Trojan.Starman.6331

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##1.44.72':139
'65.#41.7.56':139
'65.##1.74.34':139
'65.##1.236.131':139
'65.##1.39.236':139
'65.##1.226.104':139
'65.##1.204.225':139
'65.##1.105.49':139
'65.##1.138.124':139
'65.##1.31.11':139
'65.##1.132.98':139
'65.##1.240.211':445
'65.##1.187.240':445
'65.##1.10.62':445
'65.##1.110.43':445
'65.##1.83.183':445
'65.##1.110.87':139
'65.##1.15.57':139
'65.##1.124.41':139
'65.##1.163.187':139
'65.##1.41.164':139
'65.##1.169.204':139
'65.##1.39.236':445
'65.##1.74.34':445
'65.##1.236.131':445
'65.##1.15.57':445
'65.##1.132.98':445
'65.##1.31.11':445
'65.##1.105.49':445
'65.##1.138.124':445
'65.##1.44.72':445
'65.#41.7.56':445
'65.##1.110.87':445
'65.##1.128.61':139
'65.##1.48.155':139
'65.##1.30.190':139
'65.##1.141.145':139
'65.##1.189.97':139
'65.##1.41.164':445
'65.##1.124.41':445
'65.##1.163.187':445
'65.##1.159.116':139
'65.##1.99.186':139
'65.##1.79.202':445
'65.##1.71.21':139
'65.##1.76.147':139
'65.##1.89.99':139
'65.##1.63.50':139
'65.##1.129.120':139
'65.##1.10.62':139
'65.##1.240.211':139
'65.##1.83.183':139
'65.##1.79.202':139
'65.##1.110.43':139
'65.##1.50.132':139
'65.##1.219.92':139
'65.##1.110.199':139
'65.##1.92.221':139
'65.##1.118.14':139
'65.##1.221.56':139
'65.##1.112.73':139
'65.##1.114.249':139
'65.##1.177.170':139
'65.##1.86.132':139
'65.##1.11.170':139
'65.##1.187.240':139
'65.##1.114.249':445
'65.##1.50.132':445
'65.##1.112.73':445
'65.##1.11.170':445
'65.##1.177.170':445
'65.##1.71.21':445
'65.##1.76.147':445
'65.##1.89.99':445
'65.##1.63.50':445
'65.##1.129.120':445
'65.##1.86.132':445
'65.##1.97.85':445
'65.##1.55.97':445
'65.##1.84.247':445
'65.##1.41.140':445
'65.##1.81.209':445
'65.##1.219.92':445
'65.##1.110.199':445
'65.##1.92.221':445
'65.##1.118.14':445
'65.##1.221.56':445
'65.##1.226.104':445
'65.##1.104.47':445
'65.##1.242.84':445
'65.##1.65.217':445
'65.##1.202.84':445
'65.##1.247.201':445
'65.##1.67.160':139
'65.#41.83.0':139
'65.##1.102.120':445
'65.##1.21.145':445
'65.##1.61.141':445
'65.##1.77.46':445
'65.##1.198.137':445
'65.##1.9.138':445
'65.##1.211.190':445
'65.##1.128.181':445
'65.##1.59.115':445
'65.##1.18.208':445
'65.##1.160.141':445
'65.#41.79.1':445
'65.##1.144.189':445
'65.##1.228.135':445
'65.#41.9.3':139
'65.##1.242.94':139
'65.##1.27.82':139
'65.##1.95.71':139
'65.##1.213.185':139
'65.##1.70.213':139
'65.##1.120.196':139
'65.##1.68.154':139
'65.##1.34.143':139
'65.##1.123.69':139
'65.##1.73.65':139
'65.##1.217.136':139
'65.##1.100.116':139
'65.##1.33.252':139
'65.##1.164.54':139
'65.##1.50.24':139
'65.#41.55.5':139
'65.##1.204.30':139
'65.##1.255.203':139
'65.##1.143.154':139
'65.##1.11.26':139
'65.##1.162.11':139
'65.##1.181.86':445
'65.##1.167.117':139
'65.##1.204.124':139
'65.##1.198.13':139
'65.##1.30.241':139
'65.##1.232.161':139
'65.##1.211.190':139
'65.##1.198.137':139
'65.##1.59.115':139
'65.##1.181.86':139
'65.##1.128.181':139
'65.##1.240.135':139
'65.##1.189.97':445
'65.##1.30.190':445
'65.##1.141.145':445
'65.##1.204.225':445
'65.##1.169.204':445
'65.##1.99.186':445
'65.##1.136.12':139
'65.##1.159.116':445
'65.##1.128.61':445
'65.##1.48.155':445
'65.##1.9.138':139
'65.##1.136.12':445
'65.##1.240.135':445
'65.##1.102.120':139
'65.##1.21.145':139
'65.##1.61.141':139
'65.##1.167.117':445
'65.##1.204.124':445
'65.##1.198.13':445
'65.##1.30.241':445
'65.##1.232.161':445
'65.##1.242.84':139
'65.##1.18.208':139
'65.##1.160.141':139
'65.#41.79.1':139
'65.##1.144.189':139
'65.##1.228.135':139
'65.##1.65.217':139
'65.##1.104.47':139
'65.##1.247.201':139
'65.##1.77.46':139
'65.##1.202.84':139
'65.##1.55.97':139
'65.##1.3.235':445
'65.##1.242.13':445
'65.##1.167.18':445
'65.##1.209.52':445
'65.#41.76.5':445
'65.##1.98.82':445
'65.##1.137.88':445
'65.##1.82.177':445
'65.##1.198.241':445
'65.##1.226.177':445
'65.##1.46.31':445
'65.##1.83.50':139
'65.##1.112.83':139
'65.#41.26.9':139
'65.##1.10.130':139
'65.##1.42.97':139
'65.##1.219.119':445
'65.##1.50.125':445
'65.##1.201.214':445
'65.##1.216.111':139
'65.##1.50.183':139
'65.##1.88.124':445
'65.##1.227.105':445
'65.##1.105.125':445
'65.##1.145.143':445
'65.##1.34.28':445
'65.##1.32.131':445
'65.##1.155.226':445
'65.##1.206.81':445
'65.##1.191.176':445
'65.##1.111.30':445
'65.##1.91.243':445
'65.##1.117.165':445
'65.##1.236.41':445
'65.##1.97.236':445
'65.##1.155.93':445
'65.##1.76.177':445
'65.##1.112.199':445
'65.##1.127.189':445
'65.##1.11.169':445
'65.##1.150.23':445
'65.##1.64.73':445
'65.##1.127.45':445
'65.##1.181.69':139
'65.##1.88.124':139
'65.##1.76.177':139
'65.##1.137.88':139
'65.##1.82.177':139
'65.##1.98.82':139
'65.##1.97.236':139
'65.##1.64.73':139
'65.##1.236.41':139
'65.##1.112.199':139
'65.##1.155.93':139
'65.##1.226.177':139
'65.##1.219.119':139
'65.##1.46.31':139
'65.##1.201.214':139
'65.##1.50.125':139
'65.#41.76.5':139
'65.##1.242.13':139
'65.##1.198.241':139
'65.##1.3.235':139
'65.##1.209.52':139
'65.##1.167.18':139
'65.##1.127.45':139
'65.##1.205.220':139
'65.##1.72.88':139
'65.##1.206.81':139
'65.##1.191.176':139
'65.##1.155.226':139
'65.##1.39.45':139
'65.##1.232.205':139
'65.##1.45.51':139
'65.#41.9.14':139
'65.##1.159.57':139
'65.##1.91.243':139
'65.##1.117.165':139
'65.##1.34.28':139
'65.##1.11.169':139
'65.##1.150.23':139
'65.##1.127.189':139
'65.##1.227.105':139
'65.##1.111.30':139
'65.##1.105.125':139
'65.##1.32.131':139
'65.##1.145.143':139
'65.##1.205.220':445
'65.##1.102.74':139
'65.##1.58.115':445
'65.##1.105.136':139
'65.##1.170.204':139
'65.##1.1.181':139
'65.##1.71.51':445
'65.##1.92.47':445
'65.##1.133.206':445
'65.##1.58.158':445
'65.##1.206.39':445
'65.##1.126.247':139
'65.##1.38.224':139
'65.##1.9.254':139
'65.##1.47.223':139
'65.##1.109.63':139
'65.##1.171.75':139
'65.##1.220.118':139
'65.##1.32.151':139
'65.##1.129.38':139
'65.#41.30.6':139
'65.##1.96.208':139
'65.##1.106.240':445
'65.##1.1.181':445
'65.##1.105.136':445
'65.##1.170.204':445
'65.##1.32.151':445
'65.##1.126.247':445
'65.##1.84.247':139
'65.##1.97.85':139
'65.##1.81.209':139
'65.##1.102.74':445
'65.##1.41.140':139
'65.##1.220.118':445
'65.##1.171.75':445
'65.##1.47.223':445
'65.##1.109.63':445
'65.##1.52.107':445
'65.##1.35.54':445
'65.##1.96.208':445
'65.##1.129.38':445
'65.#41.30.6':445
'65.##1.38.224':445
'65.##1.9.254':445
'65.##1.35.54':139
'65.##1.82.177':9988
'65.##1.97.236':9988
'65.##1.50.183':445
'65.##1.112.83':445
'65.##1.216.111':445
'65.##1.11.169':9988
'65.##1.34.28':9988
'65.##1.236.41':9988
'65.##1.64.73':9988
'65.##1.76.177':9988
'65.##1.83.50':445
'65.##1.45.51':445
'65.##1.39.45':445
'65.##1.159.57':445
'65.##1.72.88':445
'65.#41.9.14':445
'65.##1.42.97':445
'65.#41.26.9':445
'65.##1.10.130':445
'65.##1.232.205':445
'65.##1.181.69':445
'65.##1.117.165':9988
'65.##1.58.158':139
'65.##1.206.39':139
'65.##1.58.115':139
'65.##1.94.27':445
'65.##1.3.108':445
'65.##1.106.240':139
'65.##1.52.107':139
'65.##1.92.47':139
'65.##1.133.206':139
'65.##1.71.51':139
'65.##1.27.241':445
'65.##1.86.200':139
'65.##1.15.213':139
'65.##1.227.105':9988
'65.##1.145.143':9988
'65.##1.127.189':9988
'65.##1.86.200':445
'65.##1.15.213':445
'65.##1.3.108':139
'65.##1.27.241':139
'65.##1.94.27':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней