Trojan.Starman.6358

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'68.##7.168.200':139
'68.##7.183.119':139
'68.##7.71.196':139
'68.##7.85.14':139
'68.##7.237.36':139
'68.##7.138.46':445
'68.##7.115.164':445
'68.##7.76.114':445
'68.##7.69.53':445
'68.##7.187.247':139
'68.##7.49.106':139
'68.##7.1.157':139
'68.##7.61.122':139
'68.##7.246.87':139
'68.##7.172.216':139
'68.##7.251.72':139
'68.##7.244.206':139
'68.#47.7.91':139
'68.##7.183.21':139
'68.##7.92.203':445
'68.##7.110.210':445
'68.##7.220.180':445
'68.##7.237.121':445
'68.##7.210.132':445
'68.#47.25.2':445
'68.##7.31.195':445
'68.##7.23.102':445
'68.##7.68.96':445
'68.##7.195.237':445
'68.##7.109.243':445
'68.##7.198.23':445
'68.##7.213.235':445
'68.##7.162.218':445
'68.##7.23.215':445
'68.##7.132.103':445
'68.##7.32.125':445
'68.##7.243.60':445
'68.##7.101.124':445
'68.##7.38.137':445
'68.##7.101.124':139
'68.##7.132.103':139
'68.##7.198.23':139
'68.##7.213.235':139
'68.##7.38.137':139
'68.##7.109.243':139
'68.##7.237.121':139
'68.##7.32.125':139
'68.##7.243.60':139
'68.##7.23.215':139
'68.##7.57.215':445
'68.##7.76.114':139
'68.##7.248.129':445
'68.##7.121.239':445
'68.##7.69.53':139
'68.##7.92.203':139
'68.##7.162.218':139
'68.##7.138.46':139
'68.##7.115.164':139
'68.##7.210.132':139
'68.##7.191.52':139
'68.##7.98.171':139
'68.##7.44.204':139
'68.##7.52.105':139
'68.##7.19.48':139
'68.##7.251.241':139
'68.##7.189.109':139
'68.##7.68.19':139
'68.##7.121.101':139
'68.##7.11.88':139
'68.#47.25.2':139
'68.##7.68.96':139
'68.##7.110.210':139
'68.##7.220.180':139
'68.##7.195.237':139
'68.##7.44.151':139
'68.##7.64.194':139
'68.##7.31.195':139
'68.##7.23.102':139
'68.##7.214.178':139
'68.#47.0.57':139
'68.##7.214.150':139
'68.##7.2.115':139
'68.##7.156.30':139
'68.##7.163.182':139
'68.##7.157.214':139
'68.##7.39.124':139
'68.##7.252.38':139
'68.##7.150.125':139
'68.#47.48.8':139
'68.##7.177.229':139
'68.##7.75.38':139
'68.##7.156.81':139
'68.##7.64.161':139
'68.##7.178.20':139
'68.##7.125.178':139
'68.##7.69.26':139
'68.##7.20.116':139
'68.##7.2.169':139
'68.##7.60.174':139
'68.##7.217.60':139
'68.##7.134.140':139
'68.##7.72.13':139
'68.##7.201.216':139
'68.##7.108.233':139
'68.##7.2.222':139
'68.##7.141.201':139
'68.##7.42.141':139
'68.##7.47.116':139
'68.##7.201.71':139
'68.##7.202.22':139
'68.##7.202.74':139
'68.##7.187.220':139
'68.##7.144.224':139
'68.##7.224.155':139
'68.##7.65.136':139
'68.##7.26.145':139
'68.#47.6.9':139
'68.##7.61.122':445
'68.##7.246.87':445
'68.##7.251.241':445
'68.##7.189.109':445
'68.##7.49.106':445
'68.#47.7.91':445
'68.##7.183.21':445
'68.##7.1.157':445
'68.##7.172.216':445
'68.##7.121.101':445
'68.##7.11.88':445
'68.##7.44.204':445
'68.##7.44.151':445
'68.##7.64.194':445
'68.##7.52.105':445
'68.##7.19.48':445
'68.##7.68.19':445
'68.##7.191.52':445
'68.##7.98.171':445
'68.##7.251.72':445
'68.##7.6.100':139
'68.##7.24.46':139
'68.##7.154.78':139
'68.##7.77.220':139
'68.##7.26.142':139
'68.##7.147.136':139
'68.##7.23.10':139
'68.##7.117.251':139
'68.#47.76.1':139
'68.##7.55.250':139
'68.##7.71.196':445
'68.##7.85.14':445
'68.##7.244.206':445
'68.##7.187.247':445
'68.##7.168.200':445
'68.##7.113.175':139
'68.##7.39.181':139
'68.##7.183.119':445
'68.##7.237.36':445
'68.##7.53.19':445
'68.##7.152.185':445
'68.##7.200.76':139
'68.##7.214.117':139
'68.#47.86.5':445
'68.##7.111.68':445
'68.##7.58.167':445
'68.##7.220.85':445
'68.##7.185.60':445
'68.##7.209.61':139
'68.##7.177.206':139
'68.##7.110.32':139
'68.##7.33.246':139
'68.##7.108.164':139
'68.##7.13.85':139
'68.##7.40.165':139
'68.##7.170.129':139
'68.##7.106.78':139
'68.##7.1.219':139
'68.##7.163.77':445
'68.##7.52.208':445
'68.##7.74.175':445
'68.##7.85.59':445
'68.##7.122.98':445
'68.##7.242.54':445
'68.##7.42.246':445
'68.##7.203.43':445
'68.##7.97.60':445
'68.##7.246.126':445
'68.##7.186.73':445
'68.##7.232.194':445
'68.##7.30.230':445
'68.##7.13.14':445
'68.##7.252.163':445
'68.##7.148.219':445
'68.##7.118.67':445
'68.#47.4.2':445
'68.##7.69.69':445
'68.##7.85.93':445
'68.##7.148.219':139
'68.##7.69.69':139
'68.##7.232.194':139
'68.##7.30.230':139
'68.##7.85.93':139
'68.##7.186.73':139
'68.##7.85.59':139
'68.##7.118.67':139
'68.#47.4.2':139
'68.##7.252.163':139
'68.##7.220.85':139
'68.##7.152.185':139
'68.##7.53.19':139
'68.#47.86.5':139
'68.##7.185.60':139
'68.##7.163.77':139
'68.##7.13.14':139
'68.##7.111.68':139
'68.##7.58.167':139
'68.##7.122.98':139
'68.##7.55.25':139
'68.##7.152.205':139
'68.##7.205.55':139
'68.##7.66.233':139
'68.##7.186.199':139
'68.##7.149.15':139
'68.##7.39.149':139
'68.##7.107.186':139
'68.##7.98.186':139
'68.##7.55.245':139
'68.##7.242.54':139
'68.##7.97.60':139
'68.##7.52.208':139
'68.##7.74.175':139
'68.##7.246.126':139
'68.##7.30.203':139
'68.##7.170.193':139
'68.##7.42.246':139
'68.##7.203.43':139
'68.##7.11.133':139
'68.##7.172.77':139
'68.##7.191.121':139
'68.##7.2.156':139
'68.##7.140.198':139
'68.##7.20.208':139
'68.##7.248.129':139
'68.##7.91.108':139
'68.##7.52.19':139
'68.##7.74.26':139
'68.##7.97.244':139
'68.##7.83.159':139
'68.##7.92.35':139
'68.##7.125.228':139
'68.##7.99.139':139
'68.##7.59.30':139
'68.#47.8.59':139
'68.##7.57.253':139
'68.##7.29.236':139
'68.##7.121.239':139
'68.##7.2.156':445
'68.##7.11.133':445
'68.##7.74.26':445
'68.##7.191.121':445
'68.##7.172.77':445
'68.##7.52.19':445
'68.##7.20.208':445
'68.##7.140.198':445
'68.##7.91.108':445
'68.#47.8.59':445
'68.##7.125.228':445
'68.##7.97.244':445
'68.##7.57.215':139
'68.##7.92.35':445
'68.##7.83.159':445
'68.##7.29.236':445
'68.##7.59.30':445
'68.##7.99.139':445
'68.##7.57.253':445
'68.##7.33.246':445
'68.##7.108.164':445
'68.##7.149.15':445
'68.##7.39.149':445
'68.##7.177.206':445
'68.##7.106.78':445
'68.##7.1.219':445
'68.##7.110.32':445
'68.##7.13.85':445
'68.##7.98.186':445
'68.##7.55.245':445
'68.##7.205.55':445
'68.##7.30.203':445
'68.##7.170.193':445
'68.##7.66.233':445
'68.##7.186.199':445
'68.##7.107.186':445
'68.##7.55.25':445
'68.##7.152.205':445
'68.##7.40.165':445
'68.##7.97.60':9988
'68.##7.203.43':9988
'68.##7.85.93':9988
'68.#47.4.2':9988
'68.##7.55.25':9988
'68.##7.149.15':9988
'68.##7.1.219':9988
'68.##7.98.186':9988
'68.##7.186.199':9988
'68.##7.69.69':9988
'68.##7.200.76':445
'68.##7.214.117':445
'68.##7.170.129':445
'68.##7.209.61':445
'68.##7.13.14':9988
'68.##7.232.194':9988
'68.##7.148.219':9988
'68.##7.163.77':9988
'68.##7.252.163':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней