Trojan.Starman.6401

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'84.##2.255.162':445
'84.##2.29.231':445
'84.##2.163.75':445
'84.#32.66.7':445
'84.##2.75.183':445
'84.##2.47.247':445
'84.##2.152.62':139
'84.##2.245.254':445
'84.##2.66.102':445
'84.##2.124.221':445
'84.##2.85.98':445
'84.##2.134.174':445
'84.##2.195.6':445
'84.##2.97.194':445
'84.##2.92.16':445
'84.##2.3.205':445
'84.##2.16.246':445
'84.##2.157.191':445
'84.##2.101.155':445
'84.##2.56.250':445
'84.##2.56.102':445
'84.##2.204.88':139
'84.##2.30.39':139
'84.##2.224.165':139
'84.##2.31.192':139
'84.##2.136.26':139
'84.##2.64.180':139
'84.##2.93.79':139
'84.##2.216.17':139
'84.##2.132.182':139
'84.##2.3.189':139
'84.##2.67.139':445
'84.##2.62.131':139
'84.##2.67.139':139
'84.##2.27.225':139
'84.##2.242.91':139
'84.##2.224.188':139
'84.##2.27.225':445
'84.##2.62.131':445
'84.##2.224.188':445
'84.##2.152.62':445
'84.##2.242.91':445
'84.##2.176.18':445
'84.##2.66.102':139
'84.##2.124.221':139
'84.##2.29.231':139
'84.##2.163.75':139
'84.##2.255.162':139
'84.##2.44.133':445
'84.##2.183.117':445
'84.##2.156.37':445
'84.##2.245.254':139
'84.##2.47.247':139
'84.##2.75.183':139
'84.##2.56.250':139
'84.##2.56.102':139
'84.##2.195.6':139
'84.##2.97.194':139
'84.##2.134.174':139
'84.##2.85.98':139
'84.#32.66.7':139
'84.##2.157.191':139
'84.##2.101.155':139
'84.##2.16.246':139
'84.#32.21.7':445
'84.##2.32.165':445
'84.##2.210.195':445
'84.##2.83.223':445
'84.##2.108.62':445
'84.##2.156.230':445
'84.##2.18.157':445
'84.##2.45.41':445
'84.##2.162.193':445
'84.##2.45.163':445
'84.##2.28.230':445
'84.##2.135.188':445
'84.##2.25.64':445
'84.##2.91.40':445
'84.##2.149.0':445
'84.##2.110.130':445
'84.##2.145.156':445
'84.##2.6.135':445
'84.##2.77.121':445
'84.##2.118.29':445
'84.##2.120.250':445
'84.##2.113.87':139
'84.##2.100.165':445
'84.##2.77.181':445
'84.##2.127.37':445
'84.##2.49.156':445
'84.##2.36.232':445
'84.##2.83.62':445
'84.##2.77.91':445
'84.##2.240.176':445
'84.##2.38.212':445
'84.##2.59.218':445
'84.##2.197.185':445
'84.##2.155.26':445
'84.##2.60.190':445
'84.##2.35.101':445
'84.##2.93.79':445
'84.##2.113.87':445
'84.##2.90.67':445
'84.##2.69.90':445
'84.##2.38.228':445
'84.##2.91.137':445
'84.#32.1.37':445
'84.##2.54.140':445
'84.##2.48.33':139
'84.##2.194.183':445
'84.##2.97.86':445
'84.#32.2.70':445
'84.##2.119.171':139
'84.##2.37.108':139
'84.##2.108.212':139
'84.##2.227.158':139
'84.##2.111.101':139
'84.##2.86.125':445
'84.##2.176.9':445
'84.##2.137.58':445
'84.##2.98.28':445
'84.##2.205.187':445
'84.##2.164.203':445
'84.##2.119.244':445
'84.##2.232.110':445
'84.##2.61.33':445
'84.##2.83.55':445
'84.##2.12.112':445
'84.##2.64.180':445
'84.##2.38.212':139
'84.##2.59.218':139
'84.##2.77.181':139
'84.##2.127.37':139
'84.##2.100.165':139
'84.##2.205.187':139
'84.##2.164.203':139
'84.##2.77.91':139
'84.##2.240.176':139
'84.##2.83.62':139
'84.##2.36.232':139
'84.##2.91.137':139
'84.#32.1.37':139
'84.##2.60.190':139
'84.##2.35.101':139
'84.##2.155.26':139
'84.##2.197.185':139
'84.##2.49.156':139
'84.##2.69.90':139
'84.##2.38.228':139
'84.##2.90.67':139
'84.##2.136.26':445
'84.##2.224.165':445
'84.##2.31.192':445
'84.##2.194.183':139
'84.##2.54.140':139
'84.##2.3.189':445
'84.##2.216.17':445
'84.##2.132.182':445
'84.##2.204.88':445
'84.##2.30.39':445
'84.#32.2.70':139
'84.##2.83.55':139
'84.##2.12.112':139
'84.##2.137.58':139
'84.##2.98.28':139
'84.##2.176.9':139
'84.##2.86.125':139
'84.##2.97.86':139
'84.##2.232.110':139
'84.##2.61.33':139
'84.##2.119.244':139
'84.##2.5.248':445
'84.##2.0.185':445
'84.##2.216.168':445
'84.##2.199.208':445
'84.##2.247.236':445
'84.##2.50.186':445
'84.##2.103.207':445
'84.##2.29.121':445
'84.##2.130.21':445
'84.##2.62.63':445
'84.##2.131.149':445
'84.##2.237.36':139
'84.#32.9.47':139
'84.##2.122.199':139
'84.##2.249.174':139
'84.##2.198.249':139
'84.##2.178.253':445
'84.##2.139.243':445
'84.##2.187.216':139
'84.##2.26.108':139
'84.##2.217.25':139
'84.##2.195.208':445
'84.##2.115.142':445
'84.##2.61.82':445
'84.##2.80.236':445
'84.##2.72.108':445
'84.##2.92.53':445
'84.##2.161.82':445
'84.##2.24.114':445
'84.##2.68.225':445
'84.##2.231.50':445
'84.##2.108.52':445
'84.##2.240.179':445
'84.##2.83.64':445
'84.##2.45.179':445
'84.##2.14.114':445
'84.##2.76.16':445
'84.##2.95.188':445
'84.##2.64.84':445
'84.##2.36.100':445
'84.##2.122.48':445
'84.#32.4.75':445
'84.##2.175.24':139
'84.##2.76.16':139
'84.##2.45.179':139
'84.##2.14.114':139
'84.##2.50.186':139
'84.##2.103.207':139
'84.#32.4.75':139
'84.##2.36.100':139
'84.##2.122.48':139
'84.##2.240.179':139
'84.##2.83.64':139
'84.##2.29.121':139
'84.##2.139.243':139
'84.##2.247.236':139
'84.##2.178.253':139
'84.##2.131.149':139
'84.##2.199.208':139
'84.##2.130.21':139
'84.##2.62.63':139
'84.##2.0.185':139
'84.##2.216.168':139
'84.##2.5.248':139
'84.##2.22.111':139
'84.##2.7.139':139
'84.##2.110.246':139
'84.##2.92.53':139
'84.##2.161.82':139
'84.##2.148.229':139
'84.##2.201.77':139
'84.##2.230.7':139
'84.##2.250.225':139
'84.##2.122.155':139
'84.##2.24.114':139
'84.##2.80.236':139
'84.##2.72.108':139
'84.##2.108.52':139
'84.##2.95.188':139
'84.##2.64.84':139
'84.##2.68.225':139
'84.##2.231.50':139
'84.##2.115.142':139
'84.##2.61.82':139
'84.##2.195.208':139
'84.##2.110.246':445
'84.##2.107.112':445
'84.##2.156.37':139
'84.##2.222.36':445
'84.##2.99.125':445
'84.##2.67.68':445
'84.##2.110.130':139
'84.##2.91.40':139
'84.##2.149.0':139
'84.##2.44.133':139
'84.##2.183.117':139
'84.##2.34.136':445
'84.##2.245.218':139
'84.##2.34.136':139
'84.##2.151.33':445
'84.##2.210.246':445
'84.##2.173.15':445
'84.##2.107.112':139
'84.##2.245.218':445
'84.##2.222.36':139
'84.##2.99.125':139
'84.##2.67.68':139
'84.##2.45.163':139
'84.##2.45.41':139
'84.##2.162.193':139
'84.#32.21.7':139
'84.##2.32.165':139
'84.##2.92.16':139
'84.##2.3.205':139
'84.##2.176.18':139
'84.##2.156.230':139
'84.##2.18.157':139
'84.##2.210.195':139
'84.##2.120.250':139
'84.##2.77.121':139
'84.##2.118.29':139
'84.##2.135.188':139
'84.##2.25.64':139
'84.##2.83.223':139
'84.##2.108.62':139
'84.##2.28.230':139
'84.##2.145.156':139
'84.##2.6.135':139
'84.##2.12.91':445
'84.##2.217.25':445
'84.##2.187.216':445
'84.##2.26.108':445
'84.##2.237.36':445
'84.#32.9.47':445
'84.##2.216.168':9988
'84.##2.5.248':9988
'84.##2.139.243':9988
'84.##2.131.149':9988
'84.##2.247.236':9988
'84.##2.122.199':445
'84.##2.122.155':445
'84.##2.230.7':445
'84.##2.250.225':445
'84.##2.22.111':445
'84.##2.7.139':445
'84.##2.249.174':445
'84.##2.198.249':445
'84.##2.175.24':445
'84.##2.148.229':445
'84.##2.201.77':445
'84.##2.45.179':9988
'84.##2.168.187':139
'84.##2.103.207':9988
'84.##2.72.108':9988
'84.##2.80.236':9988
'84.##2.151.33':139
'84.##2.168.187':445
'84.##2.173.15':139
'84.##2.12.91':139
'84.##2.210.246':139
'84.##2.36.100':9988
'84.#32.4.75':9988
'84.##2.50.186':9988
'84.##2.14.114':9988
'84.##2.0.185':9988
'84.##2.83.64':9988
'84.##2.122.48':9988
'84.##2.240.179':9988
'84.##2.62.63':9988
'84.##2.29.121':9988
'84.##2.95.188':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней