Trojan.Starman.6093

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##9.77.117':139
'62.##9.57.73':139
'62.##9.57.124':139
'62.##9.59.92':139
'62.##9.47.227':139
'62.##9.226.186':139
'62.##9.115.26':139
'62.##9.187.14':139
'62.##9.15.132':139
'62.##9.14.149':139
'62.##9.47.249':139
'62.##9.220.47':139
'62.##9.34.95':139
'62.##9.47.206':139
'62.##9.211.45':139
'62.##9.45.178':139
'62.##9.194.111':139
'62.##9.130.221':139
'62.##9.129.39':139
'62.##9.166.223':139
'62.##9.223.161':139
'62.##9.107.144':139
'62.##9.223.161':445
'62.##9.129.39':445
'62.##9.166.223':445
'62.##9.220.47':445
'62.##9.34.95':445
'62.##9.59.92':445
'62.##9.47.227':445
'62.##9.47.249':445
'62.##9.194.111':445
'62.##9.130.221':445
'62.##9.47.206':445
'62.##9.115.177':139
'62.##9.8.221':139
'62.##9.177.93':139
'62.##9.34.193':139
'62.##9.112.119':139
'62.##9.211.45':445
'62.##9.45.178':445
'62.##9.227.127':445
'62.##9.218.71':445
'62.##9.127.218':445
'62.##9.3.223':139
'62.##9.144.65':139
'62.##9.11.90':139
'62.##9.126.14':139
'62.##9.159.73':139
'62.##9.165.147':445
'62.##9.14.52':445
'62.#09.2.93':139
'62.##9.115.44':139
'62.##9.98.131':139
'62.##9.44.47':139
'62.##9.30.38':139
'62.##9.82.22':139
'62.##9.237.122':139
'62.##9.64.229':139
'62.##9.43.169':139
'62.##9.74.148':139
'62.##9.19.246':139
'62.##9.189.203':139
'62.##9.9.214':139
'62.##9.183.43':139
'62.##9.64.229':445
'62.##9.144.65':445
'62.##9.115.44':445
'62.##9.3.223':445
'62.##9.159.73':445
'62.##9.11.90':445
'62.##9.127.218':139
'62.##9.227.127':139
'62.##9.218.71':139
'62.##9.98.131':445
'62.#09.2.93':445
'62.##9.126.14':445
'62.##9.82.22':445
'62.##9.9.214':445
'62.##9.30.38':445
'62.##9.43.169':445
'62.##9.237.122':445
'62.##9.19.246':445
'62.##9.44.47':445
'62.##9.74.148':445
'62.##9.183.43':445
'62.##9.189.203':445
'62.##9.217.94':139
'62.##9.104.217':139
'62.##9.15.125':139
'62.##9.16.179':445
'62.##9.196.145':445
'62.##9.59.198':139
'62.##9.70.38':139
'62.##9.144.156':139
'62.##9.26.66':139
'62.##9.106.22':139
'62.##9.18.252':445
'62.##9.244.213':445
'62.##9.64.57':445
'62.##9.41.65':445
'62.##9.1.186':445
'62.##9.157.235':445
'62.##9.66.66':445
'62.##9.196.160':445
'62.##9.39.186':445
'62.##9.126.26':445
'62.##9.186.11':445
'62.##9.185.162':139
'62.##9.108.197':139
'62.##9.245.104':139
'62.##9.185.46':139
'62.##9.28.204':139
'62.#09.75.1':139
'62.##9.25.33':139
'62.##9.217.101':139
'62.##9.86.35':139
'62.##9.225.244':139
'62.##9.223.226':139
'62.##9.86.94':139
'62.##9.7.152':139
'62.##9.21.234':139
'62.##9.29.32':139
'62.##9.243.199':139
'62.##9.245.124':139
'62.##9.161.13':139
'62.##9.106.169':139
'62.##9.120.132':139
'62.##9.239.11':139
'62.##9.125.207':139
'62.##9.115.101':139
'62.##9.214.26':139
'62.##9.8.221':445
'62.##9.177.93':445
'62.##9.115.177':445
'62.##9.14.72':139
'62.##9.169.14':139
'62.##9.116.10':139
'62.##9.89.178':139
'62.##9.184.222':139
'62.##9.112.119':445
'62.##9.15.132':445
'62.##9.14.149':445
'62.##9.57.73':445
'62.##9.57.124':445
'62.##9.77.117':445
'62.##9.107.144':445
'62.##9.34.193':445
'62.##9.115.26':445
'62.##9.187.14':445
'62.##9.226.186':445
'62.##9.25.54':139
'62.##9.214.26':445
'62.##9.89.178':445
'62.##9.115.101':445
'62.##9.16.179':139
'62.##9.196.145':139
'62.##9.169.14':445
'62.##9.25.54':445
'62.##9.14.72':445
'62.##9.184.222':445
'62.##9.116.10':445
'62.##9.18.252':139
'62.##9.244.213':139
'62.##9.64.57':139
'62.##9.41.65':139
'62.##9.1.186':139
'62.##9.157.235':139
'62.##9.66.66':139
'62.##9.196.160':139
'62.##9.39.186':139
'62.##9.126.26':139
'62.##9.186.11':139
'62.##9.64.199':445
'62.##9.85.64':445
'62.##9.199.244':445
'62.##9.15.43':445
'62.##9.15.21':445
'62.##9.127.143':445
'62.##9.242.126':445
'62.##9.7.208':445
'62.##9.222.85':445
'62.##9.106.222':445
'62.##9.165.62':445
'62.##9.218.221':139
'62.##9.23.154':139
'62.##9.221.59':139
'62.##9.197.74':139
'62.##9.129.102':139
'62.##9.167.165':445
'62.##9.247.33':445
'62.##9.74.64':139
'62.##9.209.174':139
'62.##9.255.38':139
'62.##9.71.203':445
'62.##9.219.177':445
'62.##9.213.185':445
'62.##9.142.218':445
'62.##9.16.150':445
'62.##9.84.160':445
'62.##9.19.66':445
'62.##9.55.172':445
'62.#09.8.95':445
'62.##9.23.123':445
'62.##9.53.254':445
'62.##9.140.145':445
'62.##9.5.137':445
'62.##9.108.162':445
'62.##9.196.99':445
'62.##9.71.163':445
'62.##9.17.228':445
'62.##9.25.48':445
'62.##9.57.83':445
'62.##9.195.147':445
'62.##9.28.194':445
'62.##9.145.41':445
'62.##9.71.163':139
'62.##9.17.228':139
'62.##9.71.203':139
'62.##9.127.143':139
'62.##9.242.126':139
'62.##9.28.194':139
'62.##9.145.41':139
'62.##9.108.162':139
'62.##9.196.99':139
'62.##9.5.137':139
'62.##9.7.208':139
'62.##9.165.62':139
'62.##9.167.165':139
'62.##9.247.33':139
'62.##9.15.43':139
'62.##9.199.244':139
'62.##9.222.85':139
'62.##9.106.222':139
'62.##9.85.64':139
'62.##9.15.21':139
'62.##9.64.199':139
'62.##9.195.147':139
'62.##9.88.167':139
'62.##9.207.247':139
'62.##9.167.55':139
'62.##9.19.66':139
'62.##9.55.172':139
'62.##9.218.236':139
'62.##9.133.22':139
'62.##9.204.85':139
'62.##9.144.28':139
'62.##9.17.162':139
'62.#09.8.95':139
'62.##9.16.150':139
'62.##9.84.160':139
'62.##9.140.145':139
'62.##9.25.48':139
'62.##9.57.83':139
'62.##9.23.123':139
'62.##9.53.254':139
'62.##9.213.185':139
'62.##9.142.218':139
'62.##9.219.177':139
'62.##9.186.168':445
'62.##9.167.160':445
'62.##9.36.86':445
'62.##9.5.148':139
'62.##9.217.83':139
'62.##9.99.170':445
'62.##9.215.99':445
'62.##9.134.82':445
'62.##9.169.119':445
'62.##9.96.134':445
'62.##9.148.76':139
'62.##9.255.50':139
'62.##9.94.50':139
'62.##9.245.100':139
'62.##9.244.27':139
'62.##9.22.224':139
'62.##9.40.153':139
'62.##9.76.63':139
'62.##9.73.215':139
'62.##9.182.94':139
'62.##9.214.182':139
'62.##9.151.33':445
'62.##9.40.153':445
'62.##9.148.76':445
'62.##9.73.215':445
'62.##9.182.94':445
'62.##9.214.182':445
'62.##9.165.147':139
'62.##9.14.52':139
'62.##9.217.83':445
'62.##9.76.63':445
'62.##9.5.148':445
'62.##9.94.50':445
'62.##9.93.66':445
'62.##9.2.218':445
'62.##9.39.239':445
'62.##9.237.13':445
'62.##9.86.63':445
'62.##9.245.100':445
'62.##9.255.50':445
'62.##9.22.224':445
'62.##9.10.126':445
'62.##9.244.27':445
'62.##9.255.38':445
'62.##9.74.64':445
'62.##9.209.174':445
'62.##9.218.221':445
'62.##9.23.154':445
'62.##9.17.228':9988
'62.##9.71.163':9988
'62.##9.71.203':9988
'62.##9.167.165':9988
'62.##9.127.143':9988
'62.##9.221.59':445
'62.##9.144.28':445
'62.##9.17.162':445
'62.##9.207.247':445
'62.##9.167.55':445
'62.##9.88.167':445
'62.##9.197.74':445
'62.##9.129.102':445
'62.##9.133.22':445
'62.##9.204.85':445
'62.##9.218.236':445
'62.##9.5.137':9988
'62.##9.151.33':139
'62.##9.237.13':139
'62.##9.215.99':139
'62.##9.134.82':139
'62.##9.99.170':139
'62.##9.2.218':139
'62.##9.10.126':139
'62.##9.93.66':139
'62.##9.86.63':139
'62.##9.39.239':139
'62.##9.96.134':139
'62.##9.55.172':9988
'62.##9.207.247':9988
'62.##9.142.218':9988
'62.##9.108.162':9988
'62.##9.84.160':9988
'62.##9.167.160':139
'62.##9.169.119':139
'62.##9.186.168':139
'62.##9.144.28':9988
'62.##9.36.86':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней