Trojan.Starman.6453

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##1.110.143':445
'12.##1.132.8':445
'12.##1.66.147':445
'12.##1.10.103':445
'12.##1.10.201':139
'12.##1.200.193':139
'12.##1.131.87':139
'12.##1.79.228':139
'12.##1.209.185':139
'12.##1.216.123':445
'12.##1.147.216':445
'12.##1.222.152':445
'12.##1.142.151':445
'12.##1.48.215':445
'12.##1.174.59':445
'12.##1.35.144':445
'12.##1.13.89':445
'12.#21.7.20':445
'12.##1.148.14':445
'12.##1.90.90':139
'12.##1.212.89':139
'12.##1.255.26':139
'12.##1.20.126':139
'12.##1.40.213':139
'12.##1.47.114':139
'12.##1.246.62':139
'12.##1.134.40':139
'12.##1.239.133':139
'12.##1.106.84':139
'12.#21.56.3':139
'12.##1.98.56':139
'12.##1.82.247':139
'12.##1.2.240':139
'12.##1.108.41':139
'12.##1.160.12':139
'12.##1.134.47':139
'12.##1.245.194':139
'12.##1.12.182':139
'12.##1.184.86':445
'12.##1.73.12':445
'12.##1.72.138':445
'12.##1.82.168':445
'12.#21.37.3':445
'12.##1.34.18':445
'12.##1.187.191':445
'12.##1.46.247':445
'12.##1.245.203':445
'12.##1.10.210':445
'12.##1.96.111':445
'12.##1.242.196':445
'12.##1.8.108':445
'12.##1.110.143':139
'12.##1.132.8':139
'12.##1.76.140':445
'12.##1.136.60':445
'12.##1.0.252':445
'12.##1.180.244':445
'12.##1.251.21':445
'12.##1.122.123':445
'12.##1.82.203':445
'12.##1.250.163':445
'12.##1.94.196':445
'12.##1.248.231':445
'12.##1.94.242':445
'12.##1.252.135':445
'12.##1.138.123':445
'12.##1.30.108':445
'12.##1.145.204':445
'12.##1.115.216':445
'12.##1.76.182':445
'12.##1.68.23':445
'12.##1.216.67':445
'12.##1.31.36':445
'12.##1.27.67':445
'12.##1.151.152':445
'12.##1.181.192':445
'12.##1.48.66':445
'12.##1.154.223':139
'12.##1.249.154':445
'12.##1.13.250':445
'12.##1.246.62':445
'12.##1.154.223':445
'12.##1.225.13':445
'12.##1.232.65':445
'12.##1.31.60':445
'12.##1.36.188':445
'12.##1.97.76':445
'12.##1.47.114':445
'12.##1.255.26':445
'12.##1.20.126':445
'12.##1.134.47':445
'12.##1.106.84':445
'12.##1.90.90':445
'12.##1.134.40':445
'12.##1.239.133':445
'12.##1.212.89':445
'12.##1.40.213':445
'12.##1.105.172':445
'12.##1.15.232':445
'12.##1.50.134':445
'12.##1.89.130':445
'12.##1.58.125':445
'12.##1.7.156':445
'12.##1.111.200':445
'12.##1.60.58':445
'12.##1.150.231':445
'12.##1.69.188':445
'12.##1.108.8':445
'12.##1.7.116':445
'12.##1.118.247':445
'12.##1.151.109':445
'12.##1.230.72':445
'12.##1.52.244':445
'12.##1.92.167':445
'12.##1.38.83':445
'12.##1.50.123':445
'12.##1.160.12':445
'12.##1.38.83':139
'12.##1.50.123':139
'12.##1.7.116':139
'12.##1.230.72':139
'12.##1.52.244':139
'12.##1.50.134':139
'12.##1.89.130':139
'12.##1.92.167':139
'12.##1.69.188':139
'12.##1.108.8':139
'12.##1.225.13':139
'12.##1.36.188':139
'12.##1.249.154':139
'12.##1.13.250':139
'12.##1.97.76':139
'12.##1.118.247':139
'12.##1.151.109':139
'12.##1.232.65':139
'12.##1.31.60':139
'12.##1.82.247':445
'12.##1.2.240':445
'12.##1.200.193':445
'12.##1.131.87':445
'12.#21.56.3':445
'12.##1.245.194':445
'12.##1.12.182':445
'12.##1.98.56':445
'12.##1.108.41':445
'12.##1.209.185':445
'12.##1.58.125':139
'12.##1.60.58':139
'12.##1.105.172':139
'12.##1.15.232':139
'12.##1.150.231':139
'12.##1.10.201':445
'12.##1.79.228':445
'12.##1.7.156':139
'12.##1.111.200':139
'12.##1.250.215':445
'12.##1.15.45':445
'12.##1.182.14':139
'12.##1.88.219':139
'12.##1.105.9':445
'12.#21.5.5':445
'12.##1.180.30':445
'12.##1.216.4':445
'12.##1.126.65':445
'12.##1.166.160':139
'12.##1.54.205':139
'12.##1.120.55':139
'12.##1.228.94':139
'12.##1.65.67':139
'12.##1.38.217':139
'12.##1.120.244':139
'12.##1.247.202':139
'12.##1.109.141':139
'12.#21.2.58':139
'12.##1.218.185':445
'12.##1.250.28':445
'12.##1.30.118':445
'12.##1.32.50':445
'12.##1.132.99':445
'12.##1.25.194':445
'12.##1.150.36':445
'12.##1.93.71':445
'12.##1.86.190':445
'12.##1.132.37':445
'12.##1.227.100':445
'12.##1.170.3':445
'12.##1.20.251':445
'12.##1.124.245':445
'12.#21.9.14':445
'12.##1.59.88':445
'12.##1.228.74':445
'12.##1.207.18':445
'12.##1.28.185':445
'12.##1.112.184':139
'12.##1.207.18':139
'12.##1.28.185':139
'12.##1.170.3':139
'12.#21.9.14':139
'12.##1.59.88':139
'12.##1.132.37':139
'12.##1.32.50':139
'12.##1.228.74':139
'12.##1.30.118':139
'12.##1.227.100':139
'12.##1.20.251':139
'12.##1.216.4':139
'12.##1.126.65':139
'12.##1.105.9':139
'12.#21.5.5':139
'12.##1.180.30':139
'12.##1.124.245':139
'12.##1.250.215':139
'12.##1.15.45':139
'12.##1.252.60':139
'12.##1.255.155':139
'12.##1.21.27':139
'12.##1.179.173':139
'12.#21.1.0':139
'12.##1.105.202':139
'12.##1.60.26':139
'12.##1.219.0':139
'12.##1.193.218':139
'12.##1.23.18':139
'12.##1.132.99':139
'12.##1.93.71':139
'12.##1.218.185':139
'12.##1.250.28':139
'12.##1.86.190':139
'12.##1.150.36':139
'12.##1.79.172':139
'12.##1.25.194':139
'12.##1.40.79':139
'12.##1.40.79':445
'12.##1.48.66':139
'12.##1.27.67':139
'12.##1.31.36':139
'12.##1.181.192':139
'12.##1.151.152':139
'12.##1.94.196':139
'12.##1.122.123':139
'12.##1.145.204':139
'12.##1.250.163':139
'12.##1.76.182':139
'12.##1.245.203':139
'12.##1.10.210':139
'12.##1.72.138':139
'12.##1.34.18':139
'12.##1.187.191':139
'12.##1.216.67':139
'12.##1.115.216':139
'12.##1.46.247':139
'12.##1.68.23':139
'12.#21.7.20':139
'12.##1.148.14':139
'12.##1.222.152':139
'12.##1.174.59':139
'12.##1.35.144':139
'12.##1.66.147':139
'12.##1.10.103':139
'12.##1.13.89':139
'12.##1.216.123':139
'12.##1.147.216':139
'12.##1.138.123':139
'12.##1.30.108':139
'12.##1.82.203':139
'12.##1.248.231':139
'12.##1.94.242':139
'12.##1.142.151':139
'12.##1.48.215':139
'12.##1.252.135':139
'12.##1.184.86':139
'12.##1.73.12':139
'12.##1.228.94':445
'12.##1.54.205':445
'12.##1.60.26':445
'12.##1.112.184':445
'12.##1.65.67':445
'12.##1.109.141':445
'12.#21.2.58':445
'12.##1.120.55':445
'12.##1.38.217':445
'12.##1.105.202':445
'12.##1.21.27':445
'12.##1.179.173':445
'12.##1.79.172':445
'12.##1.23.18':445
'12.##1.252.60':445
'12.##1.219.0':445
'12.##1.193.218':445
'12.##1.255.155':445
'12.#21.1.0':445
'12.##1.180.244':139
'12.##1.251.21':139
'12.##1.8.108':139
'12.##1.76.140':139
'12.##1.136.60':139
'12.##1.82.168':139
'12.#21.37.3':139
'12.##1.0.252':139
'12.##1.96.111':139
'12.##1.242.196':139
'12.##1.166.160':445
'12.##1.182.14':445
'12.##1.247.202':445
'12.##1.120.244':445
'12.##1.88.219':445
'12.##1.132.37':9988
'12.##1.23.18':9988
'12.##1.93.71':9988
'12.##1.250.28':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней