Trojan.Starman.5186

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##.83.202':139
'62.##.192.98':139
'62.##.21.135':139
'62.##.164.52':139
'62.##.195.70':139
'62.##.60.172':139
'62.##.166.127':445
'62.#8.176.5':139
'62.##.211.33':139
'62.##.153.16':139
'62.##.208.17':139
'62.##.51.113':139
'62.#8.46.88':139
'62.##.237.58':139
'62.#8.0.237':139
'62.##.223.131':139
'62.##.190.223':139
'62.##.54.184':139
'62.##.204.249':139
'62.##.18.205':139
'62.##.15.105':445
'62.##.169.116':445
'62.##.196.10':445
'62.##.95.164':445
'62.#8.10.95':445
'62.#8.33.68':445
'62.#8.24.23':445
'62.##.109.232':445
'62.##.110.252':445
'62.##.148.237':445
'62.##.133.199':445
'62.##.16.157':445
'62.#8.28.89':445
'62.#8.38.15':445
'62.##.33.121':445
'62.##.98.217':445
'62.##.163.106':445
'62.##.230.44':445
'62.#8.92.46':445
'62.#8.59.6':445
'62.##.121.193':139
'62.##.191.220':445
'62.##.36.192':445
'62.##.63.221':445
'62.##.163.229':445
'62.##.142.80':445
'62.##.178.248':445
'62.##.166.127':139
'62.##.248.165':445
'62.#8.36.50':445
'62.##.165.242':445
'62.##.191.220':139
'62.##.36.192':139
'62.##.63.221':139
'62.##.163.229':139
'62.##.142.80':139
'62.##.178.248':139
'62.##.198.76':445
'62.##.248.165':139
'62.#8.36.50':139
'62.##.165.242':139
'62.##.15.105':139
'62.##.169.116':139
'62.##.196.10':139
'62.##.95.164':139
'62.#8.10.95':139
'62.#8.33.68':139
'62.#8.24.23':139
'62.##.109.232':139
'62.##.110.252':139
'62.##.148.237':139
'62.##.133.199':139
'62.##.16.157':139
'62.#8.28.89':139
'62.#8.38.15':139
'62.##.33.121':139
'62.##.98.217':139
'62.##.163.106':139
'62.##.230.44':139
'62.#8.92.46':139
'62.#8.59.6':139
'62.##.115.222':139
'62.##.191.115':139
'62.##.133.35':139
'62.##.71.175':139
'62.##.217.34':139
'62.##.38.186':139
'62.##.126.114':139
'62.##.70.231':139
'62.##.57.153':139
'62.##.139.89':139
'62.#8.19.43':139
'62.##.226.39':139
'62.##.38.110':139
'62.##.88.238':139
'62.##.137.204':139
'62.##.185.68':139
'62.##.250.252':139
'62.##.92.151':139
'62.##.78.117':139
'62.##.115.72':139
'62.##.50.174':139
'62.##.234.79':139
'62.##.121.51':139
'62.##.21.130':139
'62.##.131.188':139
'62.##.135.213':139
'62.##.195.162':139
'62.##.34.242':139
'62.#8.44.14':139
'62.##.48.129':139
'62.#8.97.91':139
'62.##.165.96':139
'62.#8.91.10':139
'62.##.43.117':139
'62.##.246.111':139
'62.#8.54.91':139
'62.#8.71.48':139
'62.##.21.104':139
'62.#8.87.61':139
'62.#8.2.201':139
'62.##.202.165':139
'62.##.21.135':445
'62.##.83.202':445
'62.##.195.70':445
'62.##.190.223':445
'62.##.164.52':445
'62.#8.176.5':445
'62.##.60.172':445
'62.##.153.16':445
'62.##.192.98':445
'62.##.211.33':445
'62.#8.46.88':445
'62.##.208.17':445
'62.#8.0.237':445
'62.##.121.193':445
'62.##.237.58':445
'62.##.54.184':445
'62.##.223.131':445
'62.##.18.205':445
'62.##.51.113':445
'62.##.204.249':445
'62.##.164.61':445
'62.#8.55.24':445
'62.##.162.173':445
'62.##.30.102':445
'62.##.57.111':445
'62.##.132.81':445
'62.##.165.160':445
'62.##.165.132':445
'62.##.109.16':445
'62.##.230.211':445
'62.##.164.61':139
'62.#8.55.24':139
'62.##.162.173':139
'62.##.30.102':139
'62.##.57.111':139
'62.##.132.81':139
'62.##.165.160':139
'62.##.165.132':139
'62.##.109.16':139
'62.##.230.211':139
'62.##.198.76':139
'62.##.85.142':445
'62.##.109.98':445
'62.##.157.94':445
'62.##.106.157':445
'62.#8.20.23':445
'62.#8.4.77':445
'62.##.213.81':445
'62.##.64.240':445
'62.##.53.213':445
'62.##.80.223':445
'62.##.235.68':139
'62.##.126.68':139
'62.##.255.174':139
'62.##.115.88':139
'62.##.98.229':139
'62.#8.36.64':139
'62.##.107.159':139
'62.##.147.73':139
'62.##.247.43':139
'62.#8.11.13':139
'62.##.203.142':445
'62.##.13.234':445
'62.##.35.124':445
'62.##.124.186':445
'62.##.55.253':445
'62.##.145.130':445
'62.##.103.36':445
'62.##.160.247':445
'62.##.91.127':445
'62.#8.7.83':445
'62.#8.66.91':445
'62.##.139.66':445
'62.##.249.197':445
'62.##.63.222':445
'62.##.109.211':445
'62.##.186.173':445
'62.##.96.157':445
'62.##.251.38':445
'62.##.228.177':445
'62.##.236.132':445
'62.#8.88.70':139
'62.#8.66.91':139
'62.##.139.66':139
'62.##.249.197':139
'62.##.63.222':139
'62.##.109.211':139
'62.##.186.173':139
'62.##.96.157':139
'62.##.251.38':139
'62.##.228.177':139
'62.##.236.132':139
'62.##.85.142':139
'62.##.109.98':139
'62.##.157.94':139
'62.#8.20.23':139
'62.##.106.157':139
'62.#8.4.77':139
'62.##.213.81':139
'62.##.64.240':139
'62.##.53.213':139
'62.##.80.223':139
'62.##.109.188':139
'62.##.116.136':139
'62.##.75.221':139
'62.##.57.123':139
'62.##.78.127':139
'62.#8.88.10':139
'62.##.51.217':139
'62.#8.10.11':139
'62.##.183.86':139
'62.##.11.184':139
'62.##.203.142':139
'62.##.13.234':139
'62.##.35.124':139
'62.##.124.186':139
'62.##.55.253':139
'62.##.145.130':139
'62.##.103.36':139
'62.##.160.247':139
'62.##.91.127':139
'62.#8.7.83':139
'62.##.114.181':139
'62.##.107.40':139
'62.##.52.105':139
'62.##.119.119':139
'62.##.128.112':139
'62.##.88.217':445
'62.##.206.106':445
'62.##.200.134':445
'62.##.174.107':139
'62.##.76.175':139
'62.##.143.221':139
'62.##.179.202':139
'62.#8.10.26':139
'62.##.97.243':139
'62.#8.40.46':139
'62.##.111.145':139
'62.##.39.168':139
'62.##.237.19':139
'62.##.156.191':139
'62.##.76.232':139
'62.##.119.119':445
'62.##.128.112':445
'62.##.39.168':445
'62.##.237.19':445
'62.##.111.145':445
'62.##.174.107':445
'62.##.76.175':445
'62.##.107.40':445
'62.##.52.105':445
'62.##.114.181':445
'62.##.97.243':445
'62.#8.40.46':445
'62.##.216.151':445
'62.##.112.251':445
'62.##.172.113':445
'62.##.156.191':445
'62.##.76.232':445
'62.##.179.202':445
'62.#8.10.26':445
'62.##.143.221':445
'62.##.216.151':139
'62.##.255.174':445
'62.##.235.68':445
'62.##.98.229':445
'62.#8.88.70':445
'62.##.115.88':445
'62.##.147.73':445
'62.#8.36.64':445
'62.#8.11.13':445
'62.##.126.68':445
'62.##.247.43':445
'62.##.109.188':445
'62.##.116.136':445
'62.##.75.221':445
'62.##.57.123':445
'62.##.78.127':445
'62.#8.88.10':445
'62.##.51.217':445
'62.#8.10.11':445
'62.##.183.86':445
'62.##.11.184':445
'62.#8.88.10':9988
'62.##.75.221':9988
'62.##.116.136':9988
'62.##.13.234':9988
'62.##.57.123':9988
'62.##.112.251':139
'62.##.172.113':139
'62.##.206.106':139
'62.##.200.134':139
'62.##.88.217':139
'62.##.80.223':9988
'62.##.63.222':9988
'62.##.53.213':9988
'62.##.107.159':445
'62.##.157.94':9988
'62.##.35.124':9988
'62.##.203.142':9988
'62.##.124.186':9988
'62.##.249.197':9988
'62.##.55.253':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней