Trojan.Starman.5086

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'67.##.63.197':445
'67.#9.56.18':445
'67.#9.13.51':445
'67.##.144.201':445
'67.##.136.56':445
'67.##.150.144':139
'67.##.37.150':139
'67.##.103.72':139
'67.#9.5.104':139
'67.#9.13.65':445
'67.#9.47.21':445
'67.#9.80.20':445
'67.##.115.158':445
'67.##.25.144':445
'67.##.168.192':445
'67.##.67.133':445
'67.##.214.144':445
'67.##.30.189':445
'67.##.161.62':445
'67.##.41.225':139
'67.##.204.16':139
'67.##.20.181':139
'67.##.139.53':139
'67.##.209.243':139
'67.##.203.249':139
'67.##.234.105':139
'67.##.225.233':139
'67.##.141.208':139
'67.##.105.222':139
'67.##.114.32':139
'67.##.199.165':139
'67.##.181.226':139
'67.#9.5.222':139
'67.##.165.207':139
'67.##.161.165':139
'67.#9.88.73':139
'67.##.227.81':139
'67.##.235.217':139
'67.##.98.171':139
'67.#9.1.131':445
'67.##.230.136':445
'67.##.112.148':445
'67.##.217.239':445
'67.##.160.230':445
'67.##.221.121':445
'67.##.214.235':445
'67.##.139.203':445
'67.##.55.231':445
'67.##.188.194':445
'67.##.136.56':139
'67.##.82.220':445
'67.##.63.197':139
'67.#9.56.18':139
'67.##.204.202':445
'67.##.13.215':445
'67.##.229.130':445
'67.##.139.218':445
'67.##.35.114':445
'67.##.127.89':445
'67.##.25.238':445
'67.##.46.130':445
'67.##.247.14':445
'67.#9.38.24':445
'67.#9.60.96':445
'67.##.203.73':445
'67.##.187.61':445
'67.##.11.215':445
'67.#9.74.12':445
'67.##.246.215':445
'67.##.87.225':445
'67.##.117.254':445
'67.##.218.20':445
'67.##.109.154':445
'67.##.134.107':445
'67.#9.192.4':445
'67.##.126.174':445
'67.#9.97.72':445
'67.##.76.113':445
'67.##.98.150':445
'67.##.56.115':445
'67.##.234.105':445
'67.##.225.233':445
'67.#9.67.87':445
'67.##.149.158':445
'67.#9.89.79':445
'67.##.108.110':445
'67.##.69.185':445
'67.##.105.222':445
'67.##.114.32':445
'67.##.139.53':445
'67.#9.88.73':445
'67.##.227.81':445
'67.##.209.243':445
'67.##.203.249':445
'67.##.141.208':445
'67.##.204.16':445
'67.##.20.181':445
'67.##.102.32':445
'67.#9.57.79':445
'67.##.96.242':445
'67.##.45.200':445
'67.##.24.165':445
'67.##.42.171':445
'67.#9.120.1':445
'67.##.123.206':445
'67.##.102.134':445
'67.##.161.10':445
'67.##.33.200':445
'67.##.229.110':445
'67.#9.2.43':445
'67.##.122.101':445
'67.#9.3.129':445
'67.##.147.32':445
'67.##.140.114':445
'67.#9.25.24':445
'67.##.86.103':445
'67.##.195.32':445
'67.##.147.32':139
'67.##.86.103':139
'67.##.229.110':139
'67.#9.2.43':139
'67.##.195.32':139
'67.##.33.200':139
'67.##.45.200':139
'67.##.140.114':139
'67.#9.25.24':139
'67.#9.3.129':139
'67.#9.67.87':139
'67.##.108.110':139
'67.##.98.150':139
'67.##.56.115':139
'67.##.69.185':139
'67.##.102.32':139
'67.##.122.101':139
'67.##.149.158':139
'67.#9.89.79':139
'67.##.24.165':139
'67.#9.5.222':445
'67.##.165.207':445
'67.##.37.150':445
'67.##.41.225':445
'67.##.199.165':445
'67.##.235.217':445
'67.##.98.171':445
'67.##.181.226':445
'67.##.161.165':445
'67.##.150.144':445
'67.##.42.171':139
'67.##.102.134':139
'67.#9.57.79':139
'67.##.96.242':139
'67.##.161.10':139
'67.##.103.72':445
'67.#9.5.104':445
'67.#9.120.1':139
'67.##.123.206':139
'67.##.144.201':139
'67.##.29.226':445
'67.##.40.149':445
'67.##.118.141':139
'67.##.224.90':139
'67.##.63.163':445
'67.##.115.148':445
'67.##.199.72':445
'67.#9.59.6':445
'67.##.163.185':445
'67.#9.42.24':139
'67.##.235.204':139
'67.#9.21.45':139
'67.##.178.228':139
'67.##.205.122':139
'67.##.79.212':139
'67.#9.47.48':139
'67.##.100.136':139
'67.##.39.140':139
'67.##.149.163':139
'67.##.55.199':445
'67.##.65.181':445
'67.##.85.114':445
'67.#9.237.6':445
'67.##.136.205':445
'67.##.147.234':445
'67.##.190.146':445
'67.##.190.197':445
'67.##.100.28':445
'67.#9.74.61':445
'67.##.205.96':445
'67.##.224.14':445
'67.##.244.223':445
'67.#9.58.56':445
'67.#9.15.58':445
'67.##.191.244':445
'67.##.36.200':445
'67.##.125.16':445
'67.##.133.185':445
'67.##.43.238':445
'67.##.191.244':139
'67.##.133.185':139
'67.##.224.14':139
'67.##.244.223':139
'67.##.43.238':139
'67.#9.237.6':139
'67.##.205.96':139
'67.##.36.200':139
'67.##.125.16':139
'67.#9.15.58':139
'67.##.29.226':139
'67.##.163.185':139
'67.##.40.149':139
'67.#9.59.6':139
'67.##.63.163':139
'67.##.55.199':139
'67.#9.58.56':139
'67.##.115.148':139
'67.##.199.72':139
'67.##.136.205':139
'67.##.168.223':139
'67.#9.76.1':139
'67.#9.9.133':139
'67.##.34.163':139
'67.##.120.64':139
'67.#9.41.47':139
'67.##.50.147':139
'67.##.158.116':139
'67.##.202.33':139
'67.##.112.210':139
'67.##.147.234':139
'67.##.100.28':139
'67.##.65.181':139
'67.##.85.114':139
'67.#9.74.61':139
'67.##.103.104':139
'67.##.97.229':139
'67.##.190.197':139
'67.##.190.146':139
'67.##.117.254':139
'67.##.134.107':139
'67.##.109.154':139
'67.##.87.225':139
'67.#9.97.72':139
'67.##.126.174':139
'67.##.246.215':139
'67.##.76.113':139
'67.#9.192.4':139
'67.##.218.20':139
'67.##.230.136':139
'67.##.160.230':139
'67.##.217.239':139
'67.#9.1.131':139
'67.##.139.203':139
'67.##.214.235':139
'67.##.127.89':139
'67.##.55.231':139
'67.##.221.121':139
'67.##.247.14':139
'67.##.168.192':139
'67.##.30.189':139
'67.#9.47.21':139
'67.#9.80.20':139
'67.##.161.62':139
'67.#9.13.65':139
'67.#9.13.51':139
'67.##.67.133':139
'67.##.214.144':139
'67.##.25.144':139
'67.##.46.130':139
'67.#9.60.96':139
'67.#9.38.24':139
'67.##.25.238':139
'67.##.11.215':139
'67.##.187.61':139
'67.##.115.158':139
'67.#9.74.12':139
'67.##.203.73':139
'67.##.178.228':445
'67.##.205.122':445
'67.#9.41.47':445
'67.##.50.147':445
'67.##.235.204':445
'67.##.39.140':445
'67.##.149.163':445
'67.#9.21.45':445
'67.##.79.212':445
'67.##.202.33':445
'67.##.112.210':445
'67.#9.9.133':445
'67.##.103.104':445
'67.##.97.229':445
'67.##.34.163':445
'67.##.120.64':445
'67.##.158.116':445
'67.##.168.223':445
'67.#9.76.1':445
'67.#9.47.48':445
'67.##.204.202':139
'67.##.139.218':139
'67.##.79.212':9988
'67.##.82.220':139
'67.##.35.114':139
'67.##.188.194':139
'67.##.112.148':139
'67.##.13.215':139
'67.##.229.130':139
'67.#9.21.45':9988
'67.##.118.141':445
'67.##.224.90':445
'67.##.100.136':445
'67.#9.42.24':445
'67.##.191.244':9988
'67.##.178.228':9988
'67.##.55.199':9988
'67.##.133.185':9988
'67.##.244.223':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней