Trojan.Starman.6566

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.##7.156.172':139
'82.##7.218.23':139
'82.##7.198.91':139
'82.##7.27.50':139
'82.##7.231.214':139
'82.##7.153.45':139
'82.##7.195.117':139
'82.##7.113.222':139
'82.##7.33.29':139
'82.##7.15.19':139
'82.##7.56.175':139
'82.##7.132.106':445
'82.##7.71.76':445
'82.##7.76.137':445
'82.##7.23.19':445
'82.##7.247.121':445
'82.##7.129.122':445
'82.##7.44.95':445
'82.##7.98.171':445
'82.##7.207.113':445
'82.##7.22.241':445
'82.##7.195.117':445
'82.##7.195.9':445
'82.##7.153.45':445
'82.##7.15.19':445
'82.##7.113.222':445
'82.##7.68.74':139
'82.##7.6.111':139
'82.##7.217.213':445
'82.##7.20.107':445
'82.##7.151.20':445
'82.##7.33.29':445
'82.##7.217.213':139
'82.##7.56.175':445
'82.##7.151.20':139
'82.##7.195.9':139
'82.##7.20.107':139
'82.##7.156.172':445
'82.##7.218.23':445
'82.##7.198.91':445
'82.##7.27.50':445
'82.##7.231.214':445
'82.##7.129.122':139
'82.##7.44.95':139
'82.##7.98.171':139
'82.##7.207.113':139
'82.##7.22.241':139
'82.##7.196.227':445
'82.##7.228.196':445
'82.##7.227.127':445
'82.##7.26.147':445
'82.##7.127.144':445
'82.##7.71.76':139
'82.##7.93.40':139
'82.##7.181.227':139
'82.##7.69.204':139
'82.##7.66.219':139
'82.##7.121.232':139
'82.##7.76.137':139
'82.##7.132.106':139
'82.##7.247.121':139
'82.##7.66.102':139
'82.##7.23.19':139
'82.##7.86.97':445
'82.##7.66.219':445
'82.##7.101.87':445
'82.##7.77.36':445
'82.##7.77.211':445
'82.##7.181.227':445
'82.##7.66.102':445
'82.##7.93.40':445
'82.##7.121.232':445
'82.##7.69.204':445
'82.##7.213.159':445
'82.##7.143.62':445
'82.##7.168.195':445
'82.##7.144.60':445
'82.##7.174.162':445
'82.##7.11.181':445
'82.##7.193.198':445
'82.##7.159.144':445
'82.##7.43.254':445
'82.##7.61.210':445
'82.#47.9.61':445
'82.##7.204.13':139
'82.##7.101.43':445
'82.##7.141.49':445
'82.##7.19.46':445
'82.##7.118.207':445
'82.##7.104.66':445
'82.##7.243.9':445
'82.##7.192.180':445
'82.##7.102.72':445
'82.##7.226.77':445
'82.##7.176.56':445
'82.##7.213.254':445
'82.##7.0.162':445
'82.##7.110.11':445
'82.##7.34.217':445
'82.##7.113.198':445
'82.##7.233.173':445
'82.##7.233.108':445
'82.##7.126.198':445
'82.##7.108.167':445
'82.##7.41.204':445
'82.##7.101.116':445
'82.##7.27.123':139
'82.##7.135.185':139
'82.##7.60.78':139
'82.##7.105.150':139
'82.##7.84.43':139
'82.##7.228.88':139
'82.##7.161.205':139
'82.##7.152.44':139
'82.##7.31.84':139
'82.##7.38.54':139
'82.##7.74.68':139
'82.#47.9.79':445
'82.##7.155.6':445
'82.##7.81.30':445
'82.##7.42.14':445
'82.##7.230.3':445
'82.##7.156.18':139
'82.##7.250.165':139
'82.##7.106.212':139
'82.##7.19.19':445
'82.##7.227.10':139
'82.##7.233.108':139
'82.##7.126.198':139
'82.##7.108.167':139
'82.##7.41.204':139
'82.##7.101.116':139
'82.##7.19.46':139
'82.##7.101.43':139
'82.##7.104.66':139
'82.##7.213.254':139
'82.##7.118.207':139
'82.##7.110.11':139
'82.##7.27.106':139
'82.##7.187.64':139
'82.##7.73.11':139
'82.##7.64.76':139
'82.##7.13.86':139
'82.##7.34.217':139
'82.##7.0.162':139
'82.##7.233.173':139
'82.##7.233.73':139
'82.##7.113.198':139
'82.##7.204.13':445
'82.##7.64.76':445
'82.##7.6.111':445
'82.##7.19.19':139
'82.##7.68.74':445
'82.##7.187.64':445
'82.##7.233.73':445
'82.##7.27.106':445
'82.##7.13.86':445
'82.##7.73.11':445
'82.##7.155.6':139
'82.##7.102.72':139
'82.##7.243.9':139
'82.##7.176.56':139
'82.##7.141.49':139
'82.##7.226.77':139
'82.##7.81.30':139
'82.#47.9.79':139
'82.##7.230.3':139
'82.##7.192.180':139
'82.##7.42.14':139
'82.##7.86.97':139
'82.##7.76.200':445
'82.##7.23.116':445
'82.##7.152.127':445
'82.##7.215.225':445
'82.##7.112.56':445
'82.##7.118.209':445
'82.##7.219.240':445
'82.##7.214.146':445
'82.##7.71.208':445
'82.##7.80.71':445
'82.##7.33.61':445
'82.##7.134.217':139
'82.##7.163.165':139
'82.##7.93.45':139
'82.##7.180.192':139
'82.##7.50.185':139
'82.#47.39.4':139
'82.##7.80.248':445
'82.##7.203.228':139
'82.##7.101.72':139
'82.##7.8.227':139
'82.##7.159.193':445
'82.##7.93.159':445
'82.##7.103.151':445
'82.##7.249.117':445
'82.##7.203.249':445
'82.##7.80.91':445
'82.##7.91.225':445
'82.##7.87.232':445
'82.##7.174.93':445
'82.##7.169.173':445
'82.##7.117.57':445
'82.##7.55.210':445
'82.##7.8.184':445
'82.#47.72.7':445
'82.##7.180.54':445
'82.##7.233.38':445
'82.##7.172.96':445
'82.##7.26.85':445
'82.##7.10.77':445
'82.##7.202.65':445
'82.##7.161.220':445
'82.#47.72.7':139
'82.##7.55.210':139
'82.##7.233.38':139
'82.##7.219.240':139
'82.##7.180.54':139
'82.##7.10.77':139
'82.##7.172.96':139
'82.##7.161.220':139
'82.##7.8.184':139
'82.##7.202.65':139
'82.##7.118.209':139
'82.##7.112.56':139
'82.##7.152.127':139
'82.##7.215.225':139
'82.##7.33.61':139
'82.##7.80.248':139
'82.##7.80.71':139
'82.##7.214.146':139
'82.##7.71.208':139
'82.##7.76.200':139
'82.##7.23.116':139
'82.##7.222.62':139
'82.##7.5.219':139
'82.##7.158.101':139
'82.##7.91.225':139
'82.##7.227.146':139
'82.##7.147.109':139
'82.##7.114.222':139
'82.##7.114.214':139
'82.##7.173.109':139
'82.##7.73.233':139
'82.##7.80.91':139
'82.##7.203.249':139
'82.##7.103.151':139
'82.##7.249.117':139
'82.##7.26.85':139
'82.##7.117.57':139
'82.##7.169.173':139
'82.##7.87.232':139
'82.##7.174.93':139
'82.##7.159.193':139
'82.##7.93.159':139
'82.##7.227.146':445
'82.#47.8.76':445
'82.##7.14.139':445
'82.##7.191.86':445
'82.##7.14.237':445
'82.##7.178.154':445
'82.##7.128.33':445
'82.##7.98.176':445
'82.##7.59.200':445
'82.##7.143.196':445
'82.#47.8.4':445
'82.##7.219.246':445
'82.##7.59.200':139
'82.##7.98.176':139
'82.#47.8.4':139
'82.##7.14.139':139
'82.##7.143.196':139
'82.##7.45.142':445
'82.##7.35.230':445
'82.##7.191.9':139
'82.##7.128.33':139
'82.##7.84.122':139
'82.##7.43.254':139
'82.##7.193.198':139
'82.#47.9.61':139
'82.##7.168.195':139
'82.##7.61.210':139
'82.##7.77.211':139
'82.##7.101.87':139
'82.##7.77.36':139
'82.##7.159.144':139
'82.##7.213.159':139
'82.##7.143.62':139
'82.##7.191.9':445
'82.##7.227.127':139
'82.##7.127.144':139
'82.##7.84.122':445
'82.##7.26.147':139
'82.##7.11.181':139
'82.##7.144.60':139
'82.##7.174.162':139
'82.##7.196.227':139
'82.##7.228.196':139
'82.##7.8.227':445
'82.##7.203.228':445
'82.##7.101.72':445
'82.##7.134.217':445
'82.##7.163.165':445
'82.##7.76.200':9988
'82.##7.23.116':9988
'82.##7.152.127':9988
'82.#47.39.4':445
'82.##7.112.56':9988
'82.##7.93.45':445
'82.##7.173.109':445
'82.##7.73.233':445
'82.##7.5.219':445
'82.##7.158.101':445
'82.##7.222.62':445
'82.##7.180.192':445
'82.##7.50.185':445
'82.##7.114.222':445
'82.##7.114.214':445
'82.##7.147.109':445
'82.##7.45.142':139
'82.##7.35.230':139
'82.##7.5.219':9988
'82.##7.174.93':9988
'82.##7.87.232':9988
'82.##7.191.86':139
'82.#47.8.76':139
'82.##7.178.154':139
'82.##7.219.246':139
'82.##7.14.237':139
'82.##7.249.117':9988
'82.##7.233.38':9988
'82.#47.72.7':9988
'82.##7.180.54':9988
'82.##7.71.208':9988
'82.##7.219.240':9988
'82.##7.26.85':9988
'82.##7.117.57':9988
'82.##7.172.96':9988
'82.##7.55.210':9988
'82.##7.8.184':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней