Trojan.Starman.6610

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##3.0.170':139
'14.##3.131.61':139
'14.##3.176.111':139
'14.##3.18.81':139
'14.##3.96.131':139
'14.##3.58.148':445
'14.##3.180.58':445
'14.##3.97.254':139
'14.##3.97.232':445
'14.##3.112.11':139
'14.##3.140.243':139
'14.##3.89.234':139
'14.##3.135.40':139
'14.##3.113.141':139
'14.##3.181.72':139
'14.##3.157.91':139
'14.##3.142.68':139
'14.##3.16.142':139
'14.##3.178.16':139
'14.##3.111.180':445
'14.##3.42.70':445
'14.##3.54.121':445
'14.#23.84.1':445
'14.#23.8.57':445
'14.##3.86.43':445
'14.##3.135.40':445
'14.##3.113.141':445
'14.##3.61.86':445
'14.##3.234.154':445
'14.##3.76.85':445
'14.##3.98.171':445
'14.##3.48.99':445
'14.#23.4.97':445
'14.##3.12.222':445
'14.##3.81.48':445
'14.##3.153.93':445
'14.##3.88.110':445
'14.##3.200.81':445
'14.##3.199.164':445
'14.##3.234.154':139
'14.##3.209.153':445
'14.##3.63.121':445
'14.##3.182.58':445
'14.##3.84.201':445
'14.##3.0.205':445
'14.##3.60.152':445
'14.##3.193.245':445
'14.##3.68.191':445
'14.##3.52.140':445
'14.#23.0.17':445
'14.##3.52.140':139
'14.##3.60.152':139
'14.##3.0.205':139
'14.##3.68.191':139
'14.##3.193.245':139
'14.##3.150.217':445
'14.##3.47.184':445
'14.##3.160.49':445
'14.##3.102.64':445
'14.##3.97.232':139
'14.##3.76.85':139
'14.#23.84.1':139
'14.##3.153.93':139
'14.##3.88.110':139
'14.#23.8.57':139
'14.##3.86.43':139
'14.##3.61.86':139
'14.##3.42.70':139
'14.##3.54.121':139
'14.##3.199.164':139
'14.##3.111.180':139
'14.#23.4.97':139
'14.##3.58.148':139
'14.##3.180.58':139
'14.##3.12.222':139
'14.##3.81.48':139
'14.##3.200.81':139
'14.##3.98.171':139
'14.##3.48.99':139
'14.##3.253.158':139
'14.##3.25.174':139
'14.##3.107.170':139
'14.##3.121.64':139
'14.#23.7.26':139
'14.##3.166.246':139
'14.##3.2.226':139
'14.##3.161.118':139
'14.##3.245.216':139
'14.##3.153.151':139
'14.##3.211.177':139
'14.##3.19.212':139
'14.##3.78.247':445
'14.##3.194.21':445
'14.##3.60.200':139
'14.##3.111.78':139
'14.##3.225.75':139
'14.##3.167.78':139
'14.##3.89.57':139
'14.##3.99.116':139
'14.##3.174.142':139
'14.##3.110.241':139
'14.##3.204.70':139
'14.##3.49.175':139
'14.##3.102.1':139
'14.##3.93.243':139
'14.##3.224.13':139
'14.##3.209.192':139
'14.##3.243.178':139
'14.##3.193.21':139
'14.##3.90.161':139
'14.##3.200.94':139
'14.##3.133.52':139
'14.##3.95.75':139
'14.##3.217.199':139
'14.##3.108.2':139
'14.##3.22.108':139
'14.##3.252.217':139
'14.##3.1.253':139
'14.##3.128.169':445
'14.##3.96.131':445
'14.##3.97.254':445
'14.##3.0.170':445
'14.##3.131.61':445
'14.##3.85.60':139
'14.##3.173.136':139
'14.##3.139.167':139
'14.##3.222.180':139
'14.##3.103.192':139
'14.##3.18.81':445
'14.##3.181.72':445
'14.##3.16.142':445
'14.##3.140.243':445
'14.##3.89.234':445
'14.##3.178.16':445
'14.##3.112.11':445
'14.##3.176.111':445
'14.##3.157.91':445
'14.##3.142.68':445
'14.##3.20.41':139
'14.##3.139.167':445
'14.##3.20.41':445
'14.##3.103.192':445
'14.##3.173.136':445
'14.##3.76.37':445
'14.##3.52.22':445
'14.##3.157.43':445
'14.##3.138.93':445
'14.##3.123.242':445
'14.##3.222.180':445
'14.##3.123.242':139
'14.##3.52.22':139
'14.##3.76.37':139
'14.##3.138.93':139
'14.##3.157.43':139
'14.##3.194.21':139
'14.##3.85.60':445
'14.##3.128.169':139
'14.##3.78.247':139
'14.##3.63.121':139
'14.##3.90.103':445
'14.##3.48.90':445
'14.##3.59.70':139
'14.##3.78.199':445
'14.##3.80.87':445
'14.##3.204.234':445
'14.##3.153.141':445
'14.##3.63.15':445
'14.##3.205.206':445
'14.##3.228.164':139
'14.##3.121.41':139
'14.##3.133.23':139
'14.##3.55.108':139
'14.##3.145.178':139
'14.##3.194.239':139
'14.##3.114.1':139
'14.##3.67.98':139
'14.##3.46.25':139
'14.##3.13.184':139
'14.##3.184.15':445
'14.##3.126.195':445
'14.##3.153.213':445
'14.##3.222.14':445
'14.##3.37.222':445
'14.##3.26.189':445
'14.##3.127.142':445
'14.##3.196.31':445
'14.##3.252.94':445
'14.##3.197.54':445
'14.##3.252.165':445
'14.##3.27.146':445
'14.##3.207.150':445
'14.##3.183.180':445
'14.##3.249.56':445
'14.##3.28.105':445
'14.#23.93.2':445
'14.##3.65.112':445
'14.##3.24.253':445
'14.##3.247.24':445
'14.##3.22.18':139
'14.##3.207.150':139
'14.##3.28.105':139
'14.##3.249.56':139
'14.##3.27.146':139
'14.##3.24.253':139
'14.##3.65.112':139
'14.##3.252.165':139
'14.##3.247.24':139
'14.#23.93.2':139
'14.##3.183.180':139
'14.##3.78.199':139
'14.##3.90.103':139
'14.##3.48.90':139
'14.##3.153.141':139
'14.##3.204.234':139
'14.##3.80.87':139
'14.##3.184.15':139
'14.##3.63.15':139
'14.##3.205.206':139
'14.##3.222.14':139
'14.##3.250.98':139
'14.##3.254.249':139
'14.##3.129.21':139
'14.##3.12.63':139
'14.##3.154.147':139
'14.##3.149.227':139
'14.##3.209.238':139
'14.##3.153.194':139
'14.##3.227.153':139
'14.##3.25.126':139
'14.##3.153.213':139
'14.##3.26.189':139
'14.##3.37.222':139
'14.##3.126.195':139
'14.##3.252.94':139
'14.##3.196.31':139
'14.##3.92.206':139
'14.##3.197.54':139
'14.##3.127.142':139
'14.##3.76.201':139
'14.##3.208.230':139
'14.##3.10.183':139
'14.##3.43.247':139
'14.##3.143.197':139
'14.##3.113.190':445
'14.##3.236.68':445
'14.##3.128.59':139
'14.##3.73.59':445
'14.##3.182.162':139
'14.##3.113.190':139
'14.##3.236.68':139
'14.##3.127.142':9988
'14.##3.73.59':139
'14.##3.61.100':139
'14.##3.129.226':139
'14.##3.171.237':139
'14.##3.121.61':139
'14.##3.46.166':139
'14.##3.61.100':445
'14.##3.102.64':139
'14.##3.150.217':139
'14.##3.128.59':445
'14.##3.160.49':139
'14.##3.47.184':139
'14.##3.84.201':139
'14.##3.209.153':139
'14.#23.0.17':139
'14.##3.182.58':139
'14.##3.143.197':445
'14.##3.129.226':445
'14.##3.171.237':445
'14.##3.121.61':445
'14.##3.46.166':445
'14.##3.182.162':445
'14.##3.76.201':445
'14.##3.208.230':445
'14.##3.10.183':445
'14.##3.43.247':445
'14.##3.153.194':9988
'14.##3.55.108':445
'14.##3.145.178':445
'14.##3.209.238':445
'14.##3.22.18':445
'14.##3.121.41':445
'14.##3.46.25':445
'14.##3.13.184':445
'14.##3.133.23':445
'14.##3.194.239':445
'14.##3.149.227':445
'14.##3.129.21':445
'14.##3.12.63':445
'14.##3.92.206':445
'14.##3.25.126':445
'14.##3.250.98':445
'14.##3.227.153':445
'14.##3.153.194':445
'14.##3.254.249':445
'14.##3.154.147':445
'14.##3.114.1':445
'14.##3.252.94':9988
'14.##3.129.21':9988
'14.##3.37.222':9988
'14.##3.126.195':9988
'14.##3.25.126':9988
'14.##3.254.249':9988
'14.##3.250.98':9988
'14.##3.227.153':9988
'14.##3.196.31':9988
'14.##3.247.24':9988
'14.##3.59.70':445
'14.##3.78.199':9988
'14.##3.67.98':445
'14.##3.228.164':445
'14.##3.183.180':9988
'14.##3.28.105':9988
'14.##3.24.253':9988
'14.##3.204.234':9988
'14.##3.27.146':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней