Trojan.Starman.6694

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##3.60.173':139
'63.##3.241.131':445
'63.##3.218.132':139
'63.##3.229.218':139
'63.##3.207.251':445
'63.##3.87.246':445
'63.##3.122.225':445
'63.##3.191.78':445
'63.##3.0.239':445
'63.##3.132.252':139
'63.##3.221.143':139
'63.##3.145.11':139
'63.##3.23.231':139
'63.##3.231.136':139
'63.##3.171.250':139
'63.##3.138.115':139
'63.##3.18.27':139
'63.##3.26.201':139
'63.##3.252.164':139
'63.##3.236.116':445
'63.##3.96.80':445
'63.##3.76.107':445
'63.##3.91.150':445
'63.##3.32.150':445
'63.##3.42.208':445
'63.##3.215.5':445
'63.##3.53.103':445
'63.##3.19.145':445
'63.##3.126.146':445
'63.#83.42.2':445
'63.##3.138.0':445
'63.##3.138.72':445
'63.##3.95.50':445
'63.##3.195.55':445
'63.##3.185.46':445
'63.##3.198.184':445
'63.##3.36.124':445
'63.##3.46.118':445
'63.##3.46.118':139
'63.##3.185.46':139
'63.##3.195.55':139
'63.##3.36.124':139
'63.##3.198.184':139
'63.##3.91.150':139
'63.##3.236.116':139
'63.##3.126.146':139
'63.##3.76.107':139
'63.##3.138.0':139
'63.##3.191.78':139
'63.##3.0.239':139
'63.##3.241.131':139
'63.##3.207.251':139
'63.##3.87.246':139
'63.##3.95.50':139
'63.#83.42.2':139
'63.##3.122.225':139
'63.##3.138.72':139
'63.##3.155.203':139
'63.##3.105.78':139
'63.##3.223.107':139
'63.##3.203.223':139
'63.##3.24.80':139
'63.##3.143.139':139
'63.##3.11.88':139
'63.##3.246.34':139
'63.##3.170.123':139
'63.##3.64.220':139
'63.##3.53.103':139
'63.##3.19.145':139
'63.##3.96.80':139
'63.##3.32.150':139
'63.##3.42.208':139
'63.##3.214.192':139
'63.##3.224.4':139
'63.##3.215.5':139
'63.##3.113.233':139
'63.##3.113.233':445
'63.##3.186.142':139
'63.##3.253.180':139
'63.##3.103.114':139
'63.##3.205.103':139
'63.##3.133.90':139
'63.##3.67.226':139
'63.##3.28.57':139
'63.##3.93.161':139
'63.##3.131.3':139
'63.##3.94.34':139
'63.##3.154.230':139
'63.##3.110.154':139
'63.##3.96.223':139
'63.##3.25.225':139
'63.##3.34.110':139
'63.##3.192.65':139
'63.##3.179.192':139
'63.##3.215.34':139
'63.##3.47.195':139
'63.##3.220.89':139
'63.##3.239.127':139
'63.##3.243.223':139
'63.##3.214.37':139
'63.##3.51.36':139
'63.##3.120.179':139
'63.##3.168.231':139
'63.##3.174.51':139
'63.##3.17.91':139
'63.##3.87.90':139
'63.##3.49.23':139
'63.##3.153.170':139
'63.##3.81.155':139
'63.##3.211.165':139
'63.##3.231.223':139
'63.##3.36.235':139
'63.##3.32.191':139
'63.#83.7.95':139
'63.##3.194.155':139
'63.##3.23.231':445
'63.##3.231.136':445
'63.##3.143.139':445
'63.##3.11.88':445
'63.##3.221.143':445
'63.##3.26.201':445
'63.##3.252.164':445
'63.##3.145.11':445
'63.##3.171.250':445
'63.##3.170.123':445
'63.##3.64.220':445
'63.##3.223.107':445
'63.##3.214.192':445
'63.##3.224.4':445
'63.##3.203.223':445
'63.##3.24.80':445
'63.##3.246.34':445
'63.##3.155.203':445
'63.##3.105.78':445
'63.##3.24.39':139
'63.##3.204.52':139
'63.##3.89.82':139
'63.##3.81.136':139
'63.##3.129.174':139
'63.##3.79.47':139
'63.##3.223.79':139
'63.##3.93.129':139
'63.##3.32.229':139
'63.##3.238.237':139
'63.##3.132.252':445
'63.##3.218.132':445
'63.##3.138.115':445
'63.##3.18.27':445
'63.##3.229.218':445
'63.##3.70.25':139
'63.##3.16.120':139
'63.##3.60.173':445
'63.##3.25.133':139
'63.##3.164.208':139
'63.##3.238.64':445
'63.##3.56.217':139
'63.##3.162.161':139
'63.##3.58.128':445
'63.##3.36.206':445
'63.##3.20.111':445
'63.##3.214.84':445
'63.##3.197.78':445
'63.##3.49.213':139
'63.##3.66.12':139
'63.##3.12.122':139
'63.##3.180.113':139
'63.##3.12.180':139
'63.##3.2.162':139
'63.##3.193.178':139
'63.##3.17.39':139
'63.##3.195.115':139
'63.##3.137.204':139
'63.##3.54.172':445
'63.##3.1.228':445
'63.##3.116.106':445
'63.#83.98.3':445
'63.##3.58.29':445
'63.##3.31.115':445
'63.##3.219.103':445
'63.##3.40.58':445
'63.##3.79.218':445
'63.##3.93.222':445
'63.##3.115.142':445
'63.##3.247.238':445
'63.##3.69.243':445
'63.##3.196.209':445
'63.##3.61.137':445
'63.##3.4.245':445
'63.##3.121.213':445
'63.##3.41.62':445
'63.##3.139.41':445
'63.##3.139.41':139
'63.##3.4.245':139
'63.##3.61.137':139
'63.##3.41.62':139
'63.##3.121.213':139
'63.#83.98.3':139
'63.##3.54.172':139
'63.##3.93.222':139
'63.##3.116.106':139
'63.##3.247.238':139
'63.##3.214.84':139
'63.##3.238.64':139
'63.##3.58.128':139
'63.##3.36.206':139
'63.##3.197.78':139
'63.##3.196.209':139
'63.##3.115.142':139
'63.##3.20.111':139
'63.##3.69.243':139
'63.#83.26.3':139
'63.##3.124.74':139
'63.##3.207.56':139
'63.##3.100.187':139
'63.##3.118.219':139
'63.##3.203.163':139
'63.##3.112.203':139
'63.##3.227.118':139
'63.##3.47.178':139
'63.##3.109.89':139
'63.##3.40.58':139
'63.##3.79.218':139
'63.##3.1.228':139
'63.##3.58.29':139
'63.##3.31.115':139
'63.##3.122.179':139
'63.##3.88.123':139
'63.##3.219.103':139
'63.##3.179.219':139
'63.##3.179.219':445
'63.##3.136.228':139
'63.##3.144.185':139
'63.##3.94.60':139
'63.##3.149.110':139
'63.##3.201.77':139
'63.##3.238.183':139
'63.#83.6.89':139
'63.##3.78.133':139
'63.##3.183.77':139
'63.##3.147.40':139
'63.##3.118.219':9988
'63.##3.124.74':9988
'63.##3.100.187':9988
'63.##3.122.179':9988
'63.##3.219.164':139
'63.##3.79.247':139
'63.##3.168.149':139
'63.##3.127.219':139
'63.##3.72.128':139
'63.##3.201.77':445
'63.##3.78.133':445
'63.##3.136.228':445
'63.##3.144.185':445
'63.##3.183.77':445
'63.##3.217.127':445
'63.##3.11.62':445
'63.##3.238.183':445
'63.#83.6.89':445
'63.##3.149.110':445
'63.##3.219.164':445
'63.##3.127.219':445
'63.##3.217.127':139
'63.##3.11.62':139
'63.##3.72.128':445
'63.##3.147.40':445
'63.##3.94.60':445
'63.##3.79.247':445
'63.##3.168.149':445
'63.##3.180.113':445
'63.##3.12.180':445
'63.##3.203.163':445
'63.##3.112.203':445
'63.##3.66.12':445
'63.##3.195.115':445
'63.##3.137.204':445
'63.##3.12.122':445
'63.##3.2.162':445
'63.##3.47.178':445
'63.##3.109.89':445
'63.##3.207.56':445
'63.##3.122.179':445
'63.##3.88.123':445
'63.##3.100.187':445
'63.##3.118.219':445
'63.##3.227.118':445
'63.#83.26.3':445
'63.##3.124.74':445
'63.##3.121.213':9988
'63.##3.93.222':9988
'63.##3.139.41':9988
'63.##3.4.245':9988
'63.##3.116.106':9988
'63.##3.207.56':9988
'63.##3.219.103':9988
'63.#83.98.3':9988
'63.##3.40.58':9988
'63.##3.61.137':9988
'63.##3.49.213':445
'63.##3.56.217':445
'63.##3.193.178':445
'63.##3.17.39':445
'63.##3.162.161':445
'63.##3.197.78':9988
'63.##3.115.142':9988
'63.##3.164.208':445
'63.##3.238.64':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней