Trojan.Starman.4994

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##7.2.198':445
'63.##7.15.85':445
'63.##7.241.251':445
'63.##7.245.85':445
'63.##7.185.245':445
'63.##7.135.1':445
'63.##7.33.29':445
'63.##7.106.191':445
'63.##7.125.175':445
'63.##7.53.156':445
'63.##7.49.54':445
'63.##7.189.38':445
'63.##7.100.103':445
'63.##7.188.75':445
'63.##7.171.208':445
'63.##7.106.4':445
'63.##7.24.114':445
'63.#57.3.51':445
'63.##7.17.14':445
'63.##7.163.61':445
'63.##7.186.217':445
'63.##7.61.134':445
'63.##7.199.1':139
'63.##7.25.238':139
'63.##7.30.95':139
'63.##7.65.175':445
'63.##7.104.9':139
'63.##7.181.29':139
'63.##7.86.154':139
'63.##7.242.28':139
'63.##7.16.74':139
'63.##7.233.217':139
'63.##7.23.58':139
'63.##7.53.143':445
'63.##7.154.235':445
'63.##7.143.110':445
'63.##7.115.133':445
'63.##7.208.216':445
'63.##7.39.177':445
'63.##7.65.175':139
'63.##7.139.231':445
'63.##7.139.231':139
'63.##7.120.185':445
'63.##7.26.203':445
'63.##7.51.156':445
'63.##7.49.54':139
'63.##7.125.175':139
'63.##7.53.156':139
'63.##7.15.85':139
'63.##7.135.1':139
'63.##7.33.29':139
'63.##7.143.110':139
'63.##7.53.143':139
'63.##7.208.216':139
'63.##7.106.191':139
'63.##7.115.133':139
'63.##7.61.134':139
'63.##7.163.61':139
'63.##7.186.217':139
'63.##7.100.103':139
'63.##7.24.114':139
'63.#57.3.51':139
'63.##7.241.251':139
'63.##7.2.198':139
'63.##7.185.245':139
'63.##7.17.14':139
'63.##7.245.85':139
'63.##7.23.70':445
'63.##7.254.34':445
'63.##7.157.87':445
'63.##7.207.33':445
'63.##7.87.207':445
'63.##7.123.37':445
'63.##7.147.187':445
'63.##7.211.33':445
'63.##7.219.207':445
'63.##7.205.74':445
'63.##7.222.153':445
'63.##7.26.203':139
'63.#57.19.5':445
'63.##7.120.185':139
'63.##7.154.235':139
'63.##7.39.177':139
'63.##7.167.115':445
'63.##7.206.24':445
'63.##7.33.206':445
'63.##7.207.26':445
'63.##7.151.167':445
'63.##7.14.67':445
'63.##7.18.108':139
'63.##7.190.245':445
'63.##7.124.36':445
'63.##7.250.106':445
'63.##7.52.147':445
'63.##7.190.85':445
'63.##7.66.187':445
'63.##7.146.227':445
'63.##7.35.245':445
'63.##7.122.1':445
'63.##7.198.36':445
'63.##7.209.22':445
'63.##7.18.108':445
'63.##7.95.47':445
'63.##7.242.28':445
'63.##7.16.74':445
'63.##7.86.154':445
'63.##7.141.194':445
'63.##7.89.139':445
'63.##7.17.246':445
'63.##7.65.75':445
'63.##7.117.99':445
'63.##7.19.199':445
'63.##7.181.89':445
'63.##7.173.207':445
'63.##7.44.119':445
'63.##7.126.31':445
'63.##7.91.81':445
'63.##7.67.233':445
'63.##7.253.110':139
'63.##7.7.218':139
'63.##7.68.101':445
'63.##7.234.67':445
'63.##7.181.53':445
'63.##7.237.243':445
'63.##7.140.237':445
'63.##7.243.203':445
'63.##7.203.210':445
'63.##7.46.242':445
'63.##7.38.141':445
'63.##7.110.246':445
'63.##7.182.145':445
'63.##7.195.181':445
'63.##7.149.244':445
'63.#57.69.6':445
'63.##7.23.58':445
'63.##7.209.22':139
'63.##7.122.1':139
'63.##7.198.36':139
'63.##7.124.36':139
'63.##7.66.187':139
'63.##7.146.227':139
'63.##7.243.203':139
'63.##7.237.243':139
'63.##7.46.242':139
'63.##7.35.245':139
'63.##7.203.210':139
'63.##7.19.199':139
'63.##7.65.75':139
'63.##7.117.99':139
'63.##7.95.47':139
'63.##7.141.194':139
'63.##7.89.139':139
'63.##7.250.106':139
'63.##7.190.245':139
'63.##7.190.85':139
'63.##7.17.246':139
'63.##7.52.147':139
'63.##7.181.53':139
'63.##7.68.101':139
'63.##7.234.67':139
'63.##7.173.207':139
'63.##7.67.233':139
'63.##7.104.9':445
'63.##7.181.29':445
'63.##7.233.217':445
'63.##7.25.238':445
'63.##7.30.95':445
'63.##7.199.1':445
'63.#57.69.6':139
'63.##7.195.181':139
'63.##7.149.244':139
'63.##7.140.237':139
'63.##7.38.141':139
'63.##7.110.246':139
'63.##7.44.119':139
'63.##7.181.89':139
'63.##7.91.81':139
'63.##7.182.145':139
'63.##7.126.31':139
'63.##7.110.127':445
'63.##7.69.105':445
'63.##7.152.253':445
'63.##7.100.34':445
'63.##7.204.89':445
'63.##7.80.86':445
'63.##7.242.110':445
'63.##7.84.158':445
'63.##7.144.50':445
'63.##7.13.155':445
'63.##7.50.13':445
'63.#57.5.6':139
'63.##7.13.41':139
'63.##7.197.133':139
'63.##7.162.225':139
'63.##7.10.74':139
'63.##7.11.228':139
'63.##7.94.226':445
'63.##7.164.120':445
'63.##7.89.251':445
'63.##7.215.80':445
'63.##7.176.22':445
'63.##7.86.230':445
'63.##7.74.125':445
'63.##7.230.35':445
'63.##7.128.36':445
'63.##7.35.227':445
'63.##7.137.224':445
'63.##7.161.69':445
'63.#57.5.75':445
'63.##7.165.226':445
'63.##7.166.106':445
'63.##7.226.165':445
'63.##7.202.97':445
'63.#57.91.0':445
'63.##7.154.230':445
'63.##7.61.222':445
'63.##7.241.205':445
'63.##7.39.151':445
'63.##7.22.152':445
'63.##7.122.177':445
'63.##7.241.123':445
'63.##7.56.238':445
'63.##7.124.57':445
'63.##7.54.14':139
'63.##7.242.110':139
'63.##7.84.158':139
'63.##7.144.50':139
'63.##7.13.155':139
'63.##7.50.13':139
'63.##7.61.222':139
'63.#57.91.0':139
'63.##7.39.151':139
'63.##7.154.230':139
'63.##7.241.205':139
'63.##7.202.97':139
'63.##7.94.226':139
'63.##7.164.120':139
'63.##7.89.251':139
'63.##7.215.80':139
'63.##7.176.22':139
'63.##7.100.34':139
'63.##7.69.105':139
'63.##7.80.86':139
'63.##7.110.127':139
'63.##7.204.89':139
'63.##7.152.253':139
'63.##7.161.69':139
'63.#57.5.75':139
'63.##7.165.226':139
'63.##7.166.106':139
'63.##7.226.165':139
'63.##7.53.138':139
'63.##7.53.55':139
'63.##7.10.209':139
'63.##7.241.226':139
'63.##7.54.184':139
'63.##7.161.112':139
'63.##7.22.152':139
'63.##7.128.36':139
'63.##7.241.123':139
'63.##7.56.238':139
'63.##7.124.57':139
'63.##7.122.177':139
'63.##7.74.125':139
'63.##7.137.224':139
'63.##7.86.230':139
'63.##7.35.227':139
'63.##7.230.35':139
'63.##7.53.138':445
'63.##7.166.71':445
'63.##7.228.166':445
'63.##7.73.24':445
'63.##7.102.5':445
'63.##7.106.168':445
'63.##7.212.228':445
'63.##7.89.88':445
'63.#57.19.5':139
'63.##7.132.197':445
'63.##7.132.197':139
'63.##7.89.88':139
'63.##7.149.138':445
'63.##7.93.13':445
'63.##7.17.28':445
'63.##7.73.209':445
'63.##7.173.73':445
'63.##7.197.84':445
'63.##7.8.112':445
'63.##7.174.113':445
'63.##7.112.102':445
'63.##7.90.197':445
'63.##7.103.91':445
'63.##7.219.207':139
'63.##7.147.187':139
'63.##7.222.153':139
'63.##7.123.37':139
'63.##7.205.74':139
'63.##7.211.33':139
'63.##7.188.75':139
'63.##7.189.38':139
'63.##7.106.4':139
'63.##7.51.156':139
'63.##7.171.208':139
'63.##7.207.26':139
'63.##7.206.24':139
'63.##7.14.67':139
'63.##7.167.115':139
'63.##7.151.167':139
'63.##7.33.206':139
'63.##7.23.70':139
'63.##7.254.34':139
'63.##7.157.87':139
'63.##7.207.33':139
'63.##7.87.207':139
'63.##7.212.228':139
'63.##7.204.89':9988
'63.##7.154.230':9988
'63.##7.176.22':9988
'63.##7.11.228':445
'63.##7.89.251':9988
'63.##7.84.158':9988
'63.##7.13.155':9988
'63.##7.50.13':9988
'63.##7.152.253':9988
'63.##7.241.205':9988
'63.##7.100.34':9988
'63.##7.53.55':445
'63.##7.10.209':445
'63.##7.241.226':445
'63.##7.54.184':445
'63.##7.161.112':445
'63.##7.54.14':445
'63.#57.5.6':445
'63.##7.13.41':445
'63.##7.197.133':445
'63.##7.162.225':445
'63.##7.10.74':445
'63.##7.112.102':139
'63.##7.8.112':139
'63.##7.103.91':139
'63.##7.197.84':139
'63.##7.90.197':139
'63.##7.174.113':139
'63.##7.166.71':139
'63.##7.228.166':139
'63.##7.73.24':139
'63.##7.102.5':139
'63.##7.106.168':139
'63.##7.164.120':9988
'63.##7.80.86':9988
'63.##7.61.222':9988
'63.##7.215.80':9988
'63.##7.69.105':9988
'63.##7.242.110':9988
'63.##7.149.138':139
'63.##7.93.13':139
'63.##7.17.28':139
'63.##7.73.209':139
'63.##7.173.73':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней