Trojan.Starman.5069

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.##8.47.21':139
'88.##8.9.249':139
'88.##8.216.40':139
'88.##8.31.87':139
'88.##8.77.31':139
'88.##8.214.126':139
'88.##8.84.127':139
'88.##8.126.111':139
'88.##8.71.205':139
'88.##8.87.48':139
'88.##8.86.191':139
'88.##8.193.26':139
'88.##8.114.177':139
'88.##8.83.64':139
'88.##8.131.242':139
'88.##8.146.95':139
'88.##8.169.114':139
'88.##8.190.185':139
'88.##8.74.112':139
'88.##8.145.124':139
'88.##8.126.26':139
'88.##8.114.177':445
'88.##8.145.124':445
'88.##8.193.26':445
'88.##8.146.95':445
'88.##8.83.64':445
'88.##8.190.185':445
'88.##8.86.191':445
'88.##8.169.114':445
'88.##8.126.26':445
'88.##8.74.112':445
'88.##8.131.242':445
'88.##8.207.37':139
'88.##8.19.185':445
'88.##8.168.182':139
'88.##8.65.43':139
'88.##8.147.31':139
'88.##8.92.111':445
'88.##8.242.160':445
'88.##8.213.207':445
'88.##8.107.121':445
'88.##8.33.138':445
'88.##8.242.160':139
'88.##8.244.181':139
'88.##8.87.90':139
'88.##8.182.95':139
'88.##8.100.62':139
'88.##8.187.22':139
'88.##8.223.165':445
'88.##8.111.223':445
'88.##8.25.230':445
'88.##8.37.195':139
'88.##8.12.217':445
'88.##8.140.78':139
'88.##8.133.221':139
'88.##8.45.45':139
'88.##8.192.91':139
'88.##8.111.223':139
'88.##8.92.112':139
'88.##8.113.252':139
'88.##8.247.87':139
'88.##8.249.30':139
'88.##8.19.136':139
'88.##8.120.162':139
'88.##8.87.90':445
'88.##8.37.195':445
'88.##8.244.181':445
'88.##8.187.22':445
'88.##8.182.95':445
'88.##8.213.207':139
'88.##8.92.111':139
'88.##8.33.138':139
'88.##8.19.185':139
'88.##8.107.121':139
'88.##8.100.62':445
'88.##8.45.45':445
'88.##8.19.136':445
'88.##8.133.221':445
'88.##8.92.112':445
'88.##8.192.91':445
'88.##8.247.87':445
'88.##8.140.78':445
'88.##8.113.252':445
'88.##8.120.162':445
'88.##8.249.30':445
'88.##8.36.249':139
'88.##8.204.159':139
'88.##8.15.245':139
'88.##8.78.156':139
'88.#98.2.39':139
'88.##8.44.89':139
'88.##8.71.149':139
'88.##8.214.113':139
'88.##8.107.110':139
'88.##8.16.167':139
'88.##8.39.129':445
'88.##8.78.192':445
'88.##8.79.79':445
'88.##8.193.3':445
'88.##8.118.78':445
'88.##8.21.228':445
'88.##8.122.160':445
'88.##8.109.253':445
'88.##8.95.230':445
'88.##8.31.190':445
'88.##8.100.94':445
'88.##8.237.13':139
'88.##8.99.57':139
'88.##8.19.155':139
'88.##8.44.34':139
'88.##8.150.44':139
'88.##8.84.50':139
'88.##8.151.121':139
'88.#98.3.25':139
'88.##8.10.218':139
'88.##8.70.65':139
'88.##8.69.86':139
'88.##8.187.172':139
'88.##8.35.88':139
'88.##8.206.26':139
'88.##8.154.86':139
'88.##8.42.102':139
'88.##8.63.192':139
'88.##8.186.89':139
'88.##8.191.185':139
'88.##8.143.203':139
'88.##8.194.108':139
'88.##8.131.81':445
'88.##8.68.193':139
'88.##8.140.239':139
'88.##8.207.37':445
'88.##8.147.31':445
'88.##8.168.182':445
'88.##8.184.19':139
'88.##8.20.173':139
'88.##8.138.162':139
'88.##8.15.151':139
'88.##8.163.135':139
'88.##8.65.43':445
'88.##8.47.21':445
'88.##8.9.249':445
'88.##8.216.40':445
'88.##8.31.87':445
'88.##8.77.31':445
'88.##8.214.126':445
'88.##8.84.127':445
'88.##8.126.111':445
'88.##8.71.205':445
'88.##8.87.48':445
'88.##8.140.239':445
'88.##8.15.151':445
'88.##8.68.193':445
'88.##8.109.253':139
'88.##8.39.129':139
'88.##8.20.173':445
'88.##8.63.20':445
'88.##8.184.19':445
'88.##8.163.135':445
'88.##8.138.162':445
'88.##8.122.160':139
'88.##8.21.228':139
'88.##8.193.3':139
'88.##8.118.78':139
'88.##8.63.20':139
'88.##8.131.81':139
'88.##8.100.94':139
'88.##8.95.230':139
'88.##8.31.190':139
'88.##8.78.192':139
'88.##8.79.79':139
'88.##8.223.165':139
'88.##8.26.225':445
'88.##8.30.95':445
'88.##8.93.67':445
'88.##8.197.66':445
'88.##8.73.197':445
'88.##8.77.152':445
'88.##8.204.19':445
'88.##8.153.75':445
'88.##8.29.13':445
'88.##8.75.29':445
'88.##8.75.91':445
'88.##8.157.16':139
'88.##8.122.126':139
'88.##8.16.155':139
'88.##8.222.51':139
'88.##8.240.150':139
'88.##8.5.151':445
'88.##8.128.47':445
'88.##8.11.186':139
'88.##8.36.166':139
'88.##8.234.35':139
'88.##8.20.141':445
'88.##8.213.143':445
'88.##8.9.222':445
'88.##8.45.254':445
'88.##8.124.103':445
'88.##8.213.96':445
'88.##8.196.217':445
'88.##8.14.68':445
'88.##8.74.202':445
'88.##8.114.170':445
'88.##8.10.103':445
'88.##8.95.73':445
'88.##8.180.121':445
'88.##8.10.140':445
'88.##8.193.43':445
'88.##8.145.241':445
'88.##8.217.137':445
'88.##8.174.177':445
'88.##8.117.138':445
'88.##8.241.163':445
'88.##8.21.47':445
'88.##8.52.81':139
'88.##8.145.241':139
'88.##8.10.140':139
'88.##8.193.43':139
'88.##8.77.152':139
'88.##8.204.19':139
'88.##8.21.47':139
'88.##8.117.138':139
'88.##8.241.163':139
'88.##8.95.73':139
'88.##8.180.121':139
'88.##8.153.75':139
'88.##8.197.66':139
'88.##8.73.197':139
'88.##8.75.91':139
'88.##8.5.151':139
'88.##8.128.47':139
'88.##8.29.13':139
'88.##8.75.29':139
'88.##8.30.95':139
'88.##8.93.67':139
'88.##8.26.225':139
'88.##8.208.13':139
'88.##8.96.249':139
'88.##8.158.221':139
'88.##8.213.96':139
'88.##8.196.217':139
'88.##8.11.63':139
'88.##8.81.67':139
'88.##8.172.18':139
'88.##8.203.157':139
'88.##8.2.121':139
'88.##8.14.68':139
'88.##8.45.254':139
'88.##8.124.103':139
'88.##8.10.103':139
'88.##8.217.137':139
'88.##8.174.177':139
'88.##8.74.202':139
'88.##8.114.170':139
'88.##8.213.143':139
'88.##8.9.222':139
'88.##8.20.141':139
'88.##8.168.67':445
'88.#98.35.0':445
'88.##8.226.73':445
'88.##8.25.83':139
'88.#98.9.53':139
'88.#98.53.0':445
'88.##8.132.226':445
'88.##8.41.227':445
'88.##8.172.164':445
'88.##8.218.178':445
'88.##8.84.89':139
'88.##8.167.108':139
'88.##8.74.115':139
'88.##8.108.161':139
'88.##8.101.201':139
'88.##8.115.13':139
'88.##8.9.213':139
'88.##8.127.33':139
'88.##8.34.80':139
'88.##8.230.217':139
'88.##8.244.161':139
'88.##8.9.213':445
'88.##8.127.33':445
'88.##8.34.80':445
'88.##8.230.217':445
'88.##8.244.161':445
'88.##8.12.217':139
'88.##8.25.230':139
'88.#98.9.53':445
'88.##8.84.89':445
'88.##8.25.83':445
'88.##8.74.115':445
'88.##8.14.129':445
'88.##8.172.14':445
'88.##8.168.22':445
'88.##8.165.43':445
'88.##8.167.152':445
'88.##8.108.161':445
'88.##8.167.108':445
'88.##8.115.13':445
'88.##8.159.134':445
'88.##8.101.201':445
'88.##8.159.134':139
'88.##8.36.166':445
'88.##8.234.35':445
'88.##8.122.126':445
'88.##8.16.155':445
'88.##8.157.16':445
'88.##8.75.91':9988
'88.##8.197.66':9988
'88.##8.128.47':9988
'88.##8.11.186':445
'88.##8.5.151':9988
'88.##8.240.150':445
'88.##8.203.157':445
'88.##8.2.121':445
'88.##8.96.249':445
'88.##8.158.221':445
'88.##8.208.13':445
'88.##8.52.81':445
'88.##8.222.51':445
'88.##8.81.67':445
'88.##8.172.18':445
'88.##8.11.63':445
'88.#98.53.0':139
'88.##8.132.226':139
'88.##8.41.227':139
'88.##8.172.164':139
'88.##8.218.178':139
'88.##8.14.129':139
'88.##8.172.14':139
'88.##8.168.22':139
'88.##8.165.43':139
'88.##8.167.152':139
'88.#98.35.0':139
'88.##8.180.121':9988
'88.##8.20.141':9988
'88.##8.95.73':9988
'88.##8.30.95':9988
'88.##8.77.152':9988
'88.##8.226.73':139
'88.##8.168.67':139
'88.##8.81.67':9988
'88.##8.74.202':9988
'88.##8.213.96':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней