Trojan.Starman.6361

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'84.##5.40.53':139
'84.##5.164.234':139
'84.#95.37.9':139
'84.##5.163.6':139
'84.##5.70.16':139
'84.##5.229.67':139
'84.##5.6.241':139
'84.##5.127.111':139
'84.##5.147.165':139
'84.##5.198.84':139
'84.#95.1.60':139
'84.##5.28.170':139
'84.##5.134.28':139
'84.##5.169.227':139
'84.##5.120.65':139
'84.##5.228.119':139
'84.##5.244.189':139
'84.##5.166.200':139
'84.##5.134.0':139
'84.##5.111.85':139
'84.##5.205.215':139
'84.##5.43.202':139
'84.#95.2.68':445
'84.##5.70.249':445
'84.##5.164.126':445
'84.##5.73.245':445
'84.##5.198.222':445
'84.##5.169.227':445
'84.##5.28.170':445
'84.##5.228.119':445
'84.##5.24.231':445
'84.##5.120.65':445
'84.##5.39.97':445
'84.##5.49.86':139
'84.##5.59.161':139
'84.##5.41.247':139
'84.##5.128.201':139
'84.##5.136.94':139
'84.##5.83.75':445
'84.##5.36.153':445
'84.##5.187.92':445
'84.##5.33.217':139
'84.##5.92.31':445
'84.##5.24.231':139
'84.##5.26.106':139
'84.##5.26.151':139
'84.##5.14.172':139
'84.##5.77.44':139
'84.##5.74.218':139
'84.##5.10.151':139
'84.##5.31.10':139
'84.##5.141.29':139
'84.##5.6.213':139
'84.##5.73.252':139
'84.##5.69.175':139
'84.##5.58.92':445
'84.##5.77.81':445
'84.##5.160.211':445
'84.##5.102.188':445
'84.##5.153.201':445
'84.##5.79.97':445
'84.##5.31.205':139
'84.##5.56.241':445
'84.##5.93.218':445
'84.##5.45.183':445
'84.##5.31.205':445
'84.##5.36.153':139
'84.##5.39.97':139
'84.##5.83.75':139
'84.##5.92.31':139
'84.##5.187.92':139
'84.#95.2.68':139
'84.##5.70.249':139
'84.##5.164.126':139
'84.##5.73.245':139
'84.##5.198.222':139
'84.##5.31.10':445
'84.##5.14.172':445
'84.##5.26.106':445
'84.##5.74.218':445
'84.##5.69.175':445
'84.##5.77.44':445
'84.##5.141.29':445
'84.##5.10.151':445
'84.##5.73.252':445
'84.##5.26.151':445
'84.##5.6.213':445
'84.##5.160.244':139
'84.##5.141.66':139
'84.##5.87.227':139
'84.##5.229.71':139
'84.##5.192.234':139
'84.##5.136.99':139
'84.##5.74.136':139
'84.##5.248.235':139
'84.##5.138.238':139
'84.##5.105.167':139
'84.##5.3.208':139
'84.##5.129.130':445
'84.##5.105.4':139
'84.##5.188.229':445
'84.##5.133.248':445
'84.##5.198.107':445
'84.##5.21.229':139
'84.##5.80.248':139
'84.##5.6.150':139
'84.##5.4.240':139
'84.##5.145.23':139
'84.##5.223.74':139
'84.##5.30.41':139
'84.##5.63.186':139
'84.##5.186.67':139
'84.##5.155.229':139
'84.##5.161.123':139
'84.##5.206.162':139
'84.##5.20.245':139
'84.##5.65.56':139
'84.##5.96.204':139
'84.##5.55.84':139
'84.##5.48.165':139
'84.##5.73.59':139
'84.##5.147.39':139
'84.##5.232.60':139
'84.##5.170.222':139
'84.##5.129.170':139
'84.##5.182.90':139
'84.##5.14.183':139
'84.##5.90.180':139
'84.##5.100.248':139
'84.##5.180.100':139
'84.##5.142.117':445
'84.##5.127.111':445
'84.##5.229.67':445
'84.##5.198.84':445
'84.##5.164.234':445
'84.##5.147.165':445
'84.##5.136.94':445
'84.##5.41.247':445
'84.##5.128.201':445
'84.##5.6.241':445
'84.##5.43.202':445
'84.##5.40.53':445
'84.##5.134.0':445
'84.##5.244.189':445
'84.##5.205.215':445
'84.##5.134.28':445
'84.##5.111.85':445
'84.##5.70.16':445
'84.#95.37.9':445
'84.##5.163.6':445
'84.##5.166.200':445
'84.#95.1.60':445
'84.##5.49.86':445
'84.##5.39.110':445
'84.##5.22.99':445
'84.##5.129.130':139
'84.##5.198.107':139
'84.##5.188.229':139
'84.##5.205.81':445
'84.##5.147.204':445
'84.##5.47.46':445
'84.##5.109.196':445
'84.##5.176.28':445
'84.##5.133.248':139
'84.##5.22.99':139
'84.##5.109.196':139
'84.##5.39.110':139
'84.##5.59.161':445
'84.##5.33.217':445
'84.##5.147.204':139
'84.##5.142.117':139
'84.##5.205.81':139
'84.##5.176.28':139
'84.##5.47.46':139
'84.##5.214.43':445
'84.##5.238.43':445
'84.##5.35.221':445
'84.##5.11.215':445
'84.##5.230.189':445
'84.##5.184.184':445
'84.##5.161.210':445
'84.##5.167.177':445
'84.##5.74.155':445
'84.##5.177.168':445
'84.##5.211.254':445
'84.##5.126.98':139
'84.##5.34.219':139
'84.##5.85.44':139
'84.##5.96.24':139
'84.##5.161.96':139
'84.##5.221.243':445
'84.##5.130.3':445
'84.##5.26.127':445
'84.##5.70.34':139
'84.##5.105.234':139
'84.##5.111.72':445
'84.#95.9.52':445
'84.##5.225.24':445
'84.##5.9.226':445
'84.##5.233.5':445
'84.##5.198.149':445
'84.##5.69.22':445
'84.##5.117.27':445
'84.##5.174.207':445
'84.##5.188.131':445
'84.##5.207.96':445
'84.##5.15.48':445
'84.##5.12.253':445
'84.##5.237.1':445
'84.##5.158.225':445
'84.##5.31.40':445
'84.##5.192.66':445
'84.##5.6.124':445
'84.#95.48.6':445
'84.##5.56.239':445
'84.#95.20.3':445
'84.##5.198.1':445
'84.##5.90.213':139
'84.##5.111.72':139
'84.##5.31.40':139
'84.##5.161.210':139
'84.##5.167.177':139
'84.##5.184.184':139
'84.##5.237.1':139
'84.#95.20.3':139
'84.##5.12.253':139
'84.##5.192.66':139
'84.##5.158.225':139
'84.##5.177.168':139
'84.##5.211.254':139
'84.##5.11.215':139
'84.##5.130.3':139
'84.##5.221.243':139
'84.##5.26.127':139
'84.##5.238.43':139
'84.##5.74.155':139
'84.##5.214.43':139
'84.##5.230.189':139
'84.##5.35.221':139
'84.##5.198.1':139
'84.##5.85.150':139
'84.##5.82.228':139
'84.##5.117.27':139
'84.##5.174.207':139
'84.##5.69.22':139
'84.##5.209.97':139
'84.##5.97.48':139
'84.##5.125.49':139
'84.##5.69.223':139
'84.##5.180.83':139
'84.##5.207.96':139
'84.##5.15.48':139
'84.##5.233.5':139
'84.#95.48.6':139
'84.##5.56.239':139
'84.##5.6.124':139
'84.##5.225.24':139
'84.##5.188.131':139
'84.#95.9.52':139
'84.##5.198.149':139
'84.##5.9.226':139
'84.##5.79.97':139
'84.##5.190.150':445
'84.##5.56.241':139
'84.##5.93.218':139
'84.##5.45.183':139
'84.##5.154.21':445
'84.##5.4.220':445
'84.##5.34.232':445
'84.##5.99.153':445
'84.##5.29.59':445
'84.##5.77.81':139
'84.##5.21.82':139
'84.##5.102.179':139
'84.##5.8.193':139
'84.##5.50.112':139
'84.##5.193.43':139
'84.##5.160.211':139
'84.##5.58.92':139
'84.##5.153.201':139
'84.##5.166.38':139
'84.##5.102.188':139
'84.##5.65.183':445
'84.##5.151.26':445
'84.##5.50.112':445
'84.##5.20.102':445
'84.##5.26.98':445
'84.##5.157.38':445
'84.##5.102.179':445
'84.##5.166.38':445
'84.##5.21.82':445
'84.##5.193.43':445
'84.##5.8.193':445
'84.##5.243.187':445
'84.##5.146.232':445
'84.##5.117.146':445
'84.##5.232.169':445
'84.##5.85.104':445
'84.##5.176.17':445
'84.##5.73.236':445
'84.##5.50.99':445
'84.##5.166.99':445
'84.##5.43.192':445
'84.##5.233.8':445
'84.##5.151.26':139
'84.##5.105.234':445
'84.##5.230.189':9988
'84.##5.70.34':445
'84.##5.126.98':445
'84.##5.34.219':445
'84.##5.198.149':9988
'84.##5.9.226':9988
'84.##5.12.253':9988
'84.##5.238.43':9988
'84.##5.192.66':9988
'84.##5.85.44':445
'84.##5.180.83':445
'84.##5.125.49':445
'84.##5.69.223':445
'84.##5.85.150':445
'84.##5.82.228':445
'84.##5.96.24':445
'84.##5.161.96':445
'84.##5.90.213':445
'84.##5.209.97':445
'84.##5.97.48':445
'84.##5.69.223':9988
'84.##5.50.99':139
'84.##5.73.236':139
'84.##5.233.8':139
'84.##5.117.146':139
'84.##5.43.192':139
'84.##5.20.102':139
'84.##5.157.38':139
'84.##5.243.187':139
'84.##5.166.99':139
'84.##5.26.98':139
'84.##5.146.232':139
'84.##5.29.59':139
'84.##5.154.21':139
'84.##5.34.232':139
'84.##5.190.150':139
'84.##5.99.153':139
'84.##5.176.17':139
'84.##5.232.169':139
'84.##5.85.104':139
'84.##5.4.220':139
'84.##5.65.183':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней