Trojan.Starman.5228

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##.64.238':139
'72.##.100.126':139
'72.##.134.53':139
'72.##.32.221':139
'72.##.34.109':139
'72.##.95.133':139
'72.##.90.198':139
'72.##.221.118':139
'72.##.174.167':139
'72.##.241.113':139
'72.##.10.237':139
'72.##.100.10':139
'72.##.42.228':139
'72.##.32.212':139
'72.##.168.117':139
'72.##.168.111':139
'72.##.220.168':139
'72.#7.64.21':139
'72.##.182.244':139
'72.#7.100.1':139
'72.#7.99.46':139
'72.##.140.143':445
'72.##.248.186':445
'72.##.196.201':445
'72.##.75.222':445
'72.##.80.196':445
'72.##.42.228':445
'72.##.10.237':445
'72.##.168.117':445
'72.##.22.248':445
'72.##.32.212':445
'72.##.148.154':445
'72.##.231.95':445
'72.##.154.24':445
'72.##.244.53':139
'72.##.216.104':445
'72.#7.44.71':445
'72.##.16.190':445
'72.##.191.151':445
'72.##.78.195':445
'72.##.237.103':445
'72.##.22.248':139
'72.#7.108.1':445
'72.##.181.23':445
'72.##.218.77':139
'72.##.203.245':139
'72.##.77.149':139
'72.#7.32.14':445
'72.##.197.23':445
'72.##.103.63':445
'72.##.85.143':445
'72.#7.4.232':445
'72.##.103.63':139
'72.#7.32.14':139
'72.#7.4.232':139
'72.##.181.23':139
'72.##.85.143':139
'72.#7.91.24':139
'72.#7.29.91':139
'72.#7.48.5':139
'72.##.197.23':139
'72.##.61.112':139
'72.##.61.112':445
'72.#7.44.71':139
'72.##.16.190':139
'72.##.191.151':139
'72.##.78.195':139
'72.##.237.103':139
'72.##.140.143':139
'72.##.248.186':139
'72.##.196.201':139
'72.##.75.222':139
'72.##.80.196':139
'72.##.203.245':445
'72.##.77.149':445
'72.#7.29.91':445
'72.#7.48.5':445
'72.#7.91.24':445
'72.##.148.154':139
'72.##.231.95':139
'72.##.154.24':139
'72.##.218.77':445
'72.##.216.104':139
'72.#7.32.37':139
'72.##.211.32':139
'72.##.210.186':139
'72.#7.25.22':139
'72.#7.100.7':139
'72.#7.38.14':139
'72.##.112.164':139
'72.##.172.181':139
'72.##.213.108':139
'72.#7.6.60':139
'72.##.165.29':445
'72.#7.24.98':139
'72.##.29.159':445
'72.##.71.218':445
'72.##.159.71':445
'72.##.208.219':139
'72.##.125.163':139
'72.##.90.132':139
'72.##.211.94':139
'72.##.47.122':139
'72.##.36.113':139
'72.##.96.232':139
'72.##.117.98':139
'72.##.140.28':139
'72.##.164.193':139
'72.##.28.164':139
'72.##.18.135':139
'72.#7.77.28':139
'72.##.101.211':139
'72.##.65.253':139
'72.##.138.65':139
'72.##.254.95':139
'72.##.139.142':139
'72.##.11.170':139
'72.##.211.35':139
'72.#7.91.22':139
'72.#7.78.34':139
'72.##.217.205':139
'72.##.93.244':139
'72.##.197.139':139
'72.##.67.197':139
'72.#7.22.97':445
'72.##.221.118':445
'72.##.95.133':445
'72.##.241.113':445
'72.##.100.126':445
'72.##.174.167':445
'72.##.237.243':139
'72.##.165.195':139
'72.##.244.53':445
'72.##.90.198':445
'72.#7.99.46':445
'72.#7.64.21':445
'72.##.168.111':445
'72.#7.100.1':445
'72.##.100.10':445
'72.##.182.244':445
'72.##.134.53':445
'72.##.64.238':445
'72.##.34.109':445
'72.##.220.168':445
'72.##.32.221':445
'72.##.124.209':139
'72.##.124.209':445
'72.##.122.240':445
'72.##.165.195':445
'72.##.165.29':139
'72.##.237.243':445
'72.##.110.86':445
'72.##.27.249':445
'72.#7.14.40':445
'72.#7.95.78':445
'72.##.98.185':445
'72.#7.14.40':139
'72.##.110.86':139
'72.##.98.185':139
'72.##.122.240':139
'72.#7.95.78':139
'72.##.159.71':139
'72.##.29.159':139
'72.##.71.218':139
'72.##.27.249':139
'72.#7.22.97':139
'72.##.49.148':445
'72.##.167.186':445
'72.##.124.136':445
'72.##.178.210':445
'72.##.43.179':445
'72.##.206.20':445
'72.##.244.206':445
'72.#7.48.25':445
'72.##.140.117':445
'72.##.84.224':445
'72.##.209.131':139
'72.##.162.152':139
'72.##.217.159':139
'72.##.255.190':139
'72.#7.33.69':139
'72.##.131.201':139
'72.##.231.203':445
'72.##.16.219':139
'72.##.229.176':139
'72.#7.3.229':139
'72.##.25.244':445
'72.#7.20.65':445
'72.##.48.103':445
'72.#7.9.129':445
'72.#7.33.24':445
'72.#7.59.48':445
'72.##.134.177':445
'72.##.41.135':445
'72.##.176.155':445
'72.##.44.115':445
'72.##.77.226':445
'72.##.198.244':445
'72.#7.4.19':445
'72.##.102.54':445
'72.#7.17.25':445
'72.##.103.108':445
'72.##.125.60':445
'72.##.67.215':445
'72.##.54.106':445
'72.##.39.252':445
'72.##.117.148':445
'72.#7.74.63':139
'72.##.103.108':139
'72.##.102.54':139
'72.#7.17.25':139
'72.##.244.206':139
'72.##.25.244':139
'72.##.117.148':139
'72.##.54.106':139
'72.##.39.252':139
'72.##.198.244':139
'72.#7.4.19':139
'72.##.49.148':139
'72.##.124.136':139
'72.##.231.203':139
'72.##.43.179':139
'72.##.178.210':139
'72.#7.48.25':139
'72.##.206.20':139
'72.##.84.224':139
'72.##.167.186':139
'72.##.140.117':139
'72.##.125.60':139
'72.##.97.244':139
'72.##.179.172':139
'72.##.173.118':139
'72.##.41.135':139
'72.#7.74.41':139
'72.##.148.124':139
'72.#7.25.28':139
'72.##.232.105':139
'72.##.75.159':139
'72.#7.8.64':139
'72.#7.9.129':139
'72.#7.20.65':139
'72.#7.59.48':139
'72.##.67.215':139
'72.#7.33.24':139
'72.##.176.155':139
'72.##.134.177':139
'72.##.77.226':139
'72.##.48.103':139
'72.##.44.115':139
'72.#7.28.92':139
'72.##.35.202':139
'72.##.167.210':139
'72.##.131.166':139
'72.##.250.155':139
'72.##.101.91':445
'72.##.90.107':445
'72.##.193.99':445
'72.#7.97.97':445
'72.##.24.202':445
'72.##.165.108':139
'72.##.249.174':139
'72.##.222.189':139
'72.##.169.107':139
'72.##.179.194':139
'72.##.148.82':139
'72.##.106.237':139
'72.##.238.218':139
'72.##.10.181':139
'72.##.96.240':139
'72.#7.112.0':445
'72.##.106.237':445
'72.##.131.166':445
'72.##.148.82':445
'72.##.96.240':445
'72.##.238.218':445
'72.##.35.202':445
'72.#7.108.1':139
'72.#7.28.92':445
'72.##.250.155':445
'72.##.167.210':445
'72.#7.51.33':445
'72.##.169.107':445
'72.##.102.67':445
'72.##.61.138':445
'72.##.92.196':445
'72.##.249.174':445
'72.##.10.181':445
'72.##.165.108':445
'72.##.179.194':445
'72.##.222.189':445
'72.#7.51.33':139
'72.##.209.131':445
'72.##.162.152':445
'72.##.217.159':445
'72.##.255.190':445
'72.#7.33.69':445
'72.##.131.201':445
'72.##.231.203':9988
'72.##.16.219':445
'72.##.229.176':445
'72.#7.3.229':445
'72.##.179.172':445
'72.##.75.159':445
'72.##.97.244':445
'72.#7.74.41':445
'72.##.173.118':445
'72.#7.25.28':445
'72.#7.74.63':445
'72.##.148.124':445
'72.#7.8.64':445
'72.##.232.105':445
'72.##.140.117':9988
'72.##.193.99':139
'72.##.101.91':139
'72.##.24.202':139
'72.##.75.159':9988
'72.#7.97.97':139
'72.##.92.196':139
'72.##.102.67':139
'72.##.61.138':139
'72.##.90.107':139
'72.#7.112.0':139
'72.##.102.54':9988
'72.##.67.215':9988
'72.#7.17.25':9988
'72.##.84.224':9988
'72.#7.48.25':9988
'72.#7.25.28':9988
'72.##.232.105':9988
'72.#7.74.41':9988
'72.##.44.115':9988
'72.#7.8.64':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней