Trojan.Starman.6467

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##.207.82':445
'24.##.120.235':445
'24.#8.6.242':139
'24.#8.5.176':445
'24.##.143.113':445
'24.##.161.230':445
'24.#8.110.4':445
'24.##.132.82':445
'24.##.193.39':445
'24.##.123.91':139
'24.#8.5.124':139
'24.##.126.157':139
'24.##.69.228':139
'24.#8.183.4':139
'24.##.39.196':139
'24.##.241.131':139
'24.##.241.182':139
'24.##.131.110':139
'24.##.69.253':445
'24.##.102.212':445
'24.##.16.137':445
'24.##.84.213':445
'24.#8.13.25':445
'24.##.143.66':445
'24.##.37.174':445
'24.##.88.121':445
'24.##.129.235':445
'24.##.173.129':445
'24.##.213.19':445
'24.##.120.222':445
'24.##.159.141':445
'24.##.130.146':445
'24.##.210.40':445
'24.##.226.149':445
'24.##.97.102':445
'24.##.60.161':445
'24.##.148.164':445
'24.#8.143.9':139
'24.##.120.222':139
'24.##.210.40':139
'24.##.130.146':139
'24.##.213.19':139
'24.##.60.161':139
'24.##.97.102':139
'24.##.84.213':139
'24.##.148.164':139
'24.##.226.149':139
'24.##.143.113':139
'24.##.132.82':139
'24.##.207.82':139
'24.##.120.235':139
'24.##.193.39':139
'24.##.69.253':139
'24.##.159.141':139
'24.##.161.230':139
'24.#8.110.4':139
'24.#8.13.25':139
'24.#8.246.9':139
'24.##.138.246':139
'24.##.229.112':139
'24.#8.9.226':139
'24.##.67.138':139
'24.##.158.80':139
'24.#8.2.20':139
'24.##.109.67':139
'24.##.204.109':139
'24.##.143.66':139
'24.##.129.235':139
'24.##.102.212':139
'24.##.16.137':139
'24.##.173.129':139
'24.##.215.52':139
'24.##.142.215':139
'24.##.37.174':139
'24.##.88.121':139
'24.##.205.107':139
'24.##.239.204':139
'24.##.62.117':139
'24.##.112.204':139
'24.##.51.145':139
'24.##.164.73':139
'24.##.226.163':139
'24.##.46.196':139
'24.#8.19.48':139
'24.##.184.144':139
'24.#8.8.169':139
'24.#8.9.19':139
'24.##.143.129':139
'24.##.184.134':139
'24.#8.25.37':139
'24.##.98.174':139
'24.##.245.47':139
'24.##.37.211':139
'24.##.212.84':139
'24.##.100.175':139
'24.##.86.100':139
'24.##.195.116':139
'24.##.175.88':139
'24.#8.75.78':139
'24.##.30.225':139
'24.##.100.115':139
'24.##.15.208':139
'24.##.113.250':139
'24.##.110.76':139
'24.##.31.110':139
'24.#8.74.60':139
'24.#8.76.74':139
'24.##.88.200':139
'24.##.37.172':139
'24.##.220.33':139
'24.#8.39.88':139
'24.##.234.250':139
'24.#8.7.235':139
'24.#8.143.9':445
'24.##.126.157':445
'24.##.158.80':445
'24.#8.2.20':445
'24.##.69.228':445
'24.#8.183.4':445
'24.##.241.182':445
'24.##.123.91':445
'24.#8.5.124':445
'24.##.229.112':445
'24.#8.9.226':445
'24.##.215.52':445
'24.##.142.215':445
'24.#8.246.9':445
'24.##.109.67':445
'24.##.204.109':445
'24.##.138.246':445
'24.##.67.138':445
'24.##.131.110':445
'24.#8.9.91':139
'24.#8.0.12':139
'24.##.71.122':139
'24.##.96.130':139
'24.#8.21.28':139
'24.##.84.243':139
'24.##.115.122':139
'24.#8.30.26':139
'24.##.221.165':139
'24.#8.6.242':445
'24.#8.159.6':139
'24.##.39.196':445
'24.##.241.131':445
'24.##.14.206':139
'24.#8.9.118':139
'24.##.158.212':139
'24.#8.159.6':445
'24.##.14.206':445
'24.#8.5.176':139
'24.##.236.100':139
'24.##.27.120':139
'24.##.97.184':139
'24.##.105.106':139
'24.#8.3.183':445
'24.##.113.170':445
'24.##.251.34':445
'24.#8.89.31':445
'24.##.196.89':445
'24.#8.7.10':139
'24.#8.151.7':139
'24.##.158.117':139
'24.#8.10.22':139
'24.##.124.151':139
'24.#8.62.76':139
'24.##.184.23':139
'24.##.196.124':139
'24.##.185.194':139
'24.##.171.250':445
'24.##.125.171':445
'24.##.17.180':445
'24.#8.210.9':445
'24.##.170.229':445
'24.##.22.202':445
'24.##.139.160':445
'24.##.145.107':445
'24.##.39.172':445
'24.##.69.238':445
'24.#8.14.80':445
'24.##.47.138':445
'24.#8.20.11':445
'24.##.106.184':445
'24.##.63.212':445
'24.##.11.156':445
'24.##.179.143':445
'24.##.172.46':445
'24.##.94.212':445
'24.##.153.246':139
'24.##.172.46':139
'24.##.94.212':139
'24.##.47.138':139
'24.##.63.212':139
'24.##.11.156':139
'24.##.170.229':139
'24.##.125.171':139
'24.##.179.143':139
'24.#8.210.9':139
'24.##.196.89':139
'24.##.113.170':139
'24.#8.89.31':139
'24.#8.3.183':139
'24.##.251.34':139
'24.##.106.184':139
'24.#8.14.80':139
'24.##.171.250':139
'24.#8.20.11':139
'24.##.17.180':139
'24.##.236.22':139
'24.#8.0.152':139
'24.#8.10.80':139
'24.##.114.49':139
'24.##.22.239':139
'24.##.194.17':139
'24.##.241.201':139
'24.##.241.83':139
'24.##.210.83':139
'24.##.69.238':139
'24.##.139.160':139
'24.##.22.202':139
'24.##.39.172':139
'24.##.145.107':139
'24.##.56.135':139
'24.##.101.47':139
'24.##.119.16':139
'24.##.171.143':139
'24.##.104.235':139
'24.##.32.199':139
'24.##.137.147':139
'24.##.148.172':139
'24.#8.88.98':139
'24.##.236.50':139
'24.##.127.206':139
'24.#8.94.88':139
'24.##.177.226':139
'24.##.101.47':9988
'24.##.210.83':9988
'24.##.119.16':9988
'24.##.56.135':9988
'24.##.194.17':9988
'24.#8.60.30':139
'24.##.22.136':139
'24.##.124.151':9988
'24.##.196.124':9988
'24.##.103.134':139
'24.##.127.206':445
'24.##.103.134':445
'24.##.177.226':445
'24.##.236.50':445
'24.##.202.170':445
'24.#8.63.77':445
'24.##.67.229':445
'24.#8.63.77':139
'24.##.67.229':139
'24.##.22.136':445
'24.##.137.147':445
'24.##.202.170':139
'24.#8.60.30':445
'24.##.148.172':445
'24.#8.88.98':445
'24.#8.94.88':445
'24.##.104.235':445
'24.##.32.199':445
'24.##.145.107':9988
'24.##.194.17':445
'24.##.241.201':445
'24.##.241.83':445
'24.##.210.83':445
'24.##.153.246':445
'24.#8.7.10':445
'24.#8.151.7':445
'24.##.158.117':445
'24.#8.10.22':445
'24.##.56.135':445
'24.##.101.47':445
'24.##.119.16':445
'24.##.171.143':445
'24.#8.10.80':445
'24.#8.0.152':445
'24.##.22.239':445
'24.##.114.49':445
'24.##.236.22':445
'24.##.124.151':445
'24.##.113.170':9988
'24.##.171.250':9988
'24.#8.89.31':9988
'24.##.196.89':9988
'24.##.106.184':9988
'24.##.179.143':9988
'24.#8.210.9':9988
'24.##.63.212':9988
'24.##.11.156':9988
'24.#8.62.76':445
'24.##.184.23':445
'24.##.196.124':445
'24.##.185.194':445
'24.##.97.184':445
'24.##.27.120':445
'24.#8.3.183':9988
'24.##.105.106':445
'24.##.236.100':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней