Trojan.Starman.5000

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'64.##.81.110':445
'64.##.109.81':139
'64.##.189.109':139
'64.##.25.227':445
'64.#9.71.13':445
'64.##.121.127':445
'64.##.29.189':139
'64.##.107.177':139
'64.##.114.153':139
'64.##.171.215':139
'64.##.172.30':139
'64.##.216.87':139
'64.##.163.253':139
'64.##.121.127':139
'64.##.81.110':139
'64.#9.1.200':445
'64.##.138.19':139
'64.##.25.227':139
'64.#9.71.13':139
'64.##.233.189':445
'64.##.145.26':445
'64.##.129.12':445
'64.##.138.19':445
'64.##.72.174':445
'64.##.73.173':445
'64.#9.2.110':445
'64.#9.252.8':139
'64.#9.6.252':139
'64.##.236.244':139
'64.#9.11.52':139
'64.##.140.120':139
'64.#9.9.59':139
'64.##.37.140':139
'64.#9.36.65':139
'64.##.132.36':139
'64.#9.81.93':139
'64.##.226.237':139
'64.##.64.160':139
'64.##.64.223':139
'64.##.186.212':139
'64.##.118.173':139
'64.##.228.240':139
'64.##.53.160':139
'64.##.12.176':139
'64.##.46.233':139
'64.##.209.67':139
'64.#9.54.74':139
'64.#9.53.27':139
'64.##.62.197':139
'64.##.211.10':139
'64.##.178.84':139
'64.##.135.18':139
'64.##.129.12':139
'64.##.180.187':445
'64.##.203.180':445
'64.##.121.41':445
'64.##.72.119':445
'64.##.193.63':445
'64.#9.36.76':445
'64.#9.80.58':445
'64.##.70.253':445
'64.##.152.25':445
'64.#9.60.30':445
'64.##.138.24':445
'64.##.52.224':445
'64.##.252.191':445
'64.##.65.136':139
'64.##.88.124':139
'64.#9.71.47':139
'64.##.52.129':139
'64.##.242.51':139
'64.##.150.62':139
'64.#9.45.53':139
'64.##.222.220':445
'64.##.215.24':445
'64.#9.8.181':445
'64.##.117.190':445
'64.##.41.192':445
'64.##.92.153':445
'64.##.65.136':445
'64.##.88.124':445
'64.#9.71.47':445
'64.##.52.129':445
'64.##.242.51':445
'64.##.150.62':445
'64.#9.45.53':445
'64.##.73.173':139
'64.#9.2.110':139
'64.##.145.26':139
'64.#9.1.200':139
'64.##.233.189':139
'64.##.72.174':139
'64.#9.5.58':445
'64.##.124.108':445
'64.##.60.181':445
'64.##.107.40':445
'64.##.235.54':445
'64.##.238.95':445
'64.##.202.250':445
'64.#9.99.78':445
'64.##.214.29':445
'64.##.71.239':445
'64.##.58.112':445
'64.##.14.180':445
'64.##.10.149':445
'64.##.10.231':139
'64.##.88.178':139
'64.##.99.226':139
'64.##.107.159':139
'64.##.217.42':139
'64.##.185.103':139
'64.#9.98.9':139
'64.#9.34.86':139
'64.#9.56.18':139
'64.##.223.56':139
'64.#9.66.95':139
'64.##.178.33':139
'64.##.56.148':139
'64.##.17.179':139
'64.##.227.46':445
'64.#9.7.209':445
'64.##.189.179':445
'64.##.54.217':139
'64.##.139.179':445
'64.#9.1.139':445
'64.##.165.71':445
'64.##.157.186':445
'64.#9.98.24':445
'64.##.54.217':445
'64.##.71.204':445
'64.##.72.220':445
'64.##.90.160':445
'64.##.81.201':139
'64.##.239.35':139
'64.##.68.227':139
'64.#9.59.69':139
'64.##.233.118':139
'64.##.163.205':139
'64.##.145.159':139
'64.##.209.24':139
'64.##.198.198':139
'64.##.11.211':139
'64.##.241.113':139
'64.##.12.199':139
'64.##.34.128':139
'64.##.173.175':139
'64.##.95.123':139
'64.##.232.14':139
'64.##.193.125':139
'64.##.14.217':139
'64.#9.104.6':139
'64.##.64.102':139
'64.##.74.112':139
'64.##.211.74':139
'64.##.248.91':139
'64.#9.63.91':139
'64.##.101.224':139
'64.##.112.102':139
'64.#9.98.24':139
'64.##.135.18':445
'64.#9.54.74':445
'64.#9.53.27':445
'64.##.163.253':445
'64.##.46.233':445
'64.##.186.212':445
'64.##.211.10':445
'64.##.228.240':445
'64.##.178.84':445
'64.##.140.120':445
'64.##.118.173':445
'64.##.209.67':445
'64.##.62.197':445
'64.##.29.189':445
'64.##.189.109':445
'64.##.109.81':445
'64.##.248.184':139
'64.#9.89.2':139
'64.##.60.154':139
'64.##.172.30':445
'64.##.53.160':445
'64.##.171.215':445
'64.##.114.153':445
'64.##.216.87':445
'64.##.12.176':445
'64.##.107.177':445
'64.##.139.179':139
'64.#9.1.139':139
'64.##.227.46':139
'64.##.248.184':445
'64.#9.89.2':445
'64.#9.81.93':445
'64.#9.7.209':139
'64.##.72.220':139
'64.##.90.160':139
'64.##.157.186':139
'64.##.189.179':139
'64.##.165.71':139
'64.##.71.204':139
'64.#9.6.252':445
'64.##.37.140':445
'64.##.236.244':445
'64.#9.9.59':445
'64.#9.11.52':445
'64.#9.252.8':445
'64.##.64.160':445
'64.##.60.154':445
'64.##.10.231':445
'64.#9.36.65':445
'64.##.64.223':445
'64.##.226.237':445
'64.##.132.36':445
'64.##.71.239':139
'64.##.199.20':445
'64.#9.74.0':445
'64.##.100.23':445
'64.#9.95.31':445
'64.##.45.166':445
'64.##.80.245':445
'64.##.216.222':445
'64.##.196.243':445
'64.##.28.105':445
'64.##.200.160':445
'64.##.68.185':445
'64.##.148.149':445
'64.##.76.171':445
'64.##.32.115':445
'64.##.60.113':445
'64.##.97.198':445
'64.#9.202.8':445
'64.#9.68.35':445
'64.##.114.183':445
'64.##.100.97':445
'64.##.37.253':445
'64.##.162.37':445
'64.##.31.162':445
'64.##.13.100':445
'64.##.67.236':445
'64.#9.29.85':445
'64.##.107.223':445
'64.##.206.223':445
'64.##.84.215':445
'64.#9.38.19':445
'64.#9.18.7':445
'64.##.142.219':445
'64.##.150.153':445
'64.##.97.198':9988
'64.##.60.113':9988
'64.##.100.97':9988
'64.##.158.150':445
'64.##.141.158':445
'64.##.217.125':445
'64.##.167.153':445
'64.##.255.45':445
'64.##.140.146':445
'64.#9.35.3':445
'64.##.57.193':445
'64.##.22.117':445
'64.##.204.64':445
'64.##.202.67':445
'64.#9.9.62':445
'64.#9.0.177':445
'64.##.131.200':445
'64.##.31.127':445
'64.##.252.186':445
'64.#9.164.6':445
'64.##.45.166':139
'64.##.80.245':139
'64.##.199.20':139
'64.##.162.37':139
'64.##.31.162':139
'64.#9.95.31':139
'64.#9.74.0':139
'64.##.148.149':139
'64.##.76.171':139
'64.##.196.243':139
'64.##.100.23':139
'64.##.216.222':139
'64.##.68.185':139
'64.#9.202.8':139
'64.##.114.183':139
'64.##.32.115':139
'64.##.38.189':139
'64.#9.164.6':139
'64.#9.68.35':139
'64.##.60.113':139
'64.##.67.236':139
'64.#9.29.85':139
'64.##.37.253':139
'64.##.97.198':139
'64.##.100.97':139
'64.##.13.100':139
'64.#9.18.7':139
'64.##.142.219':139
'64.##.107.223':139
'64.#9.9.62':139
'64.#9.0.177':139
'64.#9.38.19':139
'64.##.206.223':139
'64.##.141.158':139
'64.##.217.125':139
'64.##.38.189':445
'64.##.84.215':139
'64.##.150.153':139
'64.##.158.150':139
'64.##.57.193':139
'64.##.22.117':139
'64.##.167.153':139
'64.##.28.105':139
'64.#9.35.3':139
'64.##.200.160':139
'64.##.255.45':139
'64.##.31.127':139
'64.##.252.186':139
'64.##.202.67':139
'64.##.140.146':139
'64.##.204.64':139
'64.##.131.200':139
'64.#9.29.85':9988
'64.##.156.114':445
'64.##.45.172':445
'64.##.137.236':445
'64.##.81.156':445
'64.##.215.208':445
'64.#9.1.9':445
'64.##.109.38':445
'64.##.92.153':139
'64.##.222.220':139
'64.#9.8.181':139
'64.#9.66.65':445
'64.##.117.190':139
'64.##.41.192':139
'64.#9.1.9':139
'64.##.156.114':139
'64.##.45.172':139
'64.##.155.205':139
'64.##.81.156':139
'64.##.215.208':139
'64.##.137.236':139
'64.##.83.107':445
'64.#9.58.19':445
'64.##.155.205':445
'64.##.109.38':139
'64.#9.66.65':139
'64.##.167.238':445
'64.##.238.95':139
'64.#9.5.58':139
'64.##.202.250':139
'64.#9.60.30':139
'64.##.107.40':139
'64.##.235.54':139
'64.##.58.112':139
'64.##.10.149':139
'64.#9.99.78':139
'64.##.214.29':139
'64.##.124.108':139
'64.##.60.181':139
'64.##.14.180':139
'64.#9.36.76':139
'64.##.180.187':139
'64.##.203.180':139
'64.##.215.24':139
'64.##.72.119':139
'64.##.193.63':139
'64.##.121.41':139
'64.##.252.191':139
'64.##.70.253':139
'64.##.152.25':139
'64.#9.80.58':139
'64.##.138.24':139
'64.##.52.224':139
'64.#9.58.19':139
'64.##.170.222':139
'64.##.52.210':139
'64.##.151.52':139
'64.##.108.134':139
'64.#9.94.62':139
'64.##.216.246':139
'64.##.236.151':139
'64.##.53.123':139
'64.##.200.183':139
'64.#9.8.201':139
'64.##.14.100':139
'64.##.12.191':139
'64.##.149.12':139
'64.##.22.117':9988
'64.##.167.153':9988
'64.##.204.64':9988
'64.##.31.162':9988
'64.##.199.20':9988
'64.##.57.193':9988
'64.##.131.200':9988
'64.##.142.219':9988
'64.##.217.125':9988
'64.##.93.222':139
'64.##.31.127':9988
'64.##.202.67':9988
'64.#9.0.177':9988
'64.##.53.123':445
'64.#9.8.201':445
'64.##.200.183':445
'64.##.14.100':445
'64.##.12.191':445
'64.##.149.12':445
'64.#9.47.88':445
'64.##.170.23':445
'64.##.167.238':139
'64.##.83.107':139
'64.##.127.165':445
'64.##.17.120':445
'64.#9.27.60':445
'64.#9.27.60':139
'64.##.170.23':139
'64.##.93.222':445
'64.#9.47.88':139
'64.##.127.165':139
'64.##.17.120':139
'64.##.108.134':445
'64.##.52.210':445
'64.##.236.151':445
'64.##.151.52':445
'64.#9.94.62':445
'64.##.216.246':445
'64.##.170.222':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней