Trojan.Starman.5231

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.##.220.229':139
'88.##.151.230':139
'88.##.230.73':139
'88.##.244.114':139
'88.##.73.244':139
'88.##.144.74':139
'88.##.88.170':139
'88.#6.75.73':139
'88.##.140.170':139
'88.##.72.140':139
'88.##.197.59':139
'88.#6.61.5':139
'88.##.138.31':139
'88.##.66.141':139
'88.##.41.193':445
'88.##.99.245':139
'88.##.246.65':139
'88.#6.78.39':139
'88.#6.92.28':139
'88.#6.20.1':139
'88.#6.28.47':139
'88.##.73.244':445
'88.##.230.73':445
'88.##.244.114':445
'88.#6.78.39':445
'88.##.197.59':445
'88.##.72.140':445
'88.#6.75.73':445
'88.##.140.170':445
'88.##.220.229':445
'88.##.151.230':445
'88.##.246.65':445
'88.##.99.245':445
'88.##.66.141':445
'88.##.143.68':139
'88.##.170.212':139
'88.##.80.159':139
'88.#6.28.47':445
'88.#6.92.28':445
'88.#6.20.1':445
'88.#6.61.5':445
'88.##.138.31':445
'88.##.41.193':139
'88.#6.162.8':445
'88.##.244.169':139
'88.#6.50.41':139
'88.#6.43.56':139
'88.##.206.169':445
'88.##.109.219':445
'88.##.15.196':445
'88.##.187.153':445
'88.#6.3.176':445
'88.##.40.201':139
'88.##.163.176':139
'88.##.190.103':139
'88.##.176.141':139
'88.##.151.173':139
'88.##.35.151':139
'88.#6.2.84':139
'88.##.135.168':139
'88.##.160.110':139
'88.##.190.205':139
'88.##.197.190':139
'88.##.160.110':445
'88.#6.2.84':445
'88.##.197.190':445
'88.##.190.103':445
'88.##.190.205':445
'88.#6.43.56':445
'88.##.244.169':445
'88.#6.50.41':445
'88.##.135.168':445
'88.##.40.201':445
'88.##.163.176':445
'88.#6.59.45':445
'88.##.135.195':445
'88.##.234.109':445
'88.##.123.183':445
'88.##.254.50':445
'88.##.35.151':445
'88.##.176.141':445
'88.##.151.173':445
'88.##.175.135':445
'88.##.250.141':445
'88.#6.202.9':445
'88.##.30.236':445
'88.#6.50.55':445
'88.##.249.127':445
'88.#6.97.1':445
'88.##.154.64':139
'88.##.32.145':139
'88.#6.64.55':445
'88.#6.30.31':445
'88.#6.55.29':445
'88.##.28.119':445
'88.##.182.249':445
'88.##.84.152':445
'88.##.215.192':445
'88.##.234.34':445
'88.##.192.169':445
'88.##.114.135':445
'88.##.119.226':445
'88.##.51.228':445
'88.#6.10.85':445
'88.##.207.108':445
'88.##.45.182':139
'88.##.207.174':139
'88.#6.96.51':139
'88.##.44.227':139
'88.#6.1.112':139
'88.##.236.44':139
'88.##.37.168':139
'88.##.86.241':139
'88.##.58.208':139
'88.##.168.104':139
'88.#6.18.74':139
'88.##.123.201':139
'88.##.102.62':139
'88.##.200.226':139
'88.#6.40.26':139
'88.##.227.39':139
'88.##.111.114':139
'88.##.73.112':139
'88.##.114.31':139
'88.##.162.29':139
'88.##.31.217':139
'88.##.234.34':139
'88.##.192.169':139
'88.##.201.40':139
'88.##.222.221':139
'88.##.194.186':139
'88.#6.10.85':139
'88.##.207.108':139
'88.##.84.152':139
'88.##.215.192':139
'88.##.182.249':139
'88.##.221.239':139
'88.##.80.159':445
'88.##.143.68':445
'88.##.170.212':445
'88.##.144.74':445
'88.##.88.170':445
'88.#6.255.2':139
'88.##.218.253':139
'88.#6.3.97':139
'88.##.175.160':139
'88.##.149.16':139
'88.#6.3.97':445
'88.#6.255.2':445
'88.##.149.16':445
'88.#6.64.55':139
'88.##.175.160':445
'88.##.194.186':445
'88.##.201.40':445
'88.##.222.221':445
'88.##.218.253':445
'88.##.221.239':445
'88.#6.55.29':139
'88.##.28.119':139
'88.##.249.127':139
'88.##.119.226':139
'88.##.51.228':139
'88.##.114.135':139
'88.##.30.236':139
'88.#6.30.31':139
'88.#6.202.9':139
'88.#6.97.1':139
'88.#6.50.55':139
'88.##.250.141':139
'88.##.254.205':445
'88.#6.51.5':445
'88.##.205.142':445
'88.##.186.78':445
'88.##.141.125':445
'88.##.148.209':445
'88.##.66.149':445
'88.##.222.12':445
'88.##.138.153':445
'88.##.186.138':445
'88.#6.13.64':445
'88.##.193.102':139
'88.#6.27.0':139
'88.##.246.161':139
'88.#6.64.94':139
'88.##.142.175':139
'88.##.54.109':139
'88.#6.4.191':445
'88.##.234.221':139
'88.#6.90.41':139
'88.##.176.173':139
'88.#6.63.63':445
'88.##.208.91':445
'88.#6.22.30':445
'88.##.121.221':445
'88.##.62.106':445
'88.#6.96.31':445
'88.#6.21.29':445
'88.##.200.204':445
'88.#6.85.81':445
'88.#6.79.85':445
'88.##.28.224':445
'88.##.78.200':445
'88.##.130.221':445
'88.##.181.19':445
'88.##.120.63':445
'88.#6.20.2':445
'88.##.239.208':445
'88.##.53.131':445
'88.#6.1.14':445
'88.#6.0.169':445
'88.#6.95.83':445
'88.##.181.19':139
'88.##.78.200':139
'88.#6.20.2':139
'88.##.66.149':139
'88.##.120.63':139
'88.#6.1.14':139
'88.##.239.208':139
'88.#6.95.83':139
'88.##.130.221':139
'88.#6.0.169':139
'88.##.148.209':139
'88.##.141.125':139
'88.##.205.142':139
'88.##.186.78':139
'88.#6.13.64':139
'88.#6.4.191':139
'88.##.186.138':139
'88.##.222.12':139
'88.##.138.153':139
'88.##.254.205':139
'88.#6.51.5':139
'88.##.246.78':139
'88.##.170.215':139
'88.##.94.231':139
'88.#6.21.29':139
'88.##.99.240':139
'88.#6.38.15':139
'88.##.138.59':139
'88.##.153.134':139
'88.#6.32.37':139
'88.##.134.162':139
'88.#6.96.31':139
'88.##.62.106':139
'88.#6.22.30':139
'88.##.121.221':139
'88.##.53.131':139
'88.##.28.224':139
'88.#6.79.85':139
'88.##.200.204':139
'88.#6.85.81':139
'88.#6.63.63':139
'88.##.208.91':139
'88.##.58.153':445
'88.##.140.162':445
'88.##.104.53':445
'88.##.164.233':445
'88.##.24.197':445
'88.##.114.42':445
'88.##.45.174':445
'88.##.75.225':445
'88.##.150.69':445
'88.##.22.182':445
'88.##.99.213':139
'88.##.31.242':139
'88.##.18.148':139
'88.##.245.163':139
'88.##.114.42':139
'88.##.45.174':139
'88.#6.58.62':139
'88.##.86.174':139
'88.##.75.163':139
'88.##.176.144':139
'88.#6.42.86':139
'88.##.109.219':139
'88.##.123.183':139
'88.##.206.169':139
'88.#6.3.176':139
'88.##.15.196':139
'88.##.135.195':139
'88.##.175.135':139
'88.#6.59.45':139
'88.##.254.50':139
'88.##.234.109':139
'88.##.187.153':139
'88.##.176.144':445
'88.#6.42.86':445
'88.##.18.148':445
'88.##.245.163':445
'88.##.31.242':445
'88.##.99.213':445
'88.#6.162.8':139
'88.##.86.174':445
'88.##.75.163':445
'88.#6.58.62':445
'88.#6.90.41':445
'88.##.176.173':445
'88.#6.27.0':445
'88.##.246.161':445
'88.##.193.102':445
'88.#6.4.191':9988
'88.##.186.78':9988
'88.#6.13.64':9988
'88.##.234.221':445
'88.##.54.109':445
'88.##.142.175':445
'88.##.170.215':445
'88.#6.32.37':445
'88.##.246.78':445
'88.##.99.240':445
'88.##.94.231':445
'88.##.138.59':445
'88.#6.64.94':445
'88.#6.38.15':445
'88.##.134.162':445
'88.##.153.134':445
'88.##.24.197':139
'88.##.104.53':139
'88.##.164.233':139
'88.#6.38.15':9988
'88.#6.27.0':9988
'88.##.22.182':139
'88.##.75.225':139
'88.##.150.69':139
'88.##.58.153':139
'88.##.140.162':139
'88.##.28.224':9988
'88.#6.51.5':9988
'88.##.222.12':9988
'88.##.254.205':9988
'88.##.141.125':9988
'88.##.205.142':9988
'88.#6.95.83':9988
'88.##.53.131':9988
'88.##.239.208':9988
'88.##.120.63':9988
'88.##.78.200':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней