Trojan.Starman.5245

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.#.216.115':445
'83.#.95.219':445
'83.#.73.8':445
'83.#.90.105':445
'83.#.113.221':445
'83.#.73.184':445
'83.#.179.166':445
'83.#.244.127':445
'83.#.243.178':445
'83.#.47.2':445
'83.#.38.252':445
'83.#.82.102':445
'83.#.96.35':445
'83.#.70.237':445
'83.#.174.211':445
'83.#.212.72':445
'83.#.154.136':445
'83.#.129.42':445
'83.#.213.30':139
'83.#.6.126':139
'83.#.213.217':445
'83.#.11.19':445
'83.#.117.41':139
'83.#.138.91':139
'83.#.143.198':139
'83.#.44.29':139
'83.#.239.193':139
'83.#.19.182':445
'83.#.204.8':445
'83.#.238.76':445
'83.#.69.82':445
'83.#.160.174':445
'83.#.223.248':445
'83.#.181.80':445
'83.#.206.128':445
'83.#.61.74':445
'83.#.87.167':139
'83.#.167.37':445
'83.#.58.122':139
'83.#.131.87':139
'83.#.90.167':445
'83.#.213.30':445
'83.#.6.126':445
'83.#.167.37':139
'83.#.90.167':139
'83.#.172.250':139
'83.#.123.148':139
'83.#.159.141':139
'83.#.235.148':139
'83.#.149.45':139
'83.#.13.226':139
'83.#.114.196':139
'83.#.45.134':139
'83.#.179.208':139
'83.#.103.244':445
'83.#.245.39':445
'83.#.143.131':445
'83.#.131.104':445
'83.#.141.75':445
'83.#.253.2':445
'83.#.2.223':445
'83.#.233.212':445
'83.#.212.252':445
'83.#.239.193':445
'83.#.138.91':445
'83.#.117.41':445
'83.#.44.29':445
'83.#.143.198':445
'83.#.235.222':445
'83.#.184.83':445
'83.#.182.208':445
'83.#.57.32':445
'83.#.182.208':139
'83.#.7.53':445
'83.#.18.51':445
'83.#.83.99':445
'83.#.204.171':445
'83.#.71.46':445
'83.#.15.236':445
'83.#.202.110':445
'83.#.51.71':445
'83.#.46.84':445
'83.#.181.80':139
'83.#.213.217':139
'83.#.61.74':139
'83.#.223.248':139
'83.#.236.245':445
'83.#.236.245':139
'83.#.12.111':139
'83.#.12.111':445
'83.#.11.19':139
'83.#.28.167':445
'83.#.216.78':445
'83.#.19.37':445
'83.#.81.106':445
'83.#.95.91':445
'83.#.89.174':445
'83.#.145.216':445
'83.#.18.247':445
'83.#.12.59':445
'83.#.75.123':445
'83.#.130.74':445
'83.#.247.88':445
'83.#.110.205':445
'83.#.36.23':445
'83.#.4.92':445
'83.#.38.174':445
'83.#.114.9':445
'83.#.225.127':445
'83.#.2.223':139
'83.#.82.102':139
'83.#.212.252':139
'83.#.253.2':139
'83.#.96.35':139
'83.#.70.237':139
'83.#.154.136':139
'83.#.47.2':139
'83.#.38.252':139
'83.#.184.83':139
'83.#.143.131':139
'83.#.57.32':139
'83.#.235.222':139
'83.#.131.104':139
'83.#.141.75':139
'83.#.233.212':139
'83.#.103.244':139
'83.#.245.39':139
'83.#.179.166':139
'83.#.238.76':139
'83.#.73.184':139
'83.#.243.178':139
'83.#.69.82':139
'83.#.160.174':139
'83.#.206.128':139
'83.#.19.182':139
'83.#.204.8':139
'83.#.212.72':139
'83.#.73.8':139
'83.#.129.42':139
'83.#.174.211':139
'83.#.90.105':139
'83.#.113.221':139
'83.#.244.127':139
'83.#.216.115':139
'83.#.95.219':139
'83.#.94.185':139
'83.#.21.167':139
'83.#.45.73':139
'83.#.6.95':139
'83.#.163.213':139
'83.#.194.241':139
'83.#.38.131':139
'83.#.203.159':139
'83.#.168.76':139
'83.#.223.150':139
'83.#.136.8':139
'83.#.181.94':139
'83.#.104.121':139
'83.#.211.209':139
'83.#.76.164':139
'83.#.38.92':139
'83.#.8.27':139
'83.#.4.215':139
'83.#.29.0':445
'83.#.97.155':445
'83.#.83.133':445
'83.#.167.40':445
'83.#.191.202':445
'83.#.126.32':445
'83.#.162.132':445
'83.#.147.215':445
'83.#.215.147':445
'83.#.183.60':445
'83.#.250.119':139
'83.#.154.72':139
'83.#.250.119':445
'83.#.183.60':139
'83.#.175.181':445
'83.#.66.74':445
'83.#.134.72':445
'83.#.19.243':445
'83.#.94.106':139
'83.#.81.66':139
'83.#.237.99':139
'83.#.242.94':139
'83.#.164.179':139
'83.#.149.20':139
'83.#.240.231':139
'83.#.187.138':139
'83.#.235.85':139
'83.#.168.76':445
'83.#.194.241':445
'83.#.163.213':445
'83.#.203.159':445
'83.#.38.131':445
'83.#.12.159':139
'83.#.49.237':139
'83.#.154.72':445
'83.#.106.209':139
'83.#.39.158':139
'83.#.52.169':139
'83.#.25.248':139
'83.#.134.213':139
'83.#.70.224':139
'83.#.231.178':139
'83.#.184.214':139
'83.#.166.206':139
'83.#.168.34':139
'83.#.239.42':139
'83.#.205.135':139
'83.#.140.113':139
'83.#.81.128':139
'83.#.55.113':139
'83.#.223.63':139
'83.#.49.202':139
'83.#.112.208':139
'83.#.77.120':139
'83.#.149.36':445
'83.#.196.65':139
'83.#.166.26':139
'83.#.215.147':139
'83.#.126.32':139
'83.#.162.132':139
'83.#.249.11':139
'83.#.174.26':139
'83.#.149.36':139
'83.#.150.76':139
'83.#.175.181':139
'83.#.83.133':139
'83.#.19.243':139
'83.#.134.72':139
'83.#.167.40':139
'83.#.191.202':139
'83.#.147.215':139
'83.#.29.0':139
'83.#.97.155':139
'83.#.51.251':139
'83.#.142.120':139
'83.#.150.145':139
'83.#.82.26':139
'83.#.117.22':139
'83.#.144.20':139
'83.#.64.107':139
'83.#.250.128':139
'83.#.201.53':139
'83.#.137.20':139
'83.#.32.50':139
'83.#.22.22':139
'83.#.91.24':139
'83.#.180.43':139
'83.#.76.4':139
'83.#.17.10':139
'83.#.28.37':139
'83.#.209.163':139
'83.#.209.163':445
'83.#.76.4':445
'83.#.22.22':445
'83.#.28.37':445
'83.#.17.10':445
'83.#.51.251':445
'83.#.142.120':445
'83.#.150.145':445
'83.#.82.26':445
'83.#.150.76':445
'83.#.180.43':445
'83.#.196.65':445
'83.#.166.26':445
'83.#.174.26':445
'83.#.32.50':445
'83.#.91.24':445
'83.#.137.20':445
'83.#.249.11':445
'83.#.179.208':445
'83.#.13.226':445
'83.#.149.45':445
'83.#.45.134':445
'83.#.114.196':445
'83.#.87.167':445
'83.#.66.74':139
'83.#.58.122':445
'83.#.131.87':445
'83.#.235.148':445
'83.#.250.128':445
'83.#.144.20':445
'83.#.159.141':445
'83.#.117.22':445
'83.#.64.107':445
'83.#.201.53':445
'83.#.172.250':445
'83.#.123.148':445
'83.#.25.70':445
'83.#.164.231':445
'83.#.107.52':445
'83.#.166.223':445
'83.#.223.104':445
'83.#.236.63':445
'83.#.18.125':445
'83.#.175.74':445
'83.#.100.81':445
'83.#.82.27':445
'83.#.215.133':9988
'83.#.6.195':9988
'83.#.107.52':9988
'83.#.18.125':9988
'83.#.60.131':9988
'83.#.3.212':445
'83.#.136.166':445
'83.#.147.41':9988
'83.#.142.68':9988
'83.#.57.233':445
'83.#.42.201':445
'83.#.21.71':445
'83.#.71.80':445
'83.#.99.46':445
'83.#.201.102':445
'83.#.153.201':445
'83.#.22.201':445
'83.#.47.153':445
'83.#.215.133':445
'83.#.60.131':445
'83.#.17.59':445
'83.#.109.40':445
'83.#.6.195':445
'83.#.17.246':445
'83.#.246.20':445
'83.#.147.41':445
'83.#.42.18':445
'83.#.129.213':139
'83.#.144.24':139
'83.#.42.36':139
'83.#.56.130':139
'83.#.7.82':139
'83.#.77.87':139
'83.#.110.195':139
'83.#.51.11':139
'83.#.11.77':139
'83.#.59.195':139
'83.#.195.39':139
'83.#.243.59':139
'83.#.60.60':139
'83.#.48.20':139
'83.#.104.18':139
'83.#.39.21':139
'83.#.48.99':139
'83.#.235.244':139
'83.#.173.26':139
'83.#.166.132':139
'83.#.76.132':139
'83.#.19.99':139
'83.#.171.234':139
'83.#.3.212':9988
'83.#.223.104':9988
'83.#.31.129':139
'83.#.136.166':9988
'83.#.71.112':139
'83.#.212.99':139
'83.#.91.105':139
'83.#.210.160':139
'83.#.31.4':139
'83.#.107.240':139
'83.#.144.63':139
'83.#.216.109':139
'83.#.86.17':139
'83.#.81.197':445
'83.#.22.201':139
'83.#.201.102':139
'83.#.99.46':139
'83.#.47.153':139
'83.#.153.201':139
'83.#.55.209':139
'83.#.44.242':139
'83.#.81.197':139
'83.#.207.254':139
'83.#.42.18':139
'83.#.17.246':139
'83.#.6.195':139
'83.#.147.41':139
'83.#.246.20':139
'83.#.57.233':139
'83.#.42.201':139
'83.#.21.71':139
'83.#.71.80':139
'83.#.49.43':139
'83.#.160.179':139
'83.#.5.206':139
'83.#.152.95':139
'83.#.177.45':139
'83.#.79.140':139
'83.#.250.111':139
'83.#.123.90':139
'83.#.142.68':139
'83.#.242.39':139
'83.#.19.234':139
'83.#.72.249':139
'83.#.35.96':139
'83.#.222.193':139
'83.#.82.11':139
'83.#.202.151':139
'83.#.4.4':139
'83.#.140.239':139
'83.#.82.11':445
'83.#.202.151':445
'83.#.140.239':445
'83.#.177.45':445
'83.#.5.206':445
'83.#.49.43':445
'83.#.152.95':445
'83.#.123.90':445
'83.#.160.179':445
'83.#.44.242':445
'83.#.72.249':445
'83.#.207.254':445
'83.#.55.209':445
'83.#.35.96':445
'83.#.222.193':445
'83.#.4.4':445
'83.#.242.39':445
'83.#.19.234':445
'83.#.82.27':139
'83.#.18.125':139
'83.#.236.63':139
'83.#.100.81':139
'83.#.175.74':139
'83.#.215.133':139
'83.#.60.131':139
'83.#.109.40':139
'83.#.17.59':139
'83.#.79.140':445
'83.#.3.212':139
'83.#.142.68':445
'83.#.250.111':445
'83.#.136.166':139
'83.#.164.231':139
'83.#.107.52':139
'83.#.166.223':139
'83.#.223.104':139
'83.#.145.216':139
'83.#.25.70':139
'83.#.12.59':139
'83.#.89.174':139
'83.#.11.27':139
'83.#.167.111':139
'83.#.111.245':139
'83.#.42.203':139
'83.#.101.14':139
'83.#.38.174':139
'83.#.19.37':139
'83.#.225.127':139
'83.#.4.92':139
'83.#.81.106':139
'83.#.95.91':139
'83.#.18.247':139
'83.#.28.167':139
'83.#.216.78':139
'83.#.166.28':139
'83.#.41.134':139
'83.#.53.222':139
'83.#.45.202':139
'83.#.166.139':139
'83.#.18.138':445
'83.#.43.161':445
'83.#.120.137':139
'83.#.73.43':139
'83.#.88.219':139
'83.#.159.162':139
'83.#.245.101':139
'83.#.101.241':139
'83.#.162.134':139
'83.#.166.76':139
'83.#.1.13':139
'83.#.135.7':139
'83.#.166.147':139
'83.#.166.147':445
'83.#.166.76':445
'83.#.162.134':445
'83.#.135.7':445
'83.#.1.13':445
'83.#.166.28':445
'83.#.41.134':445
'83.#.53.222':445
'83.#.45.202':445
'83.#.101.14':445
'83.#.111.245':445
'83.#.11.27':445
'83.#.42.203':445
'83.#.167.111':445
'83.#.88.219':445
'83.#.159.162':445
'83.#.245.101':445
'83.#.101.241':445
'83.#.202.110':139
'83.#.110.205':139
'83.#.46.84':139
'83.#.7.53':139
'83.#.75.123':139
'83.#.36.23':139
'83.#.114.9':139
'83.#.247.88':139
'83.#.130.74':139
'83.#.73.43':445
'83.#.204.171':139
'83.#.166.139':445
'83.#.120.137':445
'83.#.83.99':139
'83.#.51.71':139
'83.#.71.46':139
'83.#.15.236':139
'83.#.18.51':139
'83.#.127.74':445
'83.#.173.26':445
'83.#.31.4':445
'83.#.76.132':445
'83.#.216.109':445
'83.#.86.17':445
'83.#.84.121':139
'83.#.96.79':139
'83.#.107.240':445
'83.#.137.247':139
'83.#.110.195':445
'83.#.91.105':445
'83.#.11.77':445
'83.#.77.87':445
'83.#.210.160':445
'83.#.19.99':445
'83.#.144.63':445
'83.#.71.112':445
'83.#.212.99':445
'83.#.29.112':139
'83.#.100.192':139
'83.#.190.36':139
'83.#.12.156':139
'83.#.95.66':139
'83.#.123.232':139
'83.#.168.243':139
'83.#.135.223':139
'83.#.54.43':139
'83.#.171.234':445
'83.#.1.230':139
'83.#.166.132':445
'83.#.114.64':139
'83.#.31.129':445
'83.#.186.244':139
'83.#.239.156':139
'83.#.38.46':139
'83.#.237.50':139
'83.#.186.244':445
'83.#.190.36':445
'83.#.1.230':445
'83.#.239.156':445
'83.#.12.156':445
'83.#.100.192':445
'83.#.54.43':445
'83.#.29.112':445
'83.#.123.232':445
'83.#.18.138':139
'83.#.96.79':445
'83.#.43.161':139
'83.#.127.74':139
'83.#.114.64':445
'83.#.38.46':445
'83.#.237.50':445
'83.#.84.121':445
'83.#.137.247':445
'83.#.39.21':445
'83.#.56.130':445
'83.#.48.20':445
'83.#.235.244':445
'83.#.42.36':445
'83.#.7.82':445
'83.#.51.11':445
'83.#.129.213':445
'83.#.144.24':445
'83.#.168.243':445
'83.#.243.59':445
'83.#.135.223':445
'83.#.95.66':445
'83.#.104.18':445
'83.#.195.39':445
'83.#.60.60':445
'83.#.48.99':445
'83.#.59.195':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней