Trojan.Starman.5191

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##0.43.137':139
'83.##0.230.43':139
'83.##0.1.180':139
'83.##0.240.153':139
'83.##0.185.229':139
'83.##0.26.84':445
'83.#10.69.6':445
'83.##0.139.185':139
'83.#10.2.93':445
'83.##0.180.88':139
'83.##0.128.109':139
'83.##0.204.128':139
'83.##0.120.149':139
'83.##0.207.9':139
'83.##0.116.204':139
'83.##0.145.3':139
'83.##0.214.225':139
'83.##0.128.116':139
'83.##0.10.218':139
'83.##0.94.154':445
'83.##0.28.61':445
'83.##0.40.164':445
'83.##0.143.40':445
'83.##0.61.58':445
'83.##0.13.27':445
'83.##0.112.26':445
'83.##0.87.163':445
'83.##0.53.248':445
'83.##0.236.53':445
'83.##0.76.112':445
'83.##0.204.4':445
'83.##0.172.204':445
'83.##0.23.62':445
'83.##0.146.2':445
'83.##0.167.67':445
'83.##0.104.48':445
'83.##0.247.141':445
'83.##0.113.146':445
'83.##0.240.180':445
'83.#10.2.93':139
'83.##0.26.84':139
'83.##0.9.174':445
'83.##0.161.141':445
'83.#10.69.6':139
'83.##0.146.2':139
'83.##0.204.4':139
'83.##0.94.154':139
'83.##0.23.62':139
'83.##0.37.225':445
'83.##0.9.174':139
'83.##0.161.141':139
'83.##0.126.190':139
'83.##0.37.225':139
'83.##0.66.131':445
'83.##0.9.133':445
'83.##0.126.190':445
'83.##0.195.99':445
'83.##0.253.4':445
'83.##0.172.204':139
'83.##0.236.53':139
'83.##0.112.26':139
'83.##0.13.27':139
'83.##0.53.248':139
'83.##0.87.163':139
'83.##0.154.205':139
'83.##0.145.204':139
'83.##0.156.24':139
'83.##0.237.45':139
'83.##0.40.164':139
'83.##0.240.180':139
'83.##0.104.48':139
'83.##0.167.67':139
'83.##0.113.146':139
'83.##0.247.141':139
'83.##0.61.58':139
'83.##0.28.61':139
'83.##0.76.112':139
'83.##0.143.40':139
'83.##0.156.24':445
'83.##0.45.19':139
'83.##0.14.97':139
'83.##0.1.230':139
'83.##0.54.85':139
'83.##0.147.58':139
'83.##0.156.56':139
'83.##0.30.97':139
'83.##0.188.199':139
'83.##0.31.85':139
'83.##0.137.114':139
'83.##0.164.50':139
'83.##0.129.244':139
'83.##0.201.3':139
'83.##0.165.43':139
'83.##0.35.29':139
'83.##0.159.95':139
'83.##0.114.159':139
'83.##0.218.34':139
'83.##0.95.218':139
'83.##0.224.121':139
'83.##0.205.232':139
'83.##0.89.201':139
'83.##0.198.149':139
'83.##0.18.140':139
'83.##0.123.168':139
'83.##0.240.191':139
'83.##0.10.213':139
'83.##0.212.98':139
'83.##0.192.107':139
'83.##0.3.168':139
'83.##0.98.108':139
'83.##0.49.122':139
'83.##0.7.138':139
'83.##0.37.195':139
'83.##0.107.10':139
'83.##0.219.175':139
'83.##0.167.219':139
'83.##0.148.207':139
'83.##0.80.18':139
'83.##0.180.88':445
'83.##0.1.180':445
'83.##0.145.3':445
'83.##0.214.225':445
'83.##0.240.153':445
'83.##0.185.229':445
'83.##0.139.185':445
'83.##0.43.137':445
'83.##0.230.43':445
'83.##0.10.218':445
'83.##0.145.204':445
'83.##0.120.149':445
'83.##0.237.45':445
'83.##0.154.205':445
'83.##0.207.9':445
'83.##0.116.204':445
'83.##0.128.116':445
'83.##0.128.109':445
'83.##0.204.128':445
'83.##0.158.50':139
'83.##0.187.20':445
'83.##0.116.40':445
'83.##0.238.47':445
'83.##0.21.61':445
'83.##0.92.194':445
'83.##0.213.207':139
'83.##0.62.227':139
'83.##0.182.200':139
'83.##0.222.182':139
'83.##0.185.147':445
'83.##0.238.47':139
'83.##0.21.61':139
'83.##0.159.121':139
'83.##0.185.147':139
'83.##0.187.20':139
'83.##0.158.50':445
'83.##0.159.121':445
'83.##0.116.40':139
'83.##0.92.194':139
'83.##0.93.185':445
'83.##0.35.138':445
'83.##0.169.216':139
'83.##0.28.139':139
'83.##0.109.85':445
'83.##0.211.198':445
'83.##0.172.18':445
'83.##0.200.11':445
'83.##0.11.94':445
'83.##0.150.82':139
'83.##0.24.231':139
'83.##0.231.137':139
'83.##0.228.145':139
'83.##0.107.217':139
'83.##0.25.68':139
'83.##0.119.122':139
'83.##0.57.221':139
'83.##0.172.25':139
'83.##0.95.65':139
'83.##0.121.202':445
'83.##0.40.143':445
'83.##0.53.206':445
'83.##0.174.68':445
'83.##0.123.174':445
'83.##0.193.104':445
'83.##0.155.15':445
'83.##0.204.154':445
'83.##0.31.37':445
'83.##0.56.154':445
'83.##0.10.234':445
'83.##0.21.153':445
'83.##0.37.88':445
'83.##0.127.122':445
'83.##0.99.107':445
'83.##0.152.251':445
'83.##0.93.110':445
'83.##0.166.146':445
'83.##0.254.153':445
'83.##0.71.48':445
'83.##0.152.251':139
'83.##0.254.153':139
'83.##0.21.153':139
'83.##0.37.88':139
'83.##0.71.48':139
'83.##0.10.234':139
'83.##0.174.68':139
'83.##0.93.110':139
'83.##0.166.146':139
'83.##0.99.107':139
'83.##0.200.11':139
'83.##0.172.18':139
'83.##0.93.185':139
'83.##0.211.198':139
'83.##0.35.138':139
'83.##0.121.202':139
'83.##0.127.122':139
'83.##0.11.94':139
'83.##0.109.85':139
'83.##0.123.174':139
'83.##0.80.232':139
'83.##0.57.136':139
'83.##0.57.70':139
'83.##0.221.143':139
'83.##0.213.30':139
'83.##0.64.144':139
'83.##0.51.204':139
'83.##0.17.27':139
'83.##0.22.127':139
'83.#10.68.9':139
'83.##0.193.104':139
'83.##0.31.37':139
'83.##0.40.143':139
'83.##0.53.206':139
'83.##0.56.154':139
'83.##0.65.120':139
'83.#10.40.5':139
'83.##0.155.15':139
'83.##0.204.154':139
'83.##0.65.120':445
'83.##0.214.151':139
'83.##0.202.219':139
'83.##0.192.36':139
'83.##0.102.100':139
'83.##0.100.236':139
'83.##0.69.127':139
'83.##0.17.237':445
'83.##0.180.101':139
'83.##0.198.223':139
'83.##0.48.11':139
'83.##0.98.99':139
'83.##0.6.118':139
'83.##0.213.30':9988
'83.##0.17.237':139
'83.##0.242.9':139
'83.##0.161.231':139
'83.##0.131.219':139
'83.##0.184.202':139
'83.##0.33.85':139
'83.##0.98.99':445
'83.##0.180.101':445
'83.##0.198.223':445
'83.##0.202.219':445
'83.##0.100.236':445
'83.##0.69.127':445
'83.##0.253.4':139
'83.##0.9.133':139
'83.##0.66.131':139
'83.##0.195.99':139
'83.##0.214.151':445
'83.##0.184.202':445
'83.##0.33.85':445
'83.##0.6.118':445
'83.##0.242.9':445
'83.##0.161.231':445
'83.##0.192.36':445
'83.##0.102.100':445
'83.##0.131.219':445
'83.##0.48.11':445
'83.##0.107.217':445
'83.##0.24.231':445
'83.##0.51.204':445
'83.##0.228.145':445
'83.##0.231.137':445
'83.##0.95.65':445
'83.##0.119.122':445
'83.##0.25.68':445
'83.##0.172.25':445
'83.##0.64.144':445
'83.##0.57.70':445
'83.##0.221.143':445
'83.#10.40.5':445
'83.#10.68.9':445
'83.##0.80.232':445
'83.##0.17.27':445
'83.##0.22.127':445
'83.##0.57.136':445
'83.##0.213.30':445
'83.##0.57.221':445
'83.##0.155.15':9988
'83.##0.57.136':9988
'83.##0.53.206':9988
'83.##0.193.104':9988
'83.##0.51.204':9988
'83.##0.221.143':9988
'83.##0.24.231':9988
'83.##0.231.137':9988
'83.##0.22.127':9988
'83.##0.40.143':9988
'83.##0.28.139':445
'83.##0.99.107':9988
'83.##0.150.82':445
'83.##0.169.216':445
'83.##0.211.198':9988
'83.##0.93.110':9988
'83.##0.123.174':9988
'83.##0.109.85':9988
'83.##0.152.251':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней