Trojan.Starman.6507

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##9.63.214':139
'24.##9.226.73':139
'24.##9.11.95':139
'24.##9.177.131':139
'24.##9.215.41':139
'24.##9.190.133':139
'24.##9.156.116':445
'24.##9.116.71':139
'24.##9.195.142':139
'24.##9.40.195':139
'24.##9.99.234':445
'24.##9.92.229':445
'24.##9.47.74':445
'24.##9.233.160':445
'24.##9.208.131':445
'24.##9.23.187':139
'24.##9.34.147':139
'24.##9.99.180':139
'24.##9.11.133':445
'24.##9.156.116':139
'24.##9.126.156':139
'24.##9.139.97':139
'24.##9.74.177':139
'24.##9.116.71':445
'24.##9.190.133':445
'24.##9.111.136':139
'24.##9.86.239':139
'24.##9.83.146':139
'24.##9.192.126':139
'24.##9.130.42':139
'24.##9.177.131':445
'24.##9.215.41':445
'24.##9.34.147':445
'24.##9.99.180':445
'24.##9.23.187':445
'24.##9.195.142':445
'24.##9.40.195':445
'24.##9.226.73':445
'24.##9.11.95':445
'24.##9.63.214':445
'24.##9.147.146':445
'24.##9.244.78':445
'24.##9.150.42':445
'24.##9.170.118':445
'24.##9.89.137':445
'24.##9.107.107':445
'24.##9.255.145':445
'24.##9.116.95':445
'24.##9.136.188':445
'24.##9.92.179':445
'24.##9.110.253':445
'24.##9.233.160':139
'24.##9.208.131':139
'24.##9.147.146':139
'24.##9.36.190':139
'24.##9.146.125':139
'24.##9.11.133':139
'24.##9.129.106':445
'24.##9.92.229':139
'24.##9.47.74':139
'24.##9.99.234':139
'24.##9.30.25':445
'24.##9.181.50':445
'24.##9.178.81':445
'24.##9.40.147':445
'24.##9.14.38':445
'24.##9.36.190':445
'24.##9.146.125':445
'24.##9.134.231':445
'24.##9.84.121':445
'24.##9.15.39':445
'24.##9.92.28':445
'24.##9.94.92':445
'24.##9.112.139':445
'24.##9.79.122':445
'24.##9.38.70':445
'24.##9.69.33':445
'24.##9.119.126':445
'24.##9.22.191':445
'24.#69.6.76':445
'24.##9.35.48':445
'24.##9.5.120':445
'24.##9.233.46':445
'24.##9.73.143':445
'24.##9.73.22':445
'24.##9.149.163':445
'24.##9.34.242':445
'24.##9.79.171':445
'24.##9.46.154':445
'24.##9.39.233':445
'24.##9.255.39':445
'24.##9.25.21':445
'24.#69.9.2':445
'24.#69.33.3':445
'24.##9.52.19':445
'24.##9.186.14':445
'24.##9.40.27':445
'24.##9.22.40':445
'24.##9.65.199':445
'24.##9.140.8':445
'24.##9.81.223':445
'24.##9.213.0':139
'24.##9.55.129':139
'24.##9.70.195':139
'24.##9.69.187':139
'24.##9.18.211':139
'24.##9.92.99':139
'24.##9.44.63':139
'24.##9.49.35':139
'24.##9.55.225':139
'24.##9.217.95':139
'24.##9.101.12':445
'24.##9.65.44':445
'24.##9.100.64':445
'24.##9.153.33':445
'24.##9.142.153':445
'24.##9.185.212':139
'24.##9.82.55':139
'24.##9.44.206':139
'24.##9.33.41':445
'24.#69.6.33':445
'24.##9.38.31':445
'24.##9.73.22':139
'24.##9.149.163':139
'24.##9.22.40':139
'24.##9.65.199':139
'24.##9.40.27':139
'24.##9.39.233':139
'24.##9.255.39':139
'24.##9.233.46':139
'24.##9.73.143':139
'24.##9.5.120':139
'24.##9.52.19':139
'24.##9.186.14':139
'24.##9.38.31':139
'24.##9.12.137':139
'24.##9.221.122':139
'24.##9.140.8':139
'24.##9.81.223':139
'24.#69.9.2':139
'24.#69.33.3':139
'24.##9.25.21':139
'24.##9.192.126':445
'24.##9.130.42':445
'24.##9.139.97':445
'24.##9.74.177':445
'24.##9.126.156':445
'24.##9.12.137':445
'24.##9.221.122':445
'24.##9.86.239':445
'24.##9.83.146':445
'24.##9.111.136':445
'24.##9.153.33':139
'24.##9.142.153':139
'24.##9.79.171':139
'24.##9.46.154':139
'24.##9.34.242':139
'24.##9.33.41':139
'24.#69.6.33':139
'24.##9.65.44':139
'24.##9.100.64':139
'24.##9.101.12':139
'24.##9.82.62':445
'24.##9.44.118':445
'24.##9.72.115':445
'24.##9.149.131':445
'24.##9.91.204':445
'24.##9.119.112':445
'24.#69.6.58':445
'24.##9.36.76':445
'24.##9.150.135':445
'24.##9.88.36':445
'24.##9.34.119':139
'24.##9.148.34':139
'24.##9.13.133':139
'24.##9.35.57':139
'24.##9.104.84':139
'24.##9.84.137':139
'24.##9.74.227':139
'24.##9.28.141':139
'24.##9.104.148':139
'24.##9.151.98':139
'24.##9.245.104':445
'24.##9.109.56':445
'24.##9.188.110':445
'24.##9.76.12':445
'24.##9.110.75':445
'24.##9.152.68':445
'24.##9.60.74':445
'24.##9.217.216':445
'24.##9.202.219':445
'24.##9.126.216':445
'24.##9.7.200':445
'24.##9.163.208':445
'24.##9.105.117':445
'24.##9.4.178':445
'24.##9.69.78':445
'24.##9.45.114':445
'24.##9.12.57':445
'24.##9.155.30':445
'24.##9.84.189':445
'24.##9.194.53':445
'24.##9.124.220':139
'24.##9.7.200':139
'24.##9.163.208':139
'24.##9.105.117':139
'24.##9.4.178':139
'24.##9.69.78':139
'24.##9.45.114':139
'24.##9.12.57':139
'24.##9.155.30':139
'24.##9.84.189':139
'24.##9.194.53':139
'24.##9.149.131':139
'24.##9.82.62':139
'24.##9.150.135':139
'24.##9.91.204':139
'24.##9.44.118':139
'24.##9.119.112':139
'24.#69.6.58':139
'24.##9.36.76':139
'24.##9.72.115':139
'24.##9.88.36':139
'24.##9.40.208':139
'24.##9.103.191':139
'24.##9.252.226':139
'24.##9.32.152':139
'24.##9.142.187':139
'24.##9.175.214':139
'24.##9.118.231':139
'24.##9.254.124':139
'24.##9.29.35':139
'24.##9.33.133':139
'24.##9.245.104':139
'24.##9.109.56':139
'24.##9.188.110':139
'24.##9.76.12':139
'24.##9.110.75':139
'24.##9.60.74':139
'24.##9.152.68':139
'24.##9.217.216':139
'24.##9.202.219':139
'24.##9.126.216':139
'24.##9.107.107':139
'24.##9.170.118':139
'24.##9.89.137':139
'24.##9.106.235':445
'24.##9.129.106':139
'24.##9.110.253':139
'24.##9.136.188':139
'24.##9.92.179':139
'24.##9.244.78':139
'24.##9.150.42':139
'24.##9.162.136':445
'24.##9.172.161':445
'24.##9.53.17':445
'24.##9.56.75':445
'24.##9.208.17':445
'24.##9.144.56':445
'24.##9.236.59':445
'24.##9.206.238':445
'24.##9.224.172':445
'24.##9.91.239':445
'24.##9.14.38':139
'24.##9.178.81':139
'24.##9.40.147':139
'24.##9.69.33':139
'24.##9.119.126':139
'24.##9.15.39':139
'24.##9.134.231':139
'24.##9.84.121':139
'24.##9.30.25':139
'24.##9.181.50':139
'24.##9.38.70':139
'24.##9.112.139':139
'24.##9.79.122':139
'24.##9.255.145':139
'24.##9.116.95':139
'24.##9.35.48':139
'24.##9.22.191':139
'24.#69.6.76':139
'24.##9.92.28':139
'24.##9.94.92':139
'24.##9.106.235':139
'24.##9.13.133':445
'24.##9.34.119':445
'24.##9.104.84':445
'24.##9.124.220':445
'24.##9.35.57':445
'24.##9.28.141':445
'24.##9.84.137':445
'24.##9.151.98':445
'24.##9.148.34':445
'24.##9.104.148':445
'24.##9.40.208':445
'24.##9.103.191':445
'24.##9.252.226':445
'24.##9.142.187':445
'24.##9.32.152':445
'24.##9.175.214':445
'24.##9.118.231':445
'24.##9.254.124':445
'24.##9.29.35':445
'24.##9.33.133':445
'24.##9.162.136':139
'24.##9.172.161':139
'24.##9.53.17':139
'24.##9.56.75':139
'24.##9.208.17':139
'24.##9.144.56':139
'24.##9.236.59':139
'24.##9.206.238':139
'24.##9.224.172':139
'24.##9.91.239':139
'24.##9.44.118':9988
'24.##9.105.117':9988
'24.##9.91.204':9988
'24.##9.74.227':445
'24.##9.150.135':9988
'24.##9.152.68':9988
'24.##9.74.227':9988
'24.##9.188.110':9988
'24.##9.7.200':9988
'24.##9.84.189':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней