Trojan.Starman.5214

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'67.##.25.170':139
'67.##.225.81':139
'67.##.54.107':139
'67.##.126.97':139
'67.#7.207.1':139
'67.#7.98.98':139
'67.##.149.196':139
'67.#7.62.24':139
'67.##.171.183':139
'67.##.188.171':139
'67.##.166.112':139
'67.##.16.174':139
'67.#7.58.16':139
'67.##.174.222':139
'67.##.12.140':139
'67.##.157.73':139
'67.##.131.69':139
'67.##.225.150':139
'67.##.159.122':139
'67.##.44.150':139
'67.##.227.148':139
'67.##.227.148':445
'67.##.159.122':445
'67.##.44.150':445
'67.##.16.174':445
'67.#7.58.16':445
'67.##.126.97':445
'67.#7.207.1':445
'67.##.166.112':445
'67.##.131.69':445
'67.##.225.150':445
'67.##.174.222':445
'67.#7.43.75':139
'67.##.15.113':445
'67.##.111.180':139
'67.##.194.13':139
'67.#7.1.217':139
'67.##.12.140':445
'67.##.157.73':445
'67.##.197.42':445
'67.#7.84.15':445
'67.#7.82.49':445
'67.##.197.42':139
'67.##.113.150':139
'67.##.13.227':139
'67.##.149.184':139
'67.#7.86.30':139
'67.#7.34.3':139
'67.##.173.53':445
'67.##.50.207':445
'67.##.53.113':445
'67.#7.87.0':139
'67.#7.113.9':445
'67.##.127.131':139
'67.##.136.84':139
'67.##.161.34':139
'67.#7.3.207':139
'67.#7.28.79':139
'67.#7.4.45':139
'67.##.91.199':139
'67.##.163.145':139
'67.##.171.152':139
'67.#7.135.8':139
'67.#7.44.19':139
'67.##.149.184':445
'67.##.113.150':445
'67.#7.34.3':445
'67.##.127.131':445
'67.#7.86.30':445
'67.#7.84.15':139
'67.#7.82.49':139
'67.##.15.113':139
'67.##.13.227':445
'67.#7.87.0':445
'67.##.163.145':445
'67.#7.3.207':445
'67.##.136.84':445
'67.#7.4.45':445
'67.##.74.186':445
'67.#7.28.79':445
'67.##.171.152':445
'67.##.91.199':445
'67.#7.44.19':445
'67.##.161.34':445
'67.#7.135.8':445
'67.##.223.26':139
'67.#7.83.59':139
'67.##.59.205':139
'67.##.36.235':445
'67.#7.95.71':445
'67.##.212.42':139
'67.##.195.134':139
'67.##.21.195':139
'67.#7.34.2':139
'67.##.195.171':139
'67.##.171.22':445
'67.#7.62.67':445
'67.##.95.194':445
'67.#7.4.217':445
'67.##.216.214':445
'67.##.200.130':445
'67.##.124.207':445
'67.##.225.124':445
'67.##.206.175':445
'67.#7.15.54':445
'67.##.41.238':445
'67.##.223.84':139
'67.##.95.223':139
'67.##.84.196':139
'67.#7.3.136':139
'67.##.27.189':139
'67.##.47.174':139
'67.#7.13.65':139
'67.##.77.185':139
'67.#7.13.50':139
'67.#7.163.0':139
'67.##.229.201':139
'67.##.125.28':139
'67.##.237.23':139
'67.##.213.173':139
'67.##.51.133':139
'67.##.173.254':139
'67.##.199.146':139
'67.##.206.37':139
'67.##.191.224':139
'67.##.182.237':139
'67.##.41.215':139
'67.#7.64.94':445
'67.##.255.226':139
'67.##.228.194':139
'67.##.136.173':139
'67.#7.43.75':445
'67.##.74.213':139
'67.#7.94.72':139
'67.#7.64.94':139
'67.##.85.235':139
'67.#7.91.52':139
'67.#7.89.15':139
'67.##.111.180':445
'67.##.171.183':445
'67.##.188.171':445
'67.##.225.81':445
'67.##.54.107':445
'67.##.25.170':445
'67.##.194.13':445
'67.#7.1.217':445
'67.##.149.196':445
'67.#7.62.24':445
'67.#7.98.98':445
'67.##.136.173':445
'67.##.255.226':445
'67.##.74.213':445
'67.##.36.235':139
'67.#7.95.71':139
'67.##.85.235':445
'67.#7.94.72':445
'67.#7.89.15':445
'67.##.228.194':445
'67.#7.91.52':445
'67.##.171.22':139
'67.#7.62.67':139
'67.##.95.194':139
'67.#7.4.217':139
'67.##.216.214':139
'67.##.200.130':139
'67.##.124.207':139
'67.##.225.124':139
'67.##.206.175':139
'67.#7.15.54':139
'67.##.41.238':139
'67.##.12.129':445
'67.##.111.12':445
'67.##.129.190':445
'67.##.70.248':445
'67.##.32.143':445
'67.#7.226.5':445
'67.##.66.149':445
'67.##.164.52':445
'67.##.66.119':445
'67.##.52.144':445
'67.##.200.32':445
'67.##.246.79':139
'67.#7.20.44':139
'67.#7.98.0':139
'67.##.183.17':139
'67.##.128.226':139
'67.##.189.91':445
'67.#7.32.85':445
'67.##.108.238':139
'67.##.194.24':139
'67.##.238.193':139
'67.#7.36.51':445
'67.##.172.74':445
'67.##.225.31':445
'67.##.135.194':445
'67.##.219.114':445
'67.#7.0.66':445
'67.##.177.58':445
'67.##.123.13':445
'67.##.72.217':445
'67.##.124.102':445
'67.##.31.182':445
'67.##.85.120':445
'67.##.238.96':445
'67.##.139.151':445
'67.##.221.141':445
'67.##.153.123':445
'67.#7.62.72':445
'67.##.216.137':445
'67.##.135.197':445
'67.##.109.234':445
'67.##.177.92':445
'67.##.129.178':139
'67.##.153.123':139
'67.##.139.151':139
'67.##.221.141':139
'67.#7.226.5':139
'67.##.66.149':139
'67.##.177.92':139
'67.##.135.197':139
'67.##.109.234':139
'67.##.85.120':139
'67.##.238.96':139
'67.##.164.52':139
'67.##.70.248':139
'67.##.32.143':139
'67.##.200.32':139
'67.##.189.91':139
'67.#7.32.85':139
'67.##.66.119':139
'67.##.52.144':139
'67.##.111.12':139
'67.##.129.190':139
'67.##.12.129':139
'67.##.233.188':139
'67.#7.77.31':139
'67.##.225.199':139
'67.#7.0.66':139
'67.##.177.58':139
'67.#7.8.18':139
'67.##.28.194':139
'67.#7.37.48':139
'67.##.160.130':139
'67.#7.75.94':139
'67.##.123.13':139
'67.##.135.194':139
'67.##.219.114':139
'67.##.31.182':139
'67.#7.62.72':139
'67.##.216.137':139
'67.##.72.217':139
'67.##.124.102':139
'67.##.172.74':139
'67.##.225.31':139
'67.#7.36.51':139
'67.#7.36.12':445
'67.##.152.92':445
'67.#7.5.140':445
'67.##.108.178':139
'67.#7.4.109':445
'67.##.13.213':445
'67.#7.93.13':445
'67.##.122.48':445
'67.##.179.114':445
'67.##.218.90':445
'67.#7.16.76':139
'67.#7.46.6':139
'67.##.192.46':139
'67.##.119.215':139
'67.##.201.150':139
'67.##.11.163':139
'67.##.205.201':139
'67.##.196.205':139
'67.#7.43.5':139
'67.##.239.191':139
'67.##.140.217':139
'67.#7.16.76':445
'67.##.108.178':445
'67.##.196.205':445
'67.#7.43.5':445
'67.##.205.201':445
'67.##.50.207':139
'67.##.74.186':139
'67.##.173.53':139
'67.#7.113.9':139
'67.##.53.113':139
'67.##.140.217':445
'67.#7.29.22':445
'67.##.201.150':445
'67.#7.22.88':445
'67.##.234.92':445
'67.##.91.101':445
'67.##.192.46':445
'67.##.239.191':445
'67.#7.46.6':445
'67.##.11.163':445
'67.##.119.215':445
'67.#7.29.22':139
'67.##.194.24':445
'67.##.238.193':445
'67.#7.20.44':445
'67.#7.98.0':445
'67.##.246.79':445
'67.##.32.143':9988
'67.##.12.129':9988
'67.##.189.91':9988
'67.##.108.238':445
'67.##.70.248':9988
'67.##.128.226':445
'67.##.160.130':445
'67.#7.75.94':445
'67.#7.77.31':445
'67.##.225.199':445
'67.##.233.188':445
'67.##.129.178':445
'67.##.183.17':445
'67.##.28.194':445
'67.#7.37.48':445
'67.#7.8.18':445
'67.##.218.90':139
'67.##.122.48':139
'67.##.179.114':139
'67.#7.36.12':139
'67.##.152.92':139
'67.##.91.101':139
'67.#7.22.88':139
'67.##.234.92':139
'67.##.13.213':139
'67.#7.93.13':139
'67.#7.5.140':139
'67.##.109.234':9988
'67.##.135.197':9988
'67.##.238.96':9988
'67.##.164.52':9988
'67.#7.226.5':9988
'67.##.194.24':9988
'67.#7.4.109':139
'67.#7.0.66':9988
'67.#7.62.72':9988
'67.##.172.74':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней