Trojan.Starman.5722

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##1.205.92':445
'62.##1.33.61':445
'62.##1.24.138':445
'62.##1.255.9':445
'62.##1.225.115':445
'62.##1.27.216':445
'62.##1.62.160':445
'62.##1.252.140':445
'62.##1.21.49':445
'62.##1.127.54':139
'62.##1.49.162':139
'62.##1.64.101':139
'62.##1.54.64':139
'62.##1.71.21':139
'62.##1.0.108':445
'62.##1.138.0':445
'62.##1.15.161':139
'62.##1.76.115':139
'62.##1.20.251':445
'62.##1.43.143':445
'62.##1.19.235':445
'62.##1.33.62':445
'62.##1.101.142':445
'62.##1.127.54':445
'62.##1.49.162':445
'62.##1.64.101':445
'62.##1.54.64':445
'62.##1.17.178':445
'62.##1.31.36':445
'62.##1.83.53':445
'62.##1.66.130':445
'62.##1.211.42':445
'62.##1.95.187':445
'62.#11.11.8':445
'62.##1.130.112':445
'62.##1.127.130':445
'62.##1.0.108':139
'62.##1.138.0':139
'62.##1.29.182':445
'62.##1.108.29':445
'62.##1.24.138':139
'62.##1.33.61':139
'62.##1.225.115':139
'62.##1.255.9':139
'62.##1.205.92':139
'62.#11.8.51':445
'62.##1.69.65':445
'62.##1.61.109':445
'62.##1.187.172':445
'62.##1.25.74':445
'62.##1.238.184':445
'62.##1.181.138':445
'62.##1.128.24':445
'62.##1.42.123':445
'62.##1.95.187':139
'62.#11.11.8':139
'62.##1.130.112':139
'62.##1.127.130':139
'62.##1.19.235':139
'62.##1.43.143':139
'62.##1.101.142':139
'62.##1.33.62':139
'62.##1.20.251':139
'62.##1.27.216':139
'62.##1.62.160':139
'62.##1.252.140':139
'62.##1.21.49':139
'62.##1.83.53':139
'62.##1.31.36':139
'62.##1.211.42':139
'62.##1.66.130':139
'62.##1.17.178':139
'62.##1.71.21':445
'62.##1.62.169':139
'62.##1.107.149':139
'62.##1.3.235':139
'62.##1.238.187':139
'62.##1.172.27':139
'62.##1.50.150':139
'62.##1.130.40':139
'62.##1.30.110':139
'62.##1.41.12':139
'62.##1.205.63':445
'62.##1.100.205':445
'62.##1.129.189':445
'62.##1.64.14':445
'62.##1.236.145':139
'62.##1.200.51':139
'62.##1.234.200':139
'62.##1.192.179':139
'62.##1.51.174':139
'62.##1.139.42':139
'62.##1.214.201':139
'62.##1.90.144':139
'62.##1.153.101':139
'62.##1.132.214':139
'62.##1.28.168':139
'62.##1.39.66':139
'62.##1.49.150':139
'62.##1.59.202':139
'62.##1.241.32':139
'62.##1.3.241':139
'62.##1.47.116':139
'62.##1.32.35':139
'62.#11.40.4':139
'62.##1.69.173':139
'62.#11.93.1':139
'62.##1.197.64':139
'62.##1.129.82':139
'62.##1.231.188':139
'62.##1.244.36':139
'62.##1.172.35':139
'62.##1.128.213':139
'62.##1.91.53':139
'62.##1.160.123':139
'62.##1.129.189':139
'62.##1.177.215':139
'62.##1.111.36':139
'62.##1.122.202':139
'62.##1.188.83':139
'62.##1.15.161':445
'62.##1.76.115':445
'62.##1.133.152':139
'62.##1.125.122':139
'62.##1.36.62':139
'62.##1.229.133':139
'62.##1.198.36':139
'62.##1.128.213':445
'62.##1.231.188':445
'62.##1.36.62':445
'62.##1.172.35':445
'62.##1.244.36':445
'62.##1.111.36':445
'62.##1.160.123':445
'62.##1.91.53':445
'62.##1.177.215':445
'62.##1.100.205':139
'62.##1.122.202':445
'62.##1.64.14':139
'62.##1.205.63':139
'62.##1.188.83':445
'62.##1.198.36':445
'62.##1.125.122':445
'62.##1.133.152':445
'62.##1.229.133':445
'62.##1.56.168':139
'62.##1.74.229':139
'62.##1.93.62':139
'62.##1.213.19':139
'62.#11.9.36':139
'62.##1.30.168':445
'62.##1.176.46':445
'62.##1.113.2':139
'62.##1.50.196':445
'62.##1.164.33':139
'62.##1.144.5':139
'62.##1.102.122':139
'62.##1.32.237':139
'62.##1.111.15':139
'62.##1.22.66':139
'62.##1.15.170':139
'62.##1.59.204':139
'62.##1.65.59':139
'62.##1.114.192':445
'62.##1.248.189':445
'62.##1.231.47':445
'62.##1.61.68':445
'62.##1.91.254':445
'62.##1.229.173':445
'62.##1.14.170':445
'62.##1.26.58':445
'62.##1.174.21':445
'62.##1.124.37':445
'62.##1.78.178':445
'62.##1.59.124':445
'62.##1.176.235':445
'62.#11.4.4':445
'62.##1.164.137':445
'62.##1.233.164':445
'62.##1.237.252':445
'62.##1.216.35':445
'62.##1.233.164':139
'62.##1.231.47':139
'62.##1.216.35':139
'62.##1.164.137':139
'62.##1.61.68':139
'62.##1.91.254':139
'62.##1.26.58':139
'62.##1.114.192':139
'62.##1.248.189':139
'62.##1.78.178':139
'62.##1.30.168':139
'62.##1.59.124':139
'62.##1.176.46':139
'62.##1.124.37':139
'62.#11.4.4':139
'62.##1.237.252':139
'62.##1.50.196':139
'62.##1.176.235':139
'62.##1.38.206':139
'62.##1.18.160':139
'62.##1.121.115':139
'62.##1.201.170':139
'62.##1.109.113':139
'62.##1.17.222':139
'62.##1.135.157':139
'62.##1.24.248':139
'62.##1.222.213':139
'62.##1.14.170':139
'62.##1.127.25':139
'62.##1.174.21':139
'62.##1.229.173':139
'62.##1.82.59':139
'62.##1.91.133':139
'62.##1.85.134':139
'62.##1.133.82':139
'62.##1.120.2':139
'62.##1.127.25':445
'62.##1.185.47':139
'62.##1.48.185':139
'62.##1.99.165':139
'62.##1.47.208':139
'62.##1.180.169':139
'62.##1.49.205':139
'62.##1.61.109':139
'62.##1.207.9':139
'62.##1.45.247':139
'62.##1.127.25':9988
'62.##1.82.59':9988
'62.##1.91.254':9988
'62.##1.14.170':9988
'62.##1.133.82':9988
'62.##1.109.113':9988
'62.##1.17.222':9988
'62.##1.38.206':9988
'62.##1.18.160':9988
'62.##1.47.208':445
'62.##1.185.47':445
'62.##1.108.29':139
'62.##1.99.165':445
'62.##1.48.185':445
'62.##1.45.247':445
'62.##1.49.205':445
'62.##1.180.169':445
'62.##1.207.9':445
'62.##1.69.65':139
'62.##1.25.74':139
'62.##1.187.172':139
'62.#11.8.51':139
'62.##1.128.24':139
'62.##1.181.138':139
'62.##1.29.182':139
'62.##1.42.123':139
'62.##1.238.184':139
'62.##1.222.213':445
'62.##1.17.222':445
'62.##1.109.113':445
'62.##1.24.248':445
'62.##1.135.157':445
'62.##1.164.33':445
'62.##1.144.5':445
'62.##1.102.122':445
'62.##1.32.237':445
'62.##1.120.2':445
'62.##1.91.133':445
'62.##1.82.59':445
'62.##1.133.82':445
'62.##1.85.134':445
'62.##1.38.206':445
'62.##1.18.160':445
'62.##1.121.115':445
'62.##1.201.170':445
'62.#11.4.4':9988
'62.##1.59.124':9988
'62.#11.9.36':445
'62.##1.113.2':445
'62.##1.176.46':9988
'62.##1.61.68':9988
'62.##1.248.189':9988
'62.##1.237.252':9988
'62.##1.78.178':9988
'62.##1.65.59':445
'62.##1.22.66':445
'62.##1.111.15':445
'62.##1.59.204':445
'62.##1.15.170':445
'62.##1.56.168':445
'62.##1.74.229':445
'62.##1.93.62':445
'62.##1.213.19':445

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней