Trojan.Starman.5779

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##7.168.13':139
'60.##7.210.75':139
'60.##7.77.23':139
'60.##7.142.206':139
'60.##7.189.19':139
'60.##7.19.36':139
'60.##7.145.214':139
'60.##7.2.175':139
'60.##7.39.75':139
'60.##7.225.88':139
'60.##7.7.212':139
'60.##7.174.8':139
'60.##7.211.140':139
'60.##7.29.27':139
'60.##7.102.250':139
'60.##7.48.252':139
'60.##7.51.145':139
'60.##7.86.187':139
'60.##7.78.58':139
'60.##7.10.50':139
'60.##7.230.145':139
'60.##7.92.24':445
'60.##7.222.254':445
'60.##7.0.241':445
'60.##7.234.248':445
'60.##7.86.36':445
'60.##7.132.48':445
'60.#47.4.70':445
'60.##7.212.232':445
'60.##7.174.4':445
'60.##7.232.33':445
'60.##7.48.57':445
'60.##7.151.123':445
'60.##7.228.249':445
'60.##7.69.33':445
'60.##7.203.253':445
'60.##7.188.123':445
'60.##7.204.86':445
'60.##7.136.224':445
'60.##7.61.42':445
'60.##7.163.181':445
'60.##7.86.56':445
'60.##7.175.63':445
'60.##7.11.115':445
'60.##7.31.13':139
'60.##7.247.53':445
'60.##7.93.211':445
'60.##7.13.80':445
'60.##7.95.208':445
'60.##7.168.122':445
'60.##7.177.163':445
'60.##7.86.56':139
'60.##7.175.63':139
'60.##7.11.115':139
'60.##7.20.101':445
'60.##7.247.53':139
'60.##7.93.211':139
'60.##7.13.80':139
'60.##7.95.208':139
'60.##7.168.122':139
'60.##7.177.163':139
'60.##7.31.13':445
'60.##7.92.24':139
'60.##7.222.254':139
'60.##7.0.241':139
'60.##7.234.248':139
'60.##7.86.36':139
'60.##7.132.48':139
'60.#47.4.70':139
'60.##7.212.232':139
'60.##7.174.4':139
'60.##7.232.33':139
'60.##7.48.57':139
'60.##7.151.123':139
'60.##7.228.249':139
'60.##7.69.33':139
'60.##7.203.253':139
'60.##7.188.123':139
'60.##7.204.86':139
'60.##7.136.224':139
'60.##7.61.42':139
'60.##7.163.181':139
'60.##7.124.37':139
'60.##7.35.133':139
'60.##7.143.70':139
'60.##7.113.208':139
'60.##7.99.57':139
'60.#47.9.42':139
'60.##7.11.14':139
'60.##7.42.186':139
'60.##7.37.115':139
'60.##7.105.3':139
'60.##7.108.59':139
'60.##7.130.226':139
'60.##7.191.250':139
'60.##7.8.238':139
'60.##7.254.8':139
'60.##7.219.8':139
'60.##7.40.178':139
'60.##7.181.20':139
'60.##7.244.87':139
'60.##7.84.244':139
'60.##7.141.180':139
'60.##7.16.214':139
'60.##7.81.221':139
'60.##7.214.162':139
'60.##7.8.120':139
'60.##7.163.2':139
'60.##7.200.160':139
'60.##7.252.203':139
'60.##7.79.31':139
'60.##7.130.29':139
'60.##7.176.222':139
'60.##7.91.26':139
'60.##7.209.104':139
'60.##7.113.90':139
'60.##7.98.21':139
'60.##7.90.32':139
'60.##7.201.13':139
'60.##7.121.126':139
'60.##7.132.175':139
'60.##7.36.97':139
'60.##7.246.27':139
'60.##7.168.13':445
'60.##7.210.75':445
'60.##7.77.23':445
'60.##7.142.206':445
'60.##7.189.19':445
'60.##7.19.36':445
'60.##7.145.214':445
'60.##7.2.175':445
'60.##7.39.75':445
'60.##7.225.88':445
'60.##7.7.212':445
'60.##7.174.8':445
'60.##7.211.140':445
'60.##7.29.27':445
'60.##7.102.250':445
'60.##7.48.252':445
'60.##7.51.145':445
'60.##7.86.187':445
'60.##7.78.58':445
'60.##7.10.50':445
'60.##7.230.145':445
'60.##7.110.134':445
'60.##7.46.135':445
'60.##7.195.17':445
'60.##7.32.230':445
'60.##7.18.33':445
'60.##7.185.87':445
'60.##7.238.184':445
'60.##7.87.36':445
'60.##7.55.223':445
'60.##7.37.56':445
'60.##7.46.135':139
'60.##7.110.134':139
'60.##7.195.17':139
'60.##7.32.230':139
'60.##7.18.33':139
'60.##7.185.87':139
'60.##7.238.184':139
'60.##7.87.36':139
'60.##7.55.223':139
'60.##7.37.56':139
'60.##7.167.102':445
'60.##7.249.29':445
'60.##7.151.30':445
'60.##7.235.79':445
'60.##7.12.131':445
'60.##7.59.161':445
'60.##7.199.235':445
'60.##7.254.15':445
'60.##7.46.249':445
'60.##7.40.90':445
'60.##7.188.153':139
'60.##7.142.188':139
'60.##7.152.231':139
'60.##7.45.185':139
'60.##7.24.14':139
'60.##7.65.241':139
'60.##7.127.166':139
'60.##7.89.189':139
'60.##7.172.142':139
'60.##7.57.172':139
'60.#47.6.36':445
'60.##7.127.36':445
'60.##7.59.144':445
'60.##7.45.192':445
'60.##7.100.243':445
'60.##7.0.101':445
'60.##7.151.138':445
'60.#47.1.95':445
'60.##7.7.180':445
'60.##7.37.224':445
'60.##7.180.36':445
'60.##7.124.190':445
'60.##7.176.109':445
'60.##7.168.217':445
'60.##7.207.207':445
'60.#47.1.41':445
'60.#47.2.37':445
'60.##7.243.103':445
'60.##7.248.109':445
'60.##7.145.176':445
'60.##7.110.146':445
'60.##7.168.217':139
'60.##7.124.190':139
'60.#47.1.41':139
'60.#47.6.36':139
'60.##7.207.207':139
'60.##7.248.109':139
'60.#47.2.37':139
'60.##7.110.146':139
'60.##7.176.109':139
'60.##7.145.176':139
'60.##7.167.102':139
'60.##7.249.29':139
'60.##7.151.30':139
'60.##7.12.131':139
'60.##7.235.79':139
'60.##7.59.161':139
'60.##7.199.235':139
'60.##7.254.15':139
'60.##7.46.249':139
'60.##7.40.90':139
'60.##7.243.103':139
'60.##7.75.212':139
'60.##7.207.22':139
'60.##7.132.118':139
'60.##7.189.176':139
'60.##7.187.216':139
'60.##7.95.36':139
'60.##7.148.214':139
'60.##7.101.243':139
'60.##7.49.143':139
'60.##7.158.233':139
'60.##7.127.36':139
'60.##7.59.144':139
'60.##7.45.192':139
'60.##7.100.243':139
'60.##7.0.101':139
'60.##7.151.138':139
'60.#47.1.95':139
'60.##7.7.180':139
'60.##7.37.224':139
'60.##7.180.36':139
'60.##7.122.27':139
'60.##7.142.234':139
'60.##7.78.49':139
'60.##7.91.41':139
'60.##7.29.57':139
'60.##7.19.160':445
'60.##7.90.20':445
'60.##7.65.70':445
'60.##7.242.249':139
'60.##7.20.101':139
'60.##7.35.97':139
'60.##7.73.188':139
'60.##7.188.57':139
'60.##7.132.114':139
'60.##7.68.54':139
'60.##7.19.124':139
'60.##7.174.89':139
'60.##7.124.50':139
'60.##7.113.147':139
'60.##7.100.215':139
'60.##7.3.133':445
'60.##7.174.89':445
'60.##7.91.41':445
'60.##7.19.124':445
'60.##7.100.215':445
'60.##7.124.50':445
'60.##7.142.234':445
'60.##7.242.249':445
'60.##7.122.27':445
'60.##7.29.57':445
'60.##7.78.49':445
'60.##7.238.84':445
'60.##7.132.114':445
'60.##7.85.103':445
'60.##7.25.121':445
'60.##7.103.125':445
'60.##7.73.188':445
'60.##7.113.147':445
'60.##7.35.97':445
'60.##7.68.54':445
'60.##7.188.57':445
'60.##7.188.153':445
'60.##7.142.188':445
'60.##7.152.231':445
'60.##7.45.185':445
'60.##7.24.14':445
'60.##7.65.241':445
'60.##7.127.166':445
'60.##7.89.189':445
'60.##7.172.142':445
'60.##7.57.172':445
'60.##7.75.212':445
'60.##7.207.22':445
'60.##7.132.118':445
'60.##7.189.176':445
'60.##7.187.216':445
'60.##7.95.36':445
'60.##7.148.214':445
'60.##7.101.243':445
'60.##7.49.143':445
'60.##7.158.233':445
'60.##7.151.30':9988
'60.##7.19.160':139
'60.##7.90.20':139
'60.##7.65.70':139
'60.##7.45.185':9988
'60.##7.188.153':9988
'60.##7.85.103':139
'60.##7.238.84':139
'60.##7.103.125':139
'60.##7.3.133':139
'60.##7.25.121':139
'60.##7.248.109':9988
'60.##7.59.144':9988
'60.##7.207.207':9988
'60.##7.249.29':9988
'60.##7.46.249':9988
'60.##7.207.22':9988
'60.##7.148.214':9988
'60.##7.189.176':9988
'60.##7.127.36':9988
'60.##7.37.224':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней