Trojan.Starman.5159

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##8.136.4':139
'24.##8.157.89':139
'24.##8.234.71':139
'24.##8.105.149':139
'24.##8.134.119':139
'24.##8.198.157':445
'24.##8.161.68':445
'24.##8.160.115':139
'24.##8.220.5':139
'24.##8.49.233':139
'24.##8.47.228':139
'24.##8.152.184':139
'24.##8.52.118':139
'24.##8.152.248':139
'24.##8.64.152':139
'24.##8.192.205':139
'24.##8.73.175':139
'24.##8.154.113':139
'24.##8.206.60':139
'24.##8.18.173':445
'24.##8.4.113':445
'24.##8.49.236':445
'24.##8.36.106':445
'24.##8.214.28':445
'24.##8.48.214':445
'24.##8.75.175':445
'24.##8.103.75':445
'24.##8.200.61':445
'24.##8.180.65':445
'24.##8.254.48':445
'24.##8.54.60':445
'24.##8.124.85':445
'24.##8.248.43':445
'24.##8.253.92':445
'24.##8.103.44':445
'24.##8.53.215':445
'24.##8.96.205':445
'24.##8.178.213':445
'24.##8.18.59':445
'24.##8.206.210':139
'24.##8.18.173':139
'24.##8.248.43':139
'24.##8.198.157':139
'24.##8.161.68':139
'24.##8.253.92':139
'24.##8.103.44':139
'24.##8.178.213':139
'24.##8.54.60':139
'24.##8.124.85':139
'24.##8.115.88':445
'24.##8.110.100':139
'24.##8.162.132':139
'24.##8.54.15':445
'24.##8.138.191':445
'24.##8.197.152':139
'24.##8.162.132':445
'24.##8.197.152':445
'24.##8.115.88':139
'24.##8.110.100':445
'24.##8.18.59':139
'24.##8.166.52':139
'24.##8.91.166':139
'24.##8.75.175':139
'24.##8.103.75':139
'24.##8.21.18':139
'24.##8.165.128':139
'24.##8.181.31':139
'24.##8.32.173':139
'24.##8.151.117':139
'24.##8.180.65':139
'24.##8.254.48':139
'24.##8.36.106':139
'24.##8.53.215':139
'24.##8.96.205':139
'24.##8.214.28':139
'24.##8.48.214':139
'24.##8.200.61':139
'24.##8.4.113':139
'24.##8.49.236':139
'24.##8.166.52':445
'24.##8.109.43':139
'24.##8.57.116':139
'24.##8.35.50':139
'24.##8.10.54':139
'24.##8.10.62':139
'24.##8.116.138':139
'24.##8.103.249':139
'24.##8.101.87':139
'24.##8.29.164':139
'24.##8.94.152':139
'24.##8.7.192':139
'24.##8.90.232':139
'24.##8.227.180':139
'24.##8.127.102':139
'24.##8.209.106':139
'24.##8.174.252':139
'24.##8.31.151':139
'24.##8.227.208':139
'24.##8.234.187':139
'24.##8.185.41':139
'24.##8.241.98':139
'24.##8.247.240':139
'24.##8.126.26':139
'24.##8.61.208':139
'24.##8.139.147':139
'24.##8.230.76':139
'24.#88.29.7':139
'24.##8.65.247':139
'24.##8.148.226':139
'24.##8.245.203':139
'24.##8.117.156':139
'24.##8.110.63':139
'24.##8.75.132':139
'24.##8.18.190':139
'24.##8.109.109':139
'24.##8.203.119':139
'24.##8.157.203':139
'24.##8.64.227':139
'24.##8.137.250':139
'24.##8.40.89':139
'24.##8.154.113':445
'24.##8.206.60':445
'24.##8.152.184':445
'24.##8.64.152':445
'24.##8.73.175':445
'24.##8.234.71':445
'24.##8.105.149':445
'24.##8.192.205':445
'24.##8.49.233':445
'24.##8.47.228':445
'24.##8.32.173':445
'24.##8.151.117':445
'24.##8.91.166':445
'24.##8.21.18':445
'24.##8.165.128':445
'24.##8.52.118':445
'24.##8.152.248':445
'24.##8.181.31':445
'24.##8.206.210':445
'24.##8.136.4':445
'24.##8.238.186':139
'24.##8.251.161':139
'24.##8.206.231':445
'24.##8.85.207':445
'24.##8.173.222':139
'24.##8.185.193':139
'24.##8.138.0':139
'24.##8.229.97':139
'24.##8.83.145':139
'24.##8.149.152':445
'24.##8.160.115':445
'24.##8.220.5':445
'24.##8.157.89':445
'24.##8.134.119':445
'24.##8.44.109':139
'24.##8.85.207':139
'24.##8.44.109':445
'24.##8.149.152':139
'24.##8.206.231':139
'24.##8.217.199':445
'24.##8.34.85':445
'24.##8.29.75':445
'24.##8.35.252':139
'24.##8.83.12':445
'24.#88.5.47':445
'24.##8.49.140':445
'24.##8.60.185':445
'24.#88.7.51':445
'24.##8.52.189':445
'24.##8.163.97':139
'24.##8.239.36':139
'24.##8.45.239':139
'24.##8.138.147':139
'24.##8.32.131':139
'24.##8.248.45':139
'24.##8.107.183':139
'24.##8.54.205':139
'24.##8.13.32':139
'24.##8.168.253':139
'24.##8.46.15':445
'24.##8.209.145':445
'24.##8.35.184':445
'24.##8.239.237':445
'24.##8.61.240':445
'24.##8.220.149':445
'24.##8.108.35':445
'24.##8.133.25':445
'24.##8.59.215':445
'24.##8.51.171':445
'24.##8.176.119':445
'24.##8.15.60':445
'24.##8.66.72':445
'24.##8.30.64':445
'24.##8.161.239':445
'24.##8.25.220':445
'24.##8.234.77':445
'24.##8.53.235':445
'24.##8.9.218':445
'24.##8.69.207':445
'24.##8.145.234':139
'24.##8.60.185':139
'24.##8.15.60':139
'24.##8.30.64':139
'24.##8.66.72':139
'24.##8.46.15':139
'24.##8.53.235':139
'24.##8.176.119':139
'24.##8.69.207':139
'24.##8.234.77':139
'24.##8.9.218':139
'24.##8.83.12':139
'24.#88.5.47':139
'24.##8.34.85':139
'24.##8.29.75':139
'24.#88.7.51':139
'24.##8.161.239':139
'24.##8.49.140':139
'24.##8.52.189':139
'24.##8.25.220':139
'24.##8.239.237':139
'24.##8.21.29':139
'24.#88.11.3':139
'24.##8.146.210':139
'24.##8.64.161':139
'24.##8.35.116':139
'24.##8.81.201':139
'24.##8.22.195':139
'24.##8.214.116':139
'24.##8.201.52':139
'24.##8.210.140':139
'24.##8.35.184':139
'24.##8.220.149':139
'24.##8.61.240':139
'24.##8.209.145':139
'24.##8.59.215':139
'24.##8.133.25':139
'24.##8.140.214':139
'24.##8.51.171':139
'24.##8.108.35':139
'24.##8.140.214':445
'24.##8.25.77':139
'24.##8.75.190':139
'24.##8.23.111':139
'24.##8.144.132':139
'24.##8.45.66':139
'24.##8.54.15':139
'24.##8.138.191':139
'24.##8.158.1':139
'24.##8.217.199':139
'24.##8.255.23':139
'24.##8.67.67':139
'24.##8.213.113':139
'24.##8.177.94':139
'24.##8.69.51':139
'24.##8.79.252':139
'24.##8.82.115':139
'24.##8.106.46':139
'24.##8.37.207':139
'24.##8.66.225':139
'24.##8.236.17':445
'24.##8.106.46':445
'24.##8.23.111':445
'24.##8.82.115':445
'24.##8.255.23':445
'24.##8.144.132':445
'24.##8.45.66':445
'24.##8.158.1':445
'24.##8.25.77':445
'24.##8.75.190':445
'24.##8.66.225':445
'24.##8.117.202':445
'24.##8.177.94':445
'24.##8.121.220':445
'24.##8.202.55':445
'24.##8.69.51':445
'24.##8.79.252':445
'24.##8.37.207':445
'24.##8.67.67':445
'24.##8.213.113':445
'24.##8.117.202':139
'24.##8.32.131':445
'24.##8.239.36':445
'24.##8.145.234':445
'24.##8.138.147':445
'24.##8.45.239':445
'24.##8.168.253':445
'24.##8.107.183':445
'24.##8.248.45':445
'24.##8.13.32':445
'24.##8.22.195':445
'24.##8.64.161':445
'24.#88.11.3':445
'24.##8.210.140':445
'24.##8.146.210':445
'24.##8.21.29':445
'24.##8.201.52':445
'24.##8.81.201':445
'24.##8.35.116':445
'24.##8.214.116':445
'24.##8.54.205':445
'24.##8.146.210':9988
'24.##8.64.161':9988
'24.##8.133.25':9988
'24.##8.210.140':9988
'24.##8.214.116':9988
'24.##8.121.220':139
'24.##8.202.55':139
'24.##8.138.147':9988
'24.##8.236.17':139
'24.##8.51.171':9988
'24.##8.29.75':9988
'24.##8.52.189':9988
'24.##8.163.97':445
'24.##8.35.252':445
'24.##8.209.145':9988
'24.##8.59.215':9988
'24.##8.108.35':9988
'24.##8.220.149':9988
'24.##8.35.184':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней