Trojan.Starman.5247

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##.157.41':139
'72.##.142.79':139
'72.##.251.94':139
'72.##.140.193':139
'72.##.94.140':139
'72.##.128.247':139
'72.##.32.113':139
'72.##.126.122':139
'72.##.255.141':139
'72.##.21.110':139
'72.##.67.204':139
'72.#8.7.97':445
'72.#8.71.9':139
'72.##.81.189':445
'72.##.151.51':445
'72.#8.96.9':445
'72.##.177.183':139
'72.##.169.120':139
'72.##.87.219':139
'72.##.242.186':139
'72.##.54.120':139
'72.##.157.41':445
'72.##.142.79':445
'72.##.251.94':445
'72.##.140.193':445
'72.##.94.140':445
'72.##.128.247':445
'72.##.32.113':445
'72.##.126.122':445
'72.##.255.141':445
'72.##.21.110':445
'72.##.67.204':445
'72.#8.58.27':139
'72.#8.71.9':445
'72.##.117.122':139
'72.##.216.195':139
'72.##.241.95':139
'72.##.177.183':445
'72.##.169.120':445
'72.##.87.219':445
'72.##.242.186':445
'72.##.54.120':445
'72.##.81.189':139
'72.#8.7.97':139
'72.#8.96.9':139
'72.#8.24.37':139
'72.##.151.51':139
'72.##.124.144':445
'72.##.229.253':445
'72.##.115.120':445
'72.#8.96.80':445
'72.##.243.159':445
'72.##.10.117':139
'72.#8.255.0':139
'72.##.39.196':139
'72.##.99.235':139
'72.##.255.97':139
'72.##.60.120':139
'72.##.130.86':139
'72.##.38.130':139
'72.##.187.210':139
'72.##.230.115':139
'72.##.179.201':139
'72.##.230.115':445
'72.##.179.201':445
'72.##.39.196':445
'72.##.99.235':445
'72.#8.255.0':445
'72.##.10.117':445
'72.#8.24.37':445
'72.##.38.130':445
'72.##.187.210':445
'72.##.130.86':445
'72.##.60.120':445
'72.##.12.139':445
'72.##.12.223':445
'72.##.139.33':445
'72.##.37.163':445
'72.##.234.192':445
'72.#8.97.56':445
'72.##.255.97':445
'72.##.107.199':445
'72.##.100.67':445
'72.##.61.220':445
'72.##.216.195':445
'72.##.51.232':445
'72.#8.85.52':445
'72.##.231.166':445
'72.##.67.103':445
'72.##.77.107':445
'72.##.168.216':445
'72.#8.16.27':445
'72.##.157.169':445
'72.##.255.252':445
'72.#8.37.20':445
'72.#8.100.7':445
'72.##.71.142':445
'72.##.32.221':445
'72.#8.31.69':445
'72.##.12.142':445
'72.##.187.37':445
'72.##.180.94':445
'72.##.252.102':445
'72.##.210.83':445
'72.#8.9.64':445
'72.#8.83.9':445
'72.##.248.181':139
'72.#8.9.59':139
'72.##.134.122':139
'72.##.87.181':139
'72.##.122.72':139
'72.##.111.162':139
'72.#8.9.147':139
'72.##.45.137':139
'72.##.190.133':139
'72.#8.26.10':139
'72.##.39.164':139
'72.##.46.173':139
'72.##.10.157':139
'72.#8.91.33':139
'72.#8.23.82':139
'72.##.54.216':139
'72.##.136.201':139
'72.##.137.59':139
'72.#8.71.29':139
'72.#8.88.93':139
'72.##.147.26':139
'72.#8.31.69':139
'72.##.71.142':139
'72.##.187.37':139
'72.#8.36.26':139
'72.##.12.142':139
'72.##.210.83':139
'72.##.180.94':139
'72.#8.83.9':139
'72.##.32.221':139
'72.#8.9.64':139
'72.#8.14.81':139
'72.##.228.184':139
'72.##.60.151':139
'72.#8.58.27':445
'72.##.241.95':445
'72.##.117.122':445
'72.#8.56.56':139
'72.##.221.157':139
'72.##.252.23':139
'72.##.79.202':139
'72.#8.74.47':139
'72.##.79.202':445
'72.#8.74.47':445
'72.##.60.151':445
'72.#8.16.27':139
'72.##.228.184':445
'72.#8.14.81':445
'72.#8.36.26':445
'72.##.221.157':445
'72.##.252.23':445
'72.#8.56.56':445
'72.##.168.216':139
'72.##.77.107':139
'72.##.231.166':139
'72.##.67.103':139
'72.##.252.102':139
'72.#8.100.7':139
'72.#8.37.20':139
'72.##.157.169':139
'72.##.255.252':139
'72.##.51.232':139
'72.#8.85.52':139
'72.#8.97.56':139
'72.#8.0.92':445
'72.##.28.191':445
'72.#8.11.54':445
'72.##.117.150':445
'72.##.240.226':445
'72.#8.36.53':445
'72.##.28.118':445
'72.##.116.196':445
'72.##.211.251':445
'72.##.169.195':445
'72.##.203.188':445
'72.##.19.141':139
'72.##.161.120':139
'72.##.198.188':139
'72.##.125.26':139
'72.#8.16.3':139
'72.#8.49.44':139
'72.##.188.158':445
'72.##.59.204':139
'72.#8.69.29':139
'72.#8.255.3':139
'72.##.245.10':445
'72.##.122.191':445
'72.#8.91.88':445
'72.##.119.160':445
'72.#8.26.95':445
'72.##.247.103':445
'72.##.178.244':445
'72.##.23.183':445
'72.#8.4.83':445
'72.#8.134.0':445
'72.#8.204.7':445
'72.##.166.192':445
'72.##.152.198':445
'72.##.229.61':445
'72.##.235.71':445
'72.#8.22.72':445
'72.##.187.116':445
'72.#8.1.131':445
'72.#8.52.75':445
'72.##.225.150':445
'72.#8.22.28':445
'72.##.229.61':139
'72.##.166.192':139
'72.#8.22.72':139
'72.##.28.118':139
'72.##.235.71':139
'72.#8.52.75':139
'72.##.187.116':139
'72.#8.22.28':139
'72.##.152.198':139
'72.##.225.150':139
'72.#8.36.53':139
'72.##.240.226':139
'72.#8.11.54':139
'72.##.117.150':139
'72.##.188.158':139
'72.##.203.188':139
'72.##.169.195':139
'72.##.116.196':139
'72.##.211.251':139
'72.#8.0.92':139
'72.##.28.191':139
'72.##.29.206':139
'72.##.215.194':139
'72.#8.66.18':139
'72.##.178.244':139
'72.##.126.53':139
'72.#8.71.41':139
'72.#8.56.64':139
'72.##.231.159':139
'72.##.171.130':139
'72.##.62.146':139
'72.##.247.103':139
'72.#8.26.95':139
'72.#8.91.88':139
'72.##.119.160':139
'72.#8.1.131':139
'72.#8.204.7':139
'72.#8.134.0':139
'72.##.23.183':139
'72.#8.4.83':139
'72.##.245.10':139
'72.##.122.191':139
'72.##.126.53':445
'72.##.184.165':445
'72.##.188.110':445
'72.##.187.169':445
'72.##.152.236':445
'72.#8.4.52':445
'72.##.193.235':445
'72.##.231.193':445
'72.##.235.84':445
'72.##.236.44':445
'72.##.84.157':445
'72.##.168.56':445
'72.#8.60.54':139
'72.##.29.192':139
'72.##.212.112':139
'72.##.193.235':139
'72.##.231.193':139
'72.##.104.154':139
'72.##.133.13':139
'72.##.127.228':139
'72.##.164.54':139
'72.#8.0.5':139
'72.##.234.192':139
'72.##.139.33':139
'72.##.37.163':139
'72.##.124.144':139
'72.##.229.253':139
'72.##.61.220':139
'72.##.107.199':139
'72.##.100.67':139
'72.##.12.139':139
'72.##.12.223':139
'72.##.115.120':139
'72.##.164.54':445
'72.#8.0.5':445
'72.##.29.192':445
'72.##.212.112':445
'72.#8.60.54':445
'72.#8.96.80':139
'72.##.243.159':139
'72.##.133.13':445
'72.##.127.228':445
'72.##.104.154':445
'72.#8.255.3':445
'72.##.59.204':445
'72.#8.69.29':445
'72.##.19.141':445
'72.##.161.120':445
'72.#8.0.92':9988
'72.##.28.191':9988
'72.##.203.188':9988
'72.#8.49.44':445
'72.##.117.150':9988
'72.##.198.188':445
'72.##.171.130':445
'72.##.62.146':445
'72.##.215.194':445
'72.#8.66.18':445
'72.##.29.206':445
'72.##.125.26':445
'72.#8.16.3':445
'72.#8.56.64':445
'72.##.231.159':445
'72.#8.71.41':445
'72.#8.4.52':139
'72.##.187.169':139
'72.##.152.236':139
'72.##.59.204':9988
'72.##.168.56':139
'72.##.84.157':139
'72.##.235.84':139
'72.##.236.44':139
'72.##.184.165':139
'72.##.188.110':139
'72.##.245.10':9988
'72.##.166.192':9988
'72.##.225.150':9988
'72.#8.22.72':9988
'72.##.28.118':9988
'72.##.235.71':9988
'72.#8.26.95':9988
'72.#8.91.88':9988
'72.#8.1.131':9988
'72.#8.22.28':9988
'72.#8.52.75':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней