Trojan.Starman.6670

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##3.62.81':139
'60.##3.211.195':139
'60.##3.196.177':139
'60.##3.154.22':139
'60.##3.110.216':139
'60.##3.56.243':139
'60.##3.57.57':139
'60.##3.243.173':139
'60.##3.243.211':139
'60.##3.202.170':139
'60.##3.182.72':139
'60.##3.158.207':139
'60.##3.164.159':139
'60.##3.203.54':139
'60.##3.84.207':139
'60.#53.6.45':139
'60.##3.23.71':139
'60.##3.175.142':139
'60.##3.195.33':139
'60.##3.72.21':139
'60.##3.93.66':139
'60.##3.104.102':445
'60.##3.194.171':445
'60.##3.66.86':445
'60.##3.158.4':445
'60.##3.152.207':445
'60.##3.164.159':445
'60.##3.182.72':445
'60.##3.84.207':445
'60.##3.26.22':445
'60.##3.203.54':445
'60.##3.11.119':445
'60.##3.66.11':445
'60.##3.122.218':445
'60.##3.223.150':139
'60.##3.68.171':445
'60.##3.251.31':445
'60.##3.64.179':445
'60.#53.68.6':445
'60.#53.91.3':445
'60.##3.96.33':445
'60.##3.26.22':139
'60.##3.59.75':445
'60.##3.137.187':445
'60.##3.79.240':139
'60.##3.159.72':139
'60.##3.55.200':139
'60.##3.216.24':445
'60.##3.197.215':445
'60.##3.67.152':445
'60.##3.20.26':445
'60.##3.9.110':445
'60.##3.67.152':139
'60.##3.216.24':139
'60.##3.9.110':139
'60.##3.137.187':139
'60.##3.20.26':139
'60.##3.165.240':139
'60.##3.72.166':139
'60.##3.144.93':139
'60.##3.197.215':139
'60.##3.103.27':139
'60.##3.103.27':445
'60.##3.251.31':139
'60.##3.64.179':139
'60.#53.68.6':139
'60.#53.91.3':139
'60.##3.96.33':139
'60.##3.104.102':139
'60.##3.194.171':139
'60.##3.66.86':139
'60.##3.158.4':139
'60.##3.152.207':139
'60.##3.159.72':445
'60.##3.55.200':445
'60.##3.72.166':445
'60.##3.144.93':445
'60.##3.165.240':445
'60.##3.11.119':139
'60.##3.66.11':139
'60.##3.122.218':139
'60.##3.79.240':445
'60.##3.68.171':139
'60.##3.125.236':139
'60.##3.137.198':139
'60.##3.236.157':139
'60.##3.67.27':139
'60.##3.106.212':139
'60.##3.244.46':139
'60.##3.155.135':139
'60.##3.227.92':139
'60.##3.239.228':139
'60.##3.86.136':139
'60.##3.50.93':445
'60.##3.126.131':139
'60.##3.101.16':445
'60.##3.87.47':445
'60.##3.16.91':445
'60.##3.232.83':139
'60.##3.230.55':139
'60.##3.30.76':139
'60.##3.135.126':139
'60.##3.35.157':139
'60.##3.64.155':139
'60.##3.200.90':139
'60.##3.60.95':139
'60.##3.11.242':139
'60.##3.155.110':139
'60.##3.205.3':139
'60.##3.18.53':139
'60.##3.111.168':139
'60.##3.125.234':139
'60.##3.203.249':139
'60.##3.115.86':139
'60.##3.55.177':139
'60.#53.6.91':139
'60.##3.43.12':139
'60.##3.114.131':139
'60.##3.134.41':139
'60.##3.59.15':139
'60.##3.49.55':139
'60.##3.140.3':139
'60.##3.96.232':139
'60.##3.131.48':139
'60.##3.61.113':445
'60.##3.243.173':445
'60.##3.56.243':445
'60.##3.202.170':445
'60.##3.211.195':445
'60.##3.243.211':445
'60.##3.38.162':139
'60.##3.110.20':139
'60.##3.223.150':445
'60.##3.57.57':445
'60.##3.93.66':445
'60.##3.175.142':445
'60.#53.6.45':445
'60.##3.72.21':445
'60.##3.158.207':445
'60.##3.195.33':445
'60.##3.196.177':445
'60.##3.62.81':445
'60.##3.110.216':445
'60.##3.23.71':445
'60.##3.154.22':445
'60.##3.230.167':139
'60.##3.230.167':445
'60.##3.249.32':445
'60.##3.110.20':445
'60.##3.50.93':139
'60.##3.38.162':445
'60.##3.96.56':445
'60.##3.101.224':445
'60.##3.34.193':445
'60.##3.131.227':445
'60.#53.38.8':445
'60.##3.34.193':139
'60.##3.96.56':139
'60.#53.38.8':139
'60.##3.249.32':139
'60.##3.131.227':139
'60.##3.16.91':139
'60.##3.101.16':139
'60.##3.87.47':139
'60.##3.101.224':139
'60.##3.61.113':139
'60.##3.44.169':445
'60.##3.80.227':445
'60.##3.254.7':445
'60.##3.80.100':445
'60.##3.21.248':445
'60.##3.74.121':445
'60.##3.102.149':445
'60.##3.225.58':445
'60.##3.158.235':445
'60.##3.182.202':445
'60.##3.68.206':139
'60.##3.65.199':139
'60.##3.125.112':139
'60.##3.19.166':139
'60.##3.112.64':139
'60.##3.79.137':139
'60.##3.233.43':445
'60.##3.149.45':139
'60.##3.30.90':139
'60.##3.67.148':139
'60.##3.5.134':445
'60.##3.42.148':445
'60.##3.38.169':445
'60.##3.67.177':445
'60.##3.24.178':445
'60.#53.4.20':445
'60.##3.188.28':445
'60.##3.51.185':445
'60.##3.136.93':445
'60.##3.18.100':445
'60.##3.186.18':445
'60.##3.83.102':445
'60.##3.243.106':445
'60.##3.51.217':445
'60.##3.101.183':445
'60.##3.63.155':445
'60.##3.147.13':445
'60.##3.52.88':445
'60.##3.93.167':445
'60.##3.135.187':445
'60.##3.71.46':445
'60.##3.12.173':139
'60.##3.63.155':139
'60.##3.51.217':139
'60.##3.101.183':139
'60.##3.102.149':139
'60.##3.5.134':139
'60.##3.71.46':139
'60.##3.93.167':139
'60.##3.135.187':139
'60.##3.83.102':139
'60.##3.243.106':139
'60.##3.80.227':139
'60.##3.80.100':139
'60.##3.233.43':139
'60.##3.21.248':139
'60.##3.44.169':139
'60.##3.225.58':139
'60.##3.74.121':139
'60.##3.182.202':139
'60.##3.254.7':139
'60.##3.158.235':139
'60.##3.147.13':139
'60.##3.125.191':139
'60.##3.252.91':139
'60.##3.145.253':139
'60.##3.51.185':139
'60.##3.17.154':139
'60.##3.41.88':139
'60.##3.64.253':139
'60.##3.212.199':139
'60.#53.1.40':139
'60.##3.249.213':139
'60.##3.67.177':139
'60.##3.42.148':139
'60.#53.4.20':139
'60.##3.52.88':139
'60.##3.24.178':139
'60.##3.136.93':139
'60.##3.188.28':139
'60.##3.186.18':139
'60.##3.38.169':139
'60.##3.18.100':139
'60.##3.5.196':139
'60.##3.75.217':139
'60.##3.226.107':139
'60.##3.242.173':139
'60.##3.73.173':139
'60.##3.109.36':445
'60.##3.153.99':445
'60.##3.49.49':445
'60.##3.95.79':445
'60.#53.3.11':445
'60.##3.175.52':139
'60.##3.176.237':139
'60.##3.170.140':139
'60.##3.213.98':139
'60.##3.10.228':139
'60.##3.230.179':139
'60.##3.125.187':139
'60.##3.21.247':139
'60.##3.3.102':139
'60.#53.8.52':139
'60.##3.186.65':445
'60.##3.125.187':445
'60.##3.242.173':445
'60.##3.230.179':445
'60.#53.8.52':445
'60.##3.21.247':445
'60.##3.75.217':445
'60.##3.59.75':139
'60.##3.5.196':445
'60.##3.73.173':445
'60.##3.226.107':445
'60.##3.153.50':445
'60.##3.213.98':445
'60.##3.213.28':445
'60.##3.192.156':445
'60.##3.60.253':445
'60.##3.176.237':445
'60.##3.3.102':445
'60.##3.175.52':445
'60.##3.10.228':445
'60.##3.170.140':445
'60.##3.153.50':139
'60.##3.68.206':445
'60.##3.65.199':445
'60.##3.125.112':445
'60.##3.19.166':445
'60.##3.112.64':445
'60.##3.79.137':445
'60.##3.80.100':9988
'60.##3.149.45':445
'60.##3.30.90':445
'60.##3.67.148':445
'60.##3.252.91':445
'60.#53.1.40':445
'60.##3.125.191':445
'60.##3.17.154':445
'60.##3.145.253':445
'60.##3.64.253':445
'60.##3.12.173':445
'60.##3.41.88':445
'60.##3.249.213':445
'60.##3.212.199':445
'60.##3.233.43':9988
'60.##3.49.49':139
'60.##3.109.36':139
'60.#53.3.11':139
'60.##3.145.253':9988
'60.##3.95.79':139
'60.##3.60.253':139
'60.##3.213.28':139
'60.##3.192.156':139
'60.##3.153.99':139
'60.##3.186.65':139
'60.##3.71.46':9988
'60.#53.4.20':9988
'60.##3.135.187':9988
'60.##3.254.7':9988
'60.##3.5.134':9988
'60.##3.136.93':9988
'60.##3.188.28':9988
'60.##3.38.169':9988
'60.##3.67.177':9988
'60.##3.42.148':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней