Trojan.Starman.6533

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##0.31.90':139
'61.##0.176.173':139
'61.##0.59.223':139
'61.##0.54.181':139
'61.##0.223.103':139
'61.##0.92.191':139
'61.##0.45.139':139
'61.##0.75.134':139
'61.##0.79.45':139
'61.#40.1.76':139
'61.##0.58.246':139
'61.#40.7.89':139
'61.##0.116.7':139
'61.##0.152.201':445
'61.##0.177.209':445
'61.##0.248.177':445
'61.##0.109.204':139
'61.##0.214.60':139
'61.##0.114.184':139
'61.##0.215.115':139
'61.##0.169.26':139
'61.##0.223.103':445
'61.##0.59.223':445
'61.##0.54.181':445
'61.##0.214.60':445
'61.##0.58.246':445
'61.#40.1.76':445
'61.##0.75.134':445
'61.##0.79.45':445
'61.##0.31.90':445
'61.##0.176.173':445
'61.##0.109.204':445
'61.##0.201.125':139
'61.##0.219.201':139
'61.##0.78.76':139
'61.##0.89.156':139
'61.##0.13.113':139
'61.##0.169.26':445
'61.##0.114.184':445
'61.##0.215.115':445
'61.#40.7.89':445
'61.##0.116.7':445
'61.##0.19.192':445
'61.##0.19.192':139
'61.##0.177.209':139
'61.##0.20.241':139
'61.##0.249.4':139
'61.##0.79.150':139
'61.##0.173.29':445
'61.##0.145.23':445
'61.##0.252.34':445
'61.##0.248.177':139
'61.##0.152.201':139
'61.##0.183.82':139
'61.##0.91.40':139
'61.##0.66.61':139
'61.##0.205.147':139
'61.##0.60.105':139
'61.##0.232.230':139
'61.##0.62.61':139
'61.##0.45.144':139
'61.##0.221.129':139
'61.##0.230.66':139
'61.##0.129.230':139
'61.##0.221.129':445
'61.##0.62.61':445
'61.##0.129.230':445
'61.##0.66.61':445
'61.##0.230.66':445
'61.##0.79.150':445
'61.##0.20.241':445
'61.##0.249.4':445
'61.##0.45.144':445
'61.##0.183.82':445
'61.##0.91.40':445
'61.##0.99.234':445
'61.##0.1.190':445
'61.##0.85.157':445
'61.##0.120.79':445
'61.##0.236.143':445
'61.##0.232.230':445
'61.##0.205.147':445
'61.##0.60.105':445
'61.##0.49.41':445
'61.##0.237.169':445
'61.##0.92.191':445
'61.##0.224.78':445
'61.##0.91.178':445
'61.##0.221.229':445
'61.##0.22.17':445
'61.##0.129.195':445
'61.##0.246.16':139
'61.##0.165.3':139
'61.##0.16.70':445
'61.##0.126.194':445
'61.##0.12.75':445
'61.##0.144.78':445
'61.##0.83.210':445
'61.##0.12.103':445
'61.##0.41.15':445
'61.##0.158.89':445
'61.##0.1.208':445
'61.##0.48.222':445
'61.##0.109.116':445
'61.##0.19.194':445
'61.##0.77.90':445
'61.##0.45.47':445
'61.##0.90.102':139
'61.##0.198.5':139
'61.##0.155.25':139
'61.##0.201.151':139
'61.##0.161.201':139
'61.##0.110.139':139
'61.##0.155.79':139
'61.##0.139.162':139
'61.##0.17.200':139
'61.##0.162.17':139
'61.##0.40.86':139
'61.##0.149.237':139
'61.##0.105.150':139
'61.##0.237.100':139
'61.##0.129.107':139
'61.##0.105.36':139
'61.##0.98.170':139
'61.##0.65.70':139
'61.##0.219.219':139
'61.##0.0.209':139
'61.##0.186.236':139
'61.##0.170.71':445
'61.##0.170.71':139
'61.##0.158.89':139
'61.##0.50.139':139
'61.##0.221.159':139
'61.##0.138.221':139
'61.##0.12.103':139
'61.##0.77.90':139
'61.##0.83.210':139
'61.##0.1.208':139
'61.##0.41.15':139
'61.##0.159.247':139
'61.##0.78.76':445
'61.##0.201.125':445
'61.##0.13.113':445
'61.##0.45.139':445
'61.##0.89.156':445
'61.##0.159.114':139
'61.##0.175.0':139
'61.##0.109.17':139
'61.##0.219.201':445
'61.##0.62.219':139
'61.##0.109.17':445
'61.##0.159.114':445
'61.##0.62.219':445
'61.##0.12.75':139
'61.##0.16.70':139
'61.##0.138.221':445
'61.##0.50.139':445
'61.##0.221.159':445
'61.##0.175.0':445
'61.##0.159.247':445
'61.##0.126.194':139
'61.##0.109.116':139
'61.##0.144.78':139
'61.##0.48.222':139
'61.##0.45.47':139
'61.##0.19.194':139
'61.##0.224.78':139
'61.##0.91.178':139
'61.##0.221.229':139
'61.##0.22.17':139
'61.##0.129.195':139
'61.##0.237.169':139
'61.##0.54.251':445
'61.##0.134.180':445
'61.##0.119.18':445
'61.##0.151.159':445
'61.##0.153.119':445
'61.##0.229.215':445
'61.#40.36.7':445
'61.#40.8.44':445
'61.##0.155.118':445
'61.##0.107.252':445
'61.##0.72.161':445
'61.##0.161.10':139
'61.##0.135.121':139
'61.##0.166.19':139
'61.##0.89.216':139
'61.##0.19.36':139
'61.##0.254.54':445
'61.##0.66.41':445
'61.##0.136.10':139
'61.##0.194.135':139
'61.##0.77.194':139
'61.##0.135.169':445
'61.##0.162.195':445
'61.##0.170.56':445
'61.##0.70.243':445
'61.##0.45.111':445
'61.##0.195.52':445
'61.##0.161.176':445
'61.##0.137.81':445
'61.##0.81.196':445
'61.##0.52.137':445
'61.##0.235.133':445
'61.##0.42.239':445
'61.##0.23.66':445
'61.##0.28.170':445
'61.##0.252.35':445
'61.##0.130.19':445
'61.##0.25.73':445
'61.##0.217.227':445
'61.##0.114.160':445
'61.##0.99.122':445
'61.##0.165.166':445
'61.##0.49.235':139
'61.##0.130.19':139
'61.##0.28.170':139
'61.##0.252.35':139
'61.#40.8.44':139
'61.#40.36.7':139
'61.##0.165.166':139
'61.##0.114.160':139
'61.##0.99.122':139
'61.##0.42.239':139
'61.##0.23.66':139
'61.##0.229.215':139
'61.##0.134.180':139
'61.##0.72.161':139
'61.##0.151.159':139
'61.##0.254.54':139
'61.##0.153.119':139
'61.##0.155.118':139
'61.##0.107.252':139
'61.##0.119.18':139
'61.##0.54.251':139
'61.##0.66.41':139
'61.##0.156.11':139
'61.##0.192.19':139
'61.##0.215.139':139
'61.##0.195.52':139
'61.##0.161.176':139
'61.##0.129.235':139
'61.##0.135.31':139
'61.##0.99.139':139
'61.##0.145.192':139
'61.##0.224.145':139
'61.##0.52.137':139
'61.##0.70.243':139
'61.##0.45.111':139
'61.##0.235.133':139
'61.##0.25.73':139
'61.##0.217.227':139
'61.##0.81.196':139
'61.##0.137.81':139
'61.##0.162.195':139
'61.##0.170.56':139
'61.##0.135.169':139
'61.##0.215.139':445
'61.##0.162.173':445
'61.##0.196.8':445
'61.##0.222.48':445
'61.##0.217.233':445
'61.##0.94.92':445
'61.##0.225.56':445
'61.##0.153.225':445
'61.##0.19.185':445
'61.##0.87.122':445
'61.##0.202.32':445
'61.##0.152.204':445
'61.##0.27.193':139
'61.##0.63.47':139
'61.##0.90.83':139
'61.##0.0.213':139
'61.#40.7.80':139
'61.##0.52.116':139
'61.##0.180.231':139
'61.##0.116.15':139
'61.##0.16.117':139
'61.##0.50.80':139
'61.##0.145.23':139
'61.##0.120.79':139
'61.##0.173.29':139
'61.##0.180.231':445
'61.##0.252.34':139
'61.##0.1.190':139
'61.##0.49.41':139
'61.##0.99.234':139
'61.##0.236.143':139
'61.##0.85.157':139
'61.##0.52.116':445
'61.#40.7.80':445
'61.##0.90.83':445
'61.##0.0.213':445
'61.#40.8.64':445
'61.##0.26.74':445
'61.##0.50.80':445
'61.##0.116.15':445
'61.##0.16.117':445
'61.##0.27.193':445
'61.##0.63.47':445
'61.##0.26.74':139
'61.##0.77.194':445
'61.##0.136.10':445
'61.##0.194.135':445
'61.##0.161.10':445
'61.##0.135.121':445
'61.##0.119.18':9988
'61.#40.36.7':9988
'61.##0.107.252':9988
'61.##0.134.180':9988
'61.##0.254.54':9988
'61.##0.166.19':445
'61.##0.224.145':445
'61.##0.99.139':445
'61.##0.145.192':445
'61.##0.156.11':445
'61.##0.192.19':445
'61.##0.89.216':445
'61.##0.19.36':445
'61.##0.49.235':445
'61.##0.135.31':445
'61.##0.129.235':445
'61.##0.196.8':139
'61.##0.87.122':139
'61.##0.162.173':139
'61.##0.94.92':139
'61.##0.222.48':139
'61.##0.153.225':139
'61.#40.8.64':139
'61.##0.225.56':139
'61.##0.202.32':139
'61.##0.19.185':139
'61.##0.217.233':139
'61.##0.45.111':9988
'61.##0.170.56':9988
'61.##0.72.161':9988
'61.##0.252.35':9988
'61.##0.165.166':9988
'61.##0.145.192':9988
'61.##0.152.204':139
'61.##0.156.11':9988
'61.##0.195.52':9988
'61.##0.215.139':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней