Trojan.Starman.6405

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##1.19.204':139
'63.##1.93.199':139
'63.##1.99.154':139
'63.##1.134.99':139
'63.##1.138.169':445
'63.##1.63.166':445
'63.#01.80.4':139
'63.##1.126.176':139
'63.##1.154.57':139
'63.##1.178.178':139
'63.##1.219.178':139
'63.##1.196.113':139
'63.##1.249.130':139
'63.##1.124.178':139
'63.##1.57.120':139
'63.##1.202.219':139
'63.##1.12.93':139
'63.##1.100.106':445
'63.##1.3.171':445
'63.##1.17.151':445
'63.##1.183.251':445
'63.##1.88.231':445
'63.##1.12.248':445
'63.##1.18.51':445
'63.##1.185.190':445
'63.##1.153.91':445
'63.##1.18.41':445
'63.##1.183.197':445
'63.##1.254.116':445
'63.#01.5.69':445
'63.##1.218.187':445
'63.##1.59.125':445
'63.##1.246.229':445
'63.##1.97.140':445
'63.##1.11.173':445
'63.##1.147.193':139
'63.##1.183.197':139
'63.##1.254.116':139
'63.#01.5.69':139
'63.##1.218.187':139
'63.##1.59.125':139
'63.##1.246.229':139
'63.##1.97.140':139
'63.##1.11.173':139
'63.##1.100.106':139
'63.##1.182.175':445
'63.##1.119.122':445
'63.##1.123.249':445
'63.##1.94.54':445
'63.##1.138.169':139
'63.##1.63.166':139
'63.#01.10.9':445
'63.##1.29.143':445
'63.##1.18.41':139
'63.##1.125.138':139
'63.##1.160.145':139
'63.##1.74.146':139
'63.##1.196.1':139
'63.##1.196.134':139
'63.##1.48.79':139
'63.##1.23.194':139
'63.##1.40.141':139
'63.##1.146.18':139
'63.##1.3.171':139
'63.##1.17.151':139
'63.##1.183.251':139
'63.##1.88.231':139
'63.##1.12.248':139
'63.##1.18.51':139
'63.##1.185.190':139
'63.##1.153.91':139
'63.##1.146.18':445
'63.##1.93.155':139
'63.##1.51.14':139
'63.##1.176.114':139
'63.##1.142.176':139
'63.##1.233.210':139
'63.#01.33.1':139
'63.##1.17.228':139
'63.##1.151.79':139
'63.##1.114.204':139
'63.##1.69.135':139
'63.##1.27.225':139
'63.##1.16.61':139
'63.##1.72.116':139
'63.##1.166.15':139
'63.##1.203.221':139
'63.##1.54.30':139
'63.##1.127.175':139
'63.##1.132.199':139
'63.##1.25.135':139
'63.##1.157.252':139
'63.##1.136.232':139
'63.##1.194.119':139
'63.##1.138.29':139
'63.##1.120.155':139
'63.##1.58.153':139
'63.##1.42.33':139
'63.##1.177.49':139
'63.##1.121.168':139
'63.##1.250.231':139
'63.##1.11.239':139
'63.##1.106.1':139
'63.##1.41.132':139
'63.##1.52.42':139
'63.##1.167.39':139
'63.##1.132.138':139
'63.##1.154.236':445
'63.##1.178.178':445
'63.##1.219.178':445
'63.##1.196.113':445
'63.##1.249.130':445
'63.##1.124.178':445
'63.##1.57.120':445
'63.##1.202.219':445
'63.##1.12.93':445
'63.##1.147.193':445
'63.##1.125.138':445
'63.##1.160.145':445
'63.##1.74.146':445
'63.##1.196.1':445
'63.##1.196.134':445
'63.##1.48.79':445
'63.##1.23.194':445
'63.##1.40.141':445
'63.##1.154.57':445
'63.##1.154.236':139
'63.##1.44.13':445
'63.##1.108.99':139
'63.##1.161.151':139
'63.##1.108.99':445
'63.##1.161.151':445
'63.##1.69.253':445
'63.##1.60.33':445
'63.##1.60.33':139
'63.##1.19.204':445
'63.##1.93.199':445
'63.##1.99.154':445
'63.##1.134.99':445
'63.##1.44.13':139
'63.##1.69.253':139
'63.#01.80.4':445
'63.##1.126.176':445
'63.##1.29.143':139
'63.##1.152.38':139
'63.##1.37.69':139
'63.##1.108.197':139
'63.##1.11.66':139
'63.##1.50.15':445
'63.##1.249.24':445
'63.##1.232.109':139
'63.##1.95.137':139
'63.##1.119.11':139
'63.##1.58.131':139
'63.##1.96.190':139
'63.##1.156.50':139
'63.##1.176.250':139
'63.##1.43.48':139
'63.##1.188.215':139
'63.##1.163.126':139
'63.##1.130.86':139
'63.##1.150.92':445
'63.##1.133.185':445
'63.#01.4.43':445
'63.##1.58.218':445
'63.##1.238.227':445
'63.##1.152.87':445
'63.##1.224.38':445
'63.##1.62.57':445
'63.##1.224.198':445
'63.##1.164.120':445
'63.##1.61.135':445
'63.##1.11.32':445
'63.##1.69.73':445
'63.##1.25.144':445
'63.##1.139.89':445
'63.##1.103.217':445
'63.##1.116.42':445
'63.##1.101.213':445
'63.##1.39.208':139
'63.##1.164.120':139
'63.##1.58.218':139
'63.##1.139.89':139
'63.##1.103.217':139
'63.#01.4.43':139
'63.##1.62.57':139
'63.##1.238.227':139
'63.##1.133.185':139
'63.##1.101.213':139
'63.##1.25.144':139
'63.##1.61.135':139
'63.##1.50.15':139
'63.##1.249.24':139
'63.##1.11.32':139
'63.##1.116.42':139
'63.##1.69.73':139
'63.##1.150.92':139
'63.##1.224.198':139
'63.##1.188.170':139
'63.##1.111.188':139
'63.##1.154.126':139
'63.##1.52.218':139
'63.##1.46.222':139
'63.##1.208.46':139
'63.##1.200.111':139
'63.##1.246.16':139
'63.##1.148.23':139
'63.##1.75.159':139
'63.##1.97.113':139
'63.##1.152.87':139
'63.##1.224.38':139
'63.##1.244.202':139
'63.##1.143.235':139
'63.##1.211.32':139
'63.##1.240.140':139
'63.##1.75.159':445
'63.##1.133.185':9988
'63.#01.4.91':139
'63.##1.103.217':9988
'63.##1.148.23':9988
'63.##1.61.51':139
'63.##1.191.251':139
'63.##1.31.243':139
'63.##1.69.152':139
'63.##1.101.213':9988
'63.##1.249.24':9988
'63.##1.224.198':9988
'63.##1.97.113':9988
'63.#01.4.43':9988
'63.##1.152.87':9988
'63.##1.211.32':9988
'63.##1.143.235':9988
'63.##1.75.159':9988
'63.##1.170.184':139
'63.##1.169.9':445
'63.##1.123.249':139
'63.##1.67.60':445
'63.##1.20.67':445
'63.##1.119.122':139
'63.#01.10.9':139
'63.##1.94.54':139
'63.##1.182.175':139
'63.##1.170.184':445
'63.##1.169.9':139
'63.#01.4.91':445
'63.##1.67.60':139
'63.##1.20.67':139
'63.##1.61.51':445
'63.##1.191.251':445
'63.##1.31.243':445
'63.##1.69.152':445
'63.##1.116.42':9988
'63.##1.246.16':445
'63.##1.46.222':445
'63.##1.111.188':445
'63.##1.200.111':445
'63.##1.156.50':445
'63.##1.176.250':445
'63.##1.208.46':445
'63.##1.39.208':445
'63.##1.188.170':445
'63.##1.240.140':445
'63.##1.244.202':445
'63.##1.97.113':445
'63.##1.211.32':445
'63.##1.154.126':445
'63.##1.52.218':445
'63.##1.143.235':445
'63.##1.148.23':445
'63.##1.58.131':445
'63.##1.95.137':445
'63.##1.11.32':9988
'63.##1.37.69':445
'63.##1.232.109':445
'63.##1.164.120':9988
'63.##1.69.73':9988
'63.##1.244.202':9988
'63.##1.224.38':9988
'63.##1.152.38':445
'63.##1.130.86':445
'63.##1.43.48':445
'63.##1.96.190':445
'63.##1.163.126':445
'63.##1.108.197':445
'63.##1.11.66':445
'63.##1.188.215':445
'63.##1.119.11':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней