Trojan.Starman.4943

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##.186.234':445
'72.##.128.159':445
'72.##.31.184':445
'72.#1.19.29':445
'72.#1.9.118':445
'72.##.31.221':445
'72.##.168.194':445
'72.#1.121.2':445
'72.##.196.128':445
'72.#1.17.49':445
'72.#1.84.45':445
'72.##.181.192':445
'72.##.47.168':445
'72.##.153.120':445
'72.##.169.41':445
'72.##.120.192':445
'72.##.241.113':445
'72.##.219.90':445
'72.##.191.103':445
'72.##.202.60':445
'72.#1.0.169':445
'72.##.207.235':445
'72.##.149.221':445
'72.##.10.134':139
'72.#1.15.69':139
'72.##.133.247':139
'72.##.19.231':445
'72.#1.55.19':139
'72.##.133.204':139
'72.##.252.36':139
'72.#1.0.231':139
'72.##.203.228':139
'72.##.54.232':139
'72.##.228.88':139
'72.#1.16.25':445
'72.#1.119.0':445
'72.##.130.192':445
'72.##.115.62':445
'72.##.251.57':445
'72.##.92.141':445
'72.##.19.231':139
'72.##.88.242':445
'72.##.88.242':139
'72.##.246.92':445
'72.##.242.245':445
'72.#1.84.45':139
'72.##.196.128':139
'72.#1.17.49':139
'72.##.128.159':139
'72.##.31.221':139
'72.##.168.194':139
'72.##.251.57':139
'72.##.130.192':139
'72.##.115.62':139
'72.#1.121.2':139
'72.##.149.221':139
'72.##.207.235':139
'72.##.202.60':139
'72.#1.0.169':139
'72.##.47.168':139
'72.##.241.113':139
'72.##.219.90':139
'72.##.31.184':139
'72.##.186.234':139
'72.#1.9.118':139
'72.##.191.103':139
'72.#1.19.29':139
'72.#1.16.25':139
'72.##.152.28':445
'72.##.146.17':445
'72.#1.12.77':445
'72.##.169.147':445
'72.##.150.162':445
'72.##.116.72':445
'72.##.10.201':445
'72.##.68.105':445
'72.##.201.219':445
'72.##.38.202':445
'72.##.219.198':445
'72.##.242.245':139
'72.##.145.208':445
'72.##.246.92':139
'72.#1.119.0':139
'72.##.92.141':139
'72.##.151.193':445
'72.##.89.119':445
'72.#1.52.28':445
'72.#1.19.10':445
'72.#1.85.37':445
'72.##.10.239':445
'72.##.250.50':445
'72.##.159.249':445
'72.#1.93.27':445
'72.##.146.70':445
'72.##.84.113':445
'72.##.156.176':445
'72.##.29.205':445
'72.##.151.68':445
'72.##.122.139':445
'72.##.135.138':445
'72.##.247.25':445
'72.#1.0.231':445
'72.##.238.31':445
'72.##.252.36':445
'72.##.228.88':445
'72.##.203.228':445
'72.#1.49.75':445
'72.##.116.154':445
'72.##.115.28':445
'72.##.24.200':445
'72.#1.4.187':445
'72.##.15.131':445
'72.#1.61.66':445
'72.##.213.243':445
'72.##.20.117':445
'72.##.244.116':445
'72.#1.16.59':445
'72.##.174.45':445
'72.##.96.187':445
'72.#1.89.86':139
'72.#1.58.90':139
'72.#1.33.70':445
'72.#1.78.28':445
'72.##.29.179':445
'72.##.118.155':445
'72.##.134.118':445
'72.#1.96.66':445
'72.##.79.173':445
'72.##.220.79':445
'72.##.49.135':445
'72.##.186.20':445
'72.##.48.227':445
'72.##.248.194':445
'72.#1.70.11':445
'72.#1.101.0':445
'72.##.247.25':139
'72.##.122.139':139
'72.##.135.138':139
'72.##.159.249':139
'72.##.156.176':139
'72.##.29.205':139
'72.##.220.79':139
'72.#1.96.66':139
'72.##.79.173':139
'72.##.151.68':139
'72.#1.61.66':139
'72.##.15.131':139
'72.##.24.200':139
'72.#1.4.187':139
'72.##.238.31':139
'72.#1.49.75':139
'72.##.116.154':139
'72.#1.93.27':139
'72.##.250.50':139
'72.##.84.113':139
'72.##.115.28':139
'72.##.146.70':139
'72.##.118.155':139
'72.##.29.179':139
'72.#1.33.70':139
'72.#1.78.28':139
'72.##.20.117':139
'72.##.96.187':139
'72.#1.55.19':445
'72.##.133.204':445
'72.##.54.232':445
'72.#1.15.69':445
'72.##.133.247':445
'72.##.10.134':445
'72.#1.101.0':139
'72.##.248.194':139
'72.#1.70.11':139
'72.##.134.118':139
'72.##.49.135':139
'72.##.186.20':139
'72.##.244.116':139
'72.##.213.243':139
'72.##.174.45':139
'72.##.48.227':139
'72.#1.16.59':139
'72.##.181.192':139
'72.#1.0.229':445
'72.##.241.75':445
'72.##.200.84':445
'72.##.27.215':445
'72.##.54.245':445
'72.#1.17.47':445
'72.##.93.117':445
'72.#1.47.84':445
'72.##.190.23':445
'72.##.107.127':445
'72.#1.73.81':445
'72.##.153.189':139
'72.##.126.214':139
'72.#1.17.41':139
'72.##.141.85':139
'72.#1.26.25':139
'72.##.108.112':139
'72.##.191.218':445
'72.##.49.151':445
'72.##.44.115':445
'72.#1.14.40':445
'72.##.147.132':445
'72.##.123.93':445
'72.#1.65.27':445
'72.#1.45.74':445
'72.##.16.181':445
'72.##.104.152':445
'72.##.141.25':445
'72.##.30.178':445
'72.##.132.211':445
'72.##.236.76':445
'72.##.27.209':445
'72.##.207.158':445
'72.##.36.170':445
'72.#1.5.34':445
'72.##.134.240':445
'72.#1.49.85':445
'72.##.56.172':445
'72.##.128.206':445
'72.##.100.224':445
'72.##.249.127':445
'72.#1.49.23':445
'72.##.187.198':445
'72.##.49.165':445
'72.#1.66.83':445
'72.##.93.117':139
'72.#1.47.84':139
'72.##.190.23':139
'72.##.107.127':139
'72.#1.73.81':139
'72.##.123.93':139
'72.#1.5.34':139
'72.##.134.240':139
'72.#1.49.85':139
'72.##.56.172':139
'72.##.128.206':139
'72.##.44.115':139
'72.##.147.132':139
'72.##.49.151':139
'72.#1.14.40':139
'72.##.27.215':139
'72.##.191.218':139
'72.##.241.75':139
'72.#1.17.47':139
'72.#1.0.229':139
'72.##.54.245':139
'72.##.200.84':139
'72.##.100.224':139
'72.##.132.211':139
'72.##.236.76':139
'72.##.27.209':139
'72.##.207.158':139
'72.##.36.170':139
'72.##.132.149':139
'72.#1.83.92':139
'72.##.111.243':139
'72.#1.27.50':139
'72.##.251.142':139
'72.#1.100.6':139
'72.##.249.127':139
'72.#1.49.23':139
'72.##.187.198':139
'72.##.49.165':139
'72.#1.66.83':139
'72.##.104.152':139
'72.#1.45.74':139
'72.##.30.178':139
'72.#1.65.27':139
'72.##.141.25':139
'72.##.16.181':139
'72.##.226.36':445
'72.##.168.162':445
'72.##.254.175':445
'72.##.195.201':445
'72.##.216.195':445
'72.#1.112.5':445
'72.#1.17.33':139
'72.##.95.159':139
'72.##.222.94':445
'72.##.65.174':445
'72.##.73.217':445
'72.##.176.221':445
'72.##.162.229':445
'72.##.221.53':445
'72.##.222.94':139
'72.##.107.52':445
'72.#1.23.36':445
'72.##.241.74':445
'72.#1.9.183':445
'72.#1.87.58':445
'72.#1.27.11':445
'72.#1.46.33':445
'72.#1.17.33':445
'72.##.38.202':139
'72.##.219.198':139
'72.##.116.72':139
'72.##.152.28':139
'72.##.146.17':139
'72.##.201.219':139
'72.##.120.192':139
'72.##.153.120':139
'72.##.169.41':139
'72.##.10.201':139
'72.##.68.105':139
'72.#1.85.37':139
'72.##.10.239':139
'72.##.151.193':139
'72.##.95.159':445
'72.##.145.208':139
'72.#1.19.10':139
'72.##.150.162':139
'72.#1.12.77':139
'72.##.169.147':139
'72.##.89.119':139
'72.#1.52.28':139
'72.##.241.75':9988
'72.#1.49.23':9988
'72.#1.47.84':9988
'72.##.108.112':445
'72.##.27.215':9988
'72.#1.66.83':9988
'72.#1.5.34':9988
'72.#1.49.85':9988
'72.##.190.23':9988
'72.##.44.115':9988
'72.##.56.172':9988
'72.#1.27.50':445
'72.#1.83.92':445
'72.#1.100.6':445
'72.##.132.149':445
'72.##.251.142':445
'72.##.111.243':445
'72.##.153.189':445
'72.##.126.214':445
'72.#1.17.41':445
'72.##.141.85':445
'72.#1.26.25':445
'72.##.200.84':9988
'72.##.195.201':139
'72.##.216.195':139
'72.#1.9.183':139
'72.#1.87.58':139
'72.##.241.74':139
'72.##.254.175':139
'72.##.65.174':139
'72.##.73.217':139
'72.#1.112.5':139
'72.##.226.36':139
'72.##.168.162':139
'72.##.249.127':9988
'72.##.107.52':139
'72.##.123.93':9988
'72.#1.17.47':9988
'72.##.107.127':9988
'72.##.221.53':139
'72.#1.27.11':139
'72.#1.46.33':139
'72.#1.23.36':139
'72.##.176.221':139
'72.##.162.229':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней