Trojan.Starman.5118

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##.69.134':139
'63.#6.20.18':139
'63.##.153.171':139
'63.##.77.122':139
'63.##.166.77':139
'63.##.38.137':139
'63.##.74.187':139
'63.#6.6.16':139
'63.##.250.67':139
'63.##.226.133':139
'63.##.108.142':139
'63.##.53.225':445
'63.#6.95.25':445
'63.##.81.126':445
'63.##.28.171':445
'63.##.87.220':445
'63.##.211.62':139
'63.##.168.120':139
'63.#6.7.152':139
'63.##.248.37':445
'63.##.34.176':139
'63.##.250.67':445
'63.##.226.133':445
'63.#6.20.18':445
'63.##.153.171':445
'63.##.69.134':445
'63.##.220.148':445
'63.##.207.219':445
'63.##.74.187':445
'63.#6.6.16':445
'63.##.38.137':445
'63.##.166.77':445
'63.##.91.131':139
'63.##.34.176':445
'63.##.88.207':139
'63.##.220.148':139
'63.##.207.219':139
'63.##.108.142':445
'63.##.77.122':445
'63.##.168.120':445
'63.#6.7.152':445
'63.##.211.62':445
'63.#6.95.25':139
'63.##.248.37':139
'63.##.53.225':139
'63.##.87.220':139
'63.##.81.126':139
'63.##.252.37':445
'63.##.241.111':445
'63.##.37.155':445
'63.#6.22.91':445
'63.##.155.145':445
'63.##.28.171':139
'63.##.68.220':139
'63.##.157.20':139
'63.##.68.147':139
'63.##.108.71':139
'63.##.244.12':139
'63.#6.22.41':139
'63.##.53.250':139
'63.##.213.113':139
'63.##.18.193':139
'63.#6.51.84':139
'63.##.68.220':445
'63.##.157.20':445
'63.##.68.147':445
'63.##.108.71':445
'63.##.244.12':445
'63.#6.22.41':445
'63.##.53.250':445
'63.##.213.113':445
'63.##.18.193':445
'63.#6.51.84':445
'63.##.160.72':445
'63.#6.47.8':445
'63.##.106.30':445
'63.##.211.136':445
'63.#6.74.71':445
'63.##.55.116':445
'63.##.146.231':445
'63.##.73.135':445
'63.##.74.117':445
'63.#6.0.212':445
'63.##.246.131':445
'63.##.88.207':445
'63.##.59.212':445
'63.##.78.107':445
'63.#6.52.46':445
'63.#6.31.47':445
'63.##.106.46':445
'63.##.26.101':445
'63.##.130.117':445
'63.#6.8.207':445
'63.##.78.215':445
'63.##.168.175':445
'63.##.146.244':445
'63.##.193.231':445
'63.##.143.66':445
'63.##.153.48':445
'63.##.215.85':445
'63.##.48.204':445
'63.##.75.180':445
'63.##.243.224':445
'63.##.122.229':445
'63.##.183.249':445
'63.#6.69.59':445
'63.##.170.107':139
'63.##.197.57':139
'63.##.61.199':139
'63.##.245.82':139
'63.##.199.129':139
'63.#6.34.52':139
'63.##.12.121':139
'63.##.64.190':139
'63.#6.94.50':139
'63.#6.29.94':139
'63.##.16.207':139
'63.##.210.137':139
'63.##.104.210':139
'63.#6.138.1':139
'63.##.228.248':445
'63.#6.20.10':445
'63.#6.80.31':139
'63.##.44.136':139
'63.##.18.159':139
'63.##.229.204':139
'63.#6.24.80':139
'63.##.143.66':139
'63.##.183.249':139
'63.##.193.231':139
'63.##.48.204':139
'63.##.153.48':139
'63.##.243.224':139
'63.##.146.244':139
'63.##.75.180':139
'63.#6.69.59':139
'63.##.122.229':139
'63.##.215.85':139
'63.##.49.146':139
'63.##.100.49':139
'63.##.244.102':139
'63.##.91.131':445
'63.##.86.149':139
'63.##.210.228':139
'63.#6.24.79':139
'63.##.63.238':139
'63.##.92.223':139
'63.#6.17.3':139
'63.##.49.146':445
'63.##.100.49':445
'63.##.244.102':445
'63.#6.20.10':139
'63.##.86.149':445
'63.##.210.228':445
'63.#6.24.79':445
'63.##.63.238':445
'63.##.92.223':445
'63.#6.17.3':445
'63.##.228.248':139
'63.##.59.212':139
'63.##.78.107':139
'63.#6.52.46':139
'63.#6.31.47':139
'63.##.106.46':139
'63.##.26.101':139
'63.##.130.117':139
'63.#6.8.207':139
'63.##.78.215':139
'63.##.168.175':139
'63.#6.106.5':445
'63.#6.164.7':445
'63.##.107.178':445
'63.#6.39.45':445
'63.#6.14.70':445
'63.##.132.145':445
'63.#6.0.127':445
'63.#6.46.26':445
'63.##.101.175':445
'63.##.184.110':445
'63.##.45.148':445
'63.##.24.122':139
'63.##.124.179':139
'63.#6.1.101':139
'63.##.30.187':139
'63.##.34.182':139
'63.#6.17.51':139
'63.##.93.116':445
'63.##.101.123':139
'63.##.94.110':139
'63.#6.54.8':139
'63.##.173.180':445
'63.#6.85.24':445
'63.##.169.23':445
'63.##.77.117':445
'63.#6.24.77':445
'63.##.89.180':445
'63.##.206.214':445
'63.##.241.239':445
'63.##.238.145':445
'63.##.78.104':445
'63.##.43.105':445
'63.#6.52.1':445
'63.##.238.51':445
'63.#6.71.88':445
'63.##.38.195':445
'63.#6.7.48':445
'63.##.221.22':445
'63.##.105.221':445
'63.##.242.87':445
'63.#6.5.170':445
'63.##.86.176':445
'63.#6.71.88':139
'63.#6.52.1':139
'63.#6.7.48':139
'63.#6.0.127':139
'63.##.38.195':139
'63.##.242.87':139
'63.##.221.22':139
'63.##.86.176':139
'63.##.238.51':139
'63.#6.5.170':139
'63.##.132.145':139
'63.#6.14.70':139
'63.##.107.178':139
'63.#6.39.45':139
'63.##.45.148':139
'63.##.93.116':139
'63.##.184.110':139
'63.#6.46.26':139
'63.##.101.175':139
'63.#6.106.5':139
'63.#6.164.7':139
'63.#6.4.124':139
'63.##.181.38':139
'63.##.201.16':139
'63.##.206.214':139
'63.##.40.192':139
'63.#6.105.1':139
'63.##.125.110':139
'63.#6.32.2':139
'63.#6.98.98':139
'63.##.189.12':139
'63.##.89.180':139
'63.#6.24.77':139
'63.##.169.23':139
'63.##.77.117':139
'63.##.105.221':139
'63.##.43.105':139
'63.##.78.104':139
'63.##.241.239':139
'63.##.238.145':139
'63.##.173.180':139
'63.#6.85.24':139
'63.##.40.192':445
'63.##.92.185':445
'63.##.232.92':445
'63.##.165.71':445
'63.##.17.239':445
'63.##.210.156':445
'63.##.147.82':445
'63.##.51.226':445
'63.#6.35.31':445
'63.##.237.190':445
'63.##.16.161':445
'63.##.40.226':445
'63.##.51.226':139
'63.##.251.51':139
'63.##.147.82':139
'63.##.16.161':139
'63.#6.35.31':139
'63.##.112.137':139
'63.##.141.63':445
'63.##.185.147':139
'63.#6.74.52':139
'63.#6.6.253':139
'63.##.106.30':139
'63.#6.0.212':139
'63.#6.47.8':139
'63.##.55.116':139
'63.##.211.136':139
'63.##.73.135':139
'63.##.160.72':139
'63.##.146.231':139
'63.##.246.131':139
'63.##.74.117':139
'63.#6.74.71':139
'63.##.185.147':445
'63.##.112.137':445
'63.#6.6.253':445
'63.##.251.51':445
'63.#6.74.52':445
'63.##.252.37':139
'63.##.241.111':139
'63.##.37.155':139
'63.#6.22.91':139
'63.##.155.145':139
'63.#6.54.8':445
'63.##.101.123':445
'63.##.94.110':445
'63.##.24.122':445
'63.##.124.179':445
'63.#6.106.5':9988
'63.#6.164.7':9988
'63.##.107.178':9988
'63.#6.17.51':445
'63.##.93.116':9988
'63.#6.1.101':445
'63.#6.98.98':445
'63.##.189.12':445
'63.##.181.38':445
'63.##.201.16':445
'63.#6.4.124':445
'63.##.30.187':445
'63.##.34.182':445
'63.##.125.110':445
'63.#6.32.2':445
'63.#6.105.1':445
'63.##.40.226':139
'63.##.17.239':139
'63.##.141.63':139
'63.##.189.12':9988
'63.#6.32.2':9988
'63.##.232.92':139
'63.##.237.190':139
'63.##.92.185':139
'63.##.210.156':139
'63.##.165.71':139
'63.##.89.180':9988
'63.##.86.176':9988
'63.#6.5.170':9988
'63.##.238.51':9988
'63.#6.7.48':9988
'63.#6.52.1':9988
'63.#6.24.77':9988
'63.##.169.23':9988
'63.##.77.117':9988
'63.##.242.87':9988
'63.##.105.221':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней