Trojan.Starman.6388

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##2.178.241':445
'24.##2.79.178':445
'24.##2.97.173':445
'24.##2.234.3':445
'24.##2.31.63':445
'24.##2.132.79':445
'24.##2.29.87':445
'24.##2.113.251':445
'24.##2.97.48':445
'24.##2.16.58':445
'24.##2.119.26':445
'24.##2.166.104':445
'24.##2.87.248':445
'24.##2.254.188':445
'24.##2.12.240':445
'24.##2.96.170':445
'24.##2.13.223':445
'24.##2.209.163':445
'24.##2.3.174':445
'24.##2.222.179':445
'24.##2.9.139':445
'24.##2.12.206':445
'24.##2.171.139':445
'24.##2.145.248':445
'24.##2.161.94':445
'24.##2.7.211':445
'24.##2.51.215':445
'24.##2.131.20':445
'24.##2.69.110':445
'24.##2.131.226':139
'24.##2.22.228':139
'24.##2.26.45':139
'24.##2.176.142':445
'24.##2.55.12':445
'24.##2.51.215':139
'24.##2.131.20':139
'24.##2.249.15':445
'24.##2.235.221':445
'24.##2.244.10':445
'24.##2.7.211':139
'24.##2.176.142':139
'24.##2.55.12':139
'24.##2.69.110':139
'24.##2.145.248':139
'24.##2.161.94':139
'24.##2.65.172':445
'24.##2.234.3':139
'24.##2.31.63':139
'24.##2.3.174':139
'24.##2.222.179':139
'24.##2.209.163':139
'24.##2.97.173':139
'24.##2.16.58':139
'24.##2.119.26':139
'24.##2.132.79':139
'24.##2.178.241':139
'24.##2.79.178':139
'24.##2.12.240':139
'24.##2.96.170':139
'24.##2.65.172':139
'24.##2.47.187':139
'24.##2.138.48':139
'24.##2.254.188':139
'24.##2.9.139':139
'24.##2.12.206':139
'24.##2.13.223':139
'24.##2.166.104':139
'24.##2.87.248':139
'24.##2.97.48':139
'24.##2.111.252':445
'24.##2.17.42':445
'24.##2.86.68':445
'24.##2.48.221':445
'24.##2.17.94':445
'24.##2.96.203':445
'24.##2.47.187':445
'24.##2.138.48':445
'24.#22.37.4':445
'24.##2.128.71':445
'24.##2.32.207':445
'24.##2.235.221':139
'24.##2.244.10':139
'24.##2.171.139':139
'24.##2.29.87':139
'24.##2.113.251':139
'24.##2.249.15':139
'24.##2.202.242':445
'24.##2.100.23':445
'24.##2.254.26':445
'24.##2.175.222':445
'24.##2.81.42':445
'24.##2.18.187':445
'24.##2.247.17':445
'24.##2.187.65':445
'24.##2.83.106':445
'24.##2.65.191':445
'24.##2.212.246':445
'24.##2.92.67':445
'24.##2.173.34':445
'24.##2.28.28':445
'24.##2.227.212':445
'24.##2.187.227':445
'24.##2.91.50':445
'24.##2.101.210':445
'24.##2.135.43':445
'24.##2.121.160':445
'24.##2.111.95':445
'24.##2.71.102':445
'24.##2.227.114':445
'24.##2.242.64':445
'24.##2.51.92':445
'24.##2.107.71':445
'24.##2.77.73':445
'24.##2.99.50':445
'24.##2.112.95':139
'24.##2.215.112':139
'24.#22.1.79':445
'24.##2.64.154':445
'24.##2.20.59':445
'24.##2.154.179':139
'24.##2.238.26':139
'24.##2.163.179':139
'24.##2.104.80':139
'24.##2.62.134':139
'24.##2.47.243':139
'24.##2.36.156':445
'24.##2.11.238':445
'24.##2.33.47':445
'24.##2.206.0':445
'24.##2.71.52':445
'24.##2.240.13':445
'24.##2.189.113':445
'24.##2.154.103':445
'24.##2.31.172':445
'24.##2.21.214':445
'24.##2.178.40':445
'24.##2.40.209':445
'24.##2.83.106':139
'24.##2.65.191':139
'24.##2.242.64':139
'24.##2.51.92':139
'24.##2.227.114':139
'24.##2.187.65':139
'24.##2.227.212':139
'24.##2.187.227':139
'24.##2.212.246':139
'24.##2.18.187':139
'24.##2.247.17':139
'24.##2.121.160':139
'24.##2.111.95':139
'24.##2.40.209':139
'24.##2.84.104':139
'24.##2.44.246':139
'24.##2.135.43':139
'24.##2.107.71':139
'24.##2.77.73':139
'24.##2.71.102':139
'24.##2.91.50':139
'24.##2.101.210':139
'24.##2.28.28':139
'24.##2.64.154':139
'24.##2.20.59':139
'24.##2.154.103':139
'24.##2.31.172':139
'24.##2.189.113':139
'24.#22.1.79':139
'24.##2.84.104':445
'24.##2.44.246':445
'24.##2.22.228':445
'24.##2.26.45':445
'24.##2.131.226':445
'24.##2.206.0':139
'24.##2.71.52':139
'24.##2.99.50':139
'24.##2.92.67':139
'24.##2.173.34':139
'24.##2.33.47':139
'24.##2.21.214':139
'24.##2.178.40':139
'24.##2.240.13':139
'24.##2.36.156':139
'24.##2.11.238':139
'24.##2.156.232':445
'24.##2.91.209':445
'24.##2.109.236':445
'24.##2.12.20':445
'24.##2.3.120':445
'24.##2.40.47':445
'24.##2.179.200':445
'24.##2.50.55':445
'24.##2.59.246':445
'24.##2.124.42':445
'24.##2.44.145':445
'24.##2.67.194':139
'24.##2.47.24':139
'24.##2.61.90':139
'24.##2.14.20':139
'24.##2.153.12':139
'24.##2.120.237':445
'24.##2.69.147':445
'24.##2.75.192':445
'24.##2.185.100':445
'24.##2.69.141':445
'24.#22.1.34':445
'24.##2.49.214':445
'24.##2.143.74':445
'24.##2.187.198':445
'24.##2.99.222':445
'24.##2.10.200':445
'24.##2.188.99':445
'24.##2.231.239':445
'24.##2.190.245':445
'24.##2.39.191':445
'24.##2.158.14':445
'24.##2.33.117':445
'24.##2.17.108':445
'24.##2.12.57':445
'24.##2.127.143':445
'24.##2.166.162':445
'24.##2.213.119':445
'24.##2.222.93':445
'24.##2.64.222':445
'24.##2.130.144':445
'24.##2.249.129':445
'24.##2.200.194':445
'24.##2.155.163':445
'24.##2.73.161':445
'24.##2.98.154':139
'24.##2.59.246':139
'24.##2.179.200':139
'24.##2.44.145':139
'24.##2.40.47':139
'24.##2.124.42':139
'24.##2.50.55':139
'24.##2.166.162':139
'24.##2.12.57':139
'24.##2.222.93':139
'24.##2.49.214':139
'24.##2.213.119':139
'24.##2.120.237':139
'24.##2.69.141':139
'24.##2.75.192':139
'24.#22.1.34':139
'24.##2.185.100':139
'24.##2.69.147':139
'24.##2.156.232':139
'24.##2.91.209':139
'24.##2.109.236':139
'24.##2.12.20':139
'24.##2.3.120':139
'24.##2.127.143':139
'24.##2.158.14':139
'24.##2.190.245':139
'24.##2.17.108':139
'24.##2.231.239':139
'24.##2.33.117':139
'24.##2.39.191':139
'24.##2.116.88':139
'24.##2.69.234':139
'24.##2.87.62':139
'24.#22.0.33':139
'24.##2.191.53':139
'24.##2.200.194':139
'24.##2.130.144':139
'24.##2.73.161':139
'24.##2.64.222':139
'24.##2.155.163':139
'24.##2.249.129':139
'24.##2.143.74':139
'24.##2.187.198':139
'24.##2.99.222':139
'24.##2.10.200':139
'24.##2.188.99':139
'24.##2.148.63':445
'24.#22.5.90':139
'24.##2.66.62':445
'24.##2.213.245':445
'24.##2.150.174':445
'24.##2.42.54':139
'24.##2.83.221':139
'24.##2.86.192':139
'24.##2.126.66':139
'24.#22.31.8':139
'24.##2.87.198':139
'24.##2.65.42':445
'24.##2.216.71':445
'24.##2.171.81':445
'24.##2.211.149':445
'24.##2.255.199':445
'24.##2.114.71':445
'24.##2.119.58':445
'24.##2.82.48':445
'24.##2.214.249':445
'24.##2.5.237':445
'24.##2.16.56':445
'24.##2.203.83':139
'24.##2.17.94':139
'24.##2.86.68':139
'24.##2.48.221':139
'24.##2.202.242':139
'24.##2.100.23':139
'24.##2.111.252':139
'24.##2.32.207':139
'24.#22.37.4':139
'24.##2.128.71':139
'24.##2.17.42':139
'24.##2.96.203':139
'24.##2.87.198':445
'24.##2.126.66':445
'24.#22.31.8':445
'24.#22.5.90':445
'24.##2.42.54':445
'24.##2.83.221':445
'24.##2.81.42':139
'24.##2.254.26':139
'24.##2.175.222':139
'24.##2.86.192':445
'24.##2.203.83':445
'24.##2.233.203':445
'24.##2.120.237':9988
'24.##2.69.141':9988
'24.##2.213.119':9988
'24.##2.179.200':9988
'24.##2.69.147':9988
'24.##2.166.162':9988
'24.##2.12.57':9988
'24.##2.185.100':9988
'24.##2.50.55':9988
'24.##2.40.47':9988
'24.##2.44.145':9988
'24.##2.116.88':445
'24.##2.69.234':445
'24.##2.87.62':445
'24.#22.0.33':445
'24.##2.191.53':445
'24.##2.98.154':445
'24.##2.67.194':445
'24.##2.47.24':445
'24.##2.61.90':445
'24.##2.14.20':445
'24.##2.153.12':445
'24.##2.124.42':9988
'24.##2.82.48':139
'24.##2.213.245':139
'24.##2.119.58':139
'24.##2.16.56':139
'24.##2.214.249':139
'24.##2.150.174':139
'24.##2.101.105':445
'24.##2.121.87':445
'24.##2.65.11':445
'24.##2.66.62':139
'24.##2.148.63':139
'24.##2.233.203':139
'24.##2.211.149':139
'24.##2.121.87':139
'24.##2.65.11':139
'24.##2.101.105':139
'24.##2.255.199':139
'24.##2.114.71':139
'24.##2.5.237':139
'24.##2.216.71':139
'24.##2.171.81':139
'24.##2.65.42':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней