139
'24.##3.18.136':139
'24.##3.137.193':139
'24.##3.232.41':139
'24.##3.92.45':139
'24.##3.21.92':139
'24.##3.17.74':139
'24.##3.158.108':139
'24.##3.24.158':139
'24.##3.162.207':139
'24.##3.67.113':139
'24.##3.179.195':139
'24.##3.18.148':139
'24.##3.96.168':139
'24.##3.12.247':139
'24.##3.108.27':139
'24.##3.229.155':139
'24.##3.183.51':139
'24.##3.141.200':139
'24.##3.219.75':139
'24.##3.248.54':139
'24.##3.154.62':139
'24.##3.110.165':139
'24.##3.27.141':139
'24.##3.191.38':139
'24.##3.16.240':139
'24.##3.39.73':139
'24.##3.12.247':445
'24.##3.59.195':139
'24.##3.120.48':139
'24.#13.0.30':139
'24.##3.131.199':139
'24.##3.20.14':139
'24.##3.181.103':139
'24.##3.224.204':139
'24.##3.74.64':139
'24.##3.229.24':139
'24.##3.172.141':139
'24.##3.113.209':139
'24.##3.199.97':139
'24.##3.107.74':139
'24.##3.18.130':139
'24.##3.117.101':139
'24.##3.72.19':139
'24.##3.185.76':139
'24.##3.125.116':139
'24.##3.62.124':139
'24.##3.27.214':139
'24.##3.190.88':139
'24.##3.73.225':139
'24.##3.168.242':139
'24.##3.67.159':139
'24.##3.107.74':445
'24.##3.18.130':445
'24.##3.117.101':445
'24.##3.72.19':445
'24.##3.185.76':445
'24.##3.125.116':445
'24.##3.62.124':445
'24.##3.199.97':445
'24.##3.168.242':445
'24.##3.73.225':445
'24.##3.190.88':445
'24.##3.86.148':445
'24.##3.50.80':139
'24.##3.252.137':139
'24.##3.240.31':139
'24.##3.60.136':139
'24.##3.247.87':139
'24.##3.194.252':139
'24.##3.103.113':445
'24.#13.5.61':445
'24.##3.71.189':445
'24.##3.231.97':139
'24.##3.12.127':139
'24.##3.159.170':139
'24.##3.146.231':139
'24.##3.71.125':139
'24.##3.108.239':9988
'24.##3.102.34':139
'24.##3.109.146':139
'24.##3.218.195':139
'24.##3.204.218':139
'24.##3.25.132':139
'24.##3.62.11':139
'24.##3.52.14':139
'24.##3.99.195':9988
'24.##3.99.195':445
'24.##3.146.99':445
'24.##3.179.195':445
'24.##3.18.148':445
'24.##3.67.113':445
'24.##3.108.239':445
'24.##3.141.200':9988
'24.##3.18.148':9988
'24.##3.18.185':9988
'24.##3.224.153':445
'24.##3.5.131':9988
'24.##3.123.205':139
'24.##3.46.124':445
'24.##3.205.139':445
'24.##3.123.205':445
'24.##3.218.195':445
'24.##3.204.218':445
'24.##3.231.75':445
'24.#13.5.61':139
'24.##3.86.148':139
'24.##3.103.113':139
'24.##3.30.214':445
'24.##3.71.189':139
'24.##3.25.132':445
'24.##3.30.214':139
'24.##3.102.34':445
'24.##3.231.75':139
'24.##3.46.124':139
'24.##3.205.139':139
'24.##3.71.125':445
'24.##3.62.11':445
'24.##3.52.14':445
'24.##3.109.146':445
'24.##3.159.170':445
'24.##3.146.231':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней