Trojan.Starman.5048

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'89.##.175.44':139
'89.##.165.126':139
'89.##.41.139':139
'89.#6.9.42':139
'89.##.70.248':139
'89.#6.53.52':139
'89.##.71.108':139
'89.##.204.55':139
'89.##.96.233':139
'89.##.15.173':139
'89.##.76.198':139
'89.##.72.192':139
'89.##.198.249':139
'89.##.174.191':139
'89.##.174.137':139
'89.#6.59.75':139
'89.#6.58.85':139
'89.##.122.89':139
'89.##.85.229':139
'89.##.35.124':139
'89.#6.10.69':139
'89.#6.28.25':445
'89.#6.6.29':445
'89.##.203.198':445
'89.#6.102.0':445
'89.##.198.144':445
'89.#6.75.88':445
'89.#6.48.91':445
'89.##.252.244':445
'89.##.82.115':445
'89.#6.178.9':445
'89.##.204.65':445
'89.#6.161.3':445
'89.##.149.16':445
'89.#6.190.9':139
'89.##.36.197':139
'89.#6.19.45':445
'89.##.208.76':445
'89.##.111.86':445
'89.##.159.34':445
'89.##.86.159':445
'89.##.62.215':139
'89.##.108.229':139
'89.#6.8.87':445
'89.##.17.124':139
'89.##.232.184':139
'89.##.124.232':139
'89.##.232.184':445
'89.##.124.232':445
'89.#6.76.65':445
'89.##.205.186':445
'89.#6.46.72':445
'89.##.101.174':445
'89.##.33.205':445
'89.#6.5.237':445
'89.##.161.100':445
'89.##.24.218':445
'89.#6.46.72':139
'89.#6.76.65':139
'89.##.205.186':139
'89.#6.60.76':445
'89.#6.8.87':139
'89.##.17.124':445
'89.#6.6.29':139
'89.##.82.115':139
'89.#6.28.25':139
'89.##.198.144':139
'89.##.203.198':139
'89.#6.48.91':139
'89.#6.199.3':139
'89.#6.75.88':139
'89.#6.178.9':139
'89.##.252.244':139
'89.#6.161.3':139
'89.##.159.34':139
'89.##.204.65':139
'89.##.108.229':445
'89.##.149.16':139
'89.##.208.76':139
'89.#6.102.0':139
'89.#6.19.45':139
'89.##.86.159':139
'89.##.111.86':139
'89.#6.199.3':445
'89.##.26.207':139
'89.##.184.137':139
'89.#6.57.34':139
'89.##.194.238':139
'89.##.252.194':139
'89.##.38.228':139
'89.##.57.167':139
'89.#6.4.8':139
'89.##.97.111':139
'89.#6.45.36':139
'89.##.45.237':139
'89.##.183.163':139
'89.#6.79.44':139
'89.##.252.93':139
'89.##.56.229':139
'89.##.139.228':139
'89.##.203.194':139
'89.##.21.225':139
'89.##.168.37':139
'89.#6.0.137':139
'89.#6.90.98':139
'89.##.36.173':139
'89.#6.30.29':139
'89.##.75.176':139
'89.##.71.180':139
'89.##.105.218':139
'89.##.76.125':139
'89.##.248.188':139
'89.##.252.190':139
'89.#6.99.30':139
'89.#6.103.4':139
'89.##.170.94':139
'89.##.80.213':139
'89.##.180.77':139
'89.##.104.28':139
'89.##.227.27':139
'89.##.74.144':139
'89.#6.1.122':139
'89.##.25.232':139
'89.##.158.39':139
'89.##.134.251':139
'89.##.204.182':139
'89.##.41.139':445
'89.##.175.44':445
'89.##.70.248':445
'89.#6.58.85':445
'89.#6.9.42':445
'89.##.204.55':445
'89.#6.53.52':445
'89.##.15.173':445
'89.##.165.126':445
'89.##.96.233':445
'89.##.198.249':445
'89.##.76.198':445
'89.##.174.137':445
'89.##.62.215':445
'89.##.174.191':445
'89.##.122.89':445
'89.#6.59.75':445
'89.##.35.124':445
'89.##.72.192':445
'89.##.85.229':445
'89.##.71.108':445
'89.##.131.43':445
'89.##.10.217':445
'89.#6.53.98':445
'89.##.135.202':139
'89.##.203.244':445
'89.##.135.202':445
'89.##.176.230':139
'89.##.102.23':445
'89.##.223.113':445
'89.##.162.105':445
'89.##.203.244':139
'89.#6.53.98':139
'89.##.36.197':445
'89.#6.10.69':445
'89.#6.190.9':445
'89.##.162.105':139
'89.##.102.23':139
'89.##.223.113':139
'89.##.131.43':139
'89.##.10.217':139
'89.##.10.203':445
'89.##.12.156':445
'89.#6.15.49':445
'89.#6.12.45':445
'89.##.160.209':445
'89.##.77.213':445
'89.##.231.180':445
'89.##.106.20':445
'89.##.84.231':445
'89.#6.46.75':445
'89.##.200.213':445
'89.##.224.243':139
'89.##.128.244':139
'89.##.52.146':139
'89.##.152.109':139
'89.##.230.183':139
'89.##.141.202':139
'89.##.53.203':445
'89.##.26.237':139
'89.##.171.235':139
'89.##.180.208':139
'89.##.41.151':445
'89.##.112.92':445
'89.##.254.24':445
'89.##.161.199':445
'89.##.13.164':445
'89.##.222.126':445
'89.##.149.147':445
'89.#6.83.52':445
'89.##.88.117':445
'89.##.211.161':445
'89.##.163.111':445
'89.##.44.215':445
'89.#6.2.42':445
'89.#6.17.56':445
'89.##.93.119':445
'89.##.114.64':445
'89.##.158.45':445
'89.##.117.51':445
'89.##.34.225':445
'89.##.194.240':445
'89.##.133.97':445
'89.##.125.167':139
'89.##.114.64':139
'89.#6.17.56':139
'89.##.231.180':139
'89.##.12.156':139
'89.#6.46.75':139
'89.##.133.97':139
'89.##.34.225':139
'89.##.194.240':139
'89.##.44.215':139
'89.#6.2.42':139
'89.##.53.203':139
'89.##.106.20':139
'89.#6.15.49':139
'89.##.93.119':139
'89.##.160.209':139
'89.#6.12.45':139
'89.##.77.213':139
'89.##.84.231':139
'89.##.200.213':139
'89.##.41.151':139
'89.##.158.45':139
'89.##.151.207':139
'89.#6.33.75':139
'89.#6.148.6':139
'89.#6.83.52':139
'89.#6.64.9':139
'89.##.201.150':139
'89.##.140.201':139
'89.##.162.35':139
'89.#6.84.92':139
'89.##.51.129':139
'89.##.161.199':139
'89.##.211.161':139
'89.##.13.164':139
'89.##.117.51':139
'89.##.222.126':139
'89.##.88.117':139
'89.##.149.147':139
'89.##.163.111':139
'89.##.254.24':139
'89.##.112.92':139
'89.#6.148.6':445
'89.#6.5.237':139
'89.##.101.174':139
'89.##.24.218':139
'89.##.10.203':139
'89.##.161.100':139
'89.##.163.202':445
'89.##.102.44':445
'89.##.197.65':445
'89.##.33.205':139
'89.#6.60.76':139
'89.##.224.183':139
'89.##.191.44':139
'89.##.103.155':139
'89.#6.64.3':139
'89.##.198.197':139
'89.#6.0.113':139
'89.#6.36.0':139
'89.##.32.226':139
'89.##.119.182':139
'89.##.102.212':139
'89.##.55.128':445
'89.##.224.183':445
'89.##.191.44':445
'89.##.103.155':445
'89.#6.64.3':445
'89.##.198.197':445
'89.#6.0.113':445
'89.#6.36.0':445
'89.##.32.226':445
'89.##.119.182':445
'89.##.102.212':445
'89.##.19.136':445
'89.#6.19.0':445
'89.##.212.217':445
'89.##.24.124':445
'89.##.42.246':445
'89.##.209.32':445
'89.#6.23.80':445
'89.##.164.162':445
'89.##.179.52':445
'89.##.162.228':445
'89.#6.23.80':139
'89.##.128.244':445
'89.##.224.243':445
'89.##.171.235':445
'89.##.230.183':445
'89.##.52.146':445
'89.##.53.203':9988
'89.##.12.156':9988
'89.##.141.202':445
'89.##.180.208':445
'89.##.26.237':445
'89.##.51.129':445
'89.#6.84.92':445
'89.#6.33.75':445
'89.##.151.207':445
'89.#6.64.9':445
'89.##.125.167':445
'89.##.140.201':445
'89.##.152.109':445
'89.##.162.35':445
'89.##.201.150':445
'89.#6.2.42':9988
'89.##.212.217':139
'89.##.19.136':139
'89.##.42.246':139
'89.##.55.128':139
'89.##.24.124':139
'89.##.164.162':139
'89.##.209.32':139
'89.##.162.228':139
'89.#6.19.0':139
'89.##.179.52':139
'89.#6.33.75':9988
'89.##.140.201':9988
'89.##.149.147':9988
'89.##.13.164':9988
'89.##.211.161':9988
'89.##.163.202':139
'89.##.102.44':139
'89.##.197.65':139
'89.##.230.183':9988
'89.##.128.244':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней