Trojan.Starman.5261

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##2.75.74':139
'83.##2.132.111':139
'83.#32.7.8':139
'83.##2.115.132':139
'83.##2.88.196':139
'83.##2.249.113':139
'83.##2.75.249':139
'83.##2.225.91':139
'83.##2.102.21':139
'83.##2.195.47':139
'83.##2.106.12':139
'83.##2.9.114':139
'83.##2.249.203':139
'83.##2.0.178':139
'83.##2.140.245':139
'83.##2.90.20':139
'83.##2.98.96':139
'83.##2.72.19':139
'83.#32.56.2':139
'83.##2.125.92':139
'83.##2.129.142':139
'83.##2.122.75':139
'83.##2.9.114':445
'83.##2.249.203':445
'83.##2.0.178':445
'83.##2.140.245':445
'83.##2.90.20':445
'83.##2.98.96':445
'83.##2.72.19':445
'83.#32.56.2':445
'83.##2.125.92':445
'83.##2.129.142':445
'83.##2.48.31':445
'83.##2.71.67':139
'83.##2.6.239':139
'83.##2.16.186':139
'83.##2.132.94':139
'83.##2.106.211':139
'83.##2.53.200':445
'83.##2.75.146':445
'83.##2.118.242':445
'83.##2.126.103':445
'83.##2.100.30':445
'83.##2.42.125':139
'83.##2.103.113':139
'83.##2.74.247':139
'83.##2.104.19':139
'83.##2.104.104':139
'83.##2.211.140':445
'83.##2.194.52':445
'83.##2.179.36':139
'83.##2.0.162':139
'83.##2.37.112':139
'83.##2.19.18':139
'83.##2.92.33':139
'83.##2.24.42':139
'83.##2.194.52':139
'83.##2.65.235':445
'83.##2.211.140':139
'83.##2.196.166':139
'83.##2.115.58':139
'83.##2.167.119':139
'83.##2.85.18':139
'83.##2.149.236':139
'83.##2.92.33':445
'83.##2.179.36':445
'83.##2.126.103':139
'83.##2.37.112':445
'83.##2.103.113':445
'83.##2.0.162':445
'83.##2.75.146':139
'83.##2.48.31':139
'83.##2.53.200':139
'83.##2.100.30':139
'83.##2.118.242':139
'83.##2.42.125':445
'83.##2.167.119':445
'83.##2.196.166':445
'83.##2.149.236':445
'83.##2.24.42':445
'83.##2.85.18':445
'83.##2.104.104':445
'83.##2.74.247':445
'83.##2.104.19':445
'83.##2.115.58':445
'83.##2.19.18':445
'83.##2.243.110':139
'83.##2.28.189':139
'83.##2.109.134':139
'83.##2.10.45':139
'83.##2.33.72':139
'83.#32.71.7':139
'83.##2.213.244':139
'83.##2.162.185':139
'83.##2.84.192':139
'83.##2.128.197':139
'83.#32.1.46':139
'83.#32.6.97':445
'83.##2.143.88':445
'83.##2.21.16':445
'83.##2.174.106':445
'83.##2.183.125':445
'83.##2.21.94':445
'83.##2.53.199':445
'83.##2.94.52':445
'83.##2.124.0':445
'83.##2.51.124':445
'83.##2.158.213':139
'83.##2.155.114':139
'83.##2.123.0':139
'83.##2.107.244':139
'83.##2.231.164':139
'83.##2.191.58':139
'83.##2.243.254':139
'83.##2.221.209':139
'83.##2.79.129':139
'83.##2.90.152':139
'83.##2.35.224':139
'83.##2.164.225':139
'83.##2.187.223':139
'83.##2.79.53':139
'83.##2.205.158':139
'83.##2.68.15':139
'83.##2.44.202':139
'83.##2.235.207':139
'83.##2.225.235':139
'83.##2.207.153':139
'83.##2.149.62':139
'83.##2.33.100':139
'83.##2.16.186':445
'83.##2.71.67':445
'83.##2.106.211':445
'83.##2.122.75':445
'83.##2.132.94':445
'83.##2.81.223':139
'83.##2.35.42':139
'83.##2.21.42':139
'83.##2.6.239':445
'83.##2.179.38':139
'83.##2.75.249':445
'83.#32.7.8':445
'83.##2.75.74':445
'83.##2.88.196':445
'83.##2.106.12':445
'83.##2.115.132':445
'83.##2.225.91':445
'83.##2.249.113':445
'83.##2.195.47':445
'83.##2.132.111':445
'83.##2.102.21':445
'83.##2.7.232':139
'83.##2.21.42':445
'83.##2.81.223':445
'83.##2.179.38':445
'83.##2.21.94':139
'83.##2.53.199':139
'83.##2.50.213':445
'83.##2.52.177':445
'83.##2.83.30':445
'83.##2.35.42':445
'83.##2.7.232':445
'83.##2.94.52':139
'83.##2.174.106':139
'83.##2.183.125':139
'83.##2.52.177':139
'83.##2.83.30':139
'83.##2.50.213':139
'83.##2.124.0':139
'83.##2.51.124':139
'83.##2.143.88':139
'83.##2.21.16':139
'83.#32.6.97':139
'83.##2.15.92':445
'83.##2.100.15':445
'83.##2.64.25':445
'83.##2.175.56':445
'83.##2.160.118':445
'83.##2.255.117':445
'83.##2.233.196':445
'83.##2.76.151':445
'83.##2.59.172':445
'83.##2.218.199':445
'83.##2.124.44':445
'83.##2.139.43':445
'83.##2.101.85':139
'83.##2.199.100':139
'83.##2.240.165':139
'83.##2.231.210':139
'83.##2.240.231':139
'83.##2.118.47':445
'83.##2.171.167':445
'83.##2.216.39':139
'83.##2.67.131':139
'83.##2.90.41':139
'83.##2.69.124':445
'83.#32.1.93':445
'83.##2.170.175':445
'83.##2.160.129':445
'83.##2.186.180':445
'83.##2.13.214':445
'83.##2.66.225':445
'83.##2.162.3':445
'83.##2.152.65':445
'83.##2.248.0':445
'83.##2.65.120':445
'83.##2.144.115':445
'83.##2.24.34':445
'83.##2.231.185':445
'83.##2.125.182':445
'83.##2.21.131':445
'83.##2.35.232':445
'83.##2.168.4':445
'83.##2.42.168':445
'83.##2.112.116':445
'83.##2.157.165':445
'83.##2.69.199':445
'83.##2.21.131':139
'83.##2.35.232':139
'83.##2.69.124':139
'83.##2.233.196':139
'83.##2.76.151':139
'83.##2.157.165':139
'83.##2.69.199':139
'83.##2.231.185':139
'83.##2.125.182':139
'83.##2.24.34':139
'83.##2.59.172':139
'83.##2.160.118':139
'83.##2.255.117':139
'83.##2.118.47':139
'83.##2.139.43':139
'83.##2.171.167':139
'83.##2.218.199':139
'83.##2.124.44':139
'83.##2.64.25':139
'83.##2.175.56':139
'83.##2.100.15':139
'83.##2.112.116':139
'83.##2.31.78':139
'83.##2.142.60':139
'83.##2.79.140':139
'83.##2.66.225':139
'83.##2.162.3':139
'83.##2.50.10':139
'83.##2.144.58':139
'83.##2.50.233':139
'83.##2.72.195':139
'83.##2.73.107':139
'83.##2.152.65':139
'83.##2.186.180':139
'83.##2.13.214':139
'83.##2.144.115':139
'83.##2.168.4':139
'83.##2.42.168':139
'83.##2.248.0':139
'83.##2.65.120':139
'83.##2.170.175':139
'83.##2.160.129':139
'83.#32.1.93':139
'83.##2.26.24':445
'83.##2.108.246':445
'83.##2.65.235':139
'83.##2.4.188':139
'83.##2.15.92':139
'83.##2.97.146':445
'83.##2.178.37':445
'83.##2.7.138':445
'83.##2.99.140':445
'83.##2.63.170':445
'83.##2.187.190':139
'83.##2.254.55':139
'83.##2.91.251':139
'83.##2.32.233':139
'83.##2.37.147':139
'83.##2.123.28':139
'83.##2.173.110':139
'83.##2.37.187':139
'83.##2.33.68':139
'83.##2.124.176':139
'83.##2.98.216':139
'83.##2.48.140':445
'83.##2.124.176':445
'83.##2.98.216':445
'83.##2.91.251':445
'83.##2.32.233':445
'83.##2.254.55':445
'83.##2.187.190':445
'83.##2.4.188':445
'83.##2.37.187':445
'83.##2.33.68':445
'83.##2.173.110':445
'83.##2.123.28':445
'83.##2.144.72':445
'83.##2.88.47':445
'83.##2.205.203':445
'83.##2.201.133':445
'83.##2.200.238':445
'83.##2.210.161':445
'83.##2.37.147':445
'83.##2.107.117':445
'83.#32.19.2':445
'83.##2.194.121':445
'83.##2.90.41':445
'83.##2.216.39':445
'83.##2.67.131':445
'83.##2.101.85':445
'83.##2.199.100':445
'83.##2.124.44':9988
'83.##2.76.151':9988
'83.##2.175.56':9988
'83.##2.139.43':9988
'83.##2.171.167':9988
'83.##2.240.165':445
'83.##2.72.195':445
'83.##2.73.107':445
'83.##2.142.60':445
'83.##2.79.140':445
'83.##2.31.78':445
'83.##2.231.210':445
'83.##2.240.231':445
'83.##2.144.58':445
'83.##2.50.233':445
'83.##2.50.10':445
'83.##2.21.131':9988
'83.##2.205.203':139
'83.##2.144.72':139
'83.##2.200.238':139
'83.##2.48.140':139
'83.##2.201.133':139
'83.##2.107.117':139
'83.##2.210.161':139
'83.##2.194.121':139
'83.##2.88.47':139
'83.#32.19.2':139
'83.##2.178.37':139
'83.##2.79.140':9988
'83.##2.26.24':139
'83.##2.160.129':9988
'83.##2.69.199':9988
'83.##2.13.214':9988
'83.##2.7.138':139
'83.##2.97.146':139
'83.##2.63.170':139
'83.##2.108.246':139
'83.##2.99.140':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней