Trojan.Starman.5323

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'84.#3.71.0':139
'84.##.241.73':139
'84.#3.3.144':139
'84.##.63.176':139
'84.##.160.204':139
'84.##.95.132':139
'84.##.86.204':139
'84.##.211.104':139
'84.##.17.241':139
'84.#3.57.17':139
'84.#3.20.5':139
'84.##.213.165':445
'84.#3.14.78':445
'84.##.81.227':445
'84.##.243.154':445
'84.##.105.71':445
'84.##.47.202':139
'84.##.88.211':139
'84.#3.9.207':445
'84.##.120.179':445
'84.##.144.174':445
'84.##.211.104':445
'84.##.95.132':445
'84.#3.57.17':445
'84.##.241.73':445
'84.##.17.241':445
'84.##.47.135':445
'84.##.102.232':445
'84.##.61.143':445
'84.##.86.204':445
'84.##.142.191':445
'84.#3.71.0':445
'84.##.102.232':139
'84.##.47.202':445
'84.##.47.135':139
'84.##.142.191':139
'84.##.61.143':139
'84.##.160.204':445
'84.#3.3.144':445
'84.##.63.176':445
'84.##.88.211':445
'84.#3.20.5':445
'84.##.47.166':445
'84.##.120.179':139
'84.##.144.174':139
'84.#3.14.78':139
'84.##.81.227':139
'84.##.213.165':139
'84.##.115.180':445
'84.#3.85.68':445
'84.##.110.173':445
'84.#3.9.207':139
'84.##.165.65':445
'84.##.105.71':139
'84.#3.52.98':139
'84.##.44.127':139
'84.##.69.213':139
'84.#3.5.93':139
'84.##.210.83':139
'84.##.47.166':139
'84.##.243.154':139
'84.##.165.225':139
'84.#3.57.44':139
'84.#3.41.39':139
'84.##.210.83':445
'84.##.69.213':445
'84.#3.5.93':445
'84.##.143.53':445
'84.##.34.104':445
'84.#3.41.39':445
'84.##.165.225':445
'84.#3.57.44':445
'84.#3.52.98':445
'84.##.44.127':445
'84.##.92.179':445
'84.#3.15.91':445
'84.##.159.148':445
'84.#3.96.30':445
'84.##.117.14':445
'84.##.75.117':445
'84.##.208.223':445
'84.##.131.159':445
'84.##.149.235':445
'84.#3.38.45':445
'84.##.230.131':445
'84.##.75.194':445
'84.##.139.174':445
'84.##.125.49':445
'84.##.107.137':445
'84.#3.5.108':445
'84.##.173.92':445
'84.#3.6.126':445
'84.##.134.32':445
'84.##.175.235':445
'84.##.254.63':445
'84.##.130.222':445
'84.##.195.159':445
'84.##.54.218':445
'84.##.95.117':445
'84.##.58.220':445
'84.##.107.160':445
'84.##.179.86':445
'84.##.173.114':445
'84.##.22.196':445
'84.##.104.216':445
'84.##.235.52':445
'84.#3.6.128':139
'84.#3.45.48':139
'84.##.143.47':139
'84.##.185.166':139
'84.##.69.231':139
'84.##.28.202':139
'84.#3.9.28':139
'84.##.157.42':139
'84.##.95.164':139
'84.##.23.121':139
'84.##.140.223':139
'84.##.236.28':445
'84.##.95.128':139
'84.##.155.58':445
'84.#3.49.58':445
'84.##.58.201':445
'84.##.253.38':139
'84.#3.161.0':139
'84.##.64.217':139
'84.##.205.138':139
'84.##.217.71':139
'84.##.219.249':445
'84.##.104.216':139
'84.##.235.52':139
'84.##.54.218':139
'84.##.95.117':139
'84.##.195.159':139
'84.##.130.222':139
'84.##.107.137':139
'84.##.173.114':139
'84.##.22.196':139
'84.##.179.86':139
'84.##.107.160':139
'84.##.124.167':139
'84.##.18.124':139
'84.##.230.15':139
'84.##.239.201':139
'84.##.208.238':139
'84.##.219.249':139
'84.##.58.220':139
'84.#3.45.92':139
'84.#3.78.97':139
'84.##.79.230':139
'84.##.208.238':445
'84.##.230.15':445
'84.##.239.201':445
'84.##.155.58':139
'84.##.236.28':139
'84.##.79.230':445
'84.#3.45.92':445
'84.#3.78.97':445
'84.##.124.167':445
'84.##.18.124':445
'84.##.58.201':139
'84.##.139.174':139
'84.##.175.235':139
'84.##.75.194':139
'84.#3.5.108':139
'84.##.125.49':139
'84.#3.6.126':139
'84.#3.49.58':139
'84.##.173.92':139
'84.##.254.63':139
'84.##.134.32':139
'84.##.123.25':445
'84.##.128.159':445
'84.#3.57.78':445
'84.##.122.138':445
'84.##.107.188':445
'84.#3.80.21':445
'84.##.124.201':445
'84.##.146.109':445
'84.##.108.86':445
'84.##.109.108':445
'84.#3.22.78':445
'84.##.49.198':139
'84.##.48.237':139
'84.##.80.250':139
'84.#3.71.21':139
'84.##.149.126':139
'84.##.11.176':445
'84.##.183.135':445
'84.#3.210.6':139
'84.#3.99.2':139
'84.#3.78.55':139
'84.##.130.184':445
'84.##.206.78':445
'84.##.215.118':445
'84.##.66.114':445
'84.##.78.251':445
'84.##.108.93':445
'84.##.92.108':445
'84.#3.30.92':445
'84.##.129.124':445
'84.##.197.55':445
'84.#3.9.169':445
'84.##.125.133':445
'84.##.10.176':445
'84.#3.86.51':445
'84.##.55.124':445
'84.##.112.122':445
'84.##.112.202':445
'84.##.169.112':445
'84.#3.34.2':445
'84.##.124.171':445
'84.#3.17.14':445
'84.##.23.251':139
'84.##.112.122':139
'84.#3.86.51':139
'84.##.55.124':139
'84.#3.80.21':139
'84.##.124.201':139
'84.#3.17.14':139
'84.#3.34.2':139
'84.##.124.171':139
'84.##.125.133':139
'84.##.10.176':139
'84.##.146.109':139
'84.##.183.135':139
'84.#3.57.78':139
'84.##.107.188':139
'84.##.123.25':139
'84.##.122.138':139
'84.##.108.86':139
'84.##.109.108':139
'84.##.128.159':139
'84.##.11.176':139
'84.#3.22.78':139
'84.#3.64.84':139
'84.#3.21.26':139
'84.#3.81.92':139
'84.##.108.93':139
'84.##.92.108':139
'84.##.103.95':139
'84.##.200.119':139
'84.#3.38.27':139
'84.##.41.250':139
'84.##.30.167':139
'84.#3.30.92':139
'84.##.66.114':139
'84.##.78.251':139
'84.#3.9.169':139
'84.##.112.202':139
'84.##.169.112':139
'84.##.129.124':139
'84.##.197.55':139
'84.##.206.78':139
'84.##.215.118':139
'84.##.130.184':139
'84.##.226.98':445
'84.##.112.161':445
'84.#3.57.5':445
'84.##.21.248':445
'84.##.249.59':445
'84.##.42.125':445
'84.##.164.40':445
'84.##.49.197':445
'84.##.191.128':445
'84.##.234.27':445
'84.##.54.202':445
'84.##.164.40':139
'84.#3.23.28':139
'84.##.42.125':139
'84.##.234.27':139
'84.##.49.197':139
'84.#3.36.49':445
'84.#3.13.39':445
'84.##.159.253':139
'84.##.126.252':139
'84.##.111.21':139
'84.##.230.131':139
'84.##.149.235':139
'84.#3.38.45':139
'84.#3.15.91':139
'84.##.159.148':139
'84.##.143.53':139
'84.##.34.104':139
'84.##.92.179':139
'84.##.208.223':139
'84.##.131.159':139
'84.#3.96.30':139
'84.##.159.253':445
'84.##.165.65':139
'84.##.111.21':445
'84.#3.23.28':445
'84.##.126.252':445
'84.##.117.14':139
'84.##.75.117':139
'84.#3.85.68':139
'84.##.110.173':139
'84.##.115.180':139
'84.##.191.128':139
'84.#3.99.2':445
'84.#3.78.55':445
'84.##.48.237':445
'84.##.80.250':445
'84.##.49.198':445
'84.##.124.201':9988
'84.##.55.124':9988
'84.##.183.135':9988
'84.#3.210.6':445
'84.##.122.138':9988
'84.##.149.126':445
'84.##.41.250':445
'84.##.30.167':445
'84.#3.21.26':445
'84.#3.81.92':445
'84.#3.64.84':445
'84.##.23.251':445
'84.#3.71.21':445
'84.##.200.119':445
'84.#3.38.27':445
'84.##.103.95':445
'84.#3.13.39':139
'84.##.54.202':139
'84.#3.36.49':139
'84.##.92.108':9988
'84.#3.81.92':9988
'84.##.226.98':139
'84.##.112.161':139
'84.#3.57.5':139
'84.##.21.248':139
'84.##.249.59':139
'84.##.108.93':9988
'84.#3.34.2':9988
'84.##.169.112':9988
'84.##.10.176':9988
'84.##.112.122':9988
'84.##.125.133':9988
'84.##.130.184':9988
'84.##.197.55':9988
'84.##.78.251':9988
'84.#3.9.169':9988
'84.##.66.114':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней